Function at 0x140001000
Capabilities:
Clear windows event logs
Execute command
Self delete
Set registry value

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Getting_admin_perms.
call fcn.140003910
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Getting_admin_perms..
call fcn.140003910
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Getting_admin_perms...
call fcn.140003910
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Successfully_got_admin_perms_
call fcn.140003910
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.title_Ciaey.CC_Cleaner
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO_________________________________________________________________________________________________________________________
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO________________________________________________discord.gg_ciaey
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO._______________________________________________ERRORS_ARE_NORMAL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO_________________________________________________________________________________________________________________________
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO___________________________________Ready..._Press_any_key_to_Clean_your_System
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO_________________________________________________________________________________________________________________________
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.pause_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Cleaning_Process...
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Getting_Process_pids...
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140005528]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_dwm.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_smartscreen.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_uishell.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_BackgroundDownloader.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Client.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_acsvc.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_ggsvc.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_gameguard.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_osf.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_osf32.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_osf64.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_ProcessHacker.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_ProcessMonitor.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Killed_some_processes.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_dwm.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Clearing_Some_Cheat_Logs.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaminglolfucktigerxdd_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaminglolfucktigerxdd_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaminghpp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaminghpp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingAlterNative_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingAlterNative_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingAlterNative_Hack_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingAlterNative_Hack_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingAlterNativeHack_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingAlterNativeHack_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingecvdexternal_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingecvdexternal_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingochook_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingochook_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingocware_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingocware_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingoxware_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingoxware_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaming0xd3f_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaming0xd3f_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingecvexternal_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingecvexternal_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingexternalfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingexternalfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaming_skeulfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaming_skeulfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaming_skeulfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaming_skeulfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaming_skeulcheats_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaming_skeulcheats_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingINTERIUM_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoamingINTERIUM_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaminghpp_hack_reload_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaminghpp_hack_reload_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaminghpp_hack_reloaded_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaminghpp_hack_reloaded_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaminghppfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaminghppfix_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaminghppfix_alternative_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___userprofile_AppDataRoaminghppfix_alternative_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ebx, 0xa
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.taskkill__IM_osf64.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_osf32.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_osf.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_processhacker.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_processexplorer.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_processhacker64.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_idapro.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_ida64.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_dnspy.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_ud.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_usbdeview.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_lastactivityviewer.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
sub rbx, 1
jne 0x140001551
lea rcx, [0x1400052c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Cleaning_Files......_please_be_patient_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.timeout__t_02__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoaming_test.zip_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q____username__AppDataLocalLowDNF.trc_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q____username__AppDataLocalLowDNF.zip_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q___systemdrive_Users_username_AppDataLocalTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__a:h__a:a__q___systemdrive_Users_username_AppDataLocalTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q__systemdrive_Users_username_AppDataLocalTemp__md_t_systemdrive_Users_username_AppDataLocalTemp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q____username__AppDataLocalLowDNF.trc_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q____username__AppDataLocalLowDNF.zip_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q__windir__temp__md_t_windir__temp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._RD__S__Q___localappdata_Tempecache.bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._RD__S__Q___localappdata_MicrosoftFeeds_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__windir__hf_mig___Q__S
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__C:MSOCache___p
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__C:UsersPublicShared_Files_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RunDll32.exe_InetCpl.cpl_ClearMyTracksByProcess_8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.erase___LOCALAPPDATA_MicrosoftWindowsTempor1.___f__s__q
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32_sru._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSystem32_nvml.dll_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsLogsWindowsUpdate._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsWindowsUpdate.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionDataStore._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsServiceProfilesLocalServiceAppDataLocalFontCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_UserscaspueAppDataRoamingMicrosoftWindowsRecent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_UserscaspueAppDataLocalMicrosoftWindowsWebCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_UserscaspueAppDataLocalPackages._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_UserscaspueAppDataLocalSpeech_GraphicsCarnival._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataUSOPrivateUpdateStore._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataUSOSharedLogs._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalCEF_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalComms_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalConnectedDevicesPlatform_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalCrashDumps_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalCrashReportClient_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalD3DSCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalDBG_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalMicrosoftFeeds_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalVirtualStore_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__q__C:Users_Username_AppDataLocalVirtualStore__do_rmdir____p_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalSpeech_Graphics_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalPublishers_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalProgramsCommon_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RD__s__q__C:Users_Username_AppDataLocalPlaceholderTileLogoFolder_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:UsersPublicLibraries._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:UsersPublicLibraries_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalMicrosoftFeeds._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:Users_username_AppDataLocalMicrosoftFeeds_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:MSOCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Intel._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:Intel_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Recovery._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q__s__D:desktop.ini_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q__s__C:Users_username_AppDataLocalMicrosoftFeeds_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__a__q__s__C:Users_Username_AppDataLocalIconCache.db_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__a__q__s__C:Users_Username_AppDataLocalupdater.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__a__q__s__C:Users_Username_AppDataLocalIconCache.db_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del___localappdata_MicrosoftFeeds___s__f__q
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._RD__S__Q___C:MSOCache71230000_00E2_0000_1000_00000000_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q__userprofile_Recent.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q_C:WindowsPrefetch.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q_C:WindowsTemp.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q_C:WindowsPublicLibraries.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q__windir__temp.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q__windir_Prefetch.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q__windir_Prefetch
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.md__windir_Prefetch
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q__windir__system32dllcache.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q__windir__system32dllcache
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.md__windir__system32dllcache
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32wbemRepositoryOBJECTS.DATA._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32wbemRepositoryINDEX.BTR._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32wbemRepositoryMAPPING3.MAP._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__windir_KB.log__f__q
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.log
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.tmp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.chk
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.dlf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.old
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__windir_.bak
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__windir_prefetch.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive__recycled.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__windir_.bak
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___Temp__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q__windir__temp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.md__windir__temp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:_RECYCLE.BIN_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:PerfLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:Recovery_ntuser.sys_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:System_Volume_Information_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__yourUSBSystem_Volume_Information_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:UsersPublicLibrariescollection.dat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:UsersDefaultNTUSER.DAT_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:Usersyourname_ntuser.ini_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:UsersPublicShared_Files_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:UsersPublicLibraries_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:ProgramData_ntuser.pol_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:localappdataMicrosoftINetCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:_localappdata_Temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:_localappdata_ConnectedDevicesPlatform_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalUnrealEngine._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_MSOCache71230000_00E2_0000_1000_00000000Setup.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftFeeds._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalSpeech_GraphicsCarnival._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCacheContent.IE5._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCookies._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_MSOCache71230000_00E2_0000_1000_00000000Setup.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalMicrosoftFeeds._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalSpeech_GraphicsCarnival._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCacheContent.IE5._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCookies._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q___systemdrive_WindowsPublicLibraries._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q___systemdrive_WindowsPrefetch._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Intel._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_desktop.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataRoaming_vstelemetry._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___windir_prefetch._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__q___userprofile__recent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_Local_SettingsTemporary_Internet_Files._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_Local_SettingsTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile__recent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___Temp__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140008650]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_A:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_B:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_C:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_D:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_E:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_F:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_G:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_H:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_I:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_J:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_K:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_L:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_M:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_N:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_O:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_P:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_Q:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_R:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_S:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_T:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_U:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_V:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_W:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_X:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_Y:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_Z:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:_RECYCLE.BIN_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:PerfLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:UsersPublicShared_Files_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:UsersPublicLibraries_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:localappdataMicrosoftINetCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:_localappdata_Temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__x:_localappdata_ConnectedDevicesPlatform_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_MSOCache71230000_00E2_0000_1000_00000000Setup.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalMicrosoftFeeds._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Users_username_AppDataLocalSpeech_GraphicsCarnival._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCacheContent.IE5._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCookies._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__q___systemdrive_WindowsPrefetch._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Intel._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsThemesCachedFiles._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32config_systemprofileAppDataLocalMicrosoftWindowsWebCacheWebCacheV01.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32config_systemprofileAppDataLocalMicrosoftWindowsWebCacheWebCacheV01.jfm._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIE._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsPrefetch._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_VideosCapturesdesktop.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCacheWebCacheV01.