Function at 0x140003720
Capabilities:
Delete file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x248]
sub rsp, 0x320
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1400dad40]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov r12, rcx
mov qword [rbp + 0x28], rcx
xor r13d, r13d
mov rcx, qword [rcx + 0x10]
movabs rdi, 0x7ffffffffffffffe
mov rax, rdi
sub rax, rcx
cmp rax, 0xa
jb 0x140005b56
mov rax, r12
cmp qword [r12 + 0x18], 7
jbe 0x140003792
mov rax, qword [r12]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov eax, 0xa
mov qword [rsp + 0x20], rax
lea r9, str.127.0.0.1:
lea rcx, [rbp + 0x30]
call fcn.14000c8d0
nop
lea rcx, [rbp + 0xd0]
call fcn.140003520
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ab940
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recvfrom]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.Connection_to_adb]
movups xmmword [rax], xmm0
movzx ecx, byte [0x1400c0ee0]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
mov r9b, 1
lea r8, [rsp + 0x40]
mov edx, Ordinal_41
call fcn.140019e20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140003854
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000384f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000384f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.HD_Player.exe
lea rcx, [rsp + 0x40]
call fcn.14000b310
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xb0]
call fcn.140003090
nop
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140008dc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movdqa xmm6, xmmword [0x1400c2d90]
movdqa xmmword [rbp + 0xa0], xmm6
mov word [rbp + 0x90], r13w
lea rcx, [rbp + 0x70]
call fcn.140008b60
mov rdx, qword [rbp + 0x70]
mov r8, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x80]
cmp rax, 0xffffffffffffffff
je 0x140003920
lea rax, [rbp + 0x70]
cmp r8, 7
cmova rax, rdx
cmp word [rax + rcx*2 - 2], 0x5c
jne 0x140003920
dec rcx
mov qword [rbp + 0x80], rcx
lea rax, [rbp + 0x70]
cmp r8, 7
cmova rax, rdx
mov word [rax + rcx*2], r13w
mov r8, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x80]
mov rdx, qword [rbp + 0x70]
mov rax, rdi
sub rax, rcx
cmp rax, 0xb
jb 0x140005b5c
lea r9, [rbp + 0x70]
cmp r8, 7
cmova r9, rdx
mov qword [rsp + 0x30], listen
lea rax, str.HD_Adb.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.14000c8d0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x90]
call fcn.140008d20
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x1400039b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140003a00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rbp + 0xc0], xmm6
mov word [rbp + 0xb0], r13w
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140003a55
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 9
lea rdx, str.connected
lea rcx, [rsp + 0x40]
call fcn.14000b310
nop
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 8
jb 0x140005b62
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 8
lea r9, str.connect
lea rcx, [rsp + 0x60]
call fcn.14000c8d0
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x140003b21
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b1b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140003b63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003db1
call fcn.1400abbbc
test bl, bl
jne 0x140003b7f
lea rdx, str.Cant_connect_to_adb._Check_port_id_or_restart_pc
call fcn.140002af0
mov ecx, 0xfffffc67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Root_Access_Granted
lea rcx, [rbp - 0x80]
call fcn.14000b310
nop
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b68
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rsp + 0x40]
call fcn.14000c8d0
nop
mov r8d, Ordinal_41
lea rdx, str._shell_su__c__echo_Root_Access_Granted_
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx ebx, al
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140003c7a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140003cbf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003cba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rsp + 0x50], xmm6
mov word [rsp + 0x40], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140003d0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003d09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
test bl, bl
jne 0x140003d2a
lea rdx, str.Not_setted_root._Please__set_root_or_restart_pc
call fcn.140002af0
mov ecx, 0xfffffc67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ntohs]
movdqu xmmword [rbp - 0x70], xmm1
movsd xmm0, qword [str.Got_access_root]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [0x1400c10b8]
mov dword [rbp - 0x78], eax
movzx eax, word [0x1400c10bc]
mov word [rbp - 0x74], ax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rbp - 0x72], al
mov byte [rbp - 0x71], 0
mov r9b, 1
lea r8, [rbp - 0x80]
mov edx, Ordinal_41
call fcn.140019e20
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140003dbd
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003db8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003db8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 1
lea rdx, reloc.WS2_32.dll_gethostname
lea rcx, [rbp - 0x80]
call fcn.14000b310
nop
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b6e
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rsp + 0x40]
call fcn.14000c8d0
nop
mov r8d, Ordinal_41
lea rdx, str._shell_getprop_ro.build.version.release
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx ebx, al
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140003eb8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003eb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003eb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140003efd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ef8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ef8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rsp + 0x50], xmm6
mov word [rsp + 0x40], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140003f4c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
test bl, bl
jne 0x140003f68
lea rdx, str.Install_9_android
call fcn.140002af0
mov ecx, 0xfffffc67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
lea rdx, str.x86_64
lea rcx, [rbp - 0x80]
call fcn.14000b310
nop
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b74
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rsp + 0x40]
call fcn.14000c8d0
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_33
lea rdx, str._shell_getprop_ro.product.cpu.abi
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx ebx, al
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140004063
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000405d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000405d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400040a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400040a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rsp + 0x50], xmm6
mov word [rsp + 0x40], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400040f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400040f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
test bl, bl
jne 0x140004142
lea rdx, str.Install_android_with_support_x64
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, Ordinal_41
call fcn.140019e20
nop
lea rcx, [rsp + 0x60]
call fcn.140008f80
lea rdx, str.Install_android_9_with_support_x64
call fcn.140002af0
mov ecx, 0xfffffc67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_35
lea rdx, str.package:com.rexetstudio.blockstrike
lea rcx, [rbp - 0x80]
call fcn.14000b310
nop
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b7a
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rsp + 0x40]
call fcn.14000c8d0
nop
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str._shell_pm_list_packages
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx ebx, al
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x14000423d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004237
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004237
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140004282
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000427d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000427d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rsp + 0x50], xmm6
mov word [rsp + 0x40], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400042d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400042cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
test bl, bl
jne 0x1400042ed
lea rdx, str.Install_Block_Strike
call fcn.140002af0
mov ecx, 0xfffffc67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, rdi
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b80
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rsp + 0x40]
call fcn.14000c8d0
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str._shell_dumpsys_package_com.rexetstudio.blockstrike
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140001b10
nop
mov r8, rax
lea rdx, [rbp + 0xb0]
call fcn.140002230
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x1400043cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400043ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400043ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rbp - 0x50], xmm6
mov word [rbp - 0x60], r13w
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000441d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004417
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004417
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140004462
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000445d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000445d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rsp + 0x50], xmm6
mov word [rsp + 0x40], r13w
mov rax, rdi
mov r14, qword [rbp + 0xc0]
sub rax, r14
cmp rax, 0xb
jb 0x140005b86
lea r15, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova r15, qword [rbp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], r13
lea rsi, [r14 + 0xb]
mov ebx, 7
lea rdi, [rbp + 0x50]
cmp rsi, rbx
jbe 0x14000455a
mov rbx, rsi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x140004519
mov rbx, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14000454e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005b92
mov rcx, rax
call fcn.1400ab940
test rax, rax
je 0x140004547
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140004556
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140005b92
add rcx, rcx
jne 0x1400044e8
mov rdi, r13
jmp 0x140004556
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ab940
mov rdi, rax
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], rbx
lea rbx, [r14 + r14]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str._lib_arm64_]
movups xmmword [rbx + rdi], xmm0
mov eax, dword [0x1400c1348]
mov dword [rbx + rdi + 0x10], eax
movzx eax, word [0x1400c134c]
mov word [rbx + rdi + 0x14], ax
mov word [rdi + rsi*2], r13w
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ab940
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_select]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.Starting_injection]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400c1360]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
mov r9b, 1
lea r8, [rsp + 0x40]
mov edx, Ordinal_41
call fcn.140019e20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140004628
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004623
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004b39
call fcn.1400abbbc
mov byte [0x1400dbff8], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, 0xa
lea rdx, str.libB3ST.so
lea rcx, [rbp - 0x60]
call fcn.14000b310
nop
movabs r14, 0x7ffffffffffffffe
mov rax, r14
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b8c
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000c8d0
nop
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str._shell_su__c__ls
lea rcx, [rbp - 0x40]
call fcn.14000a430
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r9, [rbp + 0x50]
cmp qword [rbp + 0x68], 7
cmova r9, qword [rbp + 0x50]
mov rsi, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
sub rax, rsi
mov rdi, qword [rbp + 0x60]
cmp rdi, rax
ja 0x140004742
lea rax, [rdi + rsi]
mov qword [rbp - 0x70], rax
lea rbx, [rbp - 0x80]
cmp rcx, 7
cmova rbx, qword [rbp - 0x80]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rsi]
mov word [rbx + rax*2], r13w
lea rax, [rbp - 0x80]
jmp 0x140004753
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14000bce0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov r8d, 1
lea rdx, [0x1400c0d98]
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x140004818
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004812
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004812
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000485d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004858
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004858
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rsp + 0x50], xmm6
mov word [rsp + 0x40], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1400048ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rbp - 0x70], xmm6
mov word [rbp - 0x80], r13w
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x1400048f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
movdqu xmmword [rbp - 0x30], xmm6
mov word [rbp - 0x40], r13w
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140004946
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004941
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004941
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
test bl, bl
je 0x140004aad
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x80]
call fcn.14000a800
nop
lea r8, str._shell_su__c__rm
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14000a890
nop
lea r8, str.libmain.so_
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x80]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp]
call fcn.14000a800
nop
lea r8, str._shell_su__c__mv
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000a890
nop
lea r8, [0x1400c1400]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14000a890
nop
lea r8, [0x1400c13e8]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x80]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rbp]
call fcn.140008cb0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ab940
mov qword [rbp - 0x60], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_26]
movdqu xmmword [rbp - 0x50], xmm0
movups xmm0, xmmword [str.Downloading_file_injection]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400c1458]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1400c1460]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], 0
mov r9b, 1
lea r8, [rbp - 0x60]
mov edx, Ordinal_41
call fcn.140019e20
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140004b45
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004b40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov ecx, 0x40
call fcn.1400ab940
mov rcx, rax
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_gethostname]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.https:__b3stsqu4d.xyz_ModuleHack_libmain.so_downloadtrue]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400c1478]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400c1488]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x1400c1498]
movsd qword [rax + 0x30], xmm0
movzx eax, byte [0x1400c14a0]
mov byte [rcx + 0x38], al
mov byte [rcx + 0x39], 0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0xf0]
call fcn.140007880
nop
call fcn.14001ae40
mov rbx, rax
test rax, rax
je 0x140004c3c
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r8, qword [rsp + 0x40]
mov edx, 0x2712
mov rcx, rax
call fcn.14001d830
lea r8, [0x140002fa0]
mov edx, 0x4e2b
mov rcx, rbx
call fcn.14001d830
lea r8, [rbp + 0xf0]
mov edx, 0x2711
mov rcx, rbx
call fcn.14001d830
mov rcx, rbx
call fcn.14001aed0
mov rcx, rbx
call fcn.14001af00
lea rcx, [rbp + 0xf8]
call fcn.140009a10
test rax, rax
jne 0x140004c71
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp + 0xf0]
call fcn.140002fd0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140004cbe
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004cb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
mov rax, r14
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b98
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000c8d0
nop
mov r8d, Ordinal_41
lea rdx, str._shell_su__c__mount__o_remount_rw__data_
lea rcx, [rbp - 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140001b10
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140004d91
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x140004dd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004dd1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x80]
call fcn.14000a800
nop
lea r8, str._shell_su__c__mv
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14000a890
nop
mov r8d, listen
lea rdx, str.libmain.so
mov rcx, rax
call fcn.14000a430
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp + 0x50]
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x60]
call fcn.14000a890
nop
lea r8, str.libB3ST.so_
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x80]
call fcn.140008cb0
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x40]
call fcn.140003460
mov rbx, rax
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000a800
nop
lea r8, str._push
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000a870
nop
lea r8, str.__data_local_tmp_libmain.so
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000a800
nop
lea r8, str._shell_su__c__cp__data_local_tmp_libmain.so
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000a890
nop
lea r8, str.libmain.so_
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rsp + 0x60]
call fcn.14000a800
nop
lea r8, str._shell_su__c__rm__data_local_tmp_libmain.so
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
lea rcx, [rbp + 0xd0]
call fcn.140008ef0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.Starting_Block_Strike
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, Ordinal_41
call fcn.140019e20
nop
lea rcx, [rsp + 0x60]
call fcn.140008f80
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000a800
nop
mov r8d, Ordinal_50
lea rdx, str._shell_am_force_stop_com.rexetstudio.blockstrike
mov rcx, rax
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x70]
call fcn.140001b10
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140005159
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005153
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005153
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14000519f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005199
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005199
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x1400051e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400051dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400051dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
mov rax, r14
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b4a
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rbp - 0x60]
call fcn.14000c8d0
nop
mov r8d, 0x54
lea rdx, str._shell_am_start__n_com.rexetstudio.blockstrike_com.prime31.UnityPlayerNativeActivity
lea rcx, [rbp - 0x60]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x70]
call fcn.140001b10
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x1400052b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400052af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x1400052fb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400052f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x14000533e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005339
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005339
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htons]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Injection]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x1400c1778]
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
mov r9b, 1
lea r8, [rsp + 0x40]
mov edx, Ordinal_41
call fcn.140019e20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400053c5
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400053c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400053c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400abbbc
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov r9, rax
cmp rbx, 0x989680
jne 0x1400053e6
imul rbx, r9, 0x64
jmp 0x140005460
cmp rbx, 0x16e3600
jne 0x140005444
movabs r10, 0xb2f4fc0794908cf3
mov rax, r10
imul r9
add rdx, r9
sar rdx, 0x18
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
imul r8, rdx, 0x3b9aca00
imul rcx, rdx, 0x16e3600
sub r9, rcx
imul rcx, r9, 0x3b9aca00
mov rax, r10
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rbx, rdx
shr rbx, 0x3f
add rbx, rdx
add rbx, r8
jmp 0x140005460
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov r8d, 8
lea rdx, str.injected
lea rcx, [rbp - 0x80]
call fcn.14000b310
nop
mov rax, r14
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b50
movabs rsi, 0x2540be400
nop dword [rax]
nop dword [rax + rax]
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rax, qword [rbp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1400c1040]
lea rcx, [rsp + 0x40]
call fcn.14000c8d0
nop
mov r8d, gethostname
lea rdx, str._shell_su__c__ls__data_data_com.rexetstudio.blockstrike_
lea rcx, [rsp + 0x40]
call fcn.14000a430
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140002590
movzx edi, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x140005573
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000556d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005662
call fcn.1400abbbc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400055b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005669
call fcn.1400abbbc
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r13w
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140005605
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005600
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005670
call fcn.1400abbbc
test dil, dil
jne 0x1400058a3
lea rcx, [rbp + 0x20]
call fcn.140001500
mov rax, qword [rbp + 0x20]
sub rax, rbx
cmp rax, rsi
jge 0x140005677
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov r8d, 8
lea rdx, str.injected
lea rcx, [rbp - 0x80]
call fcn.14000b310
nop
mov rax, r14
mov rcx, qword [rbp + 0x40]
sub rax, rcx
cmp rax, 3
jb 0x140005b50
jmp 0x1400054b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rsp + 0x60]
call fcn.14000a800
nop
lea r8, str._shell_su__c__rm__data_data_com.rexetstudio.blockstrike_injected_
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000a800
nop
lea r8, str._shell_su__c__rm
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000a890
nop
lea r8, str.libmain.so_
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x80]
call fcn.14000a800
nop
lea r8, str._shell_su__c__mv
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14000a890
nop
lea r8, [0x1400c1400]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000a890
nop
lea r8, [0x1400c13e8]
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x80]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rsp + 0x60]
call fcn.14000a800
nop
lea r8, str._shell_am_force_stop_com.rexetstudio.blockstrike
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
mov byte [0x1400dbff8], 0
lea rdx, str.Error_injection__9364190290669237
call fcn.140002af0
mov ecx, 0xfffffc67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rsp + 0x60]
call fcn.14000a800
nop
lea r8, str._shell_su__c__rm__data_data_com.rexetstudio.blockstrike_injected_
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x40]
call fcn.14000a800
nop
lea r8, str._shell_su__c__rm
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000a890
nop
lea r8, str.libmain.so_
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
lea r8, [rbp + 0x30]
lea rdx, [0x1400c1040]
lea rcx, [rbp - 0x80]
call fcn.14000a800
nop
lea r8, str._shell_su__c__mv
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14000a890
nop
lea r8, [0x1400c1400]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000a790
nop
lea r8, [rbp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000a890
nop
lea r8, [0x1400c13e8]
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000a790
nop
mov r8, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x70]
call fcn.140001b10
lea rcx, [rbp]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x20]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x60]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x40]
call fcn.140008cb0
nop
lea rcx, [rsp + 0x40]
call fcn.140008cb0
nop
lea rcx, [rbp - 0x80]
call fcn.140008cb0
mov byte [0x1400dbff8], 0
lea rdx, [0x1400c18f8]
call fcn.140002af0
lea rdx, str.Injected_successfully
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, Ordinal_41
call fcn.140019e20
nop
lea rcx, [rsp + 0x60]
call fcn.140008f80
lea rdx, str.Thank_YOU__for_using_MODULE_HACK
lea rcx, [rsp + 0x60]
call fcn.140008fe0
nop
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, Ordinal_33
call fcn.140019e20
nop
lea rcx, [rsp + 0x60]
call fcn.140008f80
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x50]
call fcn.140008cb0
nop
lea rcx, [rbp + 0xb0]
call fcn.140008cb0
nop
lea rcx, [rbp + 0x70]
call fcn.140005ba0
nop
lea rcx, [rbp + 0xd0]
call fcn.140008f80
nop
lea rcx, [rbp + 0x30]
call fcn.140008cb0
nop
mov rcx, r12
call fcn.140008cb0
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.1400ab680
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.140001250
nop
call fcn.1400011b0
nop
call fcn.140001250
int3