Function at 0x18005d800
Capabilities:
Enumerate processes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x950]
sub rsp, 0xa50
mov rax, qword [0x1800ef080]
xor rax, rsp
mov qword [rbp + 0x940], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x6d0], xmm0
mov qword [rbp + 0x6e0], rax
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x60], xmm1
lea r8d, [rax + 7]
lea rdx, str.Fiddler
lea rcx, [rsp + 0x50]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x80], xmm1
mov r8d, 9
lea rdx, str.Wireshark
lea rcx, [rsp + 0x70]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x60], xmm1
mov r8d, 7
lea rdx, str.dumpcap
lea rcx, [rbp - 0x70]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x40], xmm1
mov r8d, 5
lea rdx, str.dnSpy
lea rcx, [rbp - 0x50]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
mov r8d, 9
lea rdx, str.dnSpy_x86
lea rcx, [rbp - 0x30]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.cheatengine_x86_64
lea rcx, [rbp - 0x10]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x20], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.HTTPDebuggerUI
lea rcx, [rbp + 0x10]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x40], xmm1
mov r8d, 7
lea rdx, str.Procmon
lea rcx, [rbp + 0x30]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x60], xmm1
mov r8d, 9
lea rdx, str.Procmon64
lea rcx, [rbp + 0x50]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x80], xmm1
mov r8d, 0xa
lea rdx, str.Procmon64a
lea rcx, [rbp + 0x70]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.ProcessHacker
lea rcx, [rbp + 0x90]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc0], xmm1
mov r8d, 6
lea rdx, str.x32dbg
lea rcx, [rbp + 0xb0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xe0], xmm1
mov r8d, 6
lea rdx, str.x64dbg
lea rcx, [rbp + 0xd0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x100], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.DotNetDataCollector32
lea rcx, [rbp + 0xf0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x120], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.DotNetDataCollector64
lea rcx, [rbp + 0x110]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x140], xmm1
mov r8d, 0xa
lea rdx, str.Everything
lea rcx, [rbp + 0x130]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x160], xmm1
mov r8d, listen
lea rdx, str.Filergabber
lea rcx, [rbp + 0x150]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x180], xmm1
mov r8d, 8
lea rdx, str.FileGrab
lea rcx, [rbp + 0x170]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1a0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Brocesshacker
lea rcx, [rbp + 0x190]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1c0], xmm1
mov r8d, 5
lea rdx, str.nigga
lea rcx, [rbp + 0x1b0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
mov r8d, 5
lea rdx, str.white
lea rcx, [rbp + 0x1d0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x200], xmm1
mov r8d, 6
lea rdx, str.m46asp
lea rcx, [rbp + 0x1f0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x220], xmm1
mov r8d, 2
lea rdx, [0x1800da798]
lea rcx, [rbp + 0x210]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x240], xmm1
mov r8d, listen
lea rdx, str.CFF_Explorer
lea rcx, [rbp + 0x230]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
mov r8d, 7
lea rdx, str.ollydbg
lea rcx, [rbp + 0x250]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
mov r8d, 3
lea rdx, [0x1800da7d0]
lea rcx, [rbp + 0x270]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2a0], xmm1
mov r8d, 5
lea rdx, str.ida64
lea rcx, [rbp + 0x290]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2c0], xmm1
mov r8d, 4
lea rdx, str.idag
lea rcx, [rbp + 0x2b0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2e0], xmm1
mov r8d, 6
lea rdx, str.idag64
lea rcx, [rbp + 0x2d0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x300], xmm1
mov r8d, 4
lea rdx, str.idaw
lea rcx, [rbp + 0x2f0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x320], xmm1
mov r8d, 6
lea rdx, str.idaw64
lea rcx, [rbp + 0x310]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x340], xmm1
mov r8d, 4
lea rdx, str.idaq
lea rcx, [rbp + 0x330]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x360], xmm1
mov r8d, 6
lea rdx, str.idaq64
lea rcx, [rbp + 0x350]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x380], xmm1
mov r8d, 4
lea rdx, str.idau
lea rcx, [rbp + 0x370]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3a0], xmm1
mov r8d, 6
lea rdx, str.idau64
lea rcx, [rbp + 0x390]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3c0], xmm1
mov r8d, 6
lea rdx, str.scylla
lea rcx, [rbp + 0x3b0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3e0], xmm1
mov r8d, 0xa
lea rdx, str.scylla_x64
lea rcx, [rbp + 0x3d0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x400], xmm1
mov r8d, 0xa
lea rdx, str.scylla_x86
lea rcx, [rbp + 0x3f0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x410], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x420], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.protection_id
lea rcx, [rbp + 0x410]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x440], xmm1
mov r8d, 6
lea rdx, str.x64dbg
lea rcx, [rbp + 0x430]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x450], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x460], xmm1
mov r8d, 6
lea rdx, str.x32dbg
lea rcx, [rbp + 0x450]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x470], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x480], xmm1
mov r8d, 6
lea rdx, str.windbg
lea rcx, [rbp + 0x470]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4a0], xmm1
mov r8d, 9
lea rdx, str.reshacker
lea rcx, [rbp + 0x490]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4c0], xmm1
mov r8d, 9
lea rdx, str.ImportREC
lea rcx, [rbp + 0x4b0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4e0], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.IMMUNITYDEBUGGER
lea rcx, [rbp + 0x4d0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x500], xmm1
mov r8d, 0xa
lea rdx, str.MegaDumper
lea rcx, [rbp + 0x4f0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x520], xmm1
mov r8d, 9
lea rdx, str.dotPeek32
lea rcx, [rbp + 0x510]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x530], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x540], xmm1
mov r8d, 9
lea rdx, str.dotPeek64
lea rcx, [rbp + 0x530]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x550], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x560], xmm1
mov r8d, 5
lea rdx, str.dnSpy
lea rcx, [rbp + 0x550]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x570], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x580], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.dnSpy.Console
lea rcx, [rbp + 0x570]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x590], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5a0], xmm1
mov r8d, 5
lea rdx, str.ILSpy
lea rcx, [rbp + 0x590]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5c0], xmm1
mov r8d, 7
lea rdx, str.AnyDesk
lea rcx, [rbp + 0x5b0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5e0], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.AnyDesk__32_bit_
lea rcx, [rbp + 0x5d0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x600], xmm1
mov r8d, 7
lea rdx, str.Discord
lea rcx, [rbp + 0x5f0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x620], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Discord__32_bit_
lea rcx, [rbp + 0x610]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x630], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x640], xmm1
mov r8d, 6
lea rdx, str.Update
lea rcx, [rbp + 0x630]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x650], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x660], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Discord__32_bit_.exe
lea rcx, [rbp + 0x650]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x670], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x680], xmm1
mov r8d, 0xa
lea rdx, str.TeamViewer
lea rcx, [rbp + 0x670]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6a0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.TeamViewer__32_bit_
lea rcx, [rbp + 0x690]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6c0], xmm1
mov r8d, listen
lea rdx, str.Discord.exe
lea rcx, [rbp + 0x6b0]
call fcn.1800551a0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x6d0], xmm0
xor r15d, r15d
mov qword [rbp + 0x6e0], r15
mov ecx, 0x780
call fcn.1800c0844
mov rbx, rax
mov qword [rbp + 0x6d0], rax
mov qword [rbp + 0x6d8], rax
lea rcx, [rax + 0x780]
mov qword [rbp + 0x6e0], rcx
lea rax, [rbp + 0x6d0]
mov qword [rsp + 0x40], rax
lea rdi, [rsp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp + 0x6e8], xmm0
mov qword [rbp + 0x6e8], rbx
mov qword [rbp + 0x6f0], rbx
lea rax, [rbp + 0x6d0]
mov qword [rbp + 0x6f8], rax
nop dword [rax]
mov rdx, rdi
mov rcx, rbx
call fcn.180053290
add rbx, 0x20
mov qword [rbp + 0x6f0], rbx
add rdi, 0x20
lea rax, [rbp + 0x6d0]
cmp rdi, rax
jne 0x18005e370
mov rdx, rbx
mov rcx, rbx
call fcn.18005e620
mov qword [rbp + 0x6d8], rbx
lea r9, [fcn.18004b810]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 0x1c]
lea rcx, [rsp + 0x50]
call fcn.1800c00f0
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x18005e526
mov dword [rbp + 0x700], 0x238
lea rdx, [rbp + 0x700]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x18005e51c
nop dword [rax]
mov rbx, qword [rbp + 0x6d0]
mov rsi, qword [rbp + 0x6d8]
cmp rbx, rsi
je 0x18005e504
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x72c]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18005e440
lea rdx, [rbp + 0x72c]
lea rcx, [rsp + 0x20]
call fcn.1800551a0
mov rax, rbx
cmp qword [rbx + 0x18], 7
jbe 0x18005e469
mov rax, qword [rbx]
lea r8, [rsp + 0x20]
mov r10, qword [rsp + 0x38]
cmp r10, 7
seta r11b
mov r9, qword [rsp + 0x20]
cmova r8, r9
mov rdx, qword [rsp + 0x30]
cmp rdx, qword [rbx + 0x10]
jne 0x18005e4b9
test rdx, rdx
je 0x18005e4b4
sub r8, rax
nop word [rax + rax]
movzx ecx, word [rax + r8]
cmp cx, word [rax]
jne 0x18005e4b9
add rax, 2
sub rdx, 1
jne 0x18005e4a0
mov dil, 1
jmp 0x18005e4bc
xor dil, dil
test r11b, r11b
je 0x18005e4f2
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x18005e4ea
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005e560
mov rcx, r9
call fcn.1800c0530
test dil, dil
jne 0x18005e567
add rbx, 0x20
cmp rbx, rsi
jne 0x18005e420
lea rdx, [rbp + 0x700]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x18005e400
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x6d0]
call fcn.18005e5b0
xor eax, eax
mov rcx, qword [rbp + 0x940]
xor rcx, rsp
call fcn.1800bffb0
lea r11, [rsp + 0xa50]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Aten
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.180054600
lea rdx, [0x1800547e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3