Function at 0x14006dcb5
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x72a85303
pushf
not eax
add eax, 0xa956a80a
xor eax, 0xb4e3f8a6
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xfd412ce6
xor eax, 0xf8431496
rol eax, 0xf
popf
pushf
not eax
add eax, 0xfaa349d1
xor eax, 0xef60311c
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf37d817b
xor eax, 0xacef5b68
rol eax, 0xbc
popf
cmp eax, 0x20
jne 0x14006dd18
popf
pop rax
jmp 0x14006f1d3
cmp eax, 0
jne 0x14006dd27
popf
pop rax
jmp 0x14006df25
cmp eax, 3
jne 0x14006dd36
popf
pop rax
jmp 0x14006e0f8
cmp eax, 1
jne 0x14006dd45
popf
pop rax
jmp 0x14006e00a
cmp eax, 0xd
jne 0x14006dd54
popf
pop rax
jmp 0x14006e684
cmp eax, 0x1a
jne 0x14006dd63
popf
pop rax
jmp 0x14006eea4
cmp eax, 0xe
jne 0x14006dd72
popf
pop rax
jmp 0x14006e72d
cmp eax, 0xb
jne 0x14006dd81
popf
pop rax
jmp 0x14006e4e0
cmp eax, 0x19
jne 0x14006dd90
popf
pop rax
jmp 0x14006ee22
cmp eax, 8
jne 0x14006dd9f
popf
pop rax
jmp 0x14006e3d0
cmp eax, 0x1d
jne 0x14006ddae
popf
pop rax
jmp 0x14006f0b0
cmp eax, 0x17
jne 0x14006ddbd
popf
pop rax
jmp 0x14006ec8c
cmp eax, 0x1c
jne 0x14006ddcc
popf
pop rax
jmp 0x14006ef80
cmp eax, 0x12
jne 0x14006dddb
popf
pop rax
jmp 0x14006e995
cmp eax, 0x18
jne 0x14006ddea
popf
pop rax
jmp 0x14006ed0e
cmp eax, 0x11
jne 0x14006ddf9
popf
pop rax
jmp 0x14006e937
cmp eax, 0x1b
jne 0x14006de08
popf
pop rax
jmp 0x14006eeef
cmp eax, 0x21
jne 0x14006de17
popf
pop rax
jmp 0x14006f27d
cmp eax, 0x23
jne 0x14006de26
popf
pop rax
jmp 0x14006f358
cmp eax, 0x14
jne 0x14006de35
popf
pop rax
jmp 0x14006eb15
cmp eax, 0xf
jne 0x14006de44
popf
pop rax
jmp 0x14006e7c1
cmp eax, 0x13
jne 0x14006de53
popf
pop rax
jmp 0x14006ea5f
cmp eax, 0x15
jne 0x14006de62
popf
pop rax
jmp 0x14006eb98
cmp eax, 0x22
jne 0x14006de71
popf
pop rax
jmp 0x14006f2e7
cmp eax, 0x1e
jne 0x14006de80
popf
pop rax
jmp 0x14006f145
cmp eax, 0xc
jne 0x14006de8f
popf
pop rax
jmp 0x14006e5fd
cmp eax, 7
jne 0x14006de9e
popf
pop rax
jmp 0x14006e2e6
cmp eax, 5
jne 0x14006dead
popf
pop rax
jmp 0x14006e1ce
cmp eax, 0x1f
jne 0x14006debc
popf
pop rax
jmp 0x14006f17d
cmp eax, 0x10
jne 0x14006decb
popf
pop rax
jmp 0x14006e87c
cmp eax, 6
jne 0x14006deda
popf
pop rax
jmp 0x14006e252
cmp eax, 9
jne 0x14006dee9
popf
pop rax
jmp 0x14006e421
cmp eax, 4
jne 0x14006def8
popf
pop rax
jmp 0x14006e163
cmp eax, 0x16
jne 0x14006df07
popf
pop rax
jmp 0x14006ec54
cmp eax, 2
jne 0x14006df16
popf
pop rax
jmp 0x14006e05e
cmp eax, 0xa
jne 0x14006df25
popf
pop rax
jmp 0x14006e4d7
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rdi, rcx
lea rcx, [rsp + 0x20]
jmp 0x14006df3f
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp rdi, 0x40000000
jbe 0x14006dfb1
push rax
pushf
mov eax, 0xdc4dea9f
pushf
not eax
add eax, 0xac7f5f2b
xor eax, 0xd5c8ab98
rol eax, 0x83
popf
pushf
not eax
add eax, 0x93bea1ac
xor eax, 0xf81e6ebe
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x8f99f625
xor eax, 0xb28b20b7
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfbeb0eb1
xor eax, 0xb3016f46
rol eax, 0x37
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x90dbc27
pushf
not eax
add eax, 0x9b25fd54
xor eax, 0xd9e19e02
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xca983329
xor eax, 0xadef4436
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xb3f483cf
xor eax, 0xf0a6eda1
rol eax, 0x58
popf
pushf
not eax
add eax, 0xcff006fc
xor eax, 0xb0b4d523
rol eax, 0x70
popf
jmp 0x14006dd09
lea rax, [rdi - 0x40000000]
cmp r14, rax
cmovb r14, rax
push rax
pushf
mov eax, 0xc2eb830
pushf
not eax
add eax, 0xaffa6943
xor eax, 0xbcffc98c
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x904a6cdf
xor eax, 0x916bce73
rol eax, 0x18
popf
pushf
not eax
add eax, 0xf389cd0e
xor eax, 0xf777f12f
rol eax, 0x1c
popf
jmp 0x14006dd09
mov rsi, qword [0x14000a960]
lea r15, [rdi + 0x40000000]
cmp rcx, r15
cmovbe r15, rcx
sub r15, 0xfff
test rsi, rsi
je 0x14006e0c5
push rax
pushf
mov eax, 0x3212022e
pushf
not eax
add eax, 0x97d8d87c
xor eax, 0xe5cc6c3d
rol eax, 0xad
popf
pushf
not eax
add eax, 0x92d275fc
xor eax, 0xe5b41822
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x952f5739
xor eax, 0x8d51cf55
rol eax, 0xf7
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xe9c02aa4
pushf
not eax
add eax, 0xcd99f5ac
xor eax, 0xa6714916
rol eax, 0x22
popf
pushf
not eax
add eax, 0xf8628fce
xor eax, 0xe1c78788
rol eax, 0x10
popf
jmp 0x14006dd09
cmp rsi, r14
jb 0x14006e130
push rax
pushf
mov eax, 0xb3088922
pushf
not eax
add eax, 0xa8ccf50a
xor eax, 0xed7f98e6
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xf44502de
xor eax, 0xf2138ae7
rol eax, 0x5e
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xff3841a3
pushf
not eax
add eax, 0xf8e24a53
xor eax, 0x825d9184
rol eax, 6
popf
pushf
not eax
add eax, 0x9aad3bda
xor eax, 0x9cc6e8fb
rol eax, 0x76
popf
jmp 0x14006dd09
cmp rsi, r15
jae 0x14006e19b
push rax
pushf
mov eax, 0xeaa8b842
pushf
not eax
add eax, 0x85e8c480
xor eax, 0xe4b27ec7
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe1645c13
xor eax, 0xe4ef9d73
rol eax, 0xad
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xd80b2215
pushf
not eax
add eax, 0xbd206ada
xor eax, 0xa41100c4
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xddd0118a
xor eax, 0xcd8eff49
rol eax, 0xdb
popf
jmp 0x14006dd09
cmp qword [rsi + 8], 0
jne 0x14006e21f
push rax
pushf
mov eax, 0x9690b9b4
pushf
not eax
add eax, 0xcf34f03b
xor eax, 0xab8b0b6f
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xfc35bf9f
xor eax, 0x98826d26
rol eax, 0x96
popf
pushf
not eax
add eax, 0xeda90603
xor eax, 0xcb5b3e74
rol eax, 0x3f
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x8ad88789
pushf
not eax
add eax, 0xdf4e6af6
xor eax, 0xaf8f5b49
rol eax, 5
popf
pushf
not eax
add eax, 0xbbeeeebe
xor eax, 0xbc97e9ef
rol eax, 0x61
popf
jmp 0x14006dd09
mov rsi, qword [rsi]
test rsi, rsi
jne 0x14006e2a0
push rax
pushf
mov eax, 0xdf26721d
pushf
not eax
add eax, 0xa40aa231
xor eax, 0xf3c4b085
rol eax, 0x35
popf
pushf
not eax
add eax, 0xbaab449e
xor eax, 0x9f9971f5
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xa0870935
xor eax, 0x8f0edeb7
rol eax, 0x37
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xda682156
pushf
not eax
add eax, 0x99075a69
xor eax, 0xdf611040
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x8f034f31
xor eax, 0xbd26cc20
rol eax, 0xee
popf
pushf
not eax
add eax, 0xef85ed94
xor eax, 0x88baef7c
rol eax, 0xeb
popf
jmp 0x14006dd09
mov qword [rsp + 0xa0], rbx
mov rbx, rdi
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], r12
mov r12d, 0x7a66d66f
pushf
not r12d
add r12d, 0x839d9968
xor r12d, 0xc692dd8d
rol r12d, 0x2e
popf
pushf
not r12d
add r12d, 0x8d3b01b2
xor r12d, 0x95d53565
rol r12d, 0xc8
popf
pushf
not r12d
add r12d, 0x84de0508
xor r12d, 0xfc2d57f7
rol r12d, 0x53
popf
cmp rdi, r14
jb 0x14006e39d
push rax
pushf
mov eax, 0x7efd7714
pushf
not eax
add eax, 0xcbe21ca7
xor eax, 0xffc65731
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xceaa4a5b
xor eax, 0xb2d43484
rol eax, 0x60
popf
pushf
not eax
add eax, 0x82292b32
xor eax, 0x921d9c25
rol eax, 2
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xda2bd8ac
pushf
not eax
add eax, 0xb908a841
xor eax, 0xe78f1f98
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xb1557029
xor eax, 0x942b8822
rol eax, 0xed
popf
jmp 0x14006dd09
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xd54a87dd
pushf
not eax
add eax, 0xf621cc6f
xor eax, 0x9235960e
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xf247a6f4
xor eax, 0xe1b0d027
rol eax, 1
popf
pushf
not eax
add eax, 0xcbf419de
xor eax, 0xa1e198ed
rol eax, 0xf
popf
jmp 0x14006dd09
mov ebp, dword [rsp + 0x48]
mov rax, rbx
xor edx, edx
div rbp
sub rbx, rdx
sub rbx, rbp
cmp rbx, r14
jb 0x14006e47e
push rax
pushf
mov eax, 0xc37ad5cd
pushf
not eax
add eax, 0x8aeaaf02
xor eax, 0xaf0f4bf0
rol eax, 0x30
popf
pushf
not eax
add eax, 0xe836ca2b
xor eax, 0xecd546b9
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe43f5fb4
xor eax, 0xffc82acf
rol eax, 0x48
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xea1916da
pushf
not eax
add eax, 0x8f60f900
xor eax, 0x893fb4dc
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x9552d805
xor eax, 0xe3572fe6
rol eax, 0x32
popf
pushf
not eax
add eax, 0xf2af56ec
xor eax, 0xc138d0e6
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xa69b87c9
xor eax, 0xa9b98690
rol eax, 0x57
popf
jmp 0x14006dd09
nop word [rax + rax]
mov r8d, 0x25e228d9
pushf
not r8d
add r8d, 0xf2017d4f
xor r8d, 0x953e206e
rol r8d, 0x3d
popf
pushf
not r8d
add r8d, 0xf01e2c48
xor r8d, 0xefcf2449
rol r8d, 0x93
popf
pushf
not r8d
add r8d, 0xcee33a28
xor r8d, 0xf0a2b082
rol r8d, 0xc1
popf
pushf
not r8d
add r8d, 0xd3cfa955
xor r8d, 0xee15076d
rol r8d, 0xd0
popf
lea rdx, [rsp + 0x50]
mov rcx, rbx
jmp 0x14006e553
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x14006e5b7
push rax
pushf
mov eax, 0xa15870cf
pushf
not eax
add eax, 0x88819e65
xor eax, 0xb9ab6098
rol eax, 0xde
popf
pushf
not eax
add eax, 0x8701b8be
xor eax, 0xa0ca2f01
rol eax, 0x20
popf
pushf
not eax
add eax, 0xf0c87585
xor eax, 0x8287abee
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x9ff89ead
xor eax, 0xd299aabb
rol eax, 0xf3
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x8486588e
pushf
not eax
add eax, 0xc5f21f5a
xor eax, 0xde69a456
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xe6a06ee7
xor eax, 0x8d16a8ca
rol eax, 0x86
popf
pushf
not eax
add eax, 0xc1cc344a
xor eax, 0x920f6e23
rol eax, 0x80
popf
jmp 0x14006dd09
cmp dword [rsp + 0x70], 0x10000
je 0x14006e651
push rax
pushf
mov eax, 0x72ab3e73
pushf
not eax
add eax, 0xfda759f8
xor eax, 0xf9337f08
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x8dca551a
xor eax, 0x9b577ab4
rol eax, 0x46
popf
pushf
not eax
add eax, 0xc992f3de
xor eax, 0xe952a283
rol eax, 0x7b
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xeb7f73dc
pushf
not eax
add eax, 0xf8849465
xor eax, 0xac0c9f96
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xb3c0600d
xor eax, 0x92d47c38
rol eax, 0xae
popf
jmp 0x14006dd09
mov rbx, qword [rsp + 0x58]
cmp rbx, rbp
jb 0x14006e6e7
push rax
pushf
mov eax, 0x639de54b
pushf
not eax
add eax, 0xe50abaf7
xor eax, 0xeee94336
rol eax, 0x63
popf
pushf
not eax
add eax, 0xcdf1c036
xor eax, 0xcd36d10f
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xbfd8d595
xor eax, 0xaee7cff8
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xf11fcb63
xor eax, 0xaf03950b
rol eax, 0xe4
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x24273ab9
pushf
not eax
add eax, 0x8b11ab3f
xor eax, 0xab411dc8
rol eax, 0x55
popf
pushf
not eax
add eax, 0xd78abc13
xor eax, 0x8d3e8645
rol eax, 0x35
popf
pushf
not eax
add eax, 0xa57c7f5e
xor eax, 0x8968916d
rol eax, 0xd4
popf
jmp 0x14006dd09
sub rbx, rbp
cmp rbx, r14
jae 0x14006e78e
push rax
pushf
mov eax, 0x9bef048f
pushf
not eax
add eax, 0xe6acd8bf
xor eax, 0xa910e40f
rol eax, 0x15
popf
pushf
not eax
add eax, 0xa91ca76d
xor eax, 0x8cdfe77b
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8871cd75
xor eax, 0xf8f78a8a
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x99b12daf
xor eax, 0x9efe37bf
rol eax, 0xd3
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x5fafac8d
pushf
not eax
add eax, 0xee4d7f75
xor eax, 0xa99ac28c
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xf9e59b7e
xor eax, 0xc4e24245
rol eax, 0x49
popf
jmp 0x14006dd09
test rsi, rsi
jne 0x14006e823
push rax
pushf
mov eax, 0x96ab156e
pushf
not eax
add eax, 0xafe90733
xor eax, 0xac73222c
rol eax, 0x42
popf
pushf
not eax
add eax, 0xd60a39ec
xor eax, 0xcb13f2fc
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa95dec77
xor eax, 0x8ddc1ad9
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xb744caea
xor eax, 0xb1a3c193
rol eax, 0x97
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xeb65d730
pushf
not eax
add eax, 0xaa15f30d
xor eax, 0xf5b16f7f
rol eax, 0xc
popf
pushf
not eax
add eax, 0xc9fd60cd
xor eax, 0xca2757f5
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xc571154c
xor eax, 0x9ec2a295
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xa0e34ca3
xor eax, 0xead26854
rol eax, 0x36
popf
jmp 0x14006dd09
cmp rdi, r15
ja 0x14006e8de
push rax
pushf
mov eax, 0x220109f4
pushf
not eax
add eax, 0xbde0fe96
xor eax, 0xd4e92cf1
rol eax, 0x50
popf
pushf
not eax
add eax, 0xf458f8e7
xor eax, 0x8d498229
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xb9728882
xor eax, 0xf68b23dc
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xcbdf33e1
xor eax, 0x8f4fecac
rol eax, 0x3f
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xffa34b01
pushf
not eax
add eax, 0xfbbd8358
xor eax, 0xc4bfd5b5
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xcdbfe7f5
xor eax, 0xf979af41
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xa88c3a74
xor eax, 0xe79f8273
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x8e24330e
xor eax, 0xcf537524
rol eax, 0x94
popf
jmp 0x14006dd09
nop dword [rax + rax]
push rax
pushf
mov eax, 0x4554a0ca
pushf
not eax
add eax, 0xe67e4ab3
xor eax, 0xd001e4aa
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd93f70ca
xor eax, 0xeb46758e
rol eax, 0x79
popf
pushf
not eax
add eax, 0xbad6fd07
xor eax, 0x87fff95e
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa28d075d
xor eax, 0x9a931e9b
rol eax, 0x30
popf
jmp 0x14006dd09
mov ebp, dword [rsp + 0x48]
xor edx, edx
mov rax, rdi
mov ebx, ebp
div rbp
mov eax, ebp
sub rax, rdx
push rdi
not rdi
sub rax, rdi
pop rdi
sub rax, 1
mov rdi, rax
cmp rax, r15
ja 0x14006ea19
push rax
pushf
mov eax, 0x32cd2d7b
pushf
not eax
add eax, 0xdad904d4
xor eax, 0xacc12d75
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xbef2a9ea
xor eax, 0xd4ce27f0
rol eax, 0x67
popf
pushf
not eax
add eax, 0xaa2fd046
xor eax, 0xee0e20a5
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xdab17ffd
xor eax, 0x87374caa
rol eax, 0x86
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xf04a333e
pushf
not eax
add eax, 0xfc4ef5eb
xor eax, 0xbddf6842
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xceba7f73
xor eax, 0xa09fda8f
rol eax, 0x34
popf
pushf
not eax
add eax, 0xa0d6fe44
xor eax, 0xefa77e1b
rol eax, 0x9f
popf
jmp 0x14006dd09
mov r8d, 0x56901752
pushf
not r8d
add r8d, 0x9dbc6380
xor r8d, 0xc6ca6126
rol r8d, 0x79
popf
pushf
not r8d
add r8d, 0xa51f1f13
xor r8d, 0x8e1b62b8
rol r8d, 0xd8
popf
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x14006eaa0
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x14006eae2
push rax
pushf
mov eax, 0x1292ac8
pushf
not eax
add eax, 0xb1fcce15
xor eax, 0x95ec120d
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xdba60682
xor eax, 0xde1bfd52
rol eax, 0x61
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x525cd70d
pushf
not eax
add eax, 0xe98b8a89
xor eax, 0xf374bccf
rol eax, 0x44
popf
pushf
not eax
add eax, 0xf7f2d7ae
xor eax, 0xb341dc67
rol eax, 0xcd
popf
jmp 0x14006dd09
cmp dword [rsp + 0x70], 0x10000
je 0x14006eb52
push rax
pushf
mov eax, 0xebc64bb0
pushf
not eax
add eax, 0xa23268f4
xor eax, 0xfb22005a
rol eax, 0x63
popf
pushf
not eax
add eax, 0xf0f96a8c
xor eax, 0xac8881c1
rol eax, 0x47
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x296ad3a3
pushf
not eax
add eax, 0x91d240df
xor eax, 0x90473ba6
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xaa71eaa0
xor eax, 0xc05b7206
rol eax, 0x45
popf
pushf
not eax
add eax, 0xd5834c9b
xor eax, 0xc8108eea
rol eax, 0xc4
popf
jmp 0x14006dd09
xor edx, edx
lea edi, [rbp - 1]
add rdi, qword [rsp + 0x68]
add rdi, qword [rsp + 0x50]
mov rax, rdi
div rbx
sub rdi, rdx
cmp rdi, r15
jbe 0x14006ebfb
push rax
pushf
mov eax, 0x667e85e
pushf
not eax
add eax, 0xa6ab837a
xor eax, 0xd2b01a31
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xebab382d
xor eax, 0x891fcc22
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x85766cd2
xor eax, 0xfe933550
rol eax, 0xc9
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x7fd2e74e
pushf
not eax
add eax, 0xf2f1714e
xor eax, 0x8bf78cb4
rol eax, 0x87
popf
pushf
not eax
add eax, 0xb6093b44
xor eax, 0xcf28cf2a
rol eax, 0x45
popf
pushf
not eax
add eax, 0xfcc857d7
xor eax, 0xf610bd95
rol eax, 0xf
popf
pushf
not eax
add eax, 0xda06751d
xor eax, 0xfe2e0ec6
rol eax, 0xdb
popf
jmp 0x14006dd09
jmp 0x14006f2e7
test rbx, rbx
je 0x14006ecc8
push rax
pushf
mov eax, 0x3d057b92
pushf
not eax
add eax, 0xd423fdb9
xor eax, 0xf5d700c8
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xbd5bf241
xor eax, 0x8bf733c9
rol eax, 0xdb
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x4a687e94
pushf
not eax
add eax, 0xb3d732e9
xor eax, 0x8dfc13b8
rol eax, 0x59
popf
pushf
not eax
add eax, 0xa6eaa4b2
xor eax, 0xcf3fabc7
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd4c91f99
xor eax, 0xb5f47a88
rol eax, 0x5f
popf
jmp 0x14006dd09
mov r9d, r12d
mov edx, 0xf820ef7f
pushf
not edx
add edx, 0xd2342b9e
xor edx, 0xc7bf0d00
rol edx, 0x4d
popf
pushf
not edx
add edx, 0x84d0a8d2
xor edx, 0xfeade51c
rol edx, 0x7c
popf
mov r8d, 0x7cd85afe
pushf
not r8d
add r8d, 0x8e1b0ab0
xor r8d, 0xbfbf9e5f
rol r8d, 0xe
popf
pushf
not r8d
add r8d, 0xfbeb1bd1
xor r8d, 0xeb196aa7
rol r8d, 0xf8
popf
pushf
not r8d
add r8d, 0xb20b1608
xor r8d, 0xc719154b
rol r8d, 0x90
popf
pushf
not r8d
add r8d, 0xc55cfeb2
xor r8d, 0xbab6c1d3
rol r8d, 0xad
popf
mov rcx, rbx
jmp 0x14006edae
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x14006edef
push rax
pushf
mov eax, 0x4c7b25b
pushf
not eax
add eax, 0x8c87d251
xor eax, 0xab70dd5e
rol eax, 0x92
popf
pushf
not eax
add eax, 0xa3d33447
xor eax, 0x992681e7
rol eax, 0x5e
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x3a58d7fa
pushf
not eax
add eax, 0xd23cf7c4
xor eax, 0xf6451fcf
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xfd220af7
xor eax, 0xed3ea4dc
rol eax, 0x10
popf
jmp 0x14006dd09
cmp rbx, r14
jae 0x14006ee71
push rax
pushf
mov eax, 0x9ca79fd9
pushf
not eax
add eax, 0x91e4deae
xor eax, 0xa86a6474
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xee52c989
xor eax, 0x9d148ed2
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x95386bd6
xor eax, 0x80fbb44c
rol eax, 6
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xd561207c
pushf
not eax
add eax, 0xe8064390
xor eax, 0xf7073c73
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xfc1c323b
xor eax, 0xdcbbdc98
rol eax, 0x34
popf
jmp 0x14006dd09
jmp 0x14006e87c
test rdi, rdi
je 0x14006ef4d
push rax
pushf
mov eax, 0xc4d5882c
pushf
not eax
add eax, 0x97fb28ae
xor eax, 0xbc6edbbe
rol eax, 7
popf
pushf
not eax
add eax, 0x98aefb36
xor eax, 0xaa13ca2a
rol eax, 0x21
popf
pushf
not eax
add eax, 0xbba7231f
xor eax, 0xeec8b1eb
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xa62e6fc9
xor eax, 0xae9916fa
rol eax, 0x28
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xf2ef6a25
pushf
not eax
add eax, 0xc0ea7889
xor eax, 0xd0e74bea
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xc7ecbd2c
xor eax, 0xb5282e9c
rol eax, 0x65
popf
jmp 0x14006dd09
mov r9d, r12d
mov edx, 0x9a5c0097
pushf
not edx
add edx, 0x92ae9f92
xor edx, 0xe907fc03
rol edx, 0xce
popf
pushf
not edx
add edx, 0xf7881c80
xor edx, 0x9077c087
rol edx, 0xde
popf
pushf
not edx
add edx, 0xf2c63f9d
xor edx, 0xaf14b971
rol edx, 0xbb
popf
mov r8d, 0x3432de3e
pushf
not r8d
add r8d, 0xc94ce82a
xor r8d, 0xcb19d7ee
rol r8d, 0xd8
popf
pushf
not r8d
add r8d, 0xdb5198ad
xor r8d, 0xd47394ce
rol r8d, 0xb5
popf
mov rcx, rdi
jmp 0x14006f003
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x14006f057
push rax
pushf
mov eax, 0x6d5fc744
pushf
not eax
add eax, 0xca3f55dd
xor eax, 0xc09bc54e
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf0d1a101
xor eax, 0x94d75bd4
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xc94c2745
xor eax, 0xe0075819
rol eax, 0x42
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x108adeca
pushf
not eax
add eax, 0xf1dd9365
xor eax, 0xab205777
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xac267c0b
xor eax, 0x95b634ad
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xc7051e9f
xor eax, 0x9e9def66
rol eax, 4
popf
pushf
not eax
add eax, 0xcf986adb
xor eax, 0xd86f0471
rol eax, 0xd5
popf
jmp 0x14006dd09
cmp rdi, r15
jbe 0x14006f0ec
push rax
pushf
mov eax, 0xe3196ffd
pushf
not eax
add eax, 0xd405535e
xor eax, 0xe3d6af8d
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9293d7a2
xor eax, 0x9d182355
rol eax, 0x2e
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0x7c833738
pushf
not eax
add eax, 0x897891ba
xor eax, 0x8e320043
rol eax, 6
popf
pushf
not eax
add eax, 0xf0af4c86
xor eax, 0x9f3fb375
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xcd81ee00
xor eax, 0xd41c320b
rol eax, 0xef
popf
pushf
not eax
add eax, 0xce16a0ba
xor eax, 0xdc6b7144
rol eax, 0x83
popf
jmp 0x14006dd09
jmp 0x14006f2e7
xor edx, edx
lea rcx, [rsi + 0x40]
mov dword [rsi + 0x10], edx
nop dword [rax]
push rax
pushf
mov eax, 0xbb954e2b
pushf
not eax
add eax, 0xb362e310
xor eax, 0x9cd12b10
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x8591eb70
xor eax, 0xd212ab2e
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x8e2fbd0d
xor eax, 0xf7f203a7
rol eax, 0x83
popf
jmp 0x14006dd09
mov qword [rcx], rdx
mov rax, rcx
mov qword [rsi + 8], rcx
add r12, 0x40
add rcx, 0x40
mov rdx, rax
cmp r12, 0xfc0
jbe 0x14006f224
push rax
pushf
mov eax, 0x520211ed
pushf
not eax
add eax, 0xaa7efeed
xor eax, 0xd720e1f9
rol eax, 0x59
popf
pushf
not eax
add eax, 0xc8f2a09a
xor eax, 0x9bd3e87b
rol eax, 0xc3
popf
jmp 0x14006dd09
push rax
pushf
mov eax, 0xe64a2ef4
pushf
not eax
add eax, 0x876e3563
xor eax, 0xbe275ba6
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xfdd6a7c5
xor eax, 0x83c14f9f
rol eax, 0x67
popf
pushf
not eax
add eax, 0xe9f711ed
xor eax, 0xc69e4d98
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xdd3ed431
xor eax, 0x856f3119
rol eax, 0x16
popf
jmp 0x14006dd09
mov rax, qword [0x14000a960]
mov qword [rsi], rax
mov qword [0x14000a960], rsi
push rax
pushf
mov eax, 0x564cd578
pushf
not eax
add eax, 0xee870f15
xor eax, 0x93106cd8
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xb8dd0c3c
xor eax, 0x9a3981a7
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe8c4378b
xor eax, 0xafbd5a0f
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc43923ab
xor eax, 0xe01f30af
rol eax, 0x81
popf
jmp 0x14006dd09
mov r12, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
push rax
pushf
mov eax, 0x7536db35
pushf
not eax
add eax, 0xbab80303
xor eax, 0xaa2e5707
rol eax, 0x68
popf
pushf
not eax
add eax, 0xc87dd085
xor eax, 0xf3639305
rol eax, 0xa
popf
pushf
not eax
add eax, 0xc9df9b9e
xor eax, 0x9e54b805
rol eax, 0x34
popf
pushf
not eax
add eax, 0x930b84c3
xor eax, 0x93f2eba4
rol eax, 0x16
popf
jmp 0x14006dd09
mov rax, rsi
mov rsi, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r14
pop rdi
ret