Function at 0x18f88b7d00
Capabilities:
Contain obfuscated stackstrings
Create thread
Terminate thread

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov rdi, rcx
xor r15d, r15d
cmp qword [rcx + 8], r15
jne 0x18f88b7ecc
mov rbx, qword [rcx + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov ecx, 0x3bb3
mov dword [rsp + 0x30], 0x3bf63bb3
mov dword [rsp + 0x34], 0x3bc33bde
mov dword [rsp + 0x38], 0x3bca3bc7
mov dword [rbp - 0x7d], 0x3bc33b93
mov dword [rbp - 0x79], 0x3bc13bd2
mov dword [rbp - 0x75], 0x3bde3bd2
mov dword [rbp - 0x71], 0x3bc73bd6
mov dword [rbp - 0x6d], 0x3bc13bd6
mov word [rbp - 0x69], cx
mov eax, ecx
xor ax, word [str.No_.NET_n]
mov word [rbp - 0x67], ax
mov eax, ecx
xor ax, word [0x18f88ddeca]
mov word [rbp - 0x65], ax
mov eax, ecx
xor ax, word [0x18f88ddecc]
mov word [rbp - 0x63], ax
mov eax, ecx
xor ax, word [0x18f88ddece]
mov word [rbp - 0x61], ax
mov eax, ecx
xor ax, word [0x18f88dded0]
mov word [rbp - 0x5f], ax
mov eax, ecx
xor ax, word [0x18f88dded2]
mov word [rbp - 0x5d], ax
mov eax, ecx
xor ax, word [0x18f88dded4]
mov word [rbp - 0x5b], ax
mov eax, ecx
xor ax, word [0x18f88dded6]
mov word [rbp - 0x59], ax
mov eax, ecx
xor ax, word [0x18f88dded8]
mov word [rbp - 0x57], ax
mov eax, ecx
xor ax, word [0x18f88ddeda]
mov word [rbp - 0x55], ax
mov eax, ecx
xor ax, word [0x18f88ddedc]
mov word [rbp - 0x53], ax
mov eax, ecx
xor ax, word [0x18f88ddede]
mov word [rbp - 0x51], ax
mov eax, ecx
xor ax, word [str.No_AppDomain_n]
mov word [rbp - 0x4f], ax
mov eax, ecx
xor ax, word [0x18f88ddee2]
mov word [rbp - 0x4d], ax
mov eax, ecx
xor ax, word [0x18f88ddee4]
mov word [rbp - 0x4b], ax
xor eax, eax
mov word [rbp - 0x49], ax
mov eax, r15d
xor word [rsp + rax*2 + 0x32], cx
inc rax
cmp rax, 0x1f
jae 0x18f88b7e58
movzx ecx, word [rsp + 0x30]
jmp 0x18f88b7e43
mov word [rbp - 0x49], r15w
lea rdx, [rsp + 0x32]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80070057
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b7ec1
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b7ebc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e62
call fcn.18f88bd1e0
mov rcx, rdi
call qword [rdi + 0x40]
jmp 0x18f88b8e2a
mov rcx, qword [0x18f88e5410]
test rcx, rcx
jne 0x18f88b8035
mov rcx, rdi
call fcn.18f88b4b40
test eax, eax
jne 0x18f88b802e
mov rbx, qword [rdi + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov ecx, 0x53f3
mov dword [rsp + 0x30], 0x53bd53f3
mov dword [rsp + 0x34], 0x53d5539b
mov dword [rsp + 0x38], 0x53b953d8
mov dword [rbp - 0x7d], 0x53ad53bd
mov dword [rbp - 0x79], 0x53fb53f0
lea eax, [rcx + 9]
xor ax, word [0x18f88ddeda]
mov word [rbp - 0x75], ax
lea eax, [rcx + 0xa]
xor ax, word [0x18f88ddedc]
mov word [rbp - 0x73], ax
lea eax, [rcx + 0xb]
xor ax, word [0x18f88ddede]
mov word [rbp - 0x71], ax
lea eax, [rcx + 0xc]
xor ax, word [str.No_AppDomain_n]
mov word [rbp - 0x6f], ax
lea eax, [rcx + 0xd]
xor ax, word [0x18f88ddee2]
mov word [rbp - 0x6d], ax
lea eax, [rcx + 0xe]
xor ax, word [0x18f88ddee4]
mov word [rbp - 0x6b], ax
lea eax, [rcx + 0xf]
xor ax, word [0x18f88ddee6]
mov word [rbp - 0x69], ax
lea eax, [rcx + 0x10]
xor ax, word [0x18f88ddee8]
mov word [rbp - 0x67], ax
xor eax, eax
mov word [rbp - 0x65], ax
mov rax, r15
mov edx, 0x11
add cx, ax
xor word [rsp + rax*2 + 0x32], cx
inc rax
cmp rax, rdx
jae 0x18f88b7fbc
movzx ecx, word [rsp + 0x30]
jmp 0x18f88b7fa5
mov word [rbp - 0x65], r15w
lea rdx, [rsp + 0x32]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e2a
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e68
call fcn.18f88bd1e0
jmp 0x18f88b8e2a
mov rcx, qword [0x18f88e5410]
mov r8, rdi
lea rdx, [rbp + 0x77]
call fcn.18f88b5004
test eax, eax
jne 0x18f88b81e6
mov rbx, qword [rdi + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov r8d, 0xf6aa
mov dword [rsp + 0x30], 0xf6e4f6aa
lea edx, [r8 + 0x1a]
mov dword [rsp + 0x34], 0xf68cf6c4
mov dword [rsp + 0x38], 0xf6def6ec
mov dword [rbp - 0x7d], 0xf6f4f6df
mov dword [rbp - 0x79], 0xf6dff6de
mov dword [rbp - 0x75], 0xf6ddf6d2
mov dword [rbp - 0x71], 0xf6bcf6db
lea ecx, [rdx - 8]
lea eax, [rdx - 0xd]
mov word [rbp - 0x6d], ax
lea eax, [rdx - 0xc]
xor ax, word [0x18f88ddefc]
mov word [rbp - 0x6b], ax
lea eax, [rdx - 0xb]
xor ax, word [0x18f88ddefe]
mov word [rbp - 0x69], ax
lea eax, [rdx - 0xa]
xor ax, word [str.Load_failed_n]
mov word [rbp - 0x67], ax
lea eax, [rdx - 9]
xor ax, word [0x18f88ddf02]
mov word [rbp - 0x65], ax
xor cx, word [0x18f88ddf04]
mov word [rbp - 0x63], cx
lea eax, [rdx - 7]
xor ax, word [0x18f88ddf06]
mov word [rbp - 0x61], ax
lea eax, [rdx - 6]
xor ax, word [0x18f88ddf08]
mov word [rbp - 0x5f], ax
lea eax, [rdx - 5]
xor ax, word [0x18f88ddf0a]
mov word [rbp - 0x5d], ax
lea eax, [rdx - 4]
xor ax, word [0x18f88ddf0c]
mov word [rbp - 0x5b], ax
lea eax, [rdx - 3]
xor ax, word [0x18f88ddf0e]
mov word [rbp - 0x59], ax
lea eax, [rdx - 2]
xor ax, word [0x18f88ddf10]
mov word [rbp - 0x57], ax
lea eax, [rdx - 1]
xor ax, word [0x18f88ddf12]
mov word [rbp - 0x55], ax
xor dx, word [0x18f88ddf14]
mov word [rbp - 0x53], dx
xor eax, eax
mov word [rbp - 0x51], ax
mov rax, r15
add r8w, ax
xor word [rsp + rax*2 + 0x32], r8w
inc rax
cmp rax, 0x1b
jae 0x18f88b8175
movzx r8d, word [rsp + 0x30]
jmp 0x18f88b815a
mov word [rbp - 0x51], r15w
lea rdx, [rsp + 0x32]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e2a
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e3e
jmp 0x18f88b8024
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f]
mov r8, qword [rdi + 0x18]
mov rdx, qword [rdi + 0x10]
mov rcx, qword [rbp + 0x77]
call fcn.18f88b71b4
test eax, eax
jne 0x18f88b837c
mov rbx, qword [rdi + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov ecx, 0xfa
mov dword [rsp + 0x30], 0xb600fa
mov dword [rsp + 0x34], 0x9b0095
mov dword [rsp + 0x38], 0xda009e
mov dword [rbp - 0x7d], 0x9b009c
mov dword [rbp - 0x79], 0x960093
mov dword [rbp - 0x75], 0x9e009f
mov dword [rbp - 0x71], 0xfa00f0
mov eax, ecx
xor ax, word [0x18f88ddf1a]
mov word [rbp - 0x6d], ax
mov eax, ecx
xor ax, word [0x18f88ddf1c]
mov word [rbp - 0x6b], ax
mov eax, ecx
xor ax, word [0x18f88ddf1e]
mov word [rbp - 0x69], ax
mov eax, ecx
xor ax, word [str.No_entry_point_n]
mov word [rbp - 0x67], ax
mov eax, ecx
xor ax, word [0x18f88ddf22]
mov word [rbp - 0x65], ax
mov eax, ecx
xor ax, word [0x18f88ddf24]
mov word [rbp - 0x63], ax
mov eax, ecx
xor ax, word [0x18f88ddf26]
mov word [rbp - 0x61], ax
mov eax, ecx
xor ax, word [0x18f88ddf28]
mov word [rbp - 0x5f], ax
mov eax, ecx
xor ax, word [0x18f88ddf2a]
mov word [rbp - 0x5d], ax
mov eax, ecx
xor ax, word [0x18f88ddf2c]
mov word [rbp - 0x5b], ax
mov eax, ecx
xor ax, word [0x18f88ddf2e]
mov word [rbp - 0x59], ax
mov eax, ecx
xor ax, word [0x18f88ddf30]
mov word [rbp - 0x57], ax
xor eax, eax
mov word [rbp - 0x55], ax
mov rax, r15
xor word [rsp + rax*2 + 0x32], cx
inc rax
cmp rax, 0x19
jae 0x18f88b830b
movzx ecx, word [rsp + 0x30]
jmp 0x18f88b82f6
mov word [rbp - 0x55], r15w
lea rdx, [rsp + 0x32]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e2a
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e44
jmp 0x18f88b8024
mov rcx, qword [rbp + 0x6f]
mov rax, qword [rcx]
lea rdx, [rbp + 0x7f]
call qword [rax + 0x80]
test eax, eax
jns 0x18f88b8540
mov rsi, qword [rdi + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov dword [rsp + 0x30], 0x760055
mov ebx, 0x27
mov dword [rsp + 0x34], 0x6c0027
mov dword [rsp + 0x38], 0x7b0075
mov dword [rbp - 0x7d], 0x800079
mov dword [rbp - 0x79], 0x770027
mov dword [rbp - 0x75], 0x700076
mov dword [rbp - 0x71], 0x7b0075
mov dword [rbp - 0x6d], 0x70011
lea ecx, [rbx - 0x20]
movzx eax, word [str.Prepare_params_failed_n]
add ax, cx
mov word [rbp - 0x69], ax
movzx eax, word [0x18f88ddf42]
add ax, cx
mov word [rbp - 0x67], ax
movzx eax, word [0x18f88ddf44]
add ax, cx
mov word [rbp - 0x65], ax
movzx eax, word [0x18f88ddf46]
add ax, cx
mov word [rbp - 0x63], ax
movzx eax, word [0x18f88ddf48]
add ax, cx
mov word [rbp - 0x61], ax
movzx eax, word [0x18f88ddf4a]
add ax, cx
mov word [rbp - 0x5f], ax
movzx eax, word [0x18f88ddf4c]
add ax, cx
mov word [rbp - 0x5d], ax
movzx eax, word [0x18f88ddf4e]
add ax, cx
mov word [rbp - 0x5b], ax
movzx eax, word [0x18f88ddf50]
add ax, cx
mov word [rbp - 0x59], ax
movzx eax, word [0x18f88ddf52]
add ax, cx
mov word [rbp - 0x57], ax
movzx eax, word [0x18f88ddf54]
add ax, cx
mov word [rbp - 0x55], ax
movzx eax, word [0x18f88ddf56]
add ax, cx
mov word [rbp - 0x53], ax
movzx eax, word [0x18f88ddf58]
add ax, cx
mov word [rbp - 0x51], ax
movzx eax, word [0x18f88ddf5a]
add ax, cx
mov word [rbp - 0x4f], ax
movzx eax, word [0x18f88ddf5c]
add ax, cx
mov word [rbp - 0x4d], ax
mov word [rbp - 0x4b], r15w
mov rax, r15
mov ecx, 0xfff9
add word [rsp + rax*2 + 0x30], cx
inc rax
cmp rax, 0x1f
jb 0x18f88b84c2
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rsi
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e2a
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8024
add rdx, rbx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e4a
jmp 0x18f88b8024
lea rcx, [0x18f88dd7a0]
cmp qword [rdi + 8], r15
cmovne rcx, qword [rdi + 8]
lea rdx, [rbp + 0x67]
call fcn.18f88b7b38
test eax, eax
jne 0x18f88b87ad
mov rbx, qword [rdi + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov r11d, 0x4035
mov dword [rsp + 0x30], 0x40654035
mov dword [rsp + 0x34], 0x40524044
lea edx, [r11 + 0x1d]
mov dword [rsp + 0x38], 0x40584048
lea r8d, [r11 + 0x23]
mov dword [rbp - 0x7d], 0x405e4048
lea r10d, [r11 + 0x29]
mov dword [rbp - 0x79], 0x404d401c
lea ecx, [rdx - 5]
lea r9d, [r11 + 0x2a]
mov dword [rbp - 0x75], 0x404d405f
mov dword [rbp - 0x71], 0x402c4021
mov dword [rbp - 0x6d], 0x40634031
mov dword [rbp - 0x69], 0x40244022
mov dword [rbp - 0x65], 0x402b402f
mov dword [rbp - 0x61], 0x402d402d
mov dword [rbp - 0x5d], 0x404b4040
lea eax, [rdx - 6]
xor ax, word [0x18f88ddf6e]
mov word [rbp - 0x59], ax
xor cx, word [str.Redirect_stdout_failed_n]
mov word [rbp - 0x57], cx
lea eax, [rdx - 4]
xor ax, word [0x18f88ddf72]
mov word [rbp - 0x55], ax
lea eax, [rdx - 3]
xor ax, word [0x18f88ddf74]
mov word [rbp - 0x53], ax
lea eax, [rdx - 2]
xor ax, word [0x18f88ddf76]
mov word [rbp - 0x51], ax
lea eax, [rdx - 1]
xor ax, word [0x18f88ddf78]
mov word [rbp - 0x4f], ax
xor dx, word [0x18f88ddf7a]
mov word [rbp - 0x4d], dx
lea eax, [r11 + 0x1e]
xor ax, word [0x18f88ddf7c]
mov word [rbp - 0x4b], ax
lea eax, [r11 + 0x1f]
xor ax, word [0x18f88ddf7e]
mov word [rbp - 0x49], ax
lea eax, [r11 + 0x20]
xor ax, word [0x18f88ddf80]
mov word [rbp - 0x47], ax
lea eax, [r11 + 0x21]
xor ax, word [0x18f88ddf82]
mov word [rbp - 0x45], ax
lea eax, [r11 + 0x22]
xor ax, word [0x18f88ddf84]
mov word [rbp - 0x43], ax
xor r8w, word [0x18f88ddf86]
mov word [rbp - 0x41], r8w
lea eax, [r11 + 0x24]
xor ax, word [0x18f88ddf88]
mov word [rbp - 0x3f], ax
lea eax, [r11 + 0x25]
xor ax, word [0x18f88ddf8a]
mov word [rbp - 0x3d], ax
lea eax, [r11 + 0x26]
xor ax, word [0x18f88ddf8c]
mov word [rbp - 0x3b], ax
lea eax, [r11 + 0x27]
xor ax, word [0x18f88ddf8e]
mov word [rbp - 0x39], ax
lea eax, [r11 + 0x28]
xor ax, word [0x18f88ddf90]
mov word [rbp - 0x37], ax
xor r10w, word [0x18f88ddf92]
mov word [rbp - 0x35], r10w
xor r9w, word [0x18f88ddf94]
mov word [rbp - 0x33], r9w
lea eax, [r11 + 0x2b]
xor ax, word [0x18f88ddf96]
mov word [rbp - 0x31], ax
lea eax, [r11 + 0x2c]
xor ax, word [0x18f88ddf98]
mov word [rbp - 0x2f], ax
xor eax, eax
mov word [rbp - 0x2d], ax
mov rax, r15
add r11w, ax
xor word [rsp + rax*2 + 0x32], r11w
inc rax
cmp rax, 0x2d
jae 0x18f88b873c
movzx r11d, word [rsp + 0x30]
jmp 0x18f88b8721
mov word [rbp - 0x2d], r15w
lea rdx, [rsp + 0x32]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e2a
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e50
jmp 0x18f88b8024
mov rcx, rdi
call fcn.18f88b11dc
test eax, eax
jne 0x18f88b89f0
mov rbx, qword [rdi + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov dword [rsp + 0x30], 0x71005e
mov dword [rsp + 0x34], 0x750070
mov dword [rsp + 0x38], 0x71007e
mov dword [rbp - 0x7d], 0x80006f
mov dword [rbp - 0x79], 0x7f002c
mov dword [rbp - 0x75], 0x700080
mov dword [rbp - 0x71], 0x81007b
mov dword [rbp - 0x6d], 0x2c0080
mov dword [rbp - 0x69], 0x6d0072
mov dword [rbp - 0x65], 0x780075
mov dword [rbp - 0x61], 0x700071
mov dword [rbp - 0x5d], 0xc0016
lea ecx, [rax + 0xc]
movzx eax, word [str.Invoke_failed_____08X_n]
add ax, cx
mov word [rbp - 0x59], ax
movzx eax, word [0x18f88ddfa2]
add ax, cx
mov word [rbp - 0x57], ax
movzx eax, word [0x18f88ddfa4]
add ax, cx
mov word [rbp - 0x55], ax
movzx eax, word [0x18f88ddfa6]
add ax, cx
mov word [rbp - 0x53], ax
movzx eax, word [0x18f88ddfa8]
add ax, cx
mov word [rbp - 0x51], ax
movzx eax, word [0x18f88ddfaa]
add ax, cx
mov word [rbp - 0x4f], ax
movzx eax, word [0x18f88ddfac]
add ax, cx
mov word [rbp - 0x4d], ax
movzx eax, word [0x18f88ddfae]
add ax, cx
mov word [rbp - 0x4b], ax
movzx eax, word [0x18f88ddfb0]
add ax, cx
mov word [rbp - 0x49], ax
movzx eax, word [0x18f88ddfb2]
add ax, cx
mov word [rbp - 0x47], ax
movzx eax, word [0x18f88ddfb4]
add ax, cx
mov word [rbp - 0x45], ax
movzx eax, word [0x18f88ddfb6]
add ax, cx
mov word [rbp - 0x43], ax
movzx eax, word [0x18f88ddfb8]
add ax, cx
mov word [rbp - 0x41], ax
movzx eax, word [0x18f88ddfba]
add ax, cx
mov word [rbp - 0x3f], ax
movzx eax, word [0x18f88ddfbc]
add ax, cx
mov word [rbp - 0x3d], ax
movzx eax, word [0x18f88ddfbe]
add ax, cx
mov word [rbp - 0x3b], ax
movzx eax, word [0x18f88ddfc0]
add ax, cx
mov word [rbp - 0x39], ax
movzx eax, word [0x18f88ddfc2]
add ax, cx
mov word [rbp - 0x37], ax
movzx eax, word [0x18f88ddfc4]
add ax, cx
mov word [rbp - 0x35], ax
movzx eax, word [0x18f88ddfc6]
add ax, cx
mov word [rbp - 0x33], ax
movzx eax, word [0x18f88ddfc8]
add ax, cx
mov word [rbp - 0x31], ax
movzx eax, word [0x18f88ddfca]
add ax, cx
mov word [rbp - 0x2f], ax
movzx eax, word [0x18f88ddfcc]
add ax, cx
mov word [rbp - 0x2d], ax
mov word [rbp - 0x2b], r15w
mov rax, r15
mov ecx, 0xfff4
add word [rsp + rax*2 + 0x30], cx
inc rax
cmp rax, 0x2f
jb 0x18f88b8971
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e2a
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e56
jmp 0x18f88b8024
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
mov r9, rdi
lea r8, [0x18f88b214c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
mov eax, 3
mov word [rbp + 0x17], ax
mov dword [rbp + 0x1f], 1
mov rcx, qword [rbp + 0x7f]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x128]
movups xmm0, xmmword [rbp + 0x17]
movaps xmmword [rbp - 0x29], xmm0
movsd xmm1, qword [rbp + 0x27]
movsd qword [rbp - 0x19], xmm1
xor r9d, r9d
mov r8, qword [rbp + 0x67]
lea rdx, [rbp - 0x29]
call r10
mov esi, eax
mov rcx, qword [0x18f88e5408]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or qword [0x18f88e5408], 0xffffffffffffffff
mov edx, 0x3e8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x18f88e5400]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or qword [0x18f88e5408], 0xffffffffffffffff
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x67]
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x6f]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rbx, qword [rdi + 0x30]
xorps xmm0, xmm0
mov qword [rbp - 0x19], r15
movdqu xmmword [rbp - 0x29], xmm0
test esi, esi
jns 0x18f88b8ceb
mov dword [rsp + 0x30], 0x72004d
mov dword [rsp + 0x34], 0x73007a
mov dword [rsp + 0x38], 0x69006f
mov dword [rbp - 0x7d], 0x6a0024
mov dword [rbp - 0x79], 0x6d0065
mov dword [rbp - 0x75], 0x690070
mov dword [rbp - 0x71], 0x240068
mov dword [rbp - 0x6d], 0x420031
mov dword [rbp - 0x69], 0x290024
mov dword [rbp - 0x65], 0x3c0034
mov dword [rbp - 0x61], 0xe005c
mov ecx, 4
mov word [rbp - 0x5d], cx
movzx eax, word [0x18f88ddfce]
add ax, cx
mov word [rbp - 0x5b], ax
movzx eax, word [str.Invoke_OK_n]
add ax, cx
mov word [rbp - 0x59], ax
movzx eax, word [0x18f88ddfd2]
add ax, cx
mov word [rbp - 0x57], ax
movzx eax, word [0x18f88ddfd4]
add ax, cx
mov word [rbp - 0x55], ax
movzx eax, word [0x18f88ddfd6]
add ax, cx
mov word [rbp - 0x53], ax
movzx eax, word [0x18f88ddfd8]
add ax, cx
mov word [rbp - 0x51], ax
movzx eax, word [0x18f88ddfda]
add ax, cx
mov word [rbp - 0x4f], ax
movzx eax, word [0x18f88ddfdc]
add ax, cx
mov word [rbp - 0x4d], ax
movzx eax, word [0x18f88ddfde]
add ax, cx
mov word [rbp - 0x4b], ax
movzx eax, word [0x18f88ddfe0]
add ax, cx
mov word [rbp - 0x49], ax
movzx eax, word [0x18f88ddfe2]
add ax, cx
mov word [rbp - 0x47], ax
movzx eax, word [0x18f88ddfe4]
add ax, cx
mov word [rbp - 0x45], ax
movzx eax, word [0x18f88ddfe6]
add ax, cx
mov word [rbp - 0x43], ax
movzx eax, word [str.EnumerateAppDomain_failed__n]
add ax, cx
mov word [rbp - 0x41], ax
movzx eax, word [0x18f88ddfea]
add ax, cx
mov word [rbp - 0x3f], ax
movzx eax, word [0x18f88ddfec]
add ax, cx
mov word [rbp - 0x3d], ax
movzx eax, word [0x18f88ddfee]
add ax, cx
mov word [rbp - 0x3b], ax
movzx eax, word [0x18f88ddff0]
add ax, cx
mov word [rbp - 0x39], ax
movzx eax, word [0x18f88ddff2]
add ax, cx
mov word [rbp - 0x37], ax
movzx eax, word [0x18f88ddff4]
add ax, cx
mov word [rbp - 0x35], ax
movzx eax, word [0x18f88ddff6]
add ax, cx
mov word [rbp - 0x33], ax
movzx eax, word [0x18f88ddff8]
add ax, cx
mov word [rbp - 0x31], ax
mov word [rbp - 0x2f], r15w
mov rax, r15
mov ecx, 0xfffc
add word [rsp + rax*2 + 0x30], cx
inc rax
cmp rax, 0x2d
jb 0x18f88b8c69
mov r8d, esi
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
mov edx, 0x80004005
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e20
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8e1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e5c
jmp 0x18f88b8e1a
mov ecx, 0x2cc4
mov dword [rsp + 0x30], 0x2c8d2cc4
mov dword [rsp + 0x34], 0x2cb22caa
mov dword [rsp + 0x38], 0x2caf2cab
mov dword [rbp - 0x7d], 0x2ce42ca1
mov dword [rbp - 0x79], 0x2c8f2c8b
mov dword [rbp - 0x75], 0x2cc42cce
mov eax, ecx
xor ax, word [0x18f88ddfe6]
mov word [rbp - 0x71], ax
mov eax, ecx
xor ax, word [str.EnumerateAppDomain_failed__n]
mov word [rbp - 0x6f], ax
mov eax, ecx
xor ax, word [0x18f88ddfea]
mov word [rbp - 0x6d], ax
mov eax, ecx
xor ax, word [0x18f88ddfec]
mov word [rbp - 0x6b], ax
mov eax, ecx
xor ax, word [0x18f88ddfee]
mov word [rbp - 0x69], ax
mov eax, ecx
xor ax, word [0x18f88ddff0]
mov word [rbp - 0x67], ax
mov eax, ecx
xor ax, word [0x18f88ddff2]
mov word [rbp - 0x65], ax
mov eax, ecx
xor ax, word [0x18f88ddff4]
mov word [rbp - 0x63], ax
mov eax, ecx
xor ax, word [0x18f88ddff6]
mov word [rbp - 0x61], ax
mov eax, ecx
xor ax, word [0x18f88ddff8]
mov word [rbp - 0x5f], ax
xor eax, eax
mov word [rbp - 0x5d], ax
mov rax, r15
xor word [rsp + rax*2 + 0x32], cx
inc rax
cmp rax, 0x15
jae 0x18f88b8dbd
movzx ecx, word [rsp + 0x30]
jmp 0x18f88b8da8
mov word [rbp - 0x5d], r15w
lea rdx, [rsp + 0x32]
lea rcx, [rbp - 9]
call fcn.18f88bba18
nop
lea r9, [rbp - 0x29]
mov r8, rax
xor edx, edx
mov ecx, dword [rdi]
call rbx
nop
lea rcx, [rbp - 9]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x18f88b8e20
mov rdx, qword [rbp - 0x19]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b8e1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b8e38
call fcn.18f88bd1e0
nop
lea rcx, [rbp + 0x17]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
add rsp, 0xf0
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.18f88c3388
nop
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
nop
call fcn.18f88c3388
nop
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3