Function at 0x14033bffc
Capabilities:
Create process on windows
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0x6e97512f
pushf
not eax
add eax, 0xf85f2da4
xor eax, 0xf9ddc285
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xf1914945
xor eax, 0xc33873e5
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xe1d30a8e
xor eax, 0xed39ac6c
rol eax, 0xc2
popf
cmp eax, 0x29
jne 0x14033c04c
popf
pop rax
jmp 0x14033d70a
cmp eax, 0
jne 0x14033c05b
popf
pop rax
jmp 0x14033c2ef
cmp eax, 3
jne 0x14033c06a
popf
pop rax
jmp 0x14033c536
cmp eax, 1
jne 0x14033c079
popf
pop rax
jmp 0x14033c43e
cmp eax, 0xd
jne 0x14033c088
popf
pop rax
jmp 0x14033c99d
cmp eax, 0x1a
jne 0x14033c097
popf
pop rax
jmp 0x14033d030
cmp eax, 0xe
jne 0x14033c0a6
popf
pop rax
jmp 0x14033ca30
cmp eax, 0xb
jne 0x14033c0b5
popf
pop rax
jmp 0x14033c8a2
cmp eax, 0x19
jne 0x14033c0c4
popf
pop rax
jmp 0x14033cf68
cmp eax, 8
jne 0x14033c0d3
popf
pop rax
jmp 0x14033c7ad
cmp eax, 0x2a
jne 0x14033c0e2
popf
pop rax
jmp 0x14033d7af
cmp eax, 0x17
jne 0x14033c0f1
popf
pop rax
jmp 0x14033cdee
cmp eax, 0x1c
jne 0x14033c100
popf
pop rax
jmp 0x14033d11a
cmp eax, 0x12
jne 0x14033c10f
popf
pop rax
jmp 0x14033cbf8
cmp eax, 0x18
jne 0x14033c11e
popf
pop rax
jmp 0x14033ceb9
cmp eax, 0x2b
jne 0x14033c12d
popf
pop rax
jmp 0x14033d811
cmp eax, 0x1b
jne 0x14033c13c
popf
pop rax
jmp 0x14033d0c3
cmp eax, 0x2d
jne 0x14033c14b
popf
pop rax
jmp 0x14033d905
cmp eax, 0x23
jne 0x14033c15a
popf
pop rax
jmp 0x14033d40d
cmp eax, 0x25
jne 0x14033c169
popf
pop rax
jmp 0x14033d4ff
cmp eax, 0xf
jne 0x14033c178
popf
pop rax
jmp 0x14033ca82
cmp eax, 0x13
jne 0x14033c187
popf
pop rax
jmp 0x14033cc4a
cmp eax, 0x15
jne 0x14033c196
popf
pop rax
jmp 0x14033cd53
cmp eax, 0x24
jne 0x14033c1a5
popf
pop rax
jmp 0x14033d4c9
cmp eax, 0x1e
jne 0x14033c1b4
popf
pop rax
jmp 0x14033d255
cmp eax, 0xc
jne 0x14033c1c3
popf
pop rax
jmp 0x14033c921
cmp eax, 0x26
jne 0x14033c1d2
popf
pop rax
jmp 0x14033d5a8
cmp eax, 0x27
jne 0x14033c1e1
popf
pop rax
jmp 0x14033d604
cmp eax, 0x1f
jne 0x14033c1f0
popf
pop rax
jmp 0x14033d2a7
cmp eax, 0x10
jne 0x14033c1ff
popf
pop rax
jmp 0x14033cae3
cmp eax, 0x2c
jne 0x14033c20e
popf
pop rax
jmp 0x14033d8a3
cmp eax, 9
jne 0x14033c21d
popf
pop rax
jmp 0x14033c82d
cmp eax, 4
jne 0x14033c22c
popf
pop rax
jmp 0x14033c597
cmp eax, 0x16
jne 0x14033c23b
popf
pop rax
jmp 0x14033cda5
cmp eax, 0x28
jne 0x14033c24a
popf
pop rax
jmp 0x14033d6bc
cmp eax, 0xa
jne 0x14033c259
popf
pop rax
jmp 0x14033c86c
cmp eax, 0x22
jne 0x14033c268
popf
pop rax
jmp 0x14033d3c4
cmp eax, 0x14
jne 0x14033c277
popf
pop rax
jmp 0x14033ccd3
cmp eax, 7
jne 0x14033c286
popf
pop rax
jmp 0x14033c6fe
cmp eax, 5
jne 0x14033c295
popf
pop rax
jmp 0x14033c62c
cmp eax, 2
jne 0x14033c2a4
popf
pop rax
jmp 0x14033c4d1
cmp eax, 0x20
jne 0x14033c2b3
popf
pop rax
jmp 0x14033d34b
cmp eax, 0x1d
jne 0x14033c2c2
popf
pop rax
jmp 0x14033d1c2
cmp eax, 0x11
jne 0x14033c2d1
popf
pop rax
jmp 0x14033cb78
cmp eax, 6
jne 0x14033c2e0
popf
pop rax
jmp 0x14033c6bf
cmp eax, 0x21
jne 0x14033c2ef
popf
pop rax
jmp 0x14033d3b8
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
xor r13d, r13d
mov r14, rdx
mov rsi, rcx
mov qword [rbp - 0x28], r13
xor edx, edx
mov qword [rbp - 0x20], r13
lea rcx, [rsp + 0x58]
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
mov edi, r13d
mov qword [rbp - 8], r13
mov r15, r9
mov byte [rbp], r13b
mov r12, r8
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov byte [rbp - 0x30], r13b
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov byte [rbp - 0x60], r13b
call fcn.1402d40e1
mov rax, qword [rsp + 0x60]
mov ebx, 0x2400a2b5
pushf
not ebx
add ebx, 0x9884c1ad
xor ebx, 0xf4a193d8
rol ebx, 0x47
popf
pushf
not ebx
add ebx, 0x9fdb49fe
xor ebx, 0xf3e0323d
rol ebx, 0xf1
popf
cmp dword [rax + 0xc], ebx
jne 0x14033c3f8
push rax
pushf
mov eax, 0x41e04fea
pushf
not eax
add eax, 0xf42fdcf8
xor eax, 0x827918f5
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xf64d8d87
xor eax, 0xa4b3e3e0
rol eax, 0x95
popf
pushf
not eax
add eax, 0xd35bc8d1
xor eax, 0x97cff3fe
rol eax, 0x56
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x17025a6
pushf
not eax
add eax, 0xc00bcb88
xor eax, 0x865b6246
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x9a5bb586
xor eax, 0xf428e665
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xc591706f
xor eax, 0xe0b5a232
rol eax, 0x4f
popf
jmp 0x14033c03d
cmp byte [rsp + 0x70], r13b
je 0x14033c49e
push rax
pushf
mov eax, 0x20d10e67
pushf
not eax
add eax, 0x903e14c5
xor eax, 0xc2748d9a
rol eax, 0x78
popf
pushf
not eax
add eax, 0xa1744ff6
xor eax, 0xb3638ab0
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x8babb923
xor eax, 0xedc71f2a
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xc93e85df
xor eax, 0x8311c336
rol eax, 0xd4
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xd0f930ad
pushf
not eax
add eax, 0xcb612e6e
xor eax, 0xc706ed52
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xc9f18675
xor eax, 0xa61d756b
rol eax, 0xaf
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x2a5f6da7
pushf
not eax
add eax, 0x86aa4869
xor eax, 0xad06ed83
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xa89aff99
xor eax, 0xeeec2c1f
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xd3b8c6d1
xor eax, 0xc46749af
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x9a000a18
xor eax, 0x897a78cf
rol eax, 0xd1
popf
jmp 0x14033c03d
mov r9d, ebx
jmp 0x14033c8a2
call fcn.14030ade7
test eax, eax
jne 0x14033c5e6
push rax
pushf
mov eax, 0xb7e91640
pushf
not eax
add eax, 0xa6ffd6cb
xor eax, 0xc1ae4360
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xe612634b
xor eax, 0xa28f7af5
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xbccd5ed2
xor eax, 0xcb9079a7
rol eax, 0xd0
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x6e45992f
pushf
not eax
add eax, 0x8d75d8c4
xor eax, 0x8d94015d
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb9dc5f74
xor eax, 0xdcc18bd6
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe6c8a28f
xor eax, 0xf3523171
rol eax, 0xdd
popf
jmp 0x14033c03d
cmp byte [rsp + 0x70], r13b
je 0x14033c666
push rax
pushf
mov eax, 0xcca2a033
pushf
not eax
add eax, 0xe101e1de
xor eax, 0xc82a2cee
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xd861afb9
xor eax, 0xed812600
rol eax, 0x50
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x4a1d828d
pushf
not eax
add eax, 0xa4542040
xor eax, 0xac553d1a
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb39958d2
xor eax, 0x890ee352
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xbb621d5c
xor eax, 0xefd6aae1
rol eax, 0x57
popf
pushf
not eax
add eax, 0x9f2643da
xor eax, 0xe21b8c0a
rol eax, 0xeb
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x64bfdb7d
pushf
not eax
add eax, 0xb8a710c8
xor eax, 0xe27a5f64
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xbc15a431
xor eax, 0x8d640706
rol eax, 0x1a
popf
jmp 0x14033c03d
mov r9d, 0x57ac6357
pushf
not r9d
add r9d, 0x82dc1c17
xor r9d, 0xa4045aad
rol r9d, 0xcd
popf
pushf
not r9d
add r9d, 0x820ef206
xor r9d, 0xee23308b
rol r9d, 0x1c
popf
pushf
not r9d
add r9d, 0xb1acea7e
xor r9d, 0xf2fdf173
rol r9d, 0xcc
popf
jmp 0x14033c8a2
cmp byte [rsp + 0x70], r13b
je 0x14033c7e7
push rax
pushf
mov eax, 0x10f5455c
pushf
not eax
add eax, 0x92a27192
xor eax, 0x9430c982
rol eax, 0x52
popf
pushf
not eax
add eax, 0xd469edb7
xor eax, 0xad8d973f
rol eax, 4
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xdb3bafc0
pushf
not eax
add eax, 0xb8709662
xor eax, 0xcb96726a
rol eax, 0x30
popf
pushf
not eax
add eax, 0x8b0ae858
xor eax, 0xea3fbd8b
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe1dfadee
xor eax, 0xe10734b5
rol eax, 0x99
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x2977ff47
pushf
not eax
add eax, 0xf21b14c9
xor eax, 0x8b702f0e
rol eax, 0x29
popf
pushf
not eax
add eax, 0x8d5974f8
xor eax, 0xb6e45670
rol eax, 0x45
popf
jmp 0x14033c03d
mov r9d, r13d
push rax
pushf
mov eax, 0xa2182991
pushf
not eax
add eax, 0xf0fd391f
xor eax, 0xbe0f9203
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x9fb2ce06
xor eax, 0xe3780aa2
rol eax, 0x16
popf
jmp 0x14033c03d
lea r8, [rsp + 0x50]
mov rcx, rsi
lea rdx, [rbp - 0x28]
call fcn.1401f368d
test eax, eax
jne 0x14033c8ee
push rax
pushf
mov eax, 0x104a573b
pushf
not eax
add eax, 0xfefe12fd
xor eax, 0xd7a4a32e
rol eax, 0x74
popf
pushf
not eax
add eax, 0x8e882557
xor eax, 0xcf9493e5
rol eax, 0xa6
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xa6f7a18c
pushf
not eax
add eax, 0x8add33e5
xor eax, 0xc46c40be
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xcc2063db
xor eax, 0xddc39ee9
rol eax, 0x87
popf
jmp 0x14033c03d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.1402d40e1
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0xc], ebx
jne 0x14033c96a
push rax
pushf
mov eax, 0xd30144ae
pushf
not eax
add eax, 0xc416c5cd
xor eax, 0xcec57902
rol eax, 0x37
popf
pushf
not eax
add eax, 0xf55dac7e
xor eax, 0xe73df001
rol eax, 0x16
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x31d33a39
pushf
not eax
add eax, 0xd7082799
xor eax, 0xb30c5fe5
rol eax, 0x25
popf
pushf
not eax
add eax, 0xac0bccc7
xor eax, 0xe4f575a4
rol eax, 0x1f
popf
jmp 0x14033c03d
cmp byte [rsp + 0x70], r13b
je 0x14033c9fd
push rax
pushf
mov eax, 0x66b8dc36
pushf
not eax
add eax, 0xc6815d77
xor eax, 0xfbc29455
rol eax, 0x27
popf
pushf
not eax
add eax, 0x9d94cc17
xor eax, 0x8b8ae06a
rol eax, 0x33
popf
pushf
not eax
add eax, 0xa8bb0ef5
xor eax, 0xf888ce04
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xa8b8ef07
xor eax, 0x9ded4167
rol eax, 0x8e
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x4fc35a23
pushf
not eax
add eax, 0xeca541ae
xor eax, 0xad5178f9
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xd4da43e6
xor eax, 0xacfd4b79
rol eax, 0x76
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xd91abc7a
pushf
not eax
add eax, 0xf17207b3
xor eax, 0xd20b1e38
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xa21e99be
xor eax, 0xcf200185
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xd22a2ebf
xor eax, 0xc9df1401
rol eax, 0x28
popf
jmp 0x14033c03d
mov r9d, ebx
jmp 0x14033cdee
call fcn.14030ade7
test eax, eax
jne 0x14033cb1f
push rax
pushf
mov eax, 0xfb034cfb
pushf
not eax
add eax, 0xc9f3706f
xor eax, 0x938a5830
rol eax, 0x33
popf
pushf
not eax
add eax, 0x955cd58f
xor eax, 0xb961e9bb
rol eax, 0x4b
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xe7ea3889
pushf
not eax
add eax, 0xfe3aef88
xor eax, 0xcd4ae9d8
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xd16c4fa9
xor eax, 0xc1bcaffb
rol eax, 0x91
popf
pushf
not eax
add eax, 0x89816865
xor eax, 0xc7c816ad
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xaf87f845
xor eax, 0x9bf4be37
rol eax, 0x12
popf
jmp 0x14033c03d
cmp byte [rsp + 0x70], r13b
je 0x14033cbc5
push rax
pushf
mov eax, 0x59e08ee
pushf
not eax
add eax, 0x9b2d07ca
xor eax, 0xd1b61a7a
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xf496f443
xor eax, 0xac6ee827
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xf49415fd
xor eax, 0xf32d095d
rol eax, 0x8e
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x8e0d521a
pushf
not eax
add eax, 0xb1ee674d
xor eax, 0x93fd3264
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xf5343cc1
xor eax, 0x8a7ebbde
rol eax, 0x44
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xffdcd9a2
pushf
not eax
add eax, 0xbfe784cd
xor eax, 0x8798aa12
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa1733196
xor eax, 0xd98f2ba5
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xb41ebc88
xor eax, 0xe3948230
rol eax, 0x3f
popf
jmp 0x14033c03d
mov r9d, 0xc5a85574
pushf
not r9d
add r9d, 0x87d6a717
xor r9d, 0xddb5cba8
rol r9d, 0xe9
popf
pushf
not r9d
add r9d, 0xbba4b41f
xor r9d, 0xde2cb8ab
rol r9d, 0x61
popf
pushf
not r9d
add r9d, 0xaff15f21
xor r9d, 0xfb391028
rol r9d, 0x3c
popf
jmp 0x14033cdee
cmp byte [rsp + 0x70], r13b
je 0x14033cd20
push rax
pushf
mov eax, 0xc95f57b2
pushf
not eax
add eax, 0xf5d932f6
xor eax, 0xa0ea5642
rol eax, 0xce
popf
pushf
not eax
add eax, 0x865d2f5b
xor eax, 0xfb8dede4
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xaa6104c0
xor eax, 0xc134142f
rol eax, 0xb5
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xf4aabdc3
pushf
not eax
add eax, 0xb5ed5ba0
xor eax, 0xd0941aa3
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x900a70f5
xor eax, 0xbf368eba
rol eax, 0xaf
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe78a145a
pushf
not eax
add eax, 0xa1799060
xor eax, 0xb4c58e63
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xee4418a5
xor eax, 0xe178dbf9
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf48e4348
xor eax, 0x80ce7e74
rol eax, 0xb3
popf
jmp 0x14033c03d
mov r9d, r13d
push rax
pushf
mov eax, 0x3f096080
pushf
not eax
add eax, 0xeb905ebd
xor eax, 0x9386ce07
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xb4aa5ba9
xor eax, 0xc2d28ee5
rol eax, 0xac
popf
pushf
not eax
add eax, 0xbc56d307
xor eax, 0xbaff3c9d
rol eax, 0xc1
popf
jmp 0x14033c03d
lea r8, [rsp + 0x50]
mov rcx, r14
lea rdx, [rbp - 0x58]
call fcn.1401f368d
test eax, eax
jne 0x14033ce60
push rax
pushf
mov eax, 0xd911dacc
pushf
not eax
add eax, 0xd4a07bad
xor eax, 0xcf229701
rol eax, 0xd
popf
pushf
not eax
add eax, 0xee3f8bc3
xor eax, 0x97421d63
rol eax, 0xba
popf
pushf
not eax
add eax, 0xd7377eba
xor eax, 0xe7996aa9
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xbb2e5281
xor eax, 0xd3bdbe95
rol eax, 0x5e
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x864dc74a
pushf
not eax
add eax, 0xe87d1f78
xor eax, 0xe325fa69
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb4e60c6d
xor eax, 0x9f4e8509
rol eax, 0x96
popf
pushf
not eax
add eax, 0xfe7f9fd1
xor eax, 0x90bbefa2
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa88428e6
xor eax, 0xd3e543ec
rol eax, 0x84
popf
jmp 0x14033c03d
mov rsi, qword [rbp + 0x78]
mov rcx, r13
test rsi, rsi
je 0x14033cf0f
push rax
pushf
mov eax, 0xcf3ff174
pushf
not eax
add eax, 0xa73b84ab
xor eax, 0xf7cf1293
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xae295264
xor eax, 0x9e97111c
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xd94246e3
xor eax, 0xc254e96a
rol eax, 0x8b
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x78106904
pushf
not eax
add eax, 0xcc0ff867
xor eax, 0xd780093f
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xc65994af
xor eax, 0xfdbcba6f
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa519525d
xor eax, 0x921c596c
rol eax, 0x33
popf
pushf
not eax
add eax, 0xaa16c321
xor eax, 0xa03fa7c7
rol eax, 0xc8
popf
jmp 0x14033c03d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.1402d40e1
mov rax, qword [rsp + 0x60]
cmp dword [rax + 0xc], ebx
jne 0x14033cfd7
push rax
pushf
mov eax, 0x1d7a1edc
pushf
not eax
add eax, 0xab4acdc6
xor eax, 0xb7e5116c
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xf2c48f32
xor eax, 0xfb8c788f
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x97c7f753
xor eax, 0x93292eea
rol eax, 0xb
popf
pushf
not eax
add eax, 0xa619ede6
xor eax, 0xee97d115
rol eax, 0xe8
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x5db5fa03
pushf
not eax
add eax, 0xd6b25acd
xor eax, 0xb4e2ca2e
rol eax, 0x95
popf
pushf
not eax
add eax, 0xaa52dd17
xor eax, 0x865b57ed
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xd8fae1b2
xor eax, 0x842ebbe5
rol eax, 0xef
popf
pushf
not eax
add eax, 0xfb39ee05
xor eax, 0xa554c6d4
rol eax, 0x4c
popf
jmp 0x14033c03d
cmp byte [rsp + 0x70], r13b
je 0x14033d090
push rax
pushf
mov eax, 0x43f62290
pushf
not eax
add eax, 0xa733431a
xor eax, 0xcc1fb659
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xfccae53b
xor eax, 0xba749370
rol eax, 0x96
popf
pushf
not eax
add eax, 0x8093bcea
xor eax, 0xd882cd20
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xe5bac6f6
xor eax, 0xd988eba9
rol eax, 5
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xb0d2976c
pushf
not eax
add eax, 0xd3dfa441
xor eax, 0xf9a03ed3
rol eax, 0x52
popf
pushf
not eax
add eax, 0xa2d9e20f
xor eax, 0xdaba7642
rol eax, 0x7d
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x14033d40d
call fcn.14030ade7
test eax, eax
jne 0x14033d17c
push rax
pushf
mov eax, 0x4a914853
pushf
not eax
add eax, 0x9702bf5e
xor eax, 0x89211ea6
rol eax, 0x71
popf
pushf
not eax
add eax, 0xd030f962
xor eax, 0x81c7daea
rol eax, 0x96
popf
pushf
not eax
add eax, 0x818b4c17
xor eax, 0xddc6af42
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x96997909
xor eax, 0xd13e23c3
rol eax, 0xe5
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x2eafbaa7
pushf
not eax
add eax, 0xf8058db3
xor eax, 0xe23694aa
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc011ca0e
xor eax, 0xbbbf81ab
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xcdc477b6
xor eax, 0xa1f1c612
rol eax, 0x4c
popf
jmp 0x14033c03d
cmp byte [rsp + 0x70], r13b
je 0x14033d20f
push rax
pushf
mov eax, 0x63ce08b6
pushf
not eax
add eax, 0xd3fa24f7
xor eax, 0xcddd4ccd
rol eax, 4
popf
pushf
not eax
add eax, 0xdc5d5a57
xor eax, 0xd0af6513
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xd10181fe
xor eax, 0xf28ecb7b
rol eax, 0xd5
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x48959e2c
pushf
not eax
add eax, 0xa6636f9e
xor eax, 0xfaca793a
rol eax, 0x85
popf
pushf
not eax
add eax, 0xfe1ab7e4
xor eax, 0x8131308e
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x81ddbacc
xor eax, 0xb3d3175b
rol eax, 0x96
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x1a9739a6
pushf
not eax
add eax, 0xc3a850af
xor eax, 0xb05d0e66
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc8bf6f06
xor eax, 0x841c14be
rol eax, 0x33
popf
pushf
not eax
add eax, 0x9d683007
xor eax, 0x8d874dd9
rol eax, 0xcc
popf
jmp 0x14033c03d
mov ebx, 0x60cb1d1e
pushf
not ebx
add ebx, 0xf1825c13
xor ebx, 0xde5ed668
rol ebx, 0x59
popf
pushf
not ebx
add ebx, 0xfac6211c
xor ebx, 0xc2ccc087
rol ebx, 0x40
popf
pushf
not ebx
add ebx, 0xdfe05071
xor ebx, 0x9c1a6eac
rol ebx, 0x2d
popf
pushf
not ebx
add ebx, 0xeb4923a6
xor ebx, 0x95c73b49
rol ebx, 0xc3
popf
jmp 0x14033d40d
cmp byte [rsp + 0x70], r13b
je 0x14033d385
push rax
pushf
mov eax, 0xfe4380b
pushf
not eax
add eax, 0xa6bb3c4c
xor eax, 0x88108daf
rol eax, 0xa
popf
pushf
not eax
add eax, 0xaa0df570
xor eax, 0x89f638f4
rol eax, 0x2c
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x5c59a0f3
pushf
not eax
add eax, 0xe6b58f6e
xor eax, 0xcbaf8df5
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x880e9b74
xor eax, 0xfb9cb324
rol eax, 0x21
popf
jmp 0x14033c03d
mov rax, qword [rsp + 0x58]
and dword [rax + 0x3a8], 0xfffffffd
mov ebx, r13d
push rax
pushf
mov eax, 0x2b4dda79
pushf
not eax
add eax, 0x98cd81d6
xor eax, 0xd9fec00a
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xf4960093
xor eax, 0xf5a3b5e3
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe7f3c6f6
xor eax, 0xdf025903
rol eax, 0x91
popf
jmp 0x14033c03d
mov r9d, ebx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.1401f368d
mov rdi, qword [rbp - 0x78]
test eax, eax
jne 0x14033d483
push rax
pushf
mov eax, 0x2e08ac5b
pushf
not eax
add eax, 0xb8aac975
xor eax, 0xd151eb0d
rol eax, 9
popf
pushf
not eax
add eax, 0x9e1682ca
xor eax, 0x997b5b89
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd8524e38
xor eax, 0xad4d6ae2
rol eax, 0x89
popf
pushf
not eax
add eax, 0xd9a3c666
xor eax, 0xdac365cd
rol eax, 0xc1
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x6af784bd
pushf
not eax
add eax, 0xd430e24d
xor eax, 0xf5584cc2
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xa7d1b1e6
xor eax, 0x8cf239f7
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8c1864f0
xor eax, 0xab1b61a6
rol eax, 0xeb
popf
jmp 0x14033c03d
mov rcx, rdi
push rax
pushf
mov eax, 0x7447061c
pushf
not eax
add eax, 0xe8479924
xor eax, 0x86f898ed
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xe610b119
xor eax, 0xda00be20
rol eax, 0x10
popf
jmp 0x14033c03d
mov rax, qword [rbp + 0x88]
mov r9, r15
mov rdx, qword [rbp - 0x48]
mov r8, r12
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rbp - 0x18]
mov qword [rsp + 0x30], rax
mov eax, dword [rbp + 0x68]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x60]
mov dword [rsp + 0x20], eax
jmp 0x14033d542
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov ebx, eax
jmp 0x14033d604
mov ebx, r13d
push rax
pushf
mov eax, 0xa633f45b
pushf
not eax
add eax, 0x9e123b95
xor eax, 0x8e717651
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xd9c350f4
xor eax, 0xdba41cd7
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xa332f79c
xor eax, 0xc1620b2e
rol eax, 0x80
popf
pushf
not eax
add eax, 0xb6f7accc
xor eax, 0xc22084ac
rol eax, 0x3c
popf
jmp 0x14033c03d
cmp byte [rbp - 0x60], r13b
je 0x14033d663
push rax
pushf
mov eax, 0x4bae98eb
pushf
not eax
add eax, 0xc340ef3a
xor eax, 0xe32a7e10
rol eax, 6
popf
pushf
not eax
add eax, 0xb2dfee3c
xor eax, 0xe36a0221
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xcb218815
xor eax, 0xef8f50bb
rol eax, 0x97
popf
pushf
not eax
add eax, 0x806bd557
xor eax, 0x81fb9eea
rol eax, 0xe9
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xeb128161
pushf
not eax
add eax, 0xca001272
xor eax, 0x9c932017
rol eax, 0x55
popf
pushf
not eax
add eax, 0xa62357ab
xor eax, 0xf5469d6b
rol eax, 0x91
popf
pushf
not eax
add eax, 0xe634a3a2
xor eax, 0xfcf11acb
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe6ef8d16
xor eax, 0xcb9c29df
rol eax, 0xb7
popf
jmp 0x14033c03d
mov rcx, rdi
call fcn.14038d988
push rax
pushf
mov eax, 0x9c180246
pushf
not eax
add eax, 0x9f5c8fd9
xor eax, 0xbff07eb4
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xf1dffe15
xor eax, 0xb38d2f91
rol eax, 0x67
popf
pushf
not eax
add eax, 0xfd7d4d02
xor eax, 0xcd85df8b
rol eax, 0xe4
popf
jmp 0x14033c03d
cmp byte [rbp - 0x30], r13b
je 0x14033d769
push rax
pushf
mov eax, 0x5bc0c75a
pushf
not eax
add eax, 0x9a216239
xor eax, 0xc2ba2318
rol eax, 0x22
popf
pushf
not eax
add eax, 0xd2c0d497
xor eax, 0xc3ad1732
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xb70717c1
xor eax, 0xe03d2324
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xff90dad2
xor eax, 0xa40c0791
rol eax, 0x10
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0x7a29fbc1
pushf
not eax
add eax, 0xfd3242cf
xor eax, 0x9c5ae6cb
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8085b8bd
xor eax, 0x87b52cb5
rol eax, 0x56
popf
pushf
not eax
add eax, 0xe48ef871
xor eax, 0x83b1631a
rol eax, 0xe
popf
jmp 0x14033c03d
mov rcx, qword [rbp - 0x48]
call fcn.14038d988
push rax
pushf
mov eax, 0x6e6e693f
pushf
not eax
add eax, 0xbba05a8d
xor eax, 0xf17241a1
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xc26201ab
xor eax, 0xebfb2565
rol eax, 0xf
popf
pushf
not eax
add eax, 0xb939918f
xor eax, 0xdc157aa3
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xf453cecc
xor eax, 0xd33cf878
rol eax, 0xa1
popf
jmp 0x14033c03d
cmp byte [rbp], r13b
je 0x14033d85d
push rax
pushf
mov eax, 0xd9fd94e8
pushf
not eax
add eax, 0xbba22400
xor eax, 0xc9139f70
rol eax, 0x60
popf
pushf
not eax
add eax, 0x83a35ea5
xor eax, 0xc51e8551
rol eax, 0x20
popf
pushf
not eax
add eax, 0x8b6b1540
xor eax, 0xea1849d3
rol eax, 0x2d
popf
jmp 0x14033c03d
push rax
pushf
mov eax, 0xdde0cbaf
pushf
not eax
add eax, 0xb5d3632e
xor eax, 0xe9fa9c84
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xecfd2d3f
xor eax, 0xa52222be
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xd843e583
xor eax, 0xf083bb25
rol eax, 0x3b
popf
jmp 0x14033c03d
mov rcx, qword [rbp - 0x18]
call fcn.14038d988
push rax
pushf
mov eax, 0x400a76ec
pushf
not eax
add eax, 0xaebefcb3
xor eax, 0xfac81e7b
rol eax, 0x86
popf
pushf
not eax
add eax, 0xf011ccbd
xor eax, 0xb2b49bbf
rol eax, 0x82
popf
pushf
not eax
add eax, 0xe8417e78
xor eax, 0xe7e691dd
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x8ba78c1b
xor eax, 0xcfdbe936
rol eax, 0x76
popf
jmp 0x14033c03d
lea r11, [rsp + 0x110]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret