Function at 0x14011387d
Capabilities:
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xb21ad157
pushf
not eax
add eax, 0x8c5edc33
xor eax, 0xea04a7a5
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xdec52e2d
xor eax, 0xe6042b77
rol eax, 0x6c
popf
cmp eax, 0x29
jne 0x1401138ba
popf
pop rax
jmp 0x1401150dc
cmp eax, 0
jne 0x1401138c9
popf
pop rax
jmp 0x140113b21
cmp eax, 3
jne 0x1401138d8
popf
pop rax
jmp 0x140113d85
cmp eax, 1
jne 0x1401138e7
popf
pop rax
jmp 0x140113c53
cmp eax, 0xd
jne 0x1401138f6
popf
pop rax
jmp 0x140114399
cmp eax, 0x1a
jne 0x140113905
popf
pop rax
jmp 0x14011497f
cmp eax, 0xe
jne 0x140113914
popf
pop rax
jmp 0x1401143d1
cmp eax, 0xb
jne 0x140113923
popf
pop rax
jmp 0x140114253
cmp eax, 0x19
jne 0x140113932
popf
pop rax
jmp 0x1401148f2
cmp eax, 8
jne 0x140113941
popf
pop rax
jmp 0x1401140e0
cmp eax, 0x1d
jne 0x140113950
popf
pop rax
jmp 0x140114ae4
cmp eax, 0x17
jne 0x14011395f
popf
pop rax
jmp 0x140114802
cmp eax, 0x1c
jne 0x14011396e
popf
pop rax
jmp 0x140114a80
cmp eax, 0x12
jne 0x14011397d
popf
pop rax
jmp 0x1401145db
cmp eax, 0x18
jne 0x14011398c
popf
pop rax
jmp 0x1401148a2
cmp eax, 0x11
jne 0x14011399b
popf
pop rax
jmp 0x140114520
cmp eax, 0x1b
jne 0x1401139aa
popf
pop rax
jmp 0x1401149e2
cmp eax, 0x21
jne 0x1401139b9
popf
pop rax
jmp 0x140114c67
cmp eax, 0x23
jne 0x1401139c8
popf
pop rax
jmp 0x140114d23
cmp eax, 0x25
jne 0x1401139d7
popf
pop rax
jmp 0x140114e89
cmp eax, 0xf
jne 0x1401139e6
popf
pop rax
jmp 0x140114439
cmp eax, 0x13
jne 0x1401139f5
popf
pop rax
jmp 0x140114628
cmp eax, 0x15
jne 0x140113a04
popf
pop rax
jmp 0x1401146e8
cmp eax, 0x24
jne 0x140113a13
popf
pop rax
jmp 0x140114dd1
cmp eax, 0x1e
jne 0x140113a22
popf
pop rax
jmp 0x140114b81
cmp eax, 0xc
jne 0x140113a31
popf
pop rax
jmp 0x1401142e9
cmp eax, 0x26
jne 0x140113a40
popf
pop rax
jmp 0x140114f1b
cmp eax, 0x27
jne 0x140113a4f
popf
pop rax
jmp 0x140114fbe
cmp eax, 0x1f
jne 0x140113a5e
popf
pop rax
jmp 0x140114c26
cmp eax, 0x10
jne 0x140113a6d
popf
pop rax
jmp 0x1401144dd
cmp eax, 6
jne 0x140113a7c
popf
pop rax
jmp 0x140113fbc
cmp eax, 9
jne 0x140113a8b
popf
pop rax
jmp 0x140114116
cmp eax, 4
jne 0x140113a9a
popf
pop rax
jmp 0x140113e1e
cmp eax, 0x16
jne 0x140113aa9
popf
pop rax
jmp 0x1401147b2
cmp eax, 0x28
jne 0x140113ab8
popf
pop rax
jmp 0x14011504c
cmp eax, 0xa
jne 0x140113ac7
popf
pop rax
jmp 0x140114198
cmp eax, 0x22
jne 0x140113ad6
popf
pop rax
jmp 0x140114ce6
cmp eax, 0x14
jne 0x140113ae5
popf
pop rax
jmp 0x140114686
cmp eax, 7
jne 0x140113af4
popf
pop rax
jmp 0x14011407a
cmp eax, 5
jne 0x140113b03
popf
pop rax
jmp 0x140113f07
cmp eax, 2
jne 0x140113b12
popf
pop rax
jmp 0x140113cec
cmp eax, 0x20
jne 0x140113b21
popf
pop rax
jmp 0x140114c63
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r13, [0x1b4364c91]
pushf
sub r13, 0x742ebef1
popf
mov qword [rbp - 0x38], r13
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea r12, [0x1a1c17cac]
pushf
sub r12, 0x61b9ee2c
popf
mov qword [rbp - 0x10], r12
mov byte [rbp + 0x3c], al
mov dword [rbp + 0x40], 7
call fcn.1400eecdc
mov rcx, rax
test rax, rax
je 0x140113c20
push rax
pushf
mov eax, 0x7d294618
pushf
not eax
add eax, 0xd49489e8
xor eax, 0xd43ac796
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xbff37b9c
xor eax, 0xa4bbf139
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd1b16f79
xor eax, 0xe41a0e1b
rol eax, 0x7d
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x70640d4a
pushf
not eax
add eax, 0xccb1ec7b
xor eax, 0xb992a393
rol eax, 0x80
popf
pushf
not eax
add eax, 0xba576f92
xor eax, 0xd477f3de
rol eax, 0x3d
popf
jmp 0x1401138ab
mov rax, qword [rax]
jmp 0x140113c57
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x48], rax
call fcn.1400eecdc
mov rcx, rax
test rax, rax
je 0x140113ca6
push rax
pushf
mov eax, 0x47e98908
pushf
not eax
add eax, 0xdd6f45f4
xor eax, 0x912e4fbf
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xe663be18
xor eax, 0x8ec91df2
rol eax, 0x66
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x9c294878
pushf
not eax
add eax, 0xe85d67ce
xor eax, 0xa4582b9a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x91b46000
xor eax, 0xa6f28353
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xa4d22331
xor eax, 0xd95a5b38
rol eax, 0x47
popf
jmp 0x1401138ab
mov rax, qword [rax]
jmp 0x140113cf0
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x50], rax
call fcn.1400eecdc
mov rcx, rax
test rax, rax
je 0x140113d52
push rax
pushf
mov eax, 0xf5b55701
pushf
not eax
add eax, 0x8e72ef70
xor eax, 0x93c0b379
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x9b92d0fc
xor eax, 0xdf2b4023
rol eax, 0x21
popf
pushf
not eax
add eax, 0x9b25ae17
xor eax, 0xda86753b
rol eax, 0x9f
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xc3bb4bda
pushf
not eax
add eax, 0xfe901f48
xor eax, 0x930b3363
rol eax, 0xef
popf
pushf
not eax
add eax, 0x80762dc7
xor eax, 0x9046d8d7
rol eax, 0xd0
popf
jmp 0x1401138ab
mov rax, qword [rax]
jmp 0x140113d89
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x58], rax
call fcn.1400eecdc
mov rcx, rax
test rax, rax
je 0x140113deb
push rax
pushf
mov eax, 0x19e3183d
pushf
not eax
add eax, 0xb7682816
xor eax, 0xc183e615
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xd53877d6
xor eax, 0xe3185447
rol eax, 0x31
popf
pushf
not eax
add eax, 0xad47cab3
xor eax, 0xeff64258
rol eax, 0xa6
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xa3f8da15
pushf
not eax
add eax, 0xe1f0e457
xor eax, 0xeb38e257
rol eax, 0x61
popf
pushf
not eax
add eax, 0x9d2aa717
xor eax, 0xefa8d7a1
rol eax, 0x5d
popf
jmp 0x1401138ab
mov rax, qword [rax]
jmp 0x140113e22
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x60], rax
jmp 0x140113e2e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0x3ba27c71
pushf
not edx
add edx, 0xf219901d
xor edx, 0xd5791896
rol edx, 0xc4
popf
pushf
not edx
add edx, 0xf20bad2d
xor edx, 0x82e87cb4
rol edx, 0x9c
popf
pushf
not edx
add edx, 0xe9e258e1
xor edx, 0x85a62082
rol edx, 0x85
popf
mov rcx, rax
jmp 0x140113e80
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140113ec1
push rax
pushf
mov eax, 0x4a47241d
pushf
not eax
add eax, 0x87bd31ec
xor eax, 0xc94a71af
rol eax, 0x81
popf
pushf
not eax
add eax, 0xb047ccb0
xor eax, 0xc7cbd3ec
rol eax, 0x90
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x376ec990
pushf
not eax
add eax, 0x83f34fb5
xor eax, 0xf5b98d00
rol eax, 0x90
popf
pushf
not eax
add eax, 0xef35a892
xor eax, 0xf0ce8538
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xfb496b6c
xor eax, 0xf8ad9e1c
rol eax, 0x43
popf
jmp 0x1401138ab
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x140113f10
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.1401073fc
test al, al
je 0x140113f76
push rax
pushf
mov eax, 0x484a321d
pushf
not eax
add eax, 0xe806f025
xor eax, 0xd342efa1
rol eax, 0x96
popf
pushf
not eax
add eax, 0x8ce0dbdb
xor eax, 0xe4525ab0
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa37e257f
xor eax, 0xbf8540a6
rol eax, 0x78
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xdb1d85f7
pushf
not eax
add eax, 0xd226f59e
xor eax, 0xe98e6ff3
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xb38f2256
xor eax, 0xbe212896
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xec7ac5aa
xor eax, 0xae447334
rol eax, 0x54
popf
jmp 0x1401138ab
lea rcx, [rbp - 0x10]
call fcn.14010a32a
mov rdi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rbx, [r15 - 1]
test rdi, rdi
jne 0x140114021
push rax
pushf
mov eax, 0x4cd5a211
pushf
not eax
add eax, 0xa29252b3
xor eax, 0xa054d8fe
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x91ba65bb
xor eax, 0x9c8a9b5b
rol eax, 0x96
popf
pushf
not eax
add eax, 0xec93ba25
xor eax, 0xad9a6d48
rol eax, 0x1a
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xfe1e5321
pushf
not eax
add eax, 0xbbb66271
xor eax, 0x9a966e6b
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x8afa8a86
xor eax, 0x9bac15fc
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x9b616d5d
xor eax, 0xe6dcec69
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xea5df193
xor eax, 0x8e2319a6
rol eax, 0xb9
popf
jmp 0x1401138ab
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x140114520
mov rax, rbx
push rax
pushf
mov eax, 0xf58312d
pushf
not eax
add eax, 0x994522da
xor eax, 0x8af4e50e
rol eax, 0xf
popf
pushf
not eax
add eax, 0xc0c7f437
xor eax, 0xb674b2aa
rol eax, 0x32
popf
jmp 0x1401138ab
inc rax
cmp byte [rdi + rax], 0
jne 0x140114152
push rax
pushf
mov eax, 0xb6574a4c
pushf
not eax
add eax, 0x8d3f60ef
xor eax, 0xacda3362
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xc0e7b7e8
xor eax, 0xd81f20ec
rol eax, 0
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xdeb73c51
pushf
not eax
add eax, 0xe457b996
xor eax, 0xa1b48dda
rol eax, 0xed
popf
pushf
not eax
add eax, 0xaaa39260
xor eax, 0x9d07d0c5
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe76ddc78
xor eax, 0x8552de53
rol eax, 0x55
popf
jmp 0x1401138ab
add eax, 1
js 0x1401141fa
push rax
pushf
mov eax, 0x2e1eafd2
pushf
not eax
add eax, 0xbe08e4de
xor eax, 0x89cd0f1e
rol eax, 2
popf
pushf
not eax
add eax, 0x87512841
xor eax, 0xa94bd477
rol eax, 0xd
popf
pushf
not eax
add eax, 0xc90fade2
xor eax, 0xa84b1b02
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xff226142
xor eax, 0xf8e4ebc3
rol eax, 0xb9
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x286d98c
pushf
not eax
add eax, 0xdea0f56d
xor eax, 0xa895c479
rol eax, 0x79
popf
pushf
not eax
add eax, 0xf5f6bd47
xor eax, 0xad76e299
rol eax, 0x27
popf
pushf
not eax
add eax, 0xb9bb0091
xor eax, 0xa776cf8d
rol eax, 0x28
popf
pushf
not eax
add eax, 0x8dbc43ed
xor eax, 0xfb7d6f10
rol eax, 0x4b
popf
jmp 0x1401138ab
movsxd r14, eax
cmp eax, 0x80
jle 0x140114290
push rax
pushf
mov eax, 0x16e80295
pushf
not eax
add eax, 0x807c5294
xor eax, 0xfeb0ef1f
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xdd59adfe
xor eax, 0x9417eccf
rol eax, 0xd9
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xff24e11e
pushf
not eax
add eax, 0xcd790045
xor eax, 0xa14fff70
rol eax, 0x99
popf
pushf
not eax
add eax, 0x8efd60df
xor eax, 0x91ee455d
rol eax, 0x40
popf
pushf
not eax
add eax, 0xabdd0f01
xor eax, 0xa386ed5e
