Function at 0x1400d563c
Capabilities:
Authenticate hmac
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x46c71a53
pushf
not eax
add eax, 0x48ceb766
xor eax, 0x45ba913a
rol eax, 0x91
popf
pushf
not eax
add eax, 0x7b28680b
xor eax, 0x62d7d890
rol eax, 0xbe
popf
cmp eax, 0xe
jne 0x1400d5679
popf
pop rax
jmp 0x1400d61a7
cmp eax, 0xc
jne 0x1400d5688
popf
pop rax
jmp 0x1400d6040
cmp eax, 0x14
jne 0x1400d5697
popf
pop rax
jmp 0x1400d64bf
cmp eax, 0xf
jne 0x1400d56a6
popf
pop rax
jmp 0x1400d61fd
cmp eax, 0x13
jne 0x1400d56b5
popf
pop rax
jmp 0x1400d6487
cmp eax, 0x12
jne 0x1400d56c4
popf
pop rax
jmp 0x1400d644d
cmp eax, 0xb
jne 0x1400d56d3
popf
pop rax
jmp 0x1400d6007
cmp eax, 5
jne 0x1400d56e2
popf
pop rax
jmp 0x1400d5c71
cmp eax, 8
jne 0x1400d56f1
popf
pop rax
jmp 0x1400d5e35
cmp eax, 9
jne 0x1400d5700
popf
pop rax
jmp 0x1400d5ea6
cmp eax, 0
jne 0x1400d570f
popf
pop rax
jmp 0x1400d57a5
cmp eax, 0xd
jne 0x1400d571e
popf
pop rax
jmp 0x1400d60e9
cmp eax, 2
jne 0x1400d572d
popf
pop rax
jmp 0x1400d5af0
cmp eax, 1
jne 0x1400d573c
popf
pop rax
jmp 0x1400d58c8
cmp eax, 0x10
jne 0x1400d574b
popf
pop rax
jmp 0x1400d62ef
cmp eax, 7
jne 0x1400d575a
popf
pop rax
jmp 0x1400d5d93
cmp eax, 4
jne 0x1400d5769
popf
pop rax
jmp 0x1400d5c15
cmp eax, 0x11
jne 0x1400d5778
popf
pop rax
jmp 0x1400d638f
cmp eax, 3
jne 0x1400d5787
popf
pop rax
jmp 0x1400d5b91
cmp eax, 0xa
jne 0x1400d5796
popf
pop rax
jmp 0x1400d5f46
cmp eax, 6
jne 0x1400d57a5
popf
pop rax
jmp 0x1400d5d11
push rbp
push rdi
push r14
sub rsp, 0x50
mov rax, qword [0x14003f040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbp, rcx
lea r9, [rsp + 0x20]
xor r14d, r14d
mov ecx, 0x140b8dbe
pushf
not ecx
add ecx, 0x8e926c4
xor ecx, 0x70203033
rol ecx, 0xe6
popf
pushf
not ecx
add ecx, 0x3145a05e
xor ecx, 0x5626676a
rol ecx, 0x3f
popf
pushf
not ecx
add ecx, 0x13c7ed13
xor ecx, 0x5c3ed0d1
rol ecx, 0x36
popf
pushf
not ecx
add ecx, 0x1a95bad3
xor ecx, 0x5cdcaaf2
rol ecx, 0xb7
popf
xor r8d, r8d
mov dword [rsp + 0x20], r14d
xor edx, edx
mov edi, r14d
jmp 0x1400d582f
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400d5895
push rax
pushf
mov eax, 0xf5ca1f81
pushf
not eax
add eax, 0x1019e090
xor eax, 0x5091713f
rol eax, 2
popf
pushf
not eax
add eax, 0x5c2e1aa8
xor eax, 0x37fdf246
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x440099a4
xor eax, 0x703fe9d9
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x73339c86
xor eax, 0x48175700
rol eax, 0xa2
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0xeac665f
pushf
not eax
add eax, 0x19d28497
xor eax, 0x5610cb27
rol eax, 0x24
popf
pushf
not eax
add eax, 0x3500b0eb
xor eax, 0x61935ee5
rol eax, 0xf9
popf
jmp 0x1400d566a
xor edx, edx
mov r8d, 0xaa852b2f
pushf
not r8d
add r8d, 0x344ba04f
xor r8d, 0x4eecb67e
rol r8d, 0xc2
popf
pushf
not r8d
add r8d, 0x375b2d80
xor r8d, 0x5ab01ff8
rol r8d, 0xd1
popf
mov rcx, rdi
jmp 0x1400d5906
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rsp + 0x20]
xor ecx, ecx
mov r9d, 0xcbe778a1
pushf
not r9d
add r9d, 0x57f2a84a
xor r9d, 0x3dde14e0
rol r9d, 0x42
popf
pushf
not r9d
add r9d, 0x4fd18c6
xor r9d, 0x30e365e0
rol r9d, 0x93
popf
pushf
not r9d
add r9d, 0x7dade793
xor r9d, 0x1d6e9fe4
rol r9d, 0x92
popf
pushf
not r9d
add r9d, 0x516500a
xor r9d, 0x7985f41a
rol r9d, 0x2d
popf
mov r8d, 0xc4896486
pushf
not r8d
add r8d, 0x76a65777
xor r8d, 0x1054e7a3
rol r8d, 0x83
popf
pushf
not r8d
add r8d, 0x4c07b131
xor r8d, 0x1b2f5a16
rol r8d, 0xcc
popf
pushf
not r8d
add r8d, 0x451789b4
xor r8d, 0x56c039c5
rol r8d, 0x3c
popf
pushf
not r8d
add r8d, 0x22dd356e
xor r8d, 0x14448489
rol r8d, 0x7e
popf
