Function at 0x1800119cc
Capabilities:
Encrypt data using speck

Disassembly:
push rax
pushf
mov eax, 0x6d149ee7
pushf
not eax
add eax, 0xf094fd2e
xor eax, 0xd134ff2b
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x89096a33
xor eax, 0xf875303d
rol eax, 0x47
popf
pushf
not eax
add eax, 0xa47586d0
xor eax, 0x9a83ba10
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc52c7de4
xor eax, 0xa0adee28
rol eax, 0xc9
popf
cmp eax, 0x20
jne 0x180011a2f
popf
pop rax
jmp 0x180012f10
cmp eax, 0
jne 0x180011a3e
popf
pop rax
jmp 0x180011c4b
cmp eax, 3
jne 0x180011a4d
popf
pop rax
jmp 0x180011e48
cmp eax, 1
jne 0x180011a5c
popf
pop rax
jmp 0x180011d56
cmp eax, 0xd
jne 0x180011a6b
popf
pop rax
jmp 0x1800124ad
cmp eax, 0x1a
jne 0x180011a7a
popf
pop rax
jmp 0x180012bf7
cmp eax, 0xe
jne 0x180011a89
popf
pop rax
jmp 0x1800124fa
cmp eax, 0xb
jne 0x180011a98
popf
pop rax
jmp 0x180012342
cmp eax, 0x19
jne 0x180011aa7
popf
pop rax
jmp 0x180012b5b
cmp eax, 8
jne 0x180011ab6
popf
pop rax
jmp 0x180012154
cmp eax, 0x1d
jne 0x180011ac5
popf
pop rax
jmp 0x180012d39
cmp eax, 0x17
jne 0x180011ad4
popf
pop rax
jmp 0x180012a43
cmp eax, 0x1c
jne 0x180011ae3
popf
pop rax
jmp 0x180012d00
cmp eax, 0x12
jne 0x180011af2
popf
pop rax
jmp 0x18001271f
cmp eax, 0x18
jne 0x180011b01
popf
pop rax
jmp 0x180012af5
cmp eax, 0x11
jne 0x180011b10
popf
pop rax
jmp 0x1800126be
cmp eax, 0x1b
jne 0x180011b1f
popf
pop rax
jmp 0x180012ca5
cmp eax, 0x21
jne 0x180011b2e
popf
pop rax
jmp 0x180012f5f
cmp eax, 0x23
jne 0x180011b3d
popf
pop rax
jmp 0x180013054
cmp eax, 0x14
jne 0x180011b4c
popf
pop rax
jmp 0x180012817
cmp eax, 0xf
jne 0x180011b5b
popf
pop rax
jmp 0x180012579
cmp eax, 0x13
jne 0x180011b6a
popf
pop rax
jmp 0x18001278a
cmp eax, 0x15
jne 0x180011b79
popf
pop rax
jmp 0x1800128d3
cmp eax, 0x24
jne 0x180011b88
popf
pop rax
jmp 0x1800130f3
cmp eax, 0x1e
jne 0x180011b97
popf
pop rax
jmp 0x180012dcf
cmp eax, 0xc
jne 0x180011ba6
popf
pop rax
jmp 0x1800123ef
cmp eax, 7
jne 0x180011bb5
popf
pop rax
jmp 0x1800120be
cmp eax, 5
jne 0x180011bc4
popf
pop rax
jmp 0x180011f58
cmp eax, 0x1f
jne 0x180011bd3
popf
pop rax
jmp 0x180012ea3
cmp eax, 0x10
jne 0x180011be2
popf
pop rax
jmp 0x18001260f
cmp eax, 6
jne 0x180011bf1
popf
pop rax
jmp 0x180011ff1
cmp eax, 9
jne 0x180011c00
popf
pop rax
jmp 0x180012189
cmp eax, 4
jne 0x180011c0f
popf
pop rax
jmp 0x180011e91
cmp eax, 0x16
jne 0x180011c1e
popf
pop rax
jmp 0x180012958
cmp eax, 2
jne 0x180011c2d
popf
pop rax
jmp 0x180011dfb
cmp eax, 0xa
jne 0x180011c3c
popf
pop rax
jmp 0x180012230
cmp eax, 0x22
jne 0x180011c4b
popf
pop rax
jmp 0x180012ff6
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0xd0
mov rax, qword [0x18000a040]
xor rax, rsp
mov qword [rsp + 0xc0], rax
xor ebp, ebp
mov r14, rcx
mov edi, ebp
mov ebx, ebp
xor eax, eax
mov esi, 0xa27ea597
pushf
not esi
add esi, 0x92520eeb
xor esi, 0xc3ff2f3c
rol esi, 0xc8
popf
pushf
not esi
add esi, 0xcaf5c063
xor esi, 0x9cd3be83
rol esi, 0x53
popf
pushf
not esi
add esi, 0x9ccc1d94
xor esi, 0x9f2409ac
rol esi, 1
popf
lock cmpxchg dword [0x18000a9c0], esi
je 0x180011d10
push rax
pushf
mov eax, 0x2760e4d1
pushf
not eax
add eax, 0xa775c583
xor eax, 0xe5119145
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xedeaf07c
xor eax, 0xff2d1dd3
rol eax, 0x39
popf
pushf
not eax
add eax, 0xc655760d
xor eax, 0x812d3c35
rol eax, 4
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x7d35799b
pushf
not eax
add eax, 0xb908912d
xor eax, 0xb988c214
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf0f808a0
xor eax, 0xcdec4467
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xa1bdbeda
xor eax, 0xd333b33a
rol eax, 0xea
popf
jmp 0x180011a20
cmp rbx, 0x20
jae 0x180011da2
push rax
pushf
mov eax, 0xab162b4f
pushf
not eax
add eax, 0xff63d849
xor eax, 0x9a1e701d
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xf365e993
xor eax, 0x9d42b57c
rol eax, 0x33
popf
pushf
not eax
add eax, 0xc9800a56
xor eax, 0xfcc2e35a
rol eax, 0xff
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xa2cab9c1
pushf
not eax
add eax, 0xccc883f0
xor eax, 0x9881b57d
rol eax, 0x94
popf
pushf
not eax
add eax, 0x8ac4acc8
xor eax, 0xd3873efa
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xab9f1130
xor eax, 0x933ab3ec
rol eax, 0xff
popf
pushf
not eax
add eax, 0x8ec9102b
xor eax, 0xd861d3c4
rol eax, 0xd
popf
jmp 0x180011a20
xor ecx, ecx
jmp 0x180011e91
mov ecx, esi
push rax
pushf
mov eax, 0xafa5b152
pushf
not eax
add eax, 0xe818a6fb
xor eax, 0x877b78e9
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xd64f60a3
xor eax, 0xff0458af
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xfbee53c6
xor eax, 0xf3505c81
rol eax, 0x70
popf
jmp 0x180011a20
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x18000a9c0], esi
jne 0x180011eff
push rax
pushf
mov eax, 0x879d8357
pushf
not eax
add eax, 0xb23d4df9
xor eax, 0xbb5601cc
rol eax, 3
popf
pushf
not eax
add eax, 0xd341ee2e
xor eax, 0xa38c826e
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x879fac0c
xor eax, 0xaff49a63
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe0f6d45d
xor eax, 0x91328f5c
rol eax, 0xf4
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x7d6fbed
pushf
not eax
add eax, 0xdeb531b1
xor eax, 0xc08971de
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd305b29c
xor eax, 0x81b8653d
rol eax, 0x80
popf
pushf
not eax
add eax, 0x93d838e9
xor eax, 0xace23695
rol eax, 0x42
popf
pushf
not eax
add eax, 0xc8253acc
xor eax, 0x8d463572
rol eax, 0xd5
popf
jmp 0x180011a20
cmp qword [0x18000a9c8], rdi
je 0x180011fbe
push rax
pushf
mov eax, 0x2c3320ec
pushf
not eax
add eax, 0xd1816eef
xor eax, 0xdd7a691c
rol eax, 0x40
popf
pushf
not eax
add eax, 0x865e4d12
xor eax, 0xac202c6c
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x9e91ffff
xor eax, 0x9c93bd38
rol eax, 0x77
popf
pushf
not eax
add eax, 0xadf1f30c
xor eax, 0xb67fb2a7
rol eax, 2
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xa69ed974
pushf
not eax
add eax, 0x8acd261b
xor eax, 0xf2a618ae
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xc219a6e3
xor eax, 0xfa7791e0
rol eax, 0xc7
popf
jmp 0x180011a20
mov r8d, 0x53bad118
pushf
not r8d
add r8d, 0xdb89afb9
xor r8d, 0xce500a5d
rol r8d, 0x67
popf
pushf
not r8d
add r8d, 0x8def6780
xor r8d, 0xbe8488db
rol r8d, 0x77
popf
lea rdx, [rsp + 0x60]
mov rcx, r14
jmp 0x180012032
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [rsp + 0x80], 0x1000
jne 0x180012078
push rax
pushf
mov eax, 0xdd7c7a43
pushf
not eax
add eax, 0xe76ea321
xor eax, 0x99426b7c
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xbf4614d6
xor eax, 0xa63b1087
rol eax, 0xfe
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x92c1987e
pushf
not eax
add eax, 0xd7dfda80
xor eax, 0xf636086b
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8e62ff4c
xor eax, 0xe719610a
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xc41ca0c6
xor eax, 0xedd29cb6
rol eax, 0
popf
jmp 0x180011a20
test byte [rsp + 0x84], 0xf0
jne 0x18001210e
push rax
pushf
mov eax, 0x838ac2da
pushf
not eax
add eax, 0x9c1c950f
xor eax, 0xd94fbf8c
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xa73d4d64
xor eax, 0xdacdea77
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xcab988d6
xor eax, 0xfdaa0cb9
rol eax, 0x86
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xd6a1da83
pushf
not eax
add eax, 0xf983c2b9
xor eax, 0xfda869c5
rol eax, 0x76
popf
pushf
not eax
add eax, 0x85091f6d
xor eax, 0xe14804d5
rol eax, 0x99
popf
pushf
not eax
add eax, 0xa3623da5
xor eax, 0xef8f0b18
rol eax, 0xe0
popf
jmp 0x180011a20
mov esi, ebp
push rax
pushf
mov eax, 0xeee6082b
pushf
not eax
add eax, 0x9adffef3
xor eax, 0xa1c36d31
rol eax, 0x27
popf
pushf
not eax
add eax, 0xc27dfd86
xor eax, 0xa53000c0
rol eax, 0x7a
popf
jmp 0x180011a20
test esi, esi
je 0x1800121d7
push rax
pushf
mov eax, 0x1cf01aa8
pushf
not eax
add eax, 0xfd138baf
xor eax, 0xac890a5b
rol eax, 0xac
popf
pushf
not eax
add eax, 0xe7eaa601
xor eax, 0x9d6a471f
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xf63ea46c
xor eax, 0x805541ce
rol eax, 0xe4
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x362249d4
pushf
not eax
add eax, 0x80af7e67
xor eax, 0x9e0a6686
rol eax, 0x18
popf
pushf
not eax
add eax, 0xcf782bc9
xor eax, 0x800b1763
rol eax, 0xed
popf
pushf
not eax
add eax, 0xcd146569
xor eax, 0xbbbcbbed
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xcd6aa145
xor eax, 0xd6e41e44
rol eax, 0xc5
popf
jmp 0x180011a20
lea rsi, [0x1d28feb4b]
pushf
sub rsi, 0x528f9beb
popf
mov r8d, 0x2a1c6f2d
pushf
not r8d
add r8d, 0x9698facd
xor r8d, 0xf63b4c8c
rol r8d, 0x87
popf
pushf
not r8d
add r8d, 0x8c9d6086
xor r8d, 0x8310a7ed
rol r8d, 0x1a
popf
pushf
not r8d
add r8d, 0xfcc2ac5c
xor r8d, 0xa5140596
rol r8d, 0x7c
popf
mov rcx, rsi
lea rdx, [rsp + 0x90]
jmp 0x18001229f
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [rsp + 0xb0], 0x1000
jne 0x1800122fc
push rax
pushf
mov eax, 0xa33f41b1
pushf
not eax
add eax, 0xc2fb0872
xor eax, 0xd7d40cd7
rol eax, 0x87
popf
pushf
not eax
add eax, 0xb05e37b7
xor eax, 0xbc0bc970
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xe41f662e
xor eax, 0x8085f4dc
rol eax, 0xab
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xf0c12ba6
pushf
not eax
add eax, 0xf643d1ef
xor eax, 0xf22e5394
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xdbdd2149
xor eax, 0xc8d27f62
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x9a2a1247
xor eax, 0xe608c1ef
rol eax, 0x80
popf
jmp 0x180011a20
test byte [rsp + 0xb4], 0xf0
je 0x180012396
push rax
pushf
mov eax, 0x61427731
pushf
not eax
add eax, 0xa465b555
xor eax, 0xd70ccb4c
rol eax, 0x45
popf
pushf
not eax
add eax, 0xfeddc083
xor eax, 0xd071976b
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xcc2e07f2
xor eax, 0x9da80c48
rol eax, 0xe3
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x86807775
pushf
not eax
add eax, 0xf784b72a
xor eax, 0xc68194bd
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xf6db461c
xor eax, 0x929cd4b8
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xb100d75c
xor eax, 0x8bd743b2
rol eax, 0x48
popf
pushf
not eax
add eax, 0xee2ea7da
xor eax, 0xc6558163
rol eax, 0x86
popf
jmp 0x180011a20
mov edx, dword [0x18000aa3c]
mov eax, ebp
test edx, edx
je 0x180012454
push rax
pushf
mov eax, 0xab1ca0c5
pushf
not eax
add eax, 0xf7190da7
xor eax, 0x85fb5cbe
rol eax, 0x70
popf
pushf
not eax
add eax, 0xc0ef6215
xor eax, 0xdcaf2a62
rol eax, 0x83
popf
pushf
not eax
add eax, 0xe8e3addf
xor eax, 0x9c395cae
rol eax, 0x26
popf
pushf
not eax
add eax, 0xef33766b
xor eax, 0xf5f9c38c
rol eax, 0x5d
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x989c583
pushf
not eax
add eax, 0xfd692502
xor eax, 0xbe86c98a
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x98b1c7e2
xor eax, 0xc2f36cfd
rol eax, 0x93
popf
pushf
not eax
add eax, 0xb40458e9
xor eax, 0xab38892a
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xcc2f5987
xor eax, 0xaf242b4d
rol eax, 0x9c
popf
jmp 0x180011a20
mov rcx, qword [0x18000aa30]
push rax
pushf
mov eax, 0x474c73ce
pushf
not eax
add eax, 0xb1c4a1bf
xor eax, 0xc0bc0f60
rol eax, 0x35
popf
pushf
not eax
add eax, 0x98f07d12
xor eax, 0x8d5a9c47
rol eax, 0x67
popf
pushf
not eax
add eax, 0x90d893dd
xor eax, 0xc8fc2e77
rol eax, 9
popf
jmp 0x180011a20
cmp r14, qword [rcx]
je 0x180012545
push rax
pushf
mov eax, 0x2e06e40
pushf
not eax
add eax, 0xec6798ba
xor eax, 0xb1e0ab49
rol eax, 0xe
popf
pushf
not eax
add eax, 0x993cd741
xor eax, 0xf2b16e5d
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xf2c1a7aa
xor eax, 0x80d25e61
rol eax, 6
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x1b5667a
pushf
not eax
add eax, 0xa0ad0caa
xor eax, 0xe6b4a5d3
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xa2bcb728
xor eax, 0x8a9e9365
rol eax, 0x93
popf
jmp 0x180011a20
inc eax
add rcx, 0x38
cmp eax, edx
jb 0x1800125dc
push rax
pushf
mov eax, 0xda0555ad
pushf
not eax
add eax, 0xa4827612
xor eax, 0xe67919ea
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xb8c096d7
xor eax, 0xadbebb21
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xc62630e6
xor eax, 0xb1459ab9
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc5ce1556
xor eax, 0xea732398
rol eax, 0x8c
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xf2a41b49
pushf
not eax
add eax, 0xb748967e
xor eax, 0xf9100109
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x88c52e5a
xor eax, 0xae8b8fbb
rol eax, 0xb2
popf
jmp 0x180011a20
mov rcx, r14
call fcn.18002e415
mov rcx, rax
test rax, rax
jne 0x180012678
push rax
pushf
mov eax, 0x38dc88df
pushf
not eax
add eax, 0xade5702d
xor eax, 0xe78f79de
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xc6491490
xor eax, 0xd825fa88
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xef0115ad
xor eax, 0xd504b62b
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xc09ae406
xor eax, 0xa3b2867d
rol eax, 0x3d
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x881a28dd
pushf
not eax
add eax, 0xfd34f9c4
xor eax, 0xf9732ad3
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x9f51f34b
xor eax, 0xcbc949da
rol eax, 0xed
popf
pushf
not eax
add eax, 0x9081be11
xor eax, 0xf7a99d43
rol eax, 0x90
popf
jmp 0x180011a20
lea edi, [rax + 9]
jmp 0x1800130f3
cmp eax, 0xffffffff
je 0x180012757
push rax
pushf
mov eax, 0x7e6f02db
pushf
not eax
add eax, 0xc8455f18
xor eax, 0xac9f0206
rol eax, 0x46
popf
pushf
not eax
add eax, 0xebc97b62
xor eax, 0x9971a0a8
rol eax, 0xd6
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xc2dc33e8
pushf
not eax
add eax, 0xcd39115b
xor eax, 0xf7eec663
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xc38d9a73
xor eax, 0xc829604f
rol eax, 0x1a
popf
jmp 0x180011a20
mov edi, 0xcdaaf4d9
pushf
not edi
add edi, 0x946b8521
xor edi, 0x97b90019
rol edi, 0x29
popf
pushf
not edi
add edi, 0x9591466d
xor edi, 0xae7089ca
rol edi, 0x66
popf
jmp 0x1800130f3
mov rbx, qword [rax + 8]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rbx
mov rax, qword [rbx]
jmp 0x18001282e
inc dword [rcx + 0x10]
mov qword [rcx + 8], rax
lea rcx, [rsp + 0x28]
call fcn.18002a719
test eax, eax
je 0x1800128a0
push rax
pushf
mov eax, 0xb985edc5
pushf
not eax
add eax, 0xfaaa2960
xor eax, 0xe9a6562c
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x9ecc5930
xor eax, 0xd48e3a24
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xcc5a39b5
xor eax, 0xf0dfb453
rol eax, 0x47
popf
pushf
not eax
add eax, 0xce1ef29c
xor eax, 0xcb7c335c
rol eax, 0xf4
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xf706747b
pushf
not eax
add eax, 0xfdc9ac5e
xor eax, 0xb959f65b
rol eax, 0x24
popf
pushf
not eax
add eax, 0xc40311e4
xor eax, 0xca57fe48
rol eax, 0xb5
popf
jmp 0x180011a20
mov rdx, qword [0x18000aa30]
test rdx, rdx
jne 0x180012912
push rax
pushf
mov eax, 0x12fe33a9
pushf
not eax
add eax, 0x8b9c1357
xor eax, 0xd9255d56
rol eax, 0x45
popf
pushf
not eax
add eax, 0xbcc13085
xor eax, 0xddb0d110
rol eax, 0xe6
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x499ab2a1
pushf
not eax
add eax, 0xbf48d2f0
xor eax, 0xc30ea4a6
rol eax, 0x68
popf
pushf
not eax
add eax, 0xecfea87b
xor eax, 0xe733ab25
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xc3095973
xor eax, 0xa9c4b824
rol eax, 0xec
popf
jmp 0x180011a20
mov rcx, qword [0x18000a9c8]
mov r8d, 0x671b2c59
pushf
not r8d
add r8d, 0xfbd9def4
xor r8d, 0x93209ce6
rol r8d, 0x8d
popf
pushf
not r8d
add r8d, 0x8f084f12
xor r8d, 0xc938ce26
rol r8d, 0x25
popf
mov dword [0x18000aa38], 0x20
jmp 0x1800129a2
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [0x18000aa30], rax
mov rdx, rax
test rax, rax
jne 0x180012a10
push rax
pushf
mov eax, 0x18491ed6
pushf
not eax
add eax, 0xa4ffe7a6
xor eax, 0x9b877cce
rol eax, 0x50
popf
pushf
not eax
add eax, 0xd59867e1
xor eax, 0xe7735f97
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xc005382d
xor eax, 0xb24d2dcc
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb80f44fe
xor eax, 0xca535b6c
rol eax, 0x4c
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xb6ff4e21
pushf
not eax
add eax, 0xc9cc3046
xor eax, 0x99c27db3
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xce21431a
xor eax, 0xeb5d9b44
rol eax, 0xde
popf
jmp 0x180011a20
mov edi, 0xd4dde756
pushf
not edi
add edi, 0xd8858192
xor edi, 0xb9f5a63a
rol edi, 0x12
popf
pushf
not edi
add edi, 0x9906493e
xor edi, 0xf00a4cad
rol edi, 0xc9
popf
pushf
not edi
add edi, 0xd5d243d2
xor edi, 0xebab93b0
rol edi, 0x7c
popf
test edi, edi
je 0x180012ac2
push rax
pushf
mov eax, 0x4d169ae2
pushf
not eax
add eax, 0xa7b68213
xor eax, 0x8e640060
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xbd186032
xor eax, 0x87d5665d
rol eax, 0xf1
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xe6ccfab2
pushf
not eax
add eax, 0xe5197a35
xor eax, 0xe4fc0b06
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xdcecb8a4
xor eax, 0xcecc354d
rol eax, 0xce
popf
jmp 0x180011a20
mov rcx, rbx
call fcn.18001100e
jmp 0x1800130f3
mov ecx, dword [0x18000aa3c]
mov eax, dword [0x18000aa38]
cmp ecx, eax
jb 0x180012bc4
push rax
pushf
mov eax, 0xeb73de69
pushf
not eax
add eax, 0xfe54133d
xor eax, 0xbcdc4876
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xae79b3a7
xor eax, 0x9a8d6158
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe882a601
xor eax, 0xfabd8d55
rol eax, 0x71
popf
pushf
not eax
add eax, 0xdfc4f079
xor eax, 0x81f043ab
rol eax, 0x38
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x2eb23def
pushf
not eax
add eax, 0xe8371144
xor eax, 0x98006172
rol eax, 0x15
popf
pushf
not eax
add eax, 0xedbdde87
xor eax, 0xa8f997f0
rol eax, 0x37
popf
jmp 0x180011a20
lea ecx, [rax + rax]
mov r8, rdx
imul r9, rcx, 0x38
mov rcx, qword [0x18000a9c8]
xor edx, edx
jmp 0x180012c0b
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rdx, rax
test rax, rax
je 0x180012c5f
push rax
pushf
mov eax, 0xe33ecfa3
pushf
not eax
add eax, 0xd9ec4ae3
xor eax, 0xef42686c
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x9ee5a955
xor eax, 0xdf4c3888
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe83c07db
xor eax, 0x9c839bcc
rol eax, 0x16
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0xaf5e0f34
pushf
not eax
add eax, 0xb4ccc1cd
xor eax, 0xdfa2010d
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xbeb8446e
xor eax, 0xdc46809e
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x9f791a9d
xor eax, 0xff8d6874
rol eax, 0xfe
popf
jmp 0x180011a20
mov eax, dword [0x18000aa38]
add eax, eax
mov qword [0x18000aa30], rdx
mov dword [0x18000aa38], eax
push rax
pushf
mov eax, 0xcf8f580a
pushf
not eax
add eax, 0x93de2705
xor eax, 0xbf6f0254
rol eax, 0x68
popf
pushf
not eax
add eax, 0xc738241a
xor eax, 0xf084133c
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x97cf1e2d
xor eax, 0xa164f8d2
rol eax, 0x20
popf
jmp 0x180011a20
mov ecx, dword [0x18000aa3c]
push rax
pushf
mov eax, 0x5bc01851
pushf
not eax
add eax, 0xa32b02cc
xor eax, 0xa8c5f49c
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x9ec038df
xor eax, 0xa3ce7070
rol eax, 0x97
popf
jmp 0x180011a20
mov eax, ecx
jmp 0x180012d3c
inc ecx
imul r8, rax, 0x38
mov dword [0x18000aa3c], ecx
push rdx
not rdx
sub r8, rdx
pop rdx
sub r8, 1
je 0x180012d89
push rax
pushf
mov eax, 0x8b86123f
pushf
not eax
add eax, 0xa54ecdcc
xor eax, 0x9a6001bf
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xaeb353f8
xor eax, 0xcdd7256b
rol eax, 0xb0
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x1f3dd400
pushf
not eax
add eax, 0x91e3a199
xor eax, 0xb5626a3e
rol eax, 0x13
popf
pushf
not eax
add eax, 0xe016a1f0
xor eax, 0x9832c1d9
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xa4875505
xor eax, 0xf79c0a55
rol eax, 0xbf
popf
jmp 0x180011a20
movzx ecx, byte [r8 + 0x20]
mov rax, qword [rsp + 0x28]
and cl, 0xf8
mov edx, dword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov qword [r8], rax
mov rax, qword [rsp + 0x40]
mov qword [r8 + 8], rax
movzx eax, dl
and al, 1
mov qword [r8 + 0x10], r9
or cl, al
mov eax, dword [rsp + 0x4c]
and eax, 0xf
mov byte [r8 + 0x20], cl
mov ecx, dword [r8 + 0x24]
and ecx, 0xfffffff0
or ecx, eax
mov rax, qword [rsp + 0x50]
mov qword [r8 + 0x28], rax
mov rax, qword [rsp + 0x58]
mov qword [r8 + 0x30], rax
mov dword [r8 + 0x24], ecx
test edx, edx
je 0x180012e5d
push rax
pushf
mov eax, 0xe735d2ba
pushf
not eax
add eax, 0x99eacff3
xor eax, 0xc670cb27
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xa2619ab7
xor eax, 0xb9308d2f
rol eax, 0x86
popf
jmp 0x180011a20
push rax
pushf
mov eax, 0x5aa5ef03
pushf
not eax
add eax, 0x8a8ca9fd
xor eax, 0x85f56f0f
rol eax, 0x46
popf
pushf
not eax
add eax, 0xa10569ed
xor eax, 0xda5b554a
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x90171ec7
xor eax, 0x8f50ca0d
rol eax, 0xea
popf
jmp 0x180011a20
mov eax, dword [r14 - 5]
mov dword [r8 + 0x18], eax
movzx eax, word [r14 - 1]
mov word [r8 + 0x1c], ax
movzx eax, byte [r14 + 1]
mov byte [r8 + 0x1e], al
mov qword [0x18000a9d8], r9
jmp 0x180012a87
mov eax, dword [r14]
mov dword [r8 + 0x18], eax
movzx eax, byte [r14 + 4]
mov byte [r8 + 0x1c], al
mov qword [0x18000a9d8], r9
jmp 0x180012a87
mov rcx, rbx
mov edi, 0xb558637f
pushf
not edi
add edi, 0xd2d0ac0f
xor edi, 0x89603f05
rol edi, 0x19
popf
pushf
not edi
add edi, 0xe1832afb
xor edi, 0xc003c47d
rol edi, 0x30
popf
pushf
not edi
add edi, 0xe6e6daee
xor edi, 0xa870ca94
rol edi, 0xf9
popf
call fcn.18001100e
jmp 0x1800130f3
mov edi, 0x6239ff4b
pushf
not edi
add edi, 0xe5946b89
xor edi, 0xae2786d9
rol edi, 0xd8
popf
pushf
not edi
add edi, 0xb7dc5ac5
xor edi, 0xd8f0db89
rol edi, 0x90
popf
pushf
not edi
add edi, 0xdbdfba58
xor edi, 0xef062c46
rol edi, 0x9e
popf
pushf
not edi
add edi, 0xa68106a7
xor edi, 0xd77e65f7
rol edi, 0x6b
popf
jmp 0x1800130f3
mov edi, 0x3c5e3aea
pushf
not edi
add edi, 0xb89436e6
xor edi, 0xf721ab7d
rol edi, 0x98
popf
pushf
not edi
add edi, 0x82b30dbf
xor edi, 0xbdacb140
rol edi, 0x71
popf
pushf
not edi
add edi, 0xe545a1e5
xor edi, 0x8ddadae9
rol edi, 0x84
popf
pushf
not edi
add edi, 0x9036f15e
xor edi, 0xfc7aaee0
rol edi, 0xca
popf
push rax
pushf
mov eax, 0x934d37cf
pushf
not eax
add eax, 0xf18a7a66
xor eax, 0xfeed773c
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xbfa43f05
xor eax, 0xa743fa95
rol eax, 0x85
popf
pushf
not eax
add eax, 0x9873fadb
xor eax, 0xf66aeaf1
rol eax, 0x13
popf
jmp 0x180011a20
xchg dword [0x18000a9c0], ebp
mov eax, edi
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.18001de15
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret