Function at 0x140008694
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xd8
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x70], rcx
mov rax, qword [0x1400160c0]
xor rax, rbp
mov qword [rbp + 0x50], rax
mov eax, dword [0x1400161ec]
mov ecx, dword [0x1400161e8]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x4b]
cmp ecx, 0xa
setl byte [rbp + 0x4a]
mov r12, qword [sym.imp.ntoskrnl.exe_ZwQuerySystemInformation]
mov eax, 0x4fb4b0ff
cmp eax, 0xf1ce7f1a
jg 0x140008766
cmp eax, 0xb4e599d2
jg 0x1400087c9
cmp eax, 0x9b4d13fe
jle 0x140008881
cmp eax, 0xa7bc8cb5
jle 0x1400089d3
cmp eax, 0xadb96899
jle 0x140008c82
cmp eax, 0xaf29f93c
jg 0x140009088
cmp eax, 0xadb9689a
je 0x140009154
cmp eax, 0xaea1e65b
jne 0x1400086ed
mov rax, qword [rbp + 0x28]
mov rax, qword [rax]
mov qword [rbp - 0x80], rax
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe9e560ce
mov ecx, 0xcc130398
jmp 0x14000982a
cmp eax, 0x380d441c
jg 0x140008821
cmp eax, 0x159a1b66
jle 0x1400088da
cmp eax, 0x2846b4f0
jle 0x140008a1d
cmp eax, 0x2d05faf3
jle 0x140008cc9
cmp eax, 0x328582a8
jg 0x1400090bc
cmp eax, 0x2d05faf4
je 0x140009178
cmp eax, 0x2dcfe762
jne 0x1400086ed
cmp byte [rbp + 0x43], 0
mov eax, 0x7c04ad9d
mov ecx, 0x676318a7
cmovne eax, ecx
jmp 0x1400086ed
cmp eax, 0xd4093a2b
jle 0x14000892b
cmp eax, 0xe5d221fa
jle 0x140008a7d
cmp eax, 0xe9e560cd
jle 0x140008cf8
cmp eax, 0xf0052598
jg 0x1400090e8
cmp eax, 0xe9e560ce
je 0x14000918e
cmp eax, 0xefc369b4
jne 0x1400086ed
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp]
mov rax, qword [rbp - 0x48]
mov eax, 0xa8664f88
jmp 0x1400086ed
cmp eax, 0x510f59af
jle 0x14000896f
cmp eax, 0x75b3487c
jg 0x140008ac7
cmp eax, 0x676318a6
jg 0x140008d34
cmp eax, 0x64b8e068
jle 0x140009114
cmp eax, 0x64b8e069
je 0x14000919c
cmp eax, 0x66e0a51a
jne 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88aa6941
mov ecx, 0xb4e599d3
jmp 0x14000982a
cmp eax, 0x8d899828
jg 0x140008b09
cmp eax, 0x8852e819
jg 0x140008d77
cmp eax, 0x80937c99
je 0x1400091a6
cmp eax, 0x831cffb6
je 0x1400091b6
cmp eax, 0x837d7dae
jne 0x1400086ed
mov dword [rbp - 0x58], r15d
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca09f239
mov ecx, 0x4635d0a8
jmp 0x14000982a
cmp eax, 0x1208503
jg 0x140008b6d
cmp eax, 0xf92f9764
jg 0x140008dbd
cmp eax, 0xf1ce7f1b
je 0x1400091d4
cmp eax, 0xf5c9c031
je 0x1400091f2
cmp eax, 0xf8b95738
jne 0x1400086ed
mov ecx, dword [rbp + 0x20]
sub rsp, 0x20
call fcn.140002c0a
add rsp, 0x20
mov eax, 0x4e088d8f
jmp 0x1400086ed
cmp eax, 0xc1b84a4f
jg 0x140008bdd
cmp eax, 0xbbe15378
jg 0x140008deb
cmp eax, 0xb4e599d3
je 0x140009210
cmp eax, 0xb4f9d165
je 0x14000921a
cmp eax, 0xb6622ac8
jne 0x1400086ed
mov eax, 0x8a15ca48
mov esi, dword [rbp - 0x50]
jmp 0x1400086ed
cmp eax, 0x4a40dae4
jg 0x140008c13
cmp eax, 0x4635d0a7
jg 0x140008e22
cmp eax, 0x380d441d
je 0x140009224
cmp eax, 0x39dd541e
je 0x140009242
cmp eax, 0x3c07a3d9
jne 0x1400086ed
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp + 0x28]
cmp rcx, rax
setne byte [rbp + 0x42]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6de6439c
mov ecx, 0x2d05faf4
jmp 0x14000982a
cmp eax, 0x9e1896d4
jg 0x140008e51
cmp eax, 0x9b4d13ff
je 0x14000924c
cmp eax, 0x9bb9b755
je 0x14000927d
cmp eax, 0x9c60fabb
jne 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xefc369b4
mov ecx, 0xa8664f88
jmp 0x14000982a
cmp eax, 0x17b071b0
jg 0x140008ebb
cmp eax, 0x159a1b67
je 0x1400092ac
cmp eax, 0x15f7febb
je 0x1400092ce
cmp eax, 0x161b9fb2
jne 0x1400086ed
mov rax, qword [rbp - 0x10]
mov eax, dword [rax + 0x18]
add rax, qword [rbp - 0x20]
mov rcx, qword [rbp + 0x18]
cmp rcx, rax
setb byte [rbp + 0x43]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7bc8cb6
mov ecx, 0x2dcfe762
jmp 0x14000982a
cmp eax, 0xd8a10f9e
jg 0x140008ee9
cmp eax, 0xd4093a2c
je 0x1400092e4
cmp eax, 0xd443477c
je 0x140009305
cmp eax, 0xd86ce74e
jne 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcd2c53bf
mov ecx, 0xa61e9e7c
jmp 0x14000982a
cmp eax, 0x7b453f2b
jg 0x140008f76
cmp eax, 0x75b3487d
je 0x140009330
cmp eax, 0x79c23748
je 0x140009346
cmp eax, 0x7aa912aa
jne 0x1400086ed
cmp byte [rbp + 0x3e], 0
mov eax, 0xaf29f93d
mov ecx, 0x4de2fd91
cmovne eax, ecx
jmp 0x1400086ed
cmp eax, 0x94cc50c2
jg 0x140008fb5
cmp eax, 0x8d899829
je 0x140009362
cmp eax, 0x8f2351f8
je 0x14000936c
cmp eax, 0x92569fbe
jne 0x1400086ed
mov rax, qword [0x1400160d0]
mov rcx, qword [rbp - 0x38]
mov qword [rax + 8], rcx
mov rcx, qword [rbp - 0x40]
mov rcx, qword [rcx]
mov qword [rax + 0x28], rcx
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xadb9689a
mov ecx, 0x80937c99
jmp 0x14000982a
cmp eax, 0x6a1dfff
jg 0x140008fe4
cmp eax, 0x1208504
je 0x14000938a
cmp eax, 0x571c1e9
je 0x140009394
cmp eax, 0x62646fe
jne 0x1400086ed
mov rax, qword [rbp + 0x28]
add rax, 8
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov rax, qword [rax]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp]
mov rcx, qword [rbp - 0x48]
cmp rcx, rax
setae byte [rbp + 0x40]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8a10f9f
mov ecx, 0x9b015514
jmp 0x14000982a
cmp eax, 0xcc130397
jg 0x14000900f
cmp eax, 0xc1b84a50
je 0x1400093b2
cmp eax, 0xc3f2a21a
je 0x1400093fa
cmp eax, 0xca09f239
jne 0x1400086ed
mov eax, 0x4635d0a8
jmp 0x1400086ed
cmp eax, 0x4fb4b0fe
jg 0x14000904e
cmp eax, 0x4a40dae5
je 0x140009418
cmp eax, 0x4de2fd91
je 0x140009436
cmp eax, 0x4e088d8f
jne 0x1400086ed
mov ecx, dword [rbp + 0x20]
sub rsp, 0x20
call fcn.140002c0a
add rsp, 0x20
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
setne byte [rbp + 0x47]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf8b95738
mov ecx, 0xe7d72a8e
jmp 0x14000982a
cmp eax, 0xa7bc8cb6
je 0x140009454
cmp eax, 0xa8664f88
je 0x14000946a
cmp eax, 0xa96f3bc4
jne 0x1400086ed
cmp dword [rbp - 8], 0
sete byte [rbp + 0x3e]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfc361d13
