Function at 0x140004b20
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get number of processors

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm6
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
add rax, 0x20
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov ebp, dword [rsp + 0x20]
mov edx, ebp
xor edx, 0x1e27
mov dword [rsp + 0x20], edx
movups xmm0, xmmword [rsp + 0x28]
movaps xmm1, xmmword [0x14000c630]
xorps xmm0, xmm1
movups xmmword [rsp + 0x28], xmm0
movups xmm0, xmmword [rsp + 0x38]
xorps xmm0, xmm1
movups xmmword [rsp + 0x38], xmm0
xor dword [rsp + 0x48], 0x1e27
add rax, 0xfffffffffffffff0
xor dword [rsp + 0x4c], 0x1e27
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x64], 0xc383f77a
mov r13d, ecx
not r13d
mov eax, r13d
and eax, 0x6a78ebb9
mov edx, ecx
and edx, 0x95871446
add edx, ecx
and r13d, 0x95871446
add r13d, edx
or ecx, 0x95871446
sub r13d, ecx
or r13d, eax
xor r13d, 0x382bbfec
lea eax, [r13 + 1]
mov dword [rsp + 0x60], eax
xor ebp, 0x5039
mov dword [rsp + 0x5c], ebp
mov edx, 0x476
xor eax, eax
mov qword [rsp + 0x70], rax
movaps xmm6, xmmword [0x14000c650]
mov ebp, 0x29c5
movaps xmm7, xmmword [0x14000c640]
xor eax, eax
mov qword [rsp + 0x68], rax
jmp 0x140004ca3
cmp r15d, 0x61010645
jne 0x140004eca
mov rdi, qword [r12 + 0x60]
mov rcx, rdi
call fcn.1400027f0
mov rcx, rdi
call fcn.140002600
mov ecx, dword [rsp + 0x60]
sub ecx, eax
neg eax
mov edx, r13d
xor edx, eax
mov ebx, r13d
or ebx, eax
sub ecx, edx
add ecx, ebx
and eax, r13d
add eax, 1
cmp ecx, eax
mov eax, 0xe8add9b8
mov ecx, 0xee13ed46
cmove eax, ecx
mov edx, dword [rsp + 0x34]
xor edx, ebp
mov rcx, rsi
mov rdi, r12
mov rbx, r14
cmp edx, 0x5038
jle 0x140004ce0
cmp edx, 0x6531
jle 0x140004d30
cmp edx, 0x6532
je 0x140004edf
cmp edx, 0x66ad
je 0x140004c54
cmp edx, 0x7c93
jne 0x140004ca3
mov edx, dword [rsp + 0x44]
xor edx, ebp
mov eax, 0x69325ce4
xor ecx, ecx
jmp 0x140004c9d
cmp edx, 0x22f0
jle 0x140004d60
cmp edx, 0x22f1
je 0x140004e79
cmp edx, 0x3958
je 0x140004df1
cmp edx, 0x3e31
jne 0x140004ca3
cmp r14, qword [rsp + 0x78]
mov eax, 0x57eee09f
mov ecx, 0xf77255f7
cmove eax, ecx
mov edx, dword [rsp + 0x2c]
jmp 0x140004c98
cmp edx, 0x5039
je 0x140004d8d
cmp edx, 0x51f0
jne 0x140004ea0
mov rbx, qword [r14]
mov edx, dword [rsp + 0x40]
xor edx, ebp
mov eax, 0x25dfd83
mov rcx, rsi
mov rdi, r12
jmp 0x140004ca3
cmp edx, 0x476
je 0x140004e01
cmp edx, 0xbb5
jne 0x140004ca3
mov rcx, qword [r12 + 0x30]
mov edx, dword [rsp + 0x38]
xor edx, ebp
mov eax, 0x69325ce4
jmp 0x140004c9d
cmp byte [rsp + 0x68], 0
jne 0x140004db6
movups xmm0, xmmword [rsp + 0x2c]
movups xmm1, xmmword [rsp + 0x3c]
xorps xmm0, xmm7
movups xmmword [rsp + 0x2c], xmm0
xorps xmm1, xmm7
movups xmmword [rsp + 0x3c], xmm1
xor dword [rsp + 0x4c], 0x52f6
mov al, 1
mov qword [rsp + 0x68], rax
cmp r15d, 0x25dfd82
jg 0x140004e56
cmp r15d, 0xee13ed45
jg 0x140004eae
cmp r15d, 0xa9808d6d
je 0x140004d44
cmp r15d, 0xe8add9b8
jne 0x140004ed3
mov edx, dword [rsp + 0x3c]
xor edx, ebp
mov eax, 0xa9808d6d
jmp 0x140004c9a
mov edx, dword [rsp + 0x64]
cmp byte [rsp + 0x70], 0
jne 0x140004e30
movups xmm0, xmmword [rsp + 0x28]
movups xmm1, xmmword [rsp + 0x38]
xorps xmm0, xmm6
movups xmmword [rsp + 0x28], xmm0
xorps xmm1, xmm6
movups xmmword [rsp + 0x38], xmm1
xor byte [rsp + 0x48], 0x26
xor byte [rsp + 0x4c], 0x26
mov r14, qword [rsp + 0x80]
mov r15d, 0x25dfd83
mov dl, 1
mov qword [rsp + 0x70], rdx
mov r12, qword [rsp + 0x88]
mov edx, dword [rsp + 0x5c]
jmp 0x140004ca3
cmp r15d, 0x61010644
jg 0x140004c47
cmp r15d, 0x25dfd83
je 0x140004d08
cmp r15d, 0x57eee09f
jne 0x140004ed3
lea rdi, [r14 - 0x10]
cmp qword [r14 + 0x50], 0
mov eax, 0x61010645
mov ecx, 0xa9808d6d
cmove eax, ecx
mov edx, dword [rsp + 0x30]
xor edx, ebp
mov rcx, rsi
mov rbx, r14
jmp 0x140004ca3
cmp edx, 0x5497
jne 0x140004ca3
jmp 0x140004efb
cmp r15d, 0xee13ed46
je 0x140004d78
cmp r15d, 0xf77255f7
je 0x140004ccf
jmp 0x140004ed3
cmp r15d, 0x69325ce4
je 0x140004efb
mov rcx, rsi
mov eax, r15d
mov rdi, r12
mov rbx, r14
mov edx, dword [rsp + 0x4c]
mov esi, 0x1cce
xor edx, esi
mov rsi, rcx
mov r15d, eax
mov r12, rdi
mov r14, rbx
jmp 0x140004ca3
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x90]
movaps xmm7, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret