Function at 0x1400057b0
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rdi, rcx
lea rdx, str.E4847ED08866458F8DD35F94B37001C0
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
lea rcx, [0x14013e448]
mov qword [0x14013f6e0], rdi
mov qword [0x14013f6b0], rax
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x14013e420]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rdx, [0x140140270]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
xor r12d, r12d
test eax, eax
jne 0x1400059a5
mov word [0x140140270], r12w
lea rdi, [0x1401035ac]
mov rax, qword [sym.imp.MSVCR100.dll___argc]
xor bpl, bpl
xor dl, dl
mov esi, dword [rax]
movaps xmmword [rsp + 0xc0], xmm6
mov qword [0x140140478], rdi
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm8
mov edi, 1
mov byte [rsp + 0x30], bpl
mov r13, r12
mov qword [rsp + 0x50], r12
mov byte [rsp + 0x100], dl
mov dword [rsp + 0x34], esi
mov dword [rsp + 0x3c], edi
mov r14d, edi
mov r15d, edi
cmp esi, edi
jle 0x140005fee
movsd xmm7, qword [0x1401279a8]
movsd xmm8, qword [0x1401279e0]
movsd xmm6, qword [0x1401279d8]
mov r13, qword [rsp + 0x100]
nop word [rax + rax]
mov rax, qword [sym.imp.MSVCR100.dll___wargv]
mov rcx, qword [rax]
mov rsi, qword [rcx + r15*8]
test dl, dl
je 0x140005d16
lea rdx, [0x140103758]
lea rcx, [rsp + 0x60]
mov r8d, edi
call qword [sym.imp.MSVCR100.dll__swprintf]
cmp word [rsp + 0x60], 0
movsxd rdi, eax
je 0x1400061c3
lea rax, [rsp + 0x38]
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rcx, [0x140143150]
mov r8, rdi
mov dword [rsp + 0x20], 3
call fcn.14004d390
mov rbx, rax
test rax, rax
jne 0x140005969
cmp byte [rsp + 0x38], bl
mov r9d, dword [rsp + 0x40]
mov eax, r12d
setne al
lea rdx, [rsp + 0x60]
lea rcx, [0x140143150]
inc eax
mov r8, rdi
mov dword [rsp + 0x20], eax
call fcn.14004d950
mov rbx, rax
test rbx, rbx
je 0x1400061c3
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x140005a23
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, rsi
mov byte [rsp + 0x20], 1
call fcn.1400e6e20
mov edi, dword [rsp + 0x3c]
inc edi
mov dword [rsp + 0x3c], edi
jmp 0x140005fc7
cmp word [0x140140270], r12w
je 0x14000583f
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [0x140140270]
repne scasw ax, word [rdi]
not rcx
lea rbx, [rcx + rcx - 2]
lea rsi, [rcx - 1]
lea rcx, [rbx + 2]
call fcn.1400dd290
mov rdi, rax
test rax, rax
jne 0x140005a02
lea r8, [0x140140270]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
call fcn.14005f7b0
mov rdi, r12
jmp 0x140005846
test rsi, rsi
je 0x140005a19
lea rdx, [0x140140270]
mov r8, rbx
mov rcx, rax
call sub.MSVCR100.dll_memcpy
mov word [rbx + rdi], r12w
jmp 0x140005846
mov r8b, 1
test rsi, rsi
jne 0x140005a3a
xor r8b, r8b
mov rbp, r12
lea rsi, [0x1401035ac]
jmp 0x140005a5e
cmp qword [rbx + 8], rsi
jne 0x140005a49
mov rbp, qword [rbx + 0x10]
shr rbp, 1
jmp 0x140005a5e
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
dec rcx
mov rbp, rcx
lea rax, [rbp + 1]
lea rdi, [rax + rax]
cmp dl, 2
jne 0x140005a8a
mov rdx, rbp
mov rcx, rsi
call fcn.140006bc0
mov edi, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
inc edi
mov dword [rsp + 0x3c], edi
jmp 0x140005fc7
mov r9, qword [0x14013b0d0]
cmp rdi, r9
jbe 0x140005aca
cmp rdi, qword [rbx + 0x18]
jbe 0x140005aca
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
mov edi, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
inc edi
mov dword [rsp + 0x3c], edi
jmp 0x140005fc7
cmp rax, 2
jae 0x140005afb
test r8b, r8b
mov edx, r12d
mov rcx, rbx
setne dl
xor r8d, r8d
add edx, 2
call fcn.1400e74d0
mov edi, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
inc edi
mov dword [rsp + 0x3c], edi
jmp 0x140005fc7
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140005b18
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r9, qword [0x14013b0d0]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rdi, r8
jbe 0x140005c89
movzx ecx, byte [rbx + 0x20]
movzx eax, cl
cmp cl, 1
jbe 0x140005b43
cmp al, 2
je 0x140005b8c
mov rax, qword [rsp + 0x58]
jmp 0x140005c7d
cmp rdi, 0x80
ja 0x140005b8c
cmp rdi, 8
ja 0x140005b5a
mov r13d, 8
jmp 0x140005b6d
mov r13d, 0x80
cmp rdi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe r13d, eax
mov rcx, r13
call fcn.1400dd290
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140005cb2
mov byte [rbx + 0x20], 1
jmp 0x140005c7d
cmp rdi, 0x20
jae 0x140005b9d
mov r13d, SafeArrayAllocDescriptor
jmp 0x140005c3e
cmp rdi, 0x208
jae 0x140005bb1
mov r13d, 0x208
jmp 0x140005c3e
cmp rdi, 0x50000
jae 0x140005bfa
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x140005bcc
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x140005bf0
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140005bf0
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si r13, xmm0
add r13, rax
jmp 0x140005c3e
cmp rdi, 0x320000
jae 0x140005c0c
lea r13, [rdi + 0x8000]
jmp 0x140005c3e
cmp rdi, 0xc80000
jae 0x140005c37
movabs rax, 0x47ae147ae147ae15
mov r13, rdi
mul rdi
sub r13, rdx
shr r13, 1
add r13, rdx
shr r13, 6
add r13, rdi
jmp 0x140005c3e
lea r13, [rdi + 0x20000]
cmp r13, r9
cmova r13, r9
cmp cl, 2
jne 0x140005c5e
test r8, r8
je 0x140005c5e
mov rcx, qword [rbx + 8]
mov dil, 1
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x140005c61
xor dil, dil
test r13, r13
js 0x140005cc6
mov rcx, r13
call qword [sym.imp.MSVCR100.dll_malloc]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140005cc6
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], r13
mov rcx, qword [rbx + 8]
cmp rcx, rsi
je 0x140005ca0
lea r8, [rbp + rbp]
mov rdx, rsi
call qword [sym.imp.MSVCR100.dll_memmove]
mov rax, qword [rbx + 8]
lea rcx, [rbp + rbp]
mov word [rcx + rax], r12w
mov qword [rbx + 0x10], rcx
mov edi, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
inc edi
mov dword [rsp + 0x3c], edi
jmp 0x140005fc7
test dil, dil
je 0x140005cdc
lea rax, [0x140141fa8]
mov qword [rbx + 0x18], r12
mov qword [rbx + 8], rax
jmp 0x140005ce4
mov rax, qword [rbx + 8]
mov word [rax], r12w
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
mov qword [rbx + 0x10], r12
call fcn.14005f7b0
mov edi, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
inc edi
mov dword [rsp + 0x3c], edi
jmp 0x140005fc7
lea rdx, [0x140103760]
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x140005fbf
lea rdx, str._restart
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x140005fbf
lea rdx, [0x14010377c]
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x140005fb6
lea rdx, str._force
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x140005fb6
lea rdx, str._ErrorStdOut
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
jne 0x140005d96
mov byte [0x140143d2b], 1
jmp 0x140005fc7
lea rdx, str._iLib
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
jne 0x140005e3f
mov rax, qword [sym.imp.MSVCR100.dll___argc]
inc r14d
inc r15
cmp r14d, dword [rax]
jge 0x1400061c3
mov ecx, 0x48
call qword [sym.imp.MSVCR100.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
test rax, rax
je 0x140005de1
mov rcx, rax
call fcn.140005260
mov rdi, rax
jmp 0x140005de4
mov rdi, r12
mov rax, qword [sym.imp.MSVCR100.dll___wargv]
mov qword [0x140143d30], rdi
mov dword [rsp + 0x48], reloc.OLEAUT32.dll_SafeArrayUnlock
mov rcx, qword [rax]
mov rax, qword [rdi]
lea r8, [rsp + 0x48]
mov rdx, qword [rcx + r15*8]
mov rcx, rdi
mov dword [rdi + 0xc], r12d
call qword [rax + reloc.WSOCK32.dll_htonl]
test al, al
je 0x1400061c3
lea rdx, [rsp + 0x48]
mov r8d, 0xfde9
mov rcx, rdi
call fcn.1400dde40
test al, al
je 0x1400061c3
mov edi, dword [rsp + 0x3c]
jmp 0x140005fc7
lea rdx, [0x1401037c4]
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x140005fad
lea rdx, str._Execute
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x140005fad
lea rdx, [0x1401037e8]
mov r8d, 3
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsnicmp]
test eax, eax
jne 0x140005e9d
lea rcx, [rsi + 6]
call fcn.1400050b0
mov dword [0x14013f6f4], eax
jmp 0x140005fc7
cmp qword [0x140141ff0], 0xffffffffffffffff
jne 0x140005f7b
lea rdx, str._Debug
mov r8d, 6
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll__wcsnicmp]
test eax, eax
jne 0x140005f7b
movzx eax, word [rsi + 0xc]
test ax, ax
je 0x140005edc
cmp ax, 0x3d
jne 0x140005f7b
cmp ax, 0x3d
jne 0x140005f53
add rsi, 0xe
mov edx, 0x3a
mov rcx, rsi
call qword [sym.imp.MSVCR100.dll_wcsrchr]
lea rdx, vtable.CKuStringT_char__class_CKuStringUtilA_.0
mov rcx, rsi
mov rdi, rax
test rax, rax
je 0x140005f31
mov r8, rax
sub r8, rsi
sar r8, 1
call fcn.1400dd820
lea rcx, [rdi + 2]
lea rdx, vtable.CKuStringT_char__class_CKuStringUtilA_.0
or r8d, 0xffffffff
call fcn.1400dd820
mov edi, dword [rsp + 0x3c]
jmp 0x140005fc7
or r8d, 0xffffffff
call fcn.1400dd820
lea rdx, str.9000
lea rcx, vtable.CKuStringT_char__class_CKuStringUtilA_.0
call fcn.140006540
mov edi, dword [rsp + 0x3c]
jmp 0x140005fc7
lea rdx, str.127.0.0.1
lea rcx, vtable.CKuStringT_char__class_CKuStringUtilA_.0
call fcn.140006540
lea rdx, str.9000
lea rcx, vtable.CKuStringT_char__class_CKuStringUtilA_.0
call fcn.140006540
jmp 0x140005fc7
cmp qword [0x14013f6b0], 0
mov dl, 1
mov byte [rsp + 0x100], dl
jne 0x140005f9d
mov qword [rsp + 0x50], rsi
lea esi, [r14 + 1]
mov dword [rsp + 0x34], esi
jmp 0x140005fd3
dec r14d
dec r15
lea esi, [r14 + 1]
mov dword [rsp + 0x34], esi
jmp 0x140005fd3
mov qword [0x14013f6b0], r12
jmp 0x140005fc7
mov byte [0x14013f739], 1
jmp 0x140005fc7
mov bpl, 1
mov byte [rsp + 0x30], bpl
movzx edx, byte [rsp + 0x100]
mov esi, dword [rsp + 0x34]
mov rax, qword [sym.imp.MSVCR100.dll___argc]
inc r14d
inc r15
cmp r14d, dword [rax]
jl 0x1400058d0
mov r13, qword [rsp + 0x50]
lea rax, [rsp + 0x100]
lea r9, [rsp + 0x40]
lea rdx, [0x140103674]
mov qword [rsp + 0x28], rax
lea rcx, [0x140143150]
xor r8d, r8d
mov dword [rsp + 0x20], 3
call fcn.14004d390
mov rcx, rax
test rax, rax
jne 0x140006057
cmp byte [rsp + 0x100], cl
mov r9d, dword [rsp + 0x40]
mov eax, r12d
setne al
lea rdx, [0x140103674]
lea rcx, [0x140143150]
inc eax
xor r8d, r8d
mov dword [rsp + 0x20], eax
call fcn.14004d950
mov rcx, rax
test rcx, rcx
je 0x1400061c3
lea eax, [rdi - 1]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, eax
call fcn.140001090
lea rdx, [rsp + 0x100]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], rdx
lea rcx, [0x140143150]
lea rdx, str.A_Args
mov r8d, 6
mov dword [rsp + 0x20], 0xc1
call fcn.14004d390
mov rbx, rax
test rax, rax
jne 0x1400060e0
cmp byte [rsp + 0x100], bl
mov r9d, dword [rsp + 0x40]
mov eax, r12d
setne al
lea r8d, [rbx + 6]
lea rdx, str.A_Args
inc eax
lea rcx, [0x140143150]
or eax, 0xc0
mov dword [rsp + 0x20], eax
call fcn.14004d950
mov rbx, rax
test rbx, rbx
je 0x1400061c3
mov rcx, qword [sym.imp.MSVCR100.dll___argc]
movsxd rax, esi
mov edi, dword [rcx]
mov rcx, qword [sym.imp.MSVCR100.dll___wargv]
mov rdx, qword [rcx]
sub edi, esi
lea rcx, [rdx + rax*8]
mov edx, edi
call fcn.1400cdb20
test rax, rax
je 0x1400061c3
mov rdx, rax
mov rcx, rbx
call fcn.1400e71a0
call fcn.140006810
cmp dword [0x14013f654], 0
je 0x14000652b
lea rcx, str.advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rdx, str.CryptEncrypt
mov rcx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CryptDecrypt
mov rcx, rdi
mov qword [0x1401404a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x140143150]
movzx r8d, bpl
mov rdx, r13
mov qword [0x1401404b0], rax
call fcn.140034420
cmp eax, 1
jne 0x1400061c3
mov rdx, qword [0x14013b0f8]
lea rcx, [0x14013e0b0]
mov r8d, 0x150
call sub.MSVCR100.dll_memcpy
lea rcx, [0x140143150]
call fcn.140036690
cmp eax, 0xffffffff
jne 0x140006202
mov rcx, qword [0x140143d30]
test rcx, rcx
je 0x1400061c3
call fcn.140005170
mov eax, 2
movaps xmm8, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0xc0]
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
test eax, eax
je 0x14000652b
mov eax, dword [0x14013f874]
xorpd xmm6, xmm6
test eax, eax
jne 0x14000625b
mov rax, qword [0x14013ccd8]
cmp word [rax], 0
jne 0x14000624f
cmp dword [0x14014053c], 0
jne 0x14000624f
cmp qword [0x14013f848], 0
jne 0x14000624f
cmp qword [0x14013f850], 0
jne 0x14000624f
cmp byte [0x14013f880], 0
je 0x1400062d7
mov dword [0x14013f874], 1
jmp 0x140006260
cmp eax, 4
je 0x1400062d7
test bpl, bpl
jne 0x1400062e0
cmp byte [0x14013f739], bpl
jne 0x140006384
mov rdx, qword [0x140143d20]
lea rcx, [0x140103868]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140006384
mov eax, dword [0x14013f874]
cmp eax, 3
je 0x14000652b
cmp eax, 2
je 0x1400062d0
mov r8, qword [0x140143d08]
lea rcx, str.An_older_instance_of_this_script_is_already_running.__Replace_it_with_this_instance__nNote:_To_avoid_this_message__see_SingleInstance_in_the_help_file.
movapd xmm3, xmm6
mov edx, 4
mov qword [rsp + 0x20], r12
call fcn.1400e9900
cmp eax, 7
je 0x14000652b
mov eax, 0x407
jmp 0x140006305
test bpl, bpl
je 0x140006384
mov rdx, qword [0x140143d20]
lea rcx, [0x140103868]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140006384
mov eax, 0x406
xor r9d, r9d
movsxd r8, eax
mov rcx, rbx
lea edx, [r9 + 0x44]
call qword [sym.imp.USER32.dll_PostMessageW]
mov ecx, gethostbyaddr
mov edi, r12d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140006379
cmp edi, 0x64
jne 0x14000635f
lea edx, [rdi - 0x60]
lea rcx, str.Could_not_close_the_previous_instance_of_this_script.__Keep_waiting_
movapd xmm3, xmm6
xor r8d, r8d
mov qword [rsp + 0x20], r12
call fcn.1400e9900
cmp eax, 7
je 0x1400061c3
mov edi, r12d
mov ecx, gethostbyaddr
inc edi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x140006333
mov ecx, WSAAsyncSelect
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [0x14013df34]
xor r9d, r9d
xor edx, edx
mov ecx, 0x2000
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x1400063be
cmp dword [0x14013df34], 0
je 0x1400063be
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov ecx, 0x2001
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
lea rcx, [0x140143150]
call fcn.140034b20
cmp eax, 1
jne 0x1400061c3
call qword [sym.imp.MSVCR100.dll___iob_func]
xor r9d, r9d
xor edx, edx
lea rcx, [rax + 0x30]
lea r8d, [r9 + 4]
call qword [sym.imp.MSVCR100.dll_setvbuf]
movsxd rdx, dword [0x14013b0cc]
test edx, edx
je 0x140006423
mov rdi, rdx
imul rdi, rdi, 0xd4
mov rcx, rdi
call qword [sym.imp.MSVCR100.dll_malloc]
mov qword [0x1401404b8], rax
test rax, rax
je 0x140006423
mov r8, rdi
xor edx, edx
mov rcx, rax
call sub.MSVCR100.dll_memset
cmp byte [0x140143f62], 0
jne 0x140006450
lea rcx, [rsp + 0x100]
mov dword [rsp + 0x100], 8
mov dword [rsp + 0x104], 0x1ff
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rdi, qword [0x14013ccb0]
test rdi, rdi
je 0x1400064bb
cmp qword [rdi + 0x10], 0
je 0x1400064bb
mov rax, qword [0x14013ccc8]
lea rcx, [0x140103a54]
mov rdx, rcx
test rax, rax
je 0x140006483
mov rax, qword [rax]
test rax, rax
cmovne rdx, rax
mov rax, qword [rdi]
test rax, rax
cmovne rcx, rax
call fcn.14000d140
test eax, eax
jne 0x1400064bb
cmp dword [0x140142040], 2
je 0x1400064bb
lea rcx, [0x140141fd0]
call fcn.1400083a0
test eax, eax
jne 0x1400064bb
lea rcx, [0x140141fd0]
call fcn.1400085e0
lea rdx, [0x1400e5920]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov qword [0x14013f878], rax
call fcn.1400173a0
lea rdx, str.Clipboard
lea rcx, [0x140143150]
mov r9d, 3
xor r8d, r8d
mov byte [0x140143d28], 1
mov byte [0x140140261], 0
call fcn.14004d300
test rax, rax
je 0x14000650d
mov rcx, rax
call fcn.1400050f0
lea rcx, [0x140143150]
call fcn.140035260
test eax, eax
je 0x1400061c3
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.140001b80
xor eax, eax
jmp 0x1400061c8