mov ecx, 0x7aa912aa
jmp 0x14000982a
cmp eax, 0x2846b4f1
je 0x14000949e
cmp eax, 0x2a098985
je 0x1400094bc
cmp eax, 0x2b74a87a
jne 0x1400086ed
mov eax, 0x837d7dae
mov r15d, dword [rbp - 0x54]
jmp 0x1400086ed
cmp eax, 0xe5d221fb
je 0x14000950f
cmp eax, 0xe7d72a8e
je 0x140009531
cmp eax, 0xe9a886d1
jne 0x1400086ed
mov rcx, qword [rbp + 0x10]
sub rsp, 0x20
call fcn.140002e47
add rsp, 0x20
mov eax, 0x9bb9b755
jmp 0x1400086ed
cmp eax, 0x676318a7
je 0x14000954a
cmp eax, 0x6de6439c
je 0x140009568
cmp eax, 0x6f81e591
jne 0x1400086ed
mov dword [rbp - 8], r13d
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfc361d13
mov ecx, 0xa96f3bc4
jmp 0x14000982a
cmp eax, 0x8852e81a
je 0x14000957a
cmp eax, 0x88aa6941
je 0x14000958f
cmp eax, 0x8a15ca48
jne 0x1400086ed
mov dword [rbp - 0x54], esi
mov rax, qword [rbp - 0x60]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8d899829
mov ecx, 0xf9bbf3d0
jmp 0x14000982a
cmp eax, 0xf92f9765
je 0x140009599
cmp eax, 0xf9bbf3d0
je 0x1400095c2
cmp eax, 0xfc361d13
jne 0x1400086ed
mov eax, dword [rbp - 8]
mov eax, 0xa96f3bc4
jmp 0x1400086ed
cmp eax, 0xbbe15379
je 0x1400095e0
cmp eax, 0xbd468f57
je 0x1400095fe
cmp eax, 0xbd61ffec
jne 0x1400086ed
cmp byte [rbp + 0x46], 0
mov eax, 0x571c1e9
mov ecx, 0xc3f2a21a
cmovne eax, ecx
jmp 0x1400086ed
cmp eax, 0x4635d0a8
je 0x14000960b
cmp eax, 0x47146542
je 0x140009629
cmp eax, 0x4967bf73
jne 0x1400086ed
mov eax, 0x159a1b67
mov r14d, dword [rbp - 0x4c]
jmp 0x1400086ed
cmp eax, 0x9e1896d5
je 0x140009642
cmp eax, 0x9f944a35
je 0x140009660
cmp eax, 0xa61e9e7c
jne 0x1400086ed
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x30]
mov rax, qword [rax + 0x30]
mov qword [rbp], rax
mov rax, qword [rbp - 0x38]
cmp rax, qword [rbp]
sete byte [rbp + 0x41]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcd2c53bf
mov ecx, 0x75b3487d
jmp 0x14000982a
cmp eax, 0x17b071b1
je 0x14000966d
cmp eax, 0x1f2c6196
je 0x14000968b
cmp eax, 0x26245b16
jne 0x1400086ed
mov eax, 0x6f81e591
xor r13d, r13d
jmp 0x1400086ed
cmp eax, 0xd8a10f9f
je 0x14000969c
cmp eax, 0xda6940a9
je 0x1400096ae
cmp eax, 0xe2a55883
jne 0x1400086ed
mov rax, qword [rbp + 0x30]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp + 0x30]
mov dword [rax], 0
mov r9, qword [rbp + 0x30]
sub rsp, 0x20
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
call r12
add rsp, 0x20
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
sets al
mov rcx, qword [rbp + 0x30]
mov ecx, dword [rcx]
mov dword [rbp + 0x20], ecx
cmp dword [rbp + 0x20], 0
setne cl
and cl, al
mov byte [rbp + 0x48], cl
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x60c132f8
mov ecx, 0x47146542
jmp 0x14000982a
cmp eax, 0x7b453f2c
je 0x1400096cc
cmp eax, 0x7b9ea867
je 0x1400096da
cmp eax, 0x7c04ad9d
jne 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x50c651a6
mov ecx, 0x328582a9
jmp 0x14000982a
cmp eax, 0x94cc50c3
je 0x1400096e4
cmp eax, 0x9b015514
je 0x140009702
cmp eax, 0x9b45c34d
jne 0x1400086ed
mov rax, qword [rbp + 8]
mov eax, 0x6a1e000
jmp 0x1400086ed
cmp eax, 0x6a1e000
je 0x140009718
cmp eax, 0xe7a3845
je 0x140009742
cmp eax, 0x100f786c
jne 0x1400086ed
mov eax, 0xaf29f93d
jmp 0x1400086ed
cmp eax, 0xcc130398
je 0x140009760
cmp eax, 0xcd2c53bf
je 0x14000976e
cmp eax, 0xcea492bc
jne 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf0052599
mov ecx, 0x380d441d
jmp 0x14000982a
cmp eax, 0x4fb4b0ff
je 0x140009780
cmp eax, 0x505b9ae5
je 0x14000979e
cmp eax, 0x50c651a6
jne 0x1400086ed
mov eax, dword [rbp + 0x4c]
mov eax, dword [rbp + 0x4c]
mov eax, dword [rbp + 0x4c]
mov eax, dword [rbp + 0x4c]
mov eax, dword [rbp + 0x4c]
mov eax, 0x328582a9
jmp 0x1400086ed
cmp eax, 0xaf29f93d
je 0x1400097ee
cmp eax, 0xb132714b
jne 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xadb9689a
mov ecx, 0x92569fbe
jmp 0x14000982a
cmp eax, 0x328582a9
je 0x140009809
cmp eax, 0x35e7db00
jne 0x1400086ed
cmp byte [rbp + 0x45], 0
mov eax, 0x4a40dae5
mov ecx, 0x831cffb6
cmovne eax, ecx
jmp 0x1400086ed
cmp eax, 0xf0052599
je 0x14000983c
cmp eax, 0xf0b1bafd
jne 0x1400086ed
cmp byte [rbp + 0x3f], 0
mov eax, 0xcea492bc
mov ecx, 0xb132714b
cmovne eax, ecx
jmp 0x1400086ed
cmp eax, 0x60c132f8
jne 0x140009846
mov rax, qword [rbp + 0x30]
mov rax, qword [rbp + 0x30]
mov dword [rax], 0
mov r9, qword [rbp + 0x30]
sub rsp, 0x20
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
call r12
add rsp, 0x20
mov rax, qword [rbp + 0x30]
mov eax, 0xe2a55883
jmp 0x1400086ed
mov rax, qword [0x1400160d0]
mov rcx, qword [rbp - 0x38]
mov qword [rax + 8], rcx
mov rcx, qword [rbp - 0x40]
mov rcx, qword [rcx]
mov qword [rax + 0x28], rcx
mov eax, 0x92569fbe
jmp 0x1400086ed
cmp byte [rbp + 0x42], 0
mov eax, 0x8f2351f8
mov ecx, 0xd86ce74e
cmovne eax, ecx
jmp 0x1400086ed
mov rax, qword [rbp + 0x28]
mov eax, 0xaea1e65b
jmp 0x1400086ed
mov eax, 0x7c04ad9d
jmp 0x1400086ed
mov eax, 0x6f81e591
mov r13d, 5
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8852e81a
mov ecx, 0x2a098985
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf92f9765
mov ecx, 0xc1b84a50
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7bc8cb6
mov ecx, 0x161b9fb2
jmp 0x14000982a
mov eax, 0x571c1e9
jmp 0x1400086ed
mov eax, 0xe7a3845
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf0052599
mov ecx, 0x26245b16
jmp 0x14000982a
mov eax, 0x2846b4f1
jmp 0x1400086ed
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x28]
mov rax, qword [rax]
mov qword [rbp - 0x78], rax
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1208504
mov ecx, 0x7b453f2c
jmp 0x14000982a
mov rcx, qword [rbp + 0x10]
sub rsp, 0x20
call fcn.140002e47
add rsp, 0x20
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe9a886d1
mov ecx, 0xbd468f57
jmp 0x14000982a
mov dword [rbp + 0x4c], r14d
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1f2c6196
mov ecx, 0xd443477c
jmp 0x14000982a
cmp byte [rbp + 0x44], 0
mov eax, 0x7c04ad9d
mov ecx, 0xf5c9c031
cmovne eax, ecx
jmp 0x1400086ed
mov dword [rbp - 0x50], ebx
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb4f9d165
mov ecx, 0xe7a3845
jmp 0x14000982a
mov rax, qword [rbp + 8]
mov ecx, dword [rbp + 0x4c]
cmp ecx, dword [rax]
setb byte [rbp + 0x45]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1f2c6196
mov ecx, 0x35e7db00
jmp 0x14000982a
cmp byte [rbp + 0x41], 0
mov eax, 0xcea492bc
mov ecx, 0x9e1896d5
cmovne eax, ecx
jmp 0x1400086ed
cmp byte [rbp + 0x49], 0
mov eax, 0x837d7dae
mov ecx, 0x17b071b1
cmovne eax, ecx
mov r15d, 0xc0000001
jmp 0x1400086ed
mov eax, 0xf9bbf3d0
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x39dd541e
mov ecx, 0x2846b4f1
jmp 0x14000982a
mov eax, 0x9b4d13ff
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe9a886d1
mov ecx, 0x9bb9b755
jmp 0x14000982a
mov rax, qword [rbp + 0x30]
mov r8d, dword [rax]
mov r9, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x10]
sub rsp, 0x20
mov ecx, 0xb
call r12
add rsp, 0x20
mov dword [rbp - 4], eax
cmp dword [rbp - 4], 0
setns byte [rbp + 0x46]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf92f9765
mov ecx, 0xbd61ffec
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b45c34d
mov ecx, 0x6a1e000
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88aa6941
mov ecx, 0x66e0a51a
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe9e560ce
mov ecx, 0xaea1e65b
jmp 0x14000982a
mov rax, qword [rbp - 0x10]
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp + 0x18]
mov eax, 0x161b9fb2
jmp 0x1400086ed
mov rax, qword [rbp - 0x30]
mov eax, dword [rax + 0x40]
add rax, qword [rbp]
mov rcx, qword [rbp - 0x48]
cmp rcx, rax
setb byte [rbp + 0x3f]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xefc369b4
mov ecx, 0xf0b1bafd
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x39dd541e
mov ecx, 0x100f786c
jmp 0x14000982a
mov eax, dword [rbp + 0x4c]
imul rax, rax, 0x128
add rax, qword [rbp - 0x68]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
add rax, 0x10
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x18]
cmp rax, qword [rbp - 0x20]
setae byte [rbp + 0x44]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8852e81a
mov ecx, 0x15f7febb
jmp 0x14000982a
mov qword [rbp + 0x28], rdi
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6de6439c
mov ecx, 0x3c07a3d9
jmp 0x14000982a
cmp byte [rbp + 0x47], 0
mov eax, 0xd4093a2c
mov ecx, 0xf1ce7f1b
cmovne eax, ecx
mov ebx, dword [rbp + 0x24]
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1208504
mov ecx, 0x9b4d13ff
jmp 0x14000982a
mov rax, qword [rbp - 0x28]
mov rax, qword [rbp + 0x28]
mov eax, 0x3c07a3d9
jmp 0x1400086ed
mov eax, dword [rbp + 0x4c]
mov rax, qword [rbp - 0x68]
mov rax, qword [rbp + 0x18]
mov eax, 0x2a098985
jmp 0x1400086ed
mov eax, 0x66e0a51a
jmp 0x1400086ed
mov rax, qword [rbp + 0x30]
mov r8d, dword [rax]
mov r9, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x10]
sub rsp, 0x20
mov ecx, 0xb
call r12
add rsp, 0x20
mov eax, 0xc1b84a50
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8d899829
mov ecx, 0x2b74a87a
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf8b95738
mov ecx, 0x4e088d8f
jmp 0x14000982a
mov eax, 0xd4093a2c
mov ebx, dword [rbp - 4]
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca09f239
mov ecx, 0x510f59b0
jmp 0x14000982a
cmp byte [rbp + 0x48], 0
mov eax, 0x8a15ca48
mov ecx, 0xbbe15379
cmovne eax, ecx
mov esi, dword [rbp + 0x24]
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8a10f9f
mov ecx, 0x62646fe
jmp 0x14000982a
mov eax, 0x159a1b67
xor r14d, r14d
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x60c132f8
mov ecx, 0xe2a55883
jmp 0x14000982a
mov rax, qword [rbp + 8]
mov eax, dword [rbp + 0x4c]
mov eax, 0xd443477c
jmp 0x1400086ed
mov rax, qword [rbp + 0x28]
mov rax, qword [rbp]
mov eax, 0x62646fe
jmp 0x1400086ed
sub rsp, 0x20
lea rcx, str.NtOpenFile
call fcn.1400018ab
add rsp, 0x20
mov eax, 0x505b9ae5
jmp 0x1400086ed
mov eax, 0xe5d221fb
mov rdi, qword [rbp - 0x78]
jmp 0x1400086ed
mov eax, 0x94cc50c3
jmp 0x1400086ed
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b9ea867
mov ecx, 0x64b8e069
jmp 0x14000982a
cmp byte [rbp + 0x40], 0
mov eax, 0xcea492bc
mov ecx, 0x9c60fabb
cmovne eax, ecx
jmp 0x1400086ed
mov rax, qword [rbp + 8]
add rax, 8
mov qword [rbp - 0x68], rax
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b45c34d
mov ecx, 0x9f944a35
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb4f9d165
mov ecx, 0xb6622ac8
jmp 0x14000982a
mov eax, 0xe5d221fb
mov rdi, qword [rbp - 0x80]
jmp 0x1400086ed
mov rax, qword [rbp + 0x28]
mov rax, qword [rbp - 0x18]
mov eax, 0xa61e9e7c
jmp 0x1400086ed
mov cl, byte [rbp + 0x4b]
cmp byte [rbp + 0x4a], 0
mov eax, 0xda6940a9
mov edx, 0x505b9ae5
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1400086ed
mov eax, 0x10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x30], rax
sub rsp, 0x20
lea rcx, str.NtOpenFile
call fcn.1400018ab
add rsp, 0x20
mov qword [rbp + 0x18], rax
cmp qword [rbp + 0x18], 0
setne byte [rbp + 0x49]
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xda6940a9
mov ecx, 0x79c23748
jmp 0x14000982a
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b9ea867
mov ecx, 0x94cc50c3
jmp 0x14000982a
mov eax, dword [rbp + 0x4c]
inc eax
mov dword [rbp - 0x4c], eax
mov eax, dword [0x1400161ec]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x50c651a6
mov ecx, 0x4967bf73
cmove eax, ecx
cmp dword [0x1400161e8], 0xa
cmovl eax, ecx
jmp 0x1400086ed
mov eax, 0x380d441d
jmp 0x1400086ed
cmp eax, 0x510f59b0
jne 0x1400086ed
mov esi, dword [rbp - 0x58]
mov rcx, qword [rbp + 0x50]
xor rcx, rbp
sub rsp, 0x20
call fcn.140013f90
add rsp, 0x20
mov eax, esi
lea rsp, [rbp + 0x58]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret