Function at 0x1800ca13f
Capabilities:
Check http status code
Check mutex on windows
Encode data using base64
Link many functions at runtime

Disassembly:
jmp 0x18001bc2e
call fcn.1800197c0
rcl eax, 0xb
stc
cmc
lea rax, [rdx*4 - 0x15d509c5]
mov eax, dword [0x1800a0578]
cmc
stc
and eax, 1
bt rbx, rsi
stc
test rbx, rax
test eax, eax
jmp 0x1800eff79
bswap ax
mov rax, qword [rsp + 0x45608]
jo 0x1800f281c
mov eax, dword [rax + 0x58]
jmp 0x1800b2d4d
jmp 0x1800b3aed
mov dword [rsp + 0x4562c], 0
jmp 0x1800fbf48
jmp 0x1800dad71
call fcn.1800197c0
sub eax, ecx
bt bx, 0xa
mov eax, dword [0x1800a0578]
stc
and eax, 1
cmc
clc
bt ebx, 1
clc
test eax, eax
jmp 0x1800f90df
not dx
movzx dx, cl
mov edx, 0xa
lea rcx, [rsi*2 + 0x795c0cb9]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800adfec
je 0x1800d9041
not ecx
lea rcx, [rbp - 0x69415f56]
mov ecx, dword [0x18008a590]
jmp 0x1800eba67
je 0x180101c1a
jmp 0x1800d8822
jmp 0x1800d7ffc
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
clc
cmc
cmp bl, ch
clc
cmp dword [rsp + 0x54], eax
jmp 0x1800f3047
jmp 0x1800befbc
seto cl
mov cx, 0x38de
lea rcx, [rsp + 0x40]
jmp 0x1800d6e89
jne 0x1800bb41b
mov ch, bh
not cx
jmp 0x1800eae1e
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x18000e48d
call qword [sym.imp.KERNEL32.dll_GetLastError]
bt cx, 1
bt di, 2
cmp eax, 0xb7
jmp 0x1800e50c6
jmp 0x1800c6f90
jne 0x1800f3266
shr eax, cl
clc
movsx ax, al
sbb ax, 0xbda
mov qword [rsp + 0x60], 0
adc al, 0xbf
mov dword [rsp + 0x54], 0
movsx ax, bl
mov dword [rsp + 0x68], 0
btr ax, bx
movsx ax, dl
mov eax, dword [rsp + 0x5c]
cmp ah, 4
sub eax, 1
jmp 0x1800c656c
jmp 0x1800df992
jmp 0x1800d632e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
clc
cmc
cmp dword [rsp + 0x54], eax
jmp 0x180103cdc
jmp 0x1800d9106
call fcn.1800017c0
sets al
bswap ax
bswap ax
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
jmp 0x1800cf812
mov dword [rsp + 0x38], 0
jmp 0x1800c3ec3
jmp 0x1800d9725
jmp 0x180101934
call fcn.1800da9e3
jmp 0x1800b43d4
movzx cx, dl
movsxd rcx, dword [rsp + 0x4562c]
bt cx, 0xf
stc
imul rcx, rcx, 0x238
adc al, bl
not ax
add eax, edi
mov eax, dword [rsp + 0x4561c]
jmp 0x1800ea411
jmp 0x1800b27ea
call fcn.1800197c0
setns al
mov eax, dword [0x1800a0578]
stc
clc
clc
and eax, 1
clc
test eax, eax
jmp 0x180017d03
mov eax, 0x456a0
jmp 0x1800e7fc5
lea r8, [rsp + 0x78]
lea rcx, [rsi + 0x85f15a8]
mov dl, 0
lea rdx, [rsp + 0x50]
bswap ecx
movzx cx, dl
lea rcx, [rsp + 0x48]
jmp 0x1801078db
mov qword [rsp + 0x45640], 0
not dl
jmp 0x1800feade
jmp 0x1800e8544
jmp 0x1800b942a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp di, si
clc
cmp dword [rsp + 0x54], eax
jmp 0x1800c3eb9
movsx cx, al
lea rcx, [riz*8 - 0x3f2d72af]
lea rcx, [rsp + 0x40]
jmp 0x180100285
jmp 0x1800d9903
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x180015c3f
jmp 0x1800f09a9
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
movsx edx, al
mov dx, cx
lea rdx, [rdi + 0x7fa33216]
movzx cx, cl
lea rdx, [0x180074478]
movsx cx, bl
lea rcx, [rbx - 0x35efc0f6]
mov rcx, rax
jmp 0x1800f6866
call fcn.1800197c0
cmc
cmc
jmp 0x1800df9e8
call fcn.180019900
setge ch
movzx dx, bl
not dl
mov edx, 0xa
bswap cx
jmp 0x1800c3bdb
jns 0x1801078a6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add bx, 0x24bd
mov ebx, eax
cmp dl, bl
bt di, 8
test bp, bp
cmc
shl ebx, 3
jmp 0x1800f0d5e
jmp 0x1800d1b35
jmp 0x1800f9d87
jne 0x1800bb41b
setb ch
not cl
mov dword [rsp + 0x45658], 0
movsx cx, bl
bswap rcx
lea rcx, [rsp + 0x40]
jmp 0x1800fe063
call fcn.180041440
jmp 0x1800b4ea7
jmp 0x1800d55b2
jne 0x180101c1a
jmp 0x1800f8d9a
xchg cx, dx
lea rcx, [rbx - 0x952ad43]
mov qword [rsp + 0x45680], rax
movzx eax, cl
movsx cx, al
lea rax, [rdi + 0x1ade0421]
mov rax, qword [rsp + 0x45680]
xchg edx, ecx
mov qword [rsp + 0x45688], rax
movsx rcx, bl
lea rdx, [rcx - 0x7b25cda5]
mov ch, 0xa4
mov dh, 0x7c
mov rdx, qword [rsp + 0x45688]
setbe ch
jmp 0x1800b2f64
je 0x1800dcecd
setne ch
lea rcx, [rax + 0x3af9949a]
mov rcx, qword [rsp + 0x60]
jmp 0x1800f76f1
je 0x1800dcecd
lea rcx, [rdi*4 + 0x5c28ff54]
lea rcx, [rsi + 0xa1b502c]
mov rcx, qword [rsp + 0x60]
jmp 0x1800d1b72
lea rcx, [rsp + 0x45650]
jmp 0x1800ec9cb
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp bx, sp
cmp dword [rsp + 0x54], eax
jmp 0x1800e8b47
xchg dl, ch
mov dx, di
lea rdx, [rsp + 0x38]
lea rcx, [rdx - 0x22bc7bbd]
bswap cx
movsx cx, al
lea rcx, [riz*4 - 0x405b51d5]
mov ecx, eax
jmp 0x180103398
je 0x1800b5f98
test rsp, rbp
cmp qword [rsp + 0x70], 0
jmp 0x1800e7675
je 0x1800b5f98
cmp ch, dh
cmp qword [rsp + 0x70], 0
jns 0x1800fac7a
je 0x1800b5f98
jb 0x1800fafee
clc
stc
bt bp, 0xa
cmp qword [rsp + 0x70], 0xffffffffffffffff
jno 0x1800ddb65
jne 0x1800bb41b
not cl
lea rcx, [rbp*4 - 0x6ffe48cf]
jmp 0x1800e8818
jmp 0x1800fa5ef
jmp 0x1800d39b1
sub eax, eax
cmc
cmp eax, 1
jmp 0x1800b0eb7
call fcn.1800037a0
not ch
movzx cx, dl
movzx cx, dl
lea rcx, [rbx + 0x4e71a060]
lea rcx, [rsp + 0x40]
jae 0x1800b2c39
call fcn.18000b4f0
bswap r8w
mov r8, rax
clc
clc
jmp 0x180017ccf
jmp 0x180103642
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [riz*4 + 0x28d5ea33]
movsx rcx, dl
jmp 0x1800bb7de
mov dword [rsp + 0x38], 0
jmp 0x1800b00eb
mov dword [rsp + 0x45614], 0
jmp 0x1800e0793
test bl, 0xdb
test rbx, rcx
jmp 0x1800e5e9c
je 0x1800cfb64
bt di, bx
clc
clc
cmp dword [rsp + 0x38], 0
jmp 0x1800d3af6
bswap dx
movzx ecx, dl
mov ch, 0xaa
lea rdx, [rsp + 0x38]
setg ch
movsx cx, cl
not ecx
mov ecx, eax
jmp 0x180105925
je 0x1800d1b02
cmc
cmp dword [rsp + 0x38], 0
jmp 0x1800d4cc2
jmp 0x1800ff0de
jmp 0x1800cf1c8
call fcn.1800017c0
not ecx
not dh
mov edx, 0xffffffff
mov cx, 0x179a
jmp 0x18010010e
je 0x1800c99da
lea rdx, [rdx*4 + 0x7e02cfe1]
movsx cx, dl
lea rdx, [rsp - 0x9293766]
mov edx, 0xa
lea rcx, [rdi*2 - 0x5ecc9e80]
jmp 0x1800bca8c
mov qword [0x1800a0570], rax
jmp 0x1800f0151
jmp 0x1800cc1dd
not cl
mov dword [rsp + 0x5c], 0
movzx cx, dl
mov qword [rsp + 0x30], 0
movsx cx, cl
mov dword [rsp + 0x58], 0xa000
jmp 0x18003c3f9
mov dword [rsp + 0x45620], eax
jmp 0x1800c6ad7
test ch, 0x3f
bt cx, dx
clc
cmp dword [rsp + rcx + 0x98], eax
jmp 0x1800e2018
mov ecx, dword [rsp + 0x58]
jmp 0x1800dca1c
xor al, 0x68
mov dword [rsp + 0x45600], 0
adc cl, 0xcc
mov dword [rsp + 0x45604], 0
inc r9w
lea rax, [rsp + 0x45604]
xchg r9d, ecx
xadd ecx, edx
mov qword [rsp + 0x28], rax
sub ax, 0x3904
lea rax, [rsp + 0x45600]
shld r9w, ax, 8
cmc
or r9w, 0x59e
xchg cx, r9w
mov qword [rsp + 0x20], rax
bswap cx
add r9w, 0xe766
setge dl
lea r9, [rsp + 0x455f8]
stc
sub r8d, r8d
lea rdx, [rbx*2 - 0x238ff1d2]
lea rdx, [rdi + 0x361a3fc6]
setge dl
mov edx, 0xa
movzx ecx, dl
movsx cx, dl
not cl
mov rcx, qword [rsp + 0x456b0]
jmp 0x180108cb1
jmp 0x1800c2c97
je 0x1800b5f98
stc
cmp qword [rsp + 0x70], 0xffffffffffffffff
jmp 0x180105cf5
jmp 0x1800d4a87
je 0x1800d1b02
shl ax, 3
mov qword [rsp + 0x455f8], 0
btr cx, di
neg r9
ror ah, 3
xadd ax, r9w
mov dword [rsp + 0x45600], 0
bswap ax
rcr ax, cl
mov dword [rsp + 0x45604], 0
jmp 0x1800eea46
jmp 0x1800ba64d
je 0x1800d1b02
ror eax, 0x17
btc r9w, bx
mov qword [rsp + 0x455f8], 0
test bh, 0x30
mov dword [rsp + 0x45600], 0
rcl cl, 1
cmp di, 0x5cec
mov dword [rsp + 0x45604], 0
inc al
dec al
xchg r9w, ax
lea rax, [rsp + 0x45604]
shr r9w, 0xb
xchg r9, rcx
bt cx, sp
mov qword [rsp + 0x28], rax
cmp edx, ebp
ror cx, cl
bswap rdx
test dh, al
lea rax, [rsp + 0x45600]
neg dh
mov qword [rsp + 0x20], rax
sal dx, cl
sar dh, 1
lea r9, [rsp + 0x455f8]
rcr ecx, 1
rcr ch, cl
bt cx, dx
xor r8d, r8d
movzx dx, al
jmp 0x1800bc5c8
movsx cx, cl
not cx
mov rcx, qword [rsp + 0x60]
jmp 0x1800f5567
jmp 0x1800e3118
jmp 0x180100f6d
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
cmc
cmp eax, ebx
clc
cmp dword [rsp + 0x456b8], 0
jmp 0x180017eb7
jmp 0x1800d7295
mov dword [rsp + 0x38], 0
jmp 0x1800bdcc4
jmp 0x1800cbd30
setp dh
lea rdx, [rsp + 0x38]
mov cl, bl
lea rcx, [rbp*2 - 0x74f13baf]
mov ecx, eax
jmp 0x1800c6e28
lea rdx, [rdx*8 - 0x59b9a41c]
mov dh, dh
mov qword [rsp + 0x45688], rax
lea rdx, [rsi*2 + 0x7dd26df]
mov cl, cl
bswap cx
mov rdx, qword [rsp + 0x45688]
lea rcx, [rdi + 0xd609546]
mov ch, bl
movsx ecx, al
lea rcx, [rsp + 0x40]
jmp 0x1800ccb93
jmp 0x1800fa59a
movzx dx, bl
xchg r8w, dx
movsx r8d, cl
mov qword [rsp + 0x60], 0
lea rdx, [rsp - 0xd1850f7]
mov dword [rsp + 0x68], 0
bswap r8d
jl 0x1800cccaf
xchg cx, r8w
lea rcx, [rbp - 0x31b0d821]
mov dword [rsp + 0x54], 0
jmp 0x1800c1a2c
jmp 0x180008ab4
movzx cx, dl
mov qword [0x1800a0570], rax
movsx cx, al
mov dword [rsp + 0x455f0], 0
movzx cx, cl
jmp 0x1800b9068
call qword [sym.imp.KERNEL32.dll_GetLastError]
stc
cmp esp, 0x99b28737
cmc
cmp eax, 0xb7
jmp 0x1800c6ad2
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x18001b01c
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
bt rdx, 0x19
clc
bt rax, rcx
cmp dword [rsp + 0x456b8], 0
jmp 0x1800db54c
mov dword [rsp + 0x45624], 0
jo 0x1800e0d3d
mov dword [rsp + 0x4562c], 0
jmp 0x1800fbf48
not dl
lea r8, [rsp + 0x78]
xchg ch, dh
lea rcx, [rcx*8 + 0x46d72bf0]
setae dl
mov ch, 0x25
lea rdx, [rsp + 0x50]
setae ch
lea rcx, [rsp + 0x48]
ja 0x1800eb788
jmp 0x180108723
mov edx, 0xa
bswap cx
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800bda4c
movzx cx, cl
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800dade6
js 0x1800f4455
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movsx dx, bl
lea rdx, [rbx + 0x1acf735c]
lea rdx, [rsp + 0x38]
mov ecx, 0x62f52d00
mov ecx, eax
jmp 0x1800baec5
jmp 0x1800f4051
call fcn.1800da9e3
jmp 0x18010416d
je 0x1800d1b02
not ax
inc r9d
mov qword [rsp + 0x455f8], 0
dec dl
btc ax, sp
mov dword [rsp + 0x45600], 0
add ah, 0x64
movzx r9w, al
xchg dx, ax
mov dword [rsp + 0x45604], 0
shl dx, 0xb
lea rax, [rsp + 0x45604]
not cx
shrd cx, ax, cl
mov qword [rsp + 0x28], rax
bsr ax, bx
lea rax, [rsp + 0x45600]
bsf cx, cx
mov qword [rsp + 0x20], rax
shr r9d, cl
lea r9, [rsp + 0x455f8]
bts edx, 0x19
setbe dh
dec dx
bsr dx, dx
sub r8d, r8d
xchg dh, cl
setno dh
mov edx, 0xa
lea rcx, [rdi*8 + 0xad625e6]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800d1ad6
call fcn.18000b4f0
shr r8d, cl
mov r8, rax
stc
test ah, 0xf4
sub edx, edx
stc
jmp 0x1800d06cd
jmp 0x180109dce
cmp dword [0x18008a580], 0
jmp 0x1800ae523
jmp 0x1800dff72
je 0x1800b5f98
stc
bt dx, bx
stc
cmp qword [rsp + 0x70], 0
jmp 0x1800bb655
jmp 0x1800b8d31
jmp 0x1800b13f0
jmp 0x1800b2f2e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
bt cx, sp
jmp 0x1800ef5fc
lea rcx, [rsp + 0x40]
jo 0x1800ee677
call fcn.180003370
xor dh, 0x77
btr rdx, rcx
sub r8d, r8d
seta cl
mov edx, edx
mov rdx, rax
jmp 0x180101e8e
mov dword [0x1800a0578], eax
js 0x1800c6166
lea rcx, [rdx - 0x5d1b4030]
lea rcx, [0x180074498]
jmp 0x1800dff0d
mov dword [rsp + 0x4561c], eax
bswap eax
jmp 0x1800ad5c7
jne 0x1800dcecd
jmp 0x1800c8445
mov edx, 0xa
not cl
bswap cx
setbe ch
lea rcx, [rax + 0x400e830]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800f2319
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xchg ch, dl
lea rdx, [rsp + 0x38]
bswap ecx
setbe cl
movsx cx, dl
mov ecx, eax
jmp 0x1800f53ef
jne 0x180106183
cmp al, ch
clc
jmp 0x1800df349
mov dword [rsp + rax + 0xa8], 0
jmp 0x1800e0772
jmp 0x18010a791
call fcn.1800017c0
movzx ax, al
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
je 0x1800d1b02
sar ax, cl
shr r9w, 9
dec ah
mov qword [rsp + 0x455f8], 0
add ax, sp
mov dword [rsp + 0x45600], 0
inc ah
clc
mov dword [rsp + 0x45604], 0
adc ax, bp
lea r9, [rbx*2 - 0x1e1b0d93]
lea rax, [rsp + 0x45604]
or dx, 0x8dbb
sar r9w, 6
mov qword [rsp + 0x28], rax
cmc
bswap cx
btc r9d, 0x13
bt bx, 9
lea rax, [rsp + 0x45600]
xor cl, 8
or dx, bp
rcl r9d, cl
bt ebx, edi
mov qword [rsp + 0x20], rax
not r9d
shld cx, dx, 5
cmp esi, esp
lea r9, [rsp + 0x455f8]
sub cx, 0xa6c8
clc
sub r8d, r8d
xchg ch, dh
movzx edx, al
jmp 0x1800bf9a1
jmp 0x1800dddc9
je 0x1800c99da
jb 0x1800e3fbe
jmp 0x1800f2582
lea r8, [rsp + 0x54]
lea rcx, [rsi - 0x7e9b5431]
setae ch
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x734e6e3b]
movsx ecx, dl
bswap cx
lea rcx, [rsp + 0x60]
jmp 0x1800d65d2
mov dword [rsp + 0x45614], 0
jmp 0x1800e0793
js 0x1800c8948
nop
lea rcx, [rax*2 + 0x78fb15ab]
lea rcx, [rsp + 0x45650]
jmp 0x1800ed926
je 0x1800d1b02
sal r9d, 0xd
shrd eax, edi, 0x16
sar al, cl
btr ax, si
mov qword [rsp + 0x455f8], 0
bt esp, 0x1e
lea rax, [rdx - 0x618e22dc]
movzx rdx, cl
shrd r9w, si, cl
mov dword [rsp + 0x45600], 0
ror ax, cl
neg eax
mov dword [rsp + 0x45604], 0
sub eax, edx
shld rax, rdi, 0x33
lea rax, [rsp + 0x45604]
rol r9w, 1
cmc
rol dx, cl
inc r9d
mov qword [rsp + 0x28], rax
dec r9
lea rax, [rsp + 0x45600]
bsf r9w, dx
sets dl
bt ax, si
mov qword [rsp + 0x20], rax
neg dx
lea r9, [rsp + 0x455f8]
movsx edx, bl
lea rcx, [rbp*8 + 0x2ae4cd20]
rcl dl, cl
cmc
sub r8d, r8d
mov dl, cl
mov cx, 0xee7f
xchg dl, cl
bswap cx
mov edx, 0xa
lea rcx, [rbx - 0x3919c453]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800ebea9
call fcn.180061240
dec cx
sub rsp, rax
shr cx, cl
xor ch, 0x3e
rcl ch, cl
mov qword [rsp + 0x45678], 0xfffffffffffffffe
jmp 0x1800db447
cmp dword [rsp + 0x4562c], eax
jle 0x1800fe939
jae 0x1800d2c8a
jmp 0x1800b1ccf
jmp 0x1800ae443
je 0x1800d1b02
stc
stc
cmp al, al
stc
cmp dword [rsp + 0x38], 0
jmp 0x1800f7e8d
shl ebx, 3
jmp 0x1800fa8ae
call fcn.180041440
not dh
mov dx, 0xa43e
mov qword [rsp + 0x45680], rax
mov cl, cl
jmp 0x1800d0a72
clc
clc
cmp dword [0x18008a580], 0
jmp 0x1800cabc9
je 0x1800cf828
not cx
mov rax, qword [rsp + 0x30]
seto ch
jmp 0x1800ec2f7
call fcn.180002bf0
not rcx
lea rcx, [rsi + 0xf7f239a]
movzx ecx, al
not cx
nop
not ch
jmp 0x1800b5832
call fcn.18004f654
stc
clc
bt dx, cx
mov qword [rsp + 0x45660], rax
inc rax
shrd ax, cx, 6
movzx ax, cl
xor al, dh
mov rax, qword [rsp + 0x45660]
test dl, 0xb5
bt ebx, 2
stc
mov qword [rsp + 0x30], rax
test dx, 0x6695
clc
jmp 0x1800b6ca9
mov cl, 0xdb
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800f166b
jge 0x1800f7ef0
mov dword [rsp + 0x45624], 0
jmp 0x1800de140
call fcn.1800197c0
bsr ax, bx
test bl, 0x50
sete ah
dec ah
mov eax, dword [0x1800a0578]
jmp 0x1800d2b8a
jmp 0x18001aff4
jmp 0x180105d6a
jmp 0x1800f6f1b
call fcn.1800197c0
setno al
bsf eax, ecx
mov eax, dword [0x1800a0578]
test rcx, rdi
and eax, 1
jmp 0x1800d9e24
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
not dh
not cl
lea rdx, [0x180074478]
movzx ecx, bl
mov rcx, rax
jmp 0x1801016f8
mov dword [rsp + 0x4561c], eax
setg al
bswap ax
mov rax, qword [rsp + 0x45608]
jmp 0x1800d293d
jmp 0x1800b0887
not dx
movzx dx, bl
mov edx, 0xa
jmp 0x1800c5590
jmp 0x1800c95b4
call fcn.1800197c0
neg eax
and ah, dl
mov eax, dword [0x1800a0578]
stc
bt rax, 0x3b
and eax, 1
cmp ch, ch
cmp cl, 0xc8
stc
test eax, eax
jmp 0x1800dcdc6
jmp 0x1800e735a
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800edf29
jmp 0x1801086c5
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
shl ebx, 0x15
mov ebx, eax
jmp 0x1800ff906
call fcn.180018a00
mov r8d, 0x724bd306
jmp 0x1800e27fd
jmp 0x1800e7b26
jmp 0x1800f10c0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
clc
mov ebx, eax
stc
stc
bt ebp, 0x1d
test al, 0xf1
shl ebx, 3
jmp 0x1800c5b41
setp cl
mov qword [rsp + 0x45668], rax
movzx cx, dl
lea rcx, [riz*4 - 0x46125b7d]
mov cl, dl
movsx cx, al
mov rcx, qword [rsp + 0x45668]
jmp 0x1800b09ef
sets cl
not ch
bswap cx
movsx cx, dl
lea rcx, [0x180074498]
jmp 0x1800fc17d
call fcn.1800da9e3
jmp 0x1800e15a4
mov dword [rsp + 0x45634], eax
jmp 0x180101b2a
jmp 0x1800eb165
jmp 0x1800fb9e2
jmp 0x1800eb04b
jmp 0x1800b786c
jmp 0x1800bdb92
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
cmp bh, 0x64
cmp dword [rsp + 0x456b8], 0
jmp 0x1800b7e40
jmp 0x1800f2955
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
jmp 0x1800f16c6
je 0x1800d1b02
test al, 0x12
cmp dword [rsp + 0x38], 0
jmp 0x1800cdf7e
mov dword [rsp + 0x45634], eax
jmp 0x180101b2a
test eax, eax
jmp 0x18010a0c9
mov rcx, qword [rsp + 0x48]
jmp 0x1800f057e
mov qword [rsp + 0x45608], r11
test esp, esp
bt bp, 3
sub eax, eax
jmp 0x180107ca7
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
cmc
cmp ax, 0xfb88
test ebx, eax
stc
cmp dword [rsp + 0x456b8], 0
jmp 0x1800f8f7a
call fcn.1800da9e3
jmp 0x1800e7e21
cmp dword [rsp + 0x456b8], 0
jmp 0x180103140
jmp 0x1800d96e4
mov rcx, rsi
movzx rcx, al
bswap cx
nop
setbe ch
lea rcx, [rsp + 0x45650]
jmp 0x1800c1923
call fcn.180019900
bswap dx
mov edx, 0xa
not ecx
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800b1e9e
mov dword [rsp + 0x4562c], 0
jmp 0x1800fbf48
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
stc
cmp dword [rsp + 0x456b8], 0
jmp 0x1800dfc86
call fcn.1800197c0
jmp 0x1800c30dc
jmp 0x1800c1a13
call fcn.180002bf0
movsx cx, dl
jmp 0x1800fa79e
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
cmc
cmc
stc
cmp dword [rsp + 0x456b8], 0
jmp 0x180100e93
not rax
mov dword [rsp + 0x10], edx
movsx ax, cl
lea rax, [rsp - 0x1e304ab3]
lea rax, [rax*4 + 0x7ba1f91e]
setge al
mov qword [rsp + 8], rcx
jmp 0x180107fdf
jmp 0x1800fdb6d
jmp 0x1800f3fe2
mov dword [rsp + 0x45618], 0
xchg r9d, ecx
bswap edx
movzx r9w, dl
lea r9, [rsp + 0x45618]
mov r8w, 0xf787
bswap r8w
xchg cx, r8w
not r8w
mov r8d, dword [rsp + 0x58]
lea rcx, [rax + 0x2e6a47bc]
movsx dx, bl
mov rdx, qword [rsp + 0x30]
jmp 0x1800ce0dd
call fcn.180019900
sets cl
mov edx, 0xa
bswap cx
setae ch
movzx cx, dl
setns ch
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800e18d8
jmp 0x1800af689
jne 0x180101c1a
test ah, dh
clc
cmc
cmp dword [0x18008a580], 0
jmp 0x1800b34c0
jmp 0x1800dbe1a
jmp 0x1800b58aa
call fcn.180003370
shl dh, 2
sbb rcx, 0x566b90
sub r8d, r8d
xchg dh, cl
movsx cx, cl
mov rdx, rax
lea rcx, [rbp + 0x4dd77ba2]
jmp 0x1800fa424
cmp dl, dh
clc
cmp ax, 0x4961
cmp dword [rsp + 0x456b8], 0
jmp 0x1800b8526
jne 0x1800bcce3
btc eax, 0xb
btc ax, 2
movsxd rax, dword [rsp + 0x45630]
ja 0x1800d1641
imul rax, rax, 0x238
cmc
bt bx, bx
jmp 0x1801051b6
lea rcx, [rsp + 0x60]
je 0x1800ef852
call fcn.180018a00
sets ch
mov qword [rsp + 0x48], 0
xchg r8, rcx
bswap r8w
lea rdx, [rbp + 0x3cb12f57]
mov r8w, ax
mov dword [rsp + 0x50], 0
movsx cx, dl
mov dword [rsp + 0x78], 0
xchg r8w, cx
lea r8, [rsp + 0x78]
setno ch
mov ecx, esi
movzx ecx, al
jbe 0x1801057fd
lea rdx, [rsp + 0x50]
js 0x1800e5217
lea rcx, [rsp + 0x48]
jmp 0x180103be0
test ch, 0x34
stc
cmp eax, 1
jmp 0x1800ae734
call fcn.1800197c0
jmp 0x1800ce317
jmp 0x1800f44dc
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
jmp 0x1800ad8d8
jmp 0x1800e2f8b
jmp 0x1800c3397
mov r8w, 0xe7e0
lea r8, [rcx*2 + 0x3b6e501d]
xchg r8, rcx
xchg rcx, rdx
mov dword [rsp + 0x54], 0
mov r8w, 0x7e98
lea r8, [rsp + 0x54]
not dx
setne dl
xchg dl, cl
lea rdx, [rsp + 0x68]
jmp 0x1800cc2da
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xchg cl, dl
xchg dx, cx
movzx rdx, bl
lea rdx, [rsp + 0x38]
mov cx, 0x560a
mov cl, 0x22
mov ecx, eax
jmp 0x1800bc200
jmp 0x1800fc47b
jmp 0x1800c0495
jmp 0x1800c1eaf
mov r8, rax
test dx, 0x14f7
bt bx, 0xf
bt ebp, edx
xor edx, edx
jnp 0x1800b7916
cmp dl, 0x74
cmc
bt ax, 2
xor ecx, ecx
jmp 0x1800e28bc
jmp 0x1800e28f7
call fcn.1800017c0
ror ch, 4
sar cx, 7
movzx cx, cl
stc
mov rcx, qword [rsp + 0x45690]
cmp edi, 0x328871da
xor rcx, rsp
jmp 0x180102da5
jmp 0x1800d3ba7
setg ch
movsx cx, bl
jmp 0x1800d3e91
jmp 0x1800d033e
test eax, 0x20646c5d
cmp dword [0x18008a580], 0
jmp 0x180101365
je 0x1800b5f98
test esp, ebx
cmp sp, 0x279f
clc
stc
cmp qword [rsp + 0x70], 0xffffffffffffffff
jmp 0x1800df87e
jmp 0x1800f32a2
jne 0x180101c1a
clc
cmc
cmp dword [0x18008a580], 0
jmp 0x1800f7c2b
bswap rcx
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800fbd86
jmp 0x1800be747
je 0x1800d5e22
jmp 0x1800c6c2b
je 0x1800e9150
mov al, cl
movzx ax, al
mov ah, cl
mov rax, qword [rsp + 0x45608]
jnp 0x1800ba5f2
mov eax, dword [rax + 0x50]
jmp 0x1800e125e
call fcn.1800197c0
bt edi, 9
cmc
cmp dword [0x18008a580], 0
jmp 0x180101daf
call fcn.1800da9e3
jmp 0x1800e0327
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add bl, 0xf7
inc bx
mov ebx, eax
cmc
cmc
jmp 0x1800c2e4d
mov dword [rsp + 0x45658], 0
jmp 0x1800e202e
call fcn.18004f750
bswap cx
clc
mov cx, 0x483e
mov qword [rsp + 0x30], 0
inc ax
add rcx, rsp
mov eax, dword [rsp + 0x58]
sal ch, 4
shl eax, 1
mov ch, 0xd8
mov dword [rsp + 0x58], eax
not cl
bswap rcx
mov ecx, dword [rsp + 0x58]
jmp 0x180106155
jmp 0x1801040ea
jmp 0x18010521c
test ah, 0xdc
cmp qword [rsp + 0x70], 0
jmp 0x1800e0313
call fcn.18000b4f0
adc r8, 0x626f5e1f
mov r8, rax
jmp 0x1801005f6
cmp ecx, 0x960acb54
cmc
xor ecx, ecx
jmp 0x1800f3d2b
jmp 0x1800b4f66
movsx edx, cl
mov rax, qword [rsp + 0x45680]
not cx
jmp 0x1800e7a66
jmp 0x1800f5c1b
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
stc
bt ax, 9
bt ebx, 0x10
bt dx, 0xa
cmp dword [rsp + 0x456b8], 0
jmp 0x1800fbf88
cmp dl, 0x7b
cmp dword [rsp + 0x456b8], 0
jmp 0x1800fd596
call fcn.1800037a0
setle cl
jmp 0x1800cdad0
stc
imul rax, rax, 0x238
cmc
clc
test dh, 0xb9
mov eax, dword [rsp + rax + 0x98]
stc
mov dword [rsp + 0x45638], eax
bswap ax
xor ah, 0x1f
mov ax, sp
btr ax, cx
mov eax, dword [rsp + 0x54]
jmp 0x1800c558b
jae 0x1800cfb64
jmp 0x1800fd6ff
jmp 0x1800de5fd
call fcn.180018b00
jmp 0x1800bef58
call fcn.180019900
not dx
mov edx, 0xa
movsx rcx, dl
sets cl
not ch
movzx ecx, cl
mov rcx, qword [rsp + 0x456b0]
jg 0x180018150
call fcn.1800197c0
xor ax, 0x87cd
mov eax, dword [0x1800a0578]
cmp dl, cl
clc
and eax, 1
bt ax, sp
cmc
cmp bp, 0xc5fb
test eax, eax
jmp 0x180100f61
call fcn.180041440
not dx
setb ch
mov dl, 0x93
not dx
mov qword [rsp + 0x45680], rax
movzx dx, al
movzx ax, al
mov rax, qword [rsp + 0x45680]
xchg dl, ch
mov qword [rsp + 0x45688], rax
mov cx, 0x6547
not ch
jmp 0x1800d819d
call fcn.1800da9e3
jmp 0x1800b649d
call fcn.1800da9e3
jmp 0x1800c0bc5
jmp 0x18001c0e1
mov dword [rsp + 0x50], 0
seta dl
seto ch
bswap ecx
mov dword [rsp + 0x78], 0
not r8w
mov r8w, sp
jmp 0x1800bc571
jmp 0x1800ebc40
jmp 0x1801025e1
jmp 0x1800f322e
cmp ecx, 0x547204a2
stc
test al, cl
cmp dword [rsp + 0x45628], 0
jmp 0x1800f0644
lea rcx, [0x180074498]
jmp 0x1800b343e
jmp 0x1801002cd
cmp dx, 0x57c
stc
cmp dword [rsp + 0x456b8], 0
jmp 0x1800ca0cf
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
stc
cmc
clc
cmp dword [rsp + 0x78], eax
jmp 0x1800d97df
je 0x1800cfb64
jmp 0x1800e2059
je 0x1800d1b02
rcl r9w, 4
bsr rax, rax
clc
bts ax, 5
mov qword [rsp + 0x455f8], 0
sar cx, cl
mov dword [rsp + 0x45600], 0
dec cx
mov dword [rsp + 0x45604], 0
setno dh
btc dx, bp
bt si, cx
lea rax, [rsp + 0x45604]
sar r9w, cl
movzx r9d, dl
bswap cx
shld ecx, edx, cl
mov qword [rsp + 0x28], rax
shr dl, 4
setae cl
lea rax, [rsp + 0x45600]
rcl r9w, cl
rcl r9w, cl
movzx cx, dl
inc r9w
mov qword [rsp + 0x20], rax
dec ch
lea r9, [rsp + 0x455f8]
stc
sub r8d, r8d
lea rcx, [rbp - 0x3dd875fa]
setg dh
bswap cx
mov edx, 0xa
movsx cx, al
movzx cx, bl
lea rcx, [rdx*4 - 0x2f19f302]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800f250d
jmp 0x1800bc267
mov ecx, 5
jmp 0x1800b02b7
je 0x1800cf828
jmp 0x1800dfc8b
call fcn.18004f654
clc
cmp cl, 0x4d
mov qword [rsp + 0x45660], rax
ror al, 1
mov rax, qword [rsp + 0x45660]
jmp 0x180105210
jmp 0x1800c4258
call fcn.180003370
clc
ror dh, cl
xor r8d, r8d
movzx cx, bl
not cl
bswap edx
mov rdx, rax
movzx cx, dl
bswap ecx
bswap cx
lea rcx, [rsp + 0x45650]
jmp 0x180101445
je 0x180101c1a
not ecx
mov rcx, qword [rsp + 0x48]
jp 0x1800f2140
call fcn.1800da9e3
jmp 0x1800d71a2
jmp 0x1800ed20e
jmp 0x1800ed15a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x1800dec0b
test dx, dx
bt bx, dx
clc
cmc
cmp dword [rsp + 0x54], 0
jmp 0x1800fa8a4
call fcn.180018b00
jmp 0x1800b0431
call fcn.1800197c0
bt ax, sp
cmp dh, 0x63
cmp al, dh
cmp dword [0x18008a580], 0
jmp 0x1800d0882
lea rcx, [rsp + 0x40]
jmp 0x1800e73d9
mov dword [rsp + 0x38], 0
jmp 0x1800f7de4
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1800ccfcd
je 0x1800d1b02
shrd eax, esp, cl
bts r9, rdx
bt bx, 1
movsx eax, dl
mov qword [rsp + 0x455f8], 0
setne ah
ror rcx, 0x33
bsf cx, bp
rcl cx, 0xd
mov dword [rsp + 0x45600], 0
setg ch
or r9w, 0x5e7c
btc ax, sp
mov dword [rsp + 0x45604], 0
bswap cx
dec eax
bsr dx, ax
clc
lea rax, [rsp + 0x45604]
seto ch
mov qword [rsp + 0x28], rax
xadd rax, rcx
bsf ax, dx
stc
bt bx, bp
lea rax, [rsp + 0x45600]
sbb ch, dl
cmc
mov qword [rsp + 0x20], rax
shl r9w, cl
xor r9w, ax
xadd edx, r9d
lea r9, [rsp + 0x455f8]
lea rcx, [rsi*4 - 0x2d950c04]
not cl
xadd cl, dl
bts dx, 2
xor r8d, r8d
xchg ch, dl
not edx
lea rcx, [rsp + 0xcf64c77]
not cl
mov edx, 0xa
lea rcx, [rsi*2 - 0x30b28bf8]
lea rcx, [rcx + 0x61dea660]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800c84ac
jno 0x1800ea05a
bswap cx
movsx cx, cl
bswap cx
lea rcx, [rsp + 0x40]
jmp 0x1800ed75e
jmp 0x1800ef39c
mov dword [rsp + 0x38], 0
jmp 0x1800cca42
call qword [0x1800a0570]
je 0x1800e5fe3
cmc
mov dword [rsp + 0x45610], eax
test cx, di
stc
cmp cx, bp
cmp dword [rsp + 0x45610], 0xc0000004
jmp 0x1800f3ae9
jmp 0x1800b8f52
jmp 0x1800c5af3
call fcn.180001700
js 0x1800f8f0c
nop
jmp 0x180104f24
jmp 0x1800cec89
jmp 0x1800d6260
not dh
mov r9d, ebx
setle cl
movzx cx, cl
movsx edx, dl
bswap cx
lea rdx, [0x180074468]
lea rcx, [rbp*2 - 0xd86ffa9]
lea rcx, [rcx - 0x5a2d01f0]
bswap cx
movsx cx, al
lea rcx, [rsp + 0x40]
jmp 0x1800fb65c
je 0x1800c99da
jmp 0x1800c51e7
je 0x1800d9041
movsx cx, cl
jmp 0x1800f86af
jmp 0x1800d55e4
jmp 0x1800c2482
not cx
movzx rcx, al
lea rcx, [rsp + 0x45650]
jmp 0x1800efc2d
jmp 0x1800d1698
jmp 0x1800dcec8
lea rcx, [0x180074498]
jmp 0x180101ba5
lea rax, [rax*2 + 0x7746e217]
movzx ax, al
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
jmp 0x1801055e9
je 0x1800e9150
jmp 0x18001639c
cmp dword [rsp + 0x455f0], 3
jmp 0x1800d7cb6
lea rcx, [rax*2 - 0x98253c7]
mov rdx, qword [rsp + 0x45688]
setle ch
lea rcx, [rdx - 0x530a77ae]
movzx cx, dl
mov ecx, esi
lea rcx, [rsp + 0x40]
jmp 0x1800ef076
jmp 0x1800ebe25
movsx ecx, al
mov rcx, qword [rsp + 0x48]
jmp 0x1800d1f0c
jmp 0x1800b784b
mov qword [rsp + 0x70], rax
jmp 0x1800f81e3
jmp 0x1800d9827
bswap r9w
mov dword [rsp + 0x45610], 0
setbe dl
jmp 0x1800cac2b
je 0x1800dcecd
movsx cx, bl
jmp 0x1800ba58e
jmp 0x1800e522e
jmp 0x1800d498c
jmp 0x1800f79be
call fcn.180019900
mov dh, ch
setns dl
mov edx, 0xa
not ch
movzx cx, bl
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800de621
je 0x1800d5e22
jmp 0x1800cd66d
jmp 0x1800e92d5
je 0x180101c1a
lea rcx, [rbx + 0x94336e8]
jmp 0x1800e6438
imul rax, rax, 0x238
test eax, 0x6487ccc
mov eax, dword [rsp + rax + 0x98]
cmc
cmc
test ax, ax
test dx, 0x3e5d
mov dword [rsp + 0x45638], eax
add ax, 0x1c6e
mov eax, dword [rsp + 0x54]
cmp dl, dh
test bp, 0xf00b
cmp dword [rsp + 0x45638], eax
jmp 0x1800d2b8f
mov dword [rsp + 0x4562c], 0
jmp 0x1800fbf48
jmp 0x1800ee71a
bt cx, di
cmp dl, 0x3a
test eax, eax
jmp 0x1800ecba2
je 0x1800d1b02
test ah, 0x7d
bt ebp, esi
test esi, edi
cmc
cmp dword [rsp + 0x38], 0
jmp 0x1800d7795
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x1800be2e6
call fcn.1800197c0
test dl, cl
jmp 0x1800dbfe7
mov qword [rsp + 0x70], rax
jmp 0x1800d30c7
jmp 0x1800cf47d
shl ah, 4
mov rax, qword [0x180084090]
sete cl
shr cl, 3
shr ch, cl
xor rax, rsp
jmp 0x1800f3b03
call fcn.1800197c0
stc
cmp dword [0x18008a580], 0
jmp 0x1800f947c
jmp 0x1800f2095
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
clc
cmp dword [rsp + 0x54], eax
jmp 0x1800f7a09
sets dh
mov edx, 0xa
bswap cx
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800ecdc6
jmp 0x1800bbc88
jb 0x1800ed7f8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp cl, 0xc2
cmp dword [rsp + 0x54], eax
jmp 0x1800f2736
jle 0x1800b650e
cmp dword [0x18008a580], 0
jmp 0x1800ffd28
jne 0x180101c1a
cmc
cmp dword [0x18008a580], 0
jmp 0x180016001
not rcx
xchg cl, dh
lea rdx, [rax*8 + 0x5fe551bc]
movsx ecx, cl
mov edx, 0xffffffff
not cl
seta ch
lea rcx, [rsp + 0x40]
jmp 0x1800f863c
call fcn.18004f654
clc
jmp 0x1800fb236
lea rcx, [rax*4 + 0x1669ce9a]
mov ecx, dword [rsp + 0x58]
jmp 0x1801024db
jmp 0x1800dc3c2
jae 0x1800d2c8a
ror ch, cl
bswap cx
rcl cl, cl
rol cl, cl
movsxd rcx, dword [rsp + 0x4562c]
cmc
btc ax, 6
rol al, 3
setns ah
imul rcx, rcx, 0x238
neg al
or ah, ah
movzx ax, bl
rcr ah, 4
mov eax, dword [rsp + 0x4561c]
jmp 0x1800b96f7
mov dword [rsp + 0x4561c], eax
not ah
lea rax, [rsp + 0x334c8a24]
mov al, bh
mov rax, qword [rsp + 0x45608]
jmp 0x1801042bb
jmp 0x1800df784
jmp 0x1800ed537
call fcn.18000b4f0
shr r8w, cl
inc r8
sbb r8w, 0xc63d
mov r8, rax
test ch, ah
stc
xor edx, edx
test al, cl
cmc
test dh, 0x4c
clc
xor ecx, ecx
jmp 0x1800fea28
call fcn.1800da9e3
jmp 0x180109314
jmp 0x1800cf5c0
jmp 0x1800fbd56
call fcn.1800017c0
xchg rcx, rdx
mov edx, 0xffffffff
jmp 0x1801034e0
jmp 0x1800c93e1
jmp 0x1800c5862
mov rcx, rax
jmp 0x18003c3a7
call fcn.180018b00
jmp 0x1800cb849
jmp 0x180105abd
call fcn.1800017c0
mov eax, 0xc1789f8a
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
test bp, 0xf3a9
cmp dword [rsp + 0x78], eax
jmp 0x1800f5d4b
cmp qword [rsp + 0x30], 0
jmp 0x1800c324d
je 0x180101c1a
lea rcx, [rbx*4 + 0x3d2c7028]
mov ch, 0x80
mov rcx, qword [rsp + 0x48]
jmp 0x1800fee1e
call fcn.1800017c0
not ah
lea rax, [rdx + 0x795c6cec]
lea rax, [riz*4 - 0x1789e627]
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
jne 0x1800bb41b
lea rcx, [rsi*4 + 0x6dffefb4]
not cx
jmp 0x1800cf730
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
bswap dx
lea rdx, [0x180074478]
bswap cx
jmp 0x1800de48c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x1800ba838
cmp dword [0x18008a580], 0
jmp 0x1800e905e
jmp 0x1800f3c44
jmp 0x1800e7541
jmp 0x1800ba1b4
jmp 0x180105843
mov qword [0x1800a0570], rax
jmp 0x1800f0151
je 0x1800b5f98
cmc
clc
clc
cmp qword [rsp + 0x70], 0xffffffffffffffff
jmp 0x1800caf06
jmp 0x1800ba6a0
jmp 0x1800d58da
jmp 0x1800e0af6
clc
movsx ax, bl
mov al, ah
mov eax, dword [rsp + 0x45614]
cmp ah, bh
bt rbx, rdx
add eax, 1
cmp bp, bp
mov dword [rsp + 0x45614], eax
mov eax, 0x5840214e
mov eax, dword [rsp + 0x5c]
jmp 0x180106d18
je 0x1800c99da
xchg cx, dx
movsx cx, dl
mov edx, 0xa
lea rcx, [rax*8 + 0x3a59aa3c]
setno ch
not cx
mov cl, al
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800f972e
jmp 0x1800e5ebd
call fcn.1800da9e3
jmp 0x1800d4e75
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp al, 0x8d
cmp dword [rsp + 0x78], eax
jmp 0x1800e94b1
jae 0x1800b332e
mov dword [rsp + 0x4562c], 0
jmp 0x1800fbf48
test bh, 0xd7
cmp dword [rsp + 0x45630], eax
jmp 0x1800d9954
jne 0x1800f0151
xor cl, dl
movzx ecx, dl
mov eax, dword [0x1800a0578]
clc
jmp 0x1800f086a
jmp 0x1800bf46a
setns ch
mov rcx, qword [rsp + 0x60]
jmp 0x1800e166c
mov dword [rsp + 0x38], 0
jmp 0x180106253
cmp cx, ax
jmp 0x1800c26d1
jmp 0x1800ea803
jmp 0x1800c3d4e
call fcn.180002bf0
bswap rcx
mov cx, di
bswap cx
nop
movsx cx, bl
lea rcx, [rsp + 0x45650]
jmp 0x1800be79c
call fcn.18004f750
sbb al, 0xd8
bsr ax, sp
xchg cx, ax
mov qword [rsp + 0x30], 0
mov ah, 0x65
mov eax, dword [rsp + 0x58]
dec ch
rcr ch, cl
bsf cx, ax
shl eax, 1
mov cx, bp
bswap cx
bswap cx
movsx cx, al
mov dword [rsp + 0x58], eax
movsx cx, dl
jmp 0x1800b9736
not cl
lea rcx, [rsp + 0x40]
jae 0x1800c6acd
call fcn.1800017c0
bswap rax
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
sets ah
mov al, 0xdc
jmp 0x1800b2a91
jmp 0x1800d3fff
jmp 0x1800ba3a5
mov qword [rsp + 0x48], 0
jmp 0x1800d27e0
jmp 0x180101ea2
jmp 0x1800ea06b
movsx cx, dl
lea rcx, [rsp + 0x40]
jmp 0x1800e28b7
call fcn.1800053c0
jmp 0x1800e5978
je 0x1800d1b02
clc
cmp dword [rsp + 0x38], 0
jmp 0x1800f189b
mov dword [rsp + 0x45620], eax
jmp 0x1800c6e43
call fcn.1800da9e3
jmp 0x1800e54f3
call fcn.1800dc2ce
or r11, 0xffffffff9e5a36a2
lea r11, [rdi + 0x2f7f51ba]
mov r11, qword [rsp + 0x30]
clc
cmp edi, 0xc9bc9456
test bp, bx
cmp bl, 0x34
mov qword [rsp + 0x45608], r11
test bx, 0x9608
sub eax, eax
bt ebp, 1
clc
cmc
cmp dh, 1
cmp eax, 1
jmp 0x1800ff674
jne 0x1800cfb64
jmp 0x1800d8170
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xchg ch, dl
bswap dx
jmp 0x1800fe6a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
test cl, 0xce
cmp eax, 0xb7
jmp 0x1800c5706
jmp 0x1800e91d2
call fcn.1800017c0
or ecx, 0x8637eea1
movzx cx, al
setns cl
bsr rcx, rbx
mov rcx, qword [rsp + 0x45690]
jge 0x1800f7cff
cmc
xor rcx, rsp
jmp 0x18001becd
mov rcx, rbp
lea rcx, [rbp - 0x6ffcbfaa]
mov edx, 0xa
bswap ecx
mov rcx, qword [rsp + 0x456b0]
jmp 0x180106fa8
jmp 0x1800e1ece
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x1800df8e3
jmp 0x1800af9f4
jmp 0x1800b5f5f
lea rcx, [rbx*4 - 0x5ab7e17a]
not ch
movsx ecx, bl
lea rcx, [rsp + 0x48]
jmp 0x180104f1f
call fcn.180041440
setg cl
mov qword [rsp + 0x45680], rax
setae al
mov rax, qword [rsp + 0x45680]
not dx
movsx rcx, cl
setge ch
mov qword [rsp + 0x45688], rax
movzx cx, bl
mov rdx, qword [rsp + 0x45688]
not cl
lea rcx, [rsp + 0x40]
jmp 0x1800e9acd
jge 0x1800cac17
mov dword [rsp + 0x38], 0
jmp 0x180105a91
bswap cx
not cl
lea rcx, [rsp + 0x40]
jmp 0x180103c2f
jmp 0x1800af9d7
xor ecx, ecx
jmp 0x1800afdeb
cmp dword [rsp + 0x456b8], 0
jmp 0x1800d6508
not cx
movzx cx, cl
movzx cx, al
mov dword [rsp + 0x45658], 0
movsx cx, bl
lea rcx, [rsp + 0x40]
jmp 0x1800dcda1
bt eax, 0x1b
test bl, 0x3d
mov dword [rsp + 0x45610], eax
jmp 0x18000e2e3
mov rcx, qword [rsp + 0x48]
jmp 0x1800be9bb
jmp 0x1800e2c14
jmp 0x1800cb18e
jmp 0x1800c7a09
call fcn.1800da9e3
jmp 0x1800e052a
cmp dl, 0x77
cmc
cmp dword [rsp + 0x45638], eax
jmp 0x1800cfaeb
jmp 0x1800e2978
mov rax, qword [rsp + 0x30]
not ch
not ecx
jmp 0x1800c6027
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movzx ecx, dl
not rcx
lea rdx, [rsp + 0x38]
bswap cx
mov ecx, eax
jmp 0x1800c5429
jmp 0x1800f5905
jmp 0x1800c0d86
call fcn.180003370
rcl ch, cl
xchg dx, cx
sub r8d, r8d
lea rcx, [rcx*4 - 0x5bbde280]
movzx cx, bl
bswap ecx
bswap dx
mov rdx, rax
bswap cx
movsx ecx, bl
lea rcx, [rsp + 0x45650]
jmp 0x1800d9345
setne cl
mov qword [rsp + 0x45688], rax
setbe cl
movsx cx, al
bswap cx
bswap edx
mov rdx, qword [rsp + 0x45688]
jmp 0x1800e8eb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
setnp dl
mov r8d, eax
rcl r9w, 6
stc
rcr ch, cl
imul r8d, r8d, 3
movzx cx, al
jmp 0x1800f76f6
cmp ax, 0x6765
clc
cmp dword [rsp + 0x456b8], 0
jmp 0x1800ba028
jmp 0x1800d7604
jmp 0x1800f8bfe
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
movzx dx, al
not ch
xchg dl, ch
lea rdx, [0x180074478]
jmp 0x1800fb381
jmp 0x1800c2588
mov dword [rsp + 0x45620], eax
jmp 0x1800d22a2
call fcn.18000b4f0
ror r8w, cl
dec r8w
mov r8, rax
cmc
bt dx, 3
bt sp, sp
xor edx, edx
jmp 0x1800ee3be
je 0x1800dcecd
jmp 0x1800e13c3
mov dword [rsp + 0x45658], 0
lea rcx, [rbx + 0x4f795afb]
setp cl
lea rcx, [rbp*8 + 0x56cc679c]
lea rcx, [rsp + 0x40]
jmp 0x1800de6bf
jmp 0x1800db4b7
jmp 0x1800bf6ef
jne 0x1800bb41b
setbe cl
mov dword [rsp + 0x45658], 0
movzx cx, dl
lea rcx, [rsp + 0x40]
jmp 0x1800ffde0
jne 0x1800f0151
bt di, 0xd
sal cl, cl
mov eax, dword [0x1800a0578]
rol ch, 4
or eax, 1
lea rcx, [rbp - 0x69c5cbb5]
setbe cl
mov dword [0x1800a0578], eax
bswap ecx
not ch
jmp 0x1800d2e83
movsx ecx, cl
movzx ecx, dl
lea rcx, [rsp + 0x40]
jmp 0x1801048d4
bswap cx
jmp 0x1800bf05a
jmp 0x1800e8808
jmp 0x180103145
jmp 0x1800f5b3b
nop
jmp 0x1800b3b83
jne 0x180101c1a
stc
cmp dword [0x18008a580], 0
jmp 0x1800ba241
mov qword [rsp + 0x70], rax
jmp 0x1800fd479
jne 0x180101c1a
cmc
bt rsi, 7
bt esp, 3
cmp dword [0x18008a580], 0
jmp 0x1800d0b93
jmp 0x1800e1e44
jne 0x180101c1a
stc
stc
jmp 0x1800be2ba
mov cx, 0xa587
movsx ecx, al
lea rcx, [rsp + 0x40]
jmp 0x1800cdbae
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
jmp 0x1800e9435
mov qword [rsp + 0x45668], rax
not ch
mov rcx, qword [rsp + 0x45668]
jmp 0x1800e41ff
cmp dword [rsp + rcx + 0x98], eax
jmp 0x1800fbdf8
call fcn.1800da9e3
jmp 0x1800aee72
nop
jmp 0x1800de327
call fcn.180002bf0
setl ch
movsx ecx, dl
lea rcx, [rbp*4 + 0xac72265]
nop
setns cl
lea rcx, [rsp + 0x45650]
jmp 0x1800f922a
jmp 0x18003c2bc
jge 0x1800e5ecf
mov dword [rsp + 0x45658], 0
mov cl, bl
bswap ecx
lea rcx, [rsp + 0x40]
jmp 0x1800e7946
mov dword [rsp + 0x45628], 0
jne 0x1800c3c95
mov dword [rsp + 0x45624], 0
jmp 0x1800fdccc
call fcn.1800dc2ce
shl r11w, 0xf
shr r11d, 5
mov r11, qword [rsp + 0x30]
bt esp, 0x11
cmc
clc
bt sp, ax
mov qword [rsp + 0x45608], r11
test ch, 0x24
clc
cmc
sub eax, eax
cmp cl, bh
jmp 0x1800cc698
call fcn.1800017c0
movzx ax, al
jmp 0x1800d7eed
mov qword [rsp + 0x70], rax
jmp 0x1800dba7b
je 0x1800dcecd
sets cl
mov rcx, qword [rsp + 0x60]
jmp 0x1800d61f7
jmp 0x1800ff8e0
jmp 0x1800fb1c0
cmp qword [rsp + 0x70], 0xffffffffffffffff
jmp 0x18010a396
call fcn.180001700
jmp 0x1800e318a
mov eax, dword [rax + 0x58]
jmp 0x1800d9454
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xchg rdx, rcx
jmp 0x1800b5c5e
jmp 0x1800c8bd8
mov dword [rsp + 0x45624], 0
jmp 0x1801000bf
jmp 0x1800ea093
call fcn.18004f770
sub bh, ch
dec bl
inc bh
btr bx, 8
add rsp, 0x456a0
lea rbx, [rax - 0x6e58a399]
movsx rbx, al
lea rbx, [rdx*8 - 0xadfc2ea]
pop rbx
ret
call fcn.1800017c0
mov rdx, rdx
mov edx, 0xffffffff
lea rcx, [rbx*2 - 0x2aa2e264]
lea rcx, [rsp + 0x40]
jmp 0x1800fe56e
call fcn.1800da9e3
jmp 0x1800fd5a0
jne 0x1800f0151
movzx cx, bl
bsr cx, cx
neg ax
shr eax, 6
mov eax, dword [0x1800a0578]
cmp rsp, 0x70544cce
bts cx, si
or eax, 1
movzx cx, cl
bswap cx
mov ecx, 0xccc6712e
mov dword [0x1800a0578], eax
movzx ecx, al
bswap cx
lea rcx, [0x180074498]
jmp 0x1800e44cc
jmp 0x1800c4140
je 0x1800d1b02
xchg r9w, ax
inc r9w
mov qword [rsp + 0x455f8], 0
test al, cl
shld r9w, bp, 0xd
rcr r9w, 6
mov dword [rsp + 0x45600], 0
shr dh, cl
shrd ax, dx, 0xc
xchg ecx, edx
mov dword [rsp + 0x45604], 0
btc ax, 6
xadd r9w, ax
movsx eax, bl
lea rax, [rsp + 0x45604]
shrd r9w, sp, cl
sal r9w, 0xc
mov qword [rsp + 0x28], rax
clc
cmp si, dx
clc
xor dl, ch
lea rax, [rsp + 0x45600]
or cl, 0x43
test bl, ch
xchg edx, r9d
mov qword [rsp + 0x20], rax
bswap rdx
add r9w, 0x2980
lea r9, [rsp + 0x455f8]
sub dx, cx
xchg dl, ch
sbb ch, ah
inc cx
sub r8d, r8d
not cl
setge ch
mov edx, 0xa
mov cl, 0x72
jmp 0x1800ceb1f
call fcn.1800053c0
mov cl, 0x8e
jmp 0x1800e9007
jmp 0x1800e7fa6
jne 0x1800dcecd
test ch, 0xa9
cmp bh, 0x17
bt bx, di
cmp dword [rsp + 0x456b8], 0
jmp 0x1800e080c
jne 0x1800f0151
cmp ch, bh
sal cl, 5
bt bx, bx
mov eax, dword [0x1800a0578]
dec cx
add ch, 0xf3
sal cx, 0xb
bsf cx, di
or eax, 1
mov ch, bh
movsx cx, cl
not ch
bswap rcx
mov dword [0x1800a0578], eax
mov cx, bx
mov ch, 0x56
jmp 0x1800d7e8b
jg 0x180109864
jne 0x180101c1a
stc
cmp dword [0x18008a580], 0
jmp 0x1800e90c9
jmp 0x1800e3548
jmp 0x1800aec1f
jmp 0x180101705
jmp 0x1800d52ae
stc
test dh, ch
sub ecx, ecx
jmp 0x180109e34
je 0x1800d1b02
stc
cmc
cmp dword [rsp + 0x38], 0
jmp 0x1800f8518
jmp 0x1800f0826
jae 0x1800d4f00
movzx ax, bl
movsx ax, cl
jmp 0x1800f1543
lea rax, [rsp + 0x45604]
btc r9w, bp
mov qword [rsp + 0x28], rax
btc ax, bp
test di, 0x227b
lea rax, [rsp + 0x45600]
dec ch
mov qword [rsp + 0x20], rax
rol cl, cl
rcr r9w, 0xc
and dh, bh
lea r9, [rsp + 0x455f8]
btr edx, 0x10
ror dl, 7
xor r8d, r8d
mov dh, 0xe1
not rcx
bswap edx
mov edx, 0xa
not ecx
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800ad68b
jmp 0x1800eab75
lea rcx, [rsp + 0x40]
jmp 0x1800c6c9d
call fcn.1800da9e3
jmp 0x1800f9d04
mov edx, 0xffffffff
not ch
not ch
movsx cx, dl
movzx cx, dl
lea rcx, [rsp + 0x40]
jmp 0x1800b6da1
cmp dword [rsp + 0x78], eax
jmp 0x1800e67a8
je 0x1800d1b02
not al
mov qword [rsp + 0x455f8], 0
bsr ax, bp
and rdx, rax
movzx cx, dl
stc
mov dword [rsp + 0x45600], 0
bts eax, edx
stc
not r9d
mov dword [rsp + 0x45604], 0
and al, cl
bsr ax, di
lea rax, [rsp + 0x45604]
cmp esi, 0x149ec452
mov ch, al
bsr r9w, ax
mov qword [rsp + 0x28], rax
btr eax, ebp
lea rax, [rsp + 0x45600]
cmp al, al
stc
sal ecx, cl
sar dl, cl
mov qword [rsp + 0x20], rax
rol ch, cl
inc r9d
lea r9, [rsp + 0x455f8]
xadd dl, ch
movzx cx, al
ror cl, 5
sub r8d, r8d
bswap cx
jmp 0x180104350
jmp 0x1800f8480
call fcn.1800017c0
jmp 0x1800fc6da
jmp 0x1801002bd
mov ch, ah
mov dword [rsp + 0x455f0], 0
setnp ch
movsx cx, dl
seta ch
seto ch
mov dword [rsp + 0x5c], 0
setno ch
bswap rcx
mov qword [rsp + 0x30], 0
movsx rcx, al
movsx cx, dl
mov dword [rsp + 0x58], 0xa000
jbe 0x1800dc75b
sete cl
mov ecx, dword [rsp + 0x58]
jmp 0x1800d4228
jmp 0x1800c7d5a
jmp 0x1800f226b
call fcn.180003370
bswap cx
btr ecx, esi
sub r8d, r8d
xchg edx, ecx
not cx
movsx dx, dl
mov rdx, rax
lea rcx, [rbx*4 - 0x43491cc1]
lea rcx, [rsp + 0x45650]
jmp 0x1800fce52
sal cx, cl
or eax, 1
movsx cx, dl
mov dword [0x1800a0578], eax
movzx ecx, cl
movsx cx, bl
setno cl
movzx cx, bl
lea rcx, [0x180074498]
jmp 0x1800df8dd
je 0x180101c1a
bswap cx
not cx
mov rcx, qword [rsp + 0x48]
jmp 0x1800fcd0f
jmp 0x1800b4b92
jmp 0x1800f0e0f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
bswap r8
clc
mov r8d, eax
jmp 0x1801023bd
je 0x1800d9041
lea rcx, [riz*2 - 0x63bc6577]
mov ecx, dword [0x18008a590]
jmp 0x1800eb0ee
call fcn.18004f654
bt eax, esi
mov qword [rsp + 0x45670], rax
setb ah
sub eax, esi
mov rax, qword [rsp + 0x45670]
test dl, ah
test rdi, 0x1c64cbca
mov qword [rsp + 0x30], rax
jmp 0x1800ff1a7
movsxd rax, dword [rsp + 0x45630]
jmp 0x180108c32
call fcn.1800197c0
movsx ax, bl
movsx ax, cl
inc eax
mov eax, dword [0x1800a0578]
jmp 0x1800f1b68
jmp 0x1800eb23b
jmp 0x1800bd9ab
clc
test esp, 0x1b7a1f4a
stc
and eax, 1
jmp 0x1800c74ac
je 0x1800d1b02
stc
cmp dword [rsp + 0x38], 0
jmp 0x1800ba4d8
bswap r9w
mov r9d, ebx
lea rcx, [rdx - 0x13727498]
mov ch, ch
sete cl
lea rdx, [0x180074468]
bswap rcx
setne cl
lea rcx, [rsp + 0x40]
jmp 0x1800fd59b
je 0x1800d1b02
stc
cmp dword [rsp + 0x38], 0
jmp 0x1800e2531
jmp 0x1800bd1ac
jmp 0x1800cadd7
stc
cmc
cmc
cmp eax, 0xb7
jg 0x18010121d
je 0x1800b5f98
stc
clc
jno 0x1800cfd7d
bt di, 2
cmp qword [rsp + 0x70], 0
jmp 0x1800dfc9f
call fcn.180019900
bswap cx
jmp 0x1800ae142
bswap cx
jmp 0x1801001bd
call fcn.1800da9e3
jmp 0x180107f98
jne 0x1800dcecd
jmp 0x180100e98
jmp 0x1800fc311
mov dword [rsp + 0x45628], 0
jmp 0x1800d3c96
jne 0x1800dcecd
cmc
cmp dword [rsp + 0x456b8], 0
jmp 0x1800b11bc
jne 0x1800f0151
cmc
or ch, 0xf4
shrd cx, dx, 1
mov eax, dword [0x1800a0578]
ror cx, cl
or eax, 1
not cl
bswap cx
mov dword [0x1800a0578], eax
lea rcx, [rbp + 0x1c7bcb17]
lea rcx, [0x180074498]
jmp 0x1800ed232
jne 0x1800f3266
setnp al
rcr ah, 5
shr ax, cl
mov qword [rsp + 0x60], 0
sal ah, 3
btr rax, 0x3b
cmc
xor ax, dx
mov dword [rsp + 0x54], 0
movzx rax, al
mov dword [rsp + 0x68], 0
rcr ax, cl
sar ax, 0xd
mov al, 0xe4
stc
mov eax, dword [rsp + 0x5c]
jmp 0x180019cf1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
bt bp, 0xa
cmp dword [rsp + 0x78], eax
jmp 0x1800ed5f7
mov rcx, qword [rsp + 0x60]
jmp 0x1800e6f1b
mov qword [rsp + 0x70], rax
jmp 0x1800e497a
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1800f231e
jnp 0x1800cd2a0
jne 0x180106183
cmp dl, al
cmc
cmp qword [rsp + 0x30], 0
jmp 0x1800e236c
mov qword [rsp + 0x45690], rax
movsx rcx, cl
jge 0x1800af119
bswap ecx
movzx cx, cl
lea rcx, [rsp + 0x40]
jmp 0x1800ebb3e
je 0x1800d1b02
cmp dh, ah
cmp cx, 0xbe34
cmp dword [rsp + 0x38], 0
jmp 0x180106703
test al, ah
bt dx, 5
cmp ebx, 0xca82fa7d
mov qword [rsp + 0x30], rax
stc
clc
cmp dword [rsp + 0x45610], 0xc0000004
jmp 0x1800c5d92
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
jmp 0x1800fd634
mov dword [rsp + 0x38], 0
jmp 0x1800b708e
dec ax
mov eax, dword [rsp + 0x45630]
bt esp, esi
bt esp, 0xf
cmp dl, 0x5d
add eax, 1
bt bx, 1
stc
test ch, 0x1b
mov dword [rsp + 0x45630], eax
sal al, 3
mov eax, dword [rsp + 0x5c]
jmp 0x1800e0e8d
jae 0x1800f6d60
rcr ax, 0xe
ror eax, cl
movzx ax, dl
bswap ax
movsxd rax, dword [rsp + 0x45614]
bt cx, 3
cmc
stc
bt sp, 0xf
imul rax, rax, 0x238
jmp 0x18010a70b
jmp 0x1800d8e7e
jmp 0x180016537
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ch, dh
lea rcx, [rbp - 0xd6db3f]
xchg dh, cl
movzx ecx, bl
lea rdx, [0x180074478]
mov cx, 0x4e65
seta ch
mov rcx, rax
jmp 0x1800d76e6
jmp 0x18010484b
jmp 0x1800e0947
jmp 0x1800d139f
je 0x1800b5f98
stc
bt bp, 2
cmp qword [rsp + 0x70], 0xffffffffffffffff
jmp 0x1800fd5a5
mov dword [rsp + 0x45630], 0
jmp 0x1800f4078
je 0x180101c1a
lea rcx, [rdx*4 - 0x1041531c]
mov rcx, qword [rsp + 0x48]
ja 0x1800e6768
call fcn.1800da9e3
jmp 0x1800fd001
jmp 0x1800ce908
mov ecx, eax
jmp 0x1800ca10f
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
jmp 0x1800e7c11
jmp 0x1800b7298
jmp 0x18010a458
not r9w
jmp 0x1800d9032
jmp 0x1800dcbff
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xchg cx, dx
movsx dx, dl
movsx dx, dl
xchg cx, dx
lea rdx, [rsp + 0x38]
setb ch
movsx cx, bl
lea rcx, [rdx*2 + 0x792543ab]
movzx cx, bl
mov ecx, eax
jmp 0x1800ba4d3
call fcn.1800da9e3
jmp 0x1801011bc
jmp 0x1800f702b
jmp 0x1800f1e8d
call fcn.1800197c0
clc
cmc
test dh, cl
cmp dword [0x18008a580], 0
jmp 0x1800b0584
mov dword [rsp + 0x45620], eax
jmp 0x1800effbd
jmp 0x180104018
call fcn.1800053c0
setno ch
lea rcx, [rbx + 0x149414d0]
lea rcx, [rsi*8 + 0x3433223]
sete cl
lea rcx, [rsp + 0x40]
jmp 0x1800ba7b4
je 0x180101c1a
setp ch
mov rcx, qword [rsp + 0x48]
jmp 0x1800dd2cb
cmp cl, 0x5f
bt bx, 3
test dl, 0x40
test rbp, rsi
xor rcx, rsp
jmp 0x180103c2a
jmp 0x1800fc640
jmp 0x1800ef6e9
jmp 0x1800ec044
je 0x1800d1b02
stc
cmc
cmp ch, ah
cmp dword [rsp + 0x38], 0
jmp 0x1800e04c9
jmp 0x1800f3a2f
call fcn.1800017c0
setl cl
jmp 0x1800ef5d1
call fcn.180018a00
movsx r8w, cl
xchg dl, cl
setae cl
movzx edx, dl
mov qword [rsp + 0x48], 0
not cx
xchg cx, r8w
mov dword [rsp + 0x50], 0
movzx dx, bl
not r8d
mov dword [rsp + 0x78], 0
setae dl
jmp 0x1800b2a6e
jmp 0x1800c13eb
je 0x1800e9150
seta al
movzx ax, al
not ax
mov rax, qword [rsp + 0x45608]
jmp 0x1800b3fef
call fcn.1800037a0
bswap ecx
jmp 0x18001a2ca
mov ch, 0x11
movsx ecx, bl
mov ecx, dword [0x18008a590]
jmp 0x1800e2e1b
je 0x1800b5f98
test edi, 0x7b633396
cmc
test bh, bh
jmp 0x1800eba83
movsx cx, al
mov ecx, eax
jmp 0x180109751
jmp 0x18010ad26
mov dword [rsp + 0x38], 0
jmp 0x1800f98f0
cmc
bt si, 9
cmp dword [0x18008a580], 0
jmp 0x1800d9006
jmp 0x1800ea904
jmp 0x1800f8102
call fcn.1800037a0
seta cl
setae cl
setbe cl
movzx cx, dl
lea rcx, [rsp + 0x40]
jmp 0x1800dce65
jmp 0x1800f31c8
jmp 0x1800f8283
jmp 0x1800b526d
jmp 0x1800f78a4
jmp 0x180109559
call fcn.1800017c0
lea rax, [rbp + 0x378820f2]
movsx ax, al
movsx rax, cl
movsx ax, dl
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
stc
clc
cmp dword [rsp + 0x78], eax
jmp 0x1800fcfe1
mov eax, dword [rax + 0x50]
jmp 0x1800f6eb3
call fcn.1800053c0
lea rcx, [rbx - 0xf795c4e]
setno cl
lea rcx, [rsp + 0x40]
jmp 0x1800d93c8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, 0x886d79fe
test di, si
clc
cmp dword [rsp + 0x78], eax
jmp 0x1800ffcb0
setb ch
lea rcx, [rsp + 0x45650]
jmp 0x1800b3daa
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
bt bx, 1
cmp dword [rsp + 0x456b8], 0
jmp 0x1800e2ae2
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
stc
bt rcx, rdx
jmp 0x1800d12cc
movzx rcx, dl
setge cl
nop
jmp 0x1800d7849
jmp 0x1800e2e60
jmp 0x1800cc904
jmp 0x180101322
jmp 0x1800ce72e
stc
clc
cmc
cmc
cmp qword [rsp + 0x70], 0xffffffffffffffff
jmp 0x1800eac30
call fcn.1800dc2ce
bswap r11w
mov r11w, di
inc r11w
btc r11w, 7
mov r11, qword [rsp + 0x30]
jmp 0x1800c7a13
clc
mov qword [rsp + 0x45670], rax
shr ax, 9
sal ax, 8
mov rax, qword [rsp + 0x45670]
jmp 0x1800f3c9b
movzx cx, cl
lea rcx, [rbx*8 + 0x280d831d]
mov rcx, rax
jmp 0x1800e5b01
jmp 0x1800f7ab0
jne 0x1800f0151
mov ax, 0xead4
ror cx, 8
sar al, cl
seta ch
mov eax, dword [0x1800a0578]
shr cx, 3
lea rcx, [rsp - 0x1c55b9b6]
shrd cx, di, 0xc
cmp esi, esi
or eax, 1
lea rcx, [rcx + 0x33144ae5]
mov cl, dh
setl ch
movsx cx, dl
mov dword [0x1800a0578], eax
seta ch
lea rcx, [rax + 0x1d1c9839]
setb ch
lea rcx, [0x180074498]
jmp 0x1800cc92b
je 0x1800b5f98
stc
cmp qword [rsp + 0x70], 0
jmp 0x1801071c7
jne 0x1800bb41b
movzx cx, bl
mov dword [rsp + 0x45658], 0
seto ch
mov cl, al
lea rcx, [rcx - 0x72968d57]
lea rcx, [rsp + 0x40]
jmp 0x18010604d
call fcn.180019900
not dh
not cl
mov edx, 0xa
bswap ecx
setbe cl
movzx rcx, cl
mov rcx, qword [rsp + 0x456b0]
jmp 0x180102266
ror ah, 3
shr ax, 0xc
cmp dl, bl
neg ax
mov eax, dword [rsp + 0x5c]
bt rdx, 0x1e
jmp 0x1800e15c0
jmp 0x1800c6fed
jmp 0x1800c4180
jmp 0x1800f265e
mov eax, dword [rax + 0x58]
jmp 0x1800e7fe1
sets cl
mov rcx, qword [rsp + 0x60]
jne 0x1800fc1c9
call fcn.1800da9e3
jmp 0x1800ce7d5
mov qword [0x1800a0570], rax
jmp 0x1800f0151
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x1800b7b34
movsx dx, dl
mov edx, 0xffffffff
movsx cx, al
lea rcx, [rsp + 0x40]
jmp 0x180108484
jmp 0x1800ecae8
call fcn.180041440
not ecx
xchg dh, ch
movzx dx, cl
mov qword [rsp + 0x45680], rax
bswap ax
lea rax, [rax + 0x440c1aee]
mov ch, dl
mov rax, qword [rsp + 0x45680]
jmp 0x1800baad8
jmp 0x18001c89b
jmp 0x180018135
jmp 0x180105cff
jmp 0x1800bc0b2
jmp 0x1800d9f12
jmp 0x1800fa04d
jmp 0x180019b3c
jmp 0x1800b4082
mov qword [rsp + 0x70], rax
jmp 0x1800ba5d8
cmp dword [rsp + 0x456b8], 0
jmp 0x1800b796b
je 0x1800d1b02
xor dh, 0xdf
xadd ah, ch
mov qword [rsp + 0x455f8], 0
jmp 0x1800b97da
je 0x1800dcecd
movsx cx, al
setle cl
mov rcx, qword [rsp + 0x60]
jmp 0x1800d7cc8
call fcn.180018b00
jmp 0x1800dbb0f
mov dword [rsp + 0x4562c], 0
jmp 0x1800fbf48
jmp 0x180107d6a
jne 0x180101c1a
bt eax, ebx
cmp dword [0x18008a580], 0
jge 0x18010a77a
je 0x180101c1a
mov ch, 0x6b
mov rcx, qword [rsp + 0x48]
jmp 0x1800c6536
call fcn.1800037a0
lea rcx, [rdi + 0x2f485f81]
lea rcx, [rsp + 0x40]
jmp 0x1800ce261
mov edx, edi
lea rdx, [rsp + 0x38]
movsx cx, al
mov ecx, eax
jmp 0x1800d0c3e
jmp 0x1800dcb81
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
jmp 0x1800f3870
lea r9, [rbx*8 - 0x6f7f0332]
mov dword [rsp + 0x45648], 0
jmp 0x1800165a9
call fcn.1800da9e3
jmp 0x1800b09f4
je 0x1800c99da
lea rdx, [riz*4 + 0x5dc78c67]
movzx rcx, al
movzx dx, dl
movsx ecx, cl
mov edx, 0xa
mov cl, 0xbf
lea rcx, [rax - 0x5bee41c9]
mov cl, 0xaf
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800b3a41
cmp dword [rsp + 0x45610], 0xc0000004
jmp 0x1800e7cc3
jmp 0x1800f85e2
call fcn.180018b00
jmp 0x1800166dd
cmp ch, al
test ah, 0xb
bt bx, bp
shl ebx, 3
jmp 0x1800f8b8a
jmp 0x1800e9ca5
je 0x1800dcecd
movsx ecx, bl
jmp 0x1800fc408
jmp 0x1800f9961
jmp 0x1800f1488
jmp 0x1800ad6ee
jmp 0x1800eb51e
mov edx, 0xa
setns cl
movsx cx, bl
mov rcx, qword [rsp + 0x456b0]
jg 0x1800e8902
jmp 0x1800c99d5
jmp 0x1800ca0e8
mov dword [rsp + 0x45628], 0
jmp 0x1800c3eb4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp bh, 0x9d
test ebx, 0x78ae4591
stc
cmp al, 1
cmp eax, 0xb7
jmp 0x1800ceb39
cmc
cmp dl, al
xor edx, edx
clc
sub ecx, ecx
jmp 0x1800f6a2a
jmp 0x1800f4123
jmp 0x1800f1e7c
jmp 0x1800d347a
jmp 0x1800e0ff4
mov eax, dword [rax + 0x50]
jmp 0x1800d45b4
jmp 0x1800fa3aa
jmp 0x1800b5f07
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
bt si, di
cmc
ror r9, cl
mov r8d, eax
rcl r9d, 0x16
imul r8d, r8d, 3
jmp 0x1800ba669
jmp 0x18010a30d
jmp 0x1800b43b7
jmp 0x180108b74
call fcn.1800017c0
movsx edx, cl
jg 0x1800dc115
mov edx, 0xffffffff
mov cx, di
lea rcx, [rbx*8 + 0x20341dda]
bswap cx
lea rcx, [rsp + 0x40]
jmp 0x1800f9043
je 0x1800c99da
mov cl, 0xbd
not dx
mov edx, 0xa
movsx cx, cl
mov cx, 0x9d7e
bswap ecx
lea rcx, [rbx + 0xc6b3c10]
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800fa8a9
cmp dl, 0xb
dec rax
mov eax, dword [rsp + 0x45630]
cmc
bt ecx, ecx
cmp dword [rsp + 0x45634], eax
jmp 0x1800cb441
jmp 0x1800b36de
jae 0x1800d8834
mov dword [rsp + 0x38], 0
jmp 0x1800bcab4
jmp 0x1800eb3f6
lea rcx, [rdx + 0x4e02bc1c]
lea rcx, [rsp + 0x45650]
jmp 0x180109cb9
call fcn.18000b4f0
bt bx, ax
ror r8w, cl
jmp 0x1800cd7a1
jmp 0x1800c5467
stc
imul r8d, r8d, 3
lea r9, [rdi - 0x418c9871]
bswap r9w
xchg ecx, r9d
not r9
mov r9d, ebx
xchg ecx, edx
bswap ecx
lea rdx, [0x180074468]
mov cl, cl
lea rcx, [rsp + 0x40]
jmp 0x1800d4c77
jmp 0x1800c390b
jmp 0x1800b8fa9
clc
and eax, 1
bt esp, 0x1e
test eax, eax
jmp 0x1800d7fa1
jmp 0x1801056fc
jmp 0x1800d73b3
je 0x180101c1a
jmp 0x1800e6add
jmp 0x1800f6165
lea rcx, [rbp*8 - 0x1e9c232c]
mov cx, 0x7dac
bswap ecx
lea rcx, [rsp + 0x40]
js 0x1800f562b
call fcn.1800037a0
not ecx
mov ecx, ebp
movzx cx, al
movsx cx, al
lea rcx, [rsp + 0x40]
jmp 0x1800fcea6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dx, sp
lea rdx, [rbx - 0x135f5bd1]
bswap cx
lea rcx, [rsi + 0x69b74d2]
lea rdx, [rsp + 0x38]
setg ch
mov cx, dx
setns ch
mov ecx, eax
jmp 0x1800b624c
jmp 0x1800d19f6
jmp 0x1800ec880
jmp 0x1800e79d5
jmp 0x1800ed484
jne 0x1800dcecd
jmp 0x1800e08c8
jne 0x1800f3266
shr ax, 1
mov qword [rsp + 0x60], 0
dec al
rcr ax, 0xe
mov ah, dl
mov dword [rsp + 0x54], 0
test cx, 0xb278
sub ax, 0xb6d0
not ax
movzx eax, al
mov dword [rsp + 0x68], 0
sar ax, cl
and eax, 0x1576ba30
mov eax, dword [rsp + 0x5c]
test bx, 0x99ad
bt si, 0xa
test dl, 0x9c
cmp dl, dh
sub eax, 1
jmp 0x1800c749b
mov dword [rsp + 0x38], 0
jmp 0x1800ccdbc
jmp 0x180105efa
sets cl
mov edx, 0xa
setae cl
mov rcx, qword [rsp + 0x456b0]
jmp 0x1800bda4c
cmp eax, 1
jmp 0x1800b87ef
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
stc
test dl, 0xe7
bt ebx, ebp
cmp dword [rsp + 0x456b8], 0
jmp 0x180015d14
call fcn.180002bf0
movzx cx, bl
jmp 0x1800c20c3
jmp 0x1800d507b
jmp 0x1800cf605
mov eax, dword [rsp + rax + 0x98]
cmc
cmp rdi, rdx
mov dword [rsp + 0x45638], eax
sub ax, sp
mov eax, dword [rsp + 0x54]
clc
cmp dword [rsp + 0x45638], eax
jmp 0x1800b0006
cmp si, 0xb167
cmp cl, dh
mov qword [rsp + 0x30], rax
cmp rax, rdx
cmc
clc
cmp esp, eax
xor eax, eax
stc
cmc
cmp si, si
clc
cmp eax, 1
jmp 0x1800d6e9f
jne 0x1800f0151
setp cl
bt bx, 0xe
mov eax, dword [0x1800a0578]
rol ch, 1
dec ecx
or eax, 1
jmp 0x1800bf1cf
call fcn.18004f770
neg bx
bts bx, 9
inc bx
test bp, 0x3315
add rsp, 0x456a0
bswap ebx
pop rbx
ret
setbe ch
lea rdx, [rsp + 0x50]
lea rcx, [rax - 0x6e009fd4]
sete cl
lea rcx, [rsp + 0x48]
jmp 0x1800d195d
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rdx, [rsp + 0x7c7a6ad]
movzx dx, bl
not dh
lea rdx, [0x180074478]
seta ch
mov rcx, rax
jmp 0x1800da075
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
cmp bh, 0xa6
clc
stc
cmp dword [rsp + 0x456b8], 0
jmp 0x1800ee51b
jmp 0x1800e7642
call fcn.1800197c0
dec ax
mov eax, dword [0x1800a0578]
stc
cmc
bt dx, 0xd
and eax, 1
cmp dx, 0xa790
test dh, dh
test ax, ax
stc
test eax, eax
jmp 0x1800fb6e7
jmp 0x1800e8bc6
mov dword [rsp + 0x38], 0
jmp 0x1800c02c3
jne 0x1800dcecd
jmp 0x1800cbeba
mov eax, dword [rax + 0x58]
jmp 0x180107e8b
call fcn.180019900
jmp 0x1800db98a
call fcn.1800017c0
mov ah, 0x9a
mov ah, bl
setns ah
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
ja 0x1800fffd2
call fcn.18004f654
test esi, ebp
mov qword [rsp + 0x45670], rax
sub ax, cx
ror al, 1
mov rax, qword [rsp + 0x45670]
stc
bt ax, 0xa
clc
mov qword [rsp + 0x30], rax
stc
clc
cmp dword [rsp + 0x45610], 0xc0000004
jmp 0x1800c29a0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov cx, 0xb3ed
lea rcx, [rbx - 0x69b93cc5]
lea rdx, [rsp + 0x38]
jmp 0x1800f8adf
jmp 0x1800fd812
bt edx, 0x13
cmp dword [rsp + 0x45614], eax
jmp 0x180100c04
jmp 0x1800da55b
jmp 0x1800f8abd
jmp 0x1800c5f17
call fcn.180018b00
jmp 0x1800db760
jmp 0x180104763
call fcn.1800017c0
setno al
mov eax, dword [rsp + 0x45658]
jmp 0x1800e354d
jmp 0x1800e2be9
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test ch, 0xbf
cmp dword [rsp + 0x78], eax
jmp 0x1800f0d07
setge al
setp al
push rbx
movsx ax, bl
jmp 0x1800b28cf
call fcn.1800037a0
sets ch
mov ch, dh
jmp 0x1800ef2d4
je 0x1800b5f98
bt sp, sp
cmp qword [rsp + 0x70], 0
jmp 0x18000e348
jmp 0x1800fdbe5
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x180102517
imul rax, rax, 0x238
clc
test rsp, rdi
cmc
cmp dword [rsp + rax + 0xa8], 0
ja 0x1800b9059
jne 0x1800bcce3
cmc
not ah
clc
movsxd rax, dword [rsp + 0x45630]
cmc
jmp 0x1800d9868
jmp 0x180105f3a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
bt cx, 0xd
cmc
test rbx, 0xffffffff9d3414ed
cmp dword [rsp + 0x78], eax
jmp 0x1800dc102
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movzx cx, cl
lea rdx, [rsp + 0x38]
not cx
not cx
lea rcx, [rcx + 0x3d9d2f60]
mov ecx, eax
jmp 0x18000e454
jmp 0x1800c7d3f
jmp 0x1800fe50f
jmp 0x1800c3055
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
setne ch
lea rdx, [rsp + 0x38]
movzx cx, cl
lea rcx, [rcx - 0x3463e0b2]
jmp 0x1800f6037
jmp 0x1800cc94f
jmp 0x1800e8cbb
je 0x1800dcecd
jmp 0x1800f33eb
jne 0x1800bb41b
not ch
setne cl
mov ch, 0xac
mov dword [rsp + 0x45658], 0
movsx rcx, dl
lea rcx, [rsp + 0x40]
jmp 0x1800c4f37
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
jmp 0x1800f4234
jmp 0x1800c0973
jmp 0x1800df58a
mov dword [rsp + 0x38], 0
jmp 0x1800d881d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
btr r9d, 0xf
btr r8w, si
clc
cmc
mov r8d, eax
bswap r9w
btc r9w, bx
imul r8d, r8d, 3
movsx r9w, al
movzx r9w, bl
mov r9d, ebx
movsx cx, bl
lea rdx, [0x180074468]
setb cl
bswap cx
jmp 0x1800d551d