Function at 0x1402ff5d4
Capabilities:
Create process on windows
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0x14becf72
pushf
not eax
add eax, 0x9d910914
xor eax, 0x88b4fdfa
rol eax, 0x27
popf
pushf
not eax
add eax, 0xda719b43
xor eax, 0xf497c4c5
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xadbdb336
xor eax, 0xc0ef5640
rol eax, 0x90
popf
pushf
not eax
add eax, 0xb71092ac
xor eax, 0xad32ce52
rol eax, 0xd1
popf
cmp eax, 0x29
jne 0x1402ff637
popf
pop rax
jmp 0x140300d6d
cmp eax, 0
jne 0x1402ff646
popf
pop rax
jmp 0x1402ff8da
cmp eax, 3
jne 0x1402ff655
popf
pop rax
jmp 0x1402ffb38
cmp eax, 1
jne 0x1402ff664
popf
pop rax
jmp 0x1402ffa66
cmp eax, 0xd
jne 0x1402ff673
popf
pop rax
jmp 0x140300036
cmp eax, 0x1a
jne 0x1402ff682
popf
pop rax
jmp 0x1403006bc
cmp eax, 0xe
jne 0x1402ff691
popf
pop rax
jmp 0x1403000c9
cmp eax, 0xb
jne 0x1402ff6a0
popf
pop rax
jmp 0x1402ffedd
cmp eax, 0x19
jne 0x1402ff6af
popf
pop rax
jmp 0x14030062d
cmp eax, 8
jne 0x1402ff6be
popf
pop rax
jmp 0x1402ffdc2
cmp eax, 0x2a
jne 0x1402ff6cd
popf
pop rax
jmp 0x140300dff
cmp eax, 0x17
jne 0x1402ff6dc
popf
pop rax
jmp 0x1403004b3
cmp eax, 0x1c
jne 0x1402ff6eb
popf
pop rax
jmp 0x1403007a6
cmp eax, 0x12
jne 0x1402ff6fa
popf
pop rax
jmp 0x140300258
cmp eax, 0x18
jne 0x1402ff709
popf
pop rax
jmp 0x14030056b
cmp eax, 0x2b
jne 0x1402ff718
popf
pop rax
jmp 0x140300e61
cmp eax, 0x1b
jne 0x1402ff727
popf
pop rax
jmp 0x14030073c
cmp eax, 0x2d
jne 0x1402ff736
popf
pop rax
jmp 0x140300f42
cmp eax, 0x23
jne 0x1402ff745
popf
pop rax
jmp 0x140300aac
cmp eax, 0x25
jne 0x1402ff754
popf
pop rax
jmp 0x140300bc4
cmp eax, 0xf
jne 0x1402ff763
popf
pop rax
jmp 0x14030012e
cmp eax, 0x13
jne 0x1402ff772
popf
pop rax
jmp 0x1403002bd
cmp eax, 0x15
jne 0x1402ff781
popf
pop rax
jmp 0x140300418
cmp eax, 0x24
jne 0x1402ff790
popf
pop rax
jmp 0x140300b68
cmp eax, 0x1e
jne 0x1402ff79f
popf
pop rax
jmp 0x1403008e1
cmp eax, 0xc
jne 0x1402ff7ae
popf
pop rax
jmp 0x1402fff94
cmp eax, 0x26
jne 0x1402ff7bd
popf
pop rax
jmp 0x140300c57
cmp eax, 0x27
jne 0x1402ff7cc
popf
pop rax
jmp 0x140300c8d
cmp eax, 0x1f
jne 0x1402ff7db
popf
pop rax
jmp 0x140300933
cmp eax, 0x10
jne 0x1402ff7ea
popf
pop rax
jmp 0x140300169
cmp eax, 0x2c
jne 0x1402ff7f9
popf
pop rax
jmp 0x140300ee0
cmp eax, 9
jne 0x1402ff808
popf
pop rax
jmp 0x1402ffe55
cmp eax, 4
jne 0x1402ff817
popf
pop rax
jmp 0x1402ffb99
cmp eax, 0x16
jne 0x1402ff826
popf
pop rax
jmp 0x14030046a
cmp eax, 0x28
jne 0x1402ff835
popf
pop rax
jmp 0x140300d1f
cmp eax, 0xa
jne 0x1402ff844
popf
pop rax
jmp 0x1402ffea7
cmp eax, 0x22
jne 0x1402ff853
popf
pop rax
jmp 0x140300a76
cmp eax, 0x14
jne 0x1402ff862
popf
pop rax
jmp 0x140300385
cmp eax, 7
jne 0x1402ff871
popf
pop rax
jmp 0x1402ffd26
cmp eax, 5
jne 0x1402ff880
popf
pop rax
jmp 0x1402ffc2e
cmp eax, 2
jne 0x1402ff88f
popf
pop rax
jmp 0x1402ffae6
cmp eax, 0x20
jne 0x1402ff89e
popf
pop rax
jmp 0x1403009ea
cmp eax, 0x1d
jne 0x1402ff8ad
popf
pop rax
jmp 0x14030083b
cmp eax, 0x11
jne 0x1402ff8bc
popf
pop rax
jmp 0x1403001d8
cmp eax, 6
jne 0x1402ff8cb
popf
pop rax
jmp 0x1402ffcc1
cmp eax, 0x21
jne 0x1402ff8da
popf
pop rax
jmp 0x140300a6a
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
xor r13d, r13d
mov r14, rdx
mov rsi, rcx
mov qword [rbp - 0x28], r13
xor edx, edx
mov qword [rbp - 0x20], r13
lea rcx, [rsp + 0x58]
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
mov edi, r13d
mov qword [rbp - 8], r13
mov r15, r9
mov byte [rbp], r13b
mov r12, r8
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov byte [rbp - 0x30], r13b
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov byte [rbp - 0x60], r13b
call fcn.14029eace
mov rax, qword [rsp + 0x60]
mov ebx, 0xb6e50587
pushf
not ebx
add ebx, 0x9d0ec1bc
xor ebx, 0xb759f48c
rol ebx, 0x51
popf
pushf
not ebx
add ebx, 0xcd66cd96
xor ebx, 0x96b55987
rol ebx, 0x15
popf
pushf
not ebx
add ebx, 0xdde6b8b2
xor ebx, 0xbad1e11e
rol ebx, 0x98
popf
pushf
not ebx
add ebx, 0x87322140
xor ebx, 0xdec0e04d
rol ebx, 0xce
popf
cmp dword [rax + 0xc], ebx
jne 0x1402ffa0d
push rax
pushf
mov eax, 0xa3e3f525
pushf
not eax
add eax, 0x9df19022
xor eax, 0xff3bb6ab
rol eax, 0x65
popf
pushf
not eax
add eax, 0xec846883
xor eax, 0xbca75f2a
rol eax, 0x52
popf
pushf
not eax
add eax, 0xfe66cb7d
xor eax, 0xf402e716
rol eax, 0xa
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x3afe7e7d
pushf
not eax
add eax, 0x8a6940f5
xor eax, 0xfe5b15ed
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xf8f87e68
xor eax, 0xf0a78554
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb7b143d4
xor eax, 0xf0780231
rol eax, 4
popf
pushf
not eax
add eax, 0xd847532a
xor eax, 0xbc5469b0
rol eax, 0x1f
popf
jmp 0x1402ff628
cmp byte [rsp + 0x70], r13b
je 0x1402ffab3
push rax
pushf
mov eax, 0x145c705
pushf
not eax
add eax, 0xbd3fce05
xor eax, 0x888c4b21
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xef4abcd6
xor eax, 0xc5af9d1e
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x9add480d
xor eax, 0xa4138b42
rol eax, 0x45
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x44dc6c18
pushf
not eax
add eax, 0x85cd8d59
xor eax, 0x812b7e31
rol eax, 0xef
popf
pushf
not eax
add eax, 0xb89695a0
xor eax, 0x88ddb8b2
rol eax, 0xf6
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xfebad1a7
pushf
not eax
add eax, 0xeae60446
xor eax, 0xe3ec69f9
rol eax, 0xc
popf
pushf
not eax
add eax, 0xa2ba95eb
xor eax, 0x80e58241
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x8e5c94e8
xor eax, 0xd227b2f2
rol eax, 0x76
popf
jmp 0x1402ff628
mov r9d, ebx
jmp 0x1402ffedd
call fcn.1402d3707
test eax, eax
jne 0x1402ffbfb
push rax
pushf
mov eax, 0x956551a
pushf
not eax
add eax, 0x8eb30d37
xor eax, 0xa3215e93
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xcbd75fb0
xor eax, 0xad24b55c
rol eax, 0x78
popf
pushf
not eax
add eax, 0xd55494a3
xor eax, 0xb9ba5807
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xc4a8fe99
xor eax, 0xb576a481
rol eax, 0x79
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x90ec9b9f
pushf
not eax
add eax, 0xba2b4300
xor eax, 0xc98570e2