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xbc52efcd
xor eax, 0xf524152d
rol eax, 0xd0
popf
jmp 0x1401138ab
mov edx, 0x38913944
pushf
not edx
add edx, 0xdafa66c8
xor edx, 0xbb0ef8e6
rol edx, 0x61
popf
pushf
not edx
add edx, 0xc556e711
xor edx, 0x92873c06
rol edx, 0x1a
popf
mov rcx, r14
jmp 0x14011431c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x140114366
push rax
pushf
mov eax, 0xeacdd002
pushf
not eax
add eax, 0xe129367f
xor eax, 0xc5f2e6db
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xc88cabfb
xor eax, 0x9f0c04c1
rol eax, 0x61
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x9e3df7e8
pushf
not eax
add eax, 0xe927ce69
xor eax, 0xad000f12
rol eax, 0x63
popf
pushf
not eax
add eax, 0xc17e860b
xor eax, 0xc22fb97a
rol eax, 0x22
popf
jmp 0x1401138ab
jmp 0x140114439
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
push rax
pushf
mov eax, 0xba010b3d
pushf
not eax
add eax, 0xb2d48f89
xor eax, 0xc26f70fb
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xa911d3fb
xor eax, 0xa438a0c8
rol eax, 0x23
popf
pushf
not eax
add eax, 0xd1760922
xor eax, 0x83b9d21b
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xcf5ceeaf
xor eax, 0xeeb1c4a8
rol eax, 0xa
popf
jmp 0x1401138ab
test r14, r14
je 0x140114497
push rax
pushf
mov eax, 0x158be2c6
pushf
not eax
add eax, 0xdb89cbba
xor eax, 0xc9edac10
rol eax, 0x77
popf
pushf
not eax
add eax, 0xc664335b
xor eax, 0xed15dd3c
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x8847138b
xor eax, 0xb9bd59b7
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xd4feba7d
xor eax, 0x8292871d
rol eax, 0xae
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x7f4f1909
pushf
not eax
add eax, 0x89c1e49f
xor eax, 0x931481ad
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa74a2643
xor eax, 0xa1cd9e61
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb2fbe82c
xor eax, 0xa145a71d
rol eax, 0xa6
popf
jmp 0x1401138ab
mov r8, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0xe7e9833a
pushf
not eax
add eax, 0x82e46b56
xor eax, 0xa8eea3b2
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xa3830d88
xor eax, 0xb9360075
rol eax, 0xd5
popf
jmp 0x1401138ab
mov rdx, rax
mov rcx, rsi
call fcn.1400d995b
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x140114581
push rax
pushf
mov eax, 0xe2385676
pushf
not eax
add eax, 0xca2bc69b
xor eax, 0x87c21b67
rol eax, 0x39
popf
pushf
not eax
add eax, 0xbb41e8b6
xor eax, 0xcbb0fa2e
rol eax, 0x81
popf
pushf
not eax
add eax, 0xcface906
xor eax, 0xd309e922
rol eax, 0xcb
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x5efc0dcc
pushf
not eax
add eax, 0xa9a2865b
xor eax, 0xf59e2834
rol eax, 0x95
popf
pushf
not eax
add eax, 0xa4205176
xor eax, 0xf58516ca
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x8e5ee666
xor eax, 0x97e0988e
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xde2b892f
xor eax, 0x9ff08691
rol eax, 0x30
popf
jmp 0x1401138ab
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0x27c82815
pushf
not eax
add eax, 0x8a8df4c0
xor eax, 0xc937ca3c
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x8e1eb06f
xor eax, 0xbef7fc77
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf72b0654
xor eax, 0xfd517723
rol eax, 0x71
popf
jmp 0x1401138ab
jmp 0x1401146e8
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0x7434b03
pushf
not eax
add eax, 0xd8be45a6
xor eax, 0xef61c167
