Function at 0x1400a884a
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0xeeb2f120
pushf
not eax
add eax, 0x547af637
xor eax, 0x6e1a0b91
rol eax, 2
popf
pushf
not eax
add eax, 0x3f7f14f6
xor eax, 0x1036dad9
rol eax, 0xe3
popf
cmp eax, 6
jne 0x1400a8887
popf
pop rax
jmp 0x1400a8ef8
cmp eax, 1
jne 0x1400a8896
popf
pop rax
jmp 0x1400a8ace
cmp eax, 0x12
jne 0x1400a88a5
popf
pop rax
jmp 0x1400a95d2
cmp eax, 0x14
jne 0x1400a88b4
popf
pop rax
jmp 0x1400a96f7
cmp eax, 0x16
jne 0x1400a88c3
popf
pop rax
jmp 0x1400a978f
cmp eax, 0xa
jne 0x1400a88d2
popf
pop rax
jmp 0x1400a9131
cmp eax, 3
jne 0x1400a88e1
popf
pop rax
jmp 0x1400a8d9e
cmp eax, 0xd
jne 0x1400a88f0
popf
pop rax
jmp 0x1400a9316
cmp eax, 0xb
jne 0x1400a88ff
popf
pop rax
jmp 0x1400a91b5
cmp eax, 8
jne 0x1400a890e
popf
pop rax
jmp 0x1400a9040
cmp eax, 0xe
jne 0x1400a891d
popf
pop rax
jmp 0x1400a9375
cmp eax, 2
jne 0x1400a892c
popf
pop rax
jmp 0x1400a8cea
cmp eax, 5
jne 0x1400a893b
popf
pop rax
jmp 0x1400a8e7e
cmp eax, 4
jne 0x1400a894a
popf
pop rax
jmp 0x1400a8e35
cmp eax, 0
jne 0x1400a8959
popf
pop rax
jmp 0x1400a89d1
cmp eax, 7
jne 0x1400a8968
popf
pop rax
jmp 0x1400a8f8d
cmp eax, 0x15
jne 0x1400a8977
popf
pop rax
jmp 0x1400a9731
cmp eax, 0xf
jne 0x1400a8986
popf
pop rax
jmp 0x1400a93f8
cmp eax, 9
jne 0x1400a8995
popf
pop rax
jmp 0x1400a909c
cmp eax, 0xc
jne 0x1400a89a4
popf
pop rax
jmp 0x1400a9255
cmp eax, 0x11
jne 0x1400a89b3
popf
pop rax
jmp 0x1400a94f3
cmp eax, 0x13
jne 0x1400a89c2
popf
pop rax
jmp 0x1400a964c
cmp eax, 0x10
jne 0x1400a89d1
popf
pop rax
jmp 0x1400a948a
push rsi
push rdi
push r14
sub rsp, 0x50
mov rax, qword [0x14003d040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rsi, rcx
lea r9, [rsp + 0x20]
xor r14d, r14d
mov ecx, 0x7e7bd195
pushf
not ecx
add ecx, 0x37769a73
xor ecx, 0x1b3d9a4e
rol ecx, 0x49
popf
pushf
not ecx
add ecx, 0x5cb3a31b
xor ecx, 0x1daa80c3
rol ecx, 0xe2
popf
pushf
not ecx
add ecx, 0x284a905c
xor ecx, 0x55f1bace
rol ecx, 0xb1
popf
pushf
not ecx
add ecx, 0x4119d81a
xor ecx, 0x36cbf9d
rol ecx, 0xdf
popf
xor r8d, r8d
mov dword [rsp + 0x20], r14d
xor edx, edx
mov edi, r14d
jmp 0x1400a8a5b
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400a8a9b
push rax
pushf
mov eax, 0xd4278aed
pushf
not eax
add eax, 0x5502d30f
xor eax, 0x2608f44f
rol eax, 0xad
popf
pushf
not eax
add eax, 0x7df32b8c
xor eax, 0x66516b1
rol eax, 0xd2
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x9b4018e5
pushf
not eax
add eax, 0x12db4a82
xor eax, 0x212e9cd5
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x3aa2335
xor eax, 0x4ec4c85e
rol eax, 0x2b
popf
jmp 0x1400a8878
xor edx, edx
mov r8d, 0x8d6a1fac
pushf
not r8d
add r8d, 0x47945f02
xor r8d, 0x2ebf3426
rol r8d, 0xab
popf
pushf
not r8d
add r8d, 0x1a6c4567
xor r8d, 0x7010a8c2
rol r8d, 0xf6
popf
mov rcx, rdi
jmp 0x1400a8b0c
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rsp + 0x20]
xor ecx, ecx
mov r9d, 0xc32731d0
pushf
not r9d
add r9d, 0x703b72
xor r9d, 0x6520fcc3
rol r9d, 0xf4
popf
pushf
not r9d
add r9d, 0x6441c80b
xor r9d, 0x50781071
rol r9d, 0x65
popf
pushf
not r9d
add r9d, 0x72c45082
xor r9d, 0x11a81872
rol r9d, 0xfb
popf
pushf
not r9d
add r9d, 0x413e9835
xor r9d, 0x1b82268a
rol r9d, 0x15
popf
mov r8d, 0xfa58b6ed
pushf
not r8d
add r8d, 0x7aa90707
xor r8d, 0x72614ea2
rol r8d, 0xad
popf
pushf
not r8d
add r8d, 0x2c9fed5d
xor r8d, 0x10c86f16
rol r8d, 0xb1
popf
jmp 0x1400a8bbb
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rsp + 0x20]
lea r9, [rsp + 0x20]
mov rdx, rax
mov ecx, 0x97d1c3a
pushf
not ecx
add ecx, 0x40cb1028
xor ecx, 0x758d6dd3
rol ecx, 0x4c
popf
pushf
not ecx
add ecx, 0x520f42e5
xor ecx, 0x3be4bd6c
rol ecx, 0x7b
popf
pushf
not ecx
add ecx, 0x7cd43aa6
xor ecx, 0x36c30589
rol ecx, 0xfb
popf
pushf
not ecx
add ecx, 0x24348b8
xor ecx, 0x3ac392c7
rol ecx, 0xa4
popf
mov rdi, rax
jmp 0x1400a8c2b
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400a8c91
push rax
pushf
mov eax, 0xf561953d
pushf
not eax
add eax, 0x6011ca69
xor eax, 0x59da9511
rol eax, 0x44
popf
pushf
not eax
add eax, 0x1f06beb
xor eax, 0x17affa90
rol eax, 0x22
popf
pushf
not eax
add eax, 0x74b23f9d
xor eax, 0x7c75abe3
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x44ebfeba
xor eax, 0x482e41bf
rol eax, 0x30
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x4685b300
pushf
not eax
add eax, 0x3a5ee33c
xor eax, 0x3f7b4c58
rol eax, 0x97
popf
pushf
not eax
add eax, 0x14595a0
xor eax, 0x3dd86cba
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x35c68c33
xor eax, 0x767c7a2d
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x61e096d3
xor eax, 0x64cbc70
rol eax, 0x3a
popf
jmp 0x1400a8878
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rbp
test eax, eax
js 0x1400a8d45
push rax
pushf
mov eax, 0x16206f63
pushf
not eax
add eax, 0x1056b97c
xor eax, 0x684f205f
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x7ea6648
xor eax, 0x20e76109
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x4a6614b3
xor eax, 0xb1b5254
rol eax, 0x6f
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x35ebad7d
pushf
not eax
add eax, 0x40559e84
xor eax, 0x5228bdc9
rol eax, 0x38
popf
pushf
not eax
add eax, 0x7a53120f
xor eax, 0x25692e2d
rol eax, 0xea
popf
pushf
not eax
add eax, 0x5b4d75db
xor eax, 0x528a4a62
rol eax, 0x70
popf
pushf
not eax
add eax, 0x843f7a3
xor eax, 0x72459dc7
rol eax, 0x45
popf
jmp 0x1400a8878
mov ebx, r14d
cmp dword [rdi], ebx
jbe 0x1400a8def
push rax
pushf
mov eax, 0xba75788d
pushf
not eax
add eax, 0x13df839d
xor eax, 0x41ede707
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x205ece62
xor eax, 0x2f06c067
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x11beb989
xor eax, 0x26477924
rol eax, 0xe1
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0xa135c00a
pushf
not eax
add eax, 0x185021bd
xor eax, 0x231b853f
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x2ea4538
xor eax, 0x52514e43
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x126b3e35
xor eax, 0x69e0863
rol eax, 0xd3
popf
jmp 0x1400a8878
nop dword [rax]
push rax
pushf
mov eax, 0x35402ce3
pushf
not eax
add eax, 0x28575ccc
xor eax, 0x58207b0c
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x41801a30
xor eax, 0x49dfb7f7
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x1b21f7f0
xor eax, 0x7f08be7e
rol eax, 0xc7
popf
jmp 0x1400a8878
mov eax, ebx
xorps xmm0, xmm0
imul rcx, rax, 0x128
movups xmmword [rsp + 0x28], xmm0
movzx edx, word [rcx + rdi + 0x2e]
lea rbp, [rcx + rdi]
add rdx, 0x30
mov qword [rsp + 0x38], r14
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov qword [rsp + 0x40], r14
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0x4b9cba52
pushf
not eax
add eax, 0x41020f8f
xor eax, 0xa893617
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x1f16dbbf
xor eax, 0x28e543bf
rol eax, 0x78
popf
jmp 0x1400a8878
inc r8
cmp byte [rdx + r8], r14b
jne 0x1400a8f34
push rax
pushf
mov eax, 0x24d925a4
pushf
not eax
add eax, 0x60e588be
xor eax, 0x498d7314
rol eax, 0x22
popf
pushf
not eax
add eax, 0x51c5014e
xor eax, 0x7bb0c118
rol eax, 0x6c
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x7c927307
pushf
not eax
add eax, 0x12c50eff
xor eax, 0x74a44d3a
rol eax, 0x65
popf
pushf
not eax
add eax, 0x6d1848c
xor eax, 0x20954bb
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x17bb645d
xor eax, 0x15d9ed42
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x350bc081
xor eax, 0x2d53ee84
rol eax, 0xca
popf
jmp 0x1400a8878
lea rcx, [rsp + 0x28]
call fcn.140080330
cmp qword [rsi + 0x18], 0xf
mov rdx, rsi
jbe 0x1400a8ffa
push rax
pushf
mov eax, 0xecfa469b
pushf
not eax
add eax, 0x323cf5fe
xor eax, 0x63ddfe46
rol eax, 0x55
popf
pushf
not eax
add eax, 0x31a62a8c
xor eax, 0x4b77deb9
rol eax, 0x43
popf
pushf
not eax
add eax, 0xc09fc7f
xor eax, 0x56751846
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x6113fc1b
xor eax, 0x216b0a50
rol eax, 0x9d
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x5dec39dd
pushf
not eax
add eax, 0x1a25034a
xor eax, 0x643ece9d
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xa4a213f
xor eax, 0x482c4a13
rol eax, 0x64
popf
pushf
not eax
add eax, 0x70635f3d
xor eax, 0x5dbd3b28
rol eax, 6
popf
jmp 0x1400a8878
mov rdx, qword [rsi]
push rax
pushf
mov eax, 0xc9c136dc
pushf
not eax
add eax, 0x6d39112b
xor eax, 0x69c31244
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x7986e6d5
xor eax, 0x5f2c0dcf
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x4f097573
xor eax, 0x6052c922
rol eax, 0xad
popf
pushf
not eax
add eax, 0x6ac0400d
xor eax, 0x2d674551
rol eax, 0xae
popf
jmp 0x1400a8878
cmp qword [rsp + 0x40], 0xf
lea rcx, [rsp + 0x28]
cmova rcx, qword [rsp + 0x28]
jmp 0x1400a90ae
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x1400a90eb
push rax
pushf
mov eax, 0x5193311a
pushf
not eax
add eax, 0x30687927
xor eax, 0xb9b32c1
rol eax, 0xc
popf
pushf
not eax
add eax, 0x32ac500b
xor eax, 0x4bbf72b6
rol eax, 0xb
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0xfefa9e57
pushf
not eax
add eax, 0xad8df9b
xor eax, 0x6a91d63
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x5a6c9c66
xor eax, 0x75ad7dbb
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x2e1b6c11
xor eax, 0x1b696987
rol eax, 0xf4
popf
jmp 0x1400a8878
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x1400a916f
push rax
pushf
mov eax, 0x9c2cd7f
pushf
not eax
add eax, 0x3951be02
xor eax, 0x90cb5a1
rol eax, 0xf
popf
pushf
not eax
add eax, 0x3bed856c
xor eax, 0x195e722a
rol eax, 0x91
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x7af67680
pushf
not eax
add eax, 0x6c559b06
xor eax, 0x2cf2c8bd
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x1b115743
xor eax, 0x1f800760
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x7f1f4e97
xor eax, 0xcc87eb0
rol eax, 0x42
popf
jmp 0x1400a8878
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a920f
push rax
pushf
mov eax, 0xf58466c1
pushf
not eax
add eax, 0x7465cc60
xor eax, 0x1f54c635
rol eax, 0x71
popf
pushf
not eax
add eax, 0x2309fef9
xor eax, 0x326ba403
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x1a746769
xor eax, 0x5547f01a
rol eax, 0xee
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x7b100cec
pushf
not eax
add eax, 0x45561c65
xor eax, 0x6ee2a776
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x71796c2e
xor eax, 0x26447936
rol eax, 0x31
popf
pushf
not eax
add eax, 0x5bc47616
xor eax, 0x1a008720
rol eax, 0xed
popf
jmp 0x1400a8878
mov rcx, qword [rcx - 8]
add rdx, 0x27
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a92d0
push rax
pushf
mov eax, 0xa6900202
pushf
not eax
add eax, 0x27e38ac2
xor eax, 0x12006e6a
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x2b0f2884
xor eax, 0x222ba7b4
rol eax, 0x60
popf
pushf
not eax
add eax, 0x75bdfcb1
xor eax, 0x4f640701
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x707e033f
xor eax, 0x5cabbed9
rol eax, 0xc4
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x8adcd24d
pushf
not eax
add eax, 0x5f3f743b
xor eax, 0x1c15cf5
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x763a59fd
xor eax, 0xc0fb2ef
rol eax, 0x48
popf
pushf
not eax
add eax, 0x28a4a46f
xor eax, 0x188c518f
rol eax, 0xb4
popf
jmp 0x1400a8878
call fcn.140100bbf
push rax
pushf
mov eax, 0x8828e4ea
pushf
not eax
add eax, 0x62077f8e
xor eax, 0x3246af2d
rol eax, 3
popf
pushf
not eax
add eax, 0x518cdf07
xor eax, 0x58063d06
rol eax, 0x48
popf
pushf
not eax
add eax, 0x7120c3d
xor eax, 0x5b85a952
rol eax, 0xae
popf
pushf
not eax
add eax, 0x1c8a9f0f
xor eax, 0x519a076d
rol eax, 0x7b
popf
jmp 0x1400a8878
inc ebx
cmp ebx, dword [rdi]
jb 0x1400a93c5
push rax
pushf
mov eax, 0x63f535c8
pushf
not eax
add eax, 0x17784762
xor eax, 0x31571e34
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x4758bf3
xor eax, 0x4605e741
rol eax, 0x51
popf
pushf
not eax
add eax, 0x3b7c8e52
xor eax, 0x2312d1e3
rol eax, 0x7d
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0xcfd85fc0
pushf
not eax
add eax, 0x74e5512f
xor eax, 0x69fad209
rol eax, 0x53
popf
pushf
not eax
add eax, 0x4b43ac0b
xor eax, 0x30054471
rol eax, 0x9d
popf
jmp 0x1400a8878
xor edx, edx
mov r8d, 0x54c6dc79
pushf
not r8d
add r8d, 0x491de968
xor r8d, 0x589f303b
rol r8d, 0xfc
popf
pushf
not r8d
add r8d, 0x24d3415f
xor r8d, 0x32c855b1
rol r8d, 0xd1
popf
pushf
not r8d
add r8d, 0x31e4389d
xor r8d, 0x61a256ff
rol r8d, 0xa3
popf
mov rcx, rdi
jmp 0x1400a944f
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
push rax
pushf
mov eax, 0x979eea82
pushf
not eax
add eax, 0x41e7ffd3
xor eax, 0x4a80ad1b
rol eax, 0x20
popf
pushf
not eax
add eax, 0x5132c24b
xor eax, 0x706949ff
rol eax, 0x76
popf
jmp 0x1400a8878
mov rbp, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400ff118
add rsp, 0x50
pop r14
pop rdi
pop rsi
ret
mov rbx, qword [rbp + 0x18]
xor edx, edx
mov r8d, 0x56a1c278
pushf
not r8d
add r8d, 0x560d59e2
xor r8d, 0x6802bde0
rol r8d, 0xed
popf
pushf
not r8d
add r8d, 0x23d8c4ef
xor r8d, 0x7e879201
rol r8d, 0x50
popf
mov rcx, rdi
jmp 0x1400a9535
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x1400a9579
push rax
pushf
mov eax, 0x53d8558b
pushf
not eax
add eax, 0x4d5fa68c
xor eax, 0x4adb735
rol eax, 4
popf
pushf
not eax
add eax, 0x1a9b1e4b
xor eax, 0x47eca8eb
rol eax, 0x18
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0xc5ef2eb
pushf
not eax
add eax, 0x42ce6f18
xor eax, 0x6118d1b1
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x5f1efe32
xor eax, 0x2afae6a
rol eax, 0x15
popf
pushf
not eax
add eax, 0x60085800
xor eax, 0x443f18f6
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x7a02bdf4
xor eax, 0x25c2ba1
rol eax, 0x51
popf
jmp 0x1400a8878
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a9619
push rax
pushf
mov eax, 0xc00c5547
pushf
not eax
add eax, 0x77e80fce
xor eax, 0x2bdb7909
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x1fc6d5fa
xor eax, 0xaaa5919
rol eax, 0x48
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0xaff48acd
pushf
not eax
add eax, 0x70020971
xor eax, 0x7c16707a
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x5993dd9f
xor eax, 0x5070272f
rol eax, 0xab
popf
jmp 0x1400a8878
mov rcx, qword [rcx - 8]
add rdx, 0x27
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a96b0
push rax
pushf
mov eax, 0x642463ef
pushf
not eax
add eax, 0x38c5cb29
xor eax, 0x58b53a08
rol eax, 0xca
popf
pushf
not eax
add eax, 0x2c7c0a71
xor eax, 0x5c499e7c
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x2847e044
xor eax, 0x37429b4
rol eax, 0x4a
popf
jmp 0x1400a8878
push rax
pushf
mov eax, 0x5031d429
pushf
not eax
add eax, 0x607d6302
xor eax, 0x1096add4
rol eax, 0x45
popf
pushf
not eax
add eax, 0xa35ec49
xor eax, 0xced1c6d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x1412740a
xor eax, 0x3b734e62
rol eax, 0xc3
popf
jmp 0x1400a8878
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100bbf
push rax
pushf
mov eax, 0x829a09b9
pushf
not eax
add eax, 0x2d65789a
xor eax, 0x2cb63de0
rol eax, 0x73
popf
pushf
not eax
add eax, 0x46c37215
xor eax, 0x610b7ed1
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd852dae
xor eax, 0x8caee56
rol eax, 8
popf
pushf
not eax
add eax, 0x48bef23e
xor eax, 0x10de917f
rol eax, 0x5c
popf
jmp 0x1400a8878
mov rax, rbx
jmp 0x1400a948a