rol eax, 0x75
popf
pushf
not eax
add eax, 0x8de0d66a
xor eax, 0x9d84beff
rol eax, 0x9f
popf
jmp 0x1402ff628
cmp byte [rsp + 0x70], r13b
je 0x1402ffc68
push rax
pushf
mov eax, 0x8301c265
pushf
not eax
add eax, 0xccfde5eb
xor eax, 0xe74db5a4
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xfdc0f670
xor eax, 0xf7686fb5
rol eax, 0xa3
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x4883b88c
pushf
not eax
add eax, 0xba734ec6
xor eax, 0xaa2c908b
rol eax, 0x21
popf
pushf
not eax
add eax, 0xa270908b
xor eax, 0x8e343cb6
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc3f666df
xor eax, 0xb745de99
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xc2a22ea6
xor eax, 0xc796a011
rol eax, 0xda
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xf9380779
pushf
not eax
add eax, 0xb5ba96ec
xor eax, 0xb4c3e7f6
rol eax, 0x25
popf
pushf
not eax
add eax, 0x93ab4414
xor eax, 0x81365dbf
rol eax, 5
popf
pushf
not eax
add eax, 0xd9dd546f
xor eax, 0x9a027579
rol eax, 0x39
popf
pushf
not eax
add eax, 0xf66410ef
xor eax, 0x8e4e7777
rol eax, 0xf9
popf
jmp 0x1402ff628
mov r9d, 0xb6ac97bb
pushf
not r9d
add r9d, 0x9e024598
xor r9d, 0xc76f3d4a
rol r9d, 0x50
popf
pushf
not r9d
add r9d, 0x973deb46
xor r9d, 0x908d2fd2
rol r9d, 0x82
popf
pushf
not r9d
add r9d, 0xfcf25f1e
xor r9d, 0xa406cbb7
rol r9d, 0xea
popf
jmp 0x1402ffedd
cmp byte [rsp + 0x70], r13b
je 0x1402ffe22
push rax
pushf
mov eax, 0xf84042a2
pushf
not eax
add eax, 0x8098e9dc
xor eax, 0x8910e5dd
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xa0ab5f74
xor eax, 0xb27d1d23
rol eax, 0x33
popf
pushf
not eax
add eax, 0x91baed6c
xor eax, 0x936fa5fa
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc598138b
xor eax, 0xb85adbeb
rol eax, 0xa9
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x58edf6f1
pushf
not eax
add eax, 0xb5b9587f
xor eax, 0xa4dcb1bf
rol eax, 0x48
popf
pushf
not eax
add eax, 0xbb771f86
xor eax, 0xa126ec8d
rol eax, 0xa
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x1d299296
pushf
not eax
add eax, 0x83ef82e4
xor eax, 0x9fd47c68
rol eax, 0x28
popf
pushf
not eax
add eax, 0xa3742dc6
xor eax, 0xb70c61e2
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xfd8ae6ff
xor eax, 0x8d13c3cd
rol eax, 0xeb
popf
jmp 0x1402ff628
mov r9d, r13d
push rax
pushf
mov eax, 0xfc8a534c
pushf
not eax
add eax, 0x895c3b27
xor eax, 0x8dac962d
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x9fee8268
xor eax, 0xa8c104f6
rol eax, 0xee
popf
jmp 0x1402ff628
lea r8, [rsp + 0x50]
mov rcx, rsi
lea rdx, [rbp - 0x28]
call fcn.1401c4e26
test eax, eax
jne 0x1402fff3c
push rax
pushf
mov eax, 0xeda27223
pushf
not eax
add eax, 0xb7045697
xor eax, 0x8bba01ff
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x9950352a
xor eax, 0x8980b02a
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xdd620cd5
xor eax, 0xc8c94e14
rol eax, 0xca
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x33c38c6
pushf
not eax
add eax, 0x86f3b58c
xor eax, 0x93da7447
rol eax, 1
popf
pushf
not eax
add eax, 0x83940a6d
xor eax, 0xbdad8154
rol eax, 6
popf
pushf
not eax
add eax, 0x9f0b82eb
xor eax, 0xf86cc714
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xc605a7ed
xor eax, 0x8cf8aa47
rol eax, 0x55
popf
jmp 0x1402ff628
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.14029eace
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0xc], ebx
jne 0x1402ffff0
push rax
pushf
mov eax, 0x32e105ba
pushf
not eax
add eax, 0xcee9d9a5
xor eax, 0xdd15085c
rol eax, 0x91
popf
pushf
not eax
add eax, 0xefd2bdbd
xor eax, 0x812b0ec5
rol eax, 0x67
popf
pushf
not eax
add eax, 0x91a88ac5
xor eax, 0xeb17e868
rol eax, 0xaf
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x632d5fbf
pushf
not eax
add eax, 0x8991830c
xor eax, 0xb353a459
rol eax, 0x59
popf
pushf
not eax
add eax, 0x9eb4f4a8
xor eax, 0x9f7bfef7
rol eax, 0x89
popf
pushf
not eax
add eax, 0xd690b770
xor eax, 0xf199d996
rol eax, 0xcb
popf
jmp 0x1402ff628
cmp byte [rsp + 0x70], r13b
je 0x140300083
push rax
pushf
mov eax, 0x4cd35e3
pushf
not eax
add eax, 0xedce70b6
xor eax, 0x83444a48
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xe1ef0b4e
xor eax, 0xa9c67125
rol eax, 0x68
popf
pushf
not eax
add eax, 0xe24dfff1
xor eax, 0xa73ae23a
rol eax, 0x66
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x8988c920
pushf
not eax
add eax, 0xe148d41b
xor eax, 0xdff37bd2
rol eax, 0xab
popf
pushf
not eax
add eax, 0x95bcc1c6
xor eax, 0xadfa04f6
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xc77f5772
xor eax, 0xd49aa7a7
rol eax, 0xdd
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x8d4e13f2
pushf
not eax
add eax, 0xf56a7015
xor eax, 0xc6bba662
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xd17a0a6a
xor eax, 0xb1627874
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xed16df63
xor eax, 0xb4dcef41
rol eax, 0xae
popf
pushf
not eax
add eax, 0xd3b5fd6b
xor eax, 0x826f990b
rol eax, 0x45
popf
jmp 0x1402ff628
mov r9d, ebx
jmp 0x1403004b3
call fcn.1402d3707
test eax, eax
jne 0x1403001a5
push rax
pushf
mov eax, 0x4b8e9ed1
pushf
not eax
add eax, 0x94433a52
xor eax, 0xad584e32
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x8eb199bb
xor eax, 0xa7e43e8c
rol eax, 0x25
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0xe254875d
pushf
not eax
add eax, 0x84295e7b
xor eax, 0xc0ae1431
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xe60afad8
xor eax, 0x82fa24be
rol eax, 0xf2
popf
jmp 0x1402ff628
cmp byte [rsp + 0x70], r13b
je 0x140300212
push rax
pushf
mov eax, 0xdda5eba5
pushf
not eax
add eax, 0xa54d5eb4
xor eax, 0x83161313
rol eax, 0x37
popf
pushf
not eax
add eax, 0xc7cebc4e
xor eax, 0xb93e639d
rol eax, 0xb0
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x5448eec4
pushf
not eax
add eax, 0xe1e7f128
xor eax, 0x87f921e0
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9f5e9e53
xor eax, 0xede0bd2d
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xce139532
xor eax, 0x83abab39
rol eax, 5
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x4455f9b3
pushf
not eax
add eax, 0x818fbc15
xor eax, 0x9c8ea42e
