Function at 0x18002bfb7
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings

Disassembly:
push rax
pushf
mov eax, 0xe3ba061e
pushf
not eax
add eax, 0xbbff3301
xor eax, 0xf27a056b
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xbf63f535
xor eax, 0xcd0d763d
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xd31ef39f
xor eax, 0x9e5ebca3
rol eax, 0x1f
popf
cmp eax, 0x20
jne 0x18002c007
popf
pop rax
jmp 0x18002dd2d
cmp eax, 0
jne 0x18002c016
popf
pop rax
jmp 0x18002c1f6
cmp eax, 3
jne 0x18002c025
popf
pop rax
jmp 0x18002c483
cmp eax, 1
jne 0x18002c034
popf
pop rax
jmp 0x18002c331
cmp eax, 0xd
jne 0x18002c043
popf
pop rax
jmp 0x18002cdc5
cmp eax, 0x1a
jne 0x18002c052
popf
pop rax
jmp 0x18002d9b8
cmp eax, 0xe
jne 0x18002c061
popf
pop rax
jmp 0x18002cf57
cmp eax, 0xb
jne 0x18002c070
popf
pop rax
jmp 0x18002ccb9
cmp eax, 0x19
jne 0x18002c07f
popf
pop rax
jmp 0x18002d924
cmp eax, 8
jne 0x18002c08e
popf
pop rax
jmp 0x18002c7b4
cmp eax, 0x1d
jne 0x18002c09d
popf
pop rax
jmp 0x18002dc02
cmp eax, 0x17
jne 0x18002c0ac
popf
pop rax
jmp 0x18002d7f5
cmp eax, 0x1c
jne 0x18002c0bb
popf
pop rax
jmp 0x18002db80
cmp eax, 0x12
jne 0x18002c0ca
popf
pop rax
jmp 0x18002d43a
cmp eax, 0x18
jne 0x18002c0d9
popf
pop rax
jmp 0x18002d868
cmp eax, 0x11
jne 0x18002c0e8
popf
pop rax
jmp 0x18002d38e
cmp eax, 0x1b
jne 0x18002c0f7
popf
pop rax
jmp 0x18002da15
cmp eax, 0x21
jne 0x18002c106
popf
pop rax
jmp 0x18002dd94
cmp eax, 0xa
jne 0x18002c115
popf
pop rax
jmp 0x18002ca7e
cmp eax, 0x14
jne 0x18002c124
popf
pop rax
jmp 0x18002d51a
cmp eax, 0xf
jne 0x18002c133
popf
pop rax
jmp 0x18002cff3
cmp eax, 0x13
jne 0x18002c142
popf
pop rax
jmp 0x18002d4aa
cmp eax, 0x15
jne 0x18002c151
popf
pop rax
jmp 0x18002d634
cmp eax, 2
jne 0x18002c160
popf
pop rax
jmp 0x18002c3c6
cmp eax, 0x1e
jne 0x18002c16f
popf
pop rax
jmp 0x18002dc98
cmp eax, 0xc
jne 0x18002c17e
popf
pop rax
jmp 0x18002cd3f
cmp eax, 7
jne 0x18002c18d
popf
pop rax
jmp 0x18002c700
cmp eax, 5
jne 0x18002c19c
popf
pop rax
jmp 0x18002c5e3
cmp eax, 0x1f
jne 0x18002c1ab
popf
pop rax
jmp 0x18002dcf7
cmp eax, 0x10
jne 0x18002c1ba
popf
pop rax
jmp 0x18002d03b
cmp eax, 6
jne 0x18002c1c9
popf
pop rax
jmp 0x18002c696
cmp eax, 9
jne 0x18002c1d8
popf
pop rax
jmp 0x18002c99a
cmp eax, 4
jne 0x18002c1e7
popf
pop rax
jmp 0x18002c505
cmp eax, 0x16
jne 0x18002c1f6
popf
pop rax
jmp 0x18002d6d5
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x24e0]
mov eax, 0xd9d86f90
pushf
not eax
add eax, 0xb8f4307e
xor eax, 0xc4260695
rol eax, 1
popf
pushf
not eax
add eax, 0x956217f5
xor eax, 0xc0938f52
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xed0ba0ea
xor eax, 0xcf0ce444
rol eax, 0x48
popf
pushf
not eax
add eax, 0xdc984648
xor eax, 0x821f6e8d
rol eax, 0xe7
popf
call fcn.180014a60
sub rsp, rax
mov r15, rcx
mov esi, 0x1e35c177
pushf
not esi
add esi, 0xef82c641
xor esi, 0xb3e010b1
rol esi, 0x6a
popf
pushf
not esi
add esi, 0x8e4a29a7
xor esi, 0x874d1689
rol esi, 0x3b
popf
pushf
not esi
add esi, 0x8078626c
xor esi, 0x9582b777
rol esi, 0x4a
popf
mov r8d, esi
lea rcx, [rbp + 0x10c0]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
jmp 0x18002c2bf
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea r14d, [rsi - 1]
mov r9d, eax
mov edx, r14d
lea r8, [0x1ec8942f3]
pushf
sub r8, 0x6c87a5d3
popf
lea rcx, [rbp + 0x10c0]
call fcn.18000c1d4
or r13, 0xffffffffffffffff
lea rax, [rbp + 0x10c0]
mov rdi, r13
xor r12d, r12d
push rax
pushf
mov eax, 0xb33c369d
pushf
not eax
add eax, 0xc0e47683
xor eax, 0x9539158e
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xe490bd19
xor eax, 0x87cc3385
rol eax, 0x5a
popf
jmp 0x18002bff8
inc rdi
cmp byte [rax + rdi], r12b
jne 0x18002c380
push rax
pushf
mov eax, 0xaab95516
pushf
not eax
add eax, 0x8b3895b8
xor eax, 0xe081c2d9
rol eax, 0x78
popf
pushf
not eax
add eax, 0x8c26f852
xor eax, 0x8e835a94
rol eax, 0xae
popf
pushf
not eax
add eax, 0x91a5cae5
xor eax, 0xe8cfe43b
rol eax, 0x51
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x411e8ce
pushf
not eax
add eax, 0xeedfb76f
xor eax, 0xcf723fd1
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xc401035c
xor eax, 0xd27030a7
rol eax, 0x42
popf
pushf
not eax
add eax, 0xb50f212e
xor eax, 0x802a4a04
rol eax, 0xb8
popf
jmp 0x18002bff8
mov ebx, 0xf17410c6
pushf
not ebx
add ebx, 0xf0c32d4f
xor ebx, 0xe6db4415
rol ebx, 0xce
popf
pushf
not ebx
add ebx, 0x96e6d195
xor ebx, 0x80bf8b3f
rol ebx, 0xbc
popf
lea rcx, [rbp + 0x11c0]
mov r8, rsi
xor edx, edx
push rbx
not ebx
sub edi, ebx
pop rbx
sub edi, 1
call sub.VCRUNTIME140.dll_memset
mov r9, r15
lea r8, [0x1ca163648]
pushf
sub r8, 0x4a149918
popf
mov rdx, r14
lea rcx, [rbp + 0x11c0]
call fcn.18000c1d4
lea rax, [rbp + 0x11c0]
mov rsi, r13
push rax
pushf
mov eax, 0xefcf240c
pushf
not eax
add eax, 0xcd3116a9
xor eax, 0xa203b78c
rol eax, 0x90
popf
pushf
not eax
add eax, 0xe0eb6fad
xor eax, 0xe555ba0e
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x959c12c2
xor eax, 0xaca7687a
rol eax, 0x97
popf
jmp 0x18002bff8
inc rsi
cmp byte [rax + rsi], r12b
jne 0x18002c4bf
push rax
pushf
mov eax, 0xa735a849
pushf
not eax
add eax, 0xe452cb0a
xor eax, 0xc60e7eea
rol eax, 0x88
popf
pushf
not eax
add eax, 0x948e0bbe
xor eax, 0x8131e042
rol eax, 0x1b
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x8e12cfd3
pushf
not eax
add eax, 0x9c69b813
xor eax, 0x9db1edea
rol eax, 0x84
popf
pushf
not eax
add eax, 0xf6235bac
xor eax, 0x8ba95de5
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xf98f22a3
xor eax, 0x83cd6867
rol eax, 0x87
popf
jmp 0x18002bff8
mov dword [rbp - 0x68], 0x2a
push rbx
not ebx
sub esi, ebx
pop rbx
sub esi, 1
mov byte [rbp - 0x64], 0x19
xor eax, eax
mov byte [rbp - 0x63], 0x1c
mov r8, r12
mov byte [rbp - 0x62], 0x1d
mov byte [rbp - 0x61], 0x4b
mov byte [rbp - 0x60], 0x48
mov byte [rbp - 0x5f], 0x48
mov byte [rbp - 0x5e], 0x12
mov byte [rbp - 0x5d], 0x1b
mov byte [rbp - 0x5c], 7
mov byte [rbp - 0x5b], 0x13
mov byte [rbp - 0x5a], 0x12
mov byte [rbp - 0x59], 0x1e
mov byte [rbp - 0x58], 0x1e
mov byte [rbp - 0x57], 7
mov byte [rbp - 0x56], 0x19
mov byte [rbp - 0x55], 0x1f
mov byte [rbp - 0x54], 0x4c
mov byte [rbp - 0x53], 0x1b
mov byte [rbp - 0x52], 7
mov byte [rbp - 0x51], 0x4b
mov byte [rbp - 0x50], 0x4e
mov byte [rbp - 0x4f], 0x19
mov byte [rbp - 0x4e], 0x18
mov byte [rbp - 0x4d], 7
mov byte [rbp - 0x4c], 0x13
mov byte [rbp - 0x4b], 0x12
mov byte [rbp - 0x4a], 0x4c
mov byte [rbp - 0x49], 0x1a
mov byte [rbp - 0x48], 0x19
mov byte [rbp - 0x47], 0x12
mov byte [rbp - 0x46], 0x1a
mov byte [rbp - 0x45], 0x1a
mov byte [rbp - 0x44], 0x1b
mov byte [rbp - 0x43], 0x1a
mov byte [rbp - 0x42], 0x1a
mov byte [rbp - 0x41], 0x19
mov byte [rbp - 0x40], al
mov al, byte [rbp - 0x64]
push rax
pushf
mov eax, 0x7cb63eea
pushf
not eax
add eax, 0xca3ef250
xor eax, 0x897a8148
rol eax, 0x53
popf
pushf
not eax
add eax, 0x82f4af9c
xor eax, 0xf186a00a
rol eax, 0x15
popf
jmp 0x18002bff8
movsx edx, byte [rbp + r8 - 0x64]
mov eax, dword [rbp - 0x68]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 - 0x64], al
push rbx
not rbx
sub r8, rbx
pop rbx
sub r8, 1
cmp r8, 0x24
jb 0x18002c63d
push rax
pushf
mov eax, 0x5976f35e
pushf
not eax
add eax, 0xf366ceed
xor eax, 0xac2e96e0
rol eax, 0x90
popf
pushf
not eax
add eax, 0xc0a60568
xor eax, 0xb337cfa6
rol eax, 3
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xce42f9c5
pushf
not eax
add eax, 0xc9fa5404
xor eax, 0xb402a03c
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9c6b7a48
xor eax, 0xd30751dc
rol eax, 0x90
popf
pushf
not eax
add eax, 0xfdd6b1c0
xor eax, 0xc63a03ab
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xa02998ab
xor eax, 0xd3618e0d
rol eax, 0x18
popf
jmp 0x18002bff8
mov byte [rbp - 0x40], r12b
xor eax, eax
mov dword [rsp + 0x60], 0x55
mov r8, r12
mov byte [rsp + 0x64], 0x3b
mov byte [rsp + 0x65], 0x21
mov byte [rsp + 0x66], 0x26
mov byte [rsp + 0x67], 0x23
mov byte [rsp + 0x68], 0x36
mov byte [rsp + 0x69], 0x26
mov byte [rsp + 0x6a], al
mov al, byte [rsp + 0x64]
push rax
pushf
mov eax, 0x83f00f13
pushf
not eax
add eax, 0xd8eb7237
xor eax, 0xef1f5aa1
rol eax, 0x84
popf
pushf
not eax
add eax, 0xaf1c4389
xor eax, 0x80d8ab5d
rol eax, 0x64
popf
jmp 0x18002bff8
movsx edx, byte [rsp + r8 + 0x64]
mov eax, dword [rsp + 0x60]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rsp + r8 + 0x64], al
push rbx
not rbx
sub r8, rbx
pop rbx
sub r8, 1
cmp r8, 6
jb 0x18002c781
push rax
pushf
mov eax, 0xf55fcc1b
pushf
not eax
add eax, 0x9c6e2e8f
xor eax, 0x822931ad
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x89b63968
xor eax, 0xe705c677
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc18d0259
xor eax, 0xc193cf9d
rol eax, 0x61
popf
pushf
not eax
add eax, 0x8b128ca0
xor eax, 0x8a826cee
rol eax, 0x9c
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xf9eb9b41
pushf
not eax
add eax, 0xbceb161a
xor eax, 0xd7005365
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc5e5b930
xor eax, 0xc93d44d8
rol eax, 0x31
popf
jmp 0x18002bff8
xor edx, edx
mov byte [rsp + 0x6a], r12b
mov r8d, 0x1c47df80
pushf
not r8d
add r8d, 0x840ab288
xor r8d, 0xc8dcd578
rol r8d, 0x9b
popf
pushf
not r8d
add r8d, 0xc6295b23
xor r8d, 0xb1ad13e6
rol r8d, 0x9c
popf
pushf
not r8d
add r8d, 0xbfdb18cb
xor r8d, 0xea2dde3b
rol r8d, 0x19
popf
pushf
not r8d
add r8d, 0xa40e0b61
xor r8d, 0xa08b4222
rol r8d, 0xb8
popf
lea rcx, [rbp + 0x12c0]
call sub.VCRUNTIME140.dll_memset
lea r9, [rsp + 0x64]
mov edx, 0x516b127c
pushf
not edx
add edx, 0xfe72db5d
xor edx, 0xaea15a1c
rol edx, 0x3c
popf
pushf
not edx
add edx, 0xb9aef620
xor edx, 0xd15d5e88
rol edx, 0xed
popf
pushf
not edx
add edx, 0xfe0f9a26
xor edx, 0xbc009520
rol edx, 0xa
popf
lea r8, [0x1d61ed86d]
pushf
sub r8, 0x561d3b5d
popf
lea rcx, [rbp + 0x12c0]
call fcn.18000c1d4
mov qword [rsp + 0x30], r12
lea rcx, [rbp + 0x12c0]
mov dword [rsp + 0x28], r12d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0x6a23e014
pushf
not edx
add edx, 0xa023179c
xor edx, 0x84304940
rol edx, 0xd8
popf
pushf
not edx
add edx, 0xc81518fc
xor edx, 0x8e6e1df5
rol edx, 0x21
popf
pushf
not edx
add edx, 0xff5fe240
xor edx, 0xe345391e
rol edx, 0x3a
popf
jmp 0x18002c8fc
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
cmp rax, r13
je 0x18002c941
push rax
pushf
mov eax, 0xb5f7daa2
pushf
not eax
add eax, 0xa3764d44
xor eax, 0xc96c2e99
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x98d854a2
xor eax, 0xe06a4c7d
rol eax, 0xd2
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x67180e85
pushf
not eax
add eax, 0x9f9baf35
xor eax, 0xfed4dbb6
rol eax, 0x78
popf
pushf
not eax
add eax, 0xb20b1199
xor eax, 0xe942eccf
rol eax, 0x45
popf
pushf
not eax
add eax, 0xa44887d6
xor eax, 0xb5c4bde6
rol eax, 0x75
popf
pushf
not eax
add eax, 0xf799c34b
xor eax, 0xeb53ec28
rol eax, 0xd0
popf
jmp 0x18002bff8
xor edx, edx
lea rcx, [rbp + 0x14cc]
mov r8d, 0x13ae309
pushf
not r8d
add r8d, 0xf30a7542
xor r8d, 0xd58a7c31
rol r8d, 0x94
popf
pushf
not r8d
add r8d, 0xa71aa283
xor r8d, 0xc6887e0c
rol r8d, 0xdf
popf
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x64]
mov qword [rbp + 0x14c0], r14
lea rcx, [rbp + 0x14c0]
mov dword [rbp + 0x14c8], ebx
call fcn.1800250b9
test eax, eax
jne 0x18002ca4b
push rax
pushf
mov eax, 0x58636f2f
pushf
not eax
add eax, 0xb50dfbf2
xor eax, 0xb0153d36
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x8849142e
xor eax, 0xf2da9cb3
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xb3fc5325
xor eax, 0xfbe4119e
rol eax, 0x12
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xeecf1905
pushf
not eax
add eax, 0x89b90ab1
xor eax, 0x984aa183
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xf8445681
xor eax, 0xee43ad8d
rol eax, 0x40
popf
jmp 0x18002bff8
mov r8d, 0x7ec6ec7a
pushf
not r8d
add r8d, 0xadf5c4d9
xor r8d, 0x9d7ecdc6
rol r8d, 0x2f
popf
pushf
not r8d
add r8d, 0xa987f8a0
xor r8d, 0x8de90f12
rol r8d, 0x61
popf
pushf
not r8d
add r8d, 0xc71ff97c
xor r8d, 0xa07ed0b1
rol r8d, 0x7a
popf
lea rdx, [rbp + 0x14c0]
lea rcx, [rbp + 0xa0]
call sub.VCRUNTIME140.dll_memcpy
mov r13d, 0xe1ce4e8c
pushf
not r13d
add r13d, 0x86b7f611
xor r13d, 0xc90c14fe
rol r13d, 0xcb
popf
pushf
not r13d
add r13d, 0xd63f9db5
xor r13d, 0xa8a3cb45
rol r13d, 0xa3
popf
lea rcx, [rbp + 0xb4]
mov r8d, r13d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8d, r13d
mov dword [rbp + 0x8b4], r12d
xor edx, edx
lea rcx, [rbp + 0x8b8]
call sub.VCRUNTIME140.dll_memset
mov r14d, 0x1bbf104a
pushf
not r14d
add r14d, 0xfde1653c
xor r14d, 0xe4f2ad1a
rol r14d, 0xb4
popf
pushf
not r14d
add r14d, 0xbd08b7a6
xor r14d, 0xae508580
rol r14d, 0xf5
popf
pushf
not r14d
add r14d, 0xaab47433
xor r14d, 0xc7fe7319
rol r14d, 0xd
popf
mov dword [rbp + 0x10b8], r12d
mov r8d, r14d
mov dword [rbp + 0xac], r12d
lea rdx, [rbp + 0x2528]
mov dword [rbp + 0xb0], ebx
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0x2528], r12d
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x2530], r12d
lea rdx, [rbp + 0x2530]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x2538], 0xf003f
lea rdx, [rbp + 0x2538]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
lea edx, [r14 + 0x17]
lea rcx, [rbp + 0xa0]
call fcn.18000c514
test eax, eax
jne 0x18002cc60
push rax
pushf
mov eax, 0x888d540c
pushf
not eax
add eax, 0x97b1fba0
xor eax, 0x935767d3
rol eax, 0x63
popf
pushf
not eax
add eax, 0x82032df9
xor eax, 0xdfb9feaf
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xe82c20af
xor eax, 0x8d759cf5
rol eax, 0xe4
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x20b24fdd
pushf
not eax
add eax, 0x98ec4996
xor eax, 0x84efb121
rol eax, 0xa
popf
pushf
not eax
add eax, 0xe252489e
xor eax, 0xf13ca185
rol eax, 0x12
popf
pushf
not eax
add eax, 0xf40517a8
xor eax, 0x9f843988
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x90588bd3
xor eax, 0xaed26e26
rol eax, 0x42
popf
jmp 0x18002bff8
cmp dword [rbp + 0x10b8], 0x18
jne 0x18002cd0c
push rax
pushf
mov eax, 0xd66a052c
pushf
not eax
add eax, 0xd49b0bd6
xor eax, 0xdc590c40
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x8f0d9dc0
xor eax, 0xab132bc9
rol eax, 0x27
popf
pushf
not eax
add eax, 0xdf23a282
xor eax, 0xe508364e
rol eax, 0xdf
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x762aef9b
pushf
not eax
add eax, 0x83633114
xor eax, 0x833927ef
rol eax, 0x81
popf
pushf
not eax
add eax, 0xc506265c
xor eax, 0xa983592c
rol eax, 0xae
popf
jmp 0x18002bff8
cmp dword [rbp + 0x8cc], r12d
je 0x18002cd92
push rax
pushf
mov eax, 0xd8904d63
pushf
not eax
add eax, 0x8b39c51f
xor eax, 0xeb0b4f7e
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x900f1f82
xor eax, 0xee155da7
rol eax, 0xda
popf
pushf
not eax
add eax, 0xcb0a4f4c
xor eax, 0xea0b8018
rol eax, 0x6b
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x629e5a7b
pushf
not eax
add eax, 0xe82b65ce
xor eax, 0x9a0d0037
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd389a679
xor eax, 0xe3a839d5
rol eax, 0x8f
popf
jmp 0x18002bff8
mov dword [rsp + 0x40], 0x52
mov eax, dword [rsp + 0x40]
xor eax, 0x4f
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
add al, bl
xor eax, 0x70
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor eax, 0x65
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor eax, 0x6e
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, r14b
xor eax, 0x53
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor eax, 0x43
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor eax, 0x4d
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor eax, 0x61
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor eax, 0x6e
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor eax, 0x61
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor eax, 0x67
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor eax, 0x65
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor eax, 0x72
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor eax, 0x20
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor eax, 0x65
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor eax, 0x72
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor eax, 0x72
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor eax, 0x6f
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor eax, 0x72
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor eax, 0x3a
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
mov rdx, r12
xor eax, 0x20
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor eax, 0x25
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor eax, 0x75
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor eax, 0xa
mov byte [rsp + 0x5b], al
xor eax, eax
mov byte [rsp + 0x5c], al
mov al, byte [rsp + 0x44]
push rax
pushf
mov eax, 0xb11b9fb2
pushf
not eax
add eax, 0x9039e1bd
xor eax, 0xda8b276d
rol eax, 0x39
popf
pushf
not eax
add eax, 0x97c1c5fc
xor eax, 0xe531e1aa
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x9a7608bf
xor eax, 0xe7ad91f5
rol eax, 0xdc
popf
jmp 0x18002bff8
movsx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor ecx, eax
mov byte [rsp + rdx + 0x44], cl
push rbx
not rbx
sub rdx, rbx
pop rbx
sub rdx, 1
cmp rdx, 0x18
jb 0x18002cfad
push rax
pushf
mov eax, 0x78540c28
pushf
not eax
add eax, 0xf404a8f0
xor eax, 0x821c1c06
rol eax, 0x33
popf
pushf
not eax
add eax, 0xec489b61
xor eax, 0xe638cdf3
rol eax, 0x40
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xf4d11a4b
pushf
not eax
add eax, 0x8cac990a
xor eax, 0x98d59c8f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xaec798fa
xor eax, 0x87b281a2
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xa83df8a6
xor eax, 0xa5e8e880
rol eax, 0x1e
popf
jmp 0x18002bff8
mov edx, dword [rbp + 0x8cc]
lea rcx, [rsp + 0x44]
mov byte [rsp + 0x5c], r12b
jmp 0x18002dcaa
movups xmm0, xmmword [rbp + 0x8b8]
mov eax, dword [rbp + 0x8c8]
lea rcx, [rbp + 0xb4]
mov r8, r13
mov dword [rbp + 0x90], eax
xor edx, edx
movups xmmword [rbp + 0x80], xmm0
call sub.VCRUNTIME140.dll_memset
mov r8, r13
mov dword [rbp + 0x8b4], r12d
xor edx, edx
lea rcx, [rbp + 0x8b8]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x5f85c214
pushf
not r8d
add r8d, 0xb2227459
xor r8d, 0xcb9be210
rol r8d, 0xd5
popf
pushf
not r8d
add r8d, 0xf20c7a8b
xor r8d, 0xe5f959a0
rol r8d, 0x6b
popf
mov dword [rbp + 0x10b8], r12d
lea rdx, [rbp + 0x80]
mov dword [rbp + 0xac], r12d
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0xb0], ebx
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 0x38], edi
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 0x30], r12d
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 0x28], edi
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, edi
lea rdx, [rbp + 0x10c0]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 0x20], r12d
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 0x18], 0xf01ff
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 0x10], 0x10
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp - 8], 3
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp], r12d
lea rdx, [rbp]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 8], esi
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x10], r12d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x18], esi
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, esi
lea rdx, [rbp + 0x11c0]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x28], r12d
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x30], r12d
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x38], r12d
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x40], r12d
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x48], r12d
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x50], r12d
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov edx, 0xae1399ed
pushf
not edx
add edx, 0xfa49bc76
xor edx, 0xb3c8cde8
rol edx, 0xc3
popf
pushf
not edx
add edx, 0x80a05caf
xor edx, 0x80b0e1a7
rol edx, 0xd0
popf
lea rcx, [rbp + 0xa0]
call fcn.18000c514
test eax, eax
jne 0x18002d335
push rax
pushf
mov eax, 0x9ed27e12
pushf
not eax
add eax, 0x85db3e3c
xor eax, 0x89b6bf7d
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xeb57598f
xor eax, 0xa8a71630
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa9fa8d80
xor eax, 0xc12498e2
rol eax, 0x71
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x8fc07e18
pushf
not eax
add eax, 0x82cb9c9b
xor eax, 0xaf41ec6e
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x80007733
xor eax, 0xa5f440a1
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x8336f057
xor eax, 0xbd327e69
rol eax, 0x35
popf
pushf
not eax
add eax, 0x88f2fec1
xor eax, 0x9c107445
rol eax, 0xcc
popf
jmp 0x18002bff8
cmp dword [rbp + 0x10b8], 0x1c
jne 0x18002d3f4
push rax
pushf
mov eax, 0x6181cdfc
pushf
not eax
add eax, 0xb7dfe2f8
xor eax, 0xc629ae39
rol eax, 0x50
popf
pushf
not eax
add eax, 0xe2dbba33
xor eax, 0xe7fedb7f
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xcb99d9be
xor eax, 0xbfda24c0
rol eax, 0x84
popf
pushf
not eax
add eax, 0x88a4d200
xor eax, 0xa0b40d59
rol eax, 0xaa
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x6c2fddda
pushf
not eax
add eax, 0xf674a53a
xor eax, 0xe2e0d461
rol eax, 0x98
popf
pushf
not eax
add eax, 0xd8fe81e2
xor eax, 0xaae05196
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xe999c4fc
xor eax, 0xe38b1170
rol eax, 0x9c
popf
jmp 0x18002bff8
mov edx, dword [rbp + 0x8d0]
test edx, edx
je 0x18002d477
push rax
pushf
mov eax, 0x468a5258
pushf
not eax
add eax, 0x9801bc98
xor eax, 0xc362d654
rol eax, 0x73
popf
pushf
not eax
add eax, 0x8387abef
xor eax, 0xa02b0841
rol eax, 0x18
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x2bcfe331
pushf
not eax
add eax, 0xf885e449
xor eax, 0x9436644a
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xba1e3228
xor eax, 0xcdda2efd
rol eax, 0x2b
popf
jmp 0x18002bff8
lea rcx, [0x1ecc5ebf9]
pushf
sub rcx, 0x6cc44eb9
popf
jmp 0x18002dcaa
mov eax, dword [rbp + 0x8cc]
mov r8, r12
movups xmm0, xmmword [rbp + 0x8bc]
mov dword [rbp + 0x78], eax
xor eax, eax
mov byte [rbp - 0x69], al
movups xmmword [rbp + 0x68], xmm0
mov dword [rsp + 0x6c], 0x7b
mov byte [rsp + 0x70], 0x20
mov byte [rsp + 0x71], 0x29
mov byte [rsp + 0x72], 0x2b
mov byte [rsp + 0x73], 0x38
mov byte [rsp + 0x74], 0x26
mov byte [rsp + 0x75], 0x5b
mov byte [rsp + 0x76], 0x3e
mov byte [rsp + 0x77], 3
mov byte [rsp + 0x78], 0x1e
mov byte [rsp + 0x79], 0x18
mov byte [rsp + 0x7a], 0xe
mov byte [rsp + 0x7b], 0xf
mov byte [rsp + 0x7c], 0x12
mov byte [rsp + 0x7d], 0x15
mov byte [rsp + 0x7e], 0x1c
mov byte [rsp + 0x7f], 0x5b
mov byte [rbp - 0x80], 0x5c
mov byte [rbp - 0x7f], 0x5e
mov byte [rbp - 0x7e], 8
mov byte [rbp - 0x7d], 0x5c
mov byte [rbp - 0x7c], 0x5b
mov byte [rbp - 0x7b], 0x1a
mov byte [rbp - 0x7a], 8
mov byte [rbp - 0x79], 0x5b
mov byte [rbp - 0x78], 0x28
mov byte [rbp - 0x77], 0x22
mov byte [rbp - 0x76], 0x28
mov byte [rbp - 0x75], 0x2f
mov byte [rbp - 0x74], 0x3e
mov byte [rbp - 0x73], 0x36
mov byte [rbp - 0x72], 0x5b
mov byte [rbp - 0x71], 0xe
mov byte [rbp - 0x70], 8
mov byte [rbp - 0x6f], 0x1e
mov byte [rbp - 0x6e], 9
mov byte [rbp - 0x6d], 0x55
mov byte [rbp - 0x6c], 0x55
mov byte [rbp - 0x6b], 0x55
mov byte [rbp - 0x6a], WSAStartup
mov al, byte [rsp + 0x70]
push rax
pushf
mov eax, 0xd786335d
pushf
not eax
add eax, 0xd8f1cd07
xor eax, 0xc068b8c9
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xaf9e8119
xor eax, 0xf56f288c
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x8fd718b6
xor eax, 0xf0268b68
rol eax, 0x71
popf
jmp 0x18002bff8
movsx edx, byte [rsp + r8 + 0x70]
mov eax, dword [rsp + 0x6c]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rsp + r8 + 0x70], al
push rbx
not rbx
sub r8, rbx
pop rbx
sub r8, 1
cmp r8, 0x27
jb 0x18002d68f
push rax
pushf
mov eax, 0xea9da063
pushf
not eax
add eax, 0xad359555
xor eax, 0x966f7461
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xe051b89d
xor eax, 0xd5b2a38a
rol eax, 0x99
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x2b6d8512
pushf
not eax
add eax, 0x89376e0e
xor eax, 0xf5815974
rol eax, 0xee
popf
pushf
not eax
add eax, 0xfedaf863
xor eax, 0xffc0ce21
rol eax, 0xff
popf
pushf
not eax
add eax, 0x9130fcb8
xor eax, 0xfa55367f
rol eax, 0x57
popf
jmp 0x18002bff8
mov rdx, r15
mov byte [rbp - 0x69], r12b
lea rcx, [rsp + 0x70]
call fcn.180003948
mov r8, r13
lea rcx, [rbp + 0xb4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r13
mov dword [rbp + 0x8b4], r12d
xor edx, edx
lea rcx, [rbp + 0x8b8]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x14624713
pushf
not r8d
add r8d, 0xbbb85531
xor r8d, 0x9c137e3e
rol r8d, 0xc0
popf
pushf
not r8d
add r8d, 0x8a5c01de
xor r8d, 0x8eb521b0
rol r8d, 0xd6
popf
pushf
not r8d
add r8d, 0xd8019006
xor r8d, 0xd5512659
rol r8d, 0x1c
popf
mov dword [rbp + 0x10b8], r12d
lea rdx, [rbp + 0x68]
mov dword [rbp + 0xac], r12d
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0xb0], ebx
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x58], r12d
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov r8d, r14d
mov dword [rbp + 0x60], r12d
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0xa0]
call fcn.18000c6ac
mov edx, 0x26109ce9
pushf
not edx
add edx, 0xa7e55a17
xor edx, 0xb1fe8c5a
rol edx, 0xb4
popf
pushf
not edx
add edx, 0xcb12d429
xor edx, 0xb3e3d185
rol edx, 0xae
popf
lea rcx, [rbp + 0xa0]
call fcn.18000c514
test eax, eax
jne 0x18002dd2d
cmp dword [rbp + 0x10b8], r14d
jne 0x18002d835
push rax
pushf
mov eax, 0x2c47a202
pushf
not eax
add eax, 0xc9e52c92
xor eax, 0xbb926b4b
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xc6922c03
xor eax, 0xb5f98c7b
rol eax, 0xd6
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xe060f121
pushf
not eax
add eax, 0xf886a10c
xor eax, 0xea4dcf50
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xda23ed4e
xor eax, 0xd44c5a02
rol eax, 0xa2
popf
jmp 0x18002bff8
mov edx, dword [rbp + 0x8b8]
test edx, edx
je 0x18002d8cb
push rax
pushf
mov eax, 0x4c746288
pushf
not eax
add eax, 0xc0734bcf
xor eax, 0xe7b70bbe
rol eax, 0x23
popf
pushf
not eax
add eax, 0xf7136ae9
xor eax, 0x91f6916a
rol eax, 0xce
popf
pushf
not eax
add eax, 0xa0d96ca9
xor eax, 0xe9838c5a
rol eax, 0x24
popf
pushf
not eax
add eax, 0x82b8114a
xor eax, 0xe654a3c8
rol eax, 0x7b
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xefcd80a
pushf
not eax
add eax, 0x9a9d12dc
xor eax, 0x84943cea
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xe5f4be99
xor eax, 0x92941b4e
rol eax, 0x29
popf
pushf
not eax
add eax, 0xf17e5f9f
xor eax, 0xb97b78b3
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xe56fbe7e
xor eax, 0xb25ebfbf
rol eax, 0xea
popf
jmp 0x18002bff8
cmp edx, 0x41d
je 0x18002d95f
push rax
pushf
mov eax, 0xbeb3ebe8
pushf
not eax
add eax, 0xf7b2394b
xor eax, 0xb520f81d
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x8b753d01
xor eax, 0x8be75e4d
rol eax, 0x22
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0xf520de01
pushf
not eax
add eax, 0xcf54a6d9
xor eax, 0x95c5ce9b
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xf26cb26c
xor eax, 0xa0a17f2d
rol eax, 0x31
popf
pushf
not eax
add eax, 0xd7586d97
xor eax, 0x8bba81fb
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8052b6f1
xor eax, 0xa8646d34
rol eax, 0x95
popf
jmp 0x18002bff8
lea rcx, [0x1c060e8c4]
pushf
sub rcx, 0x405f4b64
popf
jmp 0x18002dcaa
mov r8, r13
lea rcx, [rbp + 0xb4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r13
mov dword [rbp + 0x8b4], r12d
xor edx, edx
lea rcx, [rbp + 0x8b8]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0xb6f05556
pushf
not r8d
add r8d, 0xf81da8ad
xor r8d, 0xb2c34594
rol r8d, 0x6a
popf
pushf
not r8d
add r8d, 0xc4da6cb8
xor r8d, 0xce355392
rol r8d, 4
popf
pushf
not r8d
add r8d, 0xf4e2e8dd
xor r8d, 0x903fb131
rol r8d, 0xa4
popf
mov dword [rbp + 0x10b8], r12d
lea rdx, [rbp + 0x68]
mov dword [rbp + 0xac], r12d
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0xb0], ebx
call fcn.18000c6ac
mov edx, 0xe607af5
pushf
not edx
add edx, 0xc9e92b7c
xor edx, 0xf8701105
rol edx, 0x59
popf
pushf
not edx
add edx, 0x97e470ae
xor edx, 0xd74d30bb
rol edx, 0xa8
popf
pushf
not edx
add edx, 0xdd92cf99
xor edx, 0xcc40fe52
rol edx, 0x50
popf
lea rcx, [rbp + 0xa0]
call fcn.18000c514
test eax, eax
jne 0x18002db4d
push rax
pushf
mov eax, 0x86a7381d
pushf
not eax
add eax, 0xd0215762
xor eax, 0xda51d6c9
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xf69ddec3
xor eax, 0xc92518df
rol eax, 0x92
popf
pushf
not eax
add eax, 0xd769ea80
xor eax, 0xfa5dcaaf
rol eax, 0xf9
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x84300a00
pushf
not eax
add eax, 0xa8602210
xor eax, 0x96be64df
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb354f578
xor eax, 0xe90b0235
rol eax, 0xd1
popf
jmp 0x18002bff8
cmp dword [rbp + 0x10b8], r14d
jne 0x18002dbbc
push rax
pushf
mov eax, 0xae07571b
pushf
not eax
add eax, 0xf572e883
xor eax, 0xc0d733d3
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xcc3abca5
xor eax, 0x86d1452b
rol eax, 0x75
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x7f603c5f
pushf
not eax
add eax, 0x9e04cbc3
xor eax, 0x873a32ed
rol eax, 0x64
popf
pushf
not eax
add eax, 0xaf1383b7
xor eax, 0xcffc261b
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xaadc24e5
xor eax, 0xcf4f4e02
rol eax, 0xe2
popf
jmp 0x18002bff8
mov edx, dword [rbp + 0x8b8]
test edx, edx
je 0x18002dc65
push rax
pushf
mov eax, 0x216ab8a6
pushf
not eax
add eax, 0x815ebb43
xor eax, 0x853e3152
rol eax, 0x94
popf
pushf
not eax
add eax, 0x8ffe309d
xor eax, 0xe5c00ebb
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xbfb7d78d
xor eax, 0xd8195d03
rol eax, 0x31
popf
pushf
not eax
add eax, 0xcdad00ce
xor eax, 0xeb742dd8
rol eax, 0xd9
popf
jmp 0x18002bff8
push rax
pushf
mov eax, 0x8a53241c
pushf
not eax
add eax, 0xa6533cb4
xor eax, 0xec4eb9ac
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xb94a0056
xor eax, 0xc122a878
rol eax, 0xda
popf
jmp 0x18002bff8
lea rcx, [0x1db3bc883]
pushf
sub rcx, 0x5b3a2b0b
popf
call fcn.180003948
jmp 0x18002dd2d
mov ebx, r12d
push rax
pushf
mov eax, 0x87ad49d9
pushf
not eax
add eax, 0xab33b129
xor eax, 0xa382583e
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xea05aceb
xor eax, 0xd90fe6ea
rol eax, 0x32
popf
jmp 0x18002bff8
mov rcx, qword [rbp + 0xa0]
jmp 0x18002dd35
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0xc1099845
pushf
not eax
add eax, 0xb2e0d127
xor eax, 0xc0305e03
rol eax, 0x49
popf
pushf
not eax
add eax, 0xd045c837
xor eax, 0x9d3c431b
rol eax, 0xac
popf
pushf
not eax
add eax, 0x8ac2b41b
xor eax, 0xafe463c5
rol eax, 0x86
popf
pushf
not eax
add eax, 0xfecfae55
xor eax, 0xa27d495a
rol eax, 0xa
popf
jmp 0x18002bff8
mov eax, ebx
mov rbx, qword [rsp + 0x2620]
add rsp, 0x25e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret