Function at 0x140001d10
Capabilities:
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x140005088]
mov ecx, dword [0x14000508c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
cmp ecx, 0xa
setl byte [rbp - 2]
mov eax, 0xca3c5b20
lea rsi, str.Memory_allocation_error._n
mov r14, qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov r12, qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, 0x180beb8e
mov ebx, 0x49ac0474
jmp 0x140001dad
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x781cecdd
mov ecx, 0x41d71df8
nop word cs:[rax + rax]
nop dword [rax]
cmove eax, ecx
cmp dword [0x14000508c], 0xa
cmovl eax, ecx
cmp eax, 0x180beb8d
jle 0x140001e10
cmp eax, 0x53126464
jle 0x140001e70
cmp eax, 0x63c58e03
jle 0x140001f41
cmp eax, 0x781cecdc
jle 0x1400020a2
cmp eax, 0x7a4c8015
jg 0x140002240
cmp eax, 0x781cecdd
je 0x1400022bb
cmp eax, 0x782f8bd3
jne 0x140001dad
sub rsp, 0x20
mov rcx, rsi
call fcn.140002600
add rsp, 0x20
mov eax, 0xb1ba23e
jmp 0x140001dad
cmp eax, 0xcbb144ab
jg 0x140001ef0
cmp eax, 0xb7ae8cdf
jg 0x140001fa4
cmp eax, 0xa45698c9
jg 0x1400020cd
cmp eax, 0x9858b03f
jle 0x140002280
cmp eax, 0x9858b040
je 0x1400022d8
cmp eax, 0xa41d3177
jne 0x140001dad
cmp qword [rbp - 0x28], 0
mov eax, 0x33d3af82
mov ecx, 0x782f8bd3
cmove eax, ecx
jmp 0x140001dad
cmp eax, 0x2edf861b
jle 0x140001fde
cmp eax, 0x4597ed19
jg 0x1400020fc
cmp eax, 0x33d3af81
jle 0x1400022a6
cmp eax, 0x33d3af82
je 0x1400022ee
cmp eax, 0x41d71df8
jne 0x140001dad
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
call r12
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov ecx, dword [rax]
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add rsp, 0x20
mov qword [rbp - 0x48], rax
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x781cecdd
mov ecx, 0xec31eda7
jmp 0x140001da0
cmp eax, 0xb1ba23d
jg 0x14000203c
cmp eax, 0xe4c19989
jg 0x140002127
cmp eax, 0xcbb144ac
je 0x14000230e
cmp eax, 0xccdfe408
je 0x14000232c
cmp eax, 0xdd52b06f
jne 0x140001dad
sub rsp, 0x20
mov rcx, rsi
call fcn.140002600
add rsp, 0x20
mov eax, 0x63c58e04
jmp 0x140001dad
cmp eax, 0x5d8abd14
jg 0x140002152
cmp eax, 0x53126465
je 0x140002336
cmp eax, 0x5a2e92af
je 0x140002354
cmp eax, 0x5cd3aa13
jne 0x140001dad
mov rax, qword [rbp - 0x40]
mov rax, qword [rbp - 0x10]
mov dword [rax], 0x2c0
sub rsp, 0x20
mov ecx, 0x2c0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x28], rax
mov eax, 0xa41d3177
jmp 0x140001dad
cmp eax, 0xc655c6f3
jg 0x140002185
cmp eax, 0xb7ae8ce0
je 0x140002372
cmp eax, 0xbb2b3462
je 0x140002390
cmp eax, 0xc33069fa
jne 0x140001dad
mov rax, qword [rbp - 0x40]
mov eax, 0xb7ae8ce0
jmp 0x140001dad
cmp eax, 0x1e4597b8
jg 0x1400021c5
cmp eax, 0x180beb8e
je 0x1400023ca
cmp eax, 0x1a1c442b
je 0x1400023d4
cmp eax, 0x1abc0688
jne 0x140001dad
sub rsp, 0x20
lea rcx, str.Failed_to_retrieve_network_adapter_information._n
call fcn.140002600
add rsp, 0x20
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1e4597b9
mov ecx, 0x76b10d15
jmp 0x140001da0
cmp eax, 0x100c13fc
jg 0x140002201
cmp eax, 0xb1ba23e
je 0x1400023f1
cmp eax, 0xb4974f7
je 0x140001d79
cmp eax, 0xd2a0aaa
jne 0x140001dad
sub rsp, 0x20
lea rcx, str.Virtual_environment_detected._Exiting._n
call fcn.140002600
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x50], rax
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4597ed1a
mov ecx, 0x2edf861c
jmp 0x140001da0
cmp eax, 0x63c58e04
je 0x1400023fb
cmp eax, 0x6a0c4231
je 0x140002431
cmp eax, 0x76b10d15
jne 0x140001dad
mov eax, 0xec1c3368
jmp 0x140001dad
cmp eax, 0xa45698ca
je 0x140002447
cmp eax, 0xa77d6c38
je 0x140002451
cmp eax, 0xafe8ba9d
jne 0x140001dad
mov eax, 0x2c6a4769
mov r13, qword [rbp - 0x18]
jmp 0x140001dad
cmp eax, 0x4597ed1a
je 0x14000246f
cmp eax, 0x49ac0474
je 0x140002491
cmp eax, 0x5061a705
jne 0x140001dad
mov eax, 0xafe8ba9d
jmp 0x140001dad
cmp eax, 0xe4c1998a
je 0x1400024c8
cmp eax, 0xec1c3368
je 0x1400024d6
cmp eax, 0xec31eda7
jne 0x140001dad
mov eax, 0x813a51a6
jmp 0x140001dad
cmp eax, 0x5d8abd15
je 0x1400024e0
cmp eax, 0x60868dbf
je 0x1400024f5
cmp eax, 0x60bce4a9
jne 0x140001dad
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x60], rax
mov eax, 0x7a4c8016
jmp 0x140001dad
cmp eax, 0xc655c6f4
je 0x14000251e
cmp eax, 0xc94e9db0
je 0x14000253a
cmp eax, 0xca3c5b20
jne 0x140001dad
movzx ecx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0xccdfe408
mov edx, 0xbb2b3462
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x140001dad
cmp eax, 0x1e4597b9
je 0x140002544
cmp eax, 0x2348fd39
je 0x140002562
cmp eax, 0x2c6a4769
jne 0x140001dad
mov qword [rbp - 0x30], r13
cmp qword [rbp - 0x30], 0
mov eax, 0x60868dbf
mov ecx, 0x60bce4a9
cmove eax, ecx
jmp 0x140001dad
cmp eax, 0x100c13fd
je 0x14000256c
cmp eax, 0x116f18d5
je 0x140002576
cmp eax, 0x126f9c56
jne 0x140001dad
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2348fd39
mov ecx, 0x92d49086
jmp 0x140001da0
cmp eax, 0x7a4c8016
je 0x140002594
cmp eax, 0x7ac5320f
jne 0x140001dad
mov qword [rbp - 0x18], r15
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1a1c442b
cmove eax, ebx
cmp dword [0x14000508c], 0xa
cmovl eax, ebx
jmp 0x140001dad
cmp eax, 0x813a51a6
jne 0x1400025ad
cmp qword [rbp - 0x48], 0
mov eax, 0x7ac5320f
mov ecx, 0xcbb144ac
cmove eax, ecx
mov r15, qword [rbp - 0x48]
jmp 0x140001dad
cmp eax, 0x2edf861c
jne 0x1400025b9
mov eax, 0x3262f51a
jmp 0x140001dad
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
call r12
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov eax, 0x41d71df8
jmp 0x140001dad
cmp byte [rbp - 4], 0
mov eax, 0x5d8abd15
mov ecx, 0x53126465
cmovne eax, ecx
jmp 0x140001dad
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x28]
sub rsp, 0x20
call r14
add rsp, 0x20
mov dword [rbp - 0x34], eax
mov eax, 0xc655c6f4
jmp 0x140001dad
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdd52b06f
mov ecx, 0x63c58e04
jmp 0x140001da0
mov eax, 0xbb2b3462
jmp 0x140001dad
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4597ed1a
mov ecx, 0xd2a0aaa
jmp 0x140001da0
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1e4597b9
mov ecx, 0x1abc0688
jmp 0x140001da0
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2348fd39
mov ecx, 0x126f9c56
jmp 0x140001da0
mov eax, 0x10
call fcn.1400029a0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x40], rax
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xccdfe408
mov ecx, 0x100c13fd
jmp 0x140001da0
mov eax, 0xa77d6c38
jmp 0x140001dad
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call r14
add rsp, 0x20
mov eax, 0x49ac0474
jmp 0x140001dad
mov eax, 0xc33069fa
jmp 0x140001dad
sub rsp, 0x20
mov rcx, rsi
call fcn.140002600
add rsp, 0x20
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdd52b06f
cmove eax, edi
cmp dword [0x14000508c], 0xa
cmovl eax, edi
jmp 0x140001dad
cmp byte [rbp - 3], 0
mov eax, 0x5a2e92af
mov ecx, 0x5061a705
cmovne eax, ecx
jmp 0x140001dad
mov eax, 0x116f18d5
jmp 0x140001dad
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa45698ca
mov ecx, 0x116f18d5
jmp 0x140001da0
sub rsp, 0x20
lea rcx, str.Virtual_environment_detected._Exiting._n
call fcn.140002600
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov eax, 0xd2a0aaa
jmp 0x140001dad
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call r14
add rsp, 0x20
test eax, eax
sete byte [rbp - 3]
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1a1c442b
mov ecx, 0x6a0c4231
jmp 0x140001da0
mov eax, 0x2c6a4769
mov r13, qword [rbp - 0x58]
jmp 0x140001dad
mov eax, 0x60bce4a9
jmp 0x140001dad
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov qword [rbp - 0x58], rax
mov eax, 0xe4c1998a
jmp 0x140001dad
mov rcx, qword [rbp - 0x30]
mov eax, 0x198
add rcx, rax
sub rsp, 0x20
call section..text
add rsp, 0x20
test eax, eax
setne byte [rbp - 4]
mov eax, 0x9858b040
jmp 0x140001dad
mov eax, dword [rbp - 0x34]
cmp eax, 0x6f
mov eax, 0x7ac5320f
mov ecx, 0xb4974f7
cmove eax, ecx
mov r15, qword [rbp - 0x28]
jmp 0x140001dad
mov eax, 0xc33069fa
jmp 0x140001dad
sub rsp, 0x20
lea rcx, str.Failed_to_retrieve_network_adapter_information._n
call fcn.140002600
add rsp, 0x20
mov eax, 0x1abc0688
jmp 0x140001dad
mov eax, 0x126f9c56
jmp 0x140001dad
mov eax, 0x5cd3aa13
jmp 0x140001dad
mov eax, dword [0x140005088]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa45698ca
mov ecx, 0xc94e9db0
jmp 0x140001da0
mov rcx, qword [rbp - 0x60]
sub rsp, 0x20
call r12
add rsp, 0x20
mov eax, 0xc33069fa
jmp 0x140001dad
cmp eax, 0x92d49086
je 0x1400025da
jmp 0x140001dad
cmp eax, 0x3262f51a
jne 0x140001dad
mov rcx, qword [rbp - 0x50]
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.140002a00
nop
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret