Function at 0x14004ca20
Capabilities:
Contain obfuscated stackstrings
Execute command
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov rax, qword [0x1400a4010]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r15, rdx
mov r13, rcx
mov qword [rbp + 7], rcx
mov qword [rbp + 0xf], rdx
movdqa xmm0, xmmword [0x140097900]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [str.ler_by_emlinhax_n_f]
movdqu xmmword [rbp - 0x49], xmm1
mov byte [rbp - 0x39], 0
lea rcx, [rbp - 0x58]
call fcn.1400013c0
xor ebx, ebx
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], 0xf
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x14004caa0
mov rdx, r13
lea rcx, [rbp - 0x59]
call fcn.14004b910
lea rcx, [rbp - 0x59]
call fcn.14004c890
test al, al
jne 0x14004cb35
movdqa xmm0, xmmword [0x1400978b0]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x140097090]
movdqu xmmword [rbp - 0x49], xmm1
mov word [rbp - 0x39], 0xa
lea rcx, [rbp - 0x58]
call fcn.1400013c0
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14004cb27
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14004cb22
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004d611
mov rcx, r8
call fcn.14006cbbc
mov qword [r15 + 0x10], rbx
mov eax, 0xfffffffe
jmp 0x14004ce98
lea rsi, [0x1400a4db0]
nop dword [rax]
mov dword [rbp - 0x29], 0x2e5c5c6e
mov dword [rbp - 0x25], 0x6e69575c
mov word [rbp - 0x21], 0x6f49
mov byte [rbp - 0x1f], 0
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1400a4068], rax
cmp rax, 0xffffffffffffffff
jne 0x14004cda5
mov rdx, rsi
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov dword [rbp - 0x19], 0x69575c3d
mov dword [rbp - 0x15], 0x364f496e
mov dword [rbp - 0x11], 0x79732e34
mov word [rbp - 0xd], 0x73
lea rcx, [rsi - 1]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x14004cbc1
lea r8, [rbp - 0x18]
xor edx, edx
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14004cbd0
mov qword [rbp - 0x59], rbx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], 0xf
mov r8, r14
inc r8
cmp byte [rsi + r8], 0
jne 0x14004cbf3
mov rdx, rsi
lea rcx, [rbp - 0x59]
call fcn.14004b910
lea rcx, [rbp - 0x59]
call fcn.14004c890
test al, al
je 0x14004cd5d
movdqa xmm0, xmmword [0x140097830]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x6b6e6970
mov dword [rbp - 0x45], 0x2072656c
mov dword [rbp - 0x41], 0x4c554e3e
mov byte [rbp - 0x3d], 0
lea rcx, [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140097890]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x69705f6c
mov dword [rbp - 0x45], 0x656c6b6e
mov dword [rbp - 0x41], 0x4e3e2072
mov word [rbp - 0x3d], 0x4c55
mov byte [rbp - 0x3b], 0
lea rcx, [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str.wtinkel_pinkler]
movdqu xmmword [rbp - 9], xmm0
lea rax, [rbp - 8]
mov rcx, r14
inc rcx
cmp byte [rax + rcx], 0
jne 0x14004cc94
mov rax, r14
inc rax
cmp byte [rsi + rax], 0
jne 0x14004cca0
add rcx, rax
add rcx, 0x35
cmovb rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
lea rax, [rbp - 8]
mov rcx, r14
inc rcx
cmp byte [rax + rcx], 0
jne 0x14004ccc4
add rcx, 0xe
cmovb rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
movdqa xmm0, xmmword [0x1400978e0]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x1400970b0]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0x6e72656b
mov dword [rbp - 0x35], 0x4e3e6c65
mov word [rbp - 0x31], 0x4c55
mov byte [rbp - 0x2f], 0
mov r9, rsi
lea r8, [rbp - 8]
lea rdx, [rbp - 0x58]
mov rcx, rdi
call fcn.14001d1d0
movdqa xmm0, xmmword [0x1400977a0]
movdqu xmmword [rbp - 0x59], xmm0
mov byte [rbp - 0x49], 0
lea r8, [rbp - 8]
lea rdx, [rbp - 0x58]
mov rcx, rbx
call fcn.14001d1d0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ebx, ebx
jmp 0x14004cb40
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14004cd97
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14004cd92
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004d611
mov rcx, r8
call fcn.14006cbbc
mov qword [r15 + 0x10], rbx
mov eax, 0xfffffffd
jmp 0x14004ce98
movdqa xmm0, xmmword [0x140097870]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x203a656c
mov dword [rbp - 0x45], 0xa7025
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1400013c0
movdqa xmm0, xmmword [0x140097930]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x6e726b73
mov dword [rbp - 0x45], 0x2e2e2e6c
mov word [rbp - 0x41], 0xa
lea rcx, [rbp - 0x58]
call fcn.1400013c0
xor esi, esi
mov r14d, esi
movabs rdi, 0x200000000
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov r8d, 2
mov rdx, rax
mov rcx, r14
call fcn.14004c6e0
cmp byte [rbx], 0x4d
jne 0x14004ce33
cmp byte [rbx + 1], 0x5a
je 0x14004cecb
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14, 0x100000
cmp r14, rdi
jb 0x14004ce05
lea rcx, str.____could_not_find_ntoskrnl_base._n
call fcn.1400013c0
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14004ce8f
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14004ce8a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004d611
mov rcx, r8
call fcn.14006cbbc
mov qword [r15 + 0x10], rsi
mov eax, 0xfffffffb
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14006ca20
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x140097040]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x70257830
mov word [rbp - 0x45], 0xa
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.1400013c0
test r14, r14
je 0x14004ce48
mov ecx, 0xbfffff
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
mov r8d, 0xbfffff
mov rdx, rax
mov rcx, r14
call fcn.14004c6e0
mov r12, rsi
mov r11d, esi
lea rbx, [rdi + 2]
lea rdx, [0x1400a4070]
sub rdx, rdi
nop dword [rax]
mov cl, 1
mov r9d, esi
mov rax, rbx
test cl, cl
je 0x14004d0c1
movzx r8d, byte [rdx + rax - 2]
test r8b, r8b
je 0x14004cf58
cmp byte [rax - 2], r8b
je 0x14004cf58
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax - 1]
test r8b, r8b
je 0x14004cf70
cmp byte [rax - 1], r8b
je 0x14004cf70
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax]
test r8b, r8b
je 0x14004cf86
cmp byte [rax], r8b
je 0x14004cf86
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 1]
test r8b, r8b
je 0x14004cf9e
cmp byte [rax + 1], r8b
je 0x14004cf9e
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 2]
test r8b, r8b
je 0x14004cfb6
cmp byte [rax + 2], r8b
je 0x14004cfb6
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 3]
test r8b, r8b
je 0x14004cfce
cmp byte [rax + 3], r8b
je 0x14004cfce
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 4]
test r8b, r8b
je 0x14004cfe6
cmp byte [rax + 4], r8b
je 0x14004cfe6
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 5]
test r8b, r8b
je 0x14004cffe
cmp byte [rax + 5], r8b
je 0x14004cffe
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 6]
test r8b, r8b
je 0x14004d016
cmp byte [rax + 6], r8b
je 0x14004d016
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 7]
test r8b, r8b
je 0x14004d02e
cmp byte [rax + 7], r8b
je 0x14004d02e
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 8]
test r8b, r8b
je 0x14004d043
cmp byte [rax + 8], r8b
je 0x14004d043
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 9]
test r8b, r8b
je 0x14004d058
cmp byte [rax + 9], r8b
je 0x14004d058
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 0xa]
test r8b, r8b
je 0x14004d06d
cmp byte [rax + 0xa], r8b
je 0x14004d06d
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 0xb]
test r8b, r8b
je 0x14004d082
cmp byte [rax + 0xb], r8b
je 0x14004d082
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 0xc]
test r8b, r8b
je 0x14004d097
cmp byte [rax + 0xc], r8b
je 0x14004d097
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 0xd]
test r8b, r8b
je 0x14004d0ac
cmp byte [rax + 0xd], r8b
je 0x14004d0ac
xor cl, cl
jmp 0x14004d0c1
movzx r8d, byte [rdx + rax + 0xe]
test r8b, r8b
je 0x14004d0c1
movzx ecx, cl
cmp byte [rax + 0xe], r8b
cmovne ecx, esi
add r9d, 0x11
add rax, 0x11
cmp r9d, 0x11
jb 0x14004cf38
test cl, cl
jne 0x14004d0ef
inc r11d
inc rbx
dec rdx
cmp r11d, 0xbfffff
jb 0x14004cf30
jmp 0x14004d0f5
movsxd r12, r11d
add r12, r14
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, 0xbfffff
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
mov r8d, 0xbfffff
mov rdx, rax
mov rcx, r14
call fcn.14004c6e0
xor eax, eax
mov edi, eax
mov r11d, eax
lea rbx, [rsi + 2]
lea rdx, [0x1400a4048]
sub rdx, rsi
jmp 0x14004d142
xor eax, eax
mov cl, 1
mov r9d, eax
mov rax, rbx
xor r13d, r13d
nop dword [rax]
test cl, cl
je 0x14004d33a
movzx r8d, byte [rax + rdx - 2]
test r8b, r8b
je 0x14004d170
cmp byte [rax - 2], r8b
je 0x14004d170
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rax + rdx - 1]
test r8b, r8b
je 0x14004d188
cmp byte [rax - 1], r8b
je 0x14004d188
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax]
test r8b, r8b
je 0x14004d19e
cmp byte [rax], r8b
je 0x14004d19e
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 1]
test r8b, r8b
je 0x14004d1b6
cmp byte [rax + 1], r8b
je 0x14004d1b6
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 2]
test r8b, r8b
je 0x14004d1ce
cmp byte [rax + 2], r8b
je 0x14004d1ce
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 3]
test r8b, r8b
je 0x14004d1e6
cmp byte [rax + 3], r8b
je 0x14004d1e6
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 4]
test r8b, r8b
je 0x14004d1fe
cmp byte [rax + 4], r8b
je 0x14004d1fe
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 5]
test r8b, r8b
je 0x14004d216
cmp byte [rax + 5], r8b
je 0x14004d216
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 6]
test r8b, r8b
je 0x14004d22e
cmp byte [rax + 6], r8b
je 0x14004d22e
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 7]
test r8b, r8b
je 0x14004d246
cmp byte [rax + 7], r8b
je 0x14004d246
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 8]
test r8b, r8b
je 0x14004d25e
cmp byte [rax + 8], r8b
je 0x14004d25e
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 9]
test r8b, r8b
je 0x14004d276
cmp byte [rax + 9], r8b
je 0x14004d276
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0xa]
test r8b, r8b
je 0x14004d28e
cmp byte [rax + 0xa], r8b
je 0x14004d28e
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0xb]
test r8b, r8b
je 0x14004d2a6
cmp byte [rax + 0xb], r8b
je 0x14004d2a6
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0xc]
test r8b, r8b
je 0x14004d2bb
cmp byte [rax + 0xc], r8b
je 0x14004d2bb
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0xd]
test r8b, r8b
je 0x14004d2d0
cmp byte [rax + 0xd], r8b
je 0x14004d2d0
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0xe]
test r8b, r8b
je 0x14004d2e5
cmp byte [rax + 0xe], r8b
je 0x14004d2e5
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0xf]
test r8b, r8b
je 0x14004d2fa
cmp byte [rax + 0xf], r8b
je 0x14004d2fa
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0x10]
test r8b, r8b
je 0x14004d30f
cmp byte [rax + 0x10], r8b
je 0x14004d30f
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0x11]
test r8b, r8b
je 0x14004d324
cmp byte [rax + 0x11], r8b
je 0x14004d324
xor cl, cl
jmp 0x14004d33a
movzx r8d, byte [rdx + rax + 0x12]
test r8b, r8b
je 0x14004d33a
movzx ecx, cl
cmp byte [rax + 0x12], r8b
cmovne ecx, r13d
add r9d, 0x15
add rax, 0x15
cmp r9d, 0x15
jb 0x14004d150
mov r13, qword [rbp + 7]
test cl, cl
jne 0x14004d36c
inc r11d
inc rbx
dec rdx
cmp r11d, 0xbfffff
jb 0x14004d140
jmp 0x14004d372
movsxd rdi, r11d
add rdi, r14
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r12, r12
je 0x14004d584
test rdi, rdi
je 0x14004d584
mov r8d, 6
lea rdx, [0x1400a4f34]
mov rcx, r12
call fcn.14004c6e0
mov r8d, 6
lea rdx, [0x1400a4eb4]
mov rcx, rdi
call fcn.14004c6e0
lea rdx, [0x1400a4060]
mov rcx, r12
call fcn.14004c7b0
lea rdx, [0x1400a4060]
mov rcx, rdi
call fcn.14004c7b0
movdqa xmm0, xmmword [0x140097910]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x140097950]
movdqu xmmword [rbp - 0x49], xmm1
mov word [rbp - 0x39], 0xa2e
mov byte [rbp - 0x37], 0
lea rcx, [rbp - 0x58]
call fcn.1400013c0
mov rcx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14004d40f
mov rcx, qword [r15]
mov rdx, r13
call fcn.14004c920
movdqa xmm0, xmmword [0x1400979a0]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0xa217265
mov byte [rbp - 0x45], 0
lea rcx, [rbp - 0x58]
call fcn.1400013c0
lea rdx, [0x1400a4f34]
mov rcx, r12
call fcn.14004c7b0
lea rdx, [0x1400a4eb4]
mov rcx, rdi
call fcn.14004c7b0
movdqa xmm0, xmmword [0x140097850]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x1400978a0]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0xa2e73
lea rcx, [rbp - 0x58]
call fcn.1400013c0
movdqa xmm0, xmmword [0x140097840]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x6b6e6970
mov dword [rbp - 0x45], 0x2072656c
mov dword [rbp - 0x41], 0x4c554e3e
mov byte [rbp - 0x3d], 0
lea rcx, [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140097880]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x69705f6c
mov dword [rbp - 0x45], 0x656c6b6e
mov dword [rbp - 0x41], 0x4e3e2072
mov word [rbp - 0x3d], 0x4c55
mov byte [rbp - 0x3b], 0
lea rcx, [rbp - 0x58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400978f0]
movdqu xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x49], 0x206f696e
mov dword [rbp - 0x45], 0x76697264
mov dword [rbp - 0x41], 0xa2e7265
mov byte [rbp - 0x3d], 0
lea rcx, [rbp - 0x58]
call fcn.1400013c0
mov dword [rbp - 0x29], 0x5d2a5b38
mov dword [rbp - 0x25], 0x6e6f6420
mov dword [rbp - 0x21], ShowWindow
lea rcx, [rbp - 0x28]
call fcn.1400013c0
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14004d56e
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14004d569
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004d611
mov rcx, r8
call fcn.14006cbbc
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], al
jmp 0x14004cea4
movdqa xmm0, xmmword [0x1400978c0]
movdqu xmmword [rbp - 0x59], xmm0
movdqa xmm1, xmmword [0x140097050]
movdqu xmmword [rbp - 0x49], xmm1
mov dword [rbp - 0x39], 0x74746170
mov dword [rbp - 0x35], 0x736e7265
mov word [rbp - 0x31], 0xa2e
mov byte [rbp - 0x2f], 0
lea rcx, [rbp - 0x58]
call fcn.1400013c0
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14004d5f6
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14004d5f1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004d611
mov rcx, r8
call fcn.14006cbbc
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], al
mov eax, 0xfffffffa
jmp 0x14004cea4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3