Function at 0x140014d20
Capabilities:
Check for debugger via api
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x320
mov rax, qword [0x140064010]
xor rax, rsp
mov qword [rsp + 0x310], rax
xor ebx, ebx
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14001689f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x14001689f
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x140014db6
lea r9d, [rbx + 0x10]
lea r8, [0x140051ae0]
lea rdx, [0x140051b00]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x1400167e4
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14001689f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x14001689f
lea rdi, [0x140067cd8]
mov rcx, rdi
cmp qword [0x140067cf0], 8
cmovae rcx, qword [0x140067cd8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], rbx
mov r8d, 3
lea rdx, [0x140052090]
lea rcx, [rsp + 0x170]
call fcn.14000bb30
nop
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0xa8], rax
mov rcx, qword [0x140067d60]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 0x17
jb 0x1400168ab
lea r9, [0x140067d50]
cmp qword [0x140067d68], 8
cmovae r9, qword [0x140067d50]
mov qword [rsp + 0x30], 0x17
lea rax, str._getActualClientVersion
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1d0]
call fcn.14000cc20
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x80]
call fcn.14000a130
mov rbx, rax
lea rdx, [0x140067d18]
lea rcx, [rsp + 0x190]
call fcn.14000a130
nop
lea r9, [rsp + 0x1d0]
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140029970
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 8
jb 0x140014f3e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014f39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014f39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048f98
lea rdx, [rsp + 0x58]
mov rsi, qword [rsp + 0x70]
cmp rsi, 0x10
setae r15b
mov rbx, qword [rsp + 0x58]
cmovae rdx, rbx
lea rcx, [0x140067cf8]
cmp qword [0x140067d10], 0x10
cmovae rcx, qword [0x140067cf8]
mov r8, qword [0x140067d08]
cmp r8, qword [rsp + 0x68]
jne 0x140014f8c
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140014f8c
xor r14b, r14b
jmp 0x140014f8f
mov r14b, 1
test r15b, r15b
je 0x140014fc8
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140014fc0
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014fc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140048f98
test r14b, r14b
je 0x140014ff0
mov r9d, 0x10
lea r8, [0x140051ae0]
lea rdx, [0x140051b60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x1400167e4
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14001689f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x14001689f
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b0], xmm0
xor r14d, r14d
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x1b0], r14b
movdqa xmm1, xmmword [0x140054dc0]
movdqu xmmword [rsp + 0x190], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x191], al
xor byte [rsp + 0x192], dl
xor byte [rsp + 0x193], dl
xor byte [rsp + 0x194], dl
xor byte [rsp + 0x195], dl
xor byte [rsp + 0x196], dl
xor byte [rsp + 0x197], dl
xor byte [rsp + 0x198], dl
xor byte [rsp + 0x199], dl
xor byte [rsp + 0x19a], dl
xor byte [rsp + 0x19b], dl
xor byte [rsp + 0x19c], dl
xor byte [rsp + 0x19d], dl
xor byte [rsp + 0x19e], dl
xor byte [rsp + 0x19f], dl
mov byte [rsp + 0x1a0], r14b
lea rdx, [rsp + 0x191]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b180
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x1b0]
mov rcx, rbx
call fcn.14000d340
cmp qword [0x140067cf0], 8
cmovae rdi, qword [0x140067cd8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdi, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 0x10
cmovae rdi, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x1c0]
test r8, r8
je 0x140015174
lea edx, [r14 + 0x5f]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140015174
sub rbx, rdi
lea r13, [r14 - 1]
jmp 0x14001517e
mov r13, 0xffffffffffffffff
mov rbx, r13
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140016893
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x140016893
cmp rbx, 0xffffffffffffffff
je 0x140016822
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], r14
mov qword [rsp + 0x1e8], r14
mov r8, rbx
cmp qword [rsp + 0x1c0], rbx
cmovb r8, qword [rsp + 0x1c0]
lea rdx, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 0x10
cmovae rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1d0]
call fcn.140001b50
nop
inc rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x1a8], r14
mov rax, qword [rsp + 0x1c0]
cmp rax, rbx
jb 0x1400168b1
sub rax, rbx
mov r8, r13
cmp rax, 0xffffffffffffffff
cmovb r8, rax
lea rdx, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 0x10
cmovae rdx, qword [rsp + 0x1b0]
add rdx, rbx
lea rcx, [rsp + 0x190]
call fcn.140001b50
nop
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140016816
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x140016816
lea rcx, [rsp + 0x210]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
test eax, eax
jne 0x1400153ae
lea rdx, str.Error_parsing_system_HWID
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b180
lea rdx, [0x14000b570]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x140015320
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001531a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016716
call fcn.140048f98
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x140015364
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001535e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016752
call fcn.140048f98
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x1400153a7
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400153a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001679c
call fcn.140048f98
xor eax, eax
jmp 0x1400167e4
xorps xmm0, xmm0
movups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x200], r14
mov qword [rsp + 0x208], r14
lea rax, [rsp + 0x214]
mov r8, r13
inc r8
cmp word [rax + r8*2], 0
jne 0x1400153d4
lea rdx, [rsp + 0x214]
lea rcx, [rsp + 0x1f0]
call fcn.14000bb30
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x1f0]
mov rax, qword [rsp + 0x200]
cmp qword [rsp + 0x208], 8
jb 0x14001542e
mov rsi, qword [rsp + 0x1f0]
lea rbx, [rsi + rax*2]
jmp 0x14001543a
lea rbx, [rcx + rax*2]
lea rsi, [rsp + 0x1f0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
movabs r15, 0x7fffffffffffffff
cmp rsi, rbx
jne 0x14001547b
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x80], 0
mov r12d, 0x16
jmp 0x1400155a1
mov rax, rbx
sub rax, rsi
sar rax, 1
mov rdx, r14
mov qword [rsp + 0x90], rdx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x98], rdi
cmp rax, r15
ja 0x1400168b7
mov r12d, 0x16
cmp rax, 0x10
jb 0x140015542
mov rdi, rax
or rdi, 0xf
cmp rdi, r15
jbe 0x1400154c6
mov rdi, r15
jmp 0x1400154cd
cmp rdi, r12
cmovb rdi, r12
mov rcx, rdi
add rcx, 1
cmovb rcx, r13
cmp rcx, 0x1000
jb 0x14001551b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400168bc
mov rcx, rax
call fcn.140048d0c
mov rcx, rax
test rax, rax
je 0x140015514
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rsp + 0x90]
jmp 0x140015532
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001552f
call fcn.140048d0c
mov rdx, qword [rsp + 0x90]
jmp 0x140015532
mov rax, r14
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x98], rdi
lea rcx, [rsp + 0x80]
cmp rdi, 0x10
cmovae rcx, qword [rsp + 0x80]
movzx eax, byte [rsi]
mov byte [rdx + rcx], al
mov rdx, qword [rsp + 0x90]
inc rdx
mov qword [rsp + 0x90], rdx
add rsi, 2
cmp rsi, rbx
je 0x140015583
mov rdi, qword [rsp + 0x98]
jmp 0x140015542
lea rax, [rsp + 0x80]
cmp qword [rsp + 0x98], 0x10
cmovae rax, qword [rsp + 0x80]
mov byte [rdx + rax], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x130]
call fcn.14000a3c0
mov rbx, rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x150]
call fcn.14000a3c0
nop
lea r8, [rsp + 0x80]
mov rdx, rbx
mov rcx, rax
call fcn.14001aa40
mov qword [rsp + 0xa8], rax
test rax, rax
jne 0x140015745
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x208]
cmp rdx, 8
jb 0x140015656
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015651
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400166bf
call fcn.140048f98
mov qword [rsp + 0x200], r14
mov qword [rsp + 0x208], 7
mov word [rsp + 0x1f0], r14w
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x1400156b7
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400156b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016716
call fcn.140048f98
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x1400156fb
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400156f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016752
call fcn.140048f98
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x14001573e
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015739
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001679c
call fcn.140048f98
xor eax, eax
jmp 0x1400167e4
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x1400167ac
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x1400167ac
mov ecx, 0xa8
call fcn.140048d0c
mov rsi, rax
mov qword [rsp + 0xa0], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x170]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x188], r14
lea r14, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 0x10
cmovae r14, qword [rsp + 0x190]
mov rdi, qword [rsp + 0x1a0]
cmp rdi, r15
ja 0x1400168c2
mov qword [rsp + 0x188], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x14001580f
mov qword [rsp + 0x180], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x170], xmm0
jmp 0x1400158a3
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x140015820
mov rbx, r15
jmp 0x140015828
cmp rbx, 0x16
cmovb rbx, r12
mov rcx, rbx
add rcx, 1
cmovb rcx, r13
cmp rcx, 0x1000
jb 0x14001586e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400168c7
mov rcx, rax
call fcn.140048d0c
mov rcx, rax
test rax, rax
je 0x140015867
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001587c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001587a
call fcn.140048d0c
jmp 0x14001587c
xor eax, eax
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x170]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xc0]
call fcn.14000a3c0
mov rbx, rax
mov qword [rsp + 0xb0], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0xe0]
call fcn.14000a3c0
mov r14, rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.14000a3c0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor r12d, r12d
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea r8d, [r12 + 5]
lea rdx, str.Check
lea rcx, [rsp + 0x58]
call fcn.14000bb30
nop
mov r9, r14
mov r8, rdi
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.1400035e0
lea rax, vtable.LogsCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140015994
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14001598f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400159e4
mov rcx, r8
call fcn.140048f98
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x188]
cmp rdx, 0x10
jb 0x1400159f0
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400159eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400159eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140048f98
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x170], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov ecx, 0xa8
call fcn.140048d0c
mov rsi, rax
mov qword [rsp + 0xb8], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x100]
call fcn.14000a3c0
mov rdi, rax
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xe0]
call fcn.14000a3c0
mov rbx, rax
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x50], rax
mov rdx, rdi
lea rcx, [rsp + 0xc0]
call fcn.14000a3c0
mov r12, rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0xa0], rax
mov rdx, rbx
lea rcx, [rsp + 0x170]
call fcn.14000a3c0
