Function at 0x1400065c0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xor ebx, ebx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x40]
call fcn.140012da0
lea rcx, [rbp - 0x40]
call fcn.1400062a0
lea rax, [rbp - 0x40]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 0xa]
lea rdx, str.clean1.bat
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 6]
lea rdx, str.786988
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_clean1.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x20]
call fcn.140012da0
lea rcx, [rbp - 0x20]
call fcn.1400062a0
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xa]
lea rdx, str.clean2.bat
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.205915
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_clean2.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x20]
call fcn.140012da0
lea rcx, [rbp - 0x20]
call fcn.1400062a0
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xa]
lea rdx, str.clean3.bat
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.477436
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_clean3.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x20]
call fcn.140012da0
lea rcx, [rbp - 0x20]
call fcn.1400062a0
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xa]
lea rdx, str.clean4.bat
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.774922
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_clean4.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x20]
call fcn.140012da0
lea rcx, [rbp - 0x20]
call fcn.1400062a0
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x11]
lea rdx, str.Final_Cleaner.bat
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.410942
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_Final_Cleaner.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x20]
call fcn.140012da0
lea rcx, [rbp - 0x20]
call fcn.1400062a0
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xf]
lea rdx, str.JurnalClear.bat
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.390117
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_JurnalClear.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x20]
call fcn.140012da0
lea rcx, [rbp - 0x20]
call fcn.1400062a0
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xe]
lea rdx, str.TRACECLEAR.bat
lea rcx, [rbp - 0x20]
call fcn.140012da0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.218681
lea rcx, [rbp - 0x40]
call fcn.140012da0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140006010
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_TRACECLEAR.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
mov rbx, qword [rsp + 0x80]
add rsp, 0x60
pop rbp
jmp qword [sym.imp.USER32.dll_ShowWindow]