Function at 0x140001230
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x16e0]
mov eax, 0x17e0
call fcn.140019d30
sub rsp, rax
mov rax, qword [0x140027008]
xor rax, rsp
mov qword [rbp + 0x16d0], rax
xor r13d, r13d
lea rcx, [0x140023678]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140001ec5
lea rdx, str.DecryptStart
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140001ec5
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
lea r8d, [r13 + 0x10]
lea rdx, str.WhatAppDumpX.dll
lea rcx, [rsp + 0x78]
call fcn.140002150
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea r12, [r13 - 1]
test rax, rax
je 0x14000143b
mov r8d, 0x104
lea rdx, [rbp + 0x290]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14000143b
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
lea rax, [rbp + 0x290]
mov r8, r12
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140001330
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x28]
call fcn.140002150
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140001388
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001382
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f02
call fcn.1400024fc
nop
lea rdi, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
setae r14b
mov rbx, qword [rbp - 0x28]
cmovae rdi, rbx
mov rsi, qword [rbp - 0x18]
test rsi, rsi
je 0x14000147f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], rax
mov dword [rbp + 0x2e8], eax
xor edx, edx
mov r8d, 0xa3
lea rcx, [rbp + 0x2ed]
call fcn.140004430
mov byte [rbp + 0x2ec], 1
lea rax, [rsi - 1]
mov r8, r12
cmp rax, r12
cmovb r8, rax
add r8, rdi
movzx eax, byte [r8]
cmp byte [rbp + rax + 0x290], 0
jne 0x140001436
nop dword [rax]
cmp r8, rdi
je 0x14000147f
dec r8
movzx eax, byte [r8]
cmp byte [rbp + rax + 0x290], 0
je 0x140001420
sub r8, rdi
jmp 0x140001482
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140001388
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001382
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f02
jmp 0x140001382
mov r8, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
test r8, r8
je 0x14000158f
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp - 0x28]
test r14b, r14b
cmovne rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.140002150
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x14000151e
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001519
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f26
call fcn.1400024fc
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rsp + 0x68], xmm1
lea r9, [rsp + 0x58]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae r9, rcx
movq rsi, xmm1
mov rax, qword [rbp - 0x30]
cmp rsi, rax
ja 0x140001583
lea rdi, [rbp - 0x48]
cmp rax, 0x10
cmovae rdi, qword [rbp - 0x48]
mov qword [rbp - 0x38], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rdi
call fcn.140007f40
mov byte [rdi + rsi], 0
jmp 0x14000158f
mov rdx, rsi
lea rcx, [rbp - 0x48]
call fcn.140002250
mov rbx, qword [rsp + 0x68]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rbx
cmp rax, 5
jb 0x140001f0e
lea r15, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae r15, qword [rsp + 0x58]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
lea r14, [rbx + 5]
mov edi, 0xf
lea rsi, [rbp - 0x68]
cmp r14, rdi
jbe 0x140001652
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x140001614
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400024c0
test rax, rax
je 0x140001f26
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000164e
mov eax, 0x16
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000163c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f08
jmp 0x1400015f5
test rcx, rcx
je 0x14000164b
call fcn.1400024c0
mov rsi, rax
jmp 0x14000164e
mov rsi, r13
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.140007f40
mov eax, dword [str.data]
mov dword [rsi + rbx], eax
movzx eax, byte [0x1400236c8]
mov byte [rsi + rbx + 4], al
mov byte [rsi + r14], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1400016be
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f26
call fcn.1400024fc
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [rsp + 0x68], xmm1
lea rcx, [rsp + 0x58]
movq rdx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0x10
cmovae rcx, rdx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x140001710
lea r9d, [rax + 0x10]
lea r8, str.PCWhatsApp
lea rdx, [0x1400236d0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdi, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdi, qword [rsp + 0x58]
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, r14d
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rsi, eax
mov r15d, 0xfeff
test eax, eax
jg 0x14000175d
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.140001fb0
xor r14d, r14d
jmp 0x1400017db
lea eax, [rsi + 1]
movsxd rcx, eax
mov eax, 2
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.140002504
mov rbx, rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rsi
xor r14d, r14d
mov word [rbx + rsi*2], r14w
cmp word [rbx], r15w
jne 0x1400017b2
test esi, esi
jle 0x1400017b2
lea rsi, [rbx + 2]
mov rdi, rbx
rep movsw word [rdi], word [rsi]
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.140001fb0
mov edx, 2
mov rcx, rbx
call fcn.1400024fc
movups xmm0, xmmword [rbp - 8]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rbp + 8]
movups xmmword [rbp - 0x58], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
lea rsi, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
setae byte [rsp + 0x41]
cmovae rsi, qword [rbp - 0x68]
movabs rax, 0x7ffffffffffffffe
mov rdi, qword [rbp - 0x58]
cmp rdi, rax
ja 0x140001f14
mov r13d, 7
mov qword [rbp - 0x70], r13
cmp rdi, 8
jae 0x14000183b
mov qword [rbp - 0x78], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x78], xmm0
movq r15, xmm0
jmp 0x1400018e8
mov r13, rdi
or r13, 7
cmp r13, rax
jbe 0x14000185a
mov r13, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140001889
mov eax, 0xa
cmp r13, rax
cmovb r13, rax
lea rcx, [r13 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140001efc
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400018b5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001efc
mov rcx, rax
call fcn.1400024c0
test rax, rax
je 0x140001f1a
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x1400018c7
test rcx, rcx
je 0x1400018c4
call fcn.1400024c0
mov r15, rax
jmp 0x1400018c7
mov r15, r14
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], r13
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, r15
call fcn.140007f40
nop
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x4a0]
call fcn.140004430
lea rcx, [rsp + 0x78]
cmp r13, 8
setae sil
mov byte [rsp + 0x40], sil
cmovae rcx, r15
lea rdx, [rbp + 0x4a0]
sub rdx, rcx
nop dword [rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140001920
lea rdx, [0x14002364c]
lea rcx, [rbp + 0x4a0]
call qword [sym.imp.SHLWAPI.dll_StrCatW]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x4a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x48], rax
cmp rax, 0xffffffffffffffff
jne 0x140001974
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.FindFirstFileA_error__d_n
call fcn.140001010
mov rdi, qword [rsp + 0x48]
nop dword [rax]
movzx ecx, word [rbp + 0x6c]
movzx eax, word [rbp + 0x6e]
cmp cx, 0x2e
jne 0x1400019ac
test ax, ax
je 0x140001d53
cmp cx, cx
jne 0x1400019ac
cmp ax, cx
jne 0x1400019ac
cmp word [rbp + 0x70], 0
je 0x140001d53
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x290]
call fcn.140004430
lea rcx, [rsp + 0x78]
test sil, sil
cmovne rcx, r15
lea rdx, [rbp + 0x290]
sub rdx, rcx
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400019e0
lea rcx, [rbp + 0x290]
sub rcx, 2
nop dword [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140001a00
mov eax, dword [0x1400236e0]
mov dword [rcx], eax
lea rcx, [rbp + 0x290]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140001a20
lea rdi, [rbp + 0x6c]
xor edx, edx
movzx eax, word [rdi + rdx*2]
mov word [rcx + rdx*2], ax
lea rdx, [rdx + 1]
test ax, ax
jne 0x140001a30
xor r8d, r8d
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x290]
call qword [rsp + 0x50]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x6b0]
call fcn.140004430
lea rdi, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdi, qword [rbp - 0x48]
mov r14d, dword [rbp - 0x38]
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rsi, eax
test eax, eax
jg 0x140001ab1
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140001fb0
xor r14d, r14d
jmp 0x140001b33
lea eax, [rsi + 1]
movsxd rcx, eax
mov eax, 2
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.140002504
mov rbx, rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rsi
xor r14d, r14d
mov word [rbx + rsi*2], r14w
mov eax, 0xfeff
cmp word [rbx], ax
jne 0x140001b0a
test esi, esi
jle 0x140001b0a
lea rsi, [rbx + 2]
mov rdi, rbx
rep movsw word [rdi], word [rsi]
mov rdx, rbx
lea rcx, [rbp + 0x18]
call fcn.140001fb0
mov edx, 2
mov rcx, rbx
call fcn.1400024fc
movups xmm0, xmmword [rbp + 0x18]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rbp + 0x28]
movups xmmword [rbp + 8], xmm1
lea rcx, [rbp - 8]
mov rsi, qword [rbp + 0x10]
cmp rsi, 8
setae bl
mov rdi, qword [rbp - 8]
cmovae rcx, rdi
lea rdx, [rbp + 0x6b0]
sub rdx, rcx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140001b60
lea rcx, [rbp + 0x6b0]
sub rcx, 2
nop dword [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140001b80
movups xmm0, xmmword [str.ChatViewChatView.exe]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x1400236f8]
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [0x140023708]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [0x140023710]
mov dword [rcx + 0x28], eax
movzx eax, word [0x140023714]
mov word [rcx + 0x2c], ax
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x8c0]
call fcn.140004430
mov rcx, r14
nop word [rax + rax]
movzx eax, word [rbp + rcx + 0x290]
mov word [rbp + rcx + 0x8c0], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140001be0
lea rcx, [rbp + 0x8c0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140001c04
movups xmm0, xmmword [str.userdata_user.db]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x140023728]
movups xmmword [rcx + 0x10], xmm1
mov eax, dword [0x140023738]
mov dword [rcx + 0x20], eax
movzx eax, word [0x14002373c]
mov word [rcx + 0x24], ax
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xad0]
call fcn.140004430
mov rcx, r14
nop
movzx eax, word [rbp + rcx + 0x6b0]
mov word [rbp + rcx + 0xad0], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140001c50
lea rcx, [rbp + 0xad0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140001c74
mov eax, dword [0x140023740]
mov dword [rcx], eax
lea rcx, [rbp + 0xad0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140001c91
lea r8, [rbp + 0x8c0]
xor edx, edx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [r8 + rdx*2]
mov word [rcx + rdx*2], ax
lea rdx, [rdx + 1]
test ax, ax
jne 0x140001cb0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x12d0]
mov qword [rsp + 0x20], rax
mov r9d, r12d
lea r8, [rbp + 0xad0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x140001d04
lea rcx, str.error
call fcn.140001010
lea rcx, [rbp + 0x12d0]
call fcn.14000a834
test bl, bl
je 0x140001d49
lea rdx, [rsi*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140001d41
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f20
mov rcx, rdi
call fcn.1400024fc
movzx esi, byte [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
lea rdx, [rbp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140001980
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
test sil, sil
je 0x140001dad
lea rdx, [r13*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140001da4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f1a
mov rcx, r15
call fcn.1400024fc
nop
cmp byte [rsp + 0x41], 0
je 0x140001def
mov rdx, qword [rbp - 0x50]
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001de9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f26
call fcn.1400024fc
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140001e2a
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f2c
call fcn.1400024fc
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140001e77
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f32
call fcn.1400024fc
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x140001ec1
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ebc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f38
call fcn.1400024fc
xor eax, eax
jmp 0x140001ecc
mov rax, 0xffffffffffffffff
mov rcx, qword [rbp + 0x16d0]
xor rcx, rsp
call fcn.1400024a0
lea r11, [rsp + 0x17e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001170
nop
call fcn.14000ad20
nop
call fcn.140001170
int3
call fcn.140001210
nop
call fcn.140001210
int3
call fcn.14000ad20
nop
call fcn.14000ad20
nop
call fcn.14000ad20
nop
call fcn.14000ad20
nop
call fcn.14000ad20
nop
call fcn.14000ad20
int3