Function at 0x18001a760
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x340
mov qword [rax - 0x170], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x18008f230]
xor rax, rsp
mov qword [rsp + 0x330], rax
mov ebx, r9d
mov r13, rdx
mov r12, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0xb8], rdx
mov r14, qword [rsp + 0x3a0]
mov qword [rsp + 0x60], r14
call fcn.18001a584
nop
lea rax, vtable._AutoScanT_CollectSpynet__.0
mov qword [r12], rax
test dword [r12 + 0x18], 0x2000000
je 0x18001b5b0
xor edi, edi
mov qword [rsp + 0x58], rdi
mov esi, 0xe0
mov r8d, esi
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.180042350
mov dword [rsp + 0x100], esi
mov dword [rsp + 0x1c4], 0xb
mov dword [rsp + 0x104], ebx
mov rcx, qword [r12 + 8]
mov rax, qword [rcx + 0x48]
test rax, rax
je 0x18001b5a5
add rax, 0x90
cmp qword [rax + 0x18], 8
jb 0x18001a834
mov rax, qword [rax]
mov qword [rsp + 0x108], rax
call fcn.180008954
mov qword [rsp + 0x110], rax
mov rax, qword [r12 + 8]
mov rax, qword [rax + 0x48]
test rax, rax
je 0x18001b5a5
add rax, 0x130
cmp qword [rax + 0x18], 8
jb 0x18001a86b
mov rax, qword [rax]
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x100]
mov qword [r12 + 0x30], rax
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xc0], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
test r14, r14
je 0x18001abb3
mov ecx, edi
cmp byte [r14], dil
je 0x18001a8e2
mov rax, qword [0x1800910c4]
mov edx, 0x60003
cmp eax, edx
mov eax, edi
jb 0x18001a8d8
mov eax, 1
mov edx, 2
test eax, eax
cmovne ecx, edx
mov eax, ecx
or eax, 8
cmp byte [r14 + 0x10], dil
cmove eax, ecx
mov ebx, eax
or ebx, 0x10
cmp byte [r14 + 0x11], dil
cmove ebx, eax
mov byte [rsp + 0x30], dil
lea rcx, [rsp + 0x30]
call fcn.18002fcac
mov ecx, ebx
test eax, eax
js 0x18001a919
cmp byte [rsp + 0x30], dil
je 0x18001a919
or ecx, 4
mov dword [rsp + 0x124], ecx
call fcn.1800307a4
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x98], rdi
lea rcx, [rsp + 0x98]
call fcn.180031af8
cmp qword [rsp + 0x130], rdi
je 0x18001a992
cmp qword [rsp + 0x98], rdi
je 0x18001a992
call fcn.1800394ec
mov dword [rsp + 0x40], eax
shr rax, 0x20
mov dword [rsp + 0x44], eax
imul rax, qword [rsp + 0x98], 0x989680
mov rcx, qword [rsp + 0x40]
sub rcx, rax
mov rax, qword [rsp + 0x130]
cmp rcx, rax
cmova rax, rdi
mov qword [rsp + 0x130], rax
mov byte [rsp + 0x31], dil
lea rcx, [rsp + 0x31]
call fcn.18002fda8
test eax, eax
js 0x18001a9b1
movzx eax, byte [rsp + 0x31]
mov dword [rsp + 0x138], eax
lea rcx, [rsp + 0xdc]
call fcn.18002feac
mov ecx, dword [rsp + 0x13c]
test eax, eax
cmovns ecx, dword [rsp + 0xdc]
mov dword [rsp + 0x13c], ecx
mov rax, qword [r14 + 8]
mov qword [rsp + 0x150], rax
lea rcx, [rsp + 0xd0]
call fcn.18002ffa8
mov rcx, qword [rsp + 0x158]
test eax, eax
cmovns rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x158], rcx
lea rcx, [rsp + 0xc8]
call fcn.18003011c
mov rcx, qword [rsp + 0x160]
test eax, eax
cmovns rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0xc0]
call fcn.1800301f0
mov rcx, qword [rsp + 0x168]
test eax, eax
cmovns rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x168], rcx
call fcn.1800302e4
mov qword [rsp + 0x170], rax
mov qword [rsp + 0xa0], rdi
mov r9d, 1
lea r8, str.SystemSetup
lea rcx, [rsp + 0xa0]
call fcn.180036b18
mov esi, eax
mov rbx, qword [rsp + 0xa0]
test eax, eax
js 0x18001aab0
lea r8, [rsp + 0xf8]
lea rdx, str.Upgrade
mov rcx, rbx
call fcn.1800371fc
mov esi, eax
not esi
shr esi, 0x1f
test rbx, rbx
je 0x18001aac3
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x178], esi
call fcn.1800305b0
mov qword [rsp + 0x188], rax
mov rax, qword [r14 + 0x18]
mov qword [rsp + 0x180], rax
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x190], eax
cmp qword [r14 + 0x30], rdi
je 0x18001abb3
mov rdx, qword [r14 + 0x28]
test rdx, rdx
je 0x18001abb3
lea rcx, [rsp + 0x78]
call fcn.18001bbfc
mov r9, rdi
cmp qword [r14 + 0x28], rdi
jbe 0x18001ab90
mov r8, rdi
lea r10, [0x180071e48]
mov rdx, qword [r14 + 0x30]
mov rcx, r10
cmp qword [r8 + rdx], rdi
cmovne rcx, qword [r8 + rdx]
mov rax, qword [rsp + 0x78]
mov qword [rax + r8], rcx
mov rcx, r10
cmp qword [r8 + rdx + 8], rdi
cmovne rcx, qword [r8 + rdx + 8]
mov rax, qword [rsp + 0x78]
mov qword [rax + r8 + 8], rcx
mov rcx, r10
cmp qword [r8 + rdx + 0x10], rdi
cmovne rcx, qword [r8 + rdx + 0x10]
mov rax, qword [rsp + 0x78]
mov qword [rax + r8 + 0x10], rcx
mov rcx, r10
cmp qword [r8 + rdx + 0x18], rdi
cmovne rcx, qword [r8 + rdx + 0x18]
mov rax, qword [rsp + 0x78]
mov qword [rax + r8 + 0x18], rcx
inc r9
lea r8, [r8 + 0x20]
cmp r9, qword [r14 + 0x28]
jb 0x18001ab22
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x80]
sub rcx, rax
sar rcx, 5
mov dword [rsp + 0x1c0], ecx
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
xor r8d, r8d
xor edx, edx
call fcn.18001b9e0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0xe0], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xe8], xmm0
xor eax, eax
mov qword [rsp + 0x200], rax
mov dword [rsp + 0x208], eax
cmp byte [rsp + 0x390], dil
je 0x18001ad6a
lea rax, [rsp + 0x68]
mov qword [rsp + 0x1e0], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x1e8], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__lambda_d6f2dc62a0a3605996988509a2f00183___long_int__struct_tagAMProductInfo_const____ptr64_.0
mov qword [rsp + 0x210], rax
movaps xmm0, xmmword [rsp + 0x1e0]
movdqu xmmword [rsp + 0x218], xmm0
lea rax, [rsp + 0x210]
mov qword [rsp + 0x248], rax
lea rdx, [rsp + 0x210]
call fcn.1800319bc
mov ebx, eax
mov rcx, qword [rsp + 0x248]
test rcx, rcx
je 0x18001ac83
mov rax, qword [rcx]
lea rdx, [rsp + 0x210]
cmp rcx, rdx
setne dl
mov rax, qword [rax + 0x20]
call qword [case.0x180062b2e.0]
call fcn.18001a090
mov r8d, eax
test r14, r14
je 0x18001ac96
mov cl, byte [r14 + 0x38]
jmp 0x18001ac9d
mov cl, byte [rsp + 0x398]
movzx eax, cl
mov dword [rsp + 0x200], eax
test cl, cl
je 0x18001ad10
mov ecx, edi
test r14, r14
je 0x18001accd
mov rax, qword [r12 + 8]
mov rdx, qword [rax + 0x48]
test rdx, rdx
je 0x18001acd2
cmp word [rdx + 0x30], 0xa
jb 0x18001acd2
mov ecx, dword [r14 + 0x3c]
jmp 0x18001acd2
mov ecx, 4
sub ecx, 1
je 0x18001ad07
sub ecx, 1
je 0x18001acfc
sub ecx, 1
je 0x18001acf1
cmp ecx, 1
jne 0x18001ad10
bts dword [rsp + 0x124], 0xb
jmp 0x18001ad10
bts dword [rsp + 0x124], 0xa
jmp 0x18001ad10
bts dword [rsp + 0x124], 9
jmp 0x18001ad10
bts dword [rsp + 0x124], 8
mov dword [rsp + 0x204], ebx
mov eax, edi
test r8d, r8d
sete al
mov dword [rsp + 0x208], eax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x1c8], rax
mov rdx, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
cmp rdx, rcx
je 0x18001ad6a
sub rcx, rdx
sar rcx, 5
mov dword [rsp + 0x140], ecx
mov rax, rdi
test ecx, ecx
cmovne rax, rdx
mov qword [rsp + 0x148], rax
mov rsi, rdi
mov qword [rsp + 0x38], rdi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x260], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x270], xmm1
movdqa xmmword [rsp + 0x280], xmm0
movdqa xmmword [rsp + 0x290], xmm1
movdqa xmmword [rsp + 0x2a0], xmm0
movdqa xmmword [rsp + 0x2b0], xmm1
mov qword [rsp + 0x48], rdi
lea r15, str.SOFTWAREPoliciesMicrosoftMicrosoft_Antimalware
xor edx, edx
lea r8d, [rdx + 0x4e]
lea rcx, [rsp + 0x2c0]
call fcn.180042350
mov qword [rsp + 0xa8], rdi
mov r9d, 1
mov r8, qword [r15]
lea rcx, [rsp + 0xa8]
call fcn.180036c24
test eax, eax
js 0x18001aead
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x18001ae07
call fcn.180040d20
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x48]
lea rdx, str.PartnerGUID
mov rbx, qword [rsp + 0xa8]
mov rcx, rbx
call fcn.180037258
test eax, eax
js 0x18001aeb5
mov r9, qword [rsp + 0x48]
lea r8, str._s
mov edx, 0x27
lea rcx, [rsp + 0x2c0]
call fcn.18001a4dc
test eax, eax
js 0x18001aeb5
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.ole32.dll_IIDFromString]
test eax, eax
js 0x18001aeb5
lea rax, str.PartnerGuid
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x268], rax
mov esi, 1
mov qword [rsp + 0x38], rsi
test rbx, rbx
je 0x18001ae9b
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x40], rdi
mov rax, qword [r13 + 0x48]
test rax, rax
jne 0x18001aed8
mov eax, edi
jmp 0x18001aedb
mov rbx, qword [rsp + 0xa8]
test rbx, rbx
je 0x18001aec3
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
add r15, 8
lea rax, [0x18008d660]
cmp r15, rax
je 0x18001ae9b
jmp 0x18001adba
mov eax, dword [rax + 0x34]
bt eax, 0x11
jae 0x18001afcb
mov qword [rsp + 0xb0], rdi
test r14, r14
je 0x18001afcb
mov r9d, 0xf003f
lea r8, str.SOFTWAREMicrosoftRemovalToolsMpGears
lea rcx, [rsp + 0xb0]
call fcn.180036c24
mov rbx, qword [rsp + 0xb0]
test eax, eax
js 0x18001afbd
lea r8, [rsp + 0x34]
lea rdx, str.HeartbeatTrackingIndex
mov rcx, rbx
call fcn.1800371fc
mov r8d, 1
test eax, eax
cmovns r8d, dword [rsp + 0x34]
lea eax, [r8 + 1]
mov dword [rsp + 0x34], eax
lea rdx, [0x1800729ac]
lea rcx, [rsp + 0x40]
call fcn.1800363e0
test eax, eax
js 0x18001afbd
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x90], eax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov r8d, r9d
lea rdx, str.HeartbeatTrackingIndex
mov rcx, rbx
call fcn.1800372d0
test eax, eax
js 0x18001afbd
mov rcx, rsi
add rcx, rcx
lea rax, str.MsrtHeartbeatIndex
mov qword [rsp + rcx*8 + 0x260], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + rcx*8 + 0x268], rax
inc rsi
mov qword [rsp + 0x38], rsi
test rbx, rbx
je 0x18001afcb
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15d, edi
mov rcx, qword [r13 + 0x48]
test rcx, rcx
je 0x18001b5bb
add rcx, 0xf0
cmp qword [rcx + 0x18], 8
jb 0x18001afec
mov rcx, qword [rcx]
cmp rsi, 6
jae 0x18001b01c
test rcx, rcx
je 0x18001b01c
mov rax, rsi
add rax, rax
lea rdx, str.ParentProcess
mov qword [rsp + rax*8 + 0x260], rdx
mov qword [rsp + rax*8 + 0x268], rcx
inc rsi
mov qword [rsp + 0x38], rsi
jmp 0x18001b0ac
lea rbx, [0x18008d218]
mov rcx, qword [r13 + 0x48]
test rcx, rcx
je 0x18001b5c6
add rcx, 0xd0
cmp qword [rcx + 0x18], 8
jb 0x18001b0d1
mov rcx, qword [rcx]
cmp rsi, 6
jae 0x18001b101
test rcx, rcx
je 0x18001b101
mov rax, rsi
add rax, rax
lea rdx, str.UIMode
mov qword [rsp + rax*8 + 0x260], rdx
mov qword [rsp + rax*8 + 0x268], rcx
inc rsi
mov qword [rsp + 0x38], rsi
jmp 0x18001b128
test r15d, r15d
jns 0x18001b177
mov rax, qword [0x18008d218]
cmp rax, rbx
je 0x18001b161
test byte [rax + 0x1c], 1
je 0x18001b161
lfence
mov edx, 0xd
mov r9d, r15d
lea r8, [0x180072e70]
mov rcx, qword [0x18008d218]
mov rcx, qword [rcx + 0x10]
call fcn.180001330
mov rax, rsi
add rax, rax
mov qword [rsp + rax*8 + 0x260], rdi
mov qword [rsp + rax*8 + 0x268], rdi
mov rcx, qword [r13 + 0x48]
test rcx, rcx
je 0x18001b5d1
add rcx, 0x110
cmp qword [rcx + 0x18], 8
jb 0x18001b195
mov rcx, qword [rcx]
cmp rsi, 6
jae 0x18001b1c5
test rcx, rcx
je 0x18001b1c5
mov rax, rsi
add rax, rax
lea rdx, str.MpGearVersion
mov qword [rsp + rax*8 + 0x260], rdx
mov qword [rsp + rax*8 + 0x268], rcx
inc rsi
mov qword [rsp + 0x38], rsi
jmp 0x18001b1e4
test r15d, r15d
jns 0x18001b233
mov rax, qword [0x18008d218]
cmp rax, rbx
je 0x18001b21d
test byte [rax + 0x1c], 1
je 0x18001b21d
lfence
mov edx, 0xe
mov r9d, r15d
lea r8, [0x180072e70]
mov rcx, qword [0x18008d218]
mov rcx, qword [rcx + 0x10]
call fcn.180001330
mov rax, rsi
add rax, rax
mov qword [rsp + rax*8 + 0x260], rdi
mov qword [rsp + rax*8 + 0x268], rdi
test r14, r14
je 0x18001b3e0
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x18001b24b
call fcn.180040d20
mov qword [rsp + 0x58], rdi
call fcn.180022a34
mov r14d, eax
test eax, eax
jns 0x18001b29d
mov rax, qword [0x18008d218]
cmp rax, rbx
je 0x18001b339
test byte [rax + 0x1c], 1
je 0x18001b339
lfence
mov edx, 0x25
mov r9d, r14d
lea r8, [0x180073638]
mov rcx, qword [0x18008d218]
mov rcx, qword [rcx + 0x10]
call fcn.180001330
jmp 0x18001b339
mov byte [rsp + 0xd8], dil
mov ecx, 1
mov rax, qword [0x180091120]
call qword [case.0x180062b2e.0]
mov r14d, eax
test eax, eax
js 0x18001b5dc
call fcn.180021d4c
mov r14d, eax
test eax, eax
jns 0x18001b313
mov rax, qword [0x18008d218]
cmp rax, rbx
je 0x18001b303
test byte [rax + 0x1c], 1
je 0x18001b303
lfence
mov edx, 0x26
mov r9d, r14d
lea r8, [0x180073638]
mov rcx, qword [0x18008d218]
mov rcx, qword [rcx + 0x10]
call fcn.180001330
nop
mov rax, qword [0x180091148]
call qword [case.0x180062b2e.0]
nop
jmp 0x18001b334
lea rcx, [rsp + 0x58]
call fcn.180021f20
mov r14d, eax
call fcn.180021cdc
nop
mov rax, qword [0x180091148]
call qword [case.0x180062b2e.0]
nop
call fcn.1800229c8
test r14d, r14d
js 0x18001b612
cmp rsi, 6
jae 0x18001b377
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x18001b377
mov rcx, rsi
add rcx, rcx
lea rdx, str.AsimovDeviceTicket
mov qword [rsp + rcx*8 + 0x260], rdx
mov qword [rsp + rcx*8 + 0x268], rax
inc rsi
mov qword [rsp + 0x38], rsi
jmp 0x18001b391
test r15d, r15d
jns 0x18001b3e0
mov rax, qword [0x18008d218]
cmp rax, rbx
je 0x18001b3ca
test byte [rax + 0x1c], 1
je 0x18001b3ca
lfence
mov edx, 0xf
mov r9d, r15d
lea r8, [0x180072e70]
mov rcx, qword [0x18008d218]
mov rcx, qword [rcx + 0x10]
call fcn.180001330
mov rax, rsi
add rax, rax
mov qword [rsp + rax*8 + 0x260], rdi
mov qword [rsp + rax*8 + 0x268], rdi
lea rax, [rsi - 1]
cmp rax, 5
ja 0x18001b401
lea rax, [rsp + 0x260]
mov qword [rsp + 0x198], rax
mov dword [rsp + 0x1a0], esi
mov rcx, r12
call fcn.18001a714
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18001b41a
call fcn.180040d20
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x18001b42a
call fcn.180040d20
nop
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x18001b484
mov rdx, qword [rsp + 0xf0]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b46b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b61e
call fcn.180040d20
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], rdi
mov rax, qword [rsp + 0x68]
mov rsi, qword [rax]
mov qword [rax], rax
mov rax, qword [rsp + 0x68]
mov qword [rax + 8], rax
mov qword [rsp + 0x70], rdi
mov rcx, qword [rsp + 0x68]
cmp rsi, rcx
je 0x18001b4cd
mov rbx, qword [rsi]
lea rcx, [rsi + 0x10]
call fcn.180005f20
mov edx, 0x30
mov rcx, rsi
call fcn.180040d20
mov rsi, rbx
mov rcx, qword [rsp + 0x68]
cmp rbx, rcx
jne 0x18001b4a7
mov edx, 0x30
call fcn.180040d20
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18001b52c
mov rdx, qword [rsp + 0x88]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b516
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001b624
call fcn.180040d20
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], rdi
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x18001b53f
call fcn.180040d20
nop
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x18001b552
call fcn.180040d20
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x18001b565
call fcn.180040d20
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x18001b575
call fcn.180040d20
nop
mov rax, r12
mov rcx, qword [rsp + 0x330]
xor rcx, rsp
call fcn.180040cc0
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 0x80004005
call fcn.1800358d8
nop
mov ecx, 0x80510008
call fcn.1800358d8
nop
mov ecx, 0x80004005
call fcn.1800358d8
nop
mov ecx, 0x80004005
call fcn.1800358d8
nop
mov ecx, 0x80004005
call fcn.1800358d8
nop
lfence
mov rcx, qword [0x18008d218]
cmp rcx, rbx
je 0x18001b609
test byte [rcx + 0x1c], 1
je 0x18001b609
mov edx, 0x24
mov r9d, eax
lea r8, [0x180073638]
mov rcx, qword [rcx + 0x10]
call fcn.180001330
mov ecx, r14d
call fcn.1800358d8
nop
lfence
mov ecx, r14d
call fcn.1800358d8
nop
call fcn.18004afbc
nop
call fcn.18004afbc
int3