Function at 0x1400e4b1e
Capabilities:
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xdd73fa01
pushf
not eax
add eax, 0xf697552f
xor eax, 0x97e89eaa
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xdb1325c2
xor eax, 0xaed6af63
rol eax, 0x77
popf
cmp eax, 0x20
jne 0x1400e4b5b
popf
pop rax
jmp 0x1400e5e1b
cmp eax, 0
jne 0x1400e4b6a
popf
pop rax
jmp 0x1400e4d68
cmp eax, 3
jne 0x1400e4b79
popf
pop rax
jmp 0x1400e507a
cmp eax, 1
jne 0x1400e4b88
popf
pop rax
jmp 0x1400e4ef2
cmp eax, 0xd
jne 0x1400e4b97
popf
pop rax
jmp 0x1400e54cd
cmp eax, 0x1a
jne 0x1400e4ba6
popf
pop rax
jmp 0x1400e5b5c
cmp eax, 0xe
jne 0x1400e4bb5
popf
pop rax
jmp 0x1400e5511
cmp eax, 0xb
jne 0x1400e4bc4
popf
pop rax
jmp 0x1400e53e6
cmp eax, 0x19
jne 0x1400e4bd3
popf
pop rax
jmp 0x1400e5abf
cmp eax, 8
jne 0x1400e4be2
popf
pop rax
jmp 0x1400e52ca
cmp eax, 0x1d
jne 0x1400e4bf1
popf
pop rax
jmp 0x1400e5d02
cmp eax, 0x17
jne 0x1400e4c00
popf
pop rax
jmp 0x1400e59bc
cmp eax, 0x1c
jne 0x1400e4c0f
popf
pop rax
jmp 0x1400e5c4a
cmp eax, 0x12
jne 0x1400e4c1e
popf
pop rax
jmp 0x1400e56d4
cmp eax, 0x18
jne 0x1400e4c2d
popf
pop rax
jmp 0x1400e5a5c
cmp eax, 0x11
jne 0x1400e4c3c
popf
pop rax
jmp 0x1400e5689
cmp eax, 0x1b
jne 0x1400e4c4b
popf
pop rax
jmp 0x1400e5bad
cmp eax, 0x21
jne 0x1400e4c5a
popf
pop rax
jmp 0x1400e5e6b
cmp eax, 0x23
jne 0x1400e4c69
popf
pop rax
jmp 0x1400e5fdf
cmp eax, 0x14
jne 0x1400e4c78
popf
pop rax
jmp 0x1400e587c
cmp eax, 0xf
jne 0x1400e4c87
popf
pop rax
jmp 0x1400e5594
cmp eax, 0x13
jne 0x1400e4c96
popf
pop rax
jmp 0x1400e57b4
cmp eax, 0x15
jne 0x1400e4ca5
popf
pop rax
jmp 0x1400e58cc
cmp eax, 0x22
jne 0x1400e4cb4
popf
pop rax
jmp 0x1400e5f27
cmp eax, 0x1e
jne 0x1400e4cc3
popf
pop rax
jmp 0x1400e5d52
cmp eax, 0xc
jne 0x1400e4cd2
popf
pop rax
jmp 0x1400e5477
cmp eax, 7
jne 0x1400e4ce1
popf
pop rax
jmp 0x1400e5221
cmp eax, 5
jne 0x1400e4cf0
popf
pop rax
jmp 0x1400e510b
cmp eax, 0x1f
jne 0x1400e4cff
popf
pop rax
jmp 0x1400e5d9c
cmp eax, 0x10
jne 0x1400e4d0e
popf
pop rax
jmp 0x1400e564f
cmp eax, 6
jne 0x1400e4d1d
popf
pop rax
jmp 0x1400e518c
cmp eax, 9
jne 0x1400e4d2c
popf
pop rax
jmp 0x1400e53a2
cmp eax, 4
jne 0x1400e4d3b
popf
pop rax
jmp 0x1400e50ba
cmp eax, 0x16
jne 0x1400e4d4a
popf
pop rax
jmp 0x1400e5959
cmp eax, 2
jne 0x1400e4d59
popf
pop rax
jmp 0x1400e4fa7
cmp eax, 0xa
jne 0x1400e4d68
popf
pop rax
jmp 0x1400e53d7
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140085080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r12, [0x1a38b97ff]
pushf
sub r12, 0x638400ef
popf
mov qword [rbp - 0x38], r12
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea rcx, [rbp - 0x10]
call fcn.140096db0
nop
jmp 0x1400e4df5
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0x86765cab
pushf
not edx
add edx, 0x941fb30f
xor edx, 0x84179fd0
rol edx, 0xd5
popf
pushf
not edx
add edx, 0xe6e0438f
xor edx, 0xf06f1bb5
rol edx, 0xc5
popf
mov rcx, rax
jmp 0x1400e4e32
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400e4e99
push rax
pushf
mov eax, 0xc9ffcc11
pushf
not eax
add eax, 0x9de25c04
xor eax, 0xb302413e
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xad4da4db
xor eax, 0xbdebad7c
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xd3ed89b5
xor eax, 0x97134a56
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8c943ada
xor eax, 0x836019f7
rol eax, 0x2f
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0xb09736d5
pushf
not eax
add eax, 0xd3dbdb2d
xor eax, 0xdbecc85a
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xbd1b9a23
xor eax, 0xcb529850
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xd1858040
xor eax, 0xbe1a6b26
rol eax, 0x64
popf
pushf
not eax
add eax, 0xfd84cbc6
xor eax, 0xf653aa4c
rol eax, 0x8b
popf
jmp 0x1400e4b4c
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x1400e4efb
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.14010b011
test al, al
je 0x1400e4f74
push rax
pushf
mov eax, 0xb9f0a38
pushf
not eax
add eax, 0xff524eee
xor eax, 0x8b4802fe
rol eax, 0xec
popf
pushf
not eax
add eax, 0xc41cbd50
xor eax, 0xc9691c06
rol eax, 0x19
popf
pushf
not eax
add eax, 0x8ec12729
xor eax, 0xee7ad179
rol eax, 0x26
popf
pushf
not eax
add eax, 0xc6d893b0
xor eax, 0xe4833074
rol eax, 0x85
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0xc333588
pushf
not eax
add eax, 0x838ecded
xor eax, 0xb08b2d6f
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xbbe0b8ca
xor eax, 0xb2cffc4c
rol eax, 0x2b
popf
jmp 0x1400e4b4c
lea rcx, [rbp - 0x10]
call fcn.14010e0e5
mov rdi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov rbx, 0xffffffffffffffff
test rdi, rdi
jne 0x1400e5021
push rax
pushf
mov eax, 0xa2522328
pushf
not eax
add eax, 0xf928438d
xor eax, 0xfdf2c203
rol eax, 1
popf
pushf
not eax
add eax, 0x9a130401
xor eax, 0x85631034
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xa4c83626
xor eax, 0xdfbe608e
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xbde1fb39
xor eax, 0x898d6a6d
rol eax, 0xcd
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x94b45a
pushf
not eax
add eax, 0xc6b9de94
xor eax, 0xa0628cf0
rol eax, 0x50
popf
pushf
not eax
add eax, 0xbb5f675b
xor eax, 0x9d3e8205
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xb2b4f6e4
xor eax, 0xa54eaea8
rol eax, 0x75
popf
pushf
not eax
add eax, 0x827d5fa8
xor eax, 0xf211fa84
rol eax, 0xa8
popf
jmp 0x1400e4b4c
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x1400e54cd
mov rax, rbx
nop dword [rax + rax]
push rax
pushf
mov eax, 0x872327b1
pushf
not eax
add eax, 0xad8dc107
xor eax, 0x86c6dfc5
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xdc05154b
xor eax, 0x8503dd9f
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x82ff41c4
xor eax, 0xd1a3a4b8
rol eax, 0x4e
popf
jmp 0x1400e4b4c
inc rax
cmp byte [rdi + rax], 0
jne 0x1400e5159
push rax
pushf
mov eax, 0x6fa40991
pushf
not eax
add eax, 0x8a09601c
xor eax, 0xc1ac27ac
rol eax, 1
popf
pushf
not eax
add eax, 0xd697cdab
xor eax, 0xcc3c8e25
rol eax, 0x17
popf
pushf
not eax
add eax, 0x97f1e627
xor eax, 0xdb8889f4
rol eax, 0xf3
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x230fc88f
pushf
not eax
add eax, 0x915a146a
xor eax, 0x8137b619
rol eax, 5
popf
pushf
not eax
add eax, 0x86cc892a
xor eax, 0x970cdaac
rol eax, 0xb7
popf
jmp 0x1400e4b4c
add eax, 1
js 0x1400e51ee
push rax
pushf
mov eax, 0x628557d6
pushf
not eax
add eax, 0xa91a87c6
xor eax, 0x989e2a17
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x9b69bde0
xor eax, 0x98f94aab
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xb6249586
xor eax, 0x9cf422d1
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe03557d5
xor eax, 0x84e0d192
rol eax, 0xdb
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x67280faf
pushf
not eax
add eax, 0x939f0f3d
xor eax, 0xbfb36864
rol eax, 0x17
popf
pushf
not eax
add eax, 0xafc07268
xor eax, 0xbaf6079c
rol eax, 0xb6
popf
jmp 0x1400e4b4c
movsxd r14, eax
cmp eax, 0x80
jle 0x1400e5284
push rax
pushf
mov eax, 0x2478b53b
pushf
not eax
add eax, 0xe51b9611
xor eax, 0xb071dbc0
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xdf1abd90
xor eax, 0xa05bb140
rol eax, 0
popf
pushf
not eax
add eax, 0xd8cf3561
xor eax, 0xff522af6
rol eax, 0x31
popf
pushf
not eax
add eax, 0x92c20b76
xor eax, 0xdf060c03
rol eax, 0x48
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x97d273aa
pushf
not eax
add eax, 0xcd829934
xor eax, 0xc822ea6e
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xd11ea146
xor eax, 0x9a57bec5
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa5742573
xor eax, 0xc09b90b4
rol eax, 0x8c
popf
jmp 0x1400e4b4c
mov edx, 0xda7849c
pushf
not edx
add edx, 0xfe72afd8
xor edx, 0xf091901d
rol edx, 0x58
popf
pushf
not edx
add edx, 0xaf7bd0a5
xor edx, 0xef3ff70f
rol edx, 0x41
popf
pushf
not edx
add edx, 0xba8ff60d
xor edx, 0xee02f040
rol edx, 0x8e
popf
mov rcx, r14
jmp 0x1400e5312
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x1400e536f
push rax
pushf
mov eax, 0x6aad94f0
pushf
not eax
add eax, 0xd0f23196
xor eax, 0xbea22e1b
rol eax, 0x18
popf
pushf
not eax
add eax, 0xd78bd885
xor eax, 0x9421903d
rol eax, 0xf
popf
pushf
not eax
add eax, 0x9436eb87
xor eax, 0xe33f21bd
rol eax, 0x99
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0xc4df5efc
pushf
not eax
add eax, 0xc6c0c7e7
xor eax, 0xa8324b02
rol eax, 0x90
popf
pushf
not eax
add eax, 0xf303d341
xor eax, 0xcf1ba56d
rol eax, 0xd6
popf
jmp 0x1400e4b4c
jmp 0x1400e53e6
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
test r14, r14
je 0x1400e5431
push rax
pushf
mov eax, 0xe36a631
pushf
not eax
add eax, 0xeb9b6d3f
xor eax, 0xbe942919
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x874dace0
xor eax, 0xfd677601
rol eax, 0x57
popf
pushf
not eax
add eax, 0xdac520a2
xor eax, 0xe8e9c8af
rol eax, 0xeb
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x602b7424
pushf
not eax
add eax, 0xe3419f3e
xor eax, 0xa145d958
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb2367a62
xor eax, 0x9c4a8237
rol eax, 0x16
popf
pushf
not eax
add eax, 0xcfe0a831
xor eax, 0xb9a3d087
rol eax, 0x71
popf
jmp 0x1400e4b4c
mov r8, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x88fd010
pushf
not eax
add eax, 0x908f2d7b
xor eax, 0xa89c45b6
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x8e3673ee
xor eax, 0xf6783302
rol eax, 0x45
popf
pushf
not eax
add eax, 0xbdad80a9
xor eax, 0xc79e38ca
rol eax, 0x13
popf
jmp 0x1400e4b4c
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r15
mov r8, rbx
push rax
pushf
mov eax, 0xdd064b32
pushf
not eax
add eax, 0xa987c97b
xor eax, 0xa4de9c34
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x8b8b4573
xor eax, 0xc5057f4b
rol eax, 0xf6
popf
jmp 0x1400e4b4c
inc r8
cmp byte [rax + r8], 0
jne 0x1400e554e
push rax
pushf
mov eax, 0xe6bb8fbe
pushf
not eax
add eax, 0xab4136ae
xor eax, 0xec72ddbb
rol eax, 0xde
popf
pushf
not eax
add eax, 0x91380100
xor eax, 0x86f9e22a
rol eax, 0x92
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x5bfa5ec3
pushf
not eax
add eax, 0x85424299
xor eax, 0xf95600a8
rol eax, 0x43
popf
pushf
not eax
add eax, 0xccc5b4cc
xor eax, 0xe019beb9
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x9e39f72c
xor eax, 0xd19c7147
rol eax, 0xae
popf
jmp 0x1400e4b4c
mov rdx, rax
mov rcx, rsi
call fcn.1400cd7ec
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x1400e55f5
push rax
pushf
mov eax, 0xfb7bab06
pushf
not eax
add eax, 0xed3cfcc1
xor eax, 0xebc84f4b
rol eax, 0x67
popf
pushf
not eax
add eax, 0xd7c3e004
xor eax, 0x8736556b
rol eax, 0x80
popf
pushf
not eax
add eax, 0xd9615d38
xor eax, 0x857f2b1a
rol eax, 0xcf
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x836a9114
pushf
not eax
add eax, 0xdb4e7ff5
xor eax, 0xfa054a61
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xea16a3b8
xor eax, 0xfc396721
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x8bccae0a
xor eax, 0xefc922b8
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xabd2550b
xor eax, 0xdf770881
rol eax, 0xe6
popf
jmp 0x1400e4b4c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0xc358e74b
pushf
not eax
add eax, 0xab51f63b
xor eax, 0xccff39e3
rol eax, 0x28
popf
pushf
not eax
add eax, 0xdf96148e
xor eax, 0xd95f1962
rol eax, 0xf8
popf
jmp 0x1400e4b4c
jmp 0x1400e57b4
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r15
mov r8d, 0xcad1ac12
pushf
not r8d
add r8d, 0xad9a0119
xor r8d, 0xf0bac21a
rol r8d, 2
popf
pushf
not r8d
add r8d, 0xe6a45593
xor r8d, 0xe246b174
rol r8d, 0xc1
popf
pushf
not r8d
add r8d, 0x85eed43d
xor r8d, 0xa2be8395
rol r8d, 0xa8
popf
pushf
not r8d
add r8d, 0xa812a228
xor r8d, 0x99529c3d
rol r8d, 0x3c
popf
lea rdx, [0x1949f7db8]
pushf
sub rdx, 0x5497fd30
popf
mov rcx, rsi
call fcn.1400cd7ec
nop
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0x6b37ae16
pushf
not eax
add eax, 0xf92e6ce0
xor eax, 0xa4284a4f
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xbb5f43c8
xor eax, 0xbf673aa8
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xbfd2b965
xor eax, 0xa393569f
rol eax, 0xb6
popf
jmp 0x1400e4b4c
lea rax, [0x1aae8b9e2]
pushf
sub rax, 0x6ae120b2
popf
mov rdx, qword [rbp + 0x60]
mov qword [rbp - 0x10], rax
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400e5823
push rax
pushf
mov eax, 0x30aec194
pushf
not eax
add eax, 0x8dcf8a1f
xor eax, 0xba5a7f10
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xad189853
xor eax, 0xd455bada
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x94bdac44
xor eax, 0xd3806b67
rol eax, 0x12
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x4d9b4b58
pushf
not eax
add eax, 0xb262478a
xor eax, 0xd1881b7b
rol eax, 7
popf
pushf
not eax
add eax, 0xce584138
xor eax, 0x85e8f3b3
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xf7b3bcc4
xor eax, 0xeba04212
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xdcc26739
xor eax, 0x87895bf1
rol eax, 0xf1
popf
jmp 0x1400e4b4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400e5883
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x88e94708
pushf
not eax
add eax, 0xa959fdb1
xor eax, 0xf7a3840d
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xfbd5e181
xor eax, 0x96ecefb0
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x8a2d5153
xor eax, 0xc33ffdb8
rol eax, 0x52
popf
jmp 0x1400e4b4c
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400e5913
push rax
pushf
mov eax, 0xbcc2b6c6
pushf
not eax
add eax, 0xb0be020d
xor eax, 0x8b7cacdf
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xf1ceb892
xor eax, 0x8bedf8f3
rol eax, 0x54
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x7da0c8a5
pushf
not eax
add eax, 0x91f511c4
xor eax, 0xa2f2ff1c
rol eax, 0x15
popf
pushf
not eax
add eax, 0x827572d7
xor eax, 0xfe3b2ed2
rol eax, 0x44
popf
pushf
not eax
add eax, 0xbe1ed7f0
xor eax, 0xd5c3cacc
rol eax, 0x67
popf
jmp 0x1400e4b4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400e5960
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xaea3acbd
pushf
not eax
add eax, 0xa50b92f6
xor eax, 0xa0bf1b6d
rol eax, 0x81
popf
pushf
not eax
add eax, 0xf9f6baeb
xor eax, 0xc5f6e2e2
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x91b86c34
xor eax, 0xdf77a85d
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xa6450df4
xor eax, 0x94e5441f
rol eax, 0x25
popf
jmp 0x1400e4b4c
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400e5a29
push rax
pushf
mov eax, 0x6e77da18
pushf
not eax
add eax, 0xc64b3f3a
xor eax, 0xb61d2b27
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x86b16b3d
xor eax, 0x81cb4a37
rol eax, 0x90
popf
pushf
not eax
add eax, 0x9083e706
xor eax, 0xa6c89fb9
rol eax, 0x97
popf
pushf
not eax
add eax, 0xd2d16884
xor eax, 0xa08dc354
rol eax, 0x11
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x15dda6cd
pushf
not eax
add eax, 0xd2b84746
xor eax, 0xeddd4d08
rol eax, 0x29
popf
pushf
not eax
add eax, 0xbc2f1647
xor eax, 0xac4d35a4
rol eax, 0xf0
popf
jmp 0x1400e4b4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400e5a63
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xf1ecb177
pushf
not eax
add eax, 0xc4c206f5
xor eax, 0xec1ce831
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xc9e7b177
xor eax, 0xfac4167d
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xc5b16efc
xor eax, 0xa5028fbb
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xcb1db00e
xor eax, 0xfb817a0a
rol eax, 0xc7
popf
jmp 0x1400e4b4c
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400e5b29
push rax
pushf
mov eax, 0x52e8c6db
pushf
not eax
add eax, 0x84b32a03
xor eax, 0xdaaed13a
rol eax, 1
popf
pushf
not eax
add eax, 0xb8f75991
xor eax, 0xed8fa557
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf145ecea
xor eax, 0x9d856468
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xe8899846
xor eax, 0xce53d823
rol eax, 0xcd
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x17e3704f
pushf
not eax
add eax, 0xf197e8ba
xor eax, 0x8b378f77
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x9e2e2623
xor eax, 0x963feb11
rol eax, 0xde
popf
jmp 0x1400e4b4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400e5b63
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0x7f35e7a5
pushf
not eax
add eax, 0xe84c944c
xor eax, 0xb28d96de
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa2c777fd
xor eax, 0x87335f30
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xa75f296e
xor eax, 0xa6c966c5
rol eax, 9
popf
jmp 0x1400e4b4c
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r12
je 0x1400e5bf1
push rax
pushf
mov eax, 0xbdd1a399
pushf
not eax
add eax, 0xcfaf1410
xor eax, 0xd23a8f6b
rol eax, 0x31
popf
pushf
not eax
add eax, 0x9e54036c
xor eax, 0xa0187b80
rol eax, 0x80
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x61f514b
pushf
not eax
add eax, 0x8c3687e8
xor eax, 0xbc45597b
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf7e69ed1
xor eax, 0xa8e6fecf
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd2f3f141
xor eax, 0xd3afc326
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xe6b7018c
xor eax, 0xf51c4b4d
rol eax, 0xf1
popf
jmp 0x1400e4b4c
test rcx, rcx
je 0x1400e5ca8
push rax
pushf
mov eax, 0x41648c04
pushf
not eax
add eax, 0xc978a218
xor eax, 0x862fd47a
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8b5d08fe
xor eax, 0x8d1030d5
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc52212b2
xor eax, 0x81f03c18
rol eax, 0x74
popf
pushf
not eax
add eax, 0xa62d4bdf
xor eax, 0xd24400b4
rol eax, 0x38
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0x69f3bd5
pushf
not eax
add eax, 0x8d2d5b6f
xor eax, 0xd8491c5b
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xc27e8acf
xor eax, 0x8360cb84
rol eax, 0x95
popf
pushf
not eax
add eax, 0xa70a7a09
xor eax, 0xd8a719be
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x82c6cded
xor eax, 0xa69cd807
rol eax, 0x1a
popf
jmp 0x1400e4b4c
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0xe51a9579
pushf
not eax
add eax, 0xdddb3882
xor eax, 0xcf883056
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xecd73b4d
xor eax, 0xc1cb5ace
rol eax, 0xd
popf
pushf
not eax
add eax, 0xacd781ff
xor eax, 0x848f4bb8
rol eax, 0xd0
popf
jmp 0x1400e4b4c
mov qword [rbp - 0x28], r15
push rax
pushf
mov eax, 0x92727436
pushf
not eax
add eax, 0xa0fe2532
xor eax, 0xfe2b05b9
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe6fdfd6a
xor eax, 0xe5a118d4
rol eax, 2
popf
pushf
not eax
add eax, 0xcdb0b302
xor eax, 0xc7891233
rol eax, 0x98
popf
jmp 0x1400e4b4c
test rcx, rcx
je 0x1400e5de7
push rax
pushf
mov eax, 0x17814abd
pushf
not eax
add eax, 0xe4c61bd7
xor eax, 0xd6cf13fb
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x83e9d560
xor eax, 0xbab3d130
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xcd0a24d4
xor eax, 0xcc940021
rol eax, 0xbb
popf
jmp 0x1400e4b4c
push rax
pushf
mov eax, 0xfdd60f4d
pushf
not eax
add eax, 0xbcd9298b
xor eax, 0xfe11b9d0
rol eax, 0x74
popf
pushf
not eax
add eax, 0xcb889913
xor eax, 0x9cb487ea
rol eax, 0xc4
popf
jmp 0x1400e4b4c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0xa0126973
pushf
not eax
add eax, 0xf6d9c7c9
xor eax, 0x87fe5423
rol eax, 0x52
popf
pushf
not eax
add eax, 0x9a69e1f6
xor eax, 0x8b87543c
rol eax, 0xf
popf
pushf
not eax
add eax, 0xc3a98fb6
xor eax, 0xdf339231
rol eax, 0xb0
popf
jmp 0x1400e4b4c
mov edx, 0xd2492c52
pushf
not edx
add edx, 0xe9a72b37
xor edx, 0x839965d1
rol edx, 0x84
popf
pushf
not edx
add edx, 0xd056b60f
xor edx, 0x844d02b5
rol edx, 0x6d
popf
mov rcx, qword [rbp - 0x20]
call fcn.1400bfce0
mov rax, rsi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400dadee
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x88dd78b2
pushf
not ecx
add ecx, 0xf444008c
xor ecx, 0xab61f286
rol ecx, 0xeb
popf
pushf
not ecx
add ecx, 0x87627d95
xor ecx, 0x8e8e7015
rol ecx, 0xe5
popf
pushf
not ecx
add ecx, 0xdd5beb1f
xor ecx, 0xa1a3f353
rol ecx, 0xff
popf
pushf
not ecx
add ecx, 0xe5b2680f
xor ecx, 0x99cea337
rol ecx, 0xf1
popf
call fcn.1400e0659
int3
mov ecx, 0xb46d1b2c
pushf
not ecx
add ecx, 0xbac05e3d
xor ecx, 0xbe877e3d
rol ecx, 0x2d
popf
pushf
not ecx
add ecx, 0xad0c5867
xor ecx, 0xcd66d14c
rol ecx, 0x24
popf
call fcn.1400e0659
int3