Function at 0x14015a956
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x8a7b85ca
pushf
not eax
add eax, 0x9e05746f
xor eax, 0xf44044f7
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x80dcc37d
xor eax, 0xaa374dba
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xc3209121
xor eax, 0xda1e6a52
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xfc7747aa
xor eax, 0xb926113b
rol eax, 0xc6
popf
cmp eax, 0x20
jne 0x14015a9b9
popf
pop rax
jmp 0x14015c138
cmp eax, 0
jne 0x14015a9c8
popf
pop rax
jmp 0x14015ab99
cmp eax, 3
jne 0x14015a9d7
popf
pop rax
jmp 0x14015aea5
cmp eax, 1
jne 0x14015a9e6
popf
pop rax
jmp 0x14015ac6a
cmp eax, 0xd
jne 0x14015a9f5
popf
pop rax
jmp 0x14015b32d
cmp eax, 0x1a
jne 0x14015aa04
popf
pop rax
jmp 0x14015bda2
cmp eax, 0xe
jne 0x14015aa13
popf
pop rax
jmp 0x14015b43a
cmp eax, 0xb
jne 0x14015aa22
popf
pop rax
jmp 0x14015b1bc
cmp eax, 0x19
jne 0x14015aa31
popf
pop rax
jmp 0x14015bcee
cmp eax, 8
jne 0x14015aa40
popf
pop rax
jmp 0x14015b0cb
cmp eax, 0x1d
jne 0x14015aa4f
popf
pop rax
jmp 0x14015bfcf
cmp eax, 0x17
jne 0x14015aa5e
popf
pop rax
jmp 0x14015bb0f
cmp eax, 0x1c
jne 0x14015aa6d
popf
pop rax
jmp 0x14015bf46
cmp eax, 0x12
jne 0x14015aa7c
popf
pop rax
jmp 0x14015b72b
cmp eax, 0x18
jne 0x14015aa8b
popf
pop rax
jmp 0x14015bbce
cmp eax, 0x11
jne 0x14015aa9a
popf
pop rax
jmp 0x14015b67f
cmp eax, 0x1b
jne 0x14015aaa9
popf
pop rax
jmp 0x14015be56
cmp eax, 0x16
jne 0x14015aab8
popf
pop rax
jmp 0x14015ba2e
cmp eax, 0xa
jne 0x14015aac7
popf
pop rax
jmp 0x14015b185
cmp eax, 0x14
jne 0x14015aad6
popf
pop rax
jmp 0x14015b8ea
cmp eax, 0xf
jne 0x14015aae5
popf
pop rax
jmp 0x14015b4d3
cmp eax, 0x13
jne 0x14015aaf4
popf
pop rax
jmp 0x14015b7d0
cmp eax, 0x15
jne 0x14015ab03
popf
pop rax
jmp 0x14015b983
cmp eax, 2
jne 0x14015ab12
popf
pop rax
jmp 0x14015adee
cmp eax, 0x1e
jne 0x14015ab21
popf
pop rax
jmp 0x14015c073
cmp eax, 0xc
jne 0x14015ab30
popf
pop rax
jmp 0x14015b29b
cmp eax, 7
jne 0x14015ab3f
popf
pop rax
jmp 0x14015b048
cmp eax, 5
jne 0x14015ab4e
popf
pop rax
jmp 0x14015af49
cmp eax, 0x1f
jne 0x14015ab5d
popf
pop rax
jmp 0x14015c103
cmp eax, 0x10
jne 0x14015ab6c
popf
pop rax
jmp 0x14015b58b
cmp eax, 6
jne 0x14015ab7b
popf
pop rax
jmp 0x14015af86
cmp eax, 9
jne 0x14015ab8a
popf
pop rax
jmp 0x14015b14d
cmp eax, 4
jne 0x14015ab99
popf
pop rax
jmp 0x14015af3a
mov qword [rsp + 0x20], rbx
push rbp
push rdi
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14010a0d0]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor edx, edx
lea r9, [rbp - 0x18]
mov rdi, rcx
xor r15d, r15d
xor r8d, r8d
mov dword [rbp - 0x18], r15d
mov ebx, r15d
lea ecx, [rdx + 0x40]
jmp 0x14015abd1
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14015ac11
push rax
pushf
mov eax, 0xa8888906
pushf
not eax
add eax, 0xfdb8ceed
xor eax, 0xf410059b
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa09830c0
xor eax, 0xc059602f
rol eax, 0x42
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x2e778cbf
pushf
not eax
add eax, 0xe4911198
xor eax, 0xe9b77fc9
rol eax, 0x66
popf
pushf
not eax
add eax, 0x8dd4dc2e
xor eax, 0x912aa5d0
rol eax, 2
popf
pushf
not eax
add eax, 0xaec09850
xor eax, 0xf2d5970a
rol eax, 0x18
popf
pushf
not eax
add eax, 0xc307e4e7
xor eax, 0x8574cc9f
rol eax, 0xa
popf
jmp 0x14015a9aa
xor edx, edx
mov r8d, 0x82d5c8be
pushf
not r8d
add r8d, 0xe5f4d768
xor r8d, 0xe2887124
rol r8d, 0x51
popf
pushf
not r8d
add r8d, 0x9527b74a
xor r8d, 0x960c941b
rol r8d, 0x82
popf
mov rcx, rbx
jmp 0x14015aca8
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x18]
xor ecx, ecx
mov r8d, 0xe49f4c10
pushf
not r8d
add r8d, 0xfea465ef
xor r8d, 0xc8922cb6
rol r8d, 0xd5
popf
pushf
not r8d
add r8d, 0xce6001e7
xor r8d, 0xebe5997e
rol r8d, 0x19
popf
pushf
not r8d
add r8d, 0xc4a158da
xor r8d, 0xa47bb31e
rol r8d, 0xb7
popf
pushf
not r8d
add r8d, 0xf68cc8ea
xor r8d, 0xbcdb0d15
rol r8d, 0x2d
popf
lea r9d, [rcx + 4]
jmp 0x14015ad22
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rbp - 0x18]
lea r9, [rbp - 0x18]
mov rdx, rax
mov ecx, 0x93f111e0
pushf
not ecx
add ecx, 0xed847dd5
xor ecx, 0xe48c10d4
rol ecx, 0xa2
popf
pushf
not ecx
add ecx, 0xc6e25c63
xor ecx, 0x843b3ac3
rol ecx, 0x98
popf
pushf
not ecx
add ecx, 0xb6903b44
xor ecx, 0x9339cbee
rol ecx, 0x3a
popf
mov rbx, rax
jmp 0x14015ad7b
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14015adbb
push rax
pushf
mov eax, 0x97ce5dae
pushf
not eax
add eax, 0xc825a0f1
xor eax, 0xf706b24a
rol eax, 0x30
popf
pushf
not eax
add eax, 0xdb0640bd
xor eax, 0xe9fd7963
rol eax, 0x9e
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x5e31f7ab
pushf
not eax
add eax, 0xdd0f3171
xor eax, 0xcf2f5933
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x9b82a393
xor eax, 0xe990529c
rol eax, 0x74
popf
jmp 0x14015a9aa
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], r14
test eax, eax
js 0x14015ae4c
push rax
pushf
mov eax, 0x8a7a6445
pushf
not eax
add eax, 0x9837dfdd
xor eax, 0xea28083e
rol eax, 0xac
popf
pushf
not eax
add eax, 0xaaf822fa
xor eax, 0x894bcaab
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xb15cec87
xor eax, 0x8a46f30b
rol eax, 0x16
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xa489955c
pushf
not eax
add eax, 0xd5e73000
xor eax, 0xb507e27e
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb8b74b47
xor eax, 0x9e535d32
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x9b6e8c55
xor eax, 0xc2706fc7
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xe7983024
xor eax, 0x84a8301d
rol eax, 0xef
popf
jmp 0x14015a9aa
test rbx, rbx
je 0x14015aee1
push rax
pushf
mov eax, 0xfb0e1682
pushf
not eax
add eax, 0xff35cd6e
xor eax, 0xe62d485d
rol eax, 0x34
popf
pushf
not eax
add eax, 0x8f431439
xor eax, 0xa3d47389
rol eax, 0x93
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x387b83b0
pushf
not eax
add eax, 0xcee6657e
xor eax, 0xd997df1b
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x97b3da94
xor eax, 0xb7fa8941
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xaa56fc7d
xor eax, 0xfe986a27
rol eax, 0x34
popf
pushf
not eax
add eax, 0xc4b0403c
xor eax, 0xe53c7055
rol eax, 0x90
popf
jmp 0x14015a9aa
mov esi, r15d
mov r14, r15
cmp qword [rbx], rsi
jbe 0x14015b1bc
mov rax, r15
nop dword [rax]
push rax
pushf
mov eax, 0xe98486d7
pushf
not eax
add eax, 0xd76aef0d
xor eax, 0xa44f279f
rol eax, 0xda
popf
pushf
not eax
add eax, 0xdd2ab2e1
xor eax, 0xf4040da2
rol eax, 0xa3
popf
jmp 0x14015a9aa
lea rax, [rax + rax*4]
movups xmm0, xmmword [rbx + rax*8 + 0x10]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmm0, xmmword [rbx + rax*8 + 0x20]
movups xmmword [rbp - 0x30], xmm0
jmp 0x14015afa1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movups xmm0, xmmword [rbp - 0x50]
mov ecx, eax
psrldq xmm0, 8
movq rax, xmm0
cmp rax, rcx
jne 0x14015b002
push rax
pushf
mov eax, 0xbcbd3532
pushf
not eax
add eax, 0x99fd828e
xor eax, 0x899f2aa7
rol eax, 0x58
popf
pushf
not eax
add eax, 0xa6d353dc
xor eax, 0xaf55dfb7
rol eax, 0x60
popf
pushf
not eax
add eax, 0x90f16dfb
xor eax, 0x8bc5cc37
rol eax, 0x77
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xae74c4d9
pushf
not eax
add eax, 0xb5d2b055
xor eax, 0xd4813ff4
rol eax, 0x57
popf
pushf
not eax
add eax, 0x9f14e3cf
xor eax, 0x8965461c
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xda443589
xor eax, 0xa3b6508d
rol eax, 0xeb
popf
jmp 0x14015a9aa
mov rax, qword [rdi]
cmp qword [rbp - 0x30], rax
je 0x14015b097
push rax
pushf
mov eax, 0x3d324ca0
pushf
not eax
add eax, 0x95c4b777
xor eax, 0xfe26a56b
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x9d69d0d5
xor eax, 0xdc441ad6
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xa223dc82
xor eax, 0x9541949e
rol eax, 0x75
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x25b9d35e
pushf
not eax
add eax, 0xfaa9d01a
xor eax, 0xa37cb047
rol eax, 0x82
popf
pushf
not eax
add eax, 0xc573e1e3
xor eax, 0xe732adf1
rol eax, 0xf
popf
jmp 0x14015a9aa
inc esi
mov eax, esi
cmp rax, qword [rbx]
jb 0x14015b11a
push rax
pushf
mov eax, 0xe001be43
pushf
not eax
add eax, 0xf6936917
xor eax, 0xaaefaba9
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xcfcbdd65
xor eax, 0x9a604ce8
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf1cd0d86
xor eax, 0xbf55410f
rol eax, 0xea
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xe95a882
pushf
not eax
add eax, 0xfa15b1f3
xor eax, 0xe61f7120
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xb1696623
xor eax, 0xb08f6ead
rol eax, 0xdd
popf
jmp 0x14015a9aa
jmp 0x14015c073
mov r14, qword [rbp - 0x40]
push rax
pushf
mov eax, 0xec15f7fd
pushf
not eax
add eax, 0xa58d57c1
xor eax, 0xad57fe94
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xaa2d3d15
xor eax, 0xf6025a91
rol eax, 0xa3
popf
jmp 0x14015a9aa
xor edx, edx
mov r8d, 0xbbb7d773
pushf
not r8d
add r8d, 0xe0eddb37
xor r8d, 0xbfec1989
rol r8d, 0x17
popf
pushf
not r8d
add r8d, 0xc348dc2f
xor r8d, 0xf2009063
rol r8d, 0xa9
popf
pushf
not r8d
add r8d, 0xbf3da4fe
xor r8d, 0xc73f211e
rol r8d, 0x67
popf
mov rcx, rbx
jmp 0x14015b213
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test r14, r14
je 0x14015b255
push rax
pushf
mov eax, 0x3280988a
pushf
not eax
add eax, 0xef68600c
xor eax, 0xbc6b6dc0
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xd0803158
xor eax, 0xc07466b3
rol eax, 0xb2
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xc8fb7f57
pushf
not eax
add eax, 0xf45a3cde
xor eax, 0xf829f8c4
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xfd4a5794
xor eax, 0xfb2fcded
rol eax, 0x89
popf
pushf
not eax
add eax, 0xfd51c8d9
xor eax, 0xe0379d68
rol eax, 0xe7
popf
jmp 0x14015a9aa
lea rdx, [r14 + 8]
mov qword [rbp - 0x50], r15
mov rcx, rdi
call fcn.1402587ca
test rax, rax
je 0x14015b2fa
push rax
pushf
mov eax, 0xfa9a74eb
pushf
not eax
add eax, 0xb5fa8758
xor eax, 0xfb3bbb47
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xcb6bfaf5
xor eax, 0xbf56eb95
rol eax, 0x65
popf
pushf
not eax
add eax, 0xed8260d3
xor eax, 0xcb730535
rol eax, 0xf6
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x61da50c5
pushf
not eax
add eax, 0xa6352dcf
xor eax, 0xd97ccb86
rol eax, 0x95
popf
pushf
not eax
add eax, 0xb824ca07
xor eax, 0xe630d544
rol eax, 0x34
popf
jmp 0x14015a9aa
lea r9, [rbp - 0x50]
mov r8d, 0xd8ef02ab
pushf
not r8d
add r8d, 0xe1193f92
xor r8d, 0xfb28e529
rol r8d, 0x33
popf
pushf
not r8d
add r8d, 0x936135b6
xor r8d, 0xa6919d4e
rol r8d, 0x15
popf
pushf
not r8d
add r8d, 0xad4767d6
xor r8d, 0xf6abaccd
rol r8d, 0xf2
popf
pushf
not r8d
add r8d, 0x8068d414
xor r8d, 0xac063d51
rol r8d, 0x53
popf
mov rdx, rax
mov rcx, rdi
call fcn.140324d46
test eax, eax
je 0x14015b3f4
push rax
pushf
mov eax, 0x7e7415ea
pushf
not eax
add eax, 0xf9dcf893
xor eax, 0x94cb89fa
rol eax, 0x47
popf
pushf
not eax
add eax, 0xdbd42c3b
xor eax, 0xe26a1718
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe02fb5eb
xor eax, 0xf23abba0
rol eax, 0x13
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xb216b13c
pushf
not eax
add eax, 0xae772b95
xor eax, 0xa3d35af8
rol eax, 0xf
popf
pushf
not eax
add eax, 0xe1f47a25
xor eax, 0xc8def855
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xb8cbf5af
xor eax, 0xc7e0201e
rol eax, 0x6b
popf
jmp 0x14015a9aa
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x14015b48d
push rax
pushf
mov eax, 0x55ecdf44
pushf
not eax
add eax, 0x8215feb8
xor eax, 0xf17165e6
rol eax, 0x10
popf
pushf
not eax
add eax, 0x840a7b30
xor eax, 0xb6210231
rol eax, 2
popf
pushf
not eax
add eax, 0xbf47ae7b
xor eax, 0xc1f12e10
rol eax, 0x5c
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x10acc8c
pushf
not eax
add eax, 0xc142f5da
xor eax, 0xed744b5d
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc8b9ee5c
xor eax, 0xc7195885
rol eax, 0x67
popf
pushf
not eax
add eax, 0xef8a00ff
xor eax, 0x9866f8ce
rol eax, 0x11
popf
jmp 0x14015a9aa
add rdx, 8
mov qword [rbp - 0x50], r15
mov rcx, rdi
call fcn.1402587ca
test rax, rax
je 0x14015b545
push rax
pushf
mov eax, 0x869b0ddb
pushf
not eax
add eax, 0x8399c341
xor eax, 0xc40d28ad
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xad6a18cc
xor eax, 0x8d1483af
rol eax, 0x66
popf
pushf
not eax
add eax, 0xcfd43df0
xor eax, 0x86b377ed
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xb710ac35
xor eax, 0xd32b2113
rol eax, 0x39
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xd9675fcd
pushf
not eax
add eax, 0xe7b10924
xor eax, 0xd7981128
rol eax, 5
popf
pushf
not eax
add eax, 0xf1617c3d
xor eax, 0xe97353de
rol eax, 0x44
popf
pushf
not eax
add eax, 0xac8ca748
xor eax, 0xd9f8ab52
rol eax, 0xa8
popf
jmp 0x14015a9aa
lea r9, [rbp - 0x50]
mov r8d, 0xad6f2561
pushf
not r8d
add r8d, 0xe2dda75e
xor r8d, 0x96e4476f
rol r8d, 0x72
popf
pushf
not r8d
add r8d, 0xf36deb0f
xor r8d, 0xd58d9de6
rol r8d, 0xaa
popf
pushf
not r8d
add r8d, 0xfea9d8d0
xor r8d, 0xb3a5c49c
rol r8d, 0xc3
popf
mov rdx, rax
mov rcx, rdi
call fcn.140324d46
test eax, eax
je 0x14015b626
push rax
pushf
mov eax, 0xabeb7de
pushf
not eax
add eax, 0xb2364b84
xor eax, 0xdf7ab01f
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xa0b45ca0
xor eax, 0xe63c4f6d
rol eax, 0
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xc2a2a6d6
pushf
not eax
add eax, 0x82493759
xor eax, 0xd7b73ec1
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x860c0a0d
xor eax, 0xcf9064ee
rol eax, 0x40
popf
pushf
not eax
add eax, 0xc559a328
xor eax, 0xf871859a
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x99824a4d
xor eax, 0xb1f2cb23
rol eax, 0x94
popf
jmp 0x14015a9aa
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x14015b6d2
push rax
pushf
mov eax, 0x95feffd0
pushf
not eax
add eax, 0xc48dd510
xor eax, 0xfae10b80
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xe9e15154
xor eax, 0x9827ef7a
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xbdd1f4bf
xor eax, 0xf35cfd3a
rol eax, 0x75
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x377ec332
pushf
not eax
add eax, 0x85f8c9cb
xor eax, 0xc5f2fc95
rol eax, 0x67
popf
pushf
not eax
add eax, 0xb71655a2
xor eax, 0xa9090462
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xa127cfde
xor eax, 0xa4a4a51e
rol eax, 0x45
popf
pushf
not eax
add eax, 0xbdaf525b
xor eax, 0xc45f8cd7
rol eax, 0xef
popf
jmp 0x14015a9aa
add rdx, 0x28
mov qword [rbp - 0x50], r15
mov rcx, rdi
call fcn.1402587ca
test rax, rax
je 0x14015b777
push rax
pushf
mov eax, 0xda1520c9
pushf
not eax
add eax, 0xaa98fc4c
xor eax, 0xbea8e6c9
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xbe9564c9
xor eax, 0xef42892d
rol eax, 0x80
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x3077e4ff
pushf
not eax
add eax, 0x828e2855
xor eax, 0xe4e97c90
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x9e45d9bb
xor eax, 0x94bbcbb7
rol eax, 0x89
popf
pushf
not eax
add eax, 0x8a7b9cb6
xor eax, 0xdd8d0c5c
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xb8d6b55f
xor eax, 0x9e708e01
rol eax, 0x22
popf
jmp 0x14015a9aa
lea r9, [rbp - 0x50]
mov r8d, 0x28fb3ada
pushf
not r8d
add r8d, 0x8550f347
xor r8d, 0x83e42a29
rol r8d, 0xdc
popf
pushf
not r8d
add r8d, 0xfdf0682b
xor r8d, 0x978cee18
rol r8d, 0xb9
popf
pushf
not r8d
add r8d, 0xc84434c9
xor r8d, 0x8d334186
rol r8d, 0x6b
popf
mov rdx, rax
mov rcx, rdi
call fcn.140324d46
test eax, eax
je 0x14015b891
push rax
pushf
mov eax, 0xf2b6264a
pushf
not eax
add eax, 0x842cb2ee
xor eax, 0xb09abf97
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x9fe8e1f0
xor eax, 0xd0390c97
rol eax, 0x63
popf
pushf
not eax
add eax, 0xfd5cf52c
xor eax, 0xc5ac9fef
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x936d366e
xor eax, 0xeec37b45
rol eax, 0x87
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x29e44ace
pushf
not eax
add eax, 0xedcc3e02
xor eax, 0xcbb958df
rol eax, 0x74
popf
pushf
not eax
add eax, 0x81d7901b
xor eax, 0xc3cb5641
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xcab38b15
xor eax, 0xddb55627
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xac88d9eb
xor eax, 0x89df3fb3
rol eax, 0xda
popf
jmp 0x14015a9aa
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x14015b950
push rax
pushf
mov eax, 0xee251323
pushf
not eax
add eax, 0xfd2389e1
xor eax, 0xf379ecde
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x8b97b7c4
xor eax, 0xb4673871
rol eax, 0x60
popf
pushf
not eax
add eax, 0xa4653d63
xor eax, 0xd5b86a10
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x989f940d
xor eax, 0xa7f918b4
rol eax, 0x1f
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x5c2f4fb8
pushf
not eax
add eax, 0xae4f7a49
xor eax, 0xd7deba64
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xdcc1c99d
xor eax, 0xf3b280cd
rol eax, 0x3c
popf
jmp 0x14015a9aa
lea rsi, [rax + 0x58]
xorps xmm0, xmm0
mov rdx, rsi
mov rcx, rdi
movups xmmword [rbp - 0x50], xmm0
call fcn.1402587ca
test rax, rax
je 0x14015b9e8
push rax
pushf
mov eax, 0xacc5875
pushf
not eax
add eax, 0xe1ac656f
xor eax, 0xcc219283
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc44bb6b6
xor eax, 0xaa773acc
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x88cec1d7
xor eax, 0xbf021242
rol eax, 0xde
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x7e151acc
pushf
not eax
add eax, 0xb48e4762
xor eax, 0xe55c0943
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8fe965dd
xor eax, 0x8b96bf05
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xdf85171e
xor eax, 0xaaa3cadc
rol eax, 0xe
popf
jmp 0x14015a9aa
lea r9, [rbp - 0x50]
mov r8d, 0x5fe599de
pushf
not r8d
add r8d, 0xd9541741
xor r8d, 0x8761fd39
rol r8d, 0xc6
popf
pushf
not r8d
add r8d, 0xc70cb526
xor r8d, 0x8efdd2eb
rol r8d, 0x4e
popf
pushf
not r8d
add r8d, 0xd5fbf9b4
xor r8d, 0x82e8863f
rol r8d, 0xf
popf
mov rdx, rax
mov rcx, rdi
call fcn.140324d46
test eax, eax
je 0x14015bac9
push rax
pushf
mov eax, 0x87edf9bd
pushf
not eax
add eax, 0xd0570968
xor eax, 0x92b8fc92
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xd02a5270
xor eax, 0xece30aa3
rol eax, 0x6e
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x30a60e16
pushf
not eax
add eax, 0x831f7444
xor eax, 0xde271c8b
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x9a33196c
xor eax, 0xc8120510
rol eax, 0x14
popf
pushf
not eax
add eax, 0xeff50783
xor eax, 0xa2210362
rol eax, 0x76
popf
jmp 0x14015a9aa
movzx eax, word [rbp - 0x50]
test ax, ax
je 0x14015bb75
push rax
pushf
mov eax, 0xf05e372c
pushf
not eax
add eax, 0xc3f31e6c
xor eax, 0x8f979197
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xb8c0d93f
xor eax, 0xd0064e7c
rol eax, 0x43
popf
pushf
not eax
add eax, 0xf71b4efb
xor eax, 0xe360e7d7
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xe0d4b332
xor eax, 0xc4e0e452
rol eax, 9
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x8602a7fb
pushf
not eax
add eax, 0xdfa15d5d
xor eax, 0x993fc042
rol eax, 0x58
popf
pushf
not eax
add eax, 0xebd92afa
xor eax, 0x87aa5a84
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xfcdd7bc0
xor eax, 0xed2b9113
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xcb02d96d
xor eax, 0x86acbdbc
rol eax, 0x5d
popf
jmp 0x14015a9aa
mov ecx, eax
mov r14d, eax
shr rcx, 1
mov eax, 0xb6b128f
pushf
not eax
add eax, 0xbebc2f1c
xor eax, 0xd8a9a469
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x81aac13a
xor eax, 0xe2515c9f
rol eax, 0x42
popf
pushf
not eax
add eax, 0xd770acb6
xor eax, 0x87b9d94d
rol eax, 0x91
popf
pushf
not eax
add eax, 0x8d1ee416
xor eax, 0xb49701f9
rol eax, 0xaf
popf
inc rcx
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1403801d2
lea r8, [r14 + 2]
xor edx, edx
mov rcx, rax
mov rbx, rax
call fcn.14004a970
mov rdx, qword [rbp - 0x48]
mov rcx, rdi
call fcn.1402587ca
test rax, rax
je 0x14015bcbb
push rax
pushf
mov eax, 0x7f5fc7e3
pushf
not eax
add eax, 0xfdc43ab2
xor eax, 0xf46011df
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xce85b1c4
xor eax, 0xe600026c
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe2c2d9cb
xor eax, 0x807def85
rol eax, 0x98
popf
pushf
not eax
add eax, 0xfd02470e
xor eax, 0xe5883db5
rol eax, 0xc5
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x7b4b98a8
pushf
not eax
add eax, 0x8fd3c233
xor eax, 0xfed5c494
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb708a6b5
xor eax, 0xd836b831
rol eax, 0x9f
popf
jmp 0x14015a9aa
mov r9, rbx
mov r8d, r14d
mov rdx, rax
mov rcx, rdi
call fcn.140324d46
test eax, eax
je 0x14015bd49
push rax
pushf
mov eax, 0xd11c4e9c
pushf
not eax
add eax, 0xa8b73e9d
xor eax, 0xb369693d
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x83d17c4f
xor eax, 0xee1eb6ca
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xa2809ab6
xor eax, 0x950b3cf6
rol eax, 0xab
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xe3e11e2e
pushf
not eax
add eax, 0xcf15ab49
xor eax, 0x9f8170ab
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xd865cb5e
xor eax, 0x904bcb88
rol eax, 0x33
popf
pushf
not eax
add eax, 0xfae21d14
xor eax, 0xc16a4448
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xc6abc092
xor eax, 0xecb4f6cc
rol eax, 0xa7
popf
jmp 0x14015a9aa
mov rdx, rsi
mov word [rbp - 0x50], r15w
mov rcx, rdi
call fcn.1402587ca
test rax, rax
je 0x14015be10
push rax
pushf
mov eax, 0x566bbaae
pushf
not eax
add eax, 0xc2b5aa6b
xor eax, 0xaf6c01b4
rol eax, 0x69
popf
pushf
not eax
add eax, 0xa5084767
xor eax, 0xe60f9b96
rol eax, 0x30
popf
pushf
not eax
add eax, 0xb1db29d5
xor eax, 0xc27d56e8
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xefce7e0e
xor eax, 0xd741dfe1
rol eax, 0x65
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x7785d39c
pushf
not eax
add eax, 0x86e37b86
xor eax, 0xe2843e3d
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xa91fec98
xor eax, 0xc16e8eb6
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb07df4f0
xor eax, 0xbed9de8c
rol eax, 0xc3
popf
jmp 0x14015a9aa
lea r9, [rbp - 0x50]
mov r8d, 0xfcd8ed5f
pushf
not r8d
add r8d, 0xe2501a6d
xor r8d, 0xb58d23e2
rol r8d, 0xc0
popf
pushf
not r8d
add r8d, 0xca5de702
xor r8d, 0xd907a81a
rol r8d, 0x18
popf
pushf
not r8d
add r8d, 0xd3c6046a
xor r8d, 0xcb279ff9
rol r8d, 0x53
popf
mov rdx, rax
mov rcx, rdi
call fcn.140321369
test eax, eax
je 0x14015beed
push rax
pushf
mov eax, 0xabfa1c16
pushf
not eax
add eax, 0xad4f2769
xor eax, 0xb5356677
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xe368352d
xor eax, 0x9d615ad1
rol eax, 0x37
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0xedc5596a
pushf
not eax
add eax, 0xd558cc14
xor eax, 0xfa753f71
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x8e7e016d
xor eax, 0xade2ee7d
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xba5c14c2
xor eax, 0xf01c08b3
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xb6106e8e
xor eax, 0xb1b6e129
rol eax, 0x1f
popf
jmp 0x14015a9aa
mov rcx, rbx
call fcn.14021a52b
mov al, 0xd7
pushf
not al
add al, 0xe9
xor al, 0xd7
rol al, 0xcc
popf
pushf
not al
add al, 0xa6
xor al, 0xa3
rol al, 0x5d
popf
pushf
not al
add al, 0xc0
xor al, 0x41
rol al, 0x19
popf
pushf
not al
add al, 0xa9
xor al, 0xe
rol al, 0x9a
popf
jmp 0x14015c138
test rbx, rbx
je 0x14015c01a
push rax
pushf
mov eax, 0x7fb1ef0e
pushf
not eax
add eax, 0xe9e1e6d7
xor eax, 0x9421642d
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf87a6345
xor eax, 0x8a10d729
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x8069bedd
xor eax, 0x8324b5db
rol eax, 0xe6
popf
jmp 0x14015a9aa
push rax
pushf
mov eax, 0x207ec3d
pushf
not eax
add eax, 0xb3d316dd
xor eax, 0x90c27595
rol eax, 0x14
popf
pushf
not eax
add eax, 0xa4a0ce14
xor eax, 0x97b3dd38
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf6a82601
xor eax, 0xbceaa0ca
rol eax, 0x89
popf
pushf
not eax
add eax, 0xccd3a7aa
xor eax, 0x9d6ee2f6
rol eax, 0xc6
popf
jmp 0x14015a9aa
mov r8d, 0x6afe6506
pushf
not r8d
add r8d, 0x8887bbc5
xor r8d, 0x89a761bf
rol r8d, 0xd0
popf
pushf
not r8d
add r8d, 0xcd47eec5
xor r8d, 0xf4cb0787
rol r8d, 0x9c
popf
pushf
not r8d
add r8d, 0xaa98f016
xor r8d, 0x94701e44
rol r8d, 0xe5
popf
xor edx, edx
mov rcx, rbx
jmp 0x14015c0ca
call qword [sym.imp.KERNEL32.dll_VirtualFree]
push rax
pushf
mov eax, 0x37028d7f
pushf
not eax
add eax, 0xf6943765
xor eax, 0xad67efbb
rol eax, 0x62
popf
pushf
not eax
add eax, 0xf55e550b
xor eax, 0xa985c392
rol eax, 0x55
popf
jmp 0x14015a9aa
xor al, al
push rax
pushf
mov eax, 0x742c0fb7
pushf
not eax
add eax, 0xf2d2521f
xor eax, 0xcb7c13b8
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xfc3322aa
xor eax, 0xdc37c504
rol eax, 0xec
popf
jmp 0x14015a9aa
mov r14, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1402ac965
mov rbx, qword [rsp + 0xa8]
add rsp, 0x70
pop r15
pop rdi
pop rbp
ret