Function at 0x1400121b0
Capabilities:
Allocate or change rwx memory
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1a8
mov rax, qword [0x1400532c8]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov eax, dword [0x140053dac]
mov edx, dword [0x140053db0]
lea ebp, [rax - 1]
imul ebp, eax
test bpl, 1
sete byte [rsp + 0x31]
cmp edx, 0xa
setl byte [rsp + 0x32]
mov qword [rsp + 0x98], rcx
mov eax, 0x4532fbf0
jmp 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb819959b
mov ecx, 0x9accf770
cmove eax, ecx
cmp dword [0x140053db0], 0xa
cmovl eax, ecx
cmp eax, 0xf3adfa30
jle 0x140012270
cmp eax, 0x4532fbef
jle 0x1400122b0
cmp eax, 0x67daed88
jg 0x140012336
cmp eax, 0x51e090a7
jg 0x140012435
cmp eax, 0x4532fbf0
je 0x1400138dd
cmp eax, 0x514a8915
jne 0x14001222d
mov eax, 0xd27f4d6c
jmp 0x14001222d
cmp eax, 0xb41fb2d3
jle 0x140012300
cmp eax, 0xcfb4716b
jg 0x140012374
cmp eax, 0xbd7f264b
jg 0x14001245d
cmp eax, 0xb41fb2d4
je 0x1400138fd
cmp eax, 0xb819959b
jne 0x14001222d
mov eax, 0x865bfbd2
jmp 0x14001222d
cmp eax, 0x68cd1f4
jle 0x1400123aa
cmp eax, 0x139aea48
jg 0x1400124b5
cmp eax, 0x68cd1f5
je 0x140013907
cmp eax, 0xddbceef
jne 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf3adfa31
mov ecx, 0x5d23e5e3
jmp 0x140012220
cmp eax, 0x9656f258
jle 0x1400123f6
cmp eax, 0xa83507a3
jg 0x1400124e9
cmp eax, 0x9656f259
je 0x140013959
cmp eax, 0x9accf770
jne 0x14001222d
mov eax, 0x772e4c74
jmp 0x14001222d
cmp eax, 0x7000c03e
jg 0x14001251d
cmp eax, 0x67daed89
je 0x140013977
cmp eax, 0x6ce6d884
jne 0x14001222d
mov rax, qword [rsp + 0x148]
mov rax, qword [rax]
mov qword [rsp + 0x150], rax
mov eax, 0xce3407cc
jmp 0x14001222d
cmp eax, 0xd549da40
jg 0x1400138c8
cmp eax, 0xcfb4716c
je 0x140013981
cmp eax, 0xd27f4d6c
jne 0x14001222d
cmp qword [rsp + 0x68], 0
sete byte [rsp + 0x33]
mov eax, 0x9656f259
jmp 0x14001222d
cmp eax, 0xf3adfa31
je 0x14001398b
cmp eax, 0xf56afbc9
je 0x140013995
cmp eax, 0xfe7046e1
jne 0x14001222d
mov rax, qword [rsp + 0xf0]
mov ecx, dword [rsp + 0xbc]
mov dword [rax], ecx
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x158], rax
mov eax, 0x51e090a8
jmp 0x14001222d
cmp eax, 0x865bfbd2
je 0x140012207
cmp eax, 0x89ef6ed0
je 0x1400139b3
cmp eax, 0x8abdebaf
jne 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe4b75a22
mov ecx, 0x2efb3e1a
jmp 0x140012220
cmp eax, 0x51e090a8
je 0x1400139bf
cmp eax, 0x5d23e5e3
jne 0x14001222d
mov eax, 0xd549da41
mov rsi, qword [rsp + 0x158]
jmp 0x14001222d
cmp eax, 0xbd7f264c
je 0x1400139dd
cmp eax, 0xce3407cc
jne 0x14001222d
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x150]
mov qword [rax], rcx
mov rax, qword [rsp + 0x68]
add rax, 0x10
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
mov eax, dword [rax]
add eax, 1
mov dword [rsp + 0xbc], eax
mov eax, 0xfe7046e1
jmp 0x14001222d
cmp eax, 0x139aea49
je 0x1400139f4
cmp eax, 0x2efb3e1a
jne 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe4b75a22
mov ecx, 0x514a8915
jmp 0x140012220
cmp eax, 0xa83507a4
je 0x140013a03
cmp eax, 0xaf7c27c5
jne 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x139aea49
mov ecx, 0x68cd1f5
jmp 0x140012220
cmp eax, 0x7000c03f
