Function at 0x14009f7ee
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0xa96b30d4
pushf
not eax
add eax, 0xa77a2722
xor eax, 0xcb4359b1
rol eax, 0x78
popf
pushf
not eax
add eax, 0x82a04fcb
xor eax, 0xee62bd2d
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xeea6fc45
xor eax, 0xf7c7c11b
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xd25093f0
xor eax, 0xbe4f302f
rol eax, 0x78
popf
cmp eax, 0x20
jne 0x14009f851
popf
pop rax
jmp 0x1400a0d28
cmp eax, 0
jne 0x14009f860
popf
pop rax
jmp 0x14009fa5e
cmp eax, 3
jne 0x14009f86f
popf
pop rax
jmp 0x14009fc1e
cmp eax, 1
jne 0x14009f87e
popf
pop rax
jmp 0x14009fb1d
cmp eax, 0xd
jne 0x14009f88d
popf
pop rax
jmp 0x1400a01a5
cmp eax, 0x1a
jne 0x14009f89c
popf
pop rax
jmp 0x1400a09de
cmp eax, 0xe
jne 0x14009f8ab
popf
pop rax
jmp 0x1400a0228
cmp eax, 0xb
jne 0x14009f8ba
popf
pop rax
jmp 0x1400a0001
cmp eax, 0x19
jne 0x14009f8c9
popf
pop rax
jmp 0x1400a0936
cmp eax, 8
jne 0x14009f8d8
popf
pop rax
jmp 0x14009ff3c
cmp eax, 0x1d
jne 0x14009f8e7
popf
pop rax
jmp 0x1400a0bf2
cmp eax, 0x17
jne 0x14009f8f6
popf
pop rax
jmp 0x1400a0780
cmp eax, 0x1c
jne 0x14009f905
popf
pop rax
jmp 0x1400a0aa7
cmp eax, 0x12
jne 0x14009f914
popf
pop rax
jmp 0x1400a041e
cmp eax, 0x18
jne 0x14009f923
popf
pop rax
jmp 0x1400a0815
cmp eax, 0x11
jne 0x14009f932
popf
pop rax
jmp 0x1400a03c0
cmp eax, 0x1b
jne 0x14009f941
popf
pop rax
jmp 0x1400a0a16
cmp eax, 0x21
jne 0x14009f950
popf
pop rax
jmp 0x1400a0de5
cmp eax, 0x23
jne 0x14009f95f
popf
pop rax
jmp 0x1400a0ead
cmp eax, 0x14
jne 0x14009f96e
popf
pop rax
jmp 0x1400a05d0
cmp eax, 0xf
jne 0x14009f97d
popf
pop rax
jmp 0x1400a02bc
cmp eax, 0x13
jne 0x14009f98c
popf
pop rax
jmp 0x1400a04e8
cmp eax, 0x15
jne 0x14009f99b
popf
pop rax
jmp 0x1400a0679
cmp eax, 0x22
jne 0x14009f9aa
popf
pop rax
jmp 0x1400a0e4f
cmp eax, 0x1e
jne 0x14009f9b9
popf
pop rax
jmp 0x1400a0c74
cmp eax, 0xc
jne 0x14009f9c8
popf
pop rax
jmp 0x1400a00e5
cmp eax, 7
jne 0x14009f9d7
popf
pop rax
jmp 0x14009fe58
cmp eax, 5
jne 0x14009f9e6
popf
pop rax
jmp 0x14009fd40
cmp eax, 0x1f
jne 0x14009f9f5
popf
pop rax
jmp 0x1400a0cd2
cmp eax, 0x10
jne 0x14009fa04
popf
pop rax
jmp 0x1400a033e
cmp eax, 6
jne 0x14009fa13
popf
pop rax
jmp 0x14009fdc4
cmp eax, 9
jne 0x14009fa22
popf
pop rax
jmp 0x14009ff7b
cmp eax, 4
jne 0x14009fa31
popf
pop rax
jmp 0x14009fc9c
cmp eax, 0x16
jne 0x14009fa40
popf
pop rax
jmp 0x1400a0722
cmp eax, 2
jne 0x14009fa4f
popf
pop rax
jmp 0x14009fb5e
cmp eax, 0xa
jne 0x14009fa5e
popf
pop rax
jmp 0x14009fff8
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rdi, rcx
lea rcx, [rsp + 0x20]
jmp 0x14009fa78
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp rdi, 0x40000000
jbe 0x14009faea
push rax
pushf
mov eax, 0x4aa85ce8
pushf
not eax
add eax, 0xfac24a17
xor eax, 0xaeb87251
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x88e5ff08
xor eax, 0xd5837666
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xc850742c
xor eax, 0xf9f1820b
rol eax, 0x71
popf
pushf
not eax
add eax, 0x80a37580
xor eax, 0xf1f6dd6d
rol eax, 0xa7
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x817f0e55
pushf
not eax
add eax, 0xb6c99d84
xor eax, 0xa7caae83
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xba61e180
xor eax, 0xacf54d6e
rol eax, 0x3d
popf
jmp 0x14009f842
lea rax, [rdi - 0x40000000]
cmp r14, rax
cmovb r14, rax
push rax
pushf
mov eax, 0x60d6d62e
pushf
not eax
add eax, 0x9fce6de2
xor eax, 0xa0c15695
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa7f731c9
xor eax, 0xf1fdfcd7
rol eax, 0x2d
popf
jmp 0x14009f842
mov rsi, qword [0x140013bc8]
lea r15, [rdi + 0x40000000]
cmp rcx, r15
cmovbe r15, rcx
sub r15, 0xfff
test rsi, rsi
je 0x14009fbc5
push rax
pushf
mov eax, 0xbe261802
pushf
not eax
add eax, 0xd7bed4e8
xor eax, 0xe41c961d
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xdb40f64f
xor eax, 0xc4e8efb1
rol eax, 0x81
popf
pushf
not eax
add eax, 0xb821c1c8
xor eax, 0xffb3b985
rol eax, 0x47
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x6cdde71f
pushf
not eax
add eax, 0xb9f7f8ed
xor eax, 0xca5e7a2a
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x8238ddce
xor eax, 0x83fa418b
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xed7feb04
xor eax, 0xc1f72018
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x84686a10
xor eax, 0xf0c2c4ef
rol eax, 0x9c
popf
jmp 0x14009f842
cmp rsi, r14
jb 0x14009fc69
push rax
pushf
mov eax, 0xda766037
pushf
not eax
add eax, 0xb46de6ef
xor eax, 0xc08e0ecf
rol eax, 0xe
popf
pushf
not eax
add eax, 0x83393d05
xor eax, 0xd903437a
rol eax, 0x78
popf
pushf
not eax
add eax, 0xd5bff8a6
xor eax, 0xfac7e030
rol eax, 0xe9
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xb9b5fcf8
pushf
not eax
add eax, 0xc4d7e04a
xor eax, 0x85a4b6cf
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xca0a938d
xor eax, 0xf9b539a4
rol eax, 0x86
popf
jmp 0x14009f842
cmp rsi, r15
jae 0x14009fce7
push rax
pushf
mov eax, 0x4f3f0861
pushf
not eax
add eax, 0xf595b418
xor eax, 0xef20d9cf
rol eax, 0x22
popf
pushf
not eax
add eax, 0xb41a2aa5
xor eax, 0xf8b3c3b8
rol eax, 0x49
popf
pushf
not eax
add eax, 0xe4f6d645
xor eax, 0xfda4c757
rol eax, 0xae
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xa4aaaa27
pushf
not eax
add eax, 0x9c83872b
xor eax, 0xc60aa3b2
rol eax, 0x73
popf
pushf
not eax
add eax, 0xcea4d1a1
xor eax, 0xb7f1a7e0
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xf1ff22b3
xor eax, 0xb8ef14f1
rol eax, 4
popf
pushf
not eax
add eax, 0xc643bc7a
xor eax, 0x87b8215d
rol eax, 0xe7
popf
jmp 0x14009f842
cmp qword [rsi + 8], 0
jne 0x14009fd7e
push rax
pushf
mov eax, 0x28869f1
pushf
not eax
add eax, 0xcbf95e46
xor eax, 0xbc35cd29
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xe1b912d2
xor eax, 0xf6cee906
rol eax, 0x6b
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x5cc78c19
pushf
not eax
add eax, 0xf15a6562
xor eax, 0x888c1d7f
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xe304f050
xor eax, 0x99a8518b
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb9f5f4d3
xor eax, 0xad00b53b
rol eax, 0x8b
popf
jmp 0x14009f842
mov rsi, qword [rsi]
test rsi, rsi
jne 0x14009fe12
push rax
pushf
mov eax, 0x27e7b16
pushf
not eax
add eax, 0xd6a52011
xor eax, 0xabb61ae5
rol eax, 0xff
popf
pushf
not eax
add eax, 0xb93f414d
xor eax, 0x98a2f505
rol eax, 0x78
popf
pushf
not eax
add eax, 0xdac20dde
xor eax, 0xac6039c6
rol eax, 0x67
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x6dab3e69
pushf
not eax
add eax, 0xd23e6817
xor eax, 0xb1500999
rol eax, 0x75
popf
pushf
not eax
add eax, 0xb55abc30
xor eax, 0xdcd61b93
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x9b7ff6f2
xor eax, 0xd3219590
rol eax, 0xef
popf
jmp 0x14009f842
mov qword [rsp + 0xa0], rbx
mov rbx, rdi
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], r12
mov r12d, 0x989e79dc
pushf
not r12d
add r12d, 0xd54cf8ed
xor r12d, 0x873d041f
rol r12d, 0x38
popf
pushf
not r12d
add r12d, 0xc6cf1ebc
xor r12d, 0xb3138b40
rol r12d, 0xcc
popf
cmp rdi, r14
jb 0x14009fef6
push rax
pushf
mov eax, 0x379094e6
pushf
not eax
add eax, 0xab6e3f66
xor eax, 0x818f58b2
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xca665df9
xor eax, 0x8cef6ce1
rol eax, 0x82
popf
pushf
not eax
add eax, 0xde84dea1
xor eax, 0x85d23491
rol eax, 0x2d
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xfccee79d
pushf
not eax
add eax, 0xc9a3120f
xor eax, 0xcad3cfdc
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xbe2c5645
xor eax, 0x9c8aa69b
rol eax, 0x61
popf
pushf
not eax
add eax, 0xbe263bbd
xor eax, 0xbb623d93
rol eax, 0x6c
popf
jmp 0x14009f842
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x2b1366c7
pushf
not eax
add eax, 0xb08001bd
xor eax, 0xdfee23a8
rol eax, 0xa
popf
pushf
not eax
add eax, 0xbbf16e14
xor eax, 0xb10bf88d
rol eax, 0x9e
popf
jmp 0x14009f842
mov ebp, dword [rsp + 0x48]
mov rax, rbx
xor edx, edx
div rbp
sub rbx, rdx
sub rbx, rbp
cmp rbx, r14
jb 0x14009ffc5
push rax
pushf
mov eax, 0x4faf23ee
pushf
not eax
add eax, 0x8d954b1e
xor eax, 0x8f1a04dc
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x84a26772
xor eax, 0x97e3fe75
rol eax, 0x34
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x5603ccda
pushf
not eax
add eax, 0xa4a13493
xor eax, 0x8cb002af
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xd8fe5504
xor eax, 0xe0c0a861
rol eax, 0x8d
popf
jmp 0x14009f842
nop word [rax + rax]
mov r8d, 0x148d1d04
pushf
not r8d
add r8d, 0xe55ea9e5
xor r8d, 0xaa8a5865
rol r8d, 0x7c
popf
pushf
not r8d
add r8d, 0xc855cbdb
xor r8d, 0x84df6001
rol r8d, 5
popf
pushf
not r8d
add r8d, 0x9adda6cb
xor r8d, 0xd979044c
rol r8d, 0xc3
popf
pushf
not r8d
add r8d, 0xa56521dd
xor r8d, 0x98aea1d6
rol r8d, 0x87
popf
lea rdx, [rsp + 0x50]
mov rcx, rbx
jmp 0x1400a0074
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x1400a00b2
push rax
pushf
mov eax, 0xf74d7cb6
pushf
not eax
add eax, 0xb47adbba
xor eax, 0xa696d06a
rol eax, 0x47
popf
pushf
not eax
add eax, 0xddbc9f19
xor eax, 0xfff4ea4b
rol eax, 0x9c
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xadcecd8e
pushf
not eax
add eax, 0xd1baeec3
xor eax, 0xd50fd468
rol eax, 0xf
popf
pushf
not eax
add eax, 0xc7d0b239
xor eax, 0xcd3c36c7
rol eax, 0xcf
popf
jmp 0x14009f842
cmp dword [rsp + 0x70], 0x10000
je 0x1400a014c
push rax
pushf
mov eax, 0x99767174
pushf
not eax
add eax, 0xf5df816b
xor eax, 0xd66b71ef
rol eax, 0xed
popf
pushf
not eax
add eax, 0x896ae1ca
xor eax, 0xb7a4cb86
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x863ad13c
xor eax, 0xf9fd368b
rol eax, 0x77
popf
pushf
not eax
add eax, 0xc56f05e0
xor eax, 0xeb7597a5
rol eax, 0x38
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x7f6bcd3f
pushf
not eax
add eax, 0x90916009
xor eax, 0xba5f80fe
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x90baa327
xor eax, 0x9a22839f
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xe43bd433
xor eax, 0x986cc0f7
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xfa58e813
xor eax, 0xe452f796
rol eax, 0xd2
popf
jmp 0x14009f842
mov rbx, qword [rsp + 0x58]
cmp rbx, rbp
jb 0x1400a01f5
push rax
pushf
mov eax, 0x636ceb97
pushf
not eax
add eax, 0x9140d250
xor eax, 0x9c4d1e46
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xd78d1e2e
xor eax, 0xff6e3b4e
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xeb81c868
xor eax, 0xe8ba82f3
rol eax, 0x48
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xb41084b2
pushf
not eax
add eax, 0xcec0848b
xor eax, 0xd779e174
rol eax, 0x95
popf
pushf
not eax
add eax, 0x93c09975
xor eax, 0xa026deb1
rol eax, 0x67
popf
jmp 0x14009f842
sub rbx, rbp
cmp rbx, r14
jae 0x1400a0276
push rax
pushf
mov eax, 0xa177736b
pushf
not eax
add eax, 0x86ecd844
xor eax, 0xb9f8054c
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa79eb772
xor eax, 0x8bd7530d
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xbc835a03
xor eax, 0xe5702274
rol eax, 0x91
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x662dd39c
pushf
not eax
add eax, 0xf344ec6e
xor eax, 0xc9dfafc1
rol eax, 0x20
popf
pushf
not eax
add eax, 0xf06b97e9
xor eax, 0xb8e4a3b7
rol eax, 0x13
popf
pushf
not eax
add eax, 0xce0252f3
xor eax, 0xb28c38c0
rol eax, 0x31
popf
jmp 0x14009f842
test rsi, rsi
jne 0x1400a030b
push rax
pushf
mov eax, 0x37d12b48
pushf
not eax
add eax, 0xba91e86f
xor eax, 0xf7792c97
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xf7871370
xor eax, 0xe2dadb04
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x9fc5f658
xor eax, 0xcd2ca2b4
rol eax, 0x91
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x8f53a959
pushf
not eax
add eax, 0xf7346a40
xor eax, 0xd2646287
rol eax, 0xda
popf
pushf
not eax
add eax, 0xc7cd6fe8
xor eax, 0x80f75d59
rol eax, 0x42
popf
jmp 0x14009f842
cmp rdi, r15
ja 0x1400a038d
push rax
pushf
mov eax, 0xf59a7c4f
pushf
not eax
add eax, 0xcfb3235e
xor eax, 0xb92d211c
rol eax, 0x60
popf
pushf
not eax
add eax, 0xf2935869
xor eax, 0x9bf1af35
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xecc649d6
xor eax, 0x8ab8ba29
rol eax, 0x6d
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x91cce05d
pushf
not eax
add eax, 0xa223fdfc
xor eax, 0xf914c71f
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xcf9b5cbb
xor eax, 0x93071f12
rol eax, 0xe8
popf
jmp 0x14009f842
nop dword [rax + rax]
push rax
pushf
mov eax, 0xe092d6d6
pushf
not eax
add eax, 0xd0284a19
xor eax, 0x90d101ea
rol eax, 0x72
popf
pushf
not eax
add eax, 0xd18c6581
xor eax, 0xfdcbd2b3
rol eax, 0x71
popf
pushf
not eax
add eax, 0xe7a0c97f
xor eax, 0xa97f2fd1
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xd0d9258f
xor eax, 0xbcb98833
rol eax, 0x2c
popf
jmp 0x14009f842
mov ebp, dword [rsp + 0x48]
xor edx, edx
mov rax, rdi
mov ebx, ebp
div rbp
mov eax, ebp
sub rax, rdx
push rdi
not rdi
sub rax, rdi
pop rdi
sub rax, 1
mov rdi, rax
cmp rax, r15
ja 0x1400a04a2
push rax
pushf
mov eax, 0x92b26096
pushf
not eax
add eax, 0x904e42d9
xor eax, 0xc6426831
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xb2e0f8d2
xor eax, 0xdf740220
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd256c57b
xor eax, 0xd0757902
rol eax, 0x12
popf
pushf
not eax
add eax, 0xd53f6154
xor eax, 0xd664c8d2
rol eax, 0xa6
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xa76724e5
pushf
not eax
add eax, 0x8cee5934
xor eax, 0xb6446470
rol eax, 0x96
popf
pushf
not eax
add eax, 0x812fd94e
xor eax, 0xe20ca26d
rol eax, 0x32
popf
pushf
not eax
add eax, 0xaec141c8
xor eax, 0xc26ef36e
rol eax, 0x27
popf
jmp 0x14009f842
mov r8d, 0xcd80a06f
pushf
not r8d
add r8d, 0xb3eabe46
xor r8d, 0xe49a5213
rol r8d, 0xb6
popf
pushf
not r8d
add r8d, 0xdd32cfd3
xor r8d, 0xd73c6d66
rol r8d, 0x99
popf
pushf
not r8d
add r8d, 0xf20fc0de
xor r8d, 0x9a621535
rol r8d, 0x4c
popf
pushf
not r8d
add r8d, 0xcc2decc9
xor r8d, 0x88c0a269
rol r8d, 0x58
popf
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x1400a055b
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x1400a059d
push rax
pushf
mov eax, 0xf5e2a289
pushf
not eax
add eax, 0x9ea75c88
xor eax, 0xdbd537cb
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xbf97ca60
xor eax, 0x8e7c6708
rol eax, 0x93
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xd0bcb78b
pushf
not eax
add eax, 0x866ad620
xor eax, 0x9a2acf6b
rol eax, 0x90
popf
pushf
not eax
add eax, 0xc47fe1cc
xor eax, 0xf0a0b247
rol eax, 0xc
popf
jmp 0x14009f842
cmp dword [rsp + 0x70], 0x10000
je 0x1400a0620
push rax
pushf
mov eax, 0xf80704ce
pushf
not eax
add eax, 0xb35415ef
xor eax, 0xf24cdf60
rol eax, 0x21
popf
pushf
not eax
add eax, 0xad937f74
xor eax, 0x916b23cd
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xcf31a3af
xor eax, 0xeb206524
rol eax, 0xc
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xa2705e7f
pushf
not eax
add eax, 0xb644affa
xor eax, 0xf48b63c2
rol eax, 0x94
popf
pushf
not eax
add eax, 0x861b1767
xor eax, 0xa6bca47f
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xc138ef0b
xor eax, 0xa5cd08b8
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xea4b862e
xor eax, 0xdc6fbdb2
rol eax, 0xa2
popf
jmp 0x14009f842
xor edx, edx
lea edi, [rbp - 1]
add rdi, qword [rsp + 0x68]
add rdi, qword [rsp + 0x50]
mov rax, rdi
div rbx
sub rdi, rdx
cmp rdi, r15
jbe 0x1400a06c9
push rax
pushf
mov eax, 0x7f5f3ec9
pushf
not eax
add eax, 0xbb07cf6d
xor eax, 0x9dc1f84e
rol eax, 9
popf
pushf
not eax
add eax, 0x960a5b34
xor eax, 0xc338cfe7
rol eax, 0x15
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x11477540
pushf
not eax
add eax, 0x89001b2f
xor eax, 0x9fcb1d7a
rol eax, 0x37
popf
pushf
not eax
add eax, 0xbd634afb
xor eax, 0xab0fc053
rol eax, 5
popf
pushf
not eax
add eax, 0xca4e461d
xor eax, 0x80ba1b5e
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x8886e088
xor eax, 0x979f3014
rol eax, 0xd4
popf
jmp 0x14009f842
jmp 0x1400a0e4f
test rbx, rbx
je 0x1400a07bc
push rax
pushf
mov eax, 0xc985a23d
pushf
not eax
add eax, 0xb8a4ca72
xor eax, 0x98b6b4d4
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9c1f8fd9
xor eax, 0x94a4360a
rol eax, 0xf5
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x143132e1
pushf
not eax
add eax, 0xc0048d88
xor eax, 0xe633f511
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x8eb778f2
xor eax, 0xc626ff2d
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xed8e9328
xor eax, 0xf21b50c1
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xcfc25a5d
xor eax, 0xf7955d0f
rol eax, 0x88
popf
jmp 0x14009f842
mov r9d, r12d
mov edx, 0x35fb9d82
pushf
not edx
add edx, 0xa8e774cb
xor edx, 0xaa9b1ebf
rol edx, 0x77
popf
pushf
not edx
add edx, 0xf85ce987
xor edx, 0xfe70b122
rol edx, 0x13
popf
mov r8d, 0x8b29f077
pushf
not r8d
add r8d, 0xac9dfd9e
xor r8d, 0xf7afceb3
rol r8d, 0x1c
popf
pushf
not r8d
add r8d, 0x8c4368ae
xor r8d, 0x99554249
rol r8d, 0x25
popf
pushf
not r8d
add r8d, 0xd0c4837c
xor r8d, 0xe0a6bdc5
rol r8d, 0x83
popf
mov rcx, rbx
jmp 0x1400a089c
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x1400a0903
push rax
pushf
mov eax, 0x8aae1f2a
pushf
not eax
add eax, 0x927614a6
xor eax, 0xca941254
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc3c7faea
xor eax, 0x9fdce1d1
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xf8fc61e3
xor eax, 0xd2bab72d
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xbda084fb
xor eax, 0xce55d94b
rol eax, 0x72
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x8ad4ea21
pushf
not eax
add eax, 0xd5a4867f
xor eax, 0xeb2304c2
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xd66dd572
xor eax, 0x8a1ff47b
rol eax, 0x94
popf
jmp 0x14009f842
cmp rbx, r14
jae 0x1400a0998
push rax
pushf
mov eax, 0x1b91d2ea
pushf
not eax
add eax, 0xa3683800
xor eax, 0xaf01a8a3
rol eax, 0x25
popf
pushf
not eax
add eax, 0x8cac3038
xor eax, 0xbc616102
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x99eef34c
xor eax, 0xf6683290
rol eax, 0xab
popf
pushf
not eax
add eax, 0xb6eb9d2c
xor eax, 0x9bf94571
rol eax, 0x56
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x643a094e
pushf
not eax
add eax, 0x8e923ea0
xor eax, 0x9633889b
rol eax, 2
popf
pushf
not eax
add eax, 0xe8ae9c52
xor eax, 0xa0c590d3
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xf1d5e8c2
xor eax, 0xac7241e2
rol eax, 0x39
popf
jmp 0x14009f842
jmp 0x1400a033e
test rdi, rdi
je 0x1400a0a61
push rax
pushf
mov eax, 0x3a52197a
pushf
not eax
add eax, 0xbc63f97d
xor eax, 0xafa9206d
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb1026734
xor eax, 0x8ee44a44
rol eax, 0x15
popf
pushf
not eax
add eax, 0xad6ff54d
xor eax, 0x87a66e8c
rol eax, 0xee
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0xfcd924bc
pushf
not eax
add eax, 0xabd7615f
xor eax, 0xd451b1a4
rol eax, 0x57
popf
pushf
not eax
add eax, 0xcd52f9da
xor eax, 0x9b406e6b
rol eax, 0xef
popf
pushf
not eax
add eax, 0x8c0df7ac
xor eax, 0xe1d18f01
rol eax, 0x27
popf
jmp 0x14009f842
mov r9d, r12d
mov edx, 0xd63e5488
pushf
not edx
add edx, 0xaf5fa4ae
xor edx, 0xbc537b4b
rol edx, 0xbd
popf
pushf
not edx
add edx, 0xd389f769
xor edx, 0xe4b76f0c
rol edx, 0x87
popf
pushf
not edx
add edx, 0xd82f64ec
xor edx, 0x8ec59f41
rol edx, 0xe9
popf
pushf
not edx
add edx, 0xc75fde01
xor edx, 0xd27867a2
rol edx, 0x59
popf
mov r8d, 0xea936077
pushf
not r8d
add r8d, 0x8f18229d
xor r8d, 0xeaaddee9
rol r8d, 0xc7
popf
pushf
not r8d
add r8d, 0x84653ca2
xor r8d, 0xba26b7b5
rol r8d, 0x85
popf
pushf
not r8d
add r8d, 0x93002d05
xor r8d, 0xd4f3f309
rol r8d, 0xc
popf
mov rcx, rdi
jmp 0x1400a0b58
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x1400a0bac
push rax
pushf
mov eax, 0x948ca181
pushf
not eax
add eax, 0xf1367e05
xor eax, 0xd1ad3a89
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x8d4c1a61
xor eax, 0xbdbec856
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xd4142533
xor eax, 0xebf63ac6
rol eax, 0x4c
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x2db0c470
pushf
not eax
add eax, 0xbdb22274
xor eax, 0x9ce06821
rol eax, 0x25
popf
pushf
not eax
add eax, 0x8ef59463
xor eax, 0x81ea7eee
rol eax, 0x10
popf
pushf
not eax
add eax, 0xe2b0842c
xor eax, 0xc3e11106
rol eax, 4
popf
jmp 0x14009f842
cmp rdi, r15
jbe 0x1400a0c2e
push rax
pushf
mov eax, 0x47dd17f0
pushf
not eax
add eax, 0xd5b28b0d
xor eax, 0xf3fbe9c3
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xb37b5edd
xor eax, 0xb789ea18
rol eax, 0xc0
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x6a45ce2b
pushf
not eax
add eax, 0xc6ff37c4
xor eax, 0x98721f38
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xade7d911
xor eax, 0xa5bad346
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xc28f381d
xor eax, 0x820af9c2
rol eax, 3
popf
jmp 0x14009f842
jmp 0x1400a0e4f
xor edx, edx
lea rcx, [rsi + 0x40]
mov dword [rsi + 0x10], edx
nop dword [rax]
push rax
pushf
mov eax, 0xd6fb4585
pushf
not eax
add eax, 0xe2c6e011
xor eax, 0x98bb20fb
rol eax, 0x62
popf
pushf
not eax
add eax, 0x803caa02
xor eax, 0xcaa1d883
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xc5baf274
xor eax, 0xae1bd778
rol eax, 0xa2
popf
jmp 0x14009f842
mov qword [rcx], rdx
mov rax, rcx
mov qword [rsi + 8], rcx
add r12, 0x40
add rcx, 0x40
mov rdx, rax
cmp r12, 0xfc0
jbe 0x1400a0d8c
push rax
pushf
mov eax, 0x8fa118ad
pushf
not eax
add eax, 0xaf6eadce
xor eax, 0xf4412120
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xc0381324
xor eax, 0x864772ae
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe0cd4112
xor eax, 0xff75fd9a
rol eax, 0x88
popf
jmp 0x14009f842
push rax
pushf
mov eax, 0x356b13a
pushf
not eax
add eax, 0x80f0ea7f
xor eax, 0xed5acb23
rol eax, 0x62
popf
pushf
not eax
add eax, 0x8301e992
xor eax, 0xbd0b96a3
rol eax, 0x10
popf
pushf
not eax
add eax, 0xf0a0ad59
xor eax, 0xb10db899
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x9d26f12b
xor eax, 0xeac7964f
rol eax, 0x61
popf
jmp 0x14009f842
mov rax, qword [0x140013bc8]
mov qword [rsi], rax
mov qword [0x140013bc8], rsi
push rax
pushf
mov eax, 0x4c78edea
pushf
not eax
add eax, 0xb1df211a
xor eax, 0xff3cd773
rol eax, 0x77
popf
pushf
not eax
add eax, 0xe7efc074
xor eax, 0xba33079b
rol eax, 0x23
popf
pushf
not eax
add eax, 0x8553332c
xor eax, 0x8a279fb9
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xa712eab9
xor eax, 0x9d74bc8a
rol eax, 0xa
popf
jmp 0x14009f842
mov r12, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
push rax
pushf
mov eax, 0x5bf34d82
pushf
not eax
add eax, 0xa1c39817
xor eax, 0xc4a57926
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xe5980e46
xor eax, 0xdfe10742
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x9b22e4e0
xor eax, 0xda915192
rol eax, 0x98
popf
jmp 0x14009f842
mov rax, rsi
mov rsi, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r14
pop rdi
ret