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalNVIDIA_Corporation._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerCacheStorage._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalAMDDxCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Program_Files__x86_AMDCNextCCCSlim._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPlaceholderTileLogoFolder._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsThemesCachedFiles._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsServiceProfilesLocalServiceAppDataLocalFontCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsPrefetch._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32perfc009.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32perfh009.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsINF._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32PerfStringBackup.TMP._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32PerfStringBackup.INI._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username__ntuser.dat.LOG2._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewySettings_settings.dat.LOG1._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32wbemPerformanceWmiApRpl.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsTEMP._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSoftwareDistributionDataStore._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32WDILogFilesStartupInfo._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationLogs._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationState._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSysWOW64Gms.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32_spp_store2.0cache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataUSOSharedLogs._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.ZuneVideo_8wekyb3d8bbweLocalStateDatabase_anonymous._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWERERC._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSync_remotemetastore_v1edb.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastoreedb.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsLogsCBSCBS.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalCommsUnistoredata3._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalCommsUnistoredata_temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.MicrosoftEdge_8wekyb3d8bbweAppDataUserDefaultIndexed_DBedb.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastoremeta.edb._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations_b05132b02959bc64.automaticDestinations_ms._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Windows_appcompatProgramsAmcache.hve._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32LogFilesWMIRtBackupEtwRTGraphicsPerfMonitorSession.etl._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Windows_temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Windows_temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionDataStoreLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalUnrealEngine_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_UsersPublicLibrariescollection.dat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_MSOCache71230000_00E2_0000_1000_00000000Setup.dat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftFeeds_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalSpeech_GraphicsCarnival_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCacheContent.IE5_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCookies_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsPublicLibraries_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsPrefetch_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Intel_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_desktop.ini_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.MicrosoftEdge_8wekyb3d8bbweACMicrosoftEdgeUserDefaultRecoveryActive._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.MicrosoftEdge_8wekyb3d8bbweAC_002MicrosoftEdgeUserDefaultAppCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecentAutom._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Windows_rescache_merged._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username__ntuser.dat.LOG1._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username__ntuser.dat.LOG2._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftOneDrive_settingsPersonallogUploaderSettings_temp.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftOneDrive_settingsPersonallogUploaderSettings.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32_sru._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32config_systemprofileAppDataLocalMicrosoftWindowsWebCacheWebCacheV01.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32configBBI.LOG1._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32configBBI.LOG2._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32configDEFAULT.LOG2._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsLogsMoSetupUpdateAgent.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSoftwareDistributionPostRebootEventCache.V2323558A6_0300_4C3E_97A0_EDEDFEB96B00.bin._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyTempStateCortanaUnifiedTileModelCache.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyACINetCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed_DB._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32LogFilesWMIRtBackupEtwRTGraphicsPerfMonitorSession.etl._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalNVIDIA_CorporationGfeSDK._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSoftwareDistributionDataStoreLogs._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsLogs._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalCommsUnistoredata._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalCommsUnistoreDBUSS.jtx._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftFeeds.___nul_2_1._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.SkypeApp_kzf8qxf38zg5cLocalStateDiagOutputDir._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed_DB._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsServiceStateEventLogDatalastalive0.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsUsrClass.dat.LOG2._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsUsrClass.dat.LOG1._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCache._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSafetyedge_remote._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsWindowsUpdate.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSoftwareDistributionDataStoreDataStore.edb._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSoftwareDistributionDataStoreLogsedb.log._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSafetyedge_remote._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewySettings_settings.dat.LOG1._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Windows_temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___systemdrive_Windows_temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionDataStoreLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalPackagesmicrosoft.windowscommunicationsapps_8wekyb3d8bbweLocalState._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_WindowsSystem32configBBI.LOG2._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_Users_username_AppDataLocalMicrosoftOneDrivelogs._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecent_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Program_Files__x86_Common_FilesBattlEye_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_UserscaspueAppDataLocalMicrosoftOneDrive_settingsPersonallogUploaderSettings_temp.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_UserscaspueAppDataLocalMicrosoftOneDrive_settingsPersonal_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionPostRebootEventCache.V2_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsINF_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_desktop.ini._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistory_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsRecent_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramData_regid.1991_06.com.microsoft._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32LogFiles_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistory_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32LogFiles_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftOneDrivelogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionDataStoreLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsExplorer_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAC_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataRoamingMicrosoftWindowsThemesCachedFiles_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSync_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftWlansvcProfilesInterfaces_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftWindowsDeviceMetadataCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsServiceStateEventLog_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsAppReadiness_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__s__f__a:h__a:a__q___systemdrive_ProgramDataMicrosoftWindowsAppRepositoryStateRepository_Machine.srd_wal._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_ProgramDataMicrosoftWindowsClipSVC_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Program_FilesWindowsAppsDeleted_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyLocalState_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ShellExperienceHost_cw5n1h2txyewyTempState_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyTempState_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAC_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsPrefetch_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewySettings_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionPostRebootEventCache.V2_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionSLS_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSoftwareDistributionDataStoreLogs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_WindowsSystem32_spp_store2.0cache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewyAC_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalMicrosoftEdgeSharedCacheContainers_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___TMP_._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___TEMP_._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___WINDIR_Temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___USERPROFILE_Local_SettingsTemp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___LOCALAPPDATA_Temp._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___TMP__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___TEMP__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___WINDIR_Temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___USERPROFILE_Local_SettingsTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL__S__Q___LOCALAPPDATA_Temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s__systemdrive__Recycle.Bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__A:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_A:Recovery
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__A:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__A:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__A:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__A:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__A:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__B:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__B:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__B:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__B:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__B:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__B:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__C:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__C:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__C:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__D:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__D:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__D:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__D:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__D:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__D:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__E:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__E:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__E:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__E:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__E:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__E:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__F:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__F:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__F:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__F:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__F:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__F:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__G:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__G:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__G:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__G:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__G:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__G:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__H:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__H:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__H:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__H:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__H:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__H:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__I:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__I:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__I:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__I:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__I:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__I:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__J:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__J:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__J:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__J:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__J:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__J:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__K:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__K:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__K:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__K:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__K:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__K:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__L:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__L:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__L:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__L:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__L:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__L:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__M:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__M:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__M:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__M:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__M:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__M:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__N:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__N:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__N:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__N:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__N:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__N:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__O:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__O:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__O:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__O:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__O:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__O:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__P:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__P:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__P:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__P:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__P:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__P:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Q:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__Q:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Q:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Q:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__Q:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Q:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__R:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__R:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__R:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__R:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__R:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__R:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__S:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__S:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__S:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__S:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__S:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__S:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__T:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__T:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__T:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__T:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__T:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__T:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__U:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__U:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__U:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__U:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__U:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__U:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__V:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__V:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__V:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__V:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__V:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__V:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__W:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__W:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__W:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__W:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__W:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__W:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__X:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__X:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__X:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__X:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__X:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__X:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Y:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__Y:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Y:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Y:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__Y:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Y:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Z:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__Z:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Z:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Z:Recovery_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._del__s__f__a:h__a:a__q__Z:UsersPublicLibrariescollection.dat._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rmdir__s__q__Z:MSOCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s__systemdrive__Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_A:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_B:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_C:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_D:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_E:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_F:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_G:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_H:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_I:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_J:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_K:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_L:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_M:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_N:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_O:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_P:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_Q:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_R:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_S:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_T:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_U:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_V:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_W:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_X:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_Y:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__q__s_Z:_Recycle.Bin
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKCUSoftwareClassesInstallerDependencies___v_MSICache__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKCUSoftwareMicrosoftDirect3D___v_WHQLClass__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKLMHardwareDescriptionSystemCentralProcessor0___v_ProcessorNameString__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_21_2532382528_581214834_2534474248_1001SystemGameConfigStoreChildren03ce6902_ff58_41de_ab92_36fcaf27a580___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_21_2532382528_581214834_2534474248_1001SystemGameConfigStoreParents_fd13f746e7d2d69760b017363f621255c9b49ac8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwareMicrosoftSystemCertificatesTrustedPublisher___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwareMicrosoftSystemCertificatesTrustedPublisherCertificates___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwareMicrosoftSystemCertificatesTrustedPublisherCRLs___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwareMicrosoftSystemCertificatesTrustedPublisherCTLs___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwarePoliciesMicrosoftSystemCertificatesTrustedPublisher___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwarePoliciesMicrosoftSystemCertificatesTrustedPublisherCertificates___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwarePoliciesMicrosoftSystemCertificatesTrustedPublisherCRLs___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKUS_1_5_18SoftwarePoliciesMicrosoftSystemCertificatesTrustedPublisherCTLs___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesInstallerDependencies___v_MSICache__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftDirect3D___v_WHQLClass__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINEHardwareDescriptionSystemCentralProcessor0___v_ProcessorNameString__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalLowMicrosoftCryptnetUrlCacheContent._
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:ProgramDataMicrosoftSearchDataApplicationsWindowsGatherLogsSystemIndexSystemIndex.1.Crwl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000d920]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:ProgramDataMicrosoftSearchDataApplicationsWindowsGatherLogsSystemIndexSystemIndex.1.Crwl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:ProgramDataMicrosoftSearchDataApplicationsWindowsGatherLogsSystemIndexSystemIndex.1.Crwl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:ProgramDataMicrosoftSearchDataApplicationsWindowsGatherLogsSystemIndex.Crwl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataRoamingMicrosoftWindowsRecent_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsMEMORY.DMP_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsMiniDump.dmp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLiveKernelReports.dmp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsUSBXHCI.dmp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsWATCHDOG.dmp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalCrashDumps.dmp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Windows_system32wbemLogs.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Windows.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLogsMeasuredBoot.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLogsMoSetup.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsServiceProfilesNetworkServiceAppDataLocalTemp.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalMicrosoftWindowsWebCache.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsMicrosoft.NETFramework_v4.0.30319.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsMicrosoft.NETFramework64_v4.0.30319.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsPantherUnattendGC.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsPanther.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLogsWindowsUpdate.etl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLogswaasmediccapsule.etl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLogsSIH.etl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsLogsNetSetup.etl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsSoftwareDistributionDataStoreLogs.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalMicrosoftCLR_v4.0_32.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalMicrosoftCLR_v4.0.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsPerformanceWinSAT.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:ProgramDataUSOSharedLogsUser.etl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:ProgramDataMicrosoftWindowsWERReportArchive.wer_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___appdata_AppDataLocalElevatedDiagnostics25504353602023122122.000.xml_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___appdata_AppDataLocalElevatedDiagnostics25504353602023122122.000Registry_log.txt_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___appdata_AppDataLocalElevatedDiagnostics25504353602023122122.000.xsl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___appdata_AppDataLocalElevatedDiagnostics2550435360latest.cab_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Windowsinf.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache66c6bbc315462fcc0d4fa367464b18168c247421.phf_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationLogs.etl_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsSystem32_sruSRUDB.dat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsSystem32_sruSRUres00001.jrs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsSystem32_sruSRUres00002.jrs_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsSystem32sru.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsSystem32sru.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q___userprofile_AppDataLocalLowMicrosoftCryptnetUrlCacheContent07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Release_and_Renew_DHCP
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.:_Disable_Static_IP_Enable_DHCP__Remove_DNS___Enable_NICs
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__f__skip2_tokens3____i_in__netsh_interface_show_interface__do__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_int_ip_set_address____j__dhcp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_int_ip_set_dns____j__dhcp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_interface_set_interface_name___j__adminenabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000e630]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Clear_ARP_Route_table:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_interface_ip_delete_arpcache
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Clear_SSL_state:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.certutil__URLCache__delete
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._echo_off
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__F__tokens____G_in__wevtutil.exe_el__DO__call_:do_clear____G__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000e708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Event_Logs_have_been_cleared_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.goto_:theEnd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.:do_clear
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_clearing__1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.wevtutil.exe_cl__1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.goto_:eof
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.:theEnd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_________________System_cleaned_successfully_________
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.__ECHO.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.echo_Press_any_key_to_exit
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.TIMEOUT__T__1__NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000e884]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
add rsp, 0x20
pop rbx
ret