Function at 0x140090470
Capabilities:
Accept command line arguments
Create process on windows
Enumerate processes
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
xor r12d, r12d
mov edi, r12d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x70]
lea edx, [r12 + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400905b5
mov rcx, qword [rsp + 0x70]
lea rax, [rbp - 0x50]
lea r9d, [r12 + 4]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
lea edx, [r12 + 0x1a]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x1400904f0
mov ebx, dword [rbp - 0x50]
lea edi, [r12 + 1]
jmp 0x1400904f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x1400905bd
cmp dword [rsp + 0x60], r12d
jne 0x1400905c5
lea rcx, [rsp + 0x68]
call fcn.1400912b0
test eax, eax
jne 0x140090f40
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea rcx, [rsp + 0x70]
xor r9d, r9d
mov qword [rsp + 0x50], rcx
mov r8, rax
lea rcx, [rbp + 0x80]
xor edx, edx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserA]
test eax, eax
je 0x1400905a0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x68]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400905bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jne 0x140090f40
mov eax, dword [str.1.0.0]
lea rdx, [rbp - 0x48]
movdqa xmm1, xmmword [reloc.WS2_32.dll_getpeername]
lea rcx, [rbp + 0xf0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x48], eax
movzx eax, byte [0x1403214a8]
mov byte [rbp - 0x44], al
movdqu xmmword [rbp - 0x38], xmm1
mov byte [rbp - 0x43], r12b
call fcn.140010620
lea rcx, [rbp + 0xf0]
call fcn.14008fcc0
cmp byte [rbp + 0x1d0], r12b
jne 0x14009065d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x1b0]
call fcn.140011050
lea rdx, [0x140011070]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x60], 0xa
lea rcx, [rsp + 0x68]
call fcn.1400110b0
mov rcx, rax
call fcn.1400110c0
call fcn.140091050
int3
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor ecx, ecx
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [0x1403214ac]
mov rcx, rax
lea rdx, str.CONIN_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 1
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [0x1403214b8]
mov rcx, rax
lea rdx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Discord_ID:
call fcn.14000e3d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rsp + 0x70]
xorps xmm0, xmm0
mov qword [rbp - 0x80], r12
movups xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x70], r12b
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
call fcn.140011160
cmp qword [rbp - 0x78], 0x10
lea rsi, [rsp + 0x70]
mov rdi, qword [rbp - 0x80]
movabs r13, 0x7fffffffffffffff
cmovae rsi, qword [rsp + 0x70]
xorps xmm0, xmm0
mov qword [rbp - 0x60], r12
movups xmmword [rbp - 0x70], xmm0
cmp rdi, r13
jbe 0x140090741
call fcn.140002e20
int3
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x14009075c
mov qword [rbp - 0x60], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x70], xmm0
jmp 0x1400907a1
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14009076d
mov rbx, r13
jmp 0x140090779
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x70]
call fcn.140008ee0
lea r8, [rdi + 1]
mov qword [rbp - 0x70], rax
mov rdx, rsi
mov qword [rbp - 0x60], rdi
mov rcx, rax
mov qword [rbp - 0x58], rbx
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xf0]
call fcn.14008f020
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140011070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140011070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140011070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp byte [rbp + 0x1d1], r12b
jne 0x14009083e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x1b0]
call fcn.140011050
lea rdx, [0x140011070]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x60], 0xa
lea rcx, [rsp + 0x68]
call fcn.1400110b0
mov rcx, rax
call fcn.1400110c0
call fcn.140091050
int3
movdqa xmm1, xmmword [0x140327a50]
lea rdx, [rbp - 0x70]
mov eax, dword [0x1403214e8]
lea rcx, [rbp + 0x80]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
movsd xmm0, qword [str.Fivem_Client]
movsd qword [rbp - 0x70], xmm0
movdqu xmmword [rbp - 0x60], xmm1
mov byte [rbp - 0x64], r12b
call fcn.1400081d0
mov rbx, qword [rbp + 0x198]
xorps xmm0, xmm0
mov rdi, qword [rbp + 0x1a0]
movdqa xmm1, xmmword [0x140327a30]
movups xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0xa0], r12b
movdqu xmmword [rbp + 0xb0], xmm1
cmp rbx, rdi
je 0x140090927
mov rsi, qword [rbp + 0x90]
mov qword [rsp + 0x460], r14
mov r14, qword [rbp + 0x98]
mov qword [rsp + 0x468], r15
mov r15, qword [rbp + 0x80]
nop word [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x80]
cmp r14, 0x10
mov rcx, rbx
cmovae rdx, r15
cmp qword [rbx + 0x18], 0x10
jb 0x140090900
mov rcx, qword [rbx]
cmp r8, rsi
jne 0x14009090e
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140090917
add rbx, 0x40
cmp rbx, rdi
jne 0x1400908e0
mov r14, qword [rsp + 0x460]
mov r15, qword [rsp + 0x468]
lea rcx, [rbp + 0x80]
call fcn.140002f60
mov rdx, qword [rbp - 0x58]
mov rdi, qword [rbp + 0x1a0]
cmp rdx, 0x10
jb 0x140090978
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140090973
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140090973
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008d6e4
cmp rbx, rdi
jne 0x1400909c5
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.You_dont_have_access_to_this_product_
call fcn.14000e3d0
lea rdx, [0x140011070]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x60], 0xa
lea rcx, [rsp + 0x68]
call fcn.1400110b0
mov rcx, rax
call fcn.1400110c0
call fcn.140091050
int3
call fcn.1400a4e70
test al, al
je 0x140090f40
mov word [rbp - 0x12], r12w
lea rsi, [0x1403894f8]
nop
mov eax, dword [0x140321520]
lea rdx, [rsp + 0x70]
movsd xmm0, qword [str.ChromeBrowser]
lea rcx, [rbp - 0x70]
movsd qword [rbp - 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov dword [rbp - 0x18], eax
movzx eax, byte [0x140321524]
movsd xmm0, qword [str.DumpServer]
mov byte [rbp - 0x14], al
movzx eax, word [0x140321530]
movsd qword [rbp], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov word [rbp + 8], ax
movzx eax, word [0x140321540]
movsd xmm0, qword [str.ROSLauncher]
mov word [rbp + 0x28], ax
movzx eax, byte [0x140321542]
movsd qword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x2a], al
movzx eax, word [0x140321550]
movsd xmm0, qword [str.ROSService]
mov word [rbp + 0x48], ax
movzx eax, word [0x140321560]
movsd qword [rbp + 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov word [rbp + 0x68], ax
lea rax, [rbp - 0x20]
movsd xmm0, qword [str.SteamChild]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x10], reloc.WS2_32.dll_listen
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x13], r12b
mov qword [rbp + 0x10], 0xa
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa], r12b
mov qword [rbp + 0x30], ntohs
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2b], r12b
mov qword [rbp + 0x50], 0xa
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4a], r12b
mov qword [rbp + 0x70], 0xa
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x60], xmm0
mov byte [rbp + 0x6a], r12b
call fcn.1400109d0
mov ecx, dword [str.FiveM_]
lea rdx, [rbp - 0x48]
xorps xmm0, xmm0
mov qword [rbp - 0x38], 6
movups xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x48], ecx
mov r8, rax
movzx ecx, word [0x140321568]
mov word [rbp - 0x44], cx
lea rcx, [rbp + 0x80]
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x42], r12b
call fcn.14000ff40
mov rbx, rax
cmp rsi, rax
je 0x140090bd5
mov rdx, qword [0x140389510]
cmp rdx, 0x10
jb 0x140090b98
mov rcx, qword [0x1403894f8]
inc rdx
cmp rdx, 0x1000
jb 0x140090b93
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140090d45
mov rcx, r8
call fcn.14008d6e4
mov qword [0x140389508], r12
mov qword [0x140389510], 0xf
mov byte [0x1403894f8], r12b
movups xmm0, xmmword [rbx]
movups xmmword [0x1403894f8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140389508], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r12b
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140090c16
mov rcx, qword [rbp + 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140090c11
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090d45
call fcn.14008d6e4
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x90], r12
lea r9, [fcn.1400080a0]
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
lea rcx, [rbp - 0x20]
mov byte [rbp + 0x80], r12b
lea r8d, [rdx - 0x1b]
call fcn.14008d718
cmp qword [0x140389510], 0x10
mov rdi, rsi
mov dword [rbp + 0x200], 0x130
cmovae rdi, qword [0x1403894f8]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rbp + 0x200]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140090cdc
lea rdx, [rbp + 0x200]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
jne 0x140090cdc
nop dword [rax]
lea rax, [rbp + 0x22c]
mov r8, rdi
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140090cc3
inc rax
test ecx, ecx
jne 0x140090cb0
test edx, edx
je 0x140090d3d
lea rdx, [rbp + 0x200]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
je 0x140090ca0
mov eax, r12d
lea rcx, [0x14032156c]
mov dword [0x140389518], eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_FiveM_
call fcn.14000e3d0
lea rdx, [0x140011070]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x68], 1
call fcn.1400110c0
cmp dword [0x140389518], r12d
jne 0x140090d4c
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
jmp 0x1400909e0
mov eax, dword [rbp + 0x208]
jmp 0x140090cdf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140090d6a
imul rax, rax, 0x64
jmp 0x140090d88
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7ffffffdabf41bff
cmp rax, rcx
jge 0x140090dab
movabs rcx, 0x2540be400
add rcx, rax
mov qword [rsp + 0x68], rcx
jmp 0x140090db0
mov qword [rsp + 0x68], r13
lea rcx, [rsp + 0x68]
call fcn.1400118e0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_FreeConsole]
test rbx, rbx
je 0x140090de1
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x140389518]
mov dword [0x1403898e0], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x1403898e4], eax
call fcn.1400a4e10
test rax, rax
jne 0x140090ea8
call fcn.1400a2000
mov qword [0x140388b70], rax
cmp rax, 0xffffffffffffffff
je 0x140090f40
xorps xmm0, xmm0
mov qword [rbp - 0x80], r12
lea rcx, [rsp + 0x70]
movdqu xmmword [rsp + 0x70], xmm0
call fcn.140011b70
mov rdx, qword [rsp + 0x70]
lea rcx, [0x1403442e0]
mov r8, rdx
lea r9, [0x140347ee0]
sub r8, rcx
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx + r8], al
inc rcx
cmp rcx, r9
jne 0x140090e50
mov rcx, qword [0x140388b70]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x60], r12d
call fcn.1400a3330
mov rcx, qword [0x140388b70]
test rax, rax
jne 0x140090e91
call fcn.1400a2590
call fcn.140091050
int3
call fcn.1400a2590
test al, al
je 0x140090f40
lea rcx, [rsp + 0x70]
call fcn.14000ab40
mov rcx, qword [0x140389368]
call fcn.1400ab7f0
lea rdx, [rsp + 0x70]
call fcn.1400ab030
lea rcx, [rsp + 0x70]
call fcn.1400109c0
xor edx, edx
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140090eff
nop dword [rax]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140090ee0
call fcn.1401058e0
cmp byte [0x140389372], r12b
jne 0x140090f40
mov dword [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_200
nop word [rax + rax]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.1400110b0
mov rcx, rax
call fcn.140011350
cmp byte [0x140389372], r12b
je 0x140090f20
call fcn.140091050
int3