Function at 0x1400014c0
Capabilities:
Empty the recycle bin
Execute command
Self delete
Set console window title
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x50
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x40], rax
lea rcx, str.ServiceHub_Broker
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rcx, str.chcp_65001
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000454c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140004550]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
lea rdx, [0x140004554]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004558]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004580]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, str.___________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, str.________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, str.__________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004554]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004620]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004630]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004640]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140004658]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140002690
lea rcx, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
cmp rsi, 0xf
cmova rcx, rbx
mov rdi, qword [rsp + 0x30]
cmp rdi, 1
jne 0x140001ba8
mov r8, rdi
lea rdx, [0x140004668]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140001ba8
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
xor ecx, ecx
lea r8d, [rdi + 6]
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
lea rcx, str.del__q_C:WindowsSystem32SRU
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q_C:WindowsPrefetch__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerTypedPaths___v__url1___f__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_explorer.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_explorer.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140004770]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400047a0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AExcellent.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AExpensive.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AWild.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:GamesMinecraft___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:GamesMinecraft_versions___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameWintWare___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameCelestialconfigs___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameCelestialconfigs___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameevolutionconfigs___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameNeverHook___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameNeverHook___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:OsiumClientgameconfigsconfigs___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:MoonHackFree___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgamemetaconfigs___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Nursultan.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Expensive.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Excellent.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Akrien.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Celestial.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_baritone__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Nurik__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Excellent__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Celka__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Celestial__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Akrien__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Nursultan__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_DeadCode.exe_nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Carbonara.exe_nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_WexSide.exe_nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:DeadCode__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:WexSide__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Nova_nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h_Nova.exe_nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Carbonara___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:CarbonaraAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsExclusive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsVendex___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsVerist___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsWissend___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsRockstar_Free___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsFPDCLEINT_1.8___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameRockstar_Free___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameFPDCLEINT_1.8___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameGothaj___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameInertia___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameImpact___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameStarLine___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameRise___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_arbuz___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameExclusive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameEpfirium___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameDark___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsGothaj___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsInertia___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsImpact___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsStarLine___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsRise___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsRockstar___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:GamesMinecraft_versionsRockstar___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Rockstar___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:RockAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Celestial___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Nurik___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:_baritone___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AMinecraft_1.16.5.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:WILD___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Expensive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Celka___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Excellent___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AkrienAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Nurik___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:_baritone___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AMinecraft_1.16.5.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:WILD___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Expensive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Celka___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:Excellent___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib_s_h__C:AkrienAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop dword [rax + rax]
lea rcx, str.taskkill__F__IM_SystemInformer.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__F__IM_ProcessHacker.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__F__IM_Everything.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400011c0
test al, al
je 0x140001b75
lea rcx, str.reg_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v_Hidden__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140005bf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
mov rcx, rax
lea rdx, [0x1400022f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001ae0
lea rdx, [0x140005c30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
mov rcx, rax
lea rdx, [0x1400022f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001ae0
lea rcx, [rsp + 0x20]
cmp rsi, 0xf
cmova rcx, rbx
cmp rdi, 1
jne 0x140001fe6
mov r8, rdi
lea rdx, [0x140005c7c]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140001fe6
lea rcx, str.reg_add__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v_Hidden__t_REG_DWORD__d_1__f__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_explorer.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_explorer.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_versions___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AExcellent.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AExpensive.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AWild.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Carbonara___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:CarbonaraAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsExclusive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsVendex___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsVerist___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsWissend___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameRockstar_Free___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameFPDCLEINT_1.8___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameGothaj___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameInertia___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameImpact___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameStarLine___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameRise___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_arbuz___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameExclusive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameEpfirium___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgameDark___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsAvalon___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsCelestial___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsAvalon___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsExpensive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsAurora___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_versionsExclusive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_versionsVendex___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_versionsVerist___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_versionsWissend___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftRockstar_Free___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftFPDCLEINT_1.8___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftGothaj___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftInertia___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftImpact___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftStarLine___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftRise___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_arbuz___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftExclusive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftDark___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftAvalon___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftExpensive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraftAurora___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Nursultan.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Expensive.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Excellent.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Akrien.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Celestial.exe__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_baritone__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Nurik__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Excellent__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Celka__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Celestial__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Akrien__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h_Nursultan__nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Users_username_AppDataRoaming.tlauncherlegacyMinecraftgame_versionsRockstar___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:GamesMinecraft_versionsRockstar___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Rockstar___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:RockAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Celestial___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Nurik___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:_baritone___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AMinecraft_1.16.5.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:WILD___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Expensive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Celka___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Excellent___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AkrienAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Nurik___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:_baritone___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AMinecraft_1.16.5.exe___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:WILD___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Expensive___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Celka___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:Excellent___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.attrib__s__h__C:AkrienAntiLeak___nul_2_nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x20]
cmp rsi, 0xf
cmova rcx, rbx
cmp rdi, 1
jne 0x140002052
mov r8, rdi
lea rdx, [0x140006ed4]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140002052
lea rcx, [0x14000454c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140004554]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140006ee0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rdx, [0x140006f40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002120
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp rsi, 0xf
jbe 0x14000209a
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140002092
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002092
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400028cc
xor eax, eax
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140002870
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret