Function at 0x140079de0
Capabilities:
Access peb ldr_data
Open clipboard
Read clipboard data

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x390
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
mov r13, rcx
xor r14d, r14d
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_21]
call fcn.1400afbd0
mov rdi, rax
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x1e8]
call fcn.1400b1aa0
movabs rax, 0x9b2e51dbb51aacf0
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xe0], rcx
movabs r12, 0xdf349ed8450b6816
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0xe8], rcx
movabs r15, 0xfe4330b5c77fdf85
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0xe0], xmm0
movss xmm6, dword [rbp + 0x1ec]
movss xmm7, dword [0x1401608e4]
mulss xmm6, xmm7
movss xmm9, dword [0x1401608f8]
movss dword [rsp + 0x20], xmm9
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x148]
call fcn.140097960
addss xmm6, dword [0x1401608ec]
movaps xmm0, xmm6
call fcn.1400c36b0
lea rcx, [rbp + 0x150]
call fcn.1400b1aa0
movss xmm6, dword [rax]
mov ecx, dword [0x1401eae68]
mov rax, qword gs:[0x58]
mov edx, 0x18
mov rbx, qword [rax + rcx*8]
lea rsi, str.Admin
mov eax, dword [rbx + rdx]
cmp dword [0x1401e42a4], eax
jg 0x14007ac6c
movaps xmm0, xmm6
subss xmm0, dword [0x1401e42a0]
mulss xmm0, xmm7
subss xmm0, dword [0x1401608f4]
call fcn.1400c3660
movabs rax, 0x9b2e51dbb51aacf0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0x80], xmm0
lea rax, [rbp + 0x80]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8d, [r9 + 0x10]
mov rdx, rsi
lea rcx, str.username
call fcn.14012c4f0
lea r15, str.Test123
mov eax, 0x18
mov eax, dword [rbx + rax]
cmp dword [0x1401e42ac], eax
jg 0x14007acbe
movaps xmm0, xmm6
subss xmm0, dword [0x1401e42a8]
mulss xmm0, xmm7
subss xmm0, dword [0x1401608f4]
call fcn.1400c3660
movabs rax, 0x9a315fc2b40cbef5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0xfe4330b5c77fdf85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x90], xmm0
lea rax, [rbp + 0x90]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov r9d, 0x8000
mov r8d, 0x20
mov rdx, r15
lea rcx, [0x1401608d8]
call fcn.14012c4f0
lea rsi, [0x1401e4270]
mov eax, 0x18
mov eax, dword [rbx + rax]
cmp dword [0x1401e42b4], eax
jg 0x14007ad10
subss xmm6, dword [0x1401e42b0]
mulss xmm6, xmm7
subss xmm6, dword [0x1401608f4]
movaps xmm0, xmm6
call fcn.1400c3660
movabs rax, 0x912055c1ae09b1ec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xdf349ed8450b0d72
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rbx, 0xfe4330b5c77fdf85
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0xa0], xmm0
movabs rax, 0x9b3759c3a916fca6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movdqa xmm0, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0xb0], xmm0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8d, [r9 + 0x24]
mov rdx, rsi
lea rcx, [rbp + 0xb0]
call fcn.14012c4f0
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_22]
movabs rsi, 0x8c2644c6ae18bad7
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x138]
call fcn.1400af070
mov rbx, rax
movss dword [rsp + 0x20], xmm9
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x140]
call fcn.140097960
movss xmm0, dword [rbx]
subss xmm0, dword [rax]
mulss xmm0, xmm7
subss xmm0, dword [0x1401608f0]
call fcn.1400c3660
mov dword [rbp + 0x10], 0x42c80000
mov dword [rbp + 0x14], 0x42480000
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rsi, 0xfe4330b5c77fdf85
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0xd0], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xd0]
call fcn.140122d70
test al, al
je 0x14007a997
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_107]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], r14
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [r15 + r8], 0
jne 0x14007a341
mov rdx, r15
lea rcx, [rbp + 0x1c8]
call fcn.140002250
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], r14
mov r8, rbx
lea rdx, str.Admin
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14007a380
lea rcx, [rbp + 0x1a8]
call fcn.140002250
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r14
mov r8, rbx
lea rax, [0x1401e4270]
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007a3c0
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.140002250
nop
cmp qword [rbp + 0x1b8], 4
jbe 0x14007a875
cmp qword [rbp + 0x1d8], 4
jbe 0x14007a875
cmp qword [rbp + 0x198], 0x20
jb 0x14007a875
movabs rcx, 0xfe4330b5c77fdfda
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x30], xmm0
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp + 0x20]
mov rdi, rbx
inc rdi
cmp byte [rax + rdi], 0
jne 0x14007a4a3
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rbp + 0x1b8]
sub rax, r12
cmp rax, rdi
jb 0x14007ac60
lea rdx, [rbp + 0x1a8]
mov r15, qword [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0xf
cmova rdx, r15
mov qword [rbp], rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
lea rax, [r12 + rdi]
mov esi, reloc.WS2_32.dll_ntohs
lea r14, [rbp + 0x40]
cmp rax, rsi
jbe 0x14007a59c
mov rsi, rax
or rsi, 0xf
cmp rsi, rcx
jbe 0x14007a54f
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14014ac08
test rax, rax
je 0x14007a577
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
lea rax, [r12 + rdi]
mov rdx, qword [rbp]
jmp 0x14007a598
mov ecx, reloc.WS2_32.dll_shutdown
cmp rsi, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14007a57e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007ac66
jmp 0x14007a52c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14007a595
call fcn.14014ac08
mov r14, rax
lea rax, [r12 + rdi]
mov rdx, qword [rbp]
jmp 0x14007a598
xor r14d, r14d
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rsi
mov r8, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + r14]
mov r8, rdi
lea rdx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r12 + rdi]
mov byte [r14 + rax], 0
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0xf
cmova rdx, qword [rbp + 0x1c8]
mov r8, qword [rbp + 0x1d8]
lea rcx, [rbp + 0x40]
call fcn.14003f0c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r14b
lea rax, [rbp + 0x30]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14007a630
mov r8, rbx
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x110]
call fcn.14003f0c0
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x100], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0xf
cmova rdx, qword [rbp + 0x188]
mov r8, qword [rbp + 0x198]
lea rcx, [rbp + 0xf0]
call fcn.14003f0c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x200], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14007a717
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a712
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a712
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
movdqa xmm0, xmmword [0x14015a970]
movdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x14007a772
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a76d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a76d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
movdqa xmm0, xmmword [0x14015a970]
movdqu xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14007a7c7
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a7c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a7c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
movdqa xmm0, xmmword [0x14015a970]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rbx, qword [r13 + 0x48]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x168]
call fcn.14001f070
mov r8, rax
mov edx, 5
mov rcx, rbx
call fcn.1400700f0
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x14007a844
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a83f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a83f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
movdqa xmm0, xmmword [0x14015a970]
movdqu xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
mov rdi, qword [rbp + 8]
movabs rsi, 0xfe4330b5c77fdf85
movabs r12, 0xdf349ed8450b6816
jmp 0x14007a87c
mov r15, qword [rbp + 0x1a8]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_507]
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14007a8c7
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a8c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a8c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x188], 0
mov rax, qword [rbp + 0x1c0]
cmp rax, 0xf
jbe 0x14007a921
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14007a919
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a919
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14014ac44
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x14007a97e
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a979
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a979
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_21]
movaps xmm1, xmm9
xorps xmm0, xmm0
call fcn.1400c23c0
mov dword [rbp + 0x18], 0x42c80000
mov dword [rbp + 0x1c], 0x42480000
movabs rax, 0xfe435cd0a411bec6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x70], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x78], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x220], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x70], xmm0
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x70]
call fcn.140122d70
test al, al
je 0x14007aa21
mov dword [r13 + 0x40], 1
mov rcx, qword [r13 + 0x48]
call fcn.14005eb60
test al, al
je 0x14007aa3b
mov dword [r13 + 0x40], 1
jmp 0x14007ab83
mov rcx, qword [r13 + 0x48]
call fcn.14005eb30
test al, al
je 0x14007ab83
movabs rax, 0xfe4330b58b369ec3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x60], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x68], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x240], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x248], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x60], xmm0
movabs rax, 0x8c6354d0ab16bec3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x220], rax
movabs rax, 0xab55ecac36620f73
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x228], rax
movabs rax, 0xd5b7b6e3cc456036
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x230], rax
movabs rcx, 0x488c07660355dcb8
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x238], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x240], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x248], rax
movabs rax, 0xd5b7b6e3cc2b0f5f
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x250], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
xor r9d, r9d
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x220]
mov rcx, qword [r13 + 0x28]
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [r13 + 0x48]
call fcn.14006d390
cmp byte [rdi + 0xdb0], 0
je 0x14007ac1b
mov dl, 1
mov ecx, 0x237
call fcn.1400b4b20
test al, al
je 0x14007ac1b
call fcn.1400b4650
test al, al
je 0x14007ac1b
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x14007ac1b
mov ecx, 1
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
test rax, rax
je 0x14007ac15
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rax, rax
je 0x14007ac15
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov rdi, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call qword [sym.imp.USER32.dll_CloseClipboard]
test rdi, rdi
je 0x14007ac1b
mov r8d, 0x24
mov rdx, rdi
lea rcx, [0x1401e4270]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x1401e4293], 0
jmp 0x14007ac1b
call qword [sym.imp.USER32.dll_CloseClipboard]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_22]
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.14014b190
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400034f0
nop
call fcn.1400034d0
nop
lea rcx, [0x1401e42a4]
call fcn.14014ab0c
cmp dword [0x1401e42a4], 0xffffffff
jne 0x140079f46
movss dword [rsp + 0x20], xmm9
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x158]
call fcn.140097960
movss xmm0, dword [rax]
movss dword [0x1401e42a0], xmm0
lea rcx, [0x1401e42a4]
call fcn.14014aaa0
jmp 0x140079f46
lea rcx, [0x1401e42ac]
call fcn.14014ab0c
cmp dword [0x1401e42ac], 0xffffffff
jne 0x14007a006
movss dword [rsp + 0x20], xmm9
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
lea rcx, [rbp + 0x160]
call fcn.140097960
movss xmm0, dword [rax]
movss dword [0x1401e42a8], xmm0
lea rcx, [0x1401e42ac]
call fcn.14014aaa0
jmp 0x14007a006
lea rcx, [0x1401e42b4]
call fcn.14014ab0c
cmp dword [0x1401e42b4], 0xffffffff
jne 0x14007a0d5
movss dword [rsp + 0x20], xmm9
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x130]
call fcn.140097960
movss xmm1, dword [rax]
movss dword [0x1401e42b0], xmm1
lea rcx, [0x1401e42b4]
call fcn.14014aaa0
jmp 0x14007a0d5