Function at 0x140072830
Capabilities:
Encode data using xor
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14009a0c0]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor edi, edi
lea r8, [rbp - 0x18]
mov rbx, rcx
mov qword [rsp + 0x20], rdi
mov rcx, qword [rcx]
mov edx, 0xa3e5bc
lea r9d, [rdi + 1]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp - 0x18], 0x2c
je 0x140073200
nop word [rax + rax]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400728cb
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1400728b7
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
jmp 0x1400728c2
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14007290b
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1400728f7
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
jmp 0x140072902
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400729d0
lea r8, [rbp - 0x40]
mov rcx, qword [rbx]
mov r9d, 1
mov qword [rsp + 0x20], rdi
mov edx, 0x526714
cmp byte [rbx + 8], dil
jne 0x140072973
mov byte [rbp - 0x40], 0xeb
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0xeb
mov edx, 0x526722
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._UBT____Cheat_Enabled
mov byte [rbx + 8], 1
jmp 0x1400729a9
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
mov edx, 0x526722
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._UBT____Cheat_Disabled
mov byte [rbx + 8], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140072b8b
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rdi
cmp byte [rbx + 0xc], dil
jne 0x140072abf
mov r9d, 2
lea r8, [0x14009a13c]
mov edx, 0x5a4f65
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
mov edx, 0x520190
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
mov edx, 0x50e426
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a110]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d891f
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a110]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d892e
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a110]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d898d
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Speed_Rapid_x2____Cheat_Enabled
mov byte [rbx + 0xc], 1
jmp 0x140072b64
mov r9d, 1
mov byte [rbp - 0x40], 0x75
lea r8, [rbp - 0x40]
mov edx, 0x520190
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x75
mov edx, 0x50e426
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a10c]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d891f
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a100]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d892e
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a158]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d898d
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Speed_Rapid_x2____Cheat_Disabled
mov byte [rbx + 0xc], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140072c3d
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rdi
cmp byte [rbx + 0xd], dil
jne 0x140072bf2
mov r9d, 2
lea r8, [0x14009a13c]
mov edx, 0x5a4f65
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x57
mov edx, 0x52025b
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Rapid_x10____Cheat_Enabled
mov byte [rbx + 0xd], 1
jmp 0x140072c16
mov r9d, 1
mov byte [rbp - 0x40], 0x60
lea r8, [rbp - 0x40]
mov edx, 0x52025b
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Rapid_x10____Cheat_Disabled
mov byte [rbx + 0xd], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x76
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140072db6
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rdi
cmp byte [rbx + 0xd], dil
jne 0x140072d0b
mov r9d, 2
lea r8, [0x14009a13c]
mov edx, 0x5a4f65
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
mov edx, 0x520096
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a110]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d891f
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a110]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d892e
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a110]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d898d
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Speed_x10____Cheat_Enabled
mov byte [rbx + 0xd], 1
jmp 0x140072d8f
mov r9d, 1
mov byte [rbp - 0x40], 0x75
lea r8, [rbp - 0x40]
mov edx, 0x520096
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a10c]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d891f
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a100]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d892e
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [0x14009a158]
mov r9d, 2
mov qword [rsp + 0x20], rdi
mov edx, 0x4d898d
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Speed_x10____Cheat_Disabled
mov byte [rbx + 0xd], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140072e7b
lea r8, [rbp - 0x40]
mov rcx, qword [rbx]
mov r9d, 1
mov qword [rsp + 0x20], rdi
mov edx, 0x4db7d7
cmp byte [rbx + 0xe], dil
jne 0x140072e1e
mov byte [rbp - 0x40], 3
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 3
mov edx, 0x4dbfc2
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Fly____Cheat_Enabled
mov byte [rbx + 0xe], 1
jmp 0x140072e54
mov byte [rbp - 0x40], dil
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], dil
mov edx, 0x4dbfc2
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Fly____Cheat_Disabled
mov byte [rbx + 0xe], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140072ffa
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rdi
cmp byte [rbx + 0xf], dil
jne 0x140072f4c
mov r9d, 2
lea r8, [0x14009a13c]
mov edx, 0x5a4f65
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x75
mov edx, 0x4e9b1b
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
mov edx, 0x4e9c90
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x85
mov edx, 0x4ea0e7
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x82
mov edx, 0x4ea0f0
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._TeamESP____Cheat_Enabled
mov byte [rbx + 0xf], 1
jmp 0x140072fd3
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
lea r8, [rbp - 0x40]
mov edx, 0x4e9b1b
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x75
mov edx, 0x4e9c90
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x84
mov edx, 0x4ea0e7
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x84
mov edx, 0x4ea0f0
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._TeamESP____Cheat_Disabled
mov byte [rbx + 0xf], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400730bf
lea r8, [rbp - 0x40]
mov rcx, qword [rbx]
mov r9d, 1
mov qword [rsp + 0x20], rdi
mov edx, 0x56e98a
cmp byte [rbx + 0x10], dil
jne 0x140073062
mov byte [rbp - 0x40], 0x85
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x75
mov edx, 0x56e9b4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Anti_Kick____Cheat_Enabled
mov byte [rbx + 0x10], 1
jmp 0x140073098
mov byte [rbp - 0x40], 0x84
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], reloc.WS2_32.dll_WSACleanup
mov edx, 0x56e9b4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._Anti_Kick____Cheat_Disabled
mov byte [rbx + 0x10], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140073184
lea r8, [rbp - 0x40]
mov rcx, qword [rbx]
mov r9d, 1
mov qword [rsp + 0x20], rdi
mov edx, 0x4d6795
cmp byte [rbx + 0xb], dil
jne 0x140073127
mov byte [rbp - 0x40], 0x77
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x77
mov edx, 0x4d67a6
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._NoRecoil____Cheat_Enabled
mov byte [rbx + 0xb], 1
jmp 0x14007315d
mov byte [rbp - 0x40], 0x76
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbx]
lea r8, [rbp - 0x40]
mov r9d, 1
mov byte [rbp - 0x40], 0x76
mov edx, 0x4d67a6
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, str._NoRecoil____Cheat_Disabled
mov byte [rbx + 0xb], dil
mov rcx, qword [0x14007a650]
call fcn.1400031e0
lea rdx, [0x1400033b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x14008bde0]
mov rcx, rdi
movdqu xmmword [rbp - 0x38], xmm0
mov dword [rbp - 0x28], 0xfdfdf8e4
mov word [rbp - 0x24], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x80]
xor byte [rbp + rcx - 0x38], al
inc rcx
cmp rcx, 0x14
jb 0x1400731b0
xor edx, edx
mov byte [rbp - 0x23], dil
lea rcx, [rbp - 0x38]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140073268
mov rcx, qword [rbx]
lea r8, [rbp - 0x18]
mov r9d, 1
mov qword [rsp + 0x20], rdi
mov edx, 0xa3e5bc
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp - 0x18], 0x2c
jne 0x140072880
mov rcx, qword [rbx]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rbx]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
movdqa xmm0, xmmword [0x14008bdd0]
lea rcx, [rbp - 0x38]
movdqu xmmword [rbp - 0x38], xmm0
mov dword [rbp - 0x28], 0xfbe1faf3
mov dword [rbp - 0x24], 0xf2b8e1fb
mov dword [rbp - 0x20], 0xb4bafce0
mov word [rbp - 0x1c], 0xda
mov byte [rbp - 0x1a], 1
call fcn.140001eb0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3