Function at 0x14009ec71
Capabilities:
Authenticate hmac
Get system information on windows
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0x2499e560
pushf
not eax
add eax, 0x6ac9d4a4
xor eax, 0x7ad27900
rol eax, 0x81
popf
pushf
not eax
add eax, 0x5f485870
xor eax, 0x22236042
rol eax, 0xf
popf
pushf
not eax
add eax, 0x7d8e3bdc
xor eax, 0x57b85824
rol eax, 0x73
popf
cmp eax, 0x12
jne 0x14009ecc1
popf
pop rax
jmp 0x14009fc37
cmp eax, 2
jne 0x14009ecd0
popf
pop rax
jmp 0x14009ef62
cmp eax, 0x11
jne 0x14009ecdf
popf
pop rax
jmp 0x14009fb9c
cmp eax, 0
jne 0x14009ecee
popf
pop rax
jmp 0x14009eded
cmp eax, 0x13
jne 0x14009ecfd
popf
pop rax
jmp 0x14009fd8e
cmp eax, 0x14
jne 0x14009ed0c
popf
pop rax
jmp 0x14009fdd6
cmp eax, 3
jne 0x14009ed1b
popf
pop rax
jmp 0x14009f17b
cmp eax, 0xd
jne 0x14009ed2a
popf
pop rax
jmp 0x14009f7a1
cmp eax, 9
jne 0x14009ed39
popf
pop rax
jmp 0x14009f5a3
cmp eax, 0xb
jne 0x14009ed48
popf
pop rax
jmp 0x14009f695
cmp eax, 5
jne 0x14009ed57
popf
pop rax
jmp 0x14009f2f4
cmp eax, 0xe
jne 0x14009ed66
popf
pop rax
jmp 0x14009f880
cmp eax, 1
jne 0x14009ed75
popf
pop rax
jmp 0x14009ef17
cmp eax, 6
jne 0x14009ed84
popf
pop rax
jmp 0x14009f3c1
cmp eax, 7
jne 0x14009ed93
popf
pop rax
jmp 0x14009f41d
cmp eax, 0xa
jne 0x14009eda2
popf
pop rax
jmp 0x14009f637
cmp eax, 0xf
jne 0x14009edb1
popf
pop rax
jmp 0x14009f951
cmp eax, 0x10
jne 0x14009edc0
popf
pop rax
jmp 0x14009fa74
cmp eax, 8
jne 0x14009edcf
popf
pop rax
jmp 0x14009f4ea
cmp eax, 4
jne 0x14009edde
popf
pop rax
jmp 0x14009f231
cmp eax, 0xc
jne 0x14009eded
popf
pop rax
jmp 0x14009f6cd
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rax, qword [0x14003f040]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rsi, rcx
lea r9, [rbp - 0x19]
xor r15d, r15d
mov ecx, 0xac22c03
pushf
not ecx
add ecx, 0x3630b0b4
xor ecx, 0x1a4e24d6
rol ecx, 0xb3
popf
pushf
not ecx
add ecx, 0x3a862582
xor ecx, 0xffdb63c
rol ecx, 0x78
popf
pushf
not ecx
add ecx, 0x423a575d
xor ecx, 0x201ae72
rol ecx, 0x20
popf
xor r8d, r8d
mov dword [rbp - 0x19], r15d
xor edx, edx
mov edi, r15d
jmp 0x14009ee6b
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14009eebe
push rax
pushf
mov eax, 0xb947ac14
pushf
not eax
add eax, 0xb02ce97
xor eax, 0x78180ae3
rol eax, 0x23
popf
pushf
not eax
add eax, 0x68b07c6b
xor eax, 0x5a62e07d
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x568f091d
xor eax, 0x7f2a9814
rol eax, 0
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xf6edf53a
pushf
not eax
add eax, 0x147dd31f
xor eax, 0x54cc3ccd
rol eax, 0x69
popf
pushf
not eax
add eax, 0x7b8307f3
xor eax, 0x2a4b49d1
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x42e18c34
xor eax, 0x4db94984
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x3e6dffd7
xor eax, 0x184b06f9
rol eax, 0xe4
popf
jmp 0x14009ecb2
nop dword [rax + rax]
push rax
pushf
mov eax, 0xff161e9b
pushf
not eax
add eax, 0x8539d65
xor eax, 0x3cbcac52
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x46b343b7
xor eax, 0x51372cf1
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x5e10d344
xor eax, 0x55c20fce
rol eax, 0x59
popf
jmp 0x14009ecb2
xor edx, edx
mov r8d, 0xf781ebcc
pushf
not r8d
add r8d, 0x16bc576b
xor r8d, 0x6a625cf2
rol r8d, 0x92
popf
pushf
not r8d
add r8d, 0x3cef7f5b
xor r8d, 0x5f3da9fe
rol r8d, 0xd
popf
mov rcx, rdi
jmp 0x14009efa0
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x19]
xor ecx, ecx
mov r9d, 0x108dc7fb
pushf
not r9d
add r9d, 0xb279a25
xor r9d, 0x4db4cb23
rol r9d, 0x45
popf
pushf
not r9d
add r9d, 0x1f853843
xor r9d, 0x29075e06
rol r9d, 0xa6
popf
pushf
not r9d
add r9d, 0x6d25851a
xor r9d, 0x4367ca0a
rol r9d, 0x24
popf
pushf
not r9d
add r9d, 0x65957bf2
xor r9d, 0x5a4d71f2
rol r9d, 0xbf
popf
mov r8d, 0x30afbe26
pushf
not r8d
add r8d, 0x787a55b7
xor r8d, 0x5a3f50ef
rol r8d, 0xdc
popf
pushf
not r8d
add r8d, 0x482f7b47
xor r8d, 0x4e501ecf
rol r8d, 0x31
popf
jmp 0x14009f04e
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rbp - 0x19]
lea r9, [rbp - 0x19]
mov rdx, rax
mov ecx, 0x43994d2
pushf
not ecx
add ecx, 0x2fa63a86
xor ecx, 0x2951a640
rol ecx, 0x90
popf
pushf
not ecx
add ecx, 0x64a90ac8
xor ecx, 0x30d84b89
rol ecx, 0xf5
popf
pushf
not ecx
add ecx, 0x111e5d4b
xor ecx, 0x71f0d74d
rol ecx, 0x4b
popf
pushf
not ecx
add ecx, 0x29cdd887
xor ecx, 0x5075a7e
rol ecx, 0xe5
popf
mov rdi, rax
jmp 0x14009f0bc
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14009f122
push rax
pushf
mov eax, 0x56a77133
pushf
not eax
add eax, 0xaaec445
xor eax, 0x1843c890
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x48d391f
xor eax, 0x38f4d43
rol eax, 0x23
popf
pushf
not eax
add eax, 0x3b4d0ea8
xor eax, 0x21eff910
rol eax, 0x74
popf
pushf
not eax
add eax, 0xfa8cdf9
xor eax, 0x4d9fdb86
rol eax, 0x5e
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0x4e99c127
pushf
not eax
add eax, 0x11e0acbd
xor eax, 0x4d3ac51
rol eax, 0x16
popf
pushf
not eax
add eax, 0x14cccfe6
xor eax, 0x39c07872
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x4158f468
xor eax, 0x147c5e35
rol eax, 0x94
popf
pushf
not eax
add eax, 0x73aec157
xor eax, 0x402a827
rol eax, 0x14
popf
jmp 0x14009ecb2
test eax, eax
jns 0x14009f1d8
push rax
pushf
mov eax, 0x7104a421
pushf
not eax
add eax, 0x50e09abb
xor eax, 0x2601ece4
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x17e08d72
xor eax, 0x4bb73f5b
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x54e54368
xor eax, 0x520afea9
rol eax, 0x12
popf
pushf
not eax
add eax, 0x4177d7e3
xor eax, 0x9f07322
rol eax, 0xc9
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xabbec5f6
pushf
not eax
add eax, 0x23237a1e
xor eax, 0x5b9443ec
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x47c24cbb
xor eax, 0x1e53876
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x34fdc750
xor eax, 0x16bf66da
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x5736a5db
xor eax, 0x322f8bc8
rol eax, 0x90
popf
jmp 0x14009ecb2
xor edx, edx
mov r8d, 0x8f26df81
pushf
not r8d
add r8d, 0x3431d2fe
xor r8d, 0x44bcfdc3
rol r8d, 0xfd
popf
pushf
not r8d
add r8d, 0xc30d86
xor r8d, 0x27a3fa3b
rol r8d, 0xf3
popf
pushf
not r8d
add r8d, 0x18182a2f
xor r8d, 0x2ec0e514
rol r8d, 0xba
popf
pushf
not r8d
add r8d, 0x672e4f3
xor r8d, 0x6fdc211c
rol r8d, 0xc5
popf
mov rcx, rdi
jmp 0x14009f2a1
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor al, al
jmp 0x14009fdde
mov qword [rsp + 0xe8], rbx
mov ebx, r15d
mov qword [rsp + 0xf0], r14
mov r14, r15
cmp qword [rdi], rbx
jbe 0x14009f368
push rax
pushf
mov eax, 0x2a17d4a4
pushf
not eax
add eax, 0x3b87a7e0
xor eax, 0x6782c276
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x25ca9291
xor eax, 0x23eda1d7
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x5b2c46b7
xor eax, 0x6826410
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x69c5772
xor eax, 0x6ffefc9d
rol eax, 0xe
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0x6caf8c42
pushf
not eax
add eax, 0x3c5324e4
xor eax, 0x64f33ffa
rol eax, 0x14
popf
pushf
not eax
add eax, 0x6d4925ad
xor eax, 0x73bd3359
rol eax, 0x95
popf
pushf
not eax
add eax, 0x1966593e
xor eax, 0x27939845
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x9c66571
xor eax, 0x70324141
rol eax, 0x73
popf
jmp 0x14009ecb2
mov rax, r15
push rax
pushf
mov eax, 0x28edcde7
pushf
not eax
add eax, 0x76ecba10
xor eax, 0x40dda5cc
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x48c5632f
xor eax, 0x2dfdb819
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x6fc67a8e
xor eax, 0x64add846
rol eax, 0x11
popf
pushf
not eax
add eax, 0x47165a4b
xor eax, 0x4161feef
rol eax, 0x3b
popf
jmp 0x14009ecb2
lea rax, [rax + rax*4]
movups xmm0, xmmword [rdi + rax*8 + 0x10]
movups xmmword [rbp - 0x39], xmm0
movups xmm0, xmmword [rdi + rax*8 + 0x20]
movups xmmword [rbp - 0x29], xmm0
movsd xmm0, qword [rdi + rax*8 + 0x30]
movsd qword [rbp + 0x37], xmm0
jmp 0x14009f43f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movups xmm1, xmmword [rbp - 0x39]
mov ecx, eax
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, rcx
jne 0x14009f4b7
push rax
pushf
mov eax, 0x67a6b05a
pushf
not eax
add eax, 0x37b911d2
xor eax, 0x52f07daf
rol eax, 5
popf
pushf
not eax
add eax, 0x199799b7
xor eax, 0x73b92eab
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x477157d9
xor eax, 0x4c1ce4f3
rol eax, 0x70
popf
pushf
not eax
add eax, 0x7dd59798
xor eax, 0x171a2fc8
rol eax, 0x2f
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xd34a53f6
pushf
not eax
add eax, 0x53a37c4f
xor eax, 0x3cf292b0
rol eax, 0xad
popf
pushf
not eax
add eax, 0x79c82c46
xor eax, 0x26b5cb0
rol eax, 0x55
popf
jmp 0x14009ecb2
cmp qword [rbp - 0x29], rsi
je 0x14009f549
push rax
pushf
mov eax, 0xe2ce38d1
pushf
not eax
add eax, 0xc79df59
xor eax, 0x3235c524
rol eax, 3
popf
pushf
not eax
add eax, 0x783a604b
xor eax, 0x4fb728ab
rol eax, 0x23
popf
pushf
not eax
add eax, 0x7a6a5534
xor eax, 0xc02e4a0
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xec1a728
xor eax, 0x5cf7b5
rol eax, 0xb2
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xe48839e0
pushf
not eax
add eax, 0x6381471
xor eax, 0x5c08095a
rol eax, 0x14
popf
pushf
not eax
add eax, 0xf179324
xor eax, 0x6d8e783
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x1ee333fd
xor eax, 0x227e4540
rol eax, 0x73
popf
pushf
not eax
add eax, 0x236c58e5
xor eax, 0x1a10a116
rol eax, 0xd0
popf
jmp 0x14009ecb2
inc ebx
mov eax, ebx
cmp rax, qword [rdi]
jb 0x14009f5de
push rax
pushf
mov eax, 0x22780cb5
pushf
not eax
add eax, 0x3fdbe6bf
xor eax, 0xbeed314
rol eax, 1
popf
pushf
not eax
add eax, 0x7eb028ea
xor eax, 0x459616af
rol eax, 0x27
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xa76888d7
pushf
not eax
add eax, 0x430070dc
xor eax, 0x5f94f01e
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x64114c8d
xor eax, 0xb7ee23f
rol eax, 0x77
popf
pushf
not eax
add eax, 0x2443fbdb
xor eax, 0x1e23bbcb
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x604a46aa
xor eax, 0x498bb654
rol eax, 0xd8
popf
jmp 0x14009ecb2
jmp 0x14009f6cd
movq r14, xmm1
push rax
pushf
mov eax, 0xafbb8c34
pushf
not eax
add eax, 0x483014bd
xor eax, 0x2b7c629c
rol eax, 0xca
popf
pushf
not eax
add eax, 0x70ed3402
xor eax, 0x4d44e235
rol eax, 0x5a
popf
jmp 0x14009ecb2
xor edx, edx
mov r8d, 0x474435e6
pushf
not r8d
add r8d, 0x43a56f10
xor r8d, 0x1b034e9e
rol r8d, 0
popf
pushf
not r8d
add r8d, 0x1ef85687
xor r8d, 0x4528e7a0
rol r8d, 0xb5
popf
pushf
not r8d
add r8d, 0x2e39d289
xor r8d, 0x4b78e1
rol r8d, 0xe6
popf
mov rcx, rdi
jmp 0x14009f724
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, qword [rsp + 0xe8]
test r14, r14
je 0x14009f76e
push rax
pushf
mov eax, 0x5758701a
pushf
not eax
add eax, 0x5f924b43
xor eax, 0x33cb1f27
rol eax, 0x77
popf
pushf
not eax
add eax, 0x6bb4d57f
xor eax, 0x64c6dc1c
rol eax, 0xec
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0x147fddf5
pushf
not eax
add eax, 0x43a31ea3
xor eax, 0x77e9814
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x32ab70df
xor eax, 0x6ce23ef0
rol eax, 0xb8
popf
jmp 0x14009ecb2
lea r8, [r14 + 8]
mov qword [rbp - 9], r15
mov r9d, 0x31cc953f
pushf
not r9d
add r9d, 0x72e95e26
xor r9d, 0x40bdf78e
rol r9d, 1
popf
pushf
not r9d
add r9d, 0x529b8f8
xor r9d, 0x1ef3a27
rol r9d, 0x10
popf
lea rdx, [rbp - 9]
mov rcx, rsi
call fcn.140099ae4
test al, al
je 0x14009f84d
push rax
pushf
mov eax, 0x36245fd7
pushf
not eax
add eax, 0x27a160b7
xor eax, 0x6e03c559
rol eax, 0xab
popf
pushf
not eax
add eax, 0x9f38b56
xor eax, 0x551ebf6d
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x590ce079
xor eax, 0x39bc5666
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x2d4c00ab
xor eax, 0x4e2ae4c
rol eax, 0xef
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xc1c58061
pushf
not eax
add eax, 0x6ede5c9
xor eax, 0x8ccc452
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x70417340
xor eax, 0x6695641a
rol eax, 0x73
popf
jmp 0x14009ecb2
mov r8, qword [rbp - 9]
lea rdx, [rbp - 1]
add r8, 8
mov qword [rbp - 1], r15
mov r9d, 0x88340f05
pushf
not r9d
add r9d, 0x63189286
xor r9d, 0x45ccaab4
rol r9d, 0xd9
popf
pushf
not r9d
add r9d, 0x7ce63a71
xor r9d, 0x13a7ca1e
rol r9d, 0x76
popf
mov rcx, rsi
call fcn.140099ae4
test al, al
je 0x14009f91e
push rax
pushf
mov eax, 0x7ef50284
pushf
not eax
add eax, 0x50a92dc0
xor eax, 0x1d93f265
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xf7d4cb6
xor eax, 0x614500ff
rol eax, 0x48
popf
pushf
not eax
add eax, 0x494ef851
xor eax, 0x2320e9b
rol eax, 0xff
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0x9e6332fe
pushf
not eax
add eax, 0x5a7500e2
xor eax, 0x24014913
rol eax, 0x87
popf
pushf
not eax
add eax, 0x5622c357
xor eax, 0x4de0580a
rol eax, 0xb8
popf
jmp 0x14009ecb2
mov r8, qword [rbp - 1]
lea rdx, [rbp - 0x11]
add r8, 0x28
mov qword [rbp - 0x11], r15
mov r9d, 0x5fd22c5a
pushf
not r9d
add r9d, 0x29b7ad0e
xor r9d, 0x48fc5491
rol r9d, 0xf7
popf
pushf
not r9d
add r9d, 0x85548df
xor r9d, 0x1724f667
rol r9d, 0x4f
popf
pushf
not r9d
add r9d, 0x3ab10337
xor r9d, 0x13e71316
rol r9d, 0xa0
popf
mov rcx, rsi
call fcn.140099ae4
test al, al
je 0x14009fa1b
push rax
pushf
mov eax, 0xf0d3e4df
pushf
not eax
add eax, 0x72a0b743
xor eax, 0x54bddf66
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x535b0c01
xor eax, 0xa224f72
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x433983cf
xor eax, 0x2a828591
rol eax, 0x69
popf
pushf
not eax
add eax, 0x5239c27e
xor eax, 0x71bb2302
rol eax, 0x5c
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0xb14c7417
pushf
not eax
add eax, 0x5aded0ea
xor eax, 0x6962f10d
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xbcd4b3b
xor eax, 0x6071691f
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x6be87b99
xor eax, 0x134f7845
rol eax, 0xef
popf
pushf
not eax
add eax, 0x79b493bf
xor eax, 0xefadc29
rol eax, 0xfb
popf
jmp 0x14009ecb2
mov r8, qword [rbp - 0x11]
lea rdx, [rbp + 7]
xorps xmm0, xmm0
add r8, 0x58
mov r9d, 0x6397ea64
pushf
not r9d
add r9d, 0x71109ddc
xor r9d, 0x373cb607
rol r9d, 0x44
popf
pushf
not r9d
add r9d, 0x101e8adf
xor r9d, 0xb49ec65
rol r9d, 0x51
popf
pushf
not r9d
add r9d, 0xfffbfa0
xor r9d, 0x78036bca
rol r9d, 0xb7
popf
pushf
not r9d
add r9d, 0x2f772b6c
xor r9d, 0x5262ea21
rol r9d, 0xbd
popf
mov rcx, rsi
movups xmmword [rbp + 7], xmm0
call fcn.140099ae4
test al, al
je 0x14009fb56
push rax
pushf
mov eax, 0x7c422d4
pushf
not eax
add eax, 0x72aeec3
xor eax, 0x524c8b6f
rol eax, 0x65
popf
pushf
not eax
add eax, 0x79dde3e2
xor eax, 0x6f6a67e3
rol eax, 0x31
popf
pushf
not eax
add eax, 0x18dc1947
xor eax, 0x6a633b5c
rol eax, 0x36
popf
pushf
not eax
add eax, 0x7e9dd32
xor eax, 0x8f3454b
rol eax, 0xe5
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0x99b857b8
pushf
not eax
add eax, 0x14871cff
xor eax, 0x30778bf7
rol eax, 0x69
popf
pushf
not eax
add eax, 0x38f44b30
xor eax, 0x6977bf2d
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x1ed4803d
xor eax, 0x42fcefdd
rol eax, 0x3e
popf
jmp 0x14009ecb2
mov rax, qword [rbp - 0x11]
mov word [rbp + 7], r15w
add rax, 0x58
je 0x14009fbf1
push rax
pushf
mov eax, 0x27d0f57c
pushf
not eax
add eax, 0x2fc42bcd
xor eax, 0x77d91d5a
rol eax, 0xec
popf
pushf
not eax
add eax, 0x7c93ad6e
xor eax, 0xe7c1d96
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x1a477a8e
xor eax, 0x42a15e90
rol eax, 0xf1
popf
jmp 0x14009ecb2
push rax
pushf
mov eax, 0x41ebf438
pushf
not eax
add eax, 0x5a3d3846
xor eax, 0x3644f04a
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x7c5f3e67
xor eax, 0x3738cff1
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x7b00f5f7
xor eax, 0xa726530
rol eax, 0x9e
popf
jmp 0x14009ecb2
mov qword [rsp + 0x38], r15
lea rcx, [rbp + 7]
mov qword [rbp + 0x2f], rax
lea r8, [rbp + 0x17]
lea rax, [rbp - 0x15]
mov qword [rbp + 0x27], rcx
mov qword [rsp + 0x30], rax
mov r9d, 0x546be26c
pushf
not r9d
add r9d, 0x9168676
xor r9d, 0x15792ad
rol r9d, 0x3a
popf
pushf
not r9d
add r9d, 0x3b9952a
xor r9d, 0x6ff09a1b
rol r9d, 0xcc
popf
pushf
not r9d
add r9d, 0x5e0c56ee
xor r9d, 0x4a3714fc
rol r9d, 0xcf
popf
mov dword [rsp + 0x28], r15d
mov edx, 0x9e41a88b
pushf
not edx
add edx, 0x362ab62d
xor edx, 0x5d0fec6c
rol edx, 0x6c
popf
pushf
not edx
add edx, 0x39e805dc
xor edx, 0x531d825b
rol edx, 0x75
popf
pushf
not edx
add edx, 0x205af8f2
xor edx, 0x616ef0de
rol edx, 0x27
popf
pushf
not edx
add edx, 0x152dd883
xor edx, 0x26b6709a
rol edx, 0x38
popf
mov rcx, rsi
mov qword [rsp + 0x20], r15
mov qword [rbp + 0x1f], r15
mov qword [rbp + 0x17], 0x33
mov qword [rbp + 0x37], 0x10
mov dword [rbp - 0x15], r15d
jmp 0x14009fd25
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
setne al
jmp 0x14009fdd6
xor al, al
push rax
pushf
mov eax, 0xca0cd656
pushf
not eax
add eax, 0xc030dfd
xor eax, 0x13f43480
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x262a6c71
xor eax, 0x56d3195f
rol eax, 0x80
popf
pushf
not eax
add eax, 0x3d13382
xor eax, 0x3d9fb646
rol eax, 0xc8
popf
jmp 0x14009ecb2
mov r14, qword [rsp + 0xf0]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140112590
mov rsi, qword [rsp + 0xf8]
add rsp, 0xc0
pop r15
pop rdi
pop rbp
ret