Function at 0x18002b586
Capabilities:
Create process on windows

Disassembly:
push rax
pushf
mov eax, 0x5c1e3545
pushf
not eax
add eax, 0xdcbc4a51
xor eax, 0xe2ee7b86
rol eax, 0xe
popf
pushf
not eax
add eax, 0xd59fd623
xor eax, 0xb9fc7d86
rol eax, 0xa2
popf
cmp eax, 0x29
jne 0x18002b5c3
popf
pop rax
jmp 0x18002ce62
cmp eax, 0
jne 0x18002b5d2
popf
pop rax
jmp 0x18002b848
cmp eax, 3
jne 0x18002b5e1
popf
pop rax
jmp 0x18002ba8c
cmp eax, 1
jne 0x18002b5f0
popf
pop rax
jmp 0x18002b983
cmp eax, 0xd
jne 0x18002b5ff
popf
pop rax
jmp 0x18002c13b
cmp eax, 0x1a
jne 0x18002b60e
popf
pop rax
jmp 0x18002c75e
cmp eax, 0xe
jne 0x18002b61d
popf
pop rax
jmp 0x18002c188
cmp eax, 0xb
jne 0x18002b62c
popf
pop rax
jmp 0x18002bfe6
cmp eax, 0x19
jne 0x18002b63b
popf
pop rax
jmp 0x18002c635
cmp eax, 8
jne 0x18002b64a
popf
pop rax
jmp 0x18002be93
cmp eax, 0x2a
jne 0x18002b659
popf
pop rax
jmp 0x18002ceb0
cmp eax, 0x17
jne 0x18002b668
popf
pop rax
jmp 0x18002c5b0
cmp eax, 0x1c
jne 0x18002b677
popf
pop rax
jmp 0x18002c89f
cmp eax, 0x12
jne 0x18002b686
popf
pop rax
jmp 0x18002c30a
cmp eax, 0x18
jne 0x18002b695
popf
pop rax
jmp 0x18002c5ea
cmp eax, 0x2b
jne 0x18002b6a4
popf
pop rax
jmp 0x18002cefd
cmp eax, 0x1b
jne 0x18002b6b3
popf
pop rax
jmp 0x18002c7ea
cmp eax, 0x21
jne 0x18002b6c2
popf
pop rax
jmp 0x18002cace
cmp eax, 0x23
jne 0x18002b6d1
popf
pop rax
jmp 0x18002cb62
cmp eax, 0x25
jne 0x18002b6e0
popf
pop rax
jmp 0x18002ccb5
cmp eax, 0xf
jne 0x18002b6ef
popf
pop rax
jmp 0x18002c1d3
cmp eax, 0x13
jne 0x18002b6fe
popf
pop rax
jmp 0x18002c36a
cmp eax, 0x15
jne 0x18002b70d
popf
pop rax
jmp 0x18002c449
cmp eax, 0x24
jne 0x18002b71c
popf
pop rax
jmp 0x18002cc1a
cmp eax, 0x1e
jne 0x18002b72b
popf
pop rax
jmp 0x18002c911
cmp eax, 0xc
jne 0x18002b73a
popf
pop rax
jmp 0x18002c099
cmp eax, 0x26
jne 0x18002b749
popf
pop rax
jmp 0x18002cd56
cmp eax, 0x27
jne 0x18002b758
popf
pop rax
jmp 0x18002cd9f
cmp eax, 0x1f
jne 0x18002b767
popf
pop rax
jmp 0x18002c9a5
cmp eax, 0x10
jne 0x18002b776
popf
pop rax
jmp 0x18002c255
cmp eax, 6
jne 0x18002b785
popf
pop rax
jmp 0x18002bd77
cmp eax, 9
jne 0x18002b794
popf
pop rax
jmp 0x18002becd
cmp eax, 4
jne 0x18002b7a3
popf
pop rax
jmp 0x18002bbe4
cmp eax, 0x16
jne 0x18002b7b2
popf
pop rax
jmp 0x18002c4e8
cmp eax, 0x28
jne 0x18002b7c1
popf
pop rax
jmp 0x18002cdea
cmp eax, 0xa
jne 0x18002b7d0
popf
pop rax
jmp 0x18002bf18
cmp eax, 0x22
jne 0x18002b7df
popf
pop rax
jmp 0x18002cb04
cmp eax, 0x14
jne 0x18002b7ee
popf
pop rax
jmp 0x18002c3a2
cmp eax, 7
jne 0x18002b7fd
popf
pop rax
jmp 0x18002be17
cmp eax, 5
jne 0x18002b80c
popf
pop rax
jmp 0x18002bc1a
cmp eax, 2
jne 0x18002b81b
popf
pop rax
jmp 0x18002ba56
cmp eax, 0x20
jne 0x18002b82a
popf
pop rax
jmp 0x18002ca2d
cmp eax, 0x1d
jne 0x18002b839
popf
pop rax
jmp 0x18002c8d9
cmp eax, 0x11
jne 0x18002b848
popf
pop rax
jmp 0x18002c2f4
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x18000e040]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov rbx, rdx
mov rdi, rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rdx
xor esi, esi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rax
mov dword [rbp + 0x20], 0x68
mov dword [rbp + 0x5c], 1
mov word [rbp + 0x60], si
mov rcx, qword [0x18000ea88]
movabs rax, 0xd09b3bb6de2413b6
pushf
not rax
add rax, 0x737cd4a8
xor rax, 0x5158c0f1
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x585bc720
xor rax, 0x65374a07
rol rax, 0xc3
popf
sub rax, rcx
cmp rax, 9
jb 0x18002b93d
push rax
pushf
mov eax, 0xeb4e7734
pushf
not eax
add eax, 0xa2ab6f5b
xor eax, 0xfda6300a
rol eax, 0x48
popf
pushf
not eax
add eax, 0xbb9d8423
xor eax, 0xc0d557d0
rol eax, 0xfd
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x4b2bb899
pushf
not eax
add eax, 0x8d395c4e
xor eax, 0xca345e34
rol eax, 9
popf
pushf
not eax
add eax, 0xa45668b8
xor eax, 0xdfdc1f83
rol eax, 0x15
popf
pushf
not eax
add eax, 0xda9048df
xor eax, 0xc07257ef
rol eax, 0x49
popf
jmp 0x18002b5b4
lea rax, [0x1fcb90955]
pushf
sub rax, 0x7cb81edd
popf
cmp qword [0x18000ea90], 0xf
cmova rax, qword [0x18000ea78]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, [0x1f3de2445]
pushf
sub r9, 0x73dd7ec5
popf
lea rcx, [rbp - 0x48]
call fcn.1800291bb
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18002ba10
push rax
pushf
mov eax, 0x236ffb0b
pushf
not eax
add eax, 0xe4a8f5db
xor eax, 0xa91c8504
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xd81be9ca
xor eax, 0xaa7b77ca
rol eax, 0xd4
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x42595dc7
pushf
not eax
add eax, 0xe94b15be
xor eax, 0x81851e85
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x8fc335e0
xor eax, 0x850bf4e9
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xf7934e2f
xor eax, 0x80266dd4
rol eax, 0x4a
popf
jmp 0x18002b5b4
mov rdx, qword [rbx]
push rax
pushf
mov eax, 0xea49586a
pushf
not eax
add eax, 0x8787954e
xor eax, 0xe4b41fb1
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xc8df3656
xor eax, 0xbb95502c
rol eax, 0x21
popf
jmp 0x18002b5b4
mov r8, qword [rbx + 0x10]
lea rcx, [rbp - 0x48]
call fcn.18002f944
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x32dd2802
pushf
not r8d
add r8d, 0xccb1a7fa
xor r8d, 0xe60f1588
rol r8d, 0x5e
popf
pushf
not r8d
add r8d, 0xff55d5f2
xor r8d, 0xfd171000
rol r8d, 0x67
popf
pushf
not r8d
add r8d, 0xae0f8d85
xor r8d, 0x8919e213
rol r8d, 0x97
popf
lea rdx, [0x1d383554c]
pushf
sub rdx, 0x5382afd0
popf
lea rcx, [rbp - 0x70]
call fcn.18002f944
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x18002bbb1
push rax
pushf
mov eax, 0xeb7cddec
pushf
not eax
add eax, 0xa90cee7d
xor eax, 0xaf02d034
rol eax, 0x29
popf
pushf
not eax
add eax, 0xaea42ac6
xor eax, 0xad53dc85
rol eax, 0x14
popf
pushf
not eax
add eax, 0xbaaa188e
xor eax, 0xc857d17a
rol eax, 0xc6
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x1f6592fa
pushf
not eax
add eax, 0xb4767340
xor eax, 0xc33282dd
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf6f6bbc9
xor eax, 0xd59e323f
rol eax, 0x62
popf
jmp 0x18002b5b4
mov rdx, qword [rdi]
push rax
pushf
mov eax, 0x9ce12f02
pushf
not eax
add eax, 0xfed9bbe3
xor eax, 0xd6ad1333
rol eax, 5
popf
pushf
not eax
add eax, 0xbc823de5
xor eax, 0xd1ce4346
rol eax, 0x1d
popf
jmp 0x18002b5b4
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x70]
call fcn.18002f944
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0xe128d16c
pushf
not r8d
add r8d, 0xb1fbf306
xor r8d, 0xd7ba147f
rol r8d, 0x29
popf
pushf
not r8d
add r8d, 0x8e745648
xor r8d, 0xad971d39
rol r8d, 9
popf
pushf
not r8d
add r8d, 0xe1d611f6
xor r8d, 0xa2a801d2
rol r8d, 0x94
popf
lea rdx, [0x1f51a4753]
pushf
sub rdx, 0x7519a1db
popf
lea rcx, [rsp + 0x50]
call fcn.18002f944
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18002bd31
push rax
pushf
mov eax, 0x8ae1549b
pushf
not eax
add eax, 0xc6bf99f4
xor eax, 0xe1ce576e
rol eax, 0x30
popf
pushf
not eax
add eax, 0xbef9189e
xor eax, 0xacc13e8d
rol eax, 0xb1
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x6d021886
pushf
not eax
add eax, 0xde6eb864
xor eax, 0xca48ead0
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xc0fa988a
xor eax, 0x9333292f
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x9342515d
xor eax, 0x86a3b9df
rol eax, 0x5d
popf
jmp 0x18002b5b4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002bdd1
push rax
pushf
mov eax, 0x9768c6e2
pushf
not eax
add eax, 0x93881271
xor eax, 0x9a273493
rol eax, 0xce
popf
pushf
not eax
add eax, 0x98343e93
xor eax, 0xd7ec74b5
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc9558a70
xor eax, 0xa4f51e8f
rol eax, 0x4e
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xb9e214db
pushf
not eax
add eax, 0x96d1d942
xor eax, 0xb14a2abc
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc2a3f1f6
xor eax, 0xc4565c03
rol eax, 0x77
popf
pushf
not eax
add eax, 0xef0226bc
xor eax, 0xacebf6b1
rol eax, 0x42
popf
jmp 0x18002b5b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002be5f
push rax
pushf
mov eax, 0x388aea3e
pushf
not eax
add eax, 0x9af9496d
xor eax, 0x89414293
rol eax, 0x22
popf
pushf
not eax
add eax, 0x8599dae8
xor eax, 0xf8dd63f0
rol eax, 6
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xe662462d
pushf
not eax
add eax, 0xb405d174
xor eax, 0x9f2c7108
rol eax, 0x48
popf
pushf
not eax
add eax, 0xcd996197
xor eax, 0xad9f1344
rol eax, 0xa4
popf
jmp 0x18002b5b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0x609c11b0
pushf
not eax
add eax, 0xf3f28812
xor eax, 0x9797adb5
rol eax, 0xc
popf
pushf
not eax
add eax, 0xe8f44699
xor eax, 0xbf850705
rol eax, 0x77
popf
pushf
not eax
add eax, 0x8db4d5c8
xor eax, 0xc0fa7cc7
rol eax, 0xc6
popf
jmp 0x18002b5b4
movdqa xmm0, xmmword [0x18000a860]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18002bf8e
push rax
pushf
mov eax, 0xd6cff49a
pushf
not eax
add eax, 0xea3b87b4
xor eax, 0xc99d82f4
rol eax, 2
popf
pushf
not eax
add eax, 0xd8225e8a
xor eax, 0xd3ba8102
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xf80cdc26
xor eax, 0xeeb93f63
rol eax, 0x64
popf
pushf
not eax
add eax, 0xbca1e908
xor eax, 0xab46dd69
rol eax, 0x52
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x1e236af7
pushf
not eax
add eax, 0xe02f0598
xor eax, 0xecfad5f9
rol eax, 0x79
popf
pushf
not eax
add eax, 0xfa137850
xor eax, 0xcc17a2ce
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xc11ab29c
xor eax, 0x98855c8b
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xaf4000fe
xor eax, 0x94bd195d
rol eax, 1
popf
jmp 0x18002b5b4
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c040
push rax
pushf
mov eax, 0x4b660fb8
pushf
not eax
add eax, 0xe6b0e952
xor eax, 0xee6377d5
rol eax, 0x16
popf
pushf
not eax
add eax, 0xadba8439
xor eax, 0xf0928ad8
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd02fb223
xor eax, 0xc07f9c38
rol eax, 0x52
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x2eb6fbbd
pushf
not eax
add eax, 0x858ad96e
xor eax, 0xbfe16465
rol eax, 0x37
popf
pushf
not eax
add eax, 0x8eb408e1
xor eax, 0xc0598f5a
rol eax, 2
popf
pushf
not eax
add eax, 0xb37323ff
xor eax, 0xb2efee9e
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xf74f59c6
xor eax, 0x8932788d
rol eax, 0xe
popf
jmp 0x18002b5b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002c107
push rax
pushf
mov eax, 0x5de33e52
pushf
not eax
add eax, 0xb132906d
xor eax, 0xe0ff0031
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xfcec5873
xor eax, 0xd4580efc
rol eax, 0x80
popf
pushf
not eax
add eax, 0xeceab1b8
xor eax, 0xfd2a747d
rol eax, 0x93
popf
pushf
not eax
add eax, 0xee944466
xor eax, 0xd4195c98
rol eax, 0x4a
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x913d7823
pushf
not eax
add eax, 0xf6d12d96
xor eax, 0x82cff10e
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xd7c57e63
xor eax, 0xe5f6c5da
rol eax, 0x26
popf
jmp 0x18002b5b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0x5018be44
pushf
not eax
add eax, 0xace1f9f6
xor eax, 0xe2d7a261
rol eax, 0x25
popf
pushf
not eax
add eax, 0xf8e83426
xor eax, 0xe504cf61
rol eax, 0x86
popf
pushf
not eax
add eax, 0xa2a41bae
xor eax, 0x9e975fb9
rol eax, 0xd3
popf
jmp 0x18002b5b4
movdqa xmm0, xmmword [0x18000a860]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18002c222
push rax
pushf
mov eax, 0x5095c8df
pushf
not eax
add eax, 0xeb902aae
xor eax, 0xc3e0bd46
rol eax, 0x13
popf
pushf
not eax
add eax, 0x82978cad
xor eax, 0xde54c3d6
rol eax, 0xa6
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x18f27dd3
pushf
not eax
add eax, 0xa54ac743
xor eax, 0xe50c982a
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xbdf8126f
xor eax, 0xbb6d3fc5
rol eax, 5
popf
jmp 0x18002b5b4
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c2c1
push rax
pushf
mov eax, 0xc03cf942
pushf
not eax
add eax, 0xf9b3fd2f
xor eax, 0xa78cb5dd
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xaf31d0d8
xor eax, 0xc75e9a66
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x84bfd707
xor eax, 0xc87ffda1
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x8434dfa6
xor eax, 0x85a3613a
rol eax, 0xc5
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x1e201469
pushf
not eax
add eax, 0xa18cfc0e
xor eax, 0xd22ba247
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xc9928c57
xor eax, 0x8f63750c
rol eax, 0x7a
popf
jmp 0x18002b5b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002c36a
jmp 0x18002c30a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0x9b34e82a
pushf
not eax
add eax, 0xe8b17a51
xor eax, 0xcea28e77
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x9c383548
xor eax, 0xad2a5c86
rol eax, 0xf6
popf
jmp 0x18002b5b4
movdqa xmm0, xmmword [0x18000a860]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18002c416
push rax
pushf
mov eax, 0xd23e2ea9
pushf
not eax
add eax, 0xe1c37ce7
xor eax, 0xe4867301
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xf9e21154
xor eax, 0xb866cdf6
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xfa7dbc56
xor eax, 0xf40007fb
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xbbdc9059
xor eax, 0xdb0f51e2
rol eax, 0x58
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xa093422a
pushf
not eax
add eax, 0x81ad17ee
xor eax, 0x94acb384
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb3834723
xor eax, 0xddea4d4c
rol eax, 0xf6
popf
jmp 0x18002b5b4
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c4b5
push rax
pushf
mov eax, 0x5f9df52c
pushf
not eax
add eax, 0x8bc84628
xor eax, 0xeb27fe51
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xda566c85
xor eax, 0xac8f0c21
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb4fc72dc
xor eax, 0xfc76e34c
rol eax, 0x44
popf
pushf
not eax
add eax, 0xe72ff2e9
xor eax, 0xe4f5ab40
rol eax, 0x4b
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x66aad513
pushf
not eax
add eax, 0xa06731d8
xor eax, 0xfaa5bc53
rol eax, 0x76
popf
pushf
not eax
add eax, 0xfaead514
xor eax, 0xd4fa6e9b
rol eax, 0x56
popf
jmp 0x18002b5b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002c556
push rax
pushf
mov eax, 0xc2b4ec1c
pushf
not eax
add eax, 0xcc6a3763
xor eax, 0xc5c25721
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xc4ae9087
xor eax, 0xb26f11a9
rol eax, 0x51
popf
pushf
not eax
add eax, 0x927f3bf9
xor eax, 0xf186ccd2
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x90f49843
xor eax, 0xcb42e565
rol eax, 0x92
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xb7944c69
pushf
not eax
add eax, 0xb8f356ec
xor eax, 0xd73205b4
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x9b05361f
xor eax, 0xc11e1eea
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xa3d5cef9
xor eax, 0xf63eb9cc
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xe7e3d8fe
xor eax, 0xff1a1af9
rol eax, 0xbe
popf
jmp 0x18002b5b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0xed24fcb4
pushf
not eax
add eax, 0x81e19565
xor eax, 0x96182977
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd774fb84
xor eax, 0x9c740d49
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x99ebbf36
xor eax, 0xb79cde5d
rol eax, 0x1b
popf
jmp 0x18002b5b4
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rdx, qword [rbp]
lea rax, [rbp - 0x28]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
jmp 0x18002c670
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov edx, 0x5f44bc11
pushf
not edx
add edx, 0xe1b60c6c
xor edx, 0x8046541a
rol edx, 0x6b
popf
pushf
not edx
add edx, 0x915b4a94
xor edx, 0xab36f899
rol edx, 0x71
popf
pushf
not edx
add edx, 0x93de18a5
xor edx, 0xd058cb7a
rol edx, 0x13
popf
mov rcx, qword [rbp - 0x28]
jmp 0x18002c6bf
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x28]
jmp 0x18002c6ca
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
jmp 0x18002c6d5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x18002c72b
push rax
pushf
mov eax, 0x4393049f
pushf
not eax
add eax, 0xbcf3e818
xor eax, 0xfd6a71a7
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xebb20b43
xor eax, 0xd232ec95
rol eax, 0x42
popf
pushf
not eax
add eax, 0xb185c822
xor eax, 0xcfd0bf83
rol eax, 0x1a
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x8c211921
pushf
not eax
add eax, 0xf50fa89d
xor eax, 0xd993e966
rol eax, 0x21
popf
pushf
not eax
add eax, 0xf94d5590
xor eax, 0x966e8954
rol eax, 0x6f
popf
jmp 0x18002b5b4
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c7b7
push rax
pushf
mov eax, 0xaf907ff6
pushf
not eax
add eax, 0xf1837edb
xor eax, 0xb7d7ed01
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd5eeb2fe
xor eax, 0xd99b3e96
rol eax, 0x18
popf
pushf
not eax
add eax, 0xccc74998
xor eax, 0xebcddb8c
rol eax, 0xcc
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x58c97a29
pushf
not eax
add eax, 0x899d0244
xor eax, 0xd05f9ceb
rol eax, 0x96
popf
pushf
not eax
add eax, 0xc96ecb1e
xor eax, 0x8d26a818
rol eax, 0x6c
popf
jmp 0x18002b5b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002c845
push rax
pushf
mov eax, 0x6469a36d
pushf
not eax
add eax, 0xb72cb498
xor eax, 0xe1bb9f99
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x8ec4ae1e
xor eax, 0xd83d7371
rol eax, 0xde
popf
pushf
not eax
add eax, 0xcaca738c
xor eax, 0xd7385145
rol eax, 0xae
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x62083e9c
pushf
not eax
add eax, 0xa90a6560
xor eax, 0xd60ce6e5
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xddd9cfcc
xor eax, 0xdec996e9
rol eax, 0x25
popf
pushf
not eax
add eax, 0x9fe90c5a
xor eax, 0xe391670c
rol eax, 0xca
popf
pushf
not eax
add eax, 0xeed2e825
xor eax, 0xb07c704b
rol eax, 0x3d
popf
jmp 0x18002b5b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18001eff0
push rax
pushf
mov eax, 0xfb727a7
pushf
not eax
add eax, 0xd4d4a4de
xor eax, 0xa3a6c2f2
rol eax, 0x34
popf
pushf
not eax
add eax, 0xc860014c
xor eax, 0xcc198b90
rol eax, 0xb8
popf
jmp 0x18002b5b4
movdqa xmm0, xmmword [0x18000a860]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x18002c95f
push rax
pushf
mov eax, 0x5a124e8f
pushf
not eax
add eax, 0xd47c5d61
xor eax, 0x9d63cbb4
rol eax, 5
popf
pushf
not eax
add eax, 0x97ee1003
xor eax, 0xb1756346
rol eax, 0xaa
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xb3abb30d
pushf
not eax
add eax, 0x9c79fd97
xor eax, 0xb7501a2c
rol eax, 0x72
popf
pushf
not eax
add eax, 0xda697944
xor eax, 0xe34f98be
rol eax, 5
popf
pushf
not eax
add eax, 0x88deb781
xor eax, 0xf5de68f2
rol eax, 0xce
popf
jmp 0x18002b5b4
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x18002c9e7
push rax
pushf
mov eax, 0x5c6b51f2
pushf
not eax
add eax, 0xb71a2091
xor eax, 0xb657ffe3
rol eax, 0x72
popf
pushf
not eax
add eax, 0x9e23a20a
xor eax, 0xda2bee25
rol eax, 0xcc
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x869c049f
pushf
not eax
add eax, 0xe9f4aa06
xor eax, 0xeec51bba
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xe6ebc97f
xor eax, 0xe48f42c5
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xa0bfe067
xor eax, 0x92070db8
rol eax, 0x82
popf
jmp 0x18002b5b4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002ca88
push rax
pushf
mov eax, 0xf983e2d9
pushf
not eax
add eax, 0xb45731f4
xor eax, 0xfc4f6963
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xe6b85bdf
xor eax, 0xc332f352
rol eax, 0x10
popf
pushf
not eax
add eax, 0xa600689a
xor eax, 0xeb07e841
rol eax, 0x4d
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xf0cc9e98
pushf
not eax
add eax, 0xc18a1773
xor eax, 0xe9843626
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xa6ec78b5
xor eax, 0xd725a68b
rol eax, 0x33
popf
pushf
not eax
add eax, 0x8b7176a4
xor eax, 0xdbde6f02
rol eax, 0x5c
popf
jmp 0x18002b5b4
mov rcx, r8
push rax
pushf
mov eax, 0x6b455bb3
pushf
not eax
add eax, 0xd87ff791
xor eax, 0xbc853c4d
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xc90c204e
xor eax, 0xc93857e7
rol eax, 0xc4
popf
jmp 0x18002b5b4
call fcn.18001eff0
push rax
pushf
mov eax, 0x2594d6b7
pushf
not eax
add eax, 0xfeb353f3
xor eax, 0x8eaf1569
rol eax, 0x92
popf
pushf
not eax
add eax, 0xec476aaa
xor eax, 0xc46a87b9
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xe8be180e
xor eax, 0xdbd9383b
rol eax, 0x93
popf
pushf
not eax
add eax, 0xed0b4f1a
xor eax, 0x9e785ed5
rol eax, 0xa6
popf
jmp 0x18002b5b4
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x18002cbc1
push rax
pushf
mov eax, 0x560f28d2
pushf
not eax
add eax, 0xd480c665
xor eax, 0xdcc1aa26
rol eax, 0x54
popf
pushf
not eax
add eax, 0xc47124f9
xor eax, 0xc2c7c4eb
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xfafd95d5
xor eax, 0x823f8203
rol eax, 0x86
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xeba6a1cd
pushf
not eax
add eax, 0xb76265f5
xor eax, 0xf8b4eb5c
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xa3f5df74
xor eax, 0xc850a3f7
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xa3079267
xor eax, 0xbd7a7463
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9422a8cd
xor eax, 0xcca0de57
rol eax, 0xbf
popf
jmp 0x18002b5b4
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x18002cc6f
push rax
pushf
mov eax, 0x4ba8c6b7
pushf
not eax
add eax, 0x9b1a9497
xor eax, 0x8fde9945
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xb3e2e41a
xor eax, 0x94431684
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xc2e07838
xor eax, 0x9ee4b78d
rol eax, 0xe2
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0xdccdcde
pushf
not eax
add eax, 0xa8b31be6
xor eax, 0xd92360eb
rol eax, 0x79
popf
pushf
not eax
add eax, 0xb61c0718
xor eax, 0xf547fd02
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xeb174a96
xor eax, 0xa7c94529
rol eax, 0xa3
popf
jmp 0x18002b5b4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002cd10
push rax
pushf
mov eax, 0x3b6c9134
pushf
not eax
add eax, 0x8a7a5478
xor eax, 0xb9f77de1
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xdd5bf6b5
xor eax, 0xf48caf43
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x8ea2b9d8
xor eax, 0xee7af7d0
rol eax, 0x56
popf
jmp 0x18002b5b4
push rax
pushf
mov eax, 0x3bcb5197
pushf
not eax
add eax, 0xbfc48734
xor eax, 0x8945a4f1
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xbaf80714
xor eax, 0xac8a4114
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x846605c8
xor eax, 0x87137e91
rol eax, 0x75
popf
jmp 0x18002b5b4
mov rcx, r8
push rax
pushf
mov eax, 0x8ce4eb5e
pushf
not eax
add eax, 0xcb1cd417
xor eax, 0x87f5611c
rol eax, 0x80
popf
pushf
not eax
add eax, 0xb8b88f31
xor eax, 0x88b2ac1a
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xa8b43d0a
xor eax, 0x8edb2a6a
rol eax, 0xc2
popf
jmp 0x18002b5b4
call fcn.18001eff0
push rax
pushf
mov eax, 0x9de4818d
pushf
not eax
add eax, 0xf6181fdb
xor eax, 0xcb2dd9e5
rol eax, 5
popf
pushf
not eax
add eax, 0xdf0cef96
xor eax, 0x893e63bf
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xae93bec3
xor eax, 0xe1f545ac
rol eax, 0x20
popf
jmp 0x18002b5b4
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.18002b2fc
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x1a0
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
push rax
pushf
mov eax, 0x6ab77e92
pushf
not eax
add eax, 0x86bcddb9
xor eax, 0xf7219a62
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb275cb08
xor eax, 0xbb3dbbed
rol eax, 0x76
popf
pushf
not eax
add eax, 0x89b53dc1
xor eax, 0xfabfec12
rol eax, 0x15
popf
jmp 0x18002b5b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
push rax
pushf
mov eax, 0xdd67e1aa
pushf
not eax
add eax, 0xc4f23acf
xor eax, 0xa6dc406a
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xb087dcf1
xor eax, 0xef4f167f
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xad0277da
xor eax, 0xb6271e9b
rol eax, 0xc1
popf
jmp 0x18002b5b4
call fcn.18002cf03
int3