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
lea r8d, [rax + 8]
lea rdx, str.VM_Check
lea rcx, [rsp + 0x58]
call fcn.14000bb30
nop
mov r9, r12
mov r8, r14
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.1400035e0
lea rax, vtable.VmCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140015b47
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140015b42
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140015c36
mov rcx, r8
call fcn.140048f98
xor r12d, r12d
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r12b
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140015b93
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140015b8e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140015c3d
mov rcx, r8
call fcn.140048f98
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov rax, qword [rsp + 0xa8]
cmp byte [rax + 1], 0
je 0x140016032
mov ecx, 0xa8
call fcn.140048d0c
mov rsi, rax
mov qword [rsp + 0xb8], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], r12
lea r14, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 0x10
cmovae r14, qword [rsp + 0x190]
mov rdi, qword [rsp + 0x1a0]
cmp rdi, r15
ja 0x1400168cd
jmp 0x140015c44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x188], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x140015c6f
mov qword [rsp + 0x180], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x170], xmm0
jmp 0x140015d09
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x140015c80
mov rbx, r15
jmp 0x140015c8d
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
cmovb rcx, r13
cmp rcx, 0x1000
jb 0x140015cd3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400168d2
mov rcx, rax
call fcn.140048d0c
mov rcx, rax
test rax, rax
je 0x140015ccc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140015ce2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140015cdf
call fcn.140048d0c
jmp 0x140015ce2
mov rax, r12
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x170]
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x100]
call fcn.14000a3c0
mov rbx, rax
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0xe0]
call fcn.14000a3c0
mov r14, rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xa0], rax
mov rdx, rbx
lea rcx, [rsp + 0xc0]
call fcn.14000a3c0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r8d, 7
lea rdx, str.M_Check
lea rcx, [rsp + 0x58]
call fcn.14000bb30
nop
mov r9, r14
mov r8, rdi
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.1400035e0
lea rax, vtable.ModuleCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140015dfb
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140015df6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140015e4b
mov rcx, r8
call fcn.140048f98
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x188]
cmp rdx, 0x10
jb 0x140015e57
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015e52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015e52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140048f98
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x170], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov ecx, 0xa8
call fcn.140048d0c
mov rbx, rax
mov qword [rsp + 0xb8], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x100]
call fcn.14000a3c0
mov rsi, rax
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xe0]
call fcn.14000a3c0
mov rdi, rax
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x50], rax
mov rdx, rsi
lea rcx, [rsp + 0xc0]
call fcn.14000a3c0
mov r12, rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0xa0], rax
mov rdx, rdi
lea rcx, [rsp + 0x170]
call fcn.14000a3c0
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
lea r8d, [rax + 5]
lea rdx, str.Check
lea rcx, [rsp + 0x58]
call fcn.14000bb30
nop
mov r9, r12
mov r8, r14
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1400035e0
lea rax, vtable.ProcessCheck.0
mov qword [rbx], rax
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140015fae
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140015fa9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140016024
mov rcx, r8
call fcn.140048f98
xor r12d, r12d
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140015ff6
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140015ff1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001602b
mov rcx, r8
call fcn.140048f98
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rcx, rbx
call fcn.140006150
mov edx, 0xa8
mov rcx, rbx
call fcn.140048f98
jmp 0x140016055
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, [0x140051bf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b350
lea rdx, [0x14000b530]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rax, qword [rsp + 0xa8]
cmp byte [rax], 0
je 0x1400163c1
mov ecx, 0xa8
call fcn.140048d0c
mov rsi, rax
mov qword [rsp + 0xb8], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x100]
call fcn.14000a3c0
mov rdi, rax
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xe0]
call fcn.14000a3c0
mov rbx, rax
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x50], rax
mov rdx, rdi
lea rcx, [rsp + 0xc0]
call fcn.14000a3c0
mov r12, rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0xa0], rax
mov rdx, rbx
lea rcx, [rsp + 0x170]
call fcn.14000a3c0
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
lea r8d, [rax + 5]
lea rdx, str.Check
lea rcx, [rsp + 0x58]
call fcn.14000bb30
nop
mov r9, r12
mov r8, r14
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.1400035e0
lea rax, vtable.RegistryCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140016199
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140016194
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400163a5
mov rcx, r8
call fcn.140048f98
xor r14d, r14d
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1400161e5
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400161e0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400163ac
