Function at 0x14008c8d4
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x58996c2a
pushf
not eax
add eax, 0x6da5b6a4
xor eax, 0x50bc8db3
rol eax, 0x54
popf
pushf
not eax
add eax, 0x2c5c9002
xor eax, 0x38bbb001
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x3482b21a
xor eax, 0x2d78c8eb
rol eax, 0x33
popf
cmp eax, 2
jne 0x14008c924
popf
pop rax
jmp 0x14008cbb0
cmp eax, 7
jne 0x14008c933
popf
pop rax
jmp 0x14008cf60
cmp eax, 9
jne 0x14008c942
popf
pop rax
jmp 0x14008d0d3
cmp eax, 0x10
jne 0x14008c951
popf
pop rax
jmp 0x14008d619
cmp eax, 0x12
jne 0x14008c960
popf
pop rax
jmp 0x14008d797
cmp eax, 0xd
jne 0x14008c96f
popf
pop rax
jmp 0x14008d2fa
cmp eax, 0xe
jne 0x14008c97e
popf
pop rax
jmp 0x14008d40c
cmp eax, 0xc
jne 0x14008c98d
popf
pop rax
jmp 0x14008d1e8
cmp eax, 0xf
jne 0x14008c99c
popf
pop rax
jmp 0x14008d503
cmp eax, 8
jne 0x14008c9ab
popf
pop rax
jmp 0x14008d02d
cmp eax, 0
jne 0x14008c9ba
popf
pop rax
jmp 0x14008ca50
cmp eax, 0x14
jne 0x14008c9c9
popf
pop rax
jmp 0x14008d8f8
cmp eax, 3
jne 0x14008c9d8
popf
pop rax
jmp 0x14008cd62
cmp eax, 4
jne 0x14008c9e7
popf
pop rax
jmp 0x14008cdcc
cmp eax, 0xb
jne 0x14008c9f6
popf
pop rax
jmp 0x14008d1b0
cmp eax, 1
jne 0x14008ca05
popf
pop rax
jmp 0x14008cb52
cmp eax, 5
jne 0x14008ca14
popf
pop rax
jmp 0x14008ce5d
cmp eax, 0x11
jne 0x14008ca23
popf
pop rax
jmp 0x14008d6fc
cmp eax, 6
jne 0x14008ca32
popf
pop rax
jmp 0x14008cf2a
cmp eax, 0x13
jne 0x14008ca41
popf
pop rax
jmp 0x14008d8c3
cmp eax, 0xa
jne 0x14008ca50
popf
pop rax
jmp 0x14008d17b
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rax, qword [0x14003d040]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rsi, rcx
lea r9, [rbp - 0x19]
xor r15d, r15d
mov ecx, 0xa313deff
pushf
not ecx
add ecx, 0x34f0d28b
xor ecx, 0x2e68a31d
rol ecx, 0x59
popf
pushf
not ecx
add ecx, 0x6383289c
xor ecx, 0x3601bffa
rol ecx, 0x15
popf
xor r8d, r8d
mov dword [rbp - 0x19], r15d
xor edx, edx
mov edi, r15d
jmp 0x14008cab9
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14008caf9
push rax
pushf
mov eax, 0x5c165b0e
pushf
not eax
add eax, 0x56e53e2e
xor eax, 0x459c304e
rol eax, 3
popf
pushf
not eax
add eax, 0x21cd7f08
xor eax, 0x2734e47a
rol eax, 0xaf
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x1807416f
pushf
not eax
add eax, 0x3c917257
xor eax, 0x853541a
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x3d4f74a9
xor eax, 0x6667e3b0
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x55f0731f
xor eax, 0x297f8516
rol eax, 0x61
popf
pushf
not eax
add eax, 0x2d65ecb3
xor eax, 0x95aeec6
rol eax, 0x22
popf
jmp 0x14008c915
nop dword [rax + rax]
push rax
pushf
mov eax, 0x96501b25
pushf
not eax
add eax, 0x669c75f7
xor eax, 0x36d48a0b
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x56bcb050
xor eax, 0x5ac0c42c
rol eax, 4
popf
pushf
not eax
add eax, 0xa310812
xor eax, 0x2536178f
rol eax, 0x88
popf
pushf
not eax
add eax, 0x50bbe056
xor eax, 0x6788c5d6
rol eax, 0x2d
popf
jmp 0x14008c915
xor edx, edx
mov r8d, 0xa4630c47
pushf
not r8d
add r8d, 0x28af686c
xor r8d, 0x2b4205a8
rol r8d, 0x2e
popf
pushf
not r8d
add r8d, 0x159b4da0
xor r8d, 0x7e3821dc
rol r8d, 0x77
popf
mov rcx, rdi
jmp 0x14008cbee
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x19]
xor ecx, ecx
mov r9d, 0x1e19ce53
pushf
not r9d
add r9d, 0x4ea40b68
xor r9d, 0x16c15bd6
rol r9d, 0xe2
popf
pushf
not r9d
add r9d, 0x62a52722
xor r9d, 0x8c5ca40
rol r9d, 0x62
popf
pushf
not r9d
add r9d, 0x39f78f1d
xor r9d, 0x332e7db5
rol r9d, 0xf7
popf
mov r8d, 0xc1d8a4dc
pushf
not r8d
add r8d, 0x1bc165e8
xor r8d, 0x36945b33
rol r8d, 0xab
popf
pushf
not r8d
add r8d, 0x4a5bcca7
xor r8d, 0x658a392b
rol r8d, 0xe0
popf
jmp 0x14008cc83
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rbp - 0x19]
lea r9, [rbp - 0x19]
mov rdx, rax
mov ecx, 0x7e4a9786
pushf
not ecx
add ecx, 0x26c5e45b
xor ecx, 0xa73db
rol ecx, 0xde
popf
pushf
not ecx
add ecx, 0x64d10daf
xor ecx, 0x712db29b
rol ecx, 0x10
popf
pushf
not ecx
add ecx, 0x4c71d548
xor ecx, 0x3501c9ae
rol ecx, 0x8b
popf
mov rdi, rax
jmp 0x14008ccdc
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14008cd1c
push rax
pushf
mov eax, 0x8d5b00c1
pushf
not eax
add eax, 0x1cfbef6a
xor eax, 0x2280730b
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x60ffeb5f
xor eax, 0x40624781
rol eax, 0x5c
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0xfaafa394
pushf
not eax
add eax, 0x35116879
xor eax, 0x6405fd72
rol eax, 0x93
popf
pushf
not eax
add eax, 0x27d1ae37
xor eax, 0x25ea8d63
rol eax, 2
popf
pushf
not eax
add eax, 0x63d36daf
xor eax, 0x680293dd
rol eax, 0x3e
popf
jmp 0x14008c915
test eax, eax
jns 0x14008cd99
push rax
pushf
mov eax, 0x270ab987
pushf
not eax
add eax, 0x29146151
xor eax, 0x499423a1
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x68262032
xor eax, 0x5784f1bb
rol eax, 0x8a
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0xc5c6de4f
pushf
not eax
add eax, 0x48e37cfa
xor eax, 0x211d18b0
rol eax, 0x68
popf
pushf
not eax
add eax, 0x43e82d63
xor eax, 0x42621040
rol eax, 0x39
popf
jmp 0x14008c915
xor edx, edx
mov r8d, 0x981660d0
pushf
not r8d
add r8d, 0x4fa04975
xor r8d, 0x19a731e9
rol r8d, 0x42
popf
pushf
not r8d
add r8d, 0x3742d096
xor r8d, 0x7ea76b5f
rol r8d, 0xfa
popf
mov rcx, rdi
jmp 0x14008ce0a
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor al, al
jmp 0x14008d900
mov qword [rsp + 0xe8], rbx
mov ebx, r15d
mov qword [rsp + 0xf0], r14
mov r14, r15
cmp qword [rdi], rbx
jbe 0x14008ced1
push rax
pushf
mov eax, 0xe7b88d36
pushf
not eax
add eax, 0x1fab7876
xor eax, 0x515bce57
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x47d7ca63
xor eax, 0x7f0b674a
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x7a90a5d8
xor eax, 0x6b448248
rol eax, 0x64
popf
pushf
not eax
add eax, 0x309e729c
xor eax, 0x18abba5d
rol eax, 0xa8
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x9247ec45
pushf
not eax
add eax, 0x25f88870
xor eax, 0x47b0169
rol eax, 0x99
popf
pushf
not eax
add eax, 0x5d8d0410
xor eax, 0x5a40aeec
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x1a36fa39
xor eax, 0x726173dc
rol eax, 0xab
popf
pushf
not eax
add eax, 0x7b501016
xor eax, 0x2e8bb39d
rol eax, 0xc4
popf
jmp 0x14008c915
mov rax, r15
push rax
pushf
mov eax, 0x238cf0d9
pushf
not eax
add eax, 0x56d81631
xor eax, 0x6fac9519
rol eax, 0xee
popf
pushf
not eax
add eax, 0x24269416
xor eax, 0x381cfcdc
rol eax, 0x4f
popf
jmp 0x14008c915
lea rax, [rax + rax*4]
movups xmm0, xmmword [rdi + rax*8 + 0x10]
movups xmmword [rbp - 0x39], xmm0
movups xmm0, xmmword [rdi + rax*8 + 0x20]
movups xmmword [rbp - 0x29], xmm0
movsd xmm0, qword [rdi + rax*8 + 0x30]
movsd qword [rbp + 0x37], xmm0
jmp 0x14008cf82
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movups xmm1, xmmword [rbp - 0x39]
mov ecx, eax
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, rcx
jne 0x14008cfe7
push rax
pushf
mov eax, 0x36585399
pushf
not eax
add eax, 0x79caa4c6
xor eax, 0x4987736f
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x2dd8fa56
xor eax, 0xcbd3d10
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x476f8a67
xor eax, 0x7f152a49
rol eax, 0x56
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x6a932a45
pushf
not eax
add eax, 0x58e3566a
xor eax, 0x28bbc88a
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x6600dd2b
xor eax, 0x261e924
rol eax, 0x32
popf
pushf
not eax
add eax, 0x29ea3377
xor eax, 0xcc9dfa0
rol eax, 0xb7
popf
jmp 0x14008c915
cmp qword [rbp - 0x29], rsi
je 0x14008d08c
push rax
pushf
mov eax, 0x1f9ef6cd
pushf
not eax
add eax, 0x517cc79a
xor eax, 0x1eef97e2
rol eax, 0xac
popf
pushf
not eax
add eax, 0x78d4912e
xor eax, 0x4d543f8f
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x17d686ab
xor eax, 0x62627663
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x4c0eabb4
xor eax, 0x364fe178
rol eax, 0x80
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x868171ac
pushf
not eax
add eax, 0x39d36b50
xor eax, 0x231e2980
rol eax, 0x11
popf
pushf
not eax
add eax, 0x7bc69e7f
xor eax, 0x152c335f
rol eax, 0x39
popf
pushf
not eax
add eax, 0x7dc959a5
xor eax, 0x6a2cb307
rol eax, 7
popf
jmp 0x14008c915
inc ebx
mov eax, ebx
cmp rax, qword [rdi]
jb 0x14008d135
push rax
pushf
mov eax, 0x442e5b85
pushf
not eax
add eax, 0x7a710b5
xor eax, 0x1358eb4a
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x4a1810ed
xor eax, 0x4effa3c9
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x372f8a35
xor eax, 0x2977a700
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x2e33de04
xor eax, 0x33a48327
rol eax, 0x22
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x6dad6dc7
pushf
not eax
add eax, 0x77e72fa
xor eax, 0x550986cb
rol eax, 0x72
popf
pushf
not eax
add eax, 0xbb87417
xor eax, 0xe84eeb9
rol eax, 0x23
popf
pushf
not eax
add eax, 0x5b14a4b
xor eax, 0x6303d9db
rol eax, 0x65
popf
jmp 0x14008c915
jmp 0x14008d1e8
movq r14, xmm1
push rax
pushf
mov eax, 0xe90835eb
pushf
not eax
add eax, 0x41a6aabd
xor eax, 0x340c7f15
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x882d52f
xor eax, 0x264c8c49
rol eax, 0x3d
popf
jmp 0x14008c915
xor edx, edx
mov r8d, 0x8636850c
pushf
not r8d
add r8d, 0x57dc08ff
xor r8d, 0x21bd0673
rol r8d, 0xac
popf
pushf
not r8d
add r8d, 0x3d6dd1
xor r8d, 0x24d00919
rol r8d, 0x94
popf
pushf
not r8d
add r8d, 0x2e7ce186
xor r8d, 0xba05078
rol r8d, 0x95
popf
pushf
not r8d
add r8d, 0x24221e16
xor r8d, 0x5aea4716
rol r8d, 0x40
popf
mov rcx, rdi
jmp 0x14008d258
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, qword [rsp + 0xe8]
test r14, r14
je 0x14008d2c7
push rax
pushf
mov eax, 0xabd7f395
pushf
not eax
add eax, 0x2f76837d
xor eax, 0x59ee960b
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x45bd52f9
xor eax, 0x1230245c
rol eax, 0x74
popf
pushf
not eax
add eax, 0x47cdb835
xor eax, 0x1afc8adc
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x4ffa96f8
xor eax, 0x2aec1d35
rol eax, 1
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0xc5f93ec0
pushf
not eax
add eax, 0x2bbd8983
xor eax, 0x58af4379
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x978a219
xor eax, 0x3a1ddf32
rol eax, 0x7d
popf
jmp 0x14008c915
lea r8, [r14 + 8]
mov qword [rbp - 9], r15
mov r9d, 0x76f76c15
pushf
not r9d
add r9d, 0x7e24a59e
xor r9d, 0x187a4bd
rol r9d, 0x59
popf
pushf
not r9d
add r9d, 0x52c20995
xor r9d, 0x176419d4
rol r9d, 0x65
popf
pushf
not r9d
add r9d, 0x572a71e2
xor r9d, 0x1bfbd608
rol r9d, 0x59
popf
pushf
not r9d
add r9d, 0x3cdcabe9
xor r9d, 0x284e4dbc
rol r9d, 0xb4
popf
lea rdx, [rbp - 9]
mov rcx, rsi
call fcn.1400876f5
test al, al
je 0x14008d3d9
push rax
pushf
mov eax, 0x4104892f
pushf
not eax
add eax, 0x316e1987
xor eax, 0x589f570d
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x6e0f9de0
xor eax, 0x2892f2ce
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x37f8f6d3
xor eax, 0x35e13270
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x3ed4221e
xor eax, 0x660ee51a
rol eax, 0xe0
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0xa7f3efa7
pushf
not eax
add eax, 0x3f171946
xor eax, 0x3a1f5caa
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x6b86dfa2
xor eax, 0x342c8903
rol eax, 0x8a
popf
jmp 0x14008c915
mov r8, qword [rbp - 9]
lea rdx, [rbp - 1]
add r8, 8
mov qword [rbp - 1], r15
mov r9d, 0xbd9a8c35
pushf
not r9d
add r9d, 0x9c12db8
xor r9d, 0x6a1c8128
rol r9d, 0x87
popf
pushf
not r9d
add r9d, 0x61005dc5
xor r9d, 0x43f008b5
rol r9d, 0xc1
popf
mov rcx, rsi
call fcn.1400876f5
test al, al
je 0x14008d4bd
push rax
pushf
mov eax, 0x4618b01e
pushf
not eax
add eax, 0x4c37d15b
xor eax, 0x78c7d7c0
rol eax, 0x73
popf
pushf
not eax
add eax, 0x116a1761
xor eax, 0x18c72258
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x1a42a178
xor eax, 0x5fe9b494
rol eax, 0x85
popf
pushf
not eax
add eax, 0x182f4179
xor eax, 0x8d4ad2f
rol eax, 0xea
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x58e6869b
pushf
not eax
add eax, 0x12a24469
xor eax, 0x1552139d
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x732424da
xor eax, 0x774e8cad
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x1009b49
xor eax, 0x4128a374
rol eax, 0x10
popf
jmp 0x14008c915
mov r8, qword [rbp - 1]
lea rdx, [rbp - 0x11]
add r8, 0x28
mov qword [rbp - 0x11], r15
mov r9d, 0x45125b85
pushf
not r9d
add r9d, 0x3cf5beb9
xor r9d, 0x280f6fdd
rol r9d, 0x77
popf
pushf
not r9d
add r9d, 0x6893b614
xor r9d, 0x7d9ea9a2
rol r9d, 0xf8
popf
pushf
not r9d
add r9d, 0x48a22df8
xor r9d, 0x26cb87be
rol r9d, 0x92
popf
pushf
not r9d
add r9d, 0x444dcaa3
xor r9d, 0x678acb37
rol r9d, 0x7f
popf
mov rcx, rsi
call fcn.1400876f5
test al, al
je 0x14008d5d3
push rax
pushf
mov eax, 0xf95d4069
pushf
not eax
add eax, 0x3b5e6913
xor eax, 0x66369e23
rol eax, 0xea
popf
pushf
not eax
add eax, 0x6baf0439
xor eax, 0x3d5e3951
rol eax, 0x98
popf
pushf
not eax
add eax, 0x2a360b3e
xor eax, 0x3084845b
rol eax, 0x1a
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x1e9a1dc7
pushf
not eax
add eax, 0x422a97e9
xor eax, 0x64e6c7bd
rol eax, 0xb
popf
pushf
not eax
add eax, 0x7bd130d6
xor eax, 0x232ba216
rol eax, 0x52
popf
pushf
not eax
add eax, 0x2f83df3b
xor eax, 0x7d5065fb
rol eax, 0x17
popf
jmp 0x14008c915
mov r8, qword [rbp - 0x11]
lea rdx, [rbp + 7]
xorps xmm0, xmm0
add r8, 0x58
mov r9d, 0xefcfdf67
pushf
not r9d
add r9d, 0x2cd14ea6
xor r9d, 0x30a7f744
rol r9d, 0xf
popf
pushf
not r9d
add r9d, 0x6ae2d80e
xor r9d, 0x1ea5913a
rol r9d, 0xd6
popf
mov rcx, rsi
movups xmmword [rbp + 7], xmm0
call fcn.1400876f5
test al, al
je 0x14008d6a3
push rax
pushf
mov eax, 0x60602ee
pushf
not eax
add eax, 0x1ca26d74
xor eax, 0x42a28b31
rol eax, 0x17
popf
pushf
not eax
add eax, 0x17e7ad07
xor eax, 0x79bd8d96
rol eax, 0xc6
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x2b114cf3
pushf
not eax
add eax, 0x304a8797
xor eax, 0x4f33725a
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xbaf2965
xor eax, 0x2c14886c
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x37de4232
xor eax, 0x1770c23b
rol eax, 0x56
popf
pushf
not eax
add eax, 0x24651c25
xor eax, 0x35025258
rol eax, 0x7a
popf
jmp 0x14008c915
mov rax, qword [rbp - 0x11]
mov word [rbp + 7], r15w
add rax, 0x58
je 0x14008d764
push rax
pushf
mov eax, 0xdcae182a
pushf
not eax
add eax, 0x7442ba72
xor eax, 0x4a51a8c1
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x2c554702
xor eax, 0x20b563af
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x773bf257
xor eax, 0x79962242
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x4e564f67
xor eax, 0x387c3733
rol eax, 0x75
popf
jmp 0x14008c915
push rax
pushf
mov eax, 0x2d1adf19
pushf
not eax
add eax, 0x5c7e695d
xor eax, 0xf8fccb5
rol eax, 0x72
popf
pushf
not eax
add eax, 0x7770481d
xor eax, 0x5bdbc46b
rol eax, 0x6e
popf
jmp 0x14008c915
mov qword [rsp + 0x38], r15
lea rcx, [rbp + 7]
mov qword [rbp + 0x2f], rax
lea r8, [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rbp + 0x27], rcx
mov qword [rsp + 0x30], rax
mov r9d, 0x920c4c52
pushf
not r9d
add r9d, 0x52bea4b5
xor r9d, 0x7febf8c5
rol r9d, 0xe1
popf
pushf
not r9d
add r9d, 0x4dd918a6
xor r9d, 0x3b807dbb
rol r9d, 0xf5
popf
pushf
not r9d
add r9d, 0x704afc67
xor r9d, 0x128967b1
rol r9d, 0x53
popf
mov dword [rsp + 0x28], r15d
mov edx, 0xfcc93629
pushf
not edx
add edx, 0x42288929
xor edx, 0x11f155cb
rol edx, 0x80
popf
pushf
not edx
add edx, 0x1601d6e8
xor edx, 0x4cb9e4bd
rol edx, 0x14
popf
pushf
not edx
add edx, 0x1eb6ea6f
xor edx, 0x4c460a2c
rol edx, 0xba
popf
mov rcx, rsi
mov qword [rsp + 0x20], r15
mov qword [rbp + 0x1f], r15
mov qword [rbp + 0x17], 0x33
mov qword [rbp + 0x37], 0x10
mov dword [rbp - 0x15], r15d
jmp 0x14008d870
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
setne al
jmp 0x14008d8f8
xor al, al
push rax
pushf
mov eax, 0xa86dd18e
pushf
not eax
add eax, 0x20033231
xor eax, 0x76638f6c
rol eax, 0x84
popf
pushf
not eax
add eax, 0x32976649
xor eax, 0x13286962
rol eax, 0xa1
popf
jmp 0x14008c915
mov r14, qword [rsp + 0xf0]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400ff118
mov rsi, qword [rsp + 0xf8]
add rsp, 0xc0
pop r15
pop rdi
pop rbp
ret