Function at 0x14006e993
Capabilities:
Authenticate hmac
Encrypt data using chaskey
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x573820d8
pushf
not eax
add eax, 0x86668114
xor eax, 0xcde7f353
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xa5b39cc9
xor eax, 0x85bf37d2
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xa1dfc2bf
xor eax, 0xc57f81d4
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x8666a1a2
xor eax, 0x930e1e52
rol eax, 0xe1
popf
cmp eax, 0x20
jne 0x14006e9f6
popf
pop rax
jmp 0x14006ffc2
cmp eax, 0
jne 0x14006ea05
popf
pop rax
jmp 0x14006ec03
cmp eax, 3
jne 0x14006ea14
popf
pop rax
jmp 0x14006ede9
cmp eax, 1
jne 0x14006ea23
popf
pop rax
jmp 0x14006ece8
cmp eax, 0xd
jne 0x14006ea32
popf
pop rax
jmp 0x14006f421
cmp eax, 0x1a
jne 0x14006ea41
popf
pop rax
jmp 0x14006fc6d
cmp eax, 0xe
jne 0x14006ea50
popf
pop rax
jmp 0x14006f4a4
cmp eax, 0xb
jne 0x14006ea5f
popf
pop rax
jmp 0x14006f296
cmp eax, 0x19
jne 0x14006ea6e
popf
pop rax
jmp 0x14006fbd8
cmp eax, 8
jne 0x14006ea7d
popf
pop rax
jmp 0x14006f185
cmp eax, 0x1d
jne 0x14006ea8c
popf
pop rax
jmp 0x14006fe79
cmp eax, 0x17
jne 0x14006ea9b
popf
pop rax
jmp 0x14006f9bc
cmp eax, 0x1c
jne 0x14006eaaa
popf
pop rax
jmp 0x14006fd49
cmp eax, 0x12
jne 0x14006eab9
popf
pop rax
jmp 0x14006f687
cmp eax, 0x18
jne 0x14006eac8
popf
pop rax
jmp 0x14006fa77
cmp eax, 0x11
jne 0x14006ead7
popf
pop rax
jmp 0x14006f64f
cmp eax, 0x1b
jne 0x14006eae6
popf
pop rax
jmp 0x14006fca5
cmp eax, 0x21
jne 0x14006eaf5
popf
pop rax
jmp 0x14007007f
cmp eax, 0x23
jne 0x14006eb04
popf
pop rax
jmp 0x140070121
cmp eax, 0x14
jne 0x14006eb13
popf
pop rax
jmp 0x14006f833
cmp eax, 0xf
jne 0x14006eb22
popf
pop rax
jmp 0x14006f54b
cmp eax, 0x13
jne 0x14006eb31
popf
pop rax
jmp 0x14006f72b
cmp eax, 0x15
jne 0x14006eb40
popf
pop rax
jmp 0x14006f8c9
cmp eax, 0x22
jne 0x14006eb4f
popf
pop rax
jmp 0x1400700d6
cmp eax, 0x1e
jne 0x14006eb5e
popf
pop rax
jmp 0x14006fefb
cmp eax, 0xc
jne 0x14006eb6d
popf
pop rax
jmp 0x14006f374
cmp eax, 7
jne 0x14006eb7c
popf
pop rax
jmp 0x14006f06f
cmp eax, 5
jne 0x14006eb8b
popf
pop rax
jmp 0x14006ef0b
cmp eax, 0x1f
jne 0x14006eb9a
popf
pop rax
jmp 0x14006ff59
cmp eax, 0x10
jne 0x14006eba9
popf
pop rax
jmp 0x14006f5e0
cmp eax, 6
jne 0x14006ebb8
popf
pop rax
jmp 0x14006efb5
cmp eax, 9
jne 0x14006ebc7
popf
pop rax
jmp 0x14006f1ea
cmp eax, 4
jne 0x14006ebd6
popf
pop rax
jmp 0x14006ee54
cmp eax, 0x16
jne 0x14006ebe5
popf
pop rax
jmp 0x14006f95e
cmp eax, 2
jne 0x14006ebf4
popf
pop rax
jmp 0x14006ed4f
cmp eax, 0xa
jne 0x14006ec03
popf
pop rax
jmp 0x14006f28d
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rdi, rcx
lea rcx, [rsp + 0x20]
jmp 0x14006ec1d
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp rdi, 0x40000000
jbe 0x14006ec8f
push rax
pushf
mov eax, 0xee0f0962
pushf
not eax
add eax, 0x97a2a502
xor eax, 0xc9fdfef9
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x9b5a4cdb