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xcd608775
xor eax, 0xf559e389
rol eax, 0x77
popf
pushf
not eax
add eax, 0xd5a5f5f1
xor eax, 0xfac90e42
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xcdbadd44
xor eax, 0xee1d2931
rol eax, 0xf5
popf
jmp 0x1402ff628
mov r9d, 0x3695343a
pushf
not r9d
add r9d, 0xa29b0092
xor r9d, 0xaa652856
rol r9d, 0xdd
popf
pushf
not r9d
add r9d, 0x9920d361
xor r9d, 0x89b9c9bd
rol r9d, 0xda
popf
pushf
not r9d
add r9d, 0xd3f69b22
xor r9d, 0x9644a740
rol r9d, 0x38
popf
pushf
not r9d
add r9d, 0xf4dca410
xor r9d, 0x905299cd
rol r9d, 0x4a
popf
jmp 0x1403004b3
cmp byte [rsp + 0x70], r13b
je 0x1403003bf
push rax
pushf
mov eax, 0x2457ed6d
pushf
not eax
add eax, 0xf0c049a0
xor eax, 0xaf1b42d0
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x96195c8c
xor eax, 0x9f064a73
rol eax, 0x79
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0xc6cf9e73
pushf
not eax
add eax, 0xe29d9cdf
xor eax, 0xf567269c
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xe56fd3b1
xor eax, 0x865e3444
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xb3455aa5
xor eax, 0x85fa96c9
rol eax, 0x18
popf
pushf
not eax
add eax, 0xc88c58f7
xor eax, 0xd1068b64
rol eax, 0x7f
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x22e5fc5c
pushf
not eax
add eax, 0xc2bd686a
xor eax, 0xbb8eaeac
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xb69f9a61
xor eax, 0xdbfda718
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe5932a12
xor eax, 0x9afeec22
rol eax, 0x8b
popf
jmp 0x1402ff628
mov r9d, r13d
push rax
pushf
mov eax, 0x221b31f5
pushf
not eax
add eax, 0xd8acd583
xor eax, 0x88ea6136
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x82453c98
xor eax, 0x9e32c204
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x8d52e78a
xor eax, 0xaece16c7
rol eax, 0x3f
popf
jmp 0x1402ff628
lea r8, [rsp + 0x50]
mov rcx, r14
lea rdx, [rbp - 0x58]
call fcn.1401c4e26
test eax, eax
jne 0x140300525
push rax
pushf
mov eax, 0xc4b7559f
pushf
not eax
add eax, 0xe304e2f8
xor eax, 0xae5a87f1
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xbd809a04
xor eax, 0xcdaa2890
rol eax, 0x47
popf
pushf
not eax
add eax, 0xe33e4543
xor eax, 0xf9578e77
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xc360e158
xor eax, 0xac4ef5a5
rol eax, 0x74
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x6ceb233f
pushf
not eax
add eax, 0xf9fb8344
xor eax, 0xccc323bf
rol eax, 0x35
popf
pushf
not eax
add eax, 0xba42bb75
xor eax, 0xa0867c98
rol eax, 0x93
popf
pushf
not eax
add eax, 0xa848e282
xor eax, 0xdba1cf98
rol eax, 4
popf
jmp 0x1402ff628
mov rsi, qword [rbp + 0x78]
mov rcx, r13
test rsi, rsi
je 0x1403005d4
push rax
pushf
mov eax, 0x380deb55
pushf
not eax
add eax, 0xc17a9a99
xor eax, 0xaef2a6dd
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd22bd681
xor eax, 0x929396ba
rol eax, 0x74
popf
pushf
not eax
add eax, 0xf04b7b15
xor eax, 0xb740363e
rol eax, 0xea
popf
pushf
not eax
add eax, 0xdbe3dd01
xor eax, 0xbcc3950a
rol eax, 0x8e
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x412406a0
pushf
not eax
add eax, 0x8aeb2b73
xor eax, 0xf8049a14
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xb300fe42
xor eax, 0x93075e5a
rol eax, 0xf
popf
pushf
not eax
add eax, 0xaa349f41
xor eax, 0xb0e892b7
rol eax, 0x16
popf
pushf
not eax
add eax, 0x93ed02e3
xor eax, 0x8c91e080
rol eax, 0x1d
popf
jmp 0x1402ff628
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.14029eace
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0xc], ebx
jne 0x140300676
push rax
pushf
mov eax, 0x9eff4dff
pushf
not eax
add eax, 0x80cf1bd2
xor eax, 0xecc1c33b
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xca38d145
xor eax, 0x81d0601d
rol eax, 0xbd
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0xe87a50bb
pushf
not eax
add eax, 0xf92aaa6e
xor eax, 0xefa96890
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xcebac2e5
xor eax, 0xb51b09de
rol eax, 0x10
popf
pushf
not eax
add eax, 0xda6f76a1
xor eax, 0x8fe6f36e
rol eax, 0x91
popf
jmp 0x1402ff628
cmp byte [rsp + 0x70], r13b
je 0x140300709
push rax
pushf
mov eax, 0x1484df18
pushf
not eax
add eax, 0xc34afcff
xor eax, 0x8a70d09e
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xf1706c89
xor eax, 0x90373cec
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x94141ecf
xor eax, 0xb0608ed3
rol eax, 0x6d
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x234963c7
pushf
not eax
add eax, 0xc7108260
xor eax, 0x8cf666a2
rol eax, 0x75
popf
pushf
not eax
add eax, 0xfb2e35c4
xor eax, 0xebe84f95
rol eax, 0x85
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x140300aac
call fcn.1402d3707
test eax, eax
jne 0x1403007f5
push rax
pushf
mov eax, 0xf15ae31f
pushf
not eax
add eax, 0x9a279cdf
xor eax, 0xda11a3db
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x9a75158e
xor eax, 0xeac93663
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xa3225808
xor eax, 0xb1cb86b4
rol eax, 0x49
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0xae690b13
pushf
not eax
add eax, 0xf2328591
xor eax, 0xe43a0b85
rol eax, 0x66
popf
pushf
not eax
add eax, 0xed42debb
xor eax, 0x9e13a290
rol eax, 0x10
popf
pushf
not eax
add eax, 0x902cbdec
xor eax, 0xce0b4f76
rol eax, 0x70
popf
jmp 0x1402ff628
cmp byte [rsp + 0x70], r13b
je 0x140300888
push rax
pushf
mov eax, 0xde100f2d
pushf
not eax
add eax, 0xd812133b
xor eax, 0x8e2f58b8
rol eax, 0xee
popf
pushf
not eax
add eax, 0xbf3fe4c1
xor eax, 0xd041ce0a
rol eax, 0xff
popf
pushf
not eax
add eax, 0xc1a608dd
xor eax, 0xfb7c63fd
rol eax, 0xe8
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x6d25ad15
pushf
not eax
add eax, 0xd4cbbaeb
xor eax, 0xab56b6ae
rol eax, 0x69
popf
pushf
not eax
add eax, 0xdf3ed09d
xor eax, 0x80456759
rol eax, 0x82
popf
pushf
not eax
add eax, 0xea67266e
xor eax, 0xb75ac27b
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xcdcb2b1b
xor eax, 0xefa742ba
rol eax, 0xce
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x5fa8626f
pushf
not eax
add eax, 0x8b4a029e
xor eax, 0x99c3240b
rol eax, 0x37
popf
pushf
not eax
add eax, 0xa191934b
xor eax, 0xac9b4764
rol eax, 0x33
popf
pushf
not eax
add eax, 0xe53056d0
xor eax, 0xb9f145b6
rol eax, 0x4f
popf
jmp 0x1402ff628
mov ebx, 0xdbe0f58a
pushf
not ebx
add ebx, 0xa5ba1897
xor ebx, 0xb5b9439b
rol ebx, 0x5c
popf
pushf
not ebx
add ebx, 0xb592ddc6
xor ebx, 0xb9529bfd
rol ebx, 0x29
popf
pushf
not ebx
add ebx, 0x9fa52765
xor ebx, 0x87864573
rol ebx, 0x5b
popf
pushf
not ebx
add ebx, 0xdd922f41
xor ebx, 0x976dd837
rol ebx, 0xc8
popf
jmp 0x140300aac
cmp byte [rsp + 0x70], r13b
je 0x140300a37
push rax
pushf
mov eax, 0xd023308e
pushf
not eax
add eax, 0xee0deaaa
xor eax, 0xebc5a2b7
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xc9c35f8f
xor eax, 0xa632ab20
rol eax, 0x84
popf
pushf
not eax
add eax, 0xaf9a0585
xor eax, 0xc9dcc681
rol eax, 0x17
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x19b70e69
pushf
not eax
add eax, 0xbf43fc5a
xor eax, 0x9d444bd5
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xcc1245c7
xor eax, 0x86e11c22
rol eax, 0xa0
popf
jmp 0x1402ff628
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
mov ebx, r13d
push rax
pushf
mov eax, 0x755751e3
pushf
not eax
add eax, 0xffa7e1e3
xor eax, 0xfef22656
rol eax, 0x22
popf
pushf
not eax
add eax, 0xbd7fe696
xor eax, 0xe8c53ff0
rol eax, 0xcc
popf
jmp 0x1402ff628
mov r9d, ebx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.1401c4e26
mov rdi, qword [rbp - 0x78]
test eax, eax
jne 0x140300b22
push rax
pushf
mov eax, 0xab3452c1
pushf
not eax
add eax, 0xa244425e
xor eax, 0xa2a5e268
rol eax, 0x68
popf
pushf
not eax
add eax, 0xff703484
xor eax, 0xeb5559fe
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xcea54a63
xor eax, 0xe0662cda
rol eax, 0x87
popf
pushf
not eax
add eax, 0xabec5870
xor eax, 0xeafbc132
rol eax, 0x69
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x6e46882b
pushf
not eax
add eax, 0xbed5bfba
xor eax, 0xe81e0107
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb8e4eacf
xor eax, 0xc71f0c73
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x8cece68f
xor eax, 0xe364a171
rol eax, 0x55
popf
jmp 0x1402ff628
mov rcx, rdi
push rax
pushf
mov eax, 0xce320c68
pushf
not eax
add eax, 0x8555fa87
xor eax, 0xb666bbff
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xb47cca12
xor eax, 0xf31177be
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x83d67be5
xor eax, 0xee45ada0
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x9f861ac4
xor eax, 0xdfe3cff8
rol eax, 0xb
popf
jmp 0x1402ff628
mov rax, qword [rbp + 0x88]
mov r9, r15
mov rdx, qword [rbp - 0x48]
mov r8, r12
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rbp - 0x18]
mov qword [rsp + 0x30], rax
mov eax, dword [rbp + 0x68]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x60]
mov dword [rsp + 0x20], eax
jmp 0x140300c07
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov ebx, eax
jmp 0x140300c8d
mov ebx, r13d
push rax
pushf
mov eax, 0xab44ca23
pushf
not eax
add eax, 0xaf72a9f9
xor eax, 0x870e6a7b
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa9d8cf46
xor eax, 0xf7018db5
rol eax, 0xa5
popf
jmp 0x1402ff628
cmp byte [rbp - 0x60], r13b
je 0x140300cc6
push rax
pushf
mov eax, 0xd3f103b4
pushf
not eax
add eax, 0xc49bd593
xor eax, 0x8a3cc1b3
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa736d255
xor eax, 0x9f501509
rol eax, 0xef
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x86903794
pushf
not eax
add eax, 0x93be6762
xor eax, 0xc125059f
rol eax, 0x62
popf
pushf
not eax
add eax, 0xf10a3e7d
xor eax, 0xaa5d1df8
rol eax, 0x88
popf
pushf
not eax
add eax, 0xea042410
xor eax, 0x966b0b98
rol eax, 0x15
popf
pushf
not eax
add eax, 0xcfde0918
xor eax, 0xa81cb70d
rol eax, 0x14
popf
jmp 0x1402ff628
mov rcx, rdi
call fcn.14034ab66
push rax
pushf
mov eax, 0x1107aabf
pushf
not eax
add eax, 0xfb744ede
xor eax, 0xc157d1a3
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xd2429386
xor eax, 0xd92a17f3
rol eax, 0x31
popf
pushf
not eax
add eax, 0xff94cfe5
xor eax, 0xa070d4fe
rol eax, 0x6c
popf
jmp 0x1402ff628
cmp byte [rbp - 0x30], r13b
je 0x140300dcc
push rax
pushf
mov eax, 0x7225206b
pushf
not eax
add eax, 0xc1840ce2
xor eax, 0xadffcf37
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xe5f37786
xor eax, 0x935ec27a
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xa9669be5
xor eax, 0xfd6c80af
rol eax, 0x90
popf
pushf
not eax
add eax, 0x855cd710
xor eax, 0xa6f5dbd4
rol eax, 0x48
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0x4f63afa2
pushf
not eax
add eax, 0xc147aeb6
xor eax, 0xfc576de0
rol eax, 0x22
popf
pushf
not eax
add eax, 0xeab99634
xor eax, 0xb3e74a4e
rol eax, 0
popf
jmp 0x1402ff628
mov rcx, qword [rbp - 0x48]
call fcn.14034ab66
push rax
pushf
mov eax, 0x18088d67
pushf
not eax
add eax, 0xd015b0f9
xor eax, 0xe8a9829a
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb8316573
xor eax, 0x9af1d64b
rol eax, 0xae
popf
pushf
not eax
add eax, 0xd3e29e5b
xor eax, 0xa2c30a3a
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x8d27985e
xor eax, 0xd2de3504
rol eax, 0x9a
popf
jmp 0x1402ff628
cmp byte [rbp], r13b
je 0x140300ead
push rax
pushf
mov eax, 0x7be667cb
pushf
not eax
add eax, 0xea61e728
xor eax, 0x8894c6c9
rol eax, 0x95
popf
pushf
not eax
add eax, 0x87f78ee1
xor eax, 0xe2a48818
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xb666e539
xor eax, 0xeed92a87
rol eax, 0xfc
popf
jmp 0x1402ff628
push rax
pushf
mov eax, 0xbba0c49
pushf
not eax
add eax, 0xced8f082
xor eax, 0xdd2f54db
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xf7a02e6e
xor eax, 0xc5bd1372
rol eax, 0
popf
jmp 0x1402ff628
mov rcx, qword [rbp - 0x18]
call fcn.14034ab66
push rax
pushf
mov eax, 0x77e12c21
pushf
not eax
add eax, 0x8c78113a
xor eax, 0xbac9b3ce
rol eax, 0x70
popf
pushf
not eax
add eax, 0xa1a5f1f7
xor eax, 0xfdc39321
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xcb7ea0cc
xor eax, 0xd63495a3
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc151a104
xor eax, 0xfc36f11e
rol eax, 0xd
popf
jmp 0x1402ff628
lea r11, [rsp + 0x110]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret