Function at 0x14001c6b0
Capabilities:
Create process on windows
Create process suspended
Execute command
Resume thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
mov rax, qword [0x1400bf300]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
mov rsi, rdx
mov r14d, ecx
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], 0x67f547
mov dword [rsp + 0x20], 0x3c23fc
mov r9d, 0xfcad23
mov r8d, 0x9bff4a
lea rdx, str.CrackPipe
lea rcx, [0x1400bfc50]
call fcn.14001d740
xor edx, edx
lea rcx, [0x1400bfc50]
call fcn.14001d980
mov r8d, 3
lea rdx, str.Welcome_to
lea rcx, [0x1400bfc50]
call fcn.14001d610
mov r8d, 0xd
lea rdx, str.CrackPipe
lea rcx, [0x1400bfc50]
call fcn.14001d610
mov r8d, 4
lea rdx, [0x140036ffc]
lea rcx, [0x1400bfc50]
call fcn.14001d610
xor ebx, ebx
mov qword [rsp + 0x70], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x70]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14001c7d1
mov dword [rsp + 0x78], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x7c]
mov edx, 0x14
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne ebx, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14001c7e1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x14001c816
lea r8, str.You_need_to_run_this_as_admin__n
lea rdx, [0x140038730]
lea rcx, [0x1400bfc50]
call fcn.14001d6c0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, 1
jmp 0x14001d343
cmp r14d, 2
jge 0x14001c82c
lea r8, str.Not_enough_arguments_n
lea rdx, [0x140038758]
jmp 0x14001c7f3
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r15, rax
lea r12, [sym.hellpipedev.exe_DllMain]
sub r12, rax
mov qword [rsp + 0x70], r12
mov r9, r12
lea r8, str.EntryPoint_offset:__p_n
lea rdx, [0x140038778]
lea rcx, [0x1400bfc50]
call fcn.14001d700
mov rdx, qword [rsi + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x14001c886
lea rcx, [rbp + 0x110]
call fcn.1400012f0
lea rax, [rbp + 0x110]
mov rcx, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
cmova rax, rcx
mov r8, qword [rbp + 0x120]
cmp r8, 4
jae 0x14001c8cb
xor dil, dil
jmp 0x14001c8d8
cmp dword [r8 + rax - 4], 0x6c6c642e
sete dil
cmp rdx, 0xf
jbe 0x14001c90e
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c909
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c909
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e734
test dil, dil
je 0x14001c926
mov r8, r12
mov rdx, rsi
mov ecx, r14d
call fcn.14001ff70
jmp 0x14001d343
mov r8d, 0x104
lea rdx, [rbp + 0x2c0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea r8, str.Running_as_an_injector____n
lea rdx, [0x14003879c]
lea rcx, [0x1400bfc50]
call fcn.14001dbb0
mov rcx, qword [rsi + 8]
mov qword [rsp + 0x60], rcx
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x14001c962
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x50], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xd0]
call fcn.140001530
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x2c0]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14001c9a0
mov qword [rsp + 0x68], rbx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x50], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x170]
call fcn.140001530
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rax
xorps xmm1, xmm1
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rbp - 0x10], xmm1
movups xmmword [rbp], xmm1
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp + 0x20], xmm1
movups xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x40], rax
lea rdi, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rdi, qword [rbp + 0xd0]
mov rax, qword [rbp + 0xe0]
lea rbx, [rdi + rax*2]
mov rdx, rbx
mov rcx, rdi
call fcn.140013190
cmp rax, rbx
je 0x14001ca8d
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14001ca3f
cmp cx, 0x2f
jne 0x14001ca48
add rax, 2
cmp rax, rbx
jne 0x14001ca30
cmp rax, rbx
je 0x14001ca8d
nop dword [rax]
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14001ca6d
cmp cx, 0x2f
je 0x14001ca6d
mov rbx, rdx
cmp rax, rdx
jne 0x14001ca50
jmp 0x14001ca8d
cmp rax, rbx
je 0x14001ca8d
lea rdx, [rbx - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14001ca85
cmp cx, 0x2f
jne 0x14001ca8d
mov rbx, rdx
cmp rax, rdx
jne 0x14001ca72
sub rbx, rdi
sar rbx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp + 0xb0]
call fcn.140001400
lea r15, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova r15, qword [rbp + 0xb0]
mov r14, qword [rbp + 0xc0]
call fcn.14002e3a4
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xor esi, esi
mov qword [rbp + 0x60], rsi
mov ecx, 0xf
mov qword [rbp + 0x68], rcx
mov byte [rbp + 0x50], sil
test r14, r14
je 0x14001cbe2
cmp r14, 0x7fffffff
ja 0x14001d38d
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, eax
call fcn.14002e414
mov rdi, rax
shr rax, 0x20
test eax, eax
jne 0x14001d377
movsxd rcx, edi
mov rdx, qword [rbp + 0x60]
cmp rcx, rdx
ja 0x14001cb57
mov qword [rbp + 0x60], rcx
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov byte [rax + rcx], sil
jmp 0x14001cbaf
mov rsi, rcx
sub rsi, rdx
mov r8, qword [rbp + 0x68]
mov rax, r8
sub rax, rdx
cmp rsi, rax
ja 0x14001cb93
mov qword [rbp + 0x60], rcx
lea rbx, [rbp + 0x50]
cmp r8, 0xf
cmova rbx, qword [rbp + 0x50]
add rbx, rdx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov byte [rbx + rsi], 0
jmp 0x14001cbad
mov byte [rsp + 0x20], 0
mov r9, rsi
movzx r8d, byte [rsp + 0x50]
mov rdx, rsi
lea rcx, [rbp + 0x50]
call fcn.140007550
xor esi, esi
lea r9, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova r9, qword [rbp + 0x50]
mov dword [rsp + 0x20], edi
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.14002e414
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14001d383
mov rcx, qword [rbp + 0x68]
lea r13, [rbp + 0x50]
cmp rcx, 0xf
cmova r13, qword [rbp + 0x50]
lea r15, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova r15, qword [rbp + 0xd0]
mov r14, qword [rbp + 0xe0]
call fcn.14002e3a4
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rsi
mov edx, 0xf
mov qword [rbp + 0x88], rdx
mov byte [rbp + 0x70], 0
test r14, r14
je 0x14001cd30
cmp r14, 0x7fffffff
ja 0x14001d38d
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, eax
call fcn.14002e414
mov rdi, rax
shr rax, 0x20
test eax, eax
jne 0x14001d398
movsxd rcx, edi
mov rdx, qword [rbp + 0x80]
cmp rcx, rdx
ja 0x14001cc99
mov qword [rbp + 0x80], rcx
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rax, qword [rbp + 0x70]
mov byte [rax + rcx], 0
jmp 0x14001ccf7
mov rsi, rcx
sub rsi, rdx
mov r8, qword [rbp + 0x88]
mov rax, r8
sub rax, rdx
cmp rsi, rax
ja 0x14001ccdb
mov qword [rbp + 0x80], rcx
lea rbx, [rbp + 0x70]
cmp r8, 0xf
cmova rbx, qword [rbp + 0x70]
add rbx, rdx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov byte [rsi + rbx], 0
jmp 0x14001ccf5
mov byte [rsp + 0x20], 0
mov r9, rsi
movzx r8d, byte [rsp + 0x50]
mov rdx, rsi
lea rcx, [rbp + 0x70]
call fcn.140007550
xor esi, esi
lea r9, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova r9, qword [rbp + 0x70]
mov dword [rsp + 0x20], edi
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.14002e414
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14001d3a4
mov rdx, qword [rbp + 0x88]
lea rcx, [rbp + 0x70]
cmp rdx, 0xf
cmova rcx, qword [rbp + 0x70]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14001cdb3
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cdae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001ce4d
call fcn.14002e734
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14001ce00
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cdfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001ce4d
call fcn.14002e734
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x14001ce59
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ce54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e734
test ebx, ebx
jne 0x14001ce7c
lea r8, str.Failed_to_start_target_process_n
lea rdx, [0x1400387c0]
lea rcx, [0x1400bfc50]
call fcn.14001d6c0
jmp 0x14001d329
mov dword [rsp + 0x60], esi
lea rdi, [0x1400bf088]
mov qword [rsp + 0x68], rdi
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x150]
call fcn.14001c530
cmp dword [rsp + 0x60], 0
jne 0x14001d3ae
lea rax, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rax, qword [rbp + 0x150]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x160]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x50], xmm0
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.140001620
lea rax, [0x1400387c4]
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], 3
lea rax, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rax, qword [rbp + 0xf0]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x100]
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x78], xmm0
movabs rcx, 0xc000000000000000
mov qword [rbp + 0x70], rcx
mov qword [rsp + 0x60], 1
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x68], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
lea rdx, [rax + 3]
cmp rdx, 0xf
jbe 0x14001cfa0
movzx r8d, byte [rsp + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.140007f10
mov qword [rbp + 0xc0], rsi
lea rax, [rbp + 0x1b8]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1a8], pe_nt_image_headers64
lea rbx, vtable.std::_Fmt_iterator_buffer_class_std::back_insert_iterator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____char__struct_std::_Fmt_buffer_traits_.0
mov qword [rbp + 0x190], rbx
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x1b0], rax
movaps xmm1, xmmword [rbp + 0x50]
movaps xmmword [rbp - 0x60], xmm1
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rax, [rbp + 0x190]
mov qword [rbp - 0x40], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rsi
movdqa xmmword [rbp + 0x50], xmm1
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x50]
call fcn.140006cc0
lea rcx, [rbp + 0x190]
call fcn.1400132a0
nop
mov qword [rbp + 0x190], rbx
cmp qword [rbp + 0x1a0], 0
je 0x14001d041
lea rcx, [rbp + 0x190]
call fcn.1400132a0
nop
mov dword [rsp + 0x60], esi
mov qword [rsp + 0x68], rdi
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x130]
call fcn.14001c530
cmp dword [rsp + 0x60], 0
jne 0x14001d3c7
lea r15, [rbp + 0x130]
cmp qword [rbp + 0x148], 7
cmova r15, qword [rbp + 0x130]
mov r14, qword [rbp + 0x140]
call fcn.14002e3a4
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
test r14, r14
je 0x14001d1c1
cmp r14, 0x7fffffff
ja 0x14001d3e0
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, eax
call fcn.14002e414
mov rdi, rax
shr rax, 0x20
test eax, eax
jne 0x14001d3eb
movsxd rcx, edi
mov rdx, qword [rbp + 0xa0]
cmp rcx, rdx
ja 0x14001d122
mov qword [rbp + 0xa0], rcx
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rax, qword [rbp + 0x90]
mov byte [rax + rcx], 0
jmp 0x14001d189
mov rsi, rcx
sub rsi, rdx
mov r8, qword [rbp + 0xa8]
mov rax, r8
sub rax, rdx
cmp rsi, rax
ja 0x14001d16a
mov qword [rbp + 0xa0], rcx
lea rbx, [rbp + 0x90]
cmp r8, 0xf
cmova rbx, qword [rbp + 0x90]
add rbx, rdx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov byte [rbx + rsi], 0
jmp 0x14001d187
mov byte [rsp + 0x20], 0
mov r9, rsi
movzx r8d, byte [rsp + 0x50]
mov rdx, rsi
lea rcx, [rbp + 0x90]
call fcn.140007550
xor esi, esi
lea r9, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova r9, qword [rbp + 0x90]
mov dword [rsp + 0x20], edi
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.14002e414
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14001d36d
mov r9, qword [rsp + 0x70]
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0x90]
mov rcx, qword [rbp - 0x80]
call fcn.140021370
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x14001d21e
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d219
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d2d1
call fcn.14002e734
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
lea rcx, [rbp + 0x130]
call fcn.140013c10
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x14001d280
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d27b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d2d1
call fcn.14002e734
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14001d2dd
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d2d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d2d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e734
movdqa xmm0, xmmword [0x140038690]
movdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
lea rcx, [rbp + 0x150]
call fcn.140013c10
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x170]
call fcn.140013c10
lea rcx, [rbp + 0xd0]
call fcn.140013c10
xor eax, eax
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.14002eaf0
mov rbx, qword [rsp + 0x530]
add rsp, 0x4e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
shr rcx, 0x20
call fcn.140013bb0
int3
shr rdi, 0x20
mov ecx, edi
call fcn.140013bb0
int3
shr rcx, 0x20
call fcn.140013bb0
int3
mov ecx, 0x16
call fcn.140013b70
int3
shr rdi, 0x20
mov ecx, edi
call fcn.140013bb0
int3
shr rcx, 0x20
call fcn.140013bb0
int3
lea r8, [rbp + 0x170]
lea rdx, [rsp + 0x60]
lea rcx, str.absolute
call fcn.14001c460
int3
lea r8, [rbp + 0x170]
lea rdx, [rsp + 0x60]
lea rcx, str.absolute
call fcn.14001c460
int3
mov ecx, 0x16
call fcn.140013b70
int3
shr rdi, 0x20
mov ecx, edi
call fcn.140013bb0
int3