rol eax, 0x39
popf
pushf
not eax
add eax, 0x82024e50
xor eax, 0xb0b99074
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x84526029
xor eax, 0xfe2ec064
rol eax, 0xe4
popf
jmp 0x1401138ab
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
mov qword [rbp - 0x10], r12
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140114759
push rax
pushf
mov eax, 0xaf14ba3b
pushf
not eax
add eax, 0xef617904
xor eax, 0x89c06dcf
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xf2233543
xor eax, 0xfb59d813
rol eax, 0x25
popf
pushf
not eax
add eax, 0xeddafb92
xor eax, 0x8d052142
rol eax, 0x96
popf
pushf
not eax
add eax, 0xcd6d5264
xor eax, 0xc06fdeb4
rol eax, 0x5b
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x44823bd9
pushf
not eax
add eax, 0x93189f10
xor eax, 0xfdf171b8
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x834773d5
xor eax, 0xd8227e29
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xfbbb2a06
xor eax, 0xfcf6fb01
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xa28ae5d7
xor eax, 0xe74afb34
rol eax, 0xe0
popf
jmp 0x1401138ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401147b9
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xfe10b594
pushf
not eax
add eax, 0xa6e00b4a
xor eax, 0xc753a96b
rol eax, 0x65
popf
pushf
not eax
add eax, 0xd76574c4
xor eax, 0xb436083a
rol eax, 0xab
popf
pushf
not eax
add eax, 0x9b0ec909
xor eax, 0xfc9f6649
rol eax, 0x10
popf
jmp 0x1401138ab
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14011486f
push rax
pushf
mov eax, 0x4224f845
pushf
not eax
add eax, 0xc01c3b89
xor eax, 0xec1ee941
rol eax, 7
popf
pushf
not eax
add eax, 0xd8bb959c
xor eax, 0x869ec2d3
rol eax, 0x23
popf
pushf
not eax
add eax, 0xfe78eaa8
xor eax, 0xd56eeefd
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xabd35d0e
xor eax, 0x86d84202
rol eax, 0x29
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x60688f5f
pushf
not eax
add eax, 0xb0b78600
xor eax, 0xbba0c99b
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xab70bca9
xor eax, 0xe38933ab
rol eax, 0xf9
popf
jmp 0x1401138ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401148a9
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x201ddc19
pushf
not eax
add eax, 0xc619968a
xor eax, 0xbd39a858
rol eax, 0x11
popf
pushf
not eax
add eax, 0x889b51ea
xor eax, 0x94500c36
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xf64da468
xor eax, 0x9da5c403
rol eax, 0x3f
popf
jmp 0x1401138ab
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140114939
push rax
pushf
mov eax, 0x22239759
pushf
not eax
add eax, 0x816f87d6
xor eax, 0xebdae44a
rol eax, 2
popf
pushf
not eax
add eax, 0x81ac2d85
xor eax, 0xaf67dd0a
rol eax, 0x5c
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x3780146d
pushf
not eax
add eax, 0xc1fd54e3
xor eax, 0xdaffe213
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xc138f19c
xor eax, 0xccdb4e7d
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xfd007bf0
xor eax, 0x840433fe
rol eax, 0xe0
popf
jmp 0x1401138ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140114986
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x93704a9a
pushf
not eax
add eax, 0xa40d6179
xor eax, 0xb4318de4
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xf818cefc
xor eax, 0xdf5392cc
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xaa74c35e
xor eax, 0xf9ef93d7
rol eax, 0x98
popf
pushf
not eax
add eax, 0xcd035384
xor eax, 0xa5e6bc10
rol eax, 0xd
popf
jmp 0x1401138ab
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x140114a27
push rax
pushf
mov eax, 0x2ad48f31
pushf
not eax
add eax, 0xecf4389b
xor eax, 0xd4c54496
rol eax, 0x83
popf
pushf
not eax
add eax, 0xacb7a303
xor eax, 0xf660330a
rol eax, 0x6b
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x7d8a453f
pushf
not eax
add eax, 0xb1d064d6
xor eax, 0xa3714c90
rol eax, 0xed
popf
pushf
not eax
add eax, 0xc56868ec
xor eax, 0xce10bdcf
rol eax, 0x58
popf
pushf
not eax
add eax, 0xb681a287
xor eax, 0xbb34baf8
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xf6b77136
xor eax, 0xdddfc589
rol eax, 0x6f
popf
jmp 0x1401138ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140114a87
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0xd0a8f509
pushf
not eax
add eax, 0xc0b907eb
xor eax, 0xec75eb90
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xd76b153e
xor eax, 0xbe2a26d1
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xb17337cb
xor eax, 0xd0e8a5c2
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfd248175
xor eax, 0x93fdb13e
rol eax, 0x5c
popf
jmp 0x1401138ab
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r13
je 0x140114b28
push rax
pushf
mov eax, 0xe7ceba37
pushf
not eax
add eax, 0xb28bc124
xor eax, 0xb8632bb0
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xe5266bfe
xor eax, 0xabb0d54f
rol eax, 0xf2
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0xa1abe38c
pushf
not eax
add eax, 0xba8c3d32
xor eax, 0xe97abed1
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x91187749
xor eax, 0xc1f5391f
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa9f18db6
xor eax, 0xeaa6322f
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xb4bbd5b3
xor eax, 0xae7f10b0
rol eax, 0x8b
popf
jmp 0x1401138ab
test rcx, rcx
je 0x140114bdf
push rax
pushf
mov eax, 0xee37dcd3
pushf
not eax
add eax, 0xb450b6cf
xor eax, 0xbe77ae13
rol eax, 0xce
popf
pushf
not eax
add eax, 0xb7a7101e
xor eax, 0xbfb246d9
rol eax, 0x22
popf
pushf
not eax
add eax, 0x8401850c
xor eax, 0x9e3ba856
rol eax, 0x55
popf
pushf
not eax
add eax, 0xbd82e0eb
xor eax, 0x847428b7
rol eax, 0x9c
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x102ea02a
pushf
not eax
add eax, 0xcdbe8919
xor eax, 0xe79df2b0
rol eax, 0x72
popf
pushf
not eax
add eax, 0x83d9bcc1
xor eax, 0xd2bc2130
rol eax, 9
popf
pushf
not eax
add eax, 0x9e26fc9a
xor eax, 0xe51c6b08
rol eax, 0xf0
popf
jmp 0x1401138ab
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0xdd6d484c
pushf
not eax
add eax, 0x86f893d1
xor eax, 0xd137df44
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xc730190e
xor eax, 0xd4dd173b
rol eax, 0xe1
popf
jmp 0x1401138ab
mov qword [rbp - 0x28], r15
test rcx, rcx
je 0x140114cb2
push rax
pushf
mov eax, 0xea2c2a90
pushf
not eax
add eax, 0xf26ee1f4
xor eax, 0xae998ff4
rol eax, 0x34
popf
pushf
not eax
add eax, 0xd777bbcc
xor eax, 0xfbc8f51f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa29cdceb
xor eax, 0xc9c4e0cc
rol eax, 0xf5
popf
jmp 0x1401138ab
push rax
pushf
mov eax, 0x33e866ce
pushf
not eax
add eax, 0xbdb9be7a
xor eax, 0xf42c6b53
rol eax, 0x84
popf
pushf
not eax
add eax, 0x8e85801d
xor eax, 0xaea03095
rol eax, 0x91
popf
jmp 0x1401138ab
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0x2a368490
pushf
not eax
add eax, 0xa48679e6
xor eax, 0xd43ae8e2
rol eax, 0x18