je 0x140013a21
cmp eax, 0x772e4c74
jne 0x14001222d
mov qword [rsp + 0x140], rsi
mov eax, 0xcbfa1600
jmp 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7f4bd80f
mov ecx, 0x68d496fc
nop dword [rax + rax]
cmove eax, ecx
cmp dword [0x140053fa0], 0xa
cmovl eax, ecx
cmp eax, 0x3b2bd7c
jle 0x1400125e0
cmp eax, 0x3b0bbe66
jg 0x140012640
cmp eax, 0x251d6410
jle 0x1400126fc
cmp eax, 0x30ba2cd8
jg 0x14001283d
cmp eax, 0x29e53567
jle 0x140012a7e
cmp eax, 0x2a2bd37d
jg 0x140012e9b
cmp eax, 0x29e53568
je 0x1400130bb
cmp eax, 0x29e769b0
jne 0x14001256d
cmp byte [rsp + 0x3e], 0
mov eax, 0x6027812c
mov ecx, 0x268ea37e
cmovne eax, ecx
jmp 0x14001256d
cmp eax, 0xbf7482ec
jle 0x1400126b0
cmp eax, 0xe6acce4f
jle 0x140012759
cmp eax, 0xf3f96060
jg 0x140012892
cmp eax, 0xeedd2510
jle 0x140012abd
cmp eax, 0xf12d7d8d
jg 0x140012ee8
cmp eax, 0xeedd2511
je 0x1400130cd
cmp eax, 0xf02b3b1d
jne 0x14001256d
mov eax, 0x7819b9e2
jmp 0x14001256d
cmp eax, 0x5d5e8cef
jg 0x1400127ae
cmp eax, 0x5248ac3b
jle 0x1400128c8
cmp eax, 0x59beb421
jle 0x140012b09
cmp eax, 0x5a9b6fb3
jg 0x140012f0d
cmp eax, 0x59beb422
je 0x1400130fc
cmp eax, 0x5a992d31
jne 0x14001256d
mov rax, qword [rsp + 0xa0]
cmp rax, qword [rsp + 0x108]
setb byte [rsp + 0x35]
mov eax, 0x3b2bd7d
jmp 0x14001256d
cmp eax, 0xa7912af2
jg 0x1400127fc
cmp eax, 0x98fc54f7
jle 0x14001290e
cmp eax, 0x9fa9ccc1
jle 0x140012b3c
cmp eax, 0xa6fb065c
jg 0x140012f60
cmp eax, 0x9fa9ccc2
je 0x140013140
cmp eax, 0xa40c4fe1
jne 0x14001256d
mov eax, 0x6a0bab26
jmp 0x14001256d
cmp eax, 0x14a7901d
jle 0x140012958
cmp eax, 0x1e45f324
jle 0x140012b7b
cmp eax, 0x203f5356
jg 0x140012f80
cmp eax, 0x1e45f325
je 0x140013164
cmp eax, 0x1e8c732b
jne 0x14001256d
cmp byte [rsp + 0x3b], 0
mov eax, 0x251d6411
mov ecx, 0xee03b5a5
cmovne eax, ecx
mov r14, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
mov r15, qword [rsp + 0x78]
jmp 0x14001256d
cmp eax, 0xcd2da3e1
jle 0x1400129c3
cmp eax, 0xdd700b9c
jle 0x140012bf1
cmp eax, 0xded5d63a
jg 0x140012fa0
cmp eax, 0xdd700b9d
je 0x14001318a
cmp eax, 0xded201b6
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9fa9ccc2
mov ecx, 0x5c23b33b
jmp 0x140012560
cmp eax, 0x6a0bab25
jle 0x1400129fe
cmp eax, 0x7819b9e1
jle 0x140012c29
cmp eax, 0x7b434543
jg 0x140012fed
cmp eax, 0x7819b9e2
je 0x1400131ee
cmp eax, 0x7a41e3de
jne 0x14001256d
mov eax, 0x251d6411
mov r12, qword [rsp + 0x48]
mov r14, qword [rsp + 0x98]
jmp 0x14001256d
cmp eax, 0xb12b3f60
jle 0x140012a48
cmp eax, 0xb75cf5e5
jle 0x140012c68
cmp eax, 0xbdfb6f33
jg 0x140013019
cmp eax, 0xb75cf5e6
je 0x14001320c
cmp eax, 0xbde94161
jne 0x14001256d
mov eax, 0xa7b5a0d1
jmp 0x14001256d
cmp eax, 0x377754fe
jle 0x140012cab
cmp eax, 0x3a292169
jg 0x140013039
cmp eax, 0x377754ff
je 0x140013234
cmp eax, 0x394a8704
jne 0x14001256d
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x118]
cmp rax, qword [rsp + 0x60]
setb byte [rsp + 0x37]
mov eax, 0xca17f7a8
jmp 0x14001256d
cmp eax, 0xf863daae
jle 0x140012cea
cmp eax, 0xfbd4ed9a
jg 0x14001306d
cmp eax, 0xf863daaf
je 0x14001324b
cmp eax, 0xf965e956
jne 0x14001256d
mov eax, 0x3b0bbe67
jmp 0x14001256d
cmp eax, 0x4330c8f6
jle 0x140012d15
cmp eax, 0x4eb9c5d3
jle 0x1400130a1
cmp eax, 0x4eb9c5d4
je 0x14001327e
cmp eax, 0x4ef59f48
jne 0x14001256d
mov eax, 0x6e488fb6
mov rcx, qword [rsp + 0x168]
mov qword [rsp + 0xd8], rcx
jmp 0x14001256d
cmp eax, 0x8e725735
jg 0x140012d7b
cmp eax, 0x83016e7e
je 0x14001329c
cmp eax, 0x8b2302f8
je 0x1400132a9
cmp eax, 0x8d5ec3b6
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x98fc54f8
mov ecx, 0x2a2bd37e
jmp 0x140012560
cmp eax, 0xef408e5
jg 0x140012db3
cmp eax, 0x3b2bd7d
je 0x1400132c0
cmp eax, 0x4d9021d
je 0x1400132de
cmp eax, 0x57169d7
jne 0x14001256d
mov rcx, qword [rsp + 0x70]
mov edx, 0x1000
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x78], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1e45f325
mov ecx, 0xa749b378
jmp 0x140012560
cmp eax, 0xcafd4082
jg 0x140012ded
cmp eax, 0xbf7482ed
je 0x14001330a
cmp eax, 0xc83ee06a
je 0x140013314
cmp eax, 0xca17f7a8
jne 0x14001256d
cmp byte [rsp + 0x37], 0
mov eax, 0xb5c91977
jmp 0x140012c1c
cmp eax, 0x640857da
jg 0x140012e25
cmp eax, 0x5d5e8cf0
je 0x14001333d
cmp eax, 0x5db0c08c
je 0x140013347
cmp eax, 0x6027812c
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf12d7d8e
mov ecx, 0xffe880dc
jmp 0x140012560
cmp eax, 0xae126e0e
jg 0x140012e70
cmp eax, 0xa7912af3
je 0x140013374
cmp eax, 0xa7b5a0d1
je 0x14001339c
cmp eax, 0xaa0f2a3a
jne 0x14001256d
mov eax, 0x6027812c
jmp 0x14001256d
cmp eax, 0x251d6411
je 0x1400133bc
cmp eax, 0x25de8905
je 0x1400133ea
cmp eax, 0x268ea37e
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7912af3
mov ecx, 0x1d9f9522
jmp 0x140012560
cmp eax, 0xe6acce50
je 0x14001340c
cmp eax, 0xeb8f815c
je 0x14001342a
cmp eax, 0xee03b5a5
jne 0x14001256d
mov qword [rsp + 0xb0], r15
cmp qword [rsp + 0xb0], 0
mov eax, 0x331a6e16
mov ecx, 0xbf119a78
cmove eax, ecx
mov r13, qword [rsp + 0xb0]
jmp 0x14001256d
cmp eax, 0x5248ac3c
je 0x140013434
cmp eax, 0x553b57cb
je 0x140013453
cmp eax, 0x5768b279
jne 0x14001256d
mov eax, 0x7b434544
mov rbx, qword [rsp + 0x110]
jmp 0x14001256d
cmp eax, 0x98fc54f8
je 0x14001346d
cmp eax, 0x9df0d13f
je 0x140013477
cmp eax, 0x9e854dda
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef408e6
mov ecx, 0x29e53568
jmp 0x140012560
cmp eax, 0x14a7901e
je 0x140013496
cmp eax, 0x191a7592
je 0x1400134b4
cmp eax, 0x1d9f9522
jne 0x14001256d
mov rax, qword [rsp + 0x28]
add rax, 0x40
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x28]
add rax, 8
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rax], 0
mov rax, qword [rsp + 0x28]
mov dword [rax + 0x10], 0
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7912af3
mov ecx, 0xeb8f815c
jmp 0x140012560
cmp eax, 0xcd2da3e2
je 0x1400134c6
cmp eax, 0xd60b784d
je 0x1400134f1
cmp eax, 0xd88a3b85
jne 0x14001256d
cmp byte [rsp + 0x38], 0
mov eax, 0x14168960
mov ecx, 0xded5d63b
cmovne eax, ecx
jmp 0x14001256d
cmp eax, 0x6a0bab26
je 0x140012542
cmp eax, 0x6e488fb6
je 0x140013522
cmp eax, 0x77985951
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf02b3b1d
mov ecx, 0x7819b9e2
jmp 0x140012560
cmp eax, 0xb12b3f61
je 0x14001354d
cmp eax, 0xb55c447f
je 0x14001356b
cmp eax, 0xb5c91977
jne 0x14001256d
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x118]
cmp rcx, rax
setae byte [rsp + 0x38]
mov eax, 0xd88a3b85
jmp 0x14001256d
cmp eax, 0x30ba2cd9
je 0x14001359c
cmp eax, 0x331a6e16
je 0x1400135b0
cmp eax, 0x3414d1f5
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf965e956
mov ecx, 0x3b0bbe67
jmp 0x140012560
cmp eax, 0xf3f96061
je 0x1400135d3
cmp eax, 0xf6c14288
je 0x1400135f1
cmp eax, 0xf79f8553
jne 0x14001256d
mov eax, 0xfbd4ed9b
jmp 0x14001256d
cmp eax, 0x3b0bbe67
je 0x14001360f
cmp eax, 0x3fe571da
je 0x14001362d
cmp eax, 0x41f8e6d9
jne 0x14001256d
mov qword [rsp + 0x130], rsi
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x130]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
mov eax, 0xeedd2511
mov ecx, 0x83016e7e
cmovb eax, ecx
mov rbp, qword [rsp + 0x138]
jmp 0x14001256d
cmp eax, 0x8e725736
je 0x14001364c
cmp eax, 0x94ece55d
je 0x140013663
cmp eax, 0x9612b6ad
jne 0x14001256d
mov rax, qword [rsp + 0x90]
mov rax, qword [rsp + 0x60]
mov eax, 0xf863daaf
jmp 0x14001256d
cmp eax, 0xef408e6
je 0x140013698
cmp eax, 0x10baabe0
je 0x1400136a2
cmp eax, 0x14168960
jne 0x14001256d
mov rax, qword [rsp + 0x48]
cmp qword [rax + 8], 0
setne byte [rsp + 0x39]
mov eax, 0x8b2302f8
jmp 0x14001256d
cmp eax, 0xcafd4083
je 0x1400136c0
cmp eax, 0xcbfa1600
je 0x1400136e9
cmp eax, 0xcce6c109
jne 0x14001256d
mov eax, 0x4330c8f7
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xc0], rcx
jmp 0x14001256d
cmp eax, 0x640857db
je 0x140013711
cmp eax, 0x68c869bc
je 0x14001373a
cmp eax, 0x68d496fc
jne 0x14001256d
mov rax, qword [rsp + 0x28]
mov qword [0x140054320], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7f4bd80f
mov ecx, 0xaa0f2a3a
jmp 0x140012560
cmp eax, 0xae126e0f
je 0x140013753
cmp eax, 0xae5ae2e3
je 0x140013762
cmp eax, 0xb0773983
jne 0x14001256d
mov eax, 0x5a992d31
jmp 0x14001256d
cmp eax, 0x2a2bd37e
je 0x14001378d
cmp eax, 0x2d483125
jne 0x14001256d
cmp byte [rsp + 0x3d], 0
mov eax, 0x41f8e6d9
mov ecx, 0x83016e7e
cmovne eax, ecx
mov rsi, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0xd0], rcx
mov rbp, qword [rsp + 0x88]
jmp 0x14001256d
cmp eax, 0xf12d7d8e
je 0x1400137ab
cmp eax, 0xf2eabe59
jne 0x14001256d
mov rax, qword [rsp + 0x48]
mov eax, 0xae5ae2e3
jmp 0x14001256d
cmp eax, 0x5a9b6fb4
je 0x1400137b5
cmp eax, 0x5c23b33b
jne 0x14001256d
mov r8d, dword [rsp + 0x198]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x90]
call fcn.140014250
mov qword [rsp + 0x70], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9fa9ccc2
mov ecx, 0xbde94161
jmp 0x140012560
cmp eax, 0xa6fb065d
je 0x1400137c4
cmp eax, 0xa749b378
jne 0x14001256d
mov eax, 0x3ad3f949
jmp 0x14001256d
cmp eax, 0x203f5357
je 0x1400137eb
cmp eax, 0x215f6580
jne 0x14001256d
mov eax, 0x7a41e3de
jmp 0x14001256d
cmp eax, 0xded5d63b
je 0x1400137fd
cmp eax, 0xe5de3c6b
jne 0x14001256d
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x40000001
setae byte [rsp + 0x34]
mov eax, 0x3414d1f5
jmp 0x14001256d
cmp eax, 0x7b434544
je 0x14001381b
cmp eax, 0x7f4bd80f
jne 0x14001256d
mov rax, qword [rsp + 0x28]
mov qword [0x140054320], rax
mov eax, 0x68d496fc
jmp 0x14001256d
cmp eax, 0xbdfb6f34
je 0x140013843
cmp eax, 0xbf119a78
jne 0x14001256d
mov eax, 0x25de8905
jmp 0x14001256d
cmp eax, 0x3a29216a
je 0x14001386f
cmp eax, 0x3ad3f949
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xae126e0f
mov ecx, 0x640857db
jmp 0x140012560
cmp eax, 0xfbd4ed9b
je 0x140013879
cmp eax, 0xffe880dc
jne 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf12d7d8e
mov ecx, 0xcce6c109
jmp 0x140012560
cmp eax, 0x49211d2f
jne 0x140013896
mov rax, qword [rsp + 0x48]
mov eax, 0xc83ee06a
jmp 0x14001256d
mov eax, 0x59beb422
mov rdi, qword [rsp + 0x108]
jmp 0x14001256d
mov r8d, dword [rsp + 0x198]
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x130]
call fcn.140014e00
mov qword [rsp + 0x80], rax
mov eax, 0xb12b3f61
jmp 0x14001256d
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x40]
mov ecx, 0x40000000
add rax, rcx
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x100]
cmp rax, qword [rsp + 0x110]
mov eax, 0x7b434544
mov ecx, 0xbf7482ed
cmova eax, ecx
mov rbx, qword [rsp + 0x100]
jmp 0x14001256d
mov r8d, dword [rsp + 0x198]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x90]
call fcn.140014250
mov eax, 0x5c23b33b
jmp 0x14001256d
mov rcx, qword [rsp + 0x70]
mov edx, 0x1000
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov eax, 0x57169d7
jmp 0x14001256d
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x50]
mov qword [rcx], rax
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov qword [rax], rcx
mov rax, qword [rsp + 0x50]
add rax, 0x40
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x120]
sub rax, qword [rsp + 0x28]
cmp rax, 0xfc1
setb byte [rsp + 0x3f]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd60b784d
mov ecx, 0xa6fb065d
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf02b3b1d
mov ecx, 0x215f6580
jmp 0x140012560
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov eax, 0x94ece55d
jmp 0x14001256d
mov eax, 0x4330c8f7
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0xc0], rcx
jmp 0x14001256d
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
cmp rcx, rax
setbe byte [rsp + 0x3a]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9612b6ad
mov ecx, 0x5248ac3c
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1e45f325
mov ecx, 0x57169d7
jmp 0x140012560
mov eax, 0x331a6e16
mov r13, rbp
jmp 0x14001256d
cmp byte [rsp + 0x39], 0
mov eax, 0xded5d63b
mov ecx, 0x377754ff
cmovne eax, ecx
jmp 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3a29216a
mov ecx, 0x10baabe0
jmp 0x140012560
cmp qword [rsp + 0x80], 0
sete byte [rsp + 0x3c]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x191a7592
mov ecx, 0x9df0d13f
jmp 0x140012560
mov eax, 0x5768b279
jmp 0x14001256d
cmp qword [rsp + 0x48], 0
setne byte [rsp + 0x36]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x49211d2f
mov ecx, 0x8e725736
jmp 0x140012560
mov eax, 0xe6acce50
jmp 0x14001256d
mov rax, qword [0x140054320]
mov rcx, qword [rsp + 0x28]
mov qword [rcx], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x68c869bc
mov ecx, 0xa40c4fe1
jmp 0x140012560
mov rax, qword [rsp + 0x28]
mov rax, qword [rsp + 0x28]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0x28]
mov dword [rax + 0x10], 0
mov eax, 0x1d9f9522
jmp 0x14001256d
cmp qword [rsp + 0x70], 0
mov eax, 0x4eb9c5d4
mov ecx, 0xee03b5a5
cmove eax, ecx
mov r15, qword [rsp + 0x128]
jmp 0x14001256d
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x128], r12
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9612b6ad
mov ecx, 0xf863daaf
jmp 0x140012560
mov eax, 0x41f8e6d9
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xd0], rcx
mov rsi, qword [rsp + 0x98]
jmp 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef408e6
mov ecx, 0x9e854dda
jmp 0x140012560
mov eax, 0x4ef59f48
jmp 0x14001256d
cmp byte [rsp + 0x3a], 0
mov eax, 0xee03b5a5
mov ecx, 0xded201b6
cmovne eax, ecx
mov r15, qword [rsp + 0x128]
jmp 0x14001256d
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0xa0], rax
mov eax, 0xe5de3c6b
jmp 0x14001256d
mov eax, 0x2a2bd37e
jmp 0x14001256d
cmp byte [rsp + 0x3c], 0
mov eax, 0xb55c447f
mov ecx, 0x83016e7e
cmovne eax, ecx
mov rbp, qword [rsp + 0x138]
jmp 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb75cf5e6
mov ecx, 0x94ece55d
jmp 0x140012560
mov rax, qword [rsp + 0x80]
mov eax, 0x4d9021d
jmp 0x14001256d
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x48], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x49211d2f
mov ecx, 0xc83ee06a
jmp 0x140012560
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x50]
mov qword [rcx], rax
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov qword [rax], rcx
mov rax, qword [rsp + 0x50]
mov rax, qword [rsp + 0x28]
mov eax, 0xdd700b9d
jmp 0x14001256d
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x50], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd60b784d
mov ecx, 0xdd700b9d
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x191a7592
mov ecx, 0x4d9021d
jmp 0x140012560
mov rcx, qword [rsp + 0x80]
mov edx, 0x1000
mov r8d, 0x3000
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x88], rax
mov eax, 0xf6c14288
jmp 0x14001256d
cmp byte [rsp + 0x35], 0
mov eax, 0x59beb422
mov ecx, 0x8d5ec3b6
jmp 0x14001363c
mov qword [rsp + 0x28], r13
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a9b6fb4
mov ecx, 0xcafd4083
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x68c869bc
mov ecx, 0x5db0c08c
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x203f5357
mov ecx, 0xbdfb6f34
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf965e956
mov ecx, 0x3fe571da
jmp 0x140012560
cmp byte [rsp + 0x34], 0
mov eax, 0x59beb422
mov ecx, 0x14a7901e
cmovne eax, ecx
mov rdi, qword [rsp + 0xa0]
jmp 0x14001256d
cmp byte [rsp + 0x36], 0
mov eax, 0x77985951
mov ecx, 0x394a8704
cmovne eax, ecx
jmp 0x14001256d
mov rax, qword [rsp + 0x40]
mov rcx, 0xffffffffc0000000
add rax, rcx
mov qword [rsp + 0x108], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb75cf5e6
mov ecx, 0xb0773983
jmp 0x140012560
mov eax, 0x9e854dda
jmp 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3a29216a
mov ecx, 0x30ba2cd9
jmp 0x140012560
cmp qword [rsp + 0x28], 0
setne byte [rsp + 0x3e]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a9b6fb4
mov ecx, 0x29e769b0
jmp 0x140012560
lea rcx, [rsp + 0x170]
mov qword [rsp + 0xf8], rcx
mov rax, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, 0x553b57cb
jmp 0x14001256d
cmp qword [rsp + 0x78], 0
setne byte [rsp + 0x3b]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xae126e0f
mov ecx, 0x1e8c732b
jmp 0x140012560
mov rax, qword [0x140054320]
mov rcx, qword [rsp + 0x28]
mov qword [rcx], rax
mov eax, 0x5db0c08c
jmp 0x14001256d
mov rax, qword [rsp + 0x78]
mov eax, 0x640857db
jmp 0x14001256d
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x160], rax
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf2eabe59
mov ecx, 0xf79f8553
jmp 0x140012560
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x98fc54f8
mov ecx, 0x5d5e8cf0
jmp 0x140012560
mov eax, 0xffe880dc
jmp 0x14001256d
mov rax, qword [rsp + 0x28]
mov eax, 0xcafd4083
jmp 0x14001256d
cmp byte [rsp + 0x3f], 0
mov eax, 0xf3f96061
mov ecx, 0x6e488fb6
cmovne eax, ecx
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0xd8], rcx
jmp 0x14001256d
mov rax, qword [rsp + 0x88]
mov eax, 0xbdfb6f34
jmp 0x14001256d
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf2eabe59
mov ecx, 0xae5ae2e3
jmp 0x140012560
lea rax, [rbx - 0xfff]
mov qword [rsp + 0xa8], rax
mov eax, 0xcd2da3e2
mov rcx, qword [0x140054320]
mov qword [rsp + 0xc8], rcx
jmp 0x14001256d
cmp qword [rsp + 0x88], 0
setne byte [rsp + 0x3d]
mov eax, dword [0x140053f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x203f5357
mov ecx, 0x2d483125
jmp 0x140012560
mov eax, 0x10baabe0
jmp 0x14001256d
mov rax, qword [rsp + 0x160]
mov rax, qword [rax]
mov qword [rsp + 0xc8], rax
mov eax, 0xcd2da3e2
jmp 0x14001256d
cmp eax, 0x4330c8f7
jne 0x14001256d
mov rax, qword [rsp + 0xf8]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x68], rax
mov eax, 0x8abdebaf
mov rsi, qword [rsp + 0x140]
jmp 0x14001222d
cmp eax, 0xe4b75a22
jne 0x140013a3f
mov eax, 0x2efb3e1a
jmp 0x14001222d
mov cl, byte [rsp + 0x31]
cmp byte [rsp + 0x32], 0
mov eax, 0xb819959b
mov edx, 0x865bfbd2
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x14001222d
mov eax, 0xa83507a4
jmp 0x14001222d
mov rax, qword [rsp + 0x68]
add rax, 8
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x148], rax
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x139aea49
mov ecx, 0xcfb4716c
jmp 0x140012220
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb41fb2d4
mov ecx, 0xa83507a4
jmp 0x140012220
mov eax, 0x7000c03f
jmp 0x14001222d
mov eax, 0x6ce6d884
jmp 0x14001222d
mov eax, 0xddbceef
jmp 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67daed89
mov ecx, 0x7000c03f
jmp 0x140012220
mov eax, 0xd549da41
xor esi, esi
jmp 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf3adfa31
mov ecx, 0xddbceef
jmp 0x140012220
cmp byte [rsp + 0x33], 0
mov eax, 0xaf7c27c5
mov ecx, 0xf56afbc9
cmovne eax, ecx
jmp 0x14001222d
mov rax, qword [rsp + 0x68]
mov eax, 0x68cd1f5
jmp 0x14001222d
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb41fb2d4
mov ecx, 0xbd7f264c
jmp 0x140012220
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67daed89
mov ecx, 0x89ef6ed0
jmp 0x140012220
cmp eax, 0xd549da41
jne 0x14001222d
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.140032600
mov rax, rsi
add rsp, 0x1a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret