Function at 0x18001ec0d
Capabilities:
Encrypt data using speck
Resume thread

Disassembly:
push rax
pushf
mov eax, 0xfc6fd8b7
pushf
not eax
add eax, 0xf87fd450
xor eax, 0x806ccbef
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd14a5ce9
xor eax, 0xb61adb3b
rol eax, 0x70
popf
pushf
not eax
add eax, 0xbfb501c9
xor eax, 0xeab69e1d
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe911d96b
xor eax, 0xec3a3520
rol eax, 0x52
popf
cmp eax, 4
jne 0x18001ec70
popf
pop rax
jmp 0x18001f054
cmp eax, 0
jne 0x18001ec7f
popf
pop rax
jmp 0x18001ee32
cmp eax, 3
jne 0x18001ec8e
popf
pop rax
jmp 0x18001f01e
cmp eax, 1
jne 0x18001ec9d
popf
pop rax
jmp 0x18001ef55
cmp eax, 0xd
jne 0x18001ecac
popf
pop rax
jmp 0x18001f4ba
cmp eax, 0x1a
jne 0x18001ecbb
popf
pop rax
jmp 0x18001fb47
cmp eax, 0xe
jne 0x18001ecca
popf
pop rax
jmp 0x18001f555
cmp eax, 0xb
jne 0x18001ecd9
popf
pop rax
jmp 0x18001f378
cmp eax, 0x19
jne 0x18001ece8
popf
pop rax
jmp 0x18001faa6
cmp eax, 8
jne 0x18001ecf7
popf
pop rax
jmp 0x18001f1d4
cmp eax, 0x1d
jne 0x18001ed06
popf
pop rax
jmp 0x18001fcf3
cmp eax, 0x17
jne 0x18001ed15
popf
pop rax
jmp 0x18001f997
cmp eax, 0x1c
jne 0x18001ed24
popf
pop rax
jmp 0x18001fc88
cmp eax, 0x12
jne 0x18001ed33
popf
pop rax
jmp 0x18001f740
cmp eax, 0x18
jne 0x18001ed42
popf
pop rax
jmp 0x18001fa14
cmp eax, 0x11
jne 0x18001ed51
popf
pop rax
jmp 0x18001f6d3
cmp eax, 0x1b
jne 0x18001ed60
popf
pop rax
jmp 0x18001fbb1
cmp eax, 0x16
jne 0x18001ed6f
popf
pop rax
jmp 0x18001f94a
cmp eax, 0xa
jne 0x18001ed7e
popf
pop rax
jmp 0x18001f2c3
cmp eax, 0x14
jne 0x18001ed8d
popf
pop rax
jmp 0x18001f834
cmp eax, 0xf
jne 0x18001ed9c
popf
pop rax
jmp 0x18001f5c3
cmp eax, 0x13
jne 0x18001edab
popf
pop rax
jmp 0x18001f7e9
cmp eax, 0x15
jne 0x18001edba
popf
pop rax
jmp 0x18001f8a2
cmp eax, 2
jne 0x18001edc9
popf
pop rax
jmp 0x18001efe7
cmp eax, 0x1e
jne 0x18001edd8
popf
pop rax
jmp 0x18001fd8a
cmp eax, 0xc
jne 0x18001ede7
popf
pop rax
jmp 0x18001f409
cmp eax, 7
jne 0x18001edf6
popf
pop rax
jmp 0x18001f17e
cmp eax, 5
jne 0x18001ee05
popf
pop rax
jmp 0x18001f0e2
cmp eax, 9
jne 0x18001ee14
popf
pop rax
jmp 0x18001f240
cmp eax, 0x10
jne 0x18001ee23
popf
pop rax
jmp 0x18001f631
cmp eax, 6
jne 0x18001ee32
popf
pop rax
jmp 0x18001f16d
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x30
xor r15d, r15d
mov rdi, rcx
mov r14d, r15d
mov ebx, r15d
xor eax, eax
mov esi, 0x13a65452
pushf
not esi
add esi, 0xb62fcc1f
xor esi, 0xb461d268
rol esi, 0xf4
popf
pushf
not esi
add esi, 0xa10dcc9b
xor esi, 0x91b4e643
rol esi, 0x2e
popf
pushf
not esi
add esi, 0x94cf1255
xor esi, 0x9644e9d2
rol esi, 0x44
popf
pushf
not esi
add esi, 0x978e1013
xor esi, 0x879eb583
rol esi, 0x3a
popf
lock cmpxchg dword [0x18000a9c0], esi
je 0x18001ef0f
push rax
pushf
mov eax, 0x7e8a6596
pushf
not eax
add eax, 0xe692a7ed
xor eax, 0xfee742ed
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xa8707975
xor eax, 0xa984d1d9
rol eax, 0xff
popf
pushf
not eax
add eax, 0xaf0afdfe
xor eax, 0x979a8747
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xe751a6b6
xor eax, 0x99b9fcdb
rol eax, 7
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x30833409
pushf
not eax
add eax, 0xc89e6a79
xor eax, 0xe1f09441
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa4e79e87
xor eax, 0xdff16d9a
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xb3c34167
xor eax, 0xc7ba5498
rol eax, 0x8d
popf
jmp 0x18001ec61
cmp rbx, 0x20
jae 0x18001ef8e
push rax
pushf
mov eax, 0xfea0f80e
pushf
not eax
add eax, 0x847ded63
xor eax, 0xb38a307d
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xfb7147ad
xor eax, 0x8f1fb447
rol eax, 0xd1
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xde6772f7
pushf
not eax
add eax, 0xdfb28858
xor eax, 0xe4537ecc
rol eax, 4
popf
pushf
not eax
add eax, 0xda8c3793
xor eax, 0xf29cbc91
rol eax, 0x75
popf
pushf
not eax
add eax, 0x80eb078c
xor eax, 0xa8d4d978
rol eax, 0x19
popf
pushf
not eax
add eax, 0xe6532d34
xor eax, 0x8e934e99
rol eax, 0x2f
popf
jmp 0x18001ec61
xor ecx, ecx
jmp 0x18001f054
mov ecx, esi
push rax
pushf
mov eax, 0x52330ef3
pushf
not eax
add eax, 0xa4b3f118
xor eax, 0xf6bcfd9f
rol eax, 0x31
popf
pushf
not eax
add eax, 0xe2357c22
xor eax, 0xa2fe33a9
rol eax, 0xac
popf
jmp 0x18001ec61
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x18000a9c0], esi
jne 0x18001f0af
push rax
pushf
mov eax, 0xd2026e7
pushf
not eax
add eax, 0x9053f5b5
xor eax, 0x8e42b2bd
rol eax, 0x47
popf
pushf
not eax
add eax, 0xba45421b
xor eax, 0xf6a21399
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xd1b98ad9
xor eax, 0xb5cb408d
rol eax, 0xdd
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xf6b7c130
pushf
not eax
add eax, 0xae35495c
xor eax, 0xedad3dcb
rol eax, 0xd
popf
pushf
not eax
add eax, 0xf879a9c9
xor eax, 0xe1bd9f6e
rol eax, 0x98
popf
jmp 0x18001ec61
cmp qword [0x18000a9c8], r14
mov qword [rsp + 0x58], r13
je 0x18001f13a
push rax
pushf
mov eax, 0x3a36f805
pushf
not eax
add eax, 0xdc3f46e0
xor eax, 0xdd1127cc
rol eax, 0x76
popf
pushf
not eax
add eax, 0xcd0830ea
xor eax, 0xff4dc70c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd8833cd9
xor eax, 0x81cd2ef8
rol eax, 0x63
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xcc519819
pushf
not eax
add eax, 0xf922c7fc
xor eax, 0xf0a19b2b
rol eax, 4
popf
pushf
not eax
add eax, 0x993c9721
xor eax, 0xd231a283
rol eax, 0xf5
popf
jmp 0x18001ec61
mov ecx, dword [0x18000aa3c]
mov ebx, r15d
test ecx, ecx
je 0x18001f2c3
mov rdx, qword [0x18000aa30]
mov rax, rdx
nop word [rax + rax]
push rax
pushf
mov eax, 0x38d0bad2
pushf
not eax
add eax, 0xbd06d150
xor eax, 0x9416aac7
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x93d01f69
xor eax, 0xee09f1af
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9cf771ed
xor eax, 0xae87dfed
rol eax, 0x91
popf
jmp 0x18001ec61
cmp rdi, qword [rax]
je 0x18001f20c
push rax
pushf
mov eax, 0xa6ca0290
pushf
not eax
add eax, 0x95a13710
xor eax, 0xffbb51c9
rol eax, 0x33
popf
pushf
not eax
add eax, 0xf33283df
xor eax, 0xc581f869
rol eax, 0xdf
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x9d4e95a2
pushf
not eax
add eax, 0xf47a81dc
xor eax, 0xc1bc9941
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xec73fc0c
xor eax, 0xc6ce1ea6
rol eax, 0xc0
popf
jmp 0x18001ec61
inc ebx
add rax, 0x38
cmp ebx, ecx
jb 0x18001f27d
push rax
pushf
mov eax, 0x2dc90e57
pushf
not eax
add eax, 0xc6f06faf
xor eax, 0x9847e743
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x840fd8cc
xor eax, 0xe404de9b
rol eax, 0x98
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x1a155a52
pushf
not eax
add eax, 0xd5a54586
xor eax, 0x942b14ec
rol eax, 0x48
popf
pushf
not eax
add eax, 0xb19c7980
xor eax, 0xf6a5c26f
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb0ac641d
xor eax, 0xa8ad14f1
rol eax, 0x38
popf
jmp 0x18001ec61
mov r14d, 0xac54fae7
pushf
not r14d
add r14d, 0xa36ec3f9
xor r14d, 0xffb8ba2d
rol r14d, 0xbc
popf
pushf
not r14d
add r14d, 0xe746ebc9
xor r14d, 0xc28e8e60
rol r14d, 0x44
popf
pushf
not r14d
add r14d, 0xea736e4a
xor r14d, 0xcc4954d6
rol r14d, 0x68
popf
pushf
not r14d
add r14d, 0xa933a5b9
xor r14d, 0xa449784d
rol r14d, 0xb6
popf
jmp 0x18001fd8a
cmp ebx, 0xffffffff
je 0x18001f3b0
push rax
pushf
mov eax, 0x337be10e
pushf
not eax
add eax, 0xfed25542
xor eax, 0xa8543d27
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xc7a406fb
xor eax, 0xa312c0cc
rol eax, 0x41
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x5a1c4047
pushf
not eax
add eax, 0x99002e60
xor eax, 0xe9f47855
rol eax, 0x72
popf
pushf
not eax
add eax, 0xcc4ce6c6
xor eax, 0xeae0b3eb
rol eax, 0x60
popf
pushf
not eax
add eax, 0xbbddd7a8
xor eax, 0xe2366ebc
rol eax, 0x90
popf
pushf
not eax
add eax, 0xab46f0ec
xor eax, 0xba9e6d0d
rol eax, 0x53
popf
jmp 0x18001ec61
mov eax, ebx
imul r13, rax, 0x38
test byte [rdx + r13 + 0x20], 2
je 0x18001f461
push rax
pushf
mov eax, 0x8b70222d
pushf
not eax
add eax, 0xbd27992c
xor eax, 0xbf579ace
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xd78500d0
xor eax, 0xbfda0875
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xc5bf6926
xor eax, 0xae4da92c
rol eax, 0xa4
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x51bf5312
pushf
not eax
add eax, 0x8b7fa311
xor eax, 0xbf2c2ed5
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xf8b10203
xor eax, 0xb7ac31b9
rol eax, 0x11
popf
pushf
not eax
add eax, 0xf4dfa76e
xor eax, 0xef6da53a
rol eax, 0x55
popf
pushf
not eax
add eax, 0xb2c6255d
xor eax, 0xaa062572
rol eax, 0xb2
popf
jmp 0x18001ec61
xor r8d, r8d
lea rcx, [rsp + 0x20]
mov edx, ebx
call fcn.18002d15c
xor edx, edx
mov ecx, ebx
call fcn.1800282fc
mov r14d, eax
cmp qword [rsp + 0x20], r15
je 0x18001f50f
push rax
pushf
mov eax, 0x94608fc7
pushf
not eax
add eax, 0xf571b85a
xor eax, 0xe950fff6
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd706b285
xor eax, 0x8cf63cab
rol eax, 0xe6
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xc648e64b
pushf
not eax
add eax, 0xe0f5c6f4
xor eax, 0x8e436cda
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xada3a221
xor eax, 0xcf5dd63f
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x94e73977
xor eax, 0xf5ca4fd3
rol eax, 0xa4
popf
jmp 0x18001ec61
mov ecx, dword [rsp + 0x2c]
test ecx, ecx
je 0x18001f590
push rax
pushf
mov eax, 0x709d3a25
pushf
not eax
add eax, 0xd15a1184
xor eax, 0xa254dc7b
rol eax, 0xce
popf
pushf
not eax
add eax, 0x85d9af0c
xor eax, 0x8310ce51
rol eax, 0x94
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xdc8ddada
pushf
not eax
add eax, 0xb3b6950f
xor eax, 0x8c9e1280
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd44293ef
xor eax, 0xff2c087d
rol eax, 2
popf
jmp 0x18001ec61
mov rdi, qword [rsp + 0x20]
mov qword [rsp + 0x50], rbp
mov ebp, ecx
nop word [rax + rax]
push rax
pushf
mov eax, 0x959fd64c
pushf
not eax
add eax, 0xbc725d6b
xor eax, 0xf8e3f3b8
rol eax, 0xad
popf
pushf
not eax
add eax, 0xd19fe82f
xor eax, 0xaabc763a
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xac9c60b5
xor eax, 0xe5d61458
rol eax, 0x10
popf
pushf
not eax
add eax, 0xe119c228
xor eax, 0xd44392c2
rol eax, 0xfa
popf
jmp 0x18001ec61
mov r8d, dword [rdi]
xor edx, edx
lea ecx, [rdx + 0x5a]
jmp 0x18001f63a
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x18001f68e
push rax
pushf
mov eax, 0x6d974307
pushf
not eax
add eax, 0x8253cbe9
xor eax, 0xe058c698
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xaec6205a
xor eax, 0xee02085e
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x86311f76
xor eax, 0x8f03ee14
rol eax, 0x42
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x713c0b4f
pushf
not eax
add eax, 0xb368ed65
xor eax, 0xe75fa63c
rol eax, 1
popf
pushf
not eax
add eax, 0xacd9cee3
xor eax, 0xcc75998d
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe39ecf99
xor eax, 0xef096362
rol eax, 0xaa
popf
jmp 0x18001ec61
mov rcx, rax
jmp 0x18001f6d7
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x18001f6e1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x56d0ba
pushf
not eax
add eax, 0xb7381871
xor eax, 0xd72e20ed
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xad594ed6
xor eax, 0x822d76d7
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xb71187c7
xor eax, 0xccb4fe38
rol eax, 0x18
popf
pushf
not eax
add eax, 0xf3ee43e4
xor eax, 0xa0b7ce27
rol eax, 0x67
popf
jmp 0x18001ec61
add rdi, 4
sub rbp, 1
jne 0x18001f7a3
push rax
pushf
mov eax, 0x852ef220
pushf
not eax
add eax, 0xe168565e
xor eax, 0x8af56748
rol eax, 0x27
popf
pushf
not eax
add eax, 0xaf4283c7
xor eax, 0xbc751146
rol eax, 0x74
popf
pushf
not eax
add eax, 0xf7572c4f
xor eax, 0xf8374b67
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xacb27325
xor eax, 0x85852123
rol eax, 0xf9
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xc2e46392
pushf
not eax
add eax, 0xd0ca2004
xor eax, 0x9b21b393
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x91fd8578
xor eax, 0xd6f221f0
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x92c2d96b
xor eax, 0xaa503c51
rol eax, 0xd1
popf
jmp 0x18001ec61
mov rbp, qword [rsp + 0x50]
push rax
pushf
mov eax, 0xf607145a
pushf
not eax
add eax, 0xc68a3fbc
xor eax, 0x9081d5b7
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x8b092511
xor eax, 0xb26ddbfe
rol eax, 0xca
popf
pushf
not eax
add eax, 0x83df13c1
xor eax, 0xef63d9fb
rol eax, 0xd7
popf
jmp 0x18001ec61
mov r8, qword [rsp + 0x20]
xor edx, edx
mov rcx, qword [0x18000a9c8]
jmp 0x18001f843
call qword [sym.imp.KERNEL32.dll_HeapFree]
push rax
pushf
mov eax, 0xdc470bf0
pushf
not eax
add eax, 0xb456e421
xor eax, 0xc7eba6bd
rol eax, 0x12
popf
pushf
not eax
add eax, 0xbe25a502
xor eax, 0xc73e101b
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xfe646bf3
xor eax, 0xb77bc984
rol eax, 0xb
popf
pushf
not eax
add eax, 0xed719794
xor eax, 0xd69f55e0
rol eax, 0xc0
popf
jmp 0x18001ec61
test r14d, r14d
jne 0x18001f8f1
push rax
pushf
mov eax, 0xdfaaa043
pushf
not eax
add eax, 0xd8fd3751
xor eax, 0xd9892c4c
rol eax, 0x41
popf
pushf
not eax
add eax, 0xc11ca94d
xor eax, 0xf160d781
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xc5dbf3d2
xor eax, 0x96b0f761
rol eax, 0x74
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xc6c9fdc6
pushf
not eax
add eax, 0xe8c0346d
xor eax, 0xb2e52529
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x82a864dd
xor eax, 0xae3d4710
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xbcbe9bcd
xor eax, 0xf2d0889e
rol eax, 0x22
popf
pushf
not eax
add eax, 0xdb6181e6
xor eax, 0x8aaf1285
rol eax, 0xec
popf
jmp 0x18001ec61
mov rdx, qword [0x18000aa30]
push rax
pushf
mov eax, 0x6dd68eb
pushf
not eax
add eax, 0xcb905f03
xor eax, 0xd4e6afa6
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xdad602e2
xor eax, 0x8af9c9cb
rol eax, 0x97
popf
pushf
not eax
add eax, 0x9a471f83
xor eax, 0x969fd74c
rol eax, 0x41
popf
jmp 0x18001ec61
mov rcx, qword [rdx + r13 + 0x10]
call fcn.18001100e
mov edx, dword [0x18000aa3c]
jmp 0x18001f9a8
dec edx
cmp ebx, edx
jae 0x18001f9e1
push rax
pushf
mov eax, 0xdc566ace
pushf
not eax
add eax, 0xf52cd7b3
xor eax, 0xc32950e2
rol eax, 0xe
popf
pushf
not eax
add eax, 0xa982aec9
xor eax, 0xda80f4c9
rol eax, 0x3b
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x5ecc5482
pushf
not eax
add eax, 0x87ea2a69
xor eax, 0xfa9f3d6b
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x98bbb314
xor eax, 0xbb85c48b
rol eax, 0x32
popf
jmp 0x18001ec61
mov eax, edx
imul rcx, rax, 0x38
mov rax, qword [0x18000aa30]
movups xmm0, xmmword [rcx + rax]
movups xmmword [rax + r13], xmm0
movups xmm1, xmmword [rcx + rax + 0x10]
movups xmmword [rax + r13 + 0x10], xmm1
movups xmm0, xmmword [rcx + rax + 0x20]
movups xmmword [rax + r13 + 0x20], xmm0
movsd xmm1, qword [rcx + rax + 0x30]
movsd qword [rax + r13 + 0x30], xmm1
push rax
pushf
mov eax, 0xe55e6e1c
pushf
not eax
add eax, 0xbb15c998
xor eax, 0xe613bc28
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x945cc0ad
xor eax, 0x97ad761e
rol eax, 0xc
popf
pushf
not eax
add eax, 0xca21b928
xor eax, 0xc215f67d
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x9c69a6af
xor eax, 0xc748620b
rol eax, 0x89
popf
jmp 0x18001ec61
mov ecx, dword [0x18000aa38]
mov eax, ecx
mov dword [0x18000aa3c], edx
shr eax, 1
cmp eax, 0x20
jb 0x18001fb14
push rax
pushf
mov eax, 0x11a41147
pushf
not eax
add eax, 0xd333239c
xor eax, 0xd37ce03a
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x999a4126
xor eax, 0xcc07050b
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x8520916c
xor eax, 0x8c79df44
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xff1e5918
xor eax, 0xd0dfec99
rol eax, 0xed
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0xa4bc9ece
pushf
not eax
add eax, 0x9d6eaada
xor eax, 0xf32d0f38
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xd8b09f14
xor eax, 0xcd2d9be0
rol eax, 0xcf
popf
jmp 0x18001ec61
cmp eax, edx
jb 0x18001fb7e
push rax
pushf
mov eax, 0xafe9414
pushf
not eax
add eax, 0xb326a7ee
xor eax, 0xed387fba
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xcf6d5f53
xor eax, 0xc1e146b0
rol eax, 0x54
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x24ffcb9
pushf
not eax
add eax, 0xcfcbea4f
xor eax, 0xdbf861a0
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe570c8bf
xor eax, 0xcae586f7
rol eax, 0x41
popf
jmp 0x18001ec61
mov r8, qword [0x18000aa30]
mov eax, ecx
mov rcx, qword [0x18000a9c8]
xor edx, edx
shr rax, 1
imul r9, rax, 0x38
jmp 0x18001fbcb
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
test rax, rax
je 0x18001fc2f
push rax
pushf
mov eax, 0xd3bcfb67
pushf
not eax
add eax, 0xd1be41bf
xor eax, 0xbe129dcd
rol eax, 0x59
popf
pushf
not eax
add eax, 0xfc35fc45
xor eax, 0xb3c21665
rol eax, 0x98
popf
pushf
not eax
add eax, 0xcb5755b1
xor eax, 0x89a9e48b
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xbf78314e
xor eax, 0x941dd7f2
rol eax, 0xde
popf
jmp 0x18001ec61
push rax
pushf
mov eax, 0x4aa040c8
pushf
not eax
add eax, 0xacf7f15e
xor eax, 0x9dc623ad
rol eax, 0x82
popf
pushf
not eax
add eax, 0x9c34c305
xor eax, 0xe0a9f4f8
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x893eaa49
xor eax, 0xb9b0cc04
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xa85bf7a9
xor eax, 0xd3747713
rol eax, 0xab
popf
jmp 0x18001ec61
shr dword [0x18000aa38], 1
mov qword [0x18000aa30], rax
jmp 0x18001fd8a
mov r14d, 0xf637f3
pushf
not r14d
add r14d, 0xc5c4ecee
xor r14d, 0x8506e080
rol r14d, 0x61
popf
pushf
not r14d
add r14d, 0x84edc36d
xor r14d, 0xeeb98b02
rol r14d, 0xe3
popf
pushf
not r14d
add r14d, 0xe6703396
xor r14d, 0xe74ba7be
rol r14d, 0x42
popf
push rax
pushf
mov eax, 0xe381862e
pushf
not eax
add eax, 0xd6f67dc7
xor eax, 0xcd5e001f
rol eax, 0x79
popf
pushf
not eax
add eax, 0xb4c3a5d1
xor eax, 0x8e415dfc
rol eax, 0x17
popf
pushf
not eax
add eax, 0xb4498b1f
xor eax, 0xaab58815
rol eax, 0x49
popf
jmp 0x18001ec61
xchg dword [0x18000a9c0], r15d
mov r13, qword [rsp + 0x58]
mov eax, r14d
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret