Function at 0x180014590
Capabilities:
Encode data using base64
Encode data using xor
Get common file path

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x18009da48]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov r12, qword [rbp + 0x3e8]
mov edi, r9d
xor eax, eax
mov dword [rsp + 0x70], r9d
mov r9, qword [rbp + 0x3e0]
mov r10, rcx
mov ebx, dword [rsp + 0x70]
mov r11, r8
mov dword [rbp - 0x34], eax
mov qword [rbp + 0x78], rdx
lea edx, [rdi + 0x90]
mov dword [rbp - 0x28], eax
mov eax, edi
mov qword [rbp - 0x60], rcx
lea rcx, [0x180000000]
mov qword [rbp - 0x30], r8
mov qword [rbp + 0x10], r9
mov qword [rbp - 0x10], r12
mov dword [rbp - 0x34], eax
mov dword [rsp + 0x60], edx
cmp edi, edx
jae 0x180014e9d
mov rcx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x10]
movzx esi, word [rbp - 0x70]
mov edx, dword [rsp + 0x70]
mov r14, qword [rbp - 0x10]
mov r13d, dword [rsp + 0x70]
mov r15d, dword [rsp + 0x70]
mov edi, dword [rsp + 0x70]
mov qword [rsp + 0x78], rcx
mov ecx, dword [rsp + 0x70]
mov dword [rbp - 0x58], ecx
mov rcx, qword [rbp - 0x50]
mov qword [rbp - 0x20], rcx
mov ecx, dword [rsp + 0x70]
mov dword [rbp - 0x38], ecx
mov rcx, qword [rbp - 0x50]
mov qword [rbp - 0x18], rcx
mov ecx, dword [rsp + 0x60]
mov qword [rbp - 0x78], r8
mov dword [rbp - 0x80], esi
mov dword [rsp + 0x68], edx
nop
add eax, 0xffffffbc
cmp eax, 0xdd
ja case.default.0x18001469e
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x15304]
mov ecx, dword [rcx + rax*4 + 0x152b8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov qword [rsp + 0x58], 0
lea rax, [rbp + 0x30]
mov qword [rsp + 0x50], rax
lea r9, [rbp + 0xb0]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x48], rax
lea r8, [rbp - 8]
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x60]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x38], rax
lea rcx, [rbp + 0x48]
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
call fcn.180082420
mov ebx, eax
test eax, eax
jne 0x18001527a
lea rdx, [rbp + 0x48]
lea r8, [rbp - 0x70]
mov dword [rbp - 0x70], 1
mov ecx, 0x39
call fcn.180009340
mov r10, qword [rbp - 0x60]
jmp 0x180014d74
mov dword [rbp - 0x68], 0
jmp case.0x18001469e.69
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x18]
mov rdx, r11
xor ecx, ecx
call fcn.18003fb70
mov rbx, rax
test eax, eax
jne 0x180014e82
mov r10, qword [rbp - 0x60]
jmp 0x180014d74
mov dword [r10 + 8], 0
mov r8, qword [r12 + 0x10]
mov qword [rbp - 0x78], r8
jmp case.0x18001469e.69
cmp dword [r12 + 8], 0
mov r14, qword [r10 + 0x10]
mov rdx, r14
jne 0x180014855
mov edx, 0xf8
nop word [rax + rax]
mov eax, edx
sub eax, 0xf5
je 0x180014835
sub eax, 1
je 0x180014829
sub eax, 1
je 0x1800147eb
cmp eax, 1
jne 0x18001483e
mov eax, dword [r8]
add r8, 4
add eax, dword [r11]
mov r15d, eax
and eax, 0xfffffff
shr r15d, 0x1c
mov dword [r14], eax
add r14, 4
jmp 0x18001483e
mov r13d, 1
cmp dword [r12], r13d
jle 0x18001483e
nop word [rax + rax]
mov ecx, dword [r8]
inc r13d
add ecx, r15d
add r8, 4
mov r15d, ecx
and ecx, 0xfffffff
mov dword [r14], ecx
add r14, 4
shr r15d, 0x1c
cmp r13d, dword [r12]
jl 0x180014800
jmp 0x18001483e
inc r13d
mov dword [r14], r15d
add r14, 4
jmp 0x18001483e
mov eax, dword [r12]
inc eax
mov dword [r10], eax
dec edx
cmp edx, 0xf4
ja 0x1800147b0
mov qword [rbp - 0x78], r8
jmp 0x180014d78
mov dword [r10], 1
add r14, 4
cmp dword [r12], 1
mov ecx, dword [r11]
jne 0x180014871
mov rax, qword [r12 + 0x10]
sub ecx, dword [rax]
mov dword [rdx], ecx
mov r13d, 1
jmp 0x180014d78
mov eax, dword [rbp - 0x58]
cmp rax, qword [rbp - 0x20]
jae 0x180015273
jmp case.0x18001469e.69
test r9, r9
je 0x1800148b5
mov rcx, qword [rbp + 0x10]
lea r8, [rbp + 0x60]
xor r9d, r9d
lea edx, [r9 + 0x44]
call fcn.180040e40
mov r8, qword [rbp - 0x78]
mov r10, qword [rbp - 0x60]
mov edx, dword [rsp + 0x68]
mov rax, qword [rbp + 0x78]
test rax, rax
je case.0x18001469e.69
xor r9d, r9d
lea r8, [rbp - 8]
mov rcx, rax
lea edx, [r9 + 0x44]
call fcn.180040e40
mov r10, qword [rbp - 0x60]
jmp 0x180014d74
cmp qword [r12 + 0x18], 0x10
mov rax, r12
mov dword [rbp - 0x38], 0x36
jb 0x1800148f4
mov rax, qword [r12]
mov eax, dword [rax]
mov dword [rbp - 0x58], eax
jmp case.0x18001469e.69
xor esi, esi
mov dword [rbp - 0x80], esi
jmp case.0x18001469e.69
mov rax, qword [r12 + 0x10]
mov r9, qword [rsp + 0x78]
mov ecx, dword [rsp + 0x60]
sub rax, r9
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 0
jmp 0x180014d85
mov r9d, 8
mov qword [rsp + 0x78], r9
cmp qword [r12 + 0x10], r9
jb 0x180015273
mov ecx, dword [rsp + 0x60]
jmp 0x180014d85
mov eax, dword [r12]
inc eax
cmp dword [r10 + 4], eax
jge 0x180014981
xor r9d, r9d
mov dword [rsp + 0x68], eax
mov r8, r10
lea rdx, [rsp + 0x68]
mov ecx, 0xbf
call fcn.18000ee90
mov rdi, rax
test eax, eax
jne 0x18001527a
mov r10, qword [rbp - 0x60]
mov r11, qword [rbp - 0x30]
cmp dword [r12 + 8], 1
jne 0x180014a32
cmp dword [r12], 1
jg 0x1800149a4
mov rcx, qword [r12 + 0x10]
mov eax, dword [r11]
cmp dword [rcx], eax
jb 0x180014a32
mov esi, 0x8b
nop dword [rax]
mov eax, esi
sub eax, 0x8b
je 0x180014a18
sub eax, 1
je 0x1800149e3
cmp eax, 1
jne 0x180014a21
mov r9, r10
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea ecx, [rax + 2]
xor edx, edx
call fcn.18003f700
mov eax, edi
jmp 0x18001527a
mov eax, dword [r11]
lea rcx, [rsp + 0x68]
mov r9, r12
mov dword [rsp + 0x68], eax
mov r8, r10
mov edx, 0xca
call fcn.180064070
mov r10, qword [rbp - 0x60]
mov edi, eax
mov dword [r10 + 8], 1
mov dword [r12 + 8], 1
jmp 0x180014a21
mov dword [r12 + 8], 0
mov r11, qword [rbp - 0x30]
inc esi
cmp esi, 0x8e
jb 0x1800149b0
mov esi, dword [rbp - 0x80]
mov edx, dword [r10]
mov r8, qword [rbp - 0x78]
mov dword [rsp + 0x68], edx
jmp case.0x18001469e.69
mov rdx, qword [r11]
mov ecx, 1
cmp rcx, rdx
jae 0x180014d78
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r12 + rcx*2 - 2]
xor ax, word [r12 + rcx*2]
inc rcx
or si, ax
cmp rcx, rdx
jb 0x180014a60
mov dword [rbp - 0x80], esi
jmp 0x180014d78
mov dword [rbp + 0x130], 0x220025
mov dword [rbp + 0x134], 0x220021
jmp case.0x18001469e.69
cmp dword [rbp + 0x18], 0
je 0x180014cfd
mov esi, 5
cmp esi, 5
ja case.default.0x180014ac2
lea rdx, [0x180000000]
mov eax, esi
mov ecx, dword [rdx + rax*4 + 0x153e4]
add rcx, rdx
jmp rcx
lea r9, [rbp + 0x30]
mov ecx, 3
lea r8, [rbp + 0xc8]
lea rdx, [rbp - 8]
call fcn.180047c60
mov ebx, eax
test eax, eax
jne 0x180014e82
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x48]
xor ecx, ecx
lea rdx, [rbp + 0xb0]
call fcn.18003fb70
jmp 0x180014cd7
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x60]
xor ecx, ecx
lea rdx, [rbp + 0x98]
call fcn.18003fb70
mov ebx, eax
test eax, eax
jne 0x180014e82
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp - 8]
xor ecx, ecx
lea rdx, [rbp + 0x18]
call fcn.18003fb70
jmp 0x180014cd7
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x18]
xor ecx, ecx
lea rdx, [rbp + 0xc8]
call fcn.18003fb70
jmp 0x180014cd7
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0xb0]
xor ecx, ecx
lea rdx, [rbp + 0xf8]
call fcn.18003fb70
mov ebx, eax
test eax, eax
jne 0x180014e82
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x98]
xor ecx, ecx
lea rdx, [rbp + 0xe0]
call fcn.18003fb70
jmp 0x180014cd7
xor r9d, r9d
lea rax, [rbp + 0x18]
lea r8, [rbp - 8]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x80]
lea ecx, [r9 + 0x1e]
call fcn.18005f3f0
mov ebx, eax
test eax, eax
jne 0x180014e82
lea rax, [rbp + 0xb0]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
mov r8d, 0xdb
mov qword [rsp + 0x20], 0
lea rcx, [rbp + 0x80]
call fcn.1800463c0
mov ebx, eax
test eax, eax
jne 0x180014e82
lea r9, [rbp + 0x30]
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x48]
lea ecx, [rax + 3]
call fcn.180047c60
jmp 0x180014cd7
lea rax, [rbp + 0x98]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
mov r8d, 0xdb
mov qword [rsp + 0x20], 0
lea rcx, [rbp + 0x80]
call fcn.1800463c0
mov ebx, eax
test eax, eax
jne 0x180014e82
lea r9, [rbp + 0x30]
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0x60]
lea ecx, [rax + 3]
call fcn.180047c60
mov ebx, eax
test eax, eax
jne 0x180014e82
lea rax, [rbp + 0x18]
xor edx, edx
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
mov r8d, 0xdb
mov qword [rsp + 0x20], 0
lea rcx, [rbp + 0x80]
call fcn.1800463c0
mov ebx, eax
test eax, eax
jne 0x180014e82
dec esi
lea eax, [rsi + 0x47]
cmp eax, 0x46
ja 0x180014aa6
cmp dword [rbp + 0x18], 0
jne 0x180014aa1
mov r10, qword [rbp - 0x60]
cmp dword [rbp], 1
jne 0x180014d55
mov esi, 0x3f
mov eax, esi
sub eax, 0x3d
je 0x180014d2d
sub eax, 1
je 0x180014d23
cmp eax, 1
jne 0x180014d4a
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x48]
jmp 0x180014d35
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x60]
jmp 0x180014d35
lea rdx, [rbp - 8]
lea rcx, [rbp - 8]
mov r8d, 0x61
call fcn.180040d10
mov ebx, eax
test eax, eax
jne 0x180014e82
dec esi
cmp esi, 0x3c
ja 0x180014d08
mov r10, qword [rbp - 0x60]
test r10, r10
je 0x180014d71
xor r9d, r9d
lea r8, [rbp + 0x48]
mov rcx, r10
lea edx, [r9 + 0x44]
call fcn.180040e40
mov r10, qword [rbp - 0x60]
mov esi, dword [rbp - 0x80]
mov r8, qword [rbp - 0x78]
mov edx, dword [rsp + 0x68]
mov ecx, dword [rsp + 0x60]
mov r9, qword [rsp + 0x78]
mov eax, dword [rbp - 0x34]
mov r11, qword [rbp - 0x30]
add eax, 8
mov dword [rbp - 0x34], eax
cmp eax, ecx
jae 0x180014ec8
mov r9, qword [rbp + 0x10]
jmp 0x180014670
test si, si
je case.0x18001469e.69
xor r9d, r9d
mov word [rbp - 0x48], si
lea r8, [rbp - 0x48]
mov edx, 0xbc
xor ecx, ecx
call fcn.18006ab90
mov rcx, qword [rbp - 0x30]
lea r9, [rbp - 0x50]
mov word [rbp - 0x40], ax
xor r8d, r8d
lea rax, [rbp - 0x40]
mov word [rbp - 0x70], si
mov qword [rsp + 0x28], rax
mov rdx, r12
mov rcx, qword [rcx]
mov qword [rbp - 0x50], rcx
lea rcx, [rbp - 0x70]
mov dword [rsp + 0x20], 0x5e
call fcn.1800592a0
mov r10, qword [rbp - 0x60]
jmp 0x180014d74
mov r9d, 0x117
mov qword [rsp + 0x20], 0
lea r8, [rbp - 8]
mov rdx, r12
xor ecx, ecx
call fcn.18003fb70
mov ebx, eax
test eax, eax
jne 0x180014e82
lea rdx, [rbp + 0x98]
jmp 0x18001471d
cmp r13d, edx
jge 0x180014e5d
mov eax, edx
mov rcx, r14
sub eax, r13d
xor edx, edx
movsxd rsi, eax
add r13d, eax
shl rsi, 2
mov r8, rsi
and r8, 0xfffffffffffffffc
call sub.VCRUNTIME140.dll_memset
mov r10, qword [rbp - 0x60]
add r14, rsi
mov esi, dword [rbp - 0x80]
xor edx, edx
mov qword [rsp + 0x20], 0
inc r13d
mov r9, r10
xor r8d, r8d
lea ecx, [rdx + 3]
call fcn.18003f700
mov r10, qword [rbp - 0x60]
jmp 0x180014d74
mov r14, qword [rbp - 0x50]
xor eax, eax
mov esi, dword [rsp + 0x70]
mov r13d, dword [rsp + 0x70]
mov qword [rbp - 0x78], r14
mov dword [rbp - 0x80], esi
jmp 0x180014fb3
mov eax, dword [rsp + 0x70]
mov r9, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x50]
mov r8d, dword [rsp + 0x70]
mov dword [rbp - 0x38], eax
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x78], r9
mov dword [rbp - 0x58], r8d
mov qword [rbp - 0x20], rdx
jmp 0x180014edb
mov edi, dword [rsp + 0x70]
lea rcx, [0x180000000]
mov rdx, qword [rbp - 0x20]
mov r8d, dword [rbp - 0x58]
mov r14, qword [rbp - 0x50]
mov r15d, edi
mov esi, dword [rsp + 0x70]
mov r13d, dword [rsp + 0x70]
mov qword [rbp - 0x78], r14
mov dword [rbp - 0x80], esi
lea eax, [rdi + 0x11]
cmp r15d, eax
jae case.0x180014f26.70
lea eax, [r15 - 0x44]
cmp eax, 0xe3
ja case.0x180014f26.84
movzx eax, byte [rcx + rax + 0x15440]
mov ecx, dword [rcx + rax*4 + 0x153fc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rbp + 0x144], 0x330033
mov dword [rbp + 0x148], 0x330033
jmp case.0x180014f26.84
mov eax, 0x23
mov dword [rbp + 0x140], 0x330033
mov word [rbp + 0x13e], ax
jmp case.0x180014f26.84
mov eax, 0x21
mov dword [rbp + 0x13a], 0x220021
mov word [rbp + 0x138], ax
jmp case.0x180014f26.84
lea rax, [rbp + 0x130]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x180014f85
lea rcx, [rbp + 0x130]
call qword [sym.imp.SHELL32.dll_DoEnvironmentSubstW]
mov r9, qword [rsp + 0x78]
jmp case.0x180014f26.84
mov dword [r11 + 0x24], r13d
jmp case.0x180014f26.84
xor eax, eax
mov ebx, eax
mov qword [rsp + 0x58], rax
lea r9, [rbp + 0xb0]
lea rax, [rbp + 0x30]
mov r15d, 0x44
mov qword [rsp + 0x50], rax
lea r8, [rbp - 8]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x60]
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x48]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
call fcn.1800823a0
mov r9, qword [rsp + 0x78]
jmp case.0x180014f26.84
mov eax, r13d
cmp rax, rdx
jae 0x180015273
mov dword [r11 + 0x20], r8d
jmp case.0x180014f26.84
mov rax, qword [r12 + 0x10]
mov qword [rbp + 0x128], ILClone
mov byte [rbp + 0x110], 0
cmp rax, r9
jb 0x1800152a4
sub rax, r9
mov rdi, 0xffffffffffffffff
cmp rax, rdi
cmovb rdi, rax
cmp qword [r12 + 0x18], 0x10
mov rax, r12
jb 0x180015083
mov rax, qword [r12]
lea r12, [rax + r9]
cmp rdi, 0xf
ja 0x1800150b3
mov r8, rdi
mov qword [rbp + 0x120], rdi
mov rdx, r12
lea rcx, [rbp + 0x110]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rdi + 0x110], 0
jmp 0x18001515d
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1800152b0
mov rsi, rdi
or rsi, 0xf
cmp rsi, rax
jbe 0x1800150d7
mov rsi, rax
jmp 0x1800150e4
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18001511d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800152aa
mov rcx, rax
call fcn.18008372c
test rax, rax
je 0x180015250
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x18001512e
test rcx, rcx
je 0x180015129
call fcn.18008372c
jmp 0x18001512b
xor eax, eax
mov r14, rax
mov r8, rdi
mov qword [rbp + 0x120], rdi
mov rdx, r12
mov qword [rbp + 0x128], rsi
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [rbp - 0x80]
mov byte [r14 + rdi], 0
mov qword [rbp + 0x110], r14
mov r14, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x30]
lea rdx, [rbp + 0x110]
or dword [rbp - 0x28], 1
call fcn.180003eb0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x1800151b2
mov rcx, qword [rbp + 0x110]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800151ad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180015250
call fcn.180083768
mov edx, dword [rbp - 0x38]
lea rax, [rbp + 0x160]
mov rcx, qword [rbp - 0x18]
mov r9d, esi
mov qword [rsp + 0x28], rax
mov r8, r14
xor eax, eax
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathAndSubDirW]
mov r9, qword [rsp + 0x78]
mov r12, qword [rbp - 0x10]
jmp case.0x180014f26.84
mov eax, 0x33
mov word [rbp + 0x14c], ax
jmp case.0x180014f26.84
xor eax, eax
mov dword [rbp + 0x14e], 0x250033
mov word [rbp + 0x152], ax
jmp case.0x180014f26.84
xor eax, eax
mov r14d, eax
mov qword [rbp - 0x78], rax
jmp case.0x180014f26.84
cmp qword [r12 + 0x18], 0x10
mov rax, r12
jb 0x180015220
mov rax, qword [r12]
mov r13d, dword [rax + 4]
xor eax, eax
mov esi, eax
mov dword [rbp - 0x80], eax
jmp case.0x180014f26.84
mov byte [rbp - 0x68], 1
mov r11, qword [rbp - 0x30]
lea rcx, [0x180000000]
mov edi, dword [rsp + 0x70]
inc r15d
mov rdx, qword [rbp - 0x20]
mov r8d, dword [rbp - 0x58]
jmp 0x180014ef2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, ebx
jmp 0x18001527a
cmp qword [0x18009db48], 0
je 0x180015273
cmp qword [0x18009db40], 0
mov byte [rbp - 0x68], 1
jne case.0x180014f26.70
mov byte [rbp - 0x68], 0
mov eax, dword [rbp - 0x68]
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.180083f10
mov rbx, qword [rsp + 0x4d8]
add rsp, 0x480
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001fa60
int3
call fcn.18001f8e0
int3
call fcn.18001fa20
int3