mov rcx, r8
call fcn.140048f98
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov ecx, 0xa8
call fcn.140048d0c
mov rbx, rax
mov qword [rsp + 0xb8], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x100]
call fcn.14000a3c0
mov rsi, rax
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xe0]
call fcn.14000a3c0
mov rdi, rax
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x50], rax
mov rdx, rsi
lea rcx, [rsp + 0xc0]
call fcn.14000a3c0
mov r12, rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0xa0], rax
mov rdx, rdi
lea rcx, [rsp + 0x170]
call fcn.14000a3c0
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
lea r8d, [rax + 9]
lea rdx, str.SHA_Check
lea rcx, [rsp + 0x58]
call fcn.14000bb30
nop
mov r9, r12
mov r8, r14
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1400035e0
lea rax, vtable.ShaSummCheck.0
mov qword [rbx], rax
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14001632f
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14001632a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400163b3
mov rcx, r8
call fcn.140048f98
xor r12d, r12d
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140016377
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140016372
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400163ba
mov rcx, r8
call fcn.140048f98
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rcx, rbx
call fcn.140006150
mov edx, 0xa8
mov rcx, rbx
call fcn.140048f98
jmp 0x1400163e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, [0x140051c60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b350
lea rdx, [0x14000b530]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 2
mov rcx, qword [rsp + 0xa8]
call fcn.140048f98
lea rax, [rsp + 0x170]
mov qword [rsp + 0xb8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], r12
lea r14, [rsp + 0x190]
mov r12, qword [rsp + 0x1a8]
cmp r12, 0x10
setae byte [rsp + 0x40]
mov rsi, qword [rsp + 0x190]
cmovae r14, rsi
mov rdi, qword [rsp + 0x1a0]
cmp rdi, r15
ja 0x1400168d8
mov qword [rsp + 0x188], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x140016482
mov qword [rsp + 0x180], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x170], xmm0
jmp 0x14001651c
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x140016493
mov rbx, r15
jmp 0x1400164a0
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
cmovb rcx, r13
cmp rcx, 0x1000
jb 0x1400164e6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400168dd
mov rcx, rax
call fcn.140048d0c
mov rcx, rax
test rax, rax
je 0x1400164df
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400164f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400164f2
call fcn.140048d0c
jmp 0x1400164f4
xor eax, eax
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x188], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
xor edx, edx
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], rdx
lea r14, [rsp + 0x1d0]
mov r13, qword [rsp + 0x1e8]
cmp r13, 0x10
setae byte [rsp + 0x41]
mov rdi, qword [rsp + 0x1d0]
cmovae r14, rdi
mov rbx, qword [rsp + 0x1e0]
cmp rbx, r15
ja 0x1400168e3
mov qword [rsp + 0x98], reloc.WS2_32.dll_ntohs
cmp rbx, 0x10
jae 0x14001659a
mov qword [rsp + 0x90], rbx
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x80], xmm0
jmp 0x14001663a
mov rax, rbx
or rax, 0xf
cmp rax, r15
ja 0x1400165b6
mov r15, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r15, rax
mov rcx, r15
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140016603
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400168e8
mov rcx, rax
call fcn.140048d0c
mov rcx, rax
test rax, rax
je 0x1400165fc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140016612
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001660f
call fcn.140048d0c
jmp 0x140016612
mov rax, rdx
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], r15
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x80]
call fcn.14001ccc0
lea rdx, [0x140051cd0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b350
lea rdx, [0x14000b530]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x208]
cmp rdx, 8
jb 0x1400166cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400166c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400166c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048f98
xor eax, eax
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], 7
mov word [rsp + 0x1f0], ax
cmp byte [rsp + 0x40], 0
je 0x140016726
lea rdx, [r12 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001671d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001671d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140048f98
nop
cmp byte [rsp + 0x41], 0
je 0x140016762
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140016759
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016759
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140048f98
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x1400167a8
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400167a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400167a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048f98
xor eax, eax
jmp 0x1400167e4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.140048a50
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [0x140051d08]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.14000b350
lea rdx, [0x14000b530]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x14001688c
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016887
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016887
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048f98
xor eax, eax
jmp 0x1400167e4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1400015a0
nop
call fcn.14000acf0
nop
call fcn.1400015a0
call fcn.140001500
nop
call fcn.1400015a0
call fcn.140001500
nop
call fcn.1400015a0
call fcn.140001500
nop
call fcn.1400015a0
call fcn.140001500
nop
call fcn.1400015a0
call fcn.140001500
int3