Function at 0x1400150a0
Capabilities:
Check for debugger via api
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x320
mov rax, qword [0x140064010]
xor rax, rsp
mov qword [rsp + 0x310], rax
xor r13d, r13d
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r12, rax
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140016a5f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x140016a5f
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x140015145
lea r9d, [r13 + 0x10]
lea r8, [0x140051b30]
lea rdx, [0x140051b50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x1400169a4
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140016a5f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x140016a5f
lea rdi, [0x140067cd8]
mov rcx, rdi
cmp qword [0x140067cf0], 8
cmovae rcx, qword [0x140067cd8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
mov qword [rsp + 0x178], r13
mov qword [rsp + 0x180], r13
mov r8d, 3
lea rdx, [0x1400520d8]
lea rcx, [rsp + 0x168]
call fcn.14000beb0
nop
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x90], rax
mov rcx, qword [0x140067d60]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 0x17
jb 0x140016a6b
lea r9, [0x140067d50]
cmp qword [0x140067d68], 8
cmovae r9, qword [0x140067d50]
mov qword [rsp + 0x30], 0x17
lea rax, str._getActualClientVersion
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1d0]
call fcn.14000cfa0
nop
lea rax, [rsp + 0x98]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0x98]
call fcn.14000a6f0
mov rbx, rax
lea rdx, [0x140067d18]
lea rcx, [rsp + 0x188]
call fcn.14000a6f0
nop
lea r9, [rsp + 0x1d0]
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140029b20
nop
mov rdx, qword [rsp + 0x180]
cmp rdx, 8
jb 0x1400152cd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400152c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400152c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049448
lea rdx, [rsp + 0x70]
mov rsi, qword [rsp + 0x88]
cmp rsi, 0x10
setae r15b
mov rbx, qword [rsp + 0x70]
cmovae rdx, rbx
lea rcx, [0x140067cf8]
cmp qword [0x140067d10], 0x10
cmovae rcx, qword [0x140067cf8]
mov r8, qword [0x140067d08]
cmp r8, qword [rsp + 0x80]
jne 0x140015321
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140015321
xor r14b, r14b
jmp 0x140015324
mov r14b, 1
test r15b, r15b
je 0x14001535d
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140015355
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015355
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140049448
test r14b, r14b
je 0x140015385
mov r9d, 0x10
lea r8, [0x140051b30]
lea rdx, [0x140051bb0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x1400169a4
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140016a5f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x140016a5f
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a8], xmm0
mov qword [rsp + 0x1b8], r13
mov qword [rsp + 0x1c0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x1a8], al
movdqa xmm1, xmmword [0x140054e50]
movdqu xmmword [rsp + 0x188], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x189], al
xor byte [rsp + 0x18a], dl
xor byte [rsp + 0x18b], dl
xor byte [rsp + 0x18c], dl
xor byte [rsp + 0x18d], dl
xor byte [rsp + 0x18e], dl
xor byte [rsp + 0x18f], dl
xor byte [rsp + 0x190], dl
xor byte [rsp + 0x191], dl
xor byte [rsp + 0x192], dl
xor byte [rsp + 0x193], dl
xor byte [rsp + 0x194], dl
xor byte [rsp + 0x195], dl
xor byte [rsp + 0x196], dl
xor byte [rsp + 0x197], dl
mov byte [rsp + 0x198], 0
lea rdx, [rsp + 0x189]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400021d0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x1a8]
mov rcx, rbx
call fcn.14000d6c0
cmp qword [0x140067cf0], 8
cmovae rdi, qword [0x140067cd8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdi, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 0x10
cmovae rdi, qword [rsp + 0x1a8]
mov r8, qword [rsp + 0x1b8]
test r8, r8
je 0x140015509
mov edx, 0x5f
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140015509
sub rbx, rdi
mov r14, 0xffffffffffffffff
jmp 0x140015513
mov r14, 0xffffffffffffffff
mov rbx, r14
lea rdx, [rsp + 0x1c8]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rsp + 0x1c8]
and edx, 0xffffffbf
bts edx, 7
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140016a53
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x140016a53
cmp rbx, 0xffffffffffffffff
je 0x1400169e2
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], r13
mov qword [rsp + 0x1e8], r13
mov r8, rbx
cmp qword [rsp + 0x1b8], rbx
cmovb r8, qword [rsp + 0x1b8]
lea rdx, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 0x10
cmovae rdx, qword [rsp + 0x1a8]
lea rcx, [rsp + 0x1d0]
call fcn.140001b50
nop
inc rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x188], xmm0
mov qword [rsp + 0x198], r13
mov qword [rsp + 0x1a0], r13
mov rax, qword [rsp + 0x1b8]
cmp rax, rbx
jb 0x140016a71
sub rax, rbx
mov r8, r14
cmp rax, 0xffffffffffffffff
cmovb r8, rax
lea rdx, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], 0x10
cmovae rdx, qword [rsp + 0x1a8]
add rdx, rbx
lea rcx, [rsp + 0x188]
call fcn.140001b50
nop
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x1400169d6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x1400169d6
lea rcx, [rsp + 0x210]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
test eax, eax
jne 0x14001576b
lea rdx, str.Error_parsing_system_HWID
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400021d0
lea rdx, [0x14000b8f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0x10
jb 0x1400156dd
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400156d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400168db
call fcn.140049448
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x140015721
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001571b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016912
call fcn.140049448
nop
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0x10
jb 0x140015764
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001575f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001695c
call fcn.140049448
xor eax, eax
jmp 0x1400169a4
xorps xmm0, xmm0
movups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x200], r13
mov qword [rsp + 0x208], r13
lea rax, [rsp + 0x214]
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x140015791
lea rdx, [rsp + 0x214]
lea rcx, [rsp + 0x1f0]
call fcn.14000beb0
nop
lea rax, [rsp + 0x98]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1f0]
mov rax, qword [rsp + 0x200]
cmp qword [rsp + 0x208], 8
jb 0x1400157e8
mov rsi, qword [rsp + 0x1f0]
lea rbx, [rsi + rax*2]
jmp 0x1400157f4
lea rbx, [rcx + rax*2]
lea rsi, [rsp + 0x1f0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
cmp rsi, rbx
jne 0x140015835
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x98], 0
movabs r13, 0x7fffffffffffffff
mov r12d, 0x16
jmp 0x14001596f
mov rax, rbx
sub rax, rsi
sar rax, 1
mov rdx, r13
mov qword [rsp + 0xa8], rdx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xb0], rdi
movabs r13, 0x7fffffffffffffff
cmp rax, r13
ja 0x140016a77
mov r12d, 0x16
cmp rax, 0x10
jb 0x140015910
mov rdi, rax
or rdi, 0xf
cmp rdi, r13
jbe 0x14001588a
mov rdi, r13
jmp 0x140015891
cmp rdi, r12
cmovb rdi, r12
mov rcx, rdi
add rcx, 1
cmovb rcx, r14
cmp rcx, 0x1000
jb 0x1400158df
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140016a7c
mov rcx, rax
call fcn.1400491bc
mov rcx, rax
test rax, rax
je 0x1400158d8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rsp + 0xa8]
jmp 0x1400158f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400158f3
call fcn.1400491bc
mov rdx, qword [rsp + 0xa8]
jmp 0x1400158f5
xor eax, eax
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xb0], rdi
nop word [rax + rax]
lea rcx, [rsp + 0x98]
cmp rdi, 0x10
cmovae rcx, qword [rsp + 0x98]
movzx eax, byte [rsi]
mov byte [rdx + rcx], al
mov rdx, qword [rsp + 0xa8]
inc rdx
mov qword [rsp + 0xa8], rdx
add rsi, 2
cmp rsi, rbx
je 0x140015951
mov rdi, qword [rsp + 0xb0]
jmp 0x140015910
lea rax, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0x10
cmovae rax, qword [rsp + 0x98]
mov byte [rdx + rax], 0
lea rax, [rsp + 0x128]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x128]
call fcn.14000a980
mov rbx, rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x148]
call fcn.14000a980
nop
lea r8, [rsp + 0x98]
mov rdx, rbx
mov rcx, rax
call fcn.14001abf0
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x140015b14
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x208]
cmp rdx, 8
jb 0x140015a24
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015a1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016877
call fcn.140049448
xor eax, eax
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], 7
mov word [rsp + 0x1f0], ax
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0x10
jb 0x140015a86
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015a80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400168db
call fcn.140049448
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x140015aca
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016912
call fcn.140049448
nop
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0x10
jb 0x140015b0d
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015b08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001695c
call fcn.140049448
xor eax, eax
jmp 0x1400169a4
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14001696c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x14001696c
mov ecx, 0xa8
call fcn.1400491bc
mov rsi, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x70]
call fcn.14000a980
mov rdi, rax
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xd8]
call fcn.14000a980
mov rbx, rax
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x50], rax
mov rdx, rdi
lea rcx, [rsp + 0xf8]
call fcn.14000a980
mov r15, rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x40], rax
mov rdx, rbx
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
xor eax, eax
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rax
lea r8d, [rax + 5]
lea rdx, str.Check
lea rcx, [rsp + 0x168]
call fcn.14000beb0
nop
mov r9, r15
mov r8, r14
lea rdx, [rsp + 0x168]
mov rcx, rsi
call fcn.140003ba0
lea rax, vtable.LogsCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140015c6e
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140015c69
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161b8
mov rcx, r8
call fcn.140049448
xor r14d, r14d
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140015cba
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140015cb5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161bf
mov rcx, r8
call fcn.140049448
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov ecx, 0xa8
call fcn.1400491bc
mov rsi, rax
mov qword [rsp + 0x68], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov rdi, rax
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xf8]
call fcn.14000a980
mov rbx, rax
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x48], rax
mov rdx, rdi
lea rcx, [rsp + 0xd8]
call fcn.14000a980
mov r15, rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14000a980
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
xor eax, eax
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rax
lea r8d, [rax + 8]
lea rdx, str.VM_Check
lea rcx, [rsp + 0x168]
call fcn.14000beb0
nop
mov r9, r15
mov r8, r14
lea rdx, [rsp + 0x168]
mov rcx, rsi
call fcn.140003ba0
lea rax, vtable.VmCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140015e04
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140015dff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161c6
mov rcx, r8
call fcn.140049448
xor r15d, r15d
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r15b
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140015e50
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140015e4b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161cd
mov rcx, r8
call fcn.140049448
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov rax, qword [rsp + 0x90]
cmp byte [rax + 1], 0
je 0x1400161f0
mov ecx, 0xa8
call fcn.1400491bc
mov rsi, rax
mov qword [rsp + 0x68], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov rdi, rax
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xf8]
call fcn.14000a980
mov rbx, rax
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x48], rax
mov rdx, rdi
lea rcx, [rsp + 0xd8]
call fcn.14000a980
mov r15, rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14000a980
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
xor eax, eax
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rax
lea r8d, [rax + 7]
lea rdx, str.M_Check
lea rcx, [rsp + 0x168]
call fcn.14000beb0
nop
mov r9, r15
mov r8, r14
lea rdx, [rsp + 0x168]
mov rcx, rsi
call fcn.140003ba0
lea rax, vtable.ModuleCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140015fac
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140015fa7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161d4
mov rcx, r8
call fcn.140049448
xor r14d, r14d
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140015ff8
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140015ff3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161db
mov rcx, r8
call fcn.140049448
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov ecx, 0xa8
call fcn.1400491bc
mov rbx, rax
mov qword [rsp + 0x68], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov rsi, rax
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xf8]
call fcn.14000a980
mov rdi, rax
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x48], rax
mov rdx, rsi
lea rcx, [rsp + 0xd8]
call fcn.14000a980
mov r15, rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.14000a980
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
xor eax, eax
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rax
lea r8d, [rax + 5]
lea rdx, str.Check
lea rcx, [rsp + 0x168]
call fcn.14000beb0
nop
mov r9, r15
mov r8, r14
lea rdx, [rsp + 0x168]
mov rcx, rbx
call fcn.140003ba0
lea rax, vtable.ProcessCheck.0
mov qword [rbx], rax
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140016142
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14001613d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161e2
mov rcx, r8
call fcn.140049448
xor r15d, r15d
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r15b
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x14001618a
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140016185
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400161e9
mov rcx, r8
call fcn.140049448
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rcx, rbx
call fcn.140006710
mov edx, 0xa8
mov rcx, rbx
call fcn.140049448
jmp 0x140016213
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, [0x140051c40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b6d0
lea rdx, [0x14000b8b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rax, qword [rsp + 0x90]
cmp byte [rax], 0
je 0x140016681
mov ecx, 0xa8
call fcn.1400491bc
mov rsi, rax
mov qword [rsp + 0x68], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x168]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
mov qword [rsp + 0x178], r15
mov qword [rsp + 0x180], r15
lea r14, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 0x10
cmovae r14, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
cmp rdi, r13
ja 0x140016a82
mov qword [rsp + 0x180], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x1400162c4
mov qword [rsp + 0x178], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x168], xmm0
jmp 0x140016360
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x1400162d5
mov rbx, r13
jmp 0x1400162dd
cmp rbx, 0x16
cmovb rbx, r12
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14001632a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140016a87
mov rcx, rax
call fcn.1400491bc
mov rcx, rax
test rax, rax
je 0x140016323
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140016339
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140016336
call fcn.1400491bc
jmp 0x140016339
mov rax, r15
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x168]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov rbx, rax
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0xf8]
call fcn.14000a980
mov r14, rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x58], rax
mov rdx, rbx
lea rcx, [rsp + 0xd8]
call fcn.14000a980
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], r15
mov r8d, 5
lea rdx, str.Check
lea rcx, [rsp + 0x70]
call fcn.14000beb0
nop
mov r9, r14
mov r8, rdi
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140003ba0
lea rax, vtable.RegistryCheck.0
mov qword [rsi], rax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140016452
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14001644d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400164a2
mov rcx, r8
call fcn.140049448
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x180]
cmp rdx, 0x10
jb 0x1400164ae
inc rdx
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400164a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400164a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140049448
mov qword [rsp + 0x178], r15
mov qword [rsp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x168], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov ecx, 0xa8
call fcn.1400491bc
mov rbx, rax
mov qword [rsp + 0x68], rax
xor edx, edx
mov r8d, 0xa8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov rsi, rax
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xf8]
call fcn.14000a980
mov rdi, rax
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x48], rax
mov rdx, rsi
lea rcx, [rsp + 0xd8]
call fcn.14000a980
mov r15, rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x58], rax
mov rdx, rdi
lea rcx, [rsp + 0x168]
call fcn.14000a980
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor r12d, r12d
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
lea r8d, [r12 + 9]
lea rdx, str.SHA_Check
lea rcx, [rsp + 0x70]
call fcn.14000beb0
nop
mov r9, r15
mov r8, r14
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140003ba0
lea rax, vtable.ShaSummCheck.0
mov qword [rbx], rax
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140016600
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400165fb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140016673
mov rcx, r8
call fcn.140049448
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140016645
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140016640
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001667a
mov rcx, r8
call fcn.140049448
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov rcx, rbx
call fcn.140006710
mov edx, 0xa8
mov rcx, rbx
call fcn.140049448
jmp 0x1400166a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, [0x140051cb0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b6d0
lea rdx, [0x14000b8b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor r12d, r12d
mov edx, 2
mov rcx, qword [rsp + 0x90]
call fcn.140049448
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xb8]
call fcn.14000a980
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x168], xmm0
mov qword [rsp + 0x178], r12
mov qword [rsp + 0x180], r12
lea rsi, [rsp + 0x1d0]
mov r14, qword [rsp + 0x1e8]
cmp r14, 0x10
setae r12b
mov rdi, qword [rsp + 0x1d0]
cmovae rsi, rdi
mov rbx, qword [rsp + 0x1e0]
cmp rbx, r13
ja 0x140016a8d
mov qword [rsp + 0x180], reloc.WS2_32.dll_ntohs
cmp rbx, 0x10
jae 0x140016758
mov qword [rsp + 0x178], rbx
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x168], xmm0
jmp 0x1400167f7
mov rax, rbx
or rax, 0xf
cmp rax, r13
ja 0x140016774
mov r13, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r13, rax
mov rcx, r13
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1400167c1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140016a92
mov rcx, rax
call fcn.1400491bc
mov rcx, rax
test rax, rax
je 0x1400167ba
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400167cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400167cd
call fcn.1400491bc
jmp 0x1400167cf
xor eax, eax
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x178], rbx
mov qword [rsp + 0x180], r13
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov rdx, r15
lea rcx, [rsp + 0x168]
call fcn.14001ce70
lea rdx, [0x140051d20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000b6d0
lea rdx, [0x14000b8b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, str.PAUSE
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x208]
cmp rdx, 8
jb 0x140016883
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001687e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001687e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049448
xor eax, eax
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], 7
mov word [rsp + 0x1f0], ax
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0x10
jb 0x1400168e8
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400168e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400168e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049448
nop
test r12b, r12b
je 0x140016922
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140016919
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016919
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140049448
nop
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0x10
jb 0x140016968
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016963
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016963
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049448
xor eax, eax
jmp 0x1400169a4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.140048f00
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [0x140051d58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.14000b6d0
lea rdx, [0x14000b8b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0x10
jb 0x140016a4c
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016a47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016a47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049448
xor eax, eax
jmp 0x1400169a4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1400015a0
nop
call fcn.14000b240
nop
call fcn.1400015a0
call fcn.140001500
nop
call fcn.1400015a0
call fcn.140001500
nop
call fcn.1400015a0
call fcn.140001500
int3