Function at 0x140067350
Capabilities:
Execute command

Disassembly:
push rax
pushf
mov eax, 0x3cdb7b95
pushf
not eax
add eax, 0xa9d90b3c
xor eax, 0xb9482944
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xb0cbd629
xor eax, 0xdd5a6b4e
rol eax, 0xab
popf
cmp eax, 4
jne 0x14006738d
popf
pop rax
jmp 0x1400677d9
cmp eax, 0
jne 0x14006739c
popf
pop rax
jmp 0x140067423
cmp eax, 3
jne 0x1400673ab
popf
pop rax
jmp 0x14006776d
cmp eax, 1
jne 0x1400673ba
popf
pop rax
jmp 0x14006762a
cmp eax, 0xa
jne 0x1400673c9
popf
pop rax
jmp 0x140067a8c
cmp eax, 7
jne 0x1400673d8
popf
pop rax
jmp 0x140067918
cmp eax, 6
jne 0x1400673e7
popf
pop rax
jmp 0x1400678b1
cmp eax, 2
jne 0x1400673f6
popf
pop rax
jmp 0x1400676f3
cmp eax, 9
jne 0x140067405
popf
pop rax
jmp 0x140067a00
cmp eax, 8
jne 0x140067414
popf
pop rax
jmp 0x140067997
cmp eax, 5
jne 0x140067423
popf
pop rax
jmp 0x140067855
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x20
mov esi, 0x267647da
pushf
not esi
add esi, 0xefcccf6d
xor esi, 0x90eed78d
rol esi, 0x59
popf
pushf
not esi
add esi, 0xb0efc5a3
xor esi, 0x81d5ae93
rol esi, 0xcc
popf
pushf
not esi
add esi, 0xf35caef0
xor esi, 0xd9f3042a
rol esi, 0x62
popf
pushf
not esi
add esi, 0xbfb2732b
xor esi, 0x937044bc
rol esi, 0x48
popf
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov r14d, 0x9d87dd39
pushf
not r14d
add r14d, 0x8820996f
xor r14d, 0xf5ebf8f3
rol r14d, 0xa3
popf
pushf
not r14d
add r14d, 0xc090cfd3
xor r14d, 0xfd36dca1
rol r14d, 0x6a
popf
pushf
not r14d
add r14d, 0xf2e58291
xor r14d, 0xbf1175a9
rol r14d, 0xab
popf
push rcx
not rcx
sub r14, rcx
pop rcx
sub r14, 1
mov edi, 0x3e5abdae
pushf
not edi
add edi, 0xd1ca5359
xor edi, 0xaf3ac999
rol edi, 0x1d
popf
pushf
not edi
add edi, 0xf7a5ffc2
xor edi, 0x9019743b
rol edi, 0xb8
popf
push rcx
not rcx
sub rdi, rcx
pop rcx
sub rdi, 1
mov r15d, 0x44dd0616
pushf
not r15d
add r15d, 0xea0f4ca5
xor r15d, 0xb6d7e075
rol r15d, 0x87
popf
pushf
not r15d
add r15d, 0xd4c30e37
xor r15d, 0xf3ef90af
rol r15d, 0xc9
popf
push rcx
not rcx
sub r15, rcx
pop rcx
sub r15, 1
mov ebx, 0x275e1dfd
pushf
not ebx
add ebx, 0xa2352d2a
xor ebx, 0xe7587d76
rol ebx, 0xcf
popf
pushf
not ebx
add ebx, 0xf031b40d
xor ebx, 0xde1f8e4c
rol ebx, 9
popf
pushf
not ebx
add ebx, 0xc72f7c09
xor ebx, 0x8f5961f6
rol ebx, 0xdd
popf
push rcx
not rcx
sub rbx, rcx
pop rcx
sub rbx, 1
nop dword [rax]
push rax
pushf
mov eax, 0x480d2f74
pushf
not eax
add eax, 0x984b6477
xor eax, 0x91be347a
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x86c4fba7
xor eax, 0xe1dd4574
rol eax, 0x96
popf
pushf
not eax
add eax, 0xb703d37d
xor eax, 0xb02c63e7
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x92417f21
xor eax, 0xe84c1a2c
rol eax, 0xcd
popf
jmp 0x14006737e
mov ecx, 0xc35a01c4
pushf
not ecx
add ecx, 0x88512ed5
xor ecx, 0xf3cac6c6
rol ecx, 0x37
popf
pushf
not ecx
add ecx, 0xd8476400
xor ecx, 0xed2bdc0a
rol ecx, 0x79
popf
jmp 0x14006765a
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [r14]
test al, 1
jne 0x1400676ad
push rax
pushf
mov eax, 0xa2255570
pushf
not eax
add eax, 0xfc8914fc
xor eax, 0x955f44e9
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xcd683fb4
xor eax, 0xd7e5b95b
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x80e83e4d
xor eax, 0x959af7f5
rol eax, 0x8c
popf
jmp 0x14006737e
push rax
pushf
mov eax, 0xdf01e2d1
pushf
not eax
add eax, 0xd6bb4faf
xor eax, 0xe34f2a5a
rol eax, 0x68
popf
pushf
not eax
add eax, 0xbefe8e75
xor eax, 0xf622c0f9
rol eax, 0x85
popf
pushf
not eax
add eax, 0x82a1a0a3
xor eax, 0xcf48ad7b
rol eax, 0xe3
popf
jmp 0x14006737e
or eax, 1
mov dword [r14], eax
mov word [rdi + 7], 0x139
mov dword [rdi], 0xd4ff3c10
mov word [rdi + 4], 0xe1e9
mov byte [rdi + 6], 0x80
lea rcx, [0x1bb0865cb]
pushf
sub rcx, 0x7b07b73b
popf
call fcn.14007993f
nop
push rax
pushf
mov eax, 0x16d7f3d0
pushf
not eax
add eax, 0x856e2937
xor eax, 0x84245a08
rol eax, 0x29
popf
pushf
not eax
add eax, 0xa6571569
xor eax, 0xaed528d9
rol eax, 0x87
popf
pushf
not eax
add eax, 0xd835044f
xor eax, 0xc1a55ed7
rol eax, 2
popf
jmp 0x14006737e
cmp byte [rdi + 8], 0
je 0x1400677a6
push rax
pushf
mov eax, 0x9a83833c
pushf
not eax
add eax, 0x90c45bac
xor eax, 0xa1019112
rol eax, 0x41
popf
pushf
not eax
add eax, 0x8f157a76
xor eax, 0xa092e77b
rol eax, 0x24
popf
jmp 0x14006737e
push rax
pushf
mov eax, 0x34ceafd1
pushf
not eax
add eax, 0xaea1fcb5
xor eax, 0xfa22ff3c
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa184c4ff
xor eax, 0x86444cbf
rol eax, 0xd1
popf
jmp 0x14006737e
xor byte [rdi], 0x73
xor byte [rdi + 1], 0x53
xor byte [rdi + 2], 0x93
xor byte [rdi + 3], 0xbb
xor byte [rdi + 4], 0x9b
xor byte [rdi + 5], 0xc1
xor byte [rdi + 6], 0xe3
xor byte [rdi + 7], 0x39
mov byte [rdi + 8], 0
push rax
pushf
mov eax, 0x7498e194
pushf
not eax
add eax, 0x88aa09f9
xor eax, 0x8372732b
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xd566dccd
xor eax, 0x911935e1
rol eax, 0x34
popf
pushf
not eax
add eax, 0xc923853b
xor eax, 0x9501f9af
rol eax, 0x86
popf
pushf
not eax
add eax, 0xd7ec6178
xor eax, 0xada5bfb0
rol eax, 0x8e
popf
jmp 0x14006737e
mov rcx, rdi
jmp 0x140067859
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x4ae2060f
pushf
not ecx
add ecx, 0xff347817
xor ecx, 0xa98f6ea3
rol ecx, 0xd4
popf
pushf
not ecx
add ecx, 0xdd4e58f8
xor ecx, 0x98648e1f
rol ecx, 0x7d
popf
pushf
not ecx
add ecx, 0xba265c3d
xor ecx, 0x888b3d95
rol ecx, 0xf0
popf
jmp 0x1400678a4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [r15]
test al, 1
jne 0x140067918
or eax, 1
mov dword [r15], eax
mov word [rbx + 7], 0x1c7
mov dword [rbx], 0x4c128fa
mov word [rbx + 4], 0x5751
mov byte [rbx + 6], 0x19
lea rcx, [0x18b7dd452]
pushf
sub rcx, 0x4b7d25e2
popf
call fcn.14007993f
nop
push rax
pushf
mov eax, 0xc9368dbe
pushf
not eax
add eax, 0xdc02fc33
xor eax, 0xe251f40a
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x956ef070
xor eax, 0xd94789de
rol eax, 0xdf
popf
jmp 0x14006737e
cmp byte [rbx + 8], 0
je 0x140067964
push rax
pushf
mov eax, 0x1f49a0a0
pushf
not eax
add eax, 0xaeef0780
xor eax, 0x93b67b56
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xa73cabd8
xor eax, 0xc2f60138
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa90a9fab
xor eax, 0xfd960ded
rol eax, 0x81
popf
jmp 0x14006737e
push rax
pushf
mov eax, 0xb2a7180b
pushf
not eax
add eax, 0xc5a91c13
xor eax, 0xbddd9a4d
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x90026e38
xor eax, 0xf1b7bbd8
rol eax, 0xd9
popf
jmp 0x14006737e
xor byte [rbx], 0x99
xor byte [rbx + 1], 0x47
xor byte [rbx + 2], 0xad
xor byte [rbx + 3], 0x6b
xor byte [rbx + 4], 0x23
xor byte [rbx + 5], 0x77
xor byte [rbx + 6], 0x7f
xor byte [rbx + 7], 0xc7
mov byte [rbx + 8], 0
push rax
pushf
mov eax, 0x60f9ed2a
pushf
not eax
add eax, 0xb01618f1
xor eax, 0xa47e034f
rol eax, 0x68
popf
pushf
not eax
add eax, 0xbc563600
xor eax, 0xecbc2a1a
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xb7b71ad4
xor eax, 0x8900894c
rol eax, 0xe3
popf
jmp 0x14006737e
mov rcx, rbx
jmp 0x140067a04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
sub esi, 1
jne 0x140067a46
push rax
pushf
mov eax, 0x66047c7c
pushf
not eax
add eax, 0xd1ebcd96
xor eax, 0xd5361be8
rol eax, 0x49
popf
pushf
not eax
add eax, 0x8d7d100f
xor eax, 0xeba72c91
rol eax, 0xb
popf
jmp 0x14006737e
push rax
pushf
mov eax, 0x55d01e89
pushf
not eax
add eax, 0xe5afd5c4
xor eax, 0xed75d67a
rol eax, 0x95
popf
pushf
not eax
add eax, 0xa5462c0b
xor eax, 0xbe03fba5
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xe0a44eef
xor eax, 0xf7efdfe0
rol eax, 0x1f
popf
jmp 0x14006737e
mov ecx, 0xbf4e3535
pushf
not ecx
add ecx, 0x94004d58
xor ecx, 0xe77e5534
rol ecx, 0xd
popf
pushf
not ecx
add ecx, 0xdf6b5bcd
xor ecx, 0xf8602ea7
rol ecx, 0x9e
popf
pushf
not ecx
add ecx, 0xb114a858
xor ecx, 0xac78db94
rol ecx, 0x18
popf
pushf
not ecx
add ecx, 0xdf9600e3
xor ecx, 0x916c2e7e
rol ecx, 2
popf
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
add rsp, 0x20
pop r15
jmp qword [sym.imp.KERNEL32.dll_Sleep]