xor eax, 0x88ee07d6
rol eax, 6
popf
pushf
not eax
add eax, 0xabe17127
xor eax, 0x9e1986f7
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x9210f0fd
xor eax, 0xc58987cf
rol eax, 0x26
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xa81fdd34
pushf
not eax
add eax, 0x872221cc
xor eax, 0x9299780e
rol eax, 0xa
popf
pushf
not eax
add eax, 0xa43ff7f2
xor eax, 0xf53a530c
rol eax, 0x59
popf
pushf
not eax
add eax, 0xa94362e1
xor eax, 0x91a26048
rol eax, 0x66
popf
pushf
not eax
add eax, 0x9c4c2adb
xor eax, 0x9547e570
rol eax, 0x32
popf
jmp 0x14006e9e7
lea rax, [rdi - 0x40000000]
cmp r14, rax
cmovb r14, rax
push rax
pushf
mov eax, 0xdf0a4f24
pushf
not eax
add eax, 0x91aa5315
xor eax, 0xd2dcf4a2
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x9399bff7
xor eax, 0xe76e43ac
rol eax, 0x54
popf
pushf
not eax
add eax, 0xc96de8ff
xor eax, 0xdbafa91f
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc4a75e6f
xor eax, 0xa6616f40
rol eax, 0x92
popf
jmp 0x14006e9e7
mov rsi, qword [0x14000a9a0]
lea r15, [rdi + 0x40000000]
cmp rcx, r15
cmovbe r15, rcx
sub r15, 0xfff
test rsi, rsi
je 0x14006edb6
push rax
pushf
mov eax, 0x23f1dbfe
pushf
not eax
add eax, 0xc357dea6
xor eax, 0xbefa1dd8
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xf9c4a884
xor eax, 0xfa7feca6
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x862a18f7
xor eax, 0xc22757ed
rol eax, 0xbb
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xeb91f074
pushf
not eax
add eax, 0xb3e23a5a
xor eax, 0x886d0312
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xfe4c0f65
xor eax, 0xe0f95194
rol eax, 0x87
popf
jmp 0x14006e9e7
cmp rsi, r14
jb 0x14006ee21
push rax
pushf
mov eax, 0xdaae55ee
pushf
not eax
add eax, 0x96cced7a
xor eax, 0xfd11eb8d
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x957ed345
xor eax, 0xb3ee8f65
rol eax, 0xa5
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x453b95ee
pushf
not eax
add eax, 0xe234da5f
xor eax, 0xbfe068ff
rol eax, 0xad
popf
pushf
not eax
add eax, 0xfa498aca
xor eax, 0xd4b7a67e
rol eax, 0x3e
popf
jmp 0x14006e9e7
cmp rsi, r15
jae 0x14006eeb2
push rax
pushf
mov eax, 0xfb99ae0d
pushf
not eax
add eax, 0xb58441b4
xor eax, 0xd0eabdad
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xefbca97b
xor eax, 0xa12533d1
rol eax, 7
popf
pushf
not eax
add eax, 0xb41af8e8
xor eax, 0xada30e96
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xcca8efbe
xor eax, 0xa6040af4
rol eax, 0xa6
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xcd12e9f4
pushf
not eax
add eax, 0xdb105c7b
xor eax, 0x99ff72ea
rol eax, 0xee
popf
pushf
not eax
add eax, 0x9d02bb73
xor eax, 0xb6d437b3
rol eax, 0x41
popf
pushf
not eax
add eax, 0xd9395ffb
xor eax, 0x910965c0
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xda197a06
xor eax, 0xf6de0acf
rol eax, 0x4a
popf
jmp 0x14006e9e7
cmp qword [rsi + 8], 0
jne 0x14006ef6f
push rax
pushf
mov eax, 0x9e3c15e
pushf
not eax
add eax, 0xf2faa264
xor eax, 0xb6dd5a2a
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf232bbd6
xor eax, 0xb8fc0077
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x9d42ccd9
xor eax, 0xb904a08c
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb2299c9f
xor eax, 0xfe125888
rol eax, 0x12
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x263bc813
pushf
not eax
add eax, 0xb7b60263
xor eax, 0xc7951b7e
rol eax, 0x57
popf
pushf
not eax
add eax, 0x91f2260f
xor eax, 0xba3ccc0d
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xac464f32
xor eax, 0xde2065a8
rol eax, 0x4d
popf
jmp 0x14006e9e7
mov rsi, qword [rsi]
test rsi, rsi
jne 0x14006f016
push rax
pushf
mov eax, 0x46bd61da
pushf
not eax
add eax, 0xb22003c7
xor eax, 0xcabe4318
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xe48e3f7b
xor eax, 0xaf124cf7
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xff4419e4
xor eax, 0xc5a26bff
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x898a6aed
xor eax, 0xe6bf292f
rol eax, 0xeb
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x3db6e738
pushf
not eax
add eax, 0xc6b71a28
xor eax, 0xa3d5cb93
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x879c68de
xor eax, 0x89f63574
rol eax, 0x26
popf
pushf
not eax
add eax, 0x8bf74889
xor eax, 0xfb63a70f
rol eax, 0x26
popf
pushf
not eax
add eax, 0x9729b94f
xor eax, 0xed88ab68
rol eax, 0x61
popf
jmp 0x14006e9e7
mov qword [rsp + 0xa0], rbx
mov rbx, rdi
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], r12
mov r12d, 0xb61874ee
pushf
not r12d
add r12d, 0xb521bd71
xor r12d, 0xc6070e89
rol r12d, 0x7f
popf
pushf
not r12d
add r12d, 0xd8efb5e6
xor r12d, 0x984c719b
rol r12d, 0xf4
popf
pushf
not r12d
add r12d, 0xcbf2407a
xor r12d, 0xe7aa6629
rol r12d, 0x2b
popf
pushf
not r12d
add r12d, 0xe4b1fe3d
xor r12d, 0xf7f5eaa0
rol r12d, 0x54
popf
cmp rdi, r14
jb 0x14006f152
push rax
pushf
mov eax, 0x807a3281
pushf
not eax
add eax, 0xaaf21ab0
xor eax, 0xb0c6faaf
rol eax, 0x75
popf
pushf
not eax
add eax, 0x86a282e8
xor eax, 0xafd20cea
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xf0b98406
xor eax, 0xe6427cdd
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x9bebdff4
xor eax, 0xa30b427d
rol eax, 0x67
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x9f011d2
pushf
not eax
add eax, 0xa1820f84
xor eax, 0xf5a5b53f
rol eax, 0xec
popf
pushf
not eax
add eax, 0xcd79e060
xor eax, 0x88f0da3c
rol eax, 0x77
popf
jmp 0x14006e9e7
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xe75269cc
pushf
not eax
add eax, 0xd33085e9
xor eax, 0x89c8ad7b
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x8308da9f
xor eax, 0xa54b4543
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc6b1862e
xor eax, 0xea659f76
rol eax, 0x86
popf
pushf
not eax
add eax, 0xcae3fe72
xor eax, 0xa317d152
rol eax, 0xa1
popf
jmp 0x14006e9e7
mov ebp, dword [rsp + 0x48]
mov rax, rbx
xor edx, edx
div rbp
sub rbx, rdx
sub rbx, rbp
cmp rbx, r14
jb 0x14006f234
push rax
pushf
mov eax, 0xd0fe322e
pushf
not eax
add eax, 0xba6bc63a
xor eax, 0xb0fa9c10
rol eax, 0x64
popf
pushf
not eax
add eax, 0x8e855a5e
xor eax, 0xf51488a8
rol eax, 0x15
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x7f7414ac
pushf
not eax
add eax, 0xbdd5248d
xor eax, 0xac7e04dd
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xe215aa6c
xor eax, 0xb3e42190
rol eax, 3
popf
pushf
not eax
add eax, 0xa544f70d
xor eax, 0xae46b873
rol eax, 0x15
popf
pushf
not eax
add eax, 0xfe1676c7
xor eax, 0xd79fe0b4
rol eax, 0x6f
popf
jmp 0x14006e9e7
nop word [rax + rax]
mov r8d, 0x77a7c896
pushf
not r8d
add r8d, 0xa97dd69e
xor r8d, 0xf6e6fd92
rol r8d, 0x88
popf
pushf
not r8d
add r8d, 0xc70510dc
xor r8d, 0xc09bebc6
rol r8d, 2
popf
pushf
not r8d
add r8d, 0xe90ebd68
xor r8d, 0x8ee4791e
rol r8d, 0xbc
popf
lea rdx, [rsp + 0x50]
mov rcx, rbx
jmp 0x14006f2f0
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x14006f32e
push rax
pushf
mov eax, 0x9515e653
pushf
not eax
add eax, 0xf690d63e
xor eax, 0xe45c9019
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8c30cc3a
xor eax, 0xf8f0de77
rol eax, 0x58
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xe5b4289
pushf
not eax
add eax, 0xf99d6d4f
xor eax, 0xaaae3e89
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd3d433f3
xor eax, 0xaf8b04d3
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9457337b
xor eax, 0xd8a8f19e
rol eax, 0x63
popf
jmp 0x14006e9e7
cmp dword [rsp + 0x70], 0x10000
je 0x14006f3c8
push rax
pushf
mov eax, 0xf001a82c
pushf
not eax
add eax, 0xbc424c65
xor eax, 0x8c5d037c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xeca455a8
xor eax, 0x99a778ff
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x87a46969
xor eax, 0x80276785
rol eax, 2
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x72844d50
pushf
not eax
add eax, 0xfc552310
xor eax, 0xe5c6851f
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xee46c247
xor eax, 0xe37bcd64
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xceb0830f
xor eax, 0xc358dfeb
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x872109e6
xor eax, 0xa85ab8b3
rol eax, 0x31
popf
jmp 0x14006e9e7
mov rbx, qword [rsp + 0x58]
cmp rbx, rbp
jb 0x14006f471
push rax
pushf
mov eax, 0x31caf857
pushf
not eax
add eax, 0x8f612724
xor eax, 0xcaa83def
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x8022809b
xor eax, 0x82ded0ef
rol eax, 0x99
popf
pushf
not eax
add eax, 0xe4f4a6e4
xor eax, 0xbb020a1b
rol eax, 0x70
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xf2091a73
pushf
not eax
add eax, 0x93307db3
xor eax, 0xf5d5e07b
rol eax, 4
popf
pushf
not eax
add eax, 0x8b561cbe
xor eax, 0xdc2de879
rol eax, 0x23
popf
jmp 0x14006e9e7
sub rbx, rbp
cmp rbx, r14
jae 0x14006f4f2
push rax
pushf
mov eax, 0x8a207522
pushf
not eax
add eax, 0xc6d6a32b
xor eax, 0xe6cdcdd5
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xf7df734e
xor eax, 0x9e6347f4
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xf21ce6d8
xor eax, 0xc3ce6063
rol eax, 0x3e
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xe2204883
pushf
not eax
add eax, 0xc129f2e8
xor eax, 0x824b691a
rol eax, 0xef
popf
pushf
not eax
add eax, 0x8ab5f8bf
xor eax, 0xab78fb2d
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xaa9faa1d
xor eax, 0xf5005aa7
rol eax, 0x65
popf
pushf
not eax
add eax, 0x87ce55e2
xor eax, 0xf0349f29
rol eax, 0x9d
popf
jmp 0x14006e9e7
test rsi, rsi
jne 0x14006f59a
push rax
pushf
mov eax, 0xca5c48c2
pushf
not eax
add eax, 0xf5cd82ad
xor eax, 0xa63940ea
rol eax, 0xd
popf
pushf
not eax
add eax, 0xe9ec6679
xor eax, 0xe398c8cf
rol eax, 0x94
popf
pushf
not eax
add eax, 0xa27cdf29
xor eax, 0xe27959df
rol eax, 0xf8
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xa3cbaa37
pushf
not eax
add eax, 0xb6acee55
xor eax, 0xcc6624d4
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x8a3fd932
xor eax, 0xa51fa09d
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xd4bc2198
xor eax, 0xfdad6a83
rol eax, 0x8c
popf
jmp 0x14006e9e7
cmp rdi, r15
ja 0x14006f61c
push rax
pushf
mov eax, 0x39d2e333
pushf
not eax
add eax, 0xd3990850
xor eax, 0xd377e84c
rol eax, 0x40
popf
pushf
not eax
add eax, 0xf993a4b9
xor eax, 0x8ce1d768
rol eax, 0x67
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x35c97a88
pushf
not eax
add eax, 0xd8f562ab
xor eax, 0xbb0ee667
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xc96c93c6
xor eax, 0xbb277980
rol eax, 0x9c
popf
jmp 0x14006e9e7
nop dword [rax + rax]
push rax
pushf
mov eax, 0x8e882e16
pushf
not eax
add eax, 0xd1d4b443
xor eax, 0xe45859b5
rol eax, 0x66
popf
pushf
not eax
add eax, 0x9cf1b1a3
xor eax, 0x97b9cb3b
rol eax, 3
popf
jmp 0x14006e9e7
mov ebp, dword [rsp + 0x48]
xor edx, edx
mov rax, rdi
mov ebx, ebp
div rbp
mov eax, ebp
sub rax, rdx
push rdi
not rdi
sub rax, rdi
pop rdi
sub rax, 1
mov rdi, rax
cmp rax, r15
ja 0x14006f6e5
push rax
pushf
mov eax, 0x417707a2
pushf
not eax
add eax, 0x85d76270
xor eax, 0xade609ed
rol eax, 5
popf
pushf
not eax
add eax, 0xdda8f663
xor eax, 0xacdfa245
rol eax, 0x14
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x334604db
pushf
not eax
add eax, 0x9326e07d
xor eax, 0x978cfbf4
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xbe0ec228
xor eax, 0xd717ab4d
rol eax, 0x36
popf
pushf
not eax
add eax, 0xc368600a
xor eax, 0xe73eb81f
rol eax, 0xef
popf
jmp 0x14006e9e7
mov r8d, 0x856d18c8
pushf
not r8d
add r8d, 0xa37705e9
xor r8d, 0xfe316f2a
rol r8d, 0x51
popf
pushf
not r8d
add r8d, 0xbdb72bd6
xor r8d, 0xe054fd66
rol r8d, 0xad
popf
pushf
not r8d
add r8d, 0xadd6830b
xor r8d, 0xfb1037cc
rol r8d, 0x73
popf
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x14006f785
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x14006f7da
push rax
pushf
mov eax, 0xd66856a8
pushf
not eax
add eax, 0x8f0202ff
xor eax, 0x948ee41b
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x86274edb
xor eax, 0x88472f95
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xdffc17ab
xor eax, 0x8f225cff
rol eax, 0x37
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x6ad2087c
pushf
not eax
add eax, 0x97e866d7
xor eax, 0x8e3e3d8a
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xbd525184
xor eax, 0xbe233ec2
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x98c8ecfd
xor eax, 0xffa6e365
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xd27ee28f
xor eax, 0xd4501d35
rol eax, 0x6f
popf
jmp 0x14006e9e7
cmp dword [rsp + 0x70], 0x10000
je 0x14006f883
push rax
pushf
mov eax, 0x43598149
pushf
not eax
add eax, 0xc2f2c41f
xor eax, 0x9bdaa773
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xdd8bbeee
xor eax, 0xf29e1c99
rol eax, 0xff
popf
pushf
not eax
add eax, 0xfeb25963
xor eax, 0xa4fabf7b
rol eax, 0x12
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xc11ea837
pushf
not eax
add eax, 0xc51fa459
xor eax, 0xf26361b7
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xa77cf828
xor eax, 0x851ed8eb
rol eax, 0x74
popf
pushf
not eax
add eax, 0x90d9ecd2
xor eax, 0xb0853b9c
rol eax, 0xe4
popf
jmp 0x14006e9e7
xor edx, edx
lea edi, [rbp - 1]
add rdi, qword [rsp + 0x68]
add rdi, qword [rsp + 0x50]
mov rax, rdi
div rbx
sub rdi, rdx
cmp rdi, r15
jbe 0x14006f92b
push rax
pushf
mov eax, 0x9119cf37
pushf
not eax
add eax, 0xed0aa158
xor eax, 0xe3f57b7c
rol eax, 1
popf
pushf
not eax
add eax, 0x9eca7cef
xor eax, 0x9e116692
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xee3812ce
xor eax, 0x912ec36c
rol eax, 0xad
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xb59cf2cd
pushf
not eax
add eax, 0xb159f484
xor eax, 0xced5652a
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xc99b77c9
xor eax, 0xaf2aa227
rol eax, 5
popf
jmp 0x14006e9e7
jmp 0x1400700d6
test rbx, rbx
je 0x14006fa1e
push rax
pushf
mov eax, 0x25422952
pushf
not eax
add eax, 0xdfd5e168
xor eax, 0xa81b2d92
rol eax, 0x77
popf
pushf
not eax
add eax, 0xad4e5e05
xor eax, 0xc1937b9a
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xf0317828
xor eax, 0x9c1a363d
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe4d5b01c
xor eax, 0xe2ef5936
rol eax, 8
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x6ccb6a07
pushf
not eax
add eax, 0xa64a8418
xor eax, 0x9c4754d9
rol eax, 0x72
popf
pushf
not eax
add eax, 0x9df8d1ea
xor eax, 0xa9e3a2a1
rol eax, 0x32
popf
pushf
not eax
add eax, 0xa6633e2b
xor eax, 0xa05fb140
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xe4b35df9
xor eax, 0xa0c182e6
rol eax, 0x98
popf
jmp 0x14006e9e7
mov r9d, r12d
mov edx, 0xc9e8d00a
pushf
not edx
add edx, 0x904b040d
xor edx, 0xcfed5f45
rol edx, 0x83
popf
pushf
not edx
add edx, 0x9770b8e9
xor edx, 0xd79a0325
rol edx, 1
popf
pushf
not edx
add edx, 0xdc05359f
xor edx, 0xa1267a33
rol edx, 0xe6
popf
mov r8d, 0xf930376a
pushf
not r8d
add r8d, 0x9ec4b4be
xor r8d, 0xe60096fe
rol r8d, 0x2d
popf
pushf
not r8d
add r8d, 0xf5076065
xor r8d, 0xb0e872eb
rol r8d, 0x8e
popf
pushf
not r8d
add r8d, 0xf6752608
xor r8d, 0x97b0972d
rol r8d, 0xe8
popf
pushf
not r8d
add r8d, 0x854ebe7b
xor r8d, 0xe7123a68
rol r8d, 0x7d
popf
mov rcx, rbx
jmp 0x14006fb2b
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x14006fb7f
push rax
pushf
mov eax, 0xfb980558
pushf
not eax
add eax, 0x8f90d8d1
xor eax, 0xe6d4beea
rol eax, 0x78
popf
pushf
not eax
add eax, 0xa47424bc
xor eax, 0x9ea41962
rol eax, 0x39
popf
pushf
not eax
add eax, 0xdf603c93
xor eax, 0x8642a6d0
rol eax, 0xf3
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xb6629c09
pushf
not eax
add eax, 0x8187cb44
xor eax, 0xbbe3fda7
rol eax, 0xce
popf
pushf
not eax
add eax, 0x9096400e
xor eax, 0xebb9b53c
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xfb70f7b0
xor eax, 0x914af281
rol eax, 0x50
popf
pushf
not eax
add eax, 0x87be7097
xor eax, 0xc1ef90ed
rol eax, 0xfb
popf
jmp 0x14006e9e7
cmp rbx, r14
jae 0x14006fc3a
push rax
pushf
mov eax, 0xe56fa203
pushf
not eax
add eax, 0x8e5a7804
xor eax, 0xac15e5ba
rol eax, 0x77
popf
pushf
not eax
add eax, 0x95979c0f
xor eax, 0x993b8b52
rol eax, 2
popf
pushf
not eax
add eax, 0x96048b16
xor eax, 0xded20366
rol eax, 0xef
popf
pushf
not eax
add eax, 0xf369686c
xor eax, 0xdf997f9f
rol eax, 0xb
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x44556b89
pushf
not eax
add eax, 0xfe10c621
xor eax, 0xd1d81d7c
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xff590145
xor eax, 0xff6d98e1
rol eax, 0x65
popf
jmp 0x14006e9e7
jmp 0x14006f5e0
test rdi, rdi
je 0x14006fd03
push rax
pushf
mov eax, 0xde205e23
pushf
not eax
add eax, 0x9bf36005
xor eax, 0xd24be809
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xb98b7d89
xor eax, 0xbf59d963
rol eax, 0x37
popf
pushf
not eax
add eax, 0xba58527d
xor eax, 0xe8d9ab70
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf9849afb
xor eax, 0xc10cbef7
rol eax, 0x66
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x9dbbf132
pushf
not eax
add eax, 0xd065ffa8
xor eax, 0xd9893dd8
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa56c90b2
xor eax, 0x97aef42d
rol eax, 0x80
popf
pushf
not eax
add eax, 0xad2f56eb
xor eax, 0x90f3e7d5
rol eax, 0x62
popf
jmp 0x14006e9e7
mov r9d, r12d
mov edx, 0xe11fcef4
pushf
not edx
add edx, 0xd91b053b
xor edx, 0xb5db3c39
rol edx, 0xdf
popf
pushf
not edx
add edx, 0x9999ca51
xor edx, 0xf7b6d284
rol edx, 0x48
popf
pushf
not edx
add edx, 0xf7fcb872
xor edx, 0xbce52362
rol edx, 0xf2
popf
mov r8d, 0x21c2879b
pushf
not r8d
add r8d, 0xa51e4877
xor r8d, 0xd8257f53
rol r8d, 0x7b
popf
pushf
not r8d
add r8d, 0xfba0939c
xor r8d, 0xb8c29d9f
rol r8d, 0x5b
popf
mov rcx, rdi
jmp 0x14006fdcc
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x14006fe33
push rax
pushf
mov eax, 0xa4c466
pushf
not eax
add eax, 0xe07d411b
xor eax, 0xbd05e1e1
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xbb8fe08b
xor eax, 0xbfe5d545
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf337883f
xor eax, 0xb0d2a597
rol eax, 0xe
popf
pushf
not eax
add eax, 0x8914d8be
xor eax, 0xd535dd91
rol eax, 0x6c
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0xaf07e612
pushf
not eax
add eax, 0xa44c55ee
xor eax, 0xf57e5171
rol eax, 0x82
popf
pushf
not eax
add eax, 0xdb247bc5
xor eax, 0xfaec7487
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xcba0ea35
xor eax, 0xa71d8a5e
rol eax, 0x45
popf
jmp 0x14006e9e7
cmp rdi, r15
jbe 0x14006fec8
push rax
pushf
mov eax, 0xc51261e0
pushf
not eax
add eax, 0xb9622b03
xor eax, 0xa209f46f
rol eax, 0x46
popf
pushf
not eax
add eax, 0xf3ed0b6a
xor eax, 0xcde75502
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x9021647a
xor eax, 0xd4dc388b
rol eax, 0x12
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x9fbc7993
pushf
not eax
add eax, 0xc0fa914c
xor eax, 0xfccec805
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xd424307c
xor eax, 0xe530297e
rol eax, 0xf2
popf
jmp 0x14006e9e7
jmp 0x1400700d6
xor edx, edx
lea rcx, [rsi + 0x40]
mov dword [rsi + 0x10], edx
nop dword [rax]
push rax
pushf
mov eax, 0x5772b7c7
pushf
not eax
add eax, 0x8c53d819
xor eax, 0xf54b676b
rol eax, 0x42
popf
pushf
not eax
add eax, 0xf98304c6
xor eax, 0xc0786ab7
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xaaabc380
xor eax, 0xdc62a050
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xa2624cee
xor eax, 0x87c98bc1
rol eax, 0xbf
popf
jmp 0x14006e9e7
mov qword [rcx], rdx
mov rax, rcx
mov qword [rsi + 8], rcx
add r12, 0x40
add rcx, 0x40
mov rdx, rax
cmp r12, 0xfc0
jbe 0x140070026
push rax
pushf
mov eax, 0x3b62211c
pushf
not eax
add eax, 0xc7ce43a0
xor eax, 0x96322993
rol eax, 0x32
popf
pushf
not eax
add eax, 0xe1137f94
xor eax, 0xba0e29d3
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xedca1d17
xor eax, 0xf44c416f
rol eax, 0x2e
popf
jmp 0x14006e9e7
push rax
pushf
mov eax, 0x2738f253
pushf
not eax
add eax, 0xe3c3cb97
xor eax, 0xb07bf97e
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xb9f347e3
xor eax, 0xe4d4f796
rol eax, 0x38
popf
pushf
not eax
add eax, 0xe0b4add1
xor eax, 0x9b1d5896
rol eax, 0x12
popf
pushf
not eax
add eax, 0xfd938a52
xor eax, 0xba19e25a
rol eax, 0x8e
popf
jmp 0x14006e9e7
mov rax, qword [0x14000a9a0]
mov qword [rsi], rax
mov qword [0x14000a9a0], rsi
push rax
pushf
mov eax, 0xb4370508
pushf
not eax
add eax, 0xe119fa19
xor eax, 0xacd3d665
rol eax, 0x72
popf
pushf
not eax
add eax, 0x88b89c62
xor eax, 0xf30c88ba
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xa9bb2dce
xor eax, 0x969421ff
rol eax, 0x5c
popf
jmp 0x14006e9e7
mov r12, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
push rax
pushf
mov eax, 0x723e9541
pushf
not eax
add eax, 0xd486535a
xor eax, 0xd0dc32c5
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xe18bbaf8
xor eax, 0xab38494d
rol eax, 0xc1
popf
jmp 0x14006e9e7
mov rax, rsi
mov rsi, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r14
pop rdi
ret