Function at 0x140001320
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x130], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
lea rax, [0x1400043b0]
mov edi, r14d
nop
inc rdi
lea rax, [rax + 4]
cmp dword [rax], r14d
jne 0x140001380
movabs r13, 0x3ffffffffffffffe
cmp rdi, r13
ja 0x140001e46
mov eax, 4
movabs r15, 0x3fffffffffffffff
cmp rdi, 3
ja 0x14000140b
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], 3
lea rbx, [rdi*4]
mov r8, rbx
lea rdx, [0x1400043b0]
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rbp + rbx + 0x80], r14d
mov rsi, qword [rbp + 0x98]
mov qword [rsp + 0x60], rsi
mov rdi, qword [rbp + 0x90]
mov r12, qword [rbp + 0x80]
jmp 0x1400014c3
mov rsi, rdi
or rsi, 3
cmp rsi, r13
jbe 0x14000145d
mov rsi, r13
mov qword [rsp + 0x60], r13
lea rcx, [r15*4]
cmp rcx, 0x1000
jb 0x140001488
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001e40
mov rcx, rax
call fcn.140002340
test rax, rax
je 0x140001df9
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140001490
cmp rsi, rax
cmovb rsi, rax
mov qword [rsp + 0x60], rsi
lea rcx, [rsi + 1]
cmp rcx, r15
ja 0x140001e40
lea rcx, [rcx*4]
test rcx, rcx
jne 0x140001427
mov r12, r14
jmp 0x140001490
call fcn.140002340
mov r12, rax
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rsi
lea rbx, [rdi*4]
mov r8, rbx
lea rdx, [0x1400043b0]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov dword [rbx + r12], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov rcx, r14
mov qword [rsp + 0x78], rcx
mov edx, 0xf
mov qword [rbp - 0x80], rdx
mov byte [rsp + 0x68], cl
mov dword [rsp + 0x50], 1
lea rbx, [rbp + 0x80]
cmp rsi, 3
cmova rbx, r12
lea rax, [rbp + 0x80]
cmova rax, r12
lea rdi, [rax + rdi*4]
cmp rbx, rdi
je 0x140001561
nop dword [rax + rax]
mov r9d, dword [rbx]
add r9d, 0xffffffe0
shr r9d, 6
cmp rcx, rdx
jae 0x140001543
lea rax, [rcx + 1]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x68]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000154d
lea rcx, [rsp + 0x68]
call fcn.140001fe0
add rbx, 4
cmp rbx, rdi
je 0x140001561
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rsp + 0x78]
jmp 0x140001510
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xa0]
call fcn.1400011c0
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x1400015b2
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400015ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400015ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001fa0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
lea rax, [0x140006000]
mov rdi, r14
inc rdi
lea rax, [rax + 4]
cmp dword [rax], 0
jne 0x140001602
cmp rdi, r13
ja 0x140001e4c
cmp rdi, 3
ja 0x14000165f
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], 3
lea rbx, [rdi*4]
mov r8, rbx
lea rdx, [0x140006000]
lea rcx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rbp + rbx - 0x38], r14d
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x58], rax
mov rdi, qword [rbp - 0x28]
mov r15, qword [rbp - 0x38]
jmp 0x140001716
mov r14, rdi
or r14, 3
cmp r14, r13
jbe 0x1400016b0
mov r14, r13
mov qword [rsp + 0x58], r13
lea rcx, [r15*4]
cmp rcx, 0x1000
jb 0x1400016e1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001e3a
mov rcx, rax
call fcn.140002340
test rax, rax
je 0x140001d38
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x1400016e9
cmp r14, 4
mov eax, 4
cmovb r14, rax
mov qword [rsp + 0x58], r14
lea rcx, [r14 + 1]
cmp rcx, r15
ja 0x140001e3a
lea rcx, [rcx*4]
test rcx, rcx
jne 0x14000167b
mov r15, rcx
jmp 0x1400016e9
call fcn.140002340
mov r15, rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], r14
lea rbx, [rdi*4]
mov r8, rbx
lea rdx, [0x140006000]
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
xor r14d, r14d
mov dword [r15 + rbx], r14d
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea rax, [0x140006070]
mov rsi, r14
nop
inc rsi
lea rax, [rax + 4]
cmp dword [rax], 0
jne 0x140001730
cmp rsi, r13
ja 0x140001e52
cmp rsi, 3
ja 0x14000178a
mov qword [rbp - 8], rsi
mov qword [rbp], 3
lea rbx, [rsi*4]
mov r8, rbx
lea rdx, [0x140006070]
lea rcx, [rbp - 0x18]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rbp + rbx - 0x18], r14d
mov r13, qword [rbp]
mov rsi, qword [rbp - 8]
mov r14, qword [rbp - 0x18]
xor eax, eax
jmp 0x140001847
mov rax, rsi
or rax, 3
cmp rax, r13
jbe 0x1400017aa
movabs rax, 0x3fffffffffffffff
lea rcx, [rax*4]
jmp 0x1400017de
mov r13, rax
cmp rax, 4
mov eax, 4
cmovb r13, rax
lea rcx, [r13 + 1]
movabs rax, 0x3fffffffffffffff
cmp rcx, rax
ja 0x140001e58
lea rcx, [rcx*4]
test rcx, rcx
je 0x14000181b
cmp rcx, 0x1000
jb 0x140001813
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001e58
mov rcx, rax
call fcn.140002340
test rax, rax
je 0x140001cf4
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000181b
call fcn.140002340
mov r14, rax
mov qword [rbp - 0x18], r14
mov qword [rbp - 8], rsi
mov qword [rbp], r13
lea rbx, [rsi*4]
mov r8, rbx
lea rdx, [0x140006070]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
xor eax, eax
mov dword [r14 + rbx], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov rcx, rax
mov qword [rbp - 0x48], rax
mov edx, 0xf
mov qword [rbp - 0x40], rdx
mov byte [rbp - 0x58], 0
mov dword [rsp + 0x50], 2
lea rbx, [rbp - 0x38]
cmp qword [rsp + 0x58], 3
cmova rbx, r15
lea rax, [rbp - 0x38]
cmova rax, r15
lea rdi, [rax + rdi*4]
cmp rbx, rdi
je 0x1400018dc
nop dword [rax]
mov r9d, dword [rbx]
add r9d, 0xffffffe0
shr r9d, 6
cmp rcx, rdx
jae 0x1400018c0
lea rax, [rcx + 1]
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x58]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400018c9
lea rcx, [rbp - 0x58]
call fcn.140001fe0
add rbx, 4
cmp rbx, rdi
je 0x1400018dc
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x48]
jmp 0x140001890
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x48]
call fcn.1400011c0
mov rbx, rax
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 7
cmova r9, qword [rbp + 0xa0]
mov rcx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp + 0xb0]
cmp rdx, rax
ja 0x140001953
lea rax, [rcx + rdx]
mov qword [rsp + 0x50], rax
mov qword [rbx + 0x10], rax
mov rdi, rbx
cmp r8, 7
jbe 0x140001936
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rsp + 0x50]
xor ecx, ecx
mov word [rdi + rax*2], cx
jmp 0x140001963
mov qword [rsp + 0x20], rdx
mov rcx, rbx
call fcn.140002150
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x18], xmm1
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov ecx, eax
mov qword [rbp - 0x68], rax
mov edx, 0xf
mov qword [rbp - 0x60], rdx
mov byte [rbp - 0x78], cl
mov dword [rsp + 0x50], 0xe
lea rbx, [rbp - 0x18]
cmp r13, 3
cmova rbx, r14
lea rax, [rbp - 0x18]
cmova rax, r14
lea rdi, [rax + rsi*4]
cmp rbx, rdi
je 0x140001a1c
mov r9d, dword [rbx]
add r9d, 0xffffffe0
shr r9d, 6
cmp rcx, rdx
jae 0x140001a00
lea rax, [rcx + 1]
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x78]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x78]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140001a09
lea rcx, [rbp - 0x78]
call fcn.140001fe0
add rbx, 4
cmp rbx, rdi
je 0x140001a1c
mov rdx, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x68]
jmp 0x1400019d0
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x28]
call fcn.1400011c0
nop
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rcx
mov dword [rbp + 0xc0], 0x68
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rcx
mov ecx, 5
mov word [rbp + 0x100], cx
mov dword [rbp + 0xfc], 1
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rdx, qword [rbp + 8]
cmp qword [rax + 0x18], 7
jbe 0x140001aa0
mov rax, qword [rax]
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x40], rcx
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001fa0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 7
jbe 0x140001b68
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001b63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
movdqa xmm0, xmmword [0x140006160]
movdqu xmmword [rbp + 0x38], xmm0
mov word [rbp + 0x28], bx
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140001bbf
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001bb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
movdqa xmm0, xmmword [0x140006160]
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x140001c1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
movdqa xmm0, xmmword [0x140006160]
movdqu xmmword [rbp + 0x18], xmm0
mov word [rbp + 8], bx
mov rdx, qword [rbp + 0x60]
cmp rdx, 7
jbe 0x140001c6e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
movdqa xmm0, xmmword [0x140006160]
movdqu xmmword [rbp + 0x58], xmm0
mov word [rbp + 0x48], bx
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140001cb5
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001cb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001cb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
cmp r13, 3
jbe 0x140001d04
lea rdx, [r13*4 + 4]
mov rax, r14
cmp rdx, 0x1000
jb 0x140001cfb
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001cfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14000237c
nop
mov rax, qword [rsp + 0x58]
cmp rax, 3
jbe 0x140001d47
lea rdx, [rax*4 + 4]
mov rax, r15
cmp rdx, 0x1000
jb 0x140001d3f
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001d3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14000237c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001fa0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
mov rax, qword [rbp + 0xb8]
cmp rax, 7
jbe 0x140001dc4
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001dbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001dbe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000237c
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 3
jbe 0x140001e08
lea rdx, [rdx*4 + 4]
mov rax, r12
cmp rdx, 0x1000
jb 0x140001e00
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14000237c
xor eax, eax
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140002320
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001100
nop
call fcn.140001100
int3
call fcn.1400011a0
nop
call fcn.1400011a0
nop
call fcn.1400011a0
int3
call fcn.140001100
int3