Function at 0x14018eaa7
Capabilities:
Authenticate hmac
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x3fc449e0
pushf
not eax
add eax, 0xcfff6af9
xor eax, 0x93af773b
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xa31711f3
xor eax, 0x9dcbbe25
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xf03838bd
xor eax, 0xb09a7b52
rol eax, 0x8e
popf
cmp eax, 0x20
jne 0x14018eaf7
popf
pop rax
jmp 0x14018ffc6
cmp eax, 0
jne 0x14018eb06
popf
pop rax
jmp 0x14018ed22
cmp eax, 3
jne 0x14018eb15
popf
pop rax
jmp 0x14018f01f
cmp eax, 1
jne 0x14018eb24
popf
pop rax
jmp 0x14018eedf
cmp eax, 0xd
jne 0x14018eb33
popf
pop rax
jmp 0x14018f659
cmp eax, 0x1a
jne 0x14018eb42
popf
pop rax
jmp 0x14018fc03
cmp eax, 0xe
jne 0x14018eb51
popf
pop rax
jmp 0x14018f718
cmp eax, 0xb
jne 0x14018eb60
popf
pop rax
jmp 0x14018f50d
cmp eax, 0x19
jne 0x14018eb6f
popf
pop rax
jmp 0x14018fb4c
cmp eax, 8
jne 0x14018eb7e
popf
pop rax
jmp 0x14018f35c
cmp eax, 0x1d
jne 0x14018eb8d
popf
pop rax
jmp 0x14018fda0
cmp eax, 0x17
jne 0x14018eb9c
popf
pop rax
jmp 0x14018fa6c
cmp eax, 0x1c
jne 0x14018ebab
popf
pop rax
jmp 0x14018fd00
cmp eax, 0x12
jne 0x14018ebba
popf
pop rax
jmp 0x14018f8b7
cmp eax, 0x18
jne 0x14018ebc9
popf
pop rax
jmp 0x14018fadc
cmp eax, 0x11
jne 0x14018ebd8
popf
pop rax
jmp 0x14018f854
cmp eax, 0x1b
jne 0x14018ebe7
popf
pop rax
jmp 0x14018fc82
cmp eax, 0x21
jne 0x14018ebf6
popf
pop rax
jmp 0x14019007b
cmp eax, 0x23
jne 0x14018ec05
popf
pop rax
jmp 0x1401901ae
cmp eax, 0x25
jne 0x14018ec14
popf
pop rax
jmp 0x140190487
cmp eax, 0xf
jne 0x14018ec23
popf
pop rax
jmp 0x14018f7a5
cmp eax, 0x13
jne 0x14018ec32
popf
pop rax
jmp 0x14018f913
cmp eax, 0x15
jne 0x14018ec41
popf
pop rax
jmp 0x14018f98a
cmp eax, 0x24
jne 0x14018ec50
popf
pop rax
jmp 0x1401901e7
cmp eax, 0x1e
jne 0x14018ec5f
popf
pop rax
jmp 0x14018fe45
cmp eax, 0xc
jne 0x14018ec6e
popf
pop rax
jmp 0x14018f5d4
cmp eax, 7
jne 0x14018ec7d
popf
pop rax
jmp 0x14018f2f0
cmp eax, 5
jne 0x14018ec8c
popf
pop rax
jmp 0x14018f1ec
cmp eax, 0x1f
jne 0x14018ec9b
popf
pop rax
jmp 0x14018fea6
cmp eax, 0x10
jne 0x14018ecaa
popf
pop rax
jmp 0x14018f7e9
cmp eax, 6
jne 0x14018ecb9
popf
pop rax
jmp 0x14018f248
cmp eax, 9
jne 0x14018ecc8
popf
pop rax
jmp 0x14018f408
cmp eax, 4
jne 0x14018ecd7
popf
pop rax
jmp 0x14018f130
cmp eax, 0x16
jne 0x14018ece6
popf
pop rax
jmp 0x14018fa2a
cmp eax, 2
jne 0x14018ecf5
popf
pop rax
jmp 0x14018ef6e
cmp eax, 0xa
jne 0x14018ed04
popf
pop rax
jmp 0x14018f4a8
cmp eax, 0x22
jne 0x14018ed13
popf
pop rax
jmp 0x140190162
cmp eax, 0x14
jne 0x14018ed22
popf
pop rax
jmp 0x14018f980
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x14004b090]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
lea rdx, [0x1b4d77076]
pushf
sub rdx, 0x74d32596
popf
lea rcx, [rbp + 0x1e0]
call fcn.1400a8679
nop
lea rdx, [0x1ad9e5cfd]
pushf
sub rdx, 0x6d9a11d5
popf
lea rcx, [rbp + 0x200]
call fcn.1400a8679
nop
lea rdx, [0x1bf944978]
pushf
sub rdx, 0x7f8ffe38
popf
lea rcx, [rbp + 0x220]
call fcn.1400a8679
nop
lea rdx, [0x1948c1c57]
pushf
sub rdx, 0x5487d107
popf
lea rcx, [rbp + 0x240]
call fcn.1400a8679
nop
lea rdx, [0x185db93bd]
pushf
sub rdx, 0x45d74855
popf
lea rcx, [rbp + 0x260]
call fcn.1400a8679
nop
lea rdx, [0x19e0375f7]
pushf
sub rdx, 0x5dff2a77
popf
lea rcx, [rbp + 0x280]
call fcn.1400a8679
nop
lea rdx, [0x1a9e2a042]
pushf
sub rdx, 0x69de54aa
popf
lea rcx, [rbp + 0x2a0]
call fcn.1400a8679
nop
mov dword [rbp - 0x60], 0x238
xor edx, edx
lea ecx, [rdx + 2]
jmp 0x14018ee40
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14018ee86
push rax
pushf
mov eax, 0x41dbe9e5
pushf
not eax
add eax, 0xa8fe00ec
xor eax, 0xd990e348
rol eax, 0xec
popf
pushf
not eax
add eax, 0xd0cab8aa
xor eax, 0xa184ccbe
rol eax, 0x10
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xb3194b12
pushf
not eax
add eax, 0xea515a1c
xor eax, 0xc9221a75
rol eax, 0x21
popf
pushf
not eax
add eax, 0xb6a3eadb
xor eax, 0xfbf79a12
rol eax, 0x10
popf
pushf
not eax
add eax, 0xc7c97b98
xor eax, 0xa2a667bc
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xbb6bd9fc
xor eax, 0xda8fc26f
rol eax, 0x83
popf
jmp 0x14018eae8
lea rdx, [rbp - 0x60]
mov rcx, rax
jmp 0x14018eee7
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x14018ef3b
push rax
pushf
mov eax, 0x6e83811d
pushf
not eax
add eax, 0x8b527676
xor eax, 0xe4a8e3fd
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa9a23b14
xor eax, 0xa5bcb752
rol eax, 0x88
popf
pushf
not eax
add eax, 0x99a27458
xor eax, 0xc649e14f
rol eax, 0xcb
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x7e20dc2e
pushf
not eax
add eax, 0x8685b90b
xor eax, 0xe79cf5bb
rol eax, 0x79
popf
pushf
not eax
add eax, 0xa96ff4f8
xor eax, 0xddb004a5
rol eax, 0x4b
popf
jmp 0x14018eae8
xor r13d, r13d
movabs r12, 0xa04cf446f56cff6d
pushf
not r12
add r12, 0x5c9b514d
xor r12, 0x4cd1a89e
rol r12, 0x92
popf
pushf
not r12
add r12, 0x647fae9c
xor r12, 0x7f7a2fd9
rol r12, 0x9b
popf
pushf
not r12
add r12, 0x4a56af5f
xor r12, 0x6f322b21
rol r12, 0x67
popf
push rax
pushf
mov eax, 0x8321ebb9
pushf
not eax
add eax, 0xe8e06b32
xor eax, 0xa49d4d01
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xe692a982
xor eax, 0xe717f8ed
rol eax, 0x11
popf
pushf
not eax
add eax, 0xfbdee798
xor eax, 0xc13b4c33
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc8d96ccc
xor eax, 0x8a41dc67
rol eax, 0xd9
popf
jmp 0x14018eae8
mov ecx, 0xad7c3e5c
pushf
not ecx
add ecx, 0xf7a5bafa
xor ecx, 0x8df864d8
rol ecx, 0x95
popf
pushf
not ecx
add ecx, 0xee23894d
xor ecx, 0xac9c577c
rol ecx, 9
popf
pushf
not ecx
add ecx, 0xf0005087
xor ecx, 0xbf85c921
rol ecx, 0x72
popf
pushf
not ecx
add ecx, 0xa5210386
xor ecx, 0xf0960c5c
rol ecx, 0xeb
popf
movabs rax, 0x3b5ad4ded75bcf1a
pushf
not rax
add rax, 0x70414932
xor rax, 0x78e57be8
rol rax, 0x63
popf
pushf
not rax
add rax, 0x6d489038
xor rax, 0x6598fa5b
rol rax, 0xfd
popf
pushf
not rax
add rax, 0x64cb5a36
xor rax, 0x7f0072ff
rol rax, 0x41
popf
pushf
not rax
add rax, 0x781be8bd
xor rax, 0x48183c34
rol rax, 0x55
popf
lea rsi, [rbp + 0x1e0]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x837bd6dd
pushf
not eax
add eax, 0x9476572c
xor eax, 0x94f5a5ea
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x82b58317
xor eax, 0xff6cb9e2
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe3ea44b4
xor eax, 0xe3f86a92
rol eax, 0x25
popf
jmp 0x14018eae8
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov rbx, qword [rsi + 0x10]
mov r14, rsi
cmp qword [rsi + 0x18], 8
jb 0x14018f193
push rax
pushf
mov eax, 0xb47dc1f3
pushf
not eax
add eax, 0x9b78b5de
xor eax, 0xd881d394
rol eax, 0x26
popf
pushf
not eax
add eax, 0xdd26ac62
xor eax, 0xcef0837a
rol eax, 0x67
popf
pushf
not eax
add eax, 0xe16c95a4
xor eax, 0x8a64612b
rol eax, 0x53
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x3bfb4aee
pushf
not eax
add eax, 0xb06ea617
xor eax, 0xf286d9c3
rol eax, 0x31
popf
pushf
not eax
add eax, 0xd4cc6697
xor eax, 0x95d2d767
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xd1907ba0
xor eax, 0x86256de6
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xdd5f9b6f
xor eax, 0xfffe8f22
rol eax, 0xa5
popf
jmp 0x14018eae8
mov r14, qword [rsi]
push rax
pushf
mov eax, 0x33cd6675
pushf
not eax
add eax, 0xef722c3e
xor eax, 0xd9ea92f4
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xacec7b95
xor eax, 0xe3ce3d2c
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x87be85bc
xor eax, 0xc6ba7147
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb6ab872d
xor eax, 0xbb318e9a
rol eax, 0x4d
popf
jmp 0x14018eae8
cmp rbx, r12
ja 0x14018f297
push rax
pushf
mov eax, 0x99cd7261
pushf
not eax
add eax, 0x982154e8
xor eax, 0xb1c58414
rol eax, 0x27
popf
pushf
not eax
add eax, 0xc2f03f50
xor eax, 0x989ca9f1
rol eax, 0x34
popf
pushf
not eax
add eax, 0xdd92646a
xor eax, 0xdff8f264
rol eax, 0x11
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xcb35b464
pushf
not eax
add eax, 0xcfab0080
xor eax, 0xabc643a6
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xa85a186d
xor eax, 0x83413afd
rol eax, 2
popf
pushf
not eax
add eax, 0xc02bf2cd
xor eax, 0xf7b3e955
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xe43c6f53
xor eax, 0xfbf49d50
rol eax, 0xcc
popf
jmp 0x14018eae8
cmp rbx, 8
jae 0x14018f329
push rax
pushf
mov eax, 0x1d1b8bb8
pushf
not eax
add eax, 0x9e09e540
xor eax, 0xd0322510
rol eax, 0xac
popf
pushf
not eax
add eax, 0xaa4133f2
xor eax, 0xe275bee4
rol eax, 0x72
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x922b93f1
pushf
not eax
add eax, 0xfced7e2e
xor eax, 0xbbf3577b
rol eax, 0x88
popf
pushf
not eax
add eax, 0xb0b758c8
xor eax, 0xfdfa10f2
rol eax, 0x41
popf
jmp 0x14018eae8
mov qword [rbp - 0x70], rbx
mov r11d, 0x76f270c7
pushf
not r11d
add r11d, 0xe3cee780
xor r11d, 0xd8df08b0
rol r11d, 0xd4
popf
pushf
not r11d
add r11d, 0x80b8a9d6
xor r11d, 0xf2dd7890
rol r11d, 0x11
popf
pushf
not r11d
add r11d, 0xe6f75d6c
xor r11d, 0xcadab78b
rol r11d, 0x67
popf
mov qword [rbp - 0x68], r11
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x80], xmm0
jmp 0x14018f93a
mov qword [rbp - 0x68], 7
mov rdi, rbx
or rdi, 7
cmp rdi, r12
jbe 0x14018f475
push rax
pushf
mov eax, 0x16c75f68
pushf
not eax
add eax, 0xac0bd589
xor eax, 0x8d08d38d
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xda3f496a
xor eax, 0xfebdf7b3
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb756ada3
xor eax, 0x83089288
rol eax, 0x44
popf
pushf
not eax
add eax, 0xf3464437
xor eax, 0xe1ec6fbc
rol eax, 0xf4
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x85c687c1
pushf
not eax
add eax, 0xf9c46bfd
xor eax, 0xabbd2587
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xcdf6f8d1
xor eax, 0xea0ad870
rol eax, 0x89
popf
jmp 0x14018eae8
mov rdi, r12
lea rcx, [rax + rax]
jmp 0x14018f659
cmp rdi, 0xa
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, rax
ja 0x14018f57b
push rax
pushf
mov eax, 0xca8f45a6
pushf
not eax
add eax, 0xd3866184
xor eax, 0xf83bec45
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xad2d0e50
xor eax, 0xcdb4d009
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xcc84a4b4
xor eax, 0x86b6d187
rol eax, 5
popf
pushf
not eax
add eax, 0xa12e80f8
xor eax, 0xdd90ce77
rol eax, 0xe4
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x91b9625
pushf
not eax
add eax, 0x94bbbb56
xor eax, 0xf274da52
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xcc08265b
xor eax, 0xa1cc854a
rol eax, 0x67
popf
pushf
not eax
add eax, 0xd05e2f38
xor eax, 0xd13beb59
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xebde2b24
xor eax, 0xf9b9b06f
rol eax, 0xdc
popf
jmp 0x14018eae8
add rcx, rcx
cmp rcx, 0x1000
jb 0x14018f626
push rax
pushf
mov eax, 0x8fdf02f1
pushf
not eax
add eax, 0xf5b3b9bf
xor eax, 0xecbe90c2
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf6194810
xor eax, 0xd0a7f32a
rol eax, 0x75
popf
pushf
not eax
add eax, 0xbbc26a4d
xor eax, 0xa26ae932
rol eax, 0x46
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xfb6158d
pushf
not eax
add eax, 0xc69d1157
xor eax, 0x969c5f40
rol eax, 0x14
popf
pushf
not eax
add eax, 0xdcedc4de
xor eax, 0x945bbd37
rol eax, 0xa2
popf
jmp 0x14018eae8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14018f6bf
push rax
pushf
mov eax, 0x6239e35e
pushf
not eax
add eax, 0xea514a17
xor eax, 0x9665c6f1
rol eax, 0x39
popf
pushf
not eax
add eax, 0xa5c5e7e4
xor eax, 0xc72d37d0
rol eax, 0x96
popf
pushf
not eax
add eax, 0xb30ea32a
xor eax, 0xee803310
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x9fcc314d
xor eax, 0xd501e8e7
rol eax, 0xc8
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x3b8e9c0b
pushf
not eax
add eax, 0xd53e7804
xor eax, 0xe7d33ce3
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xdf2be780
xor eax, 0xd3129686
rol eax, 0x94
popf
pushf
not eax
add eax, 0xfaea8a28
xor eax, 0xa3f08990
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xda10ed79
xor eax, 0xae41f656
rol eax, 0x60
popf
jmp 0x14018eae8
mov rcx, rax
call fcn.140066f5b
mov rcx, rax
test rax, rax
je 0x14018f772
push rax
pushf
mov eax, 0xb54c0a2
pushf
not eax
add eax, 0x95682629
xor eax, 0xd63caa69
rol eax, 0xad
popf
pushf
not eax
add eax, 0xcfe2b33a
xor eax, 0xe7a50c90
rol eax, 0x38
popf
pushf
not eax
add eax, 0xfd45c83b
xor eax, 0xa113866f
rol eax, 0x45
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x9fb4b534
pushf
not eax
add eax, 0xb81136e7
xor eax, 0x9a3b8525
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xfd559cf0
xor eax, 0x9f4c125d
rol eax, 0x99
popf
jmp 0x14018eae8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14018f913
test rcx, rcx
je 0x14018f821
push rax
pushf
mov eax, 0x6544e0af
pushf
not eax
add eax, 0xff1ab239
xor eax, 0x98e4b1b9
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x9e3a6743
xor eax, 0x9dff0f36
rol eax, 0xd0
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xa7334dcd
pushf
not eax
add eax, 0x8f909bd2
xor eax, 0xba7e624c
rol eax, 0x52
popf
pushf
not eax
add eax, 0xe8dcfea9
xor eax, 0xa7bbb61c
rol eax, 0x25
popf
jmp 0x14018eae8
call fcn.140066f5b
jmp 0x14018f913
mov rax, r13
push rax
pushf
mov eax, 0x4745155d
pushf
not eax
add eax, 0xacbe5b3f
xor eax, 0xa7a7e472
rol eax, 0x50
popf
pushf
not eax
add eax, 0xfdca89b5
xor eax, 0xf704d359
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xb9b006d2
xor eax, 0xeaed7247
rol eax, 9
popf
pushf
not eax
add eax, 0xb0e19080
xor eax, 0x9b5baab3
rol eax, 0xd6
popf
jmp 0x14018eae8
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.140011a20
mov r11, qword [rbp - 0x68]
mov rbx, qword [rbp - 0x70]
lea rcx, [rbp - 0x34]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
push rax
pushf
mov eax, 0xad846d8
pushf
not eax
add eax, 0xc2c0ac6f
xor eax, 0xf80aa1e0
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd15fa02f
xor eax, 0xd5131165
rol eax, 0xb0
popf
jmp 0x14018eae8
inc rax
cmp word [rcx + rax*2], 0
jne 0x14018f980
lea r9, [rbp - 0x80]
cmp r11, 8
setae dil
mov r10, qword [rbp - 0x80]
cmovae r9, r10
mov r8, rbx
cmp rax, rbx
cmovb r8, rax
lea rdx, [rbp - 0x34]
test r8, r8
je 0x14018f9f7
push rax
pushf
mov eax, 0x4226d562
pushf
not eax
add eax, 0x9d2f49c0
xor eax, 0x818b469c
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xdc3d8cd0
xor eax, 0xa48c186d
rol eax, 0x98
popf
pushf
not eax
add eax, 0xaac87142
xor eax, 0xaabdf956
rol eax, 0x8b
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x81596b7c
pushf
not eax
add eax, 0xfcf2a43a
xor eax, 0xe606ace5
rol eax, 0x76
popf
pushf
not eax
add eax, 0xc176094a
xor eax, 0xab86a164
rol eax, 0xcd
popf
jmp 0x14018eae8
lea rcx, [rbp - 0x34]
sub r9, rcx
nop dword [rax + rax]
push rax
pushf
mov eax, 0x325c344a
pushf
not eax
add eax, 0xd90b0e57
xor eax, 0x80d257f6
rol eax, 0xab
popf
pushf
not eax
add eax, 0xa5cbf66d
xor eax, 0xcadc2539
rol eax, 0x89
popf
jmp 0x14018eae8
movzx ecx, word [rdx + r9]
cmp cx, word [rdx]
jne 0x14018faa9
push rax
pushf
mov eax, 0xfe7db383
pushf
not eax
add eax, 0xd7b52915
xor eax, 0xb0db10a9
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xd2d3e862
xor eax, 0xa037736b
rol eax, 0x75
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xc4b8f6e5
pushf
not eax
add eax, 0x9e782892
xor eax, 0x818ad8dd
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xa6e467b1
xor eax, 0xcbddaa83
rol eax, 0x64
popf
jmp 0x14018eae8
add rdx, 2
sub r8, 1
jne 0x14018fb19
push rax
pushf
mov eax, 0x911ba350
pushf
not eax
add eax, 0xd0c87de3
xor eax, 0x81a3b863
rol eax, 0x73
popf
pushf
not eax
add eax, 0xfc9f9b2f
xor eax, 0xe5d9aab3
rol eax, 0xd
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xa08518d0
pushf
not eax
add eax, 0xd0822e90
xor eax, 0xf91e9e9d
rol eax, 0x46
popf
pushf
not eax
add eax, 0x9fca420e
xor eax, 0xe6e77c98
rol eax, 0x1a
popf
jmp 0x14018eae8
cmp rbx, rax
jb 0x14018fbaa
push rax
pushf
mov eax, 0xd894c8e7
pushf
not eax
add eax, 0xef275136
xor eax, 0xfa66e682
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xa33b6a8f
xor eax, 0xb867b334
rol eax, 0x14
popf
pushf
not eax
add eax, 0xd81dd8ff
xor eax, 0xc214ea9b
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe68ed98e
xor eax, 0xa9521720
rol eax, 0x46
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xf8f03a46
pushf
not eax
add eax, 0xe157d4c6
xor eax, 0xb1725805
rol eax, 3
popf
pushf
not eax
add eax, 0xabd7ed62
xor eax, 0xf4d4dec2
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x80c88959
xor eax, 0xbf710057
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x88e0ae2a
xor eax, 0xeafb9903
rol eax, 0xf4
popf
jmp 0x14018eae8
jbe 0x14018fc4f
push rax
pushf
mov eax, 0xe3346605
pushf
not eax
add eax, 0xdd904b48
xor eax, 0xd9d8304c
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xbe09657c
xor eax, 0xb41bf2a3
rol eax, 9
popf
pushf
not eax
add eax, 0xd9e60feb
xor eax, 0xa2f9c47b
rol eax, 0xdf
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x9612205
pushf
not eax
add eax, 0xb1a66625
xor eax, 0x8157abbf
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa56e62e7
xor eax, 0xdb29a6fc
rol eax, 4
popf
jmp 0x14018eae8
test dil, dil
je 0x14018fcba
push rax
pushf
mov eax, 0x3dd5adeb
pushf
not eax
add eax, 0xb2d2f351
xor eax, 0xf6768f22
rol eax, 3
popf
pushf
not eax
add eax, 0xafe2dc60
xor eax, 0x9b846a23
rol eax, 0xd5
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x7d18ff49
pushf
not eax
add eax, 0x89cd21e7
xor eax, 0x8400aed3
rol eax, 0x89
popf
pushf
not eax
add eax, 0xdcf2a95f
xor eax, 0xca7d49f4
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xe9c32d7b
xor eax, 0x8e2792f6
rol eax, 0x5c
popf
jmp 0x14018eae8
lea rdx, [r11*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x14018fd6d
push rax
pushf
mov eax, 0xf6f22477
pushf
not eax
add eax, 0x9851e6a8
xor eax, 0xac39c7cd
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xde41e5c3
xor eax, 0xdf64b1b2
rol eax, 8
popf
pushf
not eax
add eax, 0xea5368c6
xor eax, 0xced53904
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xdd591a8b
xor eax, 0xbf4bc676
rol eax, 0xa1
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xf00e16d4
pushf
not eax
add eax, 0xd1e4e4b4
xor eax, 0xa51f1897
rol eax, 0x79
popf
pushf
not eax
add eax, 0x99e3900e
xor eax, 0xc959fc60
rol eax, 0xe3
popf
jmp 0x14018eae8
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fdec
push rax
pushf
mov eax, 0xae0d194
pushf
not eax
add eax, 0xc8a444c5
xor eax, 0xc4feb21b
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xe8c9e925
xor eax, 0xab34bdab
rol eax, 0xf
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x75fce31c
pushf
not eax
add eax, 0xf719b379
xor eax, 0xe917291d
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd4469e05
xor eax, 0xbf3ff5b3
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xd71991be
xor eax, 0xd30f0d88
rol eax, 0x85
popf
pushf
not eax
add eax, 0xff19ba3c
xor eax, 0xf8d57eed
rol eax, 0xa2
popf
jmp 0x14018eae8
mov rcx, r10
call fcn.1400d2afc
push rax
pushf
mov eax, 0xf51f410d
pushf
not eax
add eax, 0xfaaa9c0e
xor eax, 0xc8cbb30e
rol eax, 0x58
popf
pushf
not eax
add eax, 0xce3284d8
xor eax, 0x82feef9f
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe7ffd2a6
xor eax, 0xa1dfdce2
rol eax, 0xae
popf
pushf
not eax
add eax, 0x84cd8437
xor eax, 0xcec580a7
rol eax, 0xd2
popf
jmp 0x14018eae8
add rsi, 0x20
lea rax, [rbp + 0x2c0]
cmp rsi, rax
movabs rax, 0xd700012cf01d82c2
pushf
not rax
add rax, 0x5cb94631
xor rax, 0x55bfebfa
rol rax, 0xc8
popf
pushf
not rax
add rax, 0x5ad043ff
xor rax, 0x4f97afd6
rol rax, 0x6e
popf
pushf
not rax
add rax, 0x421f5e5f
xor rax, 0x49127fed
rol rax, 0x61
popf
mov ecx, 0x6dcb7ff
pushf
not ecx
add ecx, 0xbe3f7417
xor ecx, 0xe6a27e8b
rol ecx, 0x86
popf
pushf
not ecx
add ecx, 0xdc32879c
xor ecx, 0xe3800295
rol ecx, 0x98
popf
pushf
not ecx
add ecx, 0xb9bdf9e7
xor ecx, 0xa72e7854
rol ecx, 0x7d
popf
jne 0x14018ff93
push rax
pushf
mov eax, 0x320cc9af
pushf
not eax
add eax, 0x9724c164
xor eax, 0xdcbf0eda
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xeef54e84
xor eax, 0xabdfecfc
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd541dd08
xor eax, 0xd84d1420
rol eax, 0xda
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0xa9d99733
pushf
not eax
add eax, 0xe8c83f86
xor eax, 0xc9b5843d
rol eax, 0xda
popf
pushf
not eax
add eax, 0xaefa2c23
xor eax, 0xed1cbf71
rol eax, 0xe9
popf
jmp 0x14018eae8
lea rdx, [rbp - 0x60]
mov rcx, r15
jmp 0x14018ffce
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140190022
push rax
pushf
mov eax, 0x2e96986a
pushf
not eax
add eax, 0x82f70ffd
xor eax, 0x8f0a2850
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xabab035e
xor eax, 0xb5d69a64
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xc0d673f0
xor eax, 0xb92cb27d
rol eax, 0xad
popf
jmp 0x14018eae8
push rax
pushf
mov eax, 0x633514b6
pushf
not eax
add eax, 0xae3331ea
xor eax, 0xc3f3e81f
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x9910e7d4
xor eax, 0x8795b8a5
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9fbf6227
xor eax, 0xaa275b09
rol eax, 0xca
popf
pushf
not eax
add eax, 0x9c0d1ad7
xor eax, 0xe314e875
rol eax, 0x87
popf
jmp 0x14018eae8
mov rcx, r15
jmp 0x14019007f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea r9, [0x1a241c3c1]
pushf
sub r9, 0x6240f1a1
popf
mov edx, 0xdd24213e
pushf
not edx
add edx, 0x86855afc
xor edx, 0x8420b999
rol edx, 0x83
popf
pushf
not edx
add edx, 0xae8a3f4a
xor edx, 0xf0a07f02
rol edx, 0xa2
popf
pushf
not edx
add edx, 0x9da279ac
xor edx, 0xca097501
rol edx, 0x90
popf
lea r8d, [rdx - 0x19]
lea rcx, [rbp + 0x1e0]
call fcn.140165031
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14012cd5d
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007486d
nop
push rax
pushf
mov eax, 0xad00f865
pushf
not eax
add eax, 0xedcc53c1
xor eax, 0xf5261cf3
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xedb6fbb4
xor eax, 0x9978e3b3
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x81d1bc4b
xor eax, 0x96bc4800
rol eax, 0x3a
popf
jmp 0x14018eae8
call fcn.140130172
nop
push rax
pushf
mov eax, 0x68818efa
pushf
not eax
add eax, 0x93b33831
xor eax, 0x90046b5d
rol eax, 0x18
popf
pushf
not eax
add eax, 0xf57b5784
xor eax, 0x89c02541
rol eax, 0x7b
popf
jmp 0x14018eae8
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.1400b26c4
mov rbx, qword [rax]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x80]
call fcn.1400649bb
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rsp + 0x60]
call fcn.140063266
nop
mov byte [rsp + 0x20], 0x57
mov cl, 0x48
pushf
not cl
add cl, 0x4f
xor cl, 0xa9
rol cl, 0x5a
popf
pushf
not cl
add cl, 0xa9
xor cl, 0x34
rol cl, 0xb8
popf
pushf
not cl
add cl, 0x7f
xor cl, 0x51
rol cl, 0x34
popf
pushf
not cl
add cl, 0xeb
xor cl, 0x42
rol cl, 0x7d
popf
mov dl, 0x38
pushf
not dl
add dl, 0xda
xor dl, 0x8e
rol dl, 0xd
popf
pushf
not dl
add dl, 0x31
xor dl, 0xe9
rol dl, 0x41
popf
pushf
not dl
add dl, 0x7c
xor dl, 0x4a
rol dl, 0x77
popf
mov r8b, 0xf3
pushf
not r8b
add r8b, 0xad
xor r8b, 0x64
rol r8b, 0xd5
popf
pushf
not r8b
add r8b, 0x21
xor r8b, 4
rol r8b, 0xb7
popf
pushf
not r8b
add r8b, 0x61
xor r8b, 0xb7
rol r8b, 0xb8
popf
pushf
not r8b
add r8b, 0x1f
xor r8b, 0x8a
rol r8b, 0xd1
popf
mov r9b, 0x52
pushf
not r9b
add r9b, 0x2f
xor r9b, 0x24
rol r9b, 0x81
popf
pushf
not r9b
add r9b, 0x90
xor r9b, 0xc4
rol r9b, 0x7d
popf
pushf
not r9b
add r9b, 0x9b
xor r9b, 0xec
rol r9b, 0xb0
popf
pushf
not r9b
add r9b, 0xb6
xor r9b, 0x83
rol r9b, 0xa5
popf
mov r10b, 0x19
pushf
not r10b
add r10b, 0xaf
xor r10b, 0x17
rol r10b, 0x4b
popf
pushf
not r10b
add r10b, 0xdd
xor r10b, 0x48
rol r10b, 0x24
popf
mov r11b, recv
pushf
not r11b
add r11b, 0xb
xor r11b, 0x6b
rol r11b, 0xd
popf
pushf
not r11b
add r11b, 0x6a
xor r11b, 0xeb
rol r11b, 9
popf
mov bl, reloc.WS2_32.dll_WSAStartup
pushf
not bl
add bl, 0xd2
xor bl, 0x78
rol bl, 0x50
popf
pushf
not bl
add bl, 0x79
xor bl, 0xdf
rol bl, 0xea
popf
mov dil, 0x36
pushf
not dil
add dil, 0xd4
xor dil, 0xf9
rol dil, 0xae
popf
pushf
not dil
add dil, 0xa0
xor dil, 0xdb
rol dil, 0x32
popf
pushf
not dil
add dil, 0x62
xor dil, 0xd6
rol dil, 0x60
popf
movzx esi, r9b
movzx r14d, r10b
xor r15d, r15d
xor cl, 0x57
mov byte [rsp + 0x21], cl
xor dl, 0x57
mov byte [rsp + 0x22], dl
xor r8b, 0x57
mov byte [rsp + 0x23], r8b
xor r9b, 0x57
mov byte [rsp + 0x24], r9b
xor r10b, 0x57
mov byte [rsp + 0x25], r10b
xor r11b, 0x57
mov byte [rsp + 0x26], r11b
xor bl, 0x57
mov byte [rsp + 0x27], bl
xor dil, 0x57
mov byte [rsp + 0x28], dil
xor sil, 0x57
mov byte [rsp + 0x29], sil
xor r14b, 0x57
mov byte [rsp + 0x2a], r14b
mov byte [rsp + 0x2b], r15b
mov r8, rax
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x40]
call fcn.1401306fc
mov rdx, rax
call fcn.140173c81
nop
push rax
pushf
mov eax, 0x5cd319ed
pushf
not eax
add eax, 0xe76b757d
xor eax, 0xefea2877
rol eax, 0x17
popf
pushf
not eax
add eax, 0xad10855e
xor eax, 0xb0dddea4
rol eax, 0x79
popf
jmp 0x14018eae8
call fcn.1400b766f
int3