popf
pushf
not eax
add eax, 0x83ba8df1
xor eax, 0xcc0c3bd3
rol eax, 0x18
popf
jmp 0x1401138ab
mov edx, 0x79247300
pushf
not edx
add edx, 0xeceda412
xor edx, 0xdc4d97a5
rol edx, 0x2f
popf
pushf
not edx
add edx, 0xe3e47b34
xor edx, 0x908a2370
rol edx, 3
popf
mov rcx, qword [rbp - 0x20]
call fcn.1400c3971
mov rax, rsi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400e231b
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0xe40e8105
pushf
not ecx
add ecx, 0xf9d73e22
xor ecx, 0xd6ffb277
rol ecx, 0x8c
popf
pushf
not ecx
add ecx, 0xd10e4216
xor ecx, 0xae3f0db6
rol ecx, 0xb9
popf
pushf
not ecx
add ecx, 0xcf448a2c
xor ecx, 0xd490495d
rol ecx, 0x6b
popf
pushf
not ecx
add ecx, 0xee2c6637
xor ecx, 0xaaad2efa
rol ecx, 0xa0
popf
call fcn.1400ea68d
int3
mov ecx, 0xf56dec62
pushf
not ecx
add ecx, 0xcb830c8e
xor ecx, 0xc06ab56b
rol ecx, 0x2c
popf
pushf
not ecx
add ecx, 0x8f4be292
xor ecx, 0x8363e18f
rol ecx, 0x80
popf
pushf
not ecx
add ecx, 0xa68c6d71
xor ecx, 0x9e6bd766
rol ecx, 0x18
popf
pushf
not ecx
add ecx, 0x96452bd3
xor ecx, 0xe93d1810
rol ecx, 0x10
popf
call fcn.1400ea68d
nop
push rax
pushf
mov eax, 0xab0c515d
pushf
not eax
add eax, 0xe5e77851
xor eax, 0xfacb2032
rol eax, 0x69
popf
pushf
not eax
add eax, 0xd0e070d7
xor eax, 0xb0d2ef36
rol eax, 0x9c
popf
jmp 0x1401138ab
mov ecx, 0x239fb6fc
pushf
not ecx
add ecx, 0xa39bd0c4
xor ecx, 0x9ea4beda
rol ecx, 7
popf
pushf
not ecx
add ecx, 0xae521693
xor ecx, 0x877d18eb
rol ecx, 0x43
popf
pushf
not ecx
add ecx, 0xdcf82d23
xor ecx, 0xa8f732d4
rol ecx, 0xed
popf
call fcn.1400ea68d
nop
push rax
pushf
mov eax, 0xba7b5fd3
pushf
not eax
add eax, 0x90f27cb9
xor eax, 0x8a38ccff
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc6ba5353
xor eax, 0xcfbcd31f
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xdefe29d2
xor eax, 0xe384329b
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xea528eb8
xor eax, 0xc444a7ee
rol eax, 0xa3
popf
jmp 0x1401138ab
mov ecx, 0x3cb93422
pushf
not ecx
add ecx, 0xaeee50eb
xor ecx, 0xb6b7b918
rol ecx, 0x12
popf
pushf
not ecx
add ecx, 0xe49b2648
xor ecx, 0xcd53143d
rol ecx, 0xaf
popf
call fcn.1400ea68d
nop
push rax
pushf
mov eax, 0x83df6578
pushf
not eax
add eax, 0xcbe3d848
xor eax, 0xf4c6ed9f
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x905dc239
xor eax, 0xadb584f5
rol eax, 0x82
popf
pushf
not eax
add eax, 0xf870fc2c
xor eax, 0x9fd25f08
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xc52021ef
xor eax, 0x8ef3dd86
rol eax, 0x6a
popf
jmp 0x1401138ab
mov ecx, 0xbbd8e2bc
pushf
not ecx
add ecx, 0xb5b292ee
xor ecx, 0x87889ae1
rol ecx, 0xe2
popf
pushf
not ecx
add ecx, 0xc9f2b4e7
xor ecx, 0xfbcbd7fc
rol ecx, 0xd
popf
pushf
not ecx
add ecx, 0xd4b29327
xor ecx, 0x98ec6dba
rol ecx, 0x6f
popf
call fcn.1400ea68d
nop
push rax
pushf
mov eax, 0x7c17bbf4
pushf
not eax
add eax, 0xe0fe9809
xor eax, 0xdd95467e
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xe785f7de
xor eax, 0xb103be45
rol eax, 0x90
popf
pushf
not eax
add eax, 0xe70d83c3
xor eax, 0xac5a829f
rol eax, 0xfc
popf
jmp 0x1401138ab
mov ecx, 0x5bf26992
pushf
not ecx
add ecx, 0xa0a4169d
xor ecx, 0xe74a6b58
rol ecx, 0x33
popf
pushf
not ecx
add ecx, 0xf72aad8c
xor ecx, 0x83ea6b87
rol ecx, 0x3c
popf
pushf
not ecx
add ecx, 0xc664f984
xor ecx, 0x8d14c655
rol ecx, 0xf2
popf
pushf
not ecx
add ecx, 0x8c2da7d4
xor ecx, 0x9602f3f7
rol ecx, 0x8c
popf
call fcn.1400ea68d
int3