jmp 0x1400d59e7
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rsp + 0x20]
lea r9, [rsp + 0x20]
mov rdx, rax
mov ecx, 0xb3d939f6
pushf
not ecx
add ecx, 0xc6342b7
xor ecx, 0x4ed585ef
rol ecx, 0x5f
popf
pushf
not ecx
add ecx, 0x4aca56ba
xor ecx, 0x7a4a7b9a
rol ecx, 0x3d
popf
pushf
not ecx
add ecx, 0x92cdd86
xor ecx, 0x56de55b5
rol ecx, 0xe2
popf
pushf
not ecx
add ecx, 0x62da72f
xor ecx, 0x6bcb5040
rol ecx, 0x6c
popf
mov rdi, rax
jmp 0x1400d5a57
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400d5abd
push rax
pushf
mov eax, 0x7cfdc337
pushf
not eax
add eax, 0x2421085f
xor eax, 0x15197421
rol eax, 0x82
popf
pushf
not eax
add eax, 0x12fe56bd
xor eax, 0x412e37cb
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x5ec4da45
xor eax, 0x217c55c1
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x431d0c9d
xor eax, 0x381ca1c9
rol eax, 0x48
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0xc46bc1f6
pushf
not eax
add eax, 0x81921c5
xor eax, 0x6de4595c
rol eax, 0x62
popf
pushf
not eax
add eax, 0x36b0fef3
xor eax, 0x7d8cf4aa
rol eax, 0x74
popf
jmp 0x1400d566a
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rsi
test eax, eax
js 0x1400d5b4b
push rax
pushf
mov eax, 0xab9edd61
pushf
not eax
add eax, 0x48b0483e
xor eax, 0x3c8bfa87
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x5f7051
xor eax, 0x2a3679bd
rol eax, 0x10
popf
pushf
not eax
add eax, 0x132fdaa9
xor eax, 0x54397635
rol eax, 0x55
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x87c6ca12
pushf
not eax
add eax, 0x5ccd7490
xor eax, 0x773e974c
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x55bc3333
xor eax, 0x72850079
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x23f29b10
xor eax, 0x376528b
rol eax, 0x13
popf
jmp 0x1400d566a
mov ebx, r14d
cmp dword [rdi], ebx
jbe 0x1400d5be2
push rax
pushf
mov eax, 0xf4dbc1d8
pushf
not eax
add eax, 0x7aaa297f
xor eax, 0x48baa3a8
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x7ff9b305
xor eax, 0x13b0724a
rol eax, 0x14
popf
pushf
not eax
add eax, 0x75357164
xor eax, 0x1cd97b93
rol eax, 0x5c
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x1290dd2
pushf
not eax
add eax, 0x75f0938e
xor eax, 0x61f6c695
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x20ed9e0b
xor eax, 0xffabcb7
rol eax, 0xaa
popf
jmp 0x1400d566a
nop dword [rax]
push rax
pushf
mov eax, 0x831201c1
pushf
not eax
add eax, 0x615a4183
xor eax, 0x79057c0e
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x2d37d37b
xor eax, 0x4712d852
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x1ffd0736
xor eax, 0x6d056b6f
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x56dac52f
xor eax, 0x362d3895
rol eax, 0x20
popf
jmp 0x1400d566a
mov eax, ebx
xorps xmm0, xmm0
imul rcx, rax, 0x128
movups xmmword [rsp + 0x28], xmm0
movzx edx, word [rcx + rdi + 0x2e]
lea rsi, [rcx + rdi]
add rdx, 0x30
mov qword [rsp + 0x38], r14
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov qword [rsp + 0x40], r14
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0x1660128a
pushf
not eax
add eax, 0x191b3ba6
xor eax, 0x7d7c1db3
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x137af429
xor eax, 0x413a7547
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x434a8724
xor eax, 0x6279df18
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x4ca8d55f
xor eax, 0x3dbc7075
rol eax, 0xae
popf
jmp 0x1400d566a
inc r8
cmp byte [rdx + r8], r14b
jne 0x1400d5d4d
push rax
pushf
mov eax, 0x2a242cfa
pushf
not eax
add eax, 0x5141ce1d
xor eax, 0x1f6a0f70
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb9e2c26
xor eax, 0x20099e06
rol eax, 0xbf
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x70689570
pushf
not eax
add eax, 0x874f8a6
xor eax, 0x432ab1bf
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x76e2ca07
xor eax, 0x3f9954b0
rol eax, 0x37
popf
pushf
not eax
add eax, 0x64caa26a
xor eax, 0x4e432a38
rol eax, 0xd8
popf
jmp 0x1400d566a
lea rcx, [rsp + 0x28]
call fcn.140093b46
cmp qword [rsp + 0x40], 0xf
lea rcx, [rsp + 0x28]
mov rdx, rbp
cmova rcx, qword [rsp + 0x28]
jmp 0x1400d5db2
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x1400d5e02
push rax
pushf
mov eax, 0xf3b181db
pushf
not eax
add eax, 0x777704b8
xor eax, 0x7a2ebe
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x5112a074
xor eax, 0x75b94ac
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x619e12cc
xor eax, 0x568764f3
rol eax, 0x4f
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0xa6c25383
pushf
not eax
add eax, 0x400d0a8a
xor eax, 0x49493f77
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x9df4649
xor eax, 0x44465e47
rol eax, 0xab
popf
jmp 0x1400d566a
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x1400d5e73
push rax
pushf
mov eax, 0x304f4fb4
pushf
not eax
add eax, 0x12008a78
xor eax, 0x54631911
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x6be38600
xor eax, 0x409463c2
rol eax, 0xcf
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0xbed724ff
pushf
not eax
add eax, 0x27fbfc44
xor eax, 0x72508a2f
rol eax, 0x66
popf
pushf
not eax
add eax, 0x879c2b1
xor eax, 0x2ba267ea
rol eax, 0x6c
popf
jmp 0x1400d566a
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d5eed
push rax
pushf
mov eax, 0x6249c3c3
pushf
not eax
add eax, 0x25778eaa
xor eax, 0xb09ef56
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x56791808
xor eax, 0xa5787bf
rol eax, 0xb
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0xeaafb784
pushf
not eax
add eax, 0x6f813bd8
xor eax, 0x6649482b
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x7ece7a13
xor eax, 0x56f7fae
rol eax, 0x61
popf
pushf
not eax
add eax, 0x2796f4c2
xor eax, 0x48c7bac6
rol eax, 0x70
popf
pushf
not eax
add eax, 0x47c29f5b
xor eax, 0x26ab4bf4
rol eax, 0x72
popf
jmp 0x1400d566a
mov rcx, qword [rcx - 8]
add rdx, 0x27
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d5fae
push rax
pushf
mov eax, 0x4142f2f4
pushf
not eax
add eax, 0x30cf4836
xor eax, 0x54aa637d
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x25b05706
xor eax, 0x7461616c
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x55597a51
xor eax, 0x48ad88e4
rol eax, 0xaa
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x391e9ad3
pushf
not eax
add eax, 0x65e22b83
xor eax, 0x2c33eadf
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x32c8df87
xor eax, 0x341d5a30
rol eax, 0x82
popf
pushf
not eax
add eax, 0x3d45716
xor eax, 0x5f6e4783
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x6ef9818d
xor eax, 0x3b8a0f1d
rol eax, 0xfc
popf
jmp 0x1400d566a
call fcn.140114059
push rax
pushf
mov eax, 0xbffe4860
pushf
not eax
add eax, 0x73bf289b
xor eax, 0x7ca30d3
rol eax, 0x92
popf
pushf
not eax
add eax, 0x6156f5f1
xor eax, 0x1bb025c5
rol eax, 9
popf
jmp 0x1400d566a
inc ebx
cmp ebx, dword [rdi]
jb 0x1400d6090
push rax
pushf
mov eax, 0x4009af49
pushf
not eax
add eax, 0x6163fd69
xor eax, 0x330d9bec
rol eax, 0xba
popf
pushf
not eax
add eax, 0x5babf479
xor eax, 0x41f968a8
rol eax, 0x82
popf
pushf
not eax
add eax, 0x60a0a5e8
xor eax, 0x26309bc0
rol eax, 0xd6
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0xd09af61a
pushf
not eax
add eax, 0xacd58da
xor eax, 0x29f0038f
rol eax, 0xac
popf
pushf
not eax
add eax, 0x7c6a03b6
xor eax, 0x3ffc7045
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x5013ac65
xor eax, 0x5f60e355
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xeefa896
xor eax, 0x3c00e0c7
rol eax, 0x84
popf
jmp 0x1400d566a
xor edx, edx
mov r8d, 0xf73728ee
pushf
not r8d
add r8d, 0x5aca401f
xor r8d, 0x719eda14
rol r8d, 0x62
popf
pushf
not r8d
add r8d, 0x6ac86349
xor r8d, 0x1b0c0144
rol r8d, 0x90
popf
pushf
not r8d
add r8d, 0x3072d9c2
xor r8d, 0x10246fac
rol r8d, 0x79
popf
pushf
not r8d
add r8d, 0x7845f3d6
xor r8d, 0x68a54e36
rol r8d, 0x98
popf
mov rcx, rdi
jmp 0x1400d6159
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
push rax
pushf
mov eax, 0xc36f4634
pushf
not eax
add eax, 0x7c1de44c
xor eax, 0x568ed626
rol eax, 0x54
popf
pushf
not eax
add eax, 0x3c0b84dc
xor eax, 0xb961590
rol eax, 0x16
popf
pushf
not eax
add eax, 0x250a25e6
xor eax, 0x4f1d4738
rol eax, 0xe7
popf
jmp 0x1400d566a
mov rsi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140112590
add rsp, 0x50
pop r14
pop rdi
pop rbp
ret
mov rbx, qword [rsi + 0x18]
xor edx, edx
mov r8d, 0x8527d62d
pushf
not r8d
add r8d, 0x12f135c5
xor r8d, 0x5144561c
rol r8d, 0xc0
popf
pushf
not r8d
add r8d, 0x2895ff0d
xor r8d, 0x4c08f585
rol r8d, 0xed
popf
mov rcx, rdi
jmp 0x1400d623f
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x1400d6296
push rax
pushf
mov eax, 0x92b27bb9
pushf
not eax
add eax, 0x6bc16be
xor eax, 0x68c57835
rol eax, 0x92
popf
pushf
not eax
add eax, 0x7d1870a7
xor eax, 0x3265358
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x791b5423
xor eax, 0x36d2c2f
rol eax, 0xba
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x91140add
pushf
not eax
add eax, 0x529cc4e
xor eax, 0x2aa87721
rol eax, 0x60
popf
pushf
not eax
add eax, 0x4ead4f12
xor eax, 0x62a8ad7d
rol eax, 0x57
popf
pushf
not eax
add eax, 0x1507a651
xor eax, 0x33324e74
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x477186eb
xor eax, 0x6c30952
rol eax, 0xf8
popf
jmp 0x1400d566a
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d6336
push rax
pushf
mov eax, 0xa6590ea6
pushf
not eax
add eax, 0x1274cd28
xor eax, 0x6923eb03
rol eax, 0x68
popf
pushf
not eax
add eax, 0x6261639f
xor eax, 0x2a0af199
rol eax, 0x34
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x53019963
pushf
not eax
add eax, 0x564e88c5
xor eax, 0x4bc9e288
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x7b495109
xor eax, 0x1af50fe3
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x5a324866
xor eax, 0x4fb4bd9c
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x55051f5d
xor eax, 0x537d808a
rol eax, 0x6a
popf
jmp 0x1400d566a
mov rcx, qword [rcx - 8]
add rdx, 0x27
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d6406
push rax
pushf
mov eax, 0x59b9de40
pushf
not eax
add eax, 0x2d0ba631
xor eax, 0x59b69a42
rol eax, 0x96
popf
pushf
not eax
add eax, 0x6914d02e
xor eax, 0x7d759e1
rol eax, 0x58
popf
pushf
not eax
add eax, 0x2945d63b
xor eax, 0x8de1506
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x6b883d00
xor eax, 0x360ea8da
rol eax, 0x66
popf
jmp 0x1400d566a
push rax
pushf
mov eax, 0x6b680081
pushf
not eax
add eax, 0x177e2dde
xor eax, 0x444b6206
rol eax, 0xce
popf
pushf
not eax
add eax, 0x2b6fa0cf
xor eax, 0x221c2a8a
rol eax, 0x36
popf
pushf
not eax
add eax, 0x651c76b2
xor eax, 0x199f157e
rol eax, 0xc6
popf
jmp 0x1400d566a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140114059
push rax
pushf
mov eax, 0x919cadda
pushf
not eax
add eax, 0x54e1a14
xor eax, 0x3d512834
rol eax, 0x31
popf
pushf
not eax
add eax, 0x3021f03a
xor eax, 0x8075279
rol eax, 0x85
popf
jmp 0x1400d566a
mov rax, rbx
jmp 0x1400d61a7