Function at 0x1401137fd
Capabilities:
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0x1c8302ab
pushf
not eax
add eax, 0xa8ce427e
xor eax, 0xf87a8346
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x91c63b0f
xor eax, 0xad026676
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xbeafe1e9
xor eax, 0xade62f11
rol eax, 0x2e
popf
cmp eax, 0x29
jne 0x14011384d
popf
pop rax
jmp 0x1401150e5
cmp eax, 0
jne 0x14011385c
popf
pop rax
jmp 0x140113ab4
cmp eax, 3
jne 0x14011386b
popf
pop rax
jmp 0x140113d64
cmp eax, 1
jne 0x14011387a
popf
pop rax
jmp 0x140113be6
cmp eax, 0xd
jne 0x140113889
popf
pop rax
jmp 0x1401143a2
cmp eax, 0x1a
jne 0x140113898
popf
pop rax
jmp 0x140114962
cmp eax, 0xe
jne 0x1401138a7
popf
pop rax
jmp 0x140114400
cmp eax, 0xb
jne 0x1401138b6
popf
pop rax
jmp 0x14011425a
cmp eax, 0x19
jne 0x1401138c5
popf
pop rax
jmp 0x1401148af
cmp eax, 8
jne 0x1401138d4
popf
pop rax
jmp 0x14011409b
cmp eax, 0x1d
jne 0x1401138e3
popf
pop rax
jmp 0x140114ab4
cmp eax, 0x17
jne 0x1401138f2
popf
pop rax
jmp 0x1401147e5
cmp eax, 0x1c
jne 0x140113901
popf
pop rax
jmp 0x140114a50
cmp eax, 0x12
jne 0x140113910
popf
pop rax
jmp 0x1401145d1
cmp eax, 0x18
jne 0x14011391f
popf
pop rax
jmp 0x140114872
cmp eax, 0x11
jne 0x14011392e
popf
pop rax
jmp 0x14011453c
cmp eax, 0x1b
jne 0x14011393d
popf
pop rax
jmp 0x1401149b2
cmp eax, 0x21
jne 0x14011394c
popf
pop rax
jmp 0x140114c24
cmp eax, 0x23
jne 0x14011395b
popf
pop rax
jmp 0x140114d19
cmp eax, 0x25
jne 0x14011396a
popf
pop rax
jmp 0x140114e7f
cmp eax, 0xf
jne 0x140113979
popf
pop rax
jmp 0x140114455
cmp eax, 0x13
jne 0x140113988
popf
pop rax
jmp 0x14011461e
cmp eax, 0x15
jne 0x140113997
popf
pop rax
jmp 0x1401146de
cmp eax, 0x24
jne 0x1401139a6
popf
pop rax
jmp 0x140114dda
cmp eax, 0x1e
jne 0x1401139b5
popf
pop rax
jmp 0x140114b3e
cmp eax, 0xc
jne 0x1401139c4
popf
pop rax
jmp 0x1401142ca
cmp eax, 0x26
jne 0x1401139d3
popf
pop rax
jmp 0x140114f22
cmp eax, 0x27
jne 0x1401139e2
popf
pop rax
jmp 0x140114fc5
cmp eax, 0x1f
jne 0x1401139f1
popf
pop rax
jmp 0x140114be3
cmp eax, 0x10
jne 0x140113a00
popf
pop rax
jmp 0x1401144f9
cmp eax, 6
jne 0x140113a0f
popf
pop rax
jmp 0x140113fc3
cmp eax, 9
jne 0x140113a1e
popf
pop rax
jmp 0x1401140f7
cmp eax, 4
jne 0x140113a2d
popf
pop rax
jmp 0x140113e23
cmp eax, 0x16
jne 0x140113a3c
popf
pop rax
jmp 0x140114795
cmp eax, 0x28
jne 0x140113a4b
popf
pop rax
jmp 0x140115053
cmp eax, 0xa
jne 0x140113a5a
popf
pop rax
jmp 0x14011419f
cmp eax, 0x22
jne 0x140113a69
popf
pop rax
jmp 0x140114cb6
cmp eax, 0x14
jne 0x140113a78
popf
pop rax
jmp 0x140114669
cmp eax, 7
jne 0x140113a87
popf
pop rax
jmp 0x14011405b
cmp eax, 5
jne 0x140113a96
popf
pop rax
jmp 0x140113f21
cmp eax, 2
jne 0x140113aa5
popf
pop rax
jmp 0x140113ca5
cmp eax, 0x20
jne 0x140113ab4
popf
pop rax
jmp 0x140114c20
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r13, [0x19e5aa804]
pushf
sub r13, 0x5e531a64
popf
mov qword [rbp - 0x38], r13
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea r12, [0x1a90571a9]
pushf
sub r12, 0x68fde329
popf
mov qword [rbp - 0x10], r12
mov byte [rbp + 0x3c], al
mov dword [rbp + 0x40], 7
call fcn.1400ee99d
mov rcx, rax
test rax, rax
je 0x140113bb3
push rax
pushf
mov eax, 0xe35f56b6
pushf
not eax
add eax, 0xd1cfa459
xor eax, 0x9309f65e
rol eax, 0x70
popf
pushf
not eax
add eax, 0xb5f7fde0
xor eax, 0xa881311c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd7306d12
xor eax, 0xec6e83cc
rol eax, 0x2e
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x7ab42604
pushf
not eax
add eax, 0xee7ddb50
xor eax, 0xc73514cf
rol eax, 0x61
popf
pushf
not eax
add eax, 0xebfbe288
xor eax, 0x82119f7e
rol eax, 0xb1
popf
jmp 0x14011383e
mov rax, qword [rax]
jmp 0x140113bea
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x48], rax
call fcn.1400ee99d
mov rcx, rax
test rax, rax
je 0x140113c4c
push rax
pushf
mov eax, 0xabb94f8
pushf
not eax
add eax, 0xa4928e84
xor eax, 0xa7d29ad2
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xf9db577f
xor eax, 0xcf765213
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x9990b226
xor eax, 0xb21d9f81
rol eax, 0x91
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x8e97f2cb
pushf
not eax
add eax, 0xef154133
xor eax, 0xbe8a42ca
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb3f646e1
xor eax, 0xe4bdf619
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xac63c365
xor eax, 0xe58c239c
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xfaf261bf
xor eax, 0xf7568725
rol eax, 0x35
popf
jmp 0x14011383e
mov rax, qword [rax]
jmp 0x140113ca9
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x50], rax
call fcn.1400ee99d
mov rcx, rax
test rax, rax
je 0x140113d0b
push rax
pushf
mov eax, 0x3db6ce38
pushf
not eax
add eax, 0xea9758e0
xor eax, 0xa6460655
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc589f22e
xor eax, 0xfb704878
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xed6cf0d5
xor eax, 0xde69d7ac
rol eax, 0x32
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0xdffe8158
pushf
not eax
add eax, 0xa46ec46b
xor eax, 0xfaa7f480
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc8021d4c
xor eax, 0xdce3c7d1
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x96365ace
xor eax, 0x9386f575
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xffa48e9e
xor eax, 0x86345bc0
rol eax, 0x3e
popf
jmp 0x14011383e
mov rax, qword [rax]
jmp 0x140113d68
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x58], rax
call fcn.1400ee99d
mov rcx, rax
test rax, rax
je 0x140113ddd
push rax
pushf
mov eax, 0x70fc48ed
pushf
not eax
add eax, 0xe5bff50c
xor eax, 0xbe23a89f
rol eax, 0x69
popf
pushf
not eax
add eax, 0xf20bd76b
xor eax, 0x93b3ca71
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xec3c0433
xor eax, 0xcf820857
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x9a32da77
xor eax, 0xf986c061
rol eax, 0x29
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x2fdc891c
pushf
not eax
add eax, 0x96e7de57
xor eax, 0xdfd06f3d
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf2fa684c
xor eax, 0xbdc0207c
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x8cbd2efc
xor eax, 0xcae5122f
rol eax, 0xcd
popf
jmp 0x14011383e
mov rax, qword [rax]
jmp 0x140113e27
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x60], rax
jmp 0x140113e33
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0x45ad7d19
pushf
not edx
add edx, 0x9472afba
xor edx, 0xfae86035
rol edx, 0x29
popf
pushf
not edx
add edx, 0x956773f7
xor edx, 0xdaf8b1b0
rol edx, 0x57
popf
pushf
not edx
add edx, 0xc861f079
xor edx, 0xa471aec8
rol edx, 0xa1
popf
pushf
not edx
add edx, 0x99258646
xor edx, 0x822485dc
rol edx, 0xf8
popf
mov rcx, rax
jmp 0x140113e9a
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140113eee
push rax
pushf
mov eax, 0x69cca1bc
pushf
not eax
add eax, 0xf9120e6d
xor eax, 0xc34a8913
rol eax, 0x23
popf
pushf
not eax
add eax, 0xfa44be7d
xor eax, 0xc0b93abe
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xee476941
xor eax, 0x8f649d51
rol eax, 0xff
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x8c55b4f7
pushf
not eax
add eax, 0xb3a2b02a
xor eax, 0xde1fee7d
rol eax, 2
popf
pushf
not eax
add eax, 0x9e79f7f6
xor eax, 0xb92da7b6
rol eax, 0x3a
popf
jmp 0x14011383e
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x140113f2a
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.1401070d9
test al, al
je 0x140113f7d
push rax
pushf
mov eax, 0xed9a975b
pushf
not eax
add eax, 0xa81a4f6f
xor eax, 0xb96380a8
rol eax, 0xde
popf
pushf
not eax
add eax, 0xa8543f3e
xor eax, 0xe78d010f
rol eax, 0x15
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0xedb0270e
pushf
not eax
add eax, 0x97cca767
xor eax, 0xa77c653f
rol eax, 0x71
popf
pushf
not eax
add eax, 0x91cc5d44
xor eax, 0xc32ce742
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xf0821e92
xor eax, 0xc2836ffc
rol eax, 0x53
popf
jmp 0x14011383e
lea rcx, [rbp - 0x10]
call fcn.14010a166
mov rdi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rbx, [r15 - 1]
test rdi, rdi
jne 0x140114028
push rax
pushf
mov eax, 0x5370f2be
pushf
not eax
add eax, 0xdb6ce1a1
xor eax, 0xa4743722
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xbbdf2702
xor eax, 0xca47801a
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xdca2632f
xor eax, 0xfd57b63a
rol eax, 0x77
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x865908dc
pushf
not eax
add eax, 0xd7a33593
xor eax, 0xe9290824
rol eax, 0x45
popf
pushf
not eax
add eax, 0xcea94728
xor eax, 0xc2c4b4d0
rol eax, 0xac
popf
jmp 0x14011383e
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x14011453c
mov rax, rbx
push rax
pushf
mov eax, 0xa43e389
pushf
not eax
add eax, 0xb76ad4c9
xor eax, 0xf16ee27d
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa50eb753
xor eax, 0xd749bf5f
rol eax, 0x19
popf
pushf
not eax
add eax, 0xa7f35549
xor eax, 0xcd338dda
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xc1b2a563
xor eax, 0xa13a6d33
rol eax, 0x44
popf
jmp 0x14011383e
inc rax
cmp byte [rdi + rax], 0
jne 0x140114159
push rax
pushf
mov eax, 0xa9273728
pushf
not eax
add eax, 0xccd868b3
xor eax, 0xd1689af0
rol eax, 0x52
popf
pushf
not eax
add eax, 0x91b2e989
xor eax, 0xb5310cb4
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x9acf4e21
xor eax, 0xcf23171f
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc821b131
xor eax, 0x9d63b8cc
rol eax, 0x99
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x60130df8
pushf
not eax
add eax, 0xb8ab6ecd
xor eax, 0xcf65504b
rol eax, 0x10
popf
pushf
not eax
add eax, 0xbe418a56
xor eax, 0x902fbf3f
rol eax, 0x14
popf
pushf
not eax
add eax, 0x84132ef9
xor eax, 0xa9215614
rol eax, 0x89
popf
jmp 0x14011383e
add eax, 1
js 0x140114201
push rax
pushf
mov eax, 0x2352f3db
pushf
not eax
add eax, 0xbea04168
xor eax, 0xa16771a9
rol eax, 3
popf
pushf
not eax
add eax, 0xf9065400
xor eax, 0xeb211465
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xf2947d3b
xor eax, 0x9771881c
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xc1cad1af
xor eax, 0xaa9e2bb2
rol eax, 0x9d
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x91afd51f
pushf
not eax
add eax, 0xc3702da2
xor eax, 0xdf332958
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xec3a60ce
xor eax, 0xbbb60057
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xdd3a1cc3
xor eax, 0xa6e8f9db
rol eax, 0x75
popf
pushf
not eax
add eax, 0xf0cf6dc9
xor eax, 0xeb792409
rol eax, 0xb4
popf
jmp 0x14011383e
movsxd r14, eax
cmp eax, 0x80
jle 0x140114297
push rax
pushf
mov eax, 0x59a0a297
pushf
not eax
add eax, 0x8ce0543d
xor eax, 0x803505ba
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xdf6bc336
xor eax, 0xcf8a3ddb
rol eax, 0xef
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x670a1126
pushf
not eax
add eax, 0x8d8ca4de
xor eax, 0xfb285a82
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xead1d7a6
xor eax, 0x953f6bed
rol eax, 0xe1
popf
jmp 0x14011383e
mov edx, 0x97c71a88
pushf
not edx
add edx, 0xb5df2f20
xor edx, 0xbd6ae839
rol edx, 3
popf
pushf
not edx
add edx, 0xc9d813d2
xor edx, 0xd2cbe188
rol edx, 0x7a
popf
pushf
not edx
add edx, 0xd28a8b7d
xor edx, 0x8098dc3d
rol edx, 0xd1
popf
mov rcx, r14
jmp 0x140114312
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x14011435c
push rax
pushf
mov eax, 0xce367319
pushf
not eax
add eax, 0xc898fb8c
xor eax, 0xfacf7568
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xe9cfa71c
xor eax, 0xe978ae0e
rol eax, 0xf9
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x797acdc2
pushf
not eax
add eax, 0xd690eb89
xor eax, 0xf536ce00
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xcc4fab6e
xor eax, 0x945a2ba6
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xbfc05923
xor eax, 0x9db97021
rol eax, 0x28
popf
jmp 0x14011383e
jmp 0x140114455
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
push rax
pushf
mov eax, 0x6240cc07
pushf
not eax
add eax, 0xf5ea31eb
xor eax, 0x9d85a8e1
rol eax, 0x96
popf
pushf
not eax
add eax, 0xac7e31d8
xor eax, 0xdbffd96c
rol eax, 0x10
popf
pushf
not eax
add eax, 0xf61918e7
xor eax, 0x865068e1
rol eax, 0x84
popf
jmp 0x14011383e
test r14, r14
je 0x1401144a0
push rax
pushf
mov eax, 0xfdc67e0e
pushf
not eax
add eax, 0x915f2fd8
xor eax, 0x8f650904
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe419cb36
xor eax, 0xf23b1d3e
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc810d917
xor eax, 0xd3ffdfa5
rol eax, 0x7e
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x53fab164
pushf
not eax
add eax, 0xac3dfe05
xor eax, 0x9fcd5263
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf240d5d6
xor eax, 0xd045610a
rol eax, 0x53
popf
pushf
not eax
add eax, 0xe34986f8
xor eax, 0xab412df0
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xb3dd695e
xor eax, 0xa1d95311
rol eax, 6
popf
jmp 0x14011383e
mov r8, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x9f727168
pushf
not eax
add eax, 0xe5389f55
xor eax, 0xac26f830
rol eax, 0x79
popf
pushf
not eax
add eax, 0x95fdd6db
xor eax, 0xdc2a9d2f
rol eax, 0x95
popf
jmp 0x14011383e
mov rdx, rax
mov rcx, rsi
call fcn.1400d98c7
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x14011459d
push rax
pushf
mov eax, 0xd41b6f3b
pushf
not eax
add eax, 0xd35ec5cb
xor eax, 0xe43e1b18
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xd7ac5670
xor eax, 0xd3b1afd1
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xb648b78d
xor eax, 0xf846a165
rol eax, 0x8b
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0xeeade9e5
pushf
not eax
add eax, 0x9e9bbf01
xor eax, 0xa78e9191
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf6a115ea
xor eax, 0x9d0fd4dd
rol eax, 0xc8
popf
jmp 0x14011383e
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0xbe1c8a22
pushf
not eax
add eax, 0xba30fdae
xor eax, 0xb53e4c18
rol eax, 0x13
popf
pushf
not eax
add eax, 0xd85a806d
xor eax, 0xc7864281
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xe3c32523
xor eax, 0xc1febdc0
rol eax, 0x41
popf
jmp 0x14011383e
jmp 0x1401146de
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0x73cc4a46
pushf
not eax
add eax, 0xf64ea7fe
xor eax, 0xf23304b5
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xcc23f5d9
xor eax, 0xe8c62f15
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf0548837
xor eax, 0xd399244e
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd1de6ba9
xor eax, 0x9873b8c7
rol eax, 0x64
popf
jmp 0x14011383e
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
mov qword [rbp - 0x10], r12
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14011473c
push rax
pushf
mov eax, 0x16b32c4
pushf
not eax
add eax, 0x99e30b9e
xor eax, 0xa16d3d3b
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xde175e9a
xor eax, 0xa81a49a8
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x99bd710b
xor eax, 0xcfed10d6
rol eax, 0x54
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x29133e60
pushf
not eax
add eax, 0xa1f5428c
xor eax, 0xfbe8f03b
rol eax, 0xba
popf
pushf
not eax
add eax, 0xef7e6b1c
xor eax, 0xf124ffc9
rol eax, 0x14
popf
pushf
not eax
add eax, 0x8baf3bcf
xor eax, 0xde830b1d
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xb691c01d
xor eax, 0xddaf20bd
rol eax, 0xcb
popf
jmp 0x14011383e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x14011479c
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xb72109d2
pushf
not eax
add eax, 0xf063c349
xor eax, 0xcfe90c4b
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xd700aa9f
xor eax, 0x9dfb842c
rol eax, 0x87
popf
pushf
not eax
add eax, 0xe7b172ee
xor eax, 0xd155852b
rol eax, 7
popf
jmp 0x14011383e
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14011482c
push rax
pushf
mov eax, 0xc0596dd9
pushf
not eax
add eax, 0xc7e7bafd
xor eax, 0xc8b36210
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xacd1106b
xor eax, 0xc53278e1
rol eax, 0xff
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0xa6cd0345
pushf
not eax
add eax, 0xc105c2df
xor eax, 0xfc48b461
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xa58dcb9a
xor eax, 0x9da2b8ff
rol eax, 0x26
popf
pushf
not eax
add eax, 0xdbfb09ff
xor eax, 0x9e552ffc
rol eax, 0x21
popf
jmp 0x14011383e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140114879
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xa85211bf
pushf
not eax
add eax, 0xd4453c13
xor eax, 0xb3f6bdea
rol eax, 0x67
popf
pushf
not eax
add eax, 0xfb26e4b9
xor eax, 0xf85b0724
rol eax, 0xdd
popf
jmp 0x14011383e
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140114909
push rax
pushf
mov eax, 0x40cf0a01
pushf
not eax
add eax, 0xf6685230
xor eax, 0xbb21f1c3
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xcfcee975
xor eax, 0xd9e29595
rol eax, 0x48
popf
pushf
not eax
add eax, 0x97ebc6ce
xor eax, 0xc860be82
rol eax, 0x13
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0xbf466433
pushf
not eax
add eax, 0xc72e6d46
xor eax, 0x98088642
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa9dd1696
xor eax, 0x9d45d502
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9780abc4
xor eax, 0xf98f1f60
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xf5b30717
xor eax, 0x9611857b
rol eax, 0x96
popf
jmp 0x14011383e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140114969
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xdba8922
pushf
not eax
add eax, 0xdd83e2c8
xor eax, 0x8f532196
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xb5026b48
xor eax, 0xf15da077
rol eax, 0x94
popf
pushf
not eax
add eax, 0xca9260d8
xor eax, 0x8f5b2a81
rol eax, 0x96
popf
jmp 0x14011383e
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1401149f7
push rax
pushf
mov eax, 0x505de465
pushf
not eax
add eax, 0x86e22498
xor eax, 0xa5412656
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x9ae9a061
xor eax, 0x8550ee11
rol eax, 0xd5
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x748b7866
pushf
not eax
add eax, 0xf2c9df31
xor eax, 0xbd7a3bb2
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf68a02ee
xor eax, 0x9b5e8335
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf8977138
xor eax, 0xe0da534e
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xa26d238c
xor eax, 0x8c117375
rol eax, 0xcd
popf
jmp 0x14011383e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140114a57
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0x11b7bd01
pushf
not eax
add eax, 0xe64e4168
xor eax, 0x9b7dedd1
rol eax, 0x29
popf
pushf
not eax
add eax, 0x8c601caa
xor eax, 0xe6b0c894
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xe2c26737
xor eax, 0x9e094268
rol eax, 0xda
popf
pushf
not eax
add eax, 0xbcaeab76
xor eax, 0xb2f1edb7
rol eax, 0xd8
popf
jmp 0x14011383e
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r13
je 0x140114af8
push rax
pushf
mov eax, 0x3daadec9
pushf
not eax
add eax, 0xcc73d9fb
xor eax, 0xb9f0a9c7
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x8078c3f8
xor eax, 0x8aaaaf3a
rol eax, 0x66
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x55986b1a
pushf
not eax
add eax, 0xed8ec28e
xor eax, 0xdbb7c43e
rol eax, 0x11
popf
pushf
not eax
add eax, 0xe23caef5
xor eax, 0xc5fe1817
rol eax, 0x83
popf
pushf
not eax
add eax, 0xa7bcc8b7
xor eax, 0xb5d45583
rol eax, 0xd
popf
jmp 0x14011383e
test rcx, rcx
je 0x140114b89
push rax
pushf
mov eax, 0x54b31016
pushf
not eax
add eax, 0xe014de0a
xor eax, 0xcd88bac6
rol eax, 0xf
popf
pushf
not eax
add eax, 0xd463a082
xor eax, 0xd3cd1968
rol eax, 3
popf
pushf
not eax
add eax, 0xd9504e79
xor eax, 0x9e212b4a
rol eax, 0x48
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0xb47d9874
pushf
not eax
add eax, 0xcd8db07b
xor eax, 0xb4894846
rol eax, 0x82
popf
pushf
not eax
add eax, 0x9cb1baf2
xor eax, 0x9cf01292
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xf9a77feb
xor eax, 0xc0802f16
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xce9db9bf
xor eax, 0x96da20c5
rol eax, 0xbb
popf
jmp 0x14011383e
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0x813bb965
pushf
not eax
add eax, 0xba2aa0e0
xor eax, 0xe075a15e
rol eax, 0x51
popf
pushf
not eax
add eax, 0x894273f2
xor eax, 0xfdf8c2bb
rol eax, 0x6d
popf
jmp 0x14011383e
mov qword [rbp - 0x28], r15
test rcx, rcx
je 0x140114c5c
push rax
pushf
mov eax, 0x8dffe444
pushf
not eax
add eax, 0x9fa89dfd
xor eax, 0xa3bc4796
rol eax, 0x51
popf
pushf
not eax
add eax, 0x9ed78fa6
xor eax, 0xa27a2b5e
rol eax, 0x60
popf
jmp 0x14011383e
push rax
pushf
mov eax, 0x6a8f0684
pushf
not eax
add eax, 0xede9b5c6
xor eax, 0xa4f09025
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x815d27a8
xor eax, 0x8e5ef943
rol eax, 0xed
popf
pushf
not eax
add eax, 0xf73a704c
xor eax, 0x8564db50
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xc95c1e52
xor eax, 0xb813392e
rol eax, 0x97
popf
jmp 0x14011383e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0xce6eecaa
pushf
not eax
add eax, 0x9986e6cb
xor eax, 0xe6373a33
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xe3051352
xor eax, 0x97ed9cd8
rol eax, 0x30
popf
pushf
not eax
add eax, 0xad9691a6
xor eax, 0x8a105fb6
rol eax, 0x38
popf
pushf
not eax
add eax, 0xc7c6ac63
xor eax, 0x8a1f3f3f
rol eax, 0x4b
popf
jmp 0x14011383e
mov edx, 0xc311511d
pushf
not edx
add edx, 0xd4d7c744
xor edx, 0x8c040679
rol edx, 0xfb
popf
pushf
not edx
add edx, 0x9a46693c
xor edx, 0x9d5055b9
rol edx, 0xf0
popf
mov rcx, qword [rbp - 0x20]
call fcn.1400c3c47
mov rax, rsi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400e1fcd
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x574301d1
pushf
not ecx
add ecx, 0xac40c563
xor ecx, 0x9bb123b7
rol ecx, 0x1a
popf
pushf
not ecx
add ecx, 0xbec5e17c
xor ecx, 0xeb065ce3
rol ecx, 0x52
popf
pushf
not ecx
add ecx, 0xba293dda
xor ecx, 0xb48fd96d
rol ecx, 0xf
popf
pushf
not ecx
add ecx, 0xaf09fc11
xor ecx, 0xd191056c
rol ecx, 0x96
popf
call fcn.1400ea3cc
int3
mov ecx, 0x12c7754d
pushf
not ecx
add ecx, 0xf9adad32
xor ecx, 0xf9bb33da
rol ecx, 0x14
popf
pushf
not ecx
add ecx, 0x87bcd320
xor ecx, 0x8fe1d652
rol ecx, 0xec
popf
pushf
not ecx
add ecx, 0xbbaa8756
xor ecx, 0xcafb0a93
rol ecx, 0x12
popf
call fcn.1400ea3cc
nop
push rax
pushf
mov eax, 0x17ae6853
pushf
not eax
add eax, 0xf08436e6
xor eax, 0xf9b2ead9
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xa2500085
xor eax, 0xb46364c1
rol eax, 0xef
popf
pushf
not eax
add eax, 0xf1d1429c
xor eax, 0xa8abd754
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xd4d0d306
xor eax, 0xe1ea2edd
rol eax, 0xd2
popf
jmp 0x14011383e
mov ecx, 0x90889989
pushf
not ecx
add ecx, 0x9bc6b500
xor ecx, 0xde8225cb
rol ecx, 8
popf
pushf
not ecx
add ecx, 0xea34e1f7
xor ecx, 0xebe25d8b
rol ecx, 0x45
popf
pushf
not ecx
add ecx, 0x9a6cfecd
xor ecx, 0xc7dca974
rol ecx, 0x32
popf
call fcn.1400ea3cc
nop
push rax
pushf
mov eax, 0xc6092d3a
pushf
not eax
add eax, 0xefc7389f
xor eax, 0x969c9767
rol eax, 0x20
popf
pushf
not eax
add eax, 0xb422fcfe
xor eax, 0x8d1115aa
rol eax, 0x36
popf
pushf
not eax
add eax, 0xa30ff53d
xor eax, 0xef5a6b1d
rol eax, 0x73
popf
pushf
not eax
add eax, 0xb5bc7127
xor eax, 0xd78063ca
rol eax, 0xb0
popf
jmp 0x14011383e
mov ecx, 0x87e1f9e0
pushf
not ecx
add ecx, 0x8e848edd
xor ecx, 0xca251b2c
rol ecx, 0xc6
popf
pushf
not ecx
add ecx, 0xbdcf40b1
xor ecx, 0xfbeb5c7c
rol ecx, 0xe2
popf
call fcn.1400ea3cc
nop
push rax
pushf
mov eax, 0x9908596b
pushf
not eax
add eax, 0xd9561842
xor eax, 0xde0b02b5
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xd099335d
xor eax, 0x8bc0d205
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x83974a82
xor eax, 0xcc09f88e
rol eax, 0x73
popf
pushf
not eax
add eax, 0x804a58a1
xor eax, 0xfab3489f
rol eax, 0x7f
popf
jmp 0x14011383e
mov ecx, 0x24c3f3bb
pushf
not ecx
add ecx, 0x8de537d1
xor ecx, 0x9a0981f0
rol ecx, 0x7a
popf
pushf
not ecx
add ecx, 0xf281c989
xor ecx, 0xe3f019c3
rol ecx, 0xbe
popf
pushf
not ecx
add ecx, 0xd1ade290
xor ecx, 0xa9bed1a5
rol ecx, 0xed
popf
pushf
not ecx
add ecx, 0xf121d955
xor ecx, 0xa8c507a0
rol ecx, 0xfc
popf
call fcn.1400ea3cc
nop
push rax
pushf
mov eax, 0xa6975dfc
pushf
not eax
add eax, 0xdc743da7
xor eax, 0x96f3404c
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xa2d9c5a0
xor eax, 0xa45a2b19
rol eax, 2
popf
jmp 0x14011383e
mov ecx, 0x9d3a8f0c
pushf
not ecx
add ecx, 0xcde6f98d
xor ecx, 0xb62e348c
rol ecx, 0xb5
popf
pushf
not ecx
add ecx, 0xc4bcd6b3
xor ecx, 0xc32c2665
rol ecx, 0xe1
popf
call fcn.1400ea3cc
int3