Function at 0x140013590
Capabilities:
Check mutex on windows
Create directory
Get common file path
Query or enumerate registry value
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x468]
sub rsp, 0x530
mov qword [rbp], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r14, r9
mov r15, r8
mov rsi, rdx
mov rdi, rcx
xor r12d, r12d
mov dword [rsp + 0x50], r12d
lea rbx, [rcx + 0x18]
xor edx, edx
mov r8d, 0x208
mov rcx, rbx
call fcn.140017ce0
mov r9, qword [rbp + 0x490]
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.140012620
mov dword [rdi + 0x220], eax
lea eax, [rax + rax*4]
lea eax, [rax*2 + 1]
mov dword [rdi + 0x224], eax
mov dword [rsp + 0x54], 1
cmp byte [rdi + 0x240], r12b
jne 0x1400137f1
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x10]
call fcn.140017ce0
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x801a
xor ecx, ecx
call qword [sym.imp.ext_ms_win_shell32_shellfolders_l1_1_0.dll_SHGetFolderPathW]
mov r14d, eax
mov dword [rsp + 0x54], eax
test eax, eax
js 0x140013929
mov edx, 0x104
lea rcx, [rbp + 0x10]
cmp word [rcx], r12w
je 0x140013681
add rcx, 2
sub rdx, 1
jne 0x140013671
mov eax, 0x104
sub rax, rdx
mov r8, r12
test rdx, rdx
cmovne r8, rax
je 0x1400136f0
mov edx, 0x104
sub rdx, r8
lea rcx, [rbp + 0x10]
lea rcx, [rcx + r8*2]
je 0x1400136e1
lea rax, [rdx + 0x7ffffefa]
add rax, r8
lea r9, str.hpqLog
sub r9, rcx
nop dword [rax + rax]
test rax, rax
je 0x1400136e1
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x1400136e1
mov word [rcx], r8w
add rcx, 2
dec rax
sub rdx, 1
jne 0x1400136c0
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov word [rax], r12w
xor edx, edx
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
test eax, eax
jne 0x14001372a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0xb7
je 0x14001372a
test eax, eax
jg 0x14001371a
mov r14d, eax
mov dword [rsp + 0x54], eax
jmp 0x14001372a
movzx r14d, ax
or r14d, 0x80070000
mov dword [rsp + 0x54], r14d
test r14d, r14d
js 0x140013929
mov ecx, 0x104
lea rax, [rbp + 0x10]
nop dword [rax]
cmp word [rax], r12w
je 0x140013750
add rax, 2
sub rcx, 1
jne 0x140013740
mov eax, 0x104
sub rax, rcx
mov r8, r12
test rcx, rcx
cmovne r8, rax
je 0x1400137c0
mov edx, 0x104
sub rdx, r8
lea rcx, [rbp + 0x10]
lea rcx, [rcx + r8*2]
je 0x1400137b1
lea rax, [rdx + 0x7ffffefa]
add rax, r8
lea r9, [0x140036aec]
sub r9, rcx
nop word [rax + rax]
test rax, rax
je 0x1400137b1
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x1400137b1
mov word [rcx], r8w
add rcx, 2
dec rax
sub rdx, 1
jne 0x140013790
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov word [rax], r12w
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400137cd
mov r8, qword [rsi]
mov edx, 0x104
lea rcx, [rbp + 0x10]
call fcn.140014a40
lea r8, [rbp + 0x10]
mov edx, 0x104
mov rcx, rbx
call fcn.140025020
jmp 0x14001392d
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400137fe
mov r8, qword [rsi]
mov edx, 0x104
mov rcx, rbx
call fcn.140025020
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x70], xmm1
mov word [rbp - 0x80], r12w
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rbx + r8*2], r12w
jne 0x140013830
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140002c80
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], 0x100
lea r9, [rbp + 0x10]
mov r8d, 3
lea rdx, [rsp + 0x78]
call fcn.1400256f0
mov edi, eax
test eax, eax
jne 0x1400138d3
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x10]
lea r8, [rsp + 0x78]
mov edx, 0x104
lea rcx, [rbp + 0x220]
call fcn.1400252e0
mov edi, eax
test eax, eax
jne 0x1400138d3
xor r8d, r8d
lea rdx, [rbp + 0x220]
xor ecx, ecx
call qword [sym.imp.api_ms_win_shell_shdirectory_l1_1_0.dll_Ordinal_290]
mov edi, eax
cmp eax, 0xb7
cmove edi, r12d
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140013913
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001390e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001421d
call fcn.14000e830
movdqa xmm0, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
test edi, edi
je 0x14001392d
mov word [rbx], r12w
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x50], xmm1
mov word [rbp - 0x60], r12w
movabs r13, 0x7ffffffffffffffe
cmp word [rbx], 0
je 0x14001399e
movdqu xmmword [rbp - 0x30], xmm0
movdqu xmmword [rbp - 0x30], xmm1
mov word [rbp - 0x40], r12w
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140013970
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140002c80
lea rsi, [rbp - 0x40]
mov eax, 1
mov dword [rsp + 0x50], eax
mov rdi, qword [rbp - 0x68]
mov r14, qword [rbp - 0x80]
jmp 0x140013a17
movdqu xmmword [rbp - 0x70], xmm0
mov rbx, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x1400139b1
mov rsi, qword [rsi]
cmp rbx, 8
jae 0x1400139cd
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x80], xmm0
mov edi, 7
mov qword [rbp - 0x68], rdi
mov r14, qword [rbp - 0x80]
jmp 0x140013a06
mov rdi, rbx
or rdi, 7
cmp rdi, r13
cmova rdi, r13
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x80]
call fcn.140002ab0
mov r14, rax
mov qword [rbp - 0x80], rax
lea r8, [rbx*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140017630
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x70], rbx
lea rsi, [rbp - 0x80]
mov eax, 2
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r15, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x140013a2f
mov rsi, qword [rsi]
cmp r15, 8
jae 0x140013a48
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x70], 7
jmp 0x140013a81
mov rbx, r15
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x58]
call fcn.140002ab0
mov qword [rsp + 0x58], rax
lea r8, [r15*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140017630
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], r15
mov esi, dword [rsp + 0x50]
test sil, 2
je 0x140013ae4
and esi, 0xfffffffd
mov dword [rsp + 0x50], esi
cmp rdi, 8
jb 0x140013ad2
lea rdx, [rdi*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140013aca
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014223
mov rcx, r14
call fcn.14000e830
movdqa xmm0, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
test sil, 1
je 0x140013b43
and esi, 0xfffffffe
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140013b31
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014229
call fcn.14000e830
movdqa xmm0, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r12w
lea r10, [rsp + 0x58]
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 8
cmovae r10, r14
mov r12, qword [rsp + 0x68]
cmp r12, 1
jb 0x140013bc4
lea r11, [r10 + r12*2]
mov rcx, r10
lea rbx, [0x14003b3f0]
mov rax, r11
sub rax, rcx
sar rax, 1
je 0x140013bc4
cmp word [rcx], 0x3a
je 0x140013b8e
add rcx, 2
sub rax, 1
jmp 0x140013b7c
test rcx, rcx
je 0x140013bc4
mov r8d, 1
mov rdx, rbx
mov r9, rcx
sub r9, rbx
movzx eax, word [rdx]
cmp word [rdx + r9], ax
jne 0x140013bbe
add rdx, 2
sub r8, 1
jne 0x140013ba2
sub rcx, r10
sar rcx, 1
jmp 0x140013bcb
add rcx, 2
jmp 0x140013b73
mov rcx, 0xffffffffffffffff
test ecx, ecx
jle 0x140013c11
lea eax, [rcx + 1]
movsxd rdx, eax
cmp r12, rdx
cmovb rdx, r12
lea rcx, [rsp + 0x58]
cmp r13, 8
cmovae rcx, r14
sub r12, rdx
mov qword [rsp + 0x68], r12
lea r8, [r12*2 + 2]
lea rdx, [rcx + rdx*2]
call fcn.140017630
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r14, qword [rsp + 0x58]
xor ebx, ebx
mov edx, 0x2e
nop dword [rax + rax]
movsxd rcx, ebx
lea r9, [rsp + 0x58]
cmp r13, 8
cmovae r9, r14
cmp r12, 1
jb 0x140013cb1
lea rax, [r12 - 1]
cmp rcx, rax
ja 0x140013cb1
lea r10, [r9 + r12*2]
lea rbx, [r9 + rcx*2]
nop dword [rax + rax]
mov rax, r10
sub rax, rbx
sar rax, 1
je 0x140013cac
cmp word [rbx], 0x5c
je 0x140013c6b
add rbx, 2
sub rax, 1
jmp 0x140013c59
test rbx, rbx
je 0x140013cac
mov edx, 1
lea rax, [0x140036aec]
mov rcx, rax
mov r8, rbx
sub r8, rax
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x140013ca6
add rcx, 2
sub rdx, 1
jne 0x140013c85
sub rbx, r9
sar rbx, 1
mov edx, 0x2e
jmp 0x140013cb8
add rbx, 2
jmp 0x140013c50
mov edx, 0x2e
mov rbx, 0xffffffffffffffff
test ebx, ebx
js 0x140013edf
movsxd r15, ebx
cmp r12, r15
jb 0x14001423b
mov rax, r12
sub rax, r15
mov esi, 1
cmp rax, rsi
cmovb rsi, rax
cmp rsi, 1
jne 0x140013d0a
lea rax, [rsp + 0x58]
cmp r13, 8
cmovae rax, r14
mov word [rax + r15*2], dx
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r14, qword [rsp + 0x58]
jmp 0x140013c20
ja 0x140013e89
mov ecx, 1
sub rcx, rsi
mov rax, r13
sub rax, r12
cmp rcx, rax
jbe 0x140013e89
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, r12
cmp rax, rcx
jb 0x140014235
lea r14, [r12 + rcx]
mov rdi, r14
or rdi, 7
cmp rdi, rdx
jbe 0x140013d55
mov rdi, rdx
jmp 0x140013d76
mov rcx, r13
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp r13, rax
jbe 0x140013d6b
mov rdi, rdx
jmp 0x140013d76
lea rax, [rcx + r13]
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x58]
call fcn.140002ab0
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rdi
lea rdi, [r15 + r15]
mov r8, rdi
cmp r13, 8
jb 0x140013e32
mov r14, qword [rsp + 0x58]
mov rdx, r14
mov rcx, rax
call fcn.140017630
mov rcx, qword [rsp + 0x78]
mov eax, 0x2e
mov word [rdi + rcx], ax
sub r12, r15
sub r12, rsi
lea r8, [r12*2 + 2]
lea rax, [r15 + rsi]
lea rdx, [r14 + rax*2]
add rcx, 2
add rcx, rdi
call fcn.140017630
lea rdx, [r13*2 + 2]
cmp rdx, 0x1000
jb 0x140013e11
add rdx, 0x27
mov rcx, qword [r14 - 8]
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x14001422f
mov r14, rcx
mov rcx, r14
call fcn.14000e830
mov r14, qword [rsp + 0x78]
mov qword [rsp + 0x58], r14
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
jmp 0x140013c13
lea rdx, [rsp + 0x58]
mov r14, qword [rsp + 0x78]
mov rcx, r14
call fcn.140017630
mov eax, 0x2e
mov word [rdi + r14], ax
sub r12, r15
sub r12, rsi
lea r8, [r12*2 + 2]
lea rax, [r15 + rsi]
lea rdx, [rsp + 0x58]
lea rdx, [rdx + rax*2]
lea rcx, [r14 + 2]
add rcx, rdi
call fcn.140017630
mov qword [rsp + 0x58], r14
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
jmp 0x140013c13
mov rax, r12
sub rax, rsi
inc rax
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp r13, 8
cmovae rax, r14
lea rdi, [rax + r15*2]
sub r12, r15
sub r12, rsi
lea r8, [r12*2 + 2]
lea rdx, [rdi + rsi*2]
lea rcx, [rdi + 2]
call fcn.140017630
mov edx, 0x2e
mov word [rdi], dx
mov r13, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r14, qword [rsp + 0x58]
jmp 0x140013c20
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x70], xmm1
xor r15d, r15d
mov word [rbp - 0x80], r15w
mov esi, dword [rsp + 0x50]
or esi, 4
mov dword [rsp + 0x50], esi
mov rdx, qword [rsp + 0x68]
add rdx, 7
lea rcx, [rbp - 0x80]
call fcn.140015f30
lea r8d, [r15 + 7]
lea rdx, str.Global_
lea rcx, [rbp - 0x80]
call fcn.14000e4a0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
lea rcx, [rbp - 0x80]
call fcn.14000e4a0
lea rcx, [rbp - 0x60]
call fcn.140002a00
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rbp - 0x70]
movups xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r15w
and esi, 0xfffffffb
mov dword [rsp + 0x50], esi
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r15w
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r8, qword [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateMutexW]
mov rdi, qword [rbp + 0x470]
mov qword [rdi + 0x238], rax
cmp dword [rsp + 0x54], r15d
jl 0x140014158
mov rcx, rdi
call fcn.140014250
test eax, eax
je 0x140014158
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
mov r9, qword [rdi + 0x230]
lea edx, [rax + 2]
lea r8d, [r15 + 0x18]
lea rcx, [rbp - 0x40]
call fcn.14001ff90
test rax, rax
je 0x14001403a
cmp word [rbp - 0x38], 0x2f
jne 0x14001404a
cmp word [rbp - 0x32], 0x2f
jne 0x14001404a
cmp word [rbp - 0x2c], 0x20
jne 0x14001404a
cmp word [rbp - 0x26], 0x3a
jne 0x14001404a
cmp word [rbp - 0x20], 0x3a
jne 0x14001404a
cmp word [rbp - 0x1a], 0x2e
jne 0x14001404a
cmp word [rbp - 0x12], 0x7c
jne 0x14001404a
jmp 0x140014054
mov rcx, qword [rdi + 0x230]
call fcn.140025760
test eax, eax
jne 0x140014054
mov dl, 1
mov rcx, rdi
call fcn.140012b50
mov dword [rbp + 0x470], r15d
mov dword [rsp + 0x54], 4
mov rcx, qword [rbp + 0x488]
test rcx, rcx
je 0x1400140a3
mov dword [rsp + 0x78], r15d
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
xor r8d, r8d
lea rdx, str.QueuedWrites
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
je 0x1400140e3
mov rcx, qword [rbp + 0x480]
test rcx, rcx
je 0x1400140f3
mov dword [rsp + 0x78], r15d
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
xor r8d, r8d
lea rdx, str.QueuedWrites
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jne 0x1400140f3
cmp dword [rbp + 0x470], 0
setne al
mov byte [rdi + 0x228], al
cmp byte [rdi + 0x228], 0
je 0x14001414f
mov ecx, 0x50
call fcn.14000e7f0
mov rbx, rax
mov qword [rbp + 0x470], rax
test rax, rax
je 0x140014145
mov qword [rax], r15
mov qword [rax + 8], r15
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1400155e0
mov qword [rbx], rax
mov qword [rbx + 0x10], rdi
mov byte [rbx + 0x18], 0
mov qword [rbx + 0x20], r15
lea rcx, [rbx + 0x28]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_InitializeCriticalSection]
nop
jmp 0x140014148
mov rbx, r15
mov qword [rdi + 0x248], rbx
mov rcx, rdi
call fcn.140011a70
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001419a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014195
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014241
call fcn.14000e830
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400141ea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400141e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014217
call fcn.14000e830
movdqa xmm0, xmmword [0x14003a540]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r15w
mov rbx, qword [rsp + 0x578]
add rsp, 0x530
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14001bd00
int3
call fcn.14001bd00
nop
call fcn.14001bd00
nop
call fcn.14001bd00
int3
call fcn.14001bd00
int3
call fcn.140002a70
int3
call fcn.14000e480
nop
call fcn.14001bd00
int3