Function at 0x140b01e0f
Capabilities:
Authenticate hmac
Encrypt data using chaskey
Enumerate files on windows
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x91814267
pushf
not eax
add eax, 0xd5821b1e
xor eax, 0xf97cad9d
rol eax, 0x41
popf
pushf
not eax
add eax, 0xfa0d7825
xor eax, 0xc63ebbbb
rol eax, 0x81
popf
pushf
not eax
add eax, 0xa6457c0a
xor eax, 0xe15d0a65
rol eax, 0x89
popf
pushf
not eax
add eax, 0xda58ac05
xor eax, 0x824db85f
rol eax, 0xd6
popf
cmp eax, 0x29
jne 0x140b01e72
popf
pop rax
jmp 0x140b03806
cmp eax, 0
jne 0x140b01e81
popf
pop rax
jmp 0x140b021d8
cmp eax, 3
jne 0x140b01e90
popf
pop rax
jmp 0x140b0243f
cmp eax, 1
jne 0x140b01e9f
popf
pop rax
jmp 0x140b02302
cmp eax, 0xd
jne 0x140b01eae
popf
pop rax
jmp 0x140b02a26
cmp eax, 0x1a
jne 0x140b01ebd
popf
pop rax
jmp 0x140b03024
cmp eax, 0xe
jne 0x140b01ecc
popf
pop rax
jmp 0x140b02a87
cmp eax, 0x31
jne 0x140b01edb
popf
pop rax
jmp 0x140b03bd2
cmp eax, 0x19
jne 0x140b01eea
popf
pop rax
jmp 0x140b02fe4
cmp eax, 8
jne 0x140b01ef9
popf
pop rax
jmp 0x140b02732
cmp eax, 0x2a
jne 0x140b01f08
popf
pop rax
jmp 0x140b038bc
cmp eax, 0x17
jne 0x140b01f17
popf
pop rax
jmp 0x140b02f34
cmp eax, 0x1c
jne 0x140b01f26
popf
pop rax
jmp 0x140b031d8
cmp eax, 0x2e
jne 0x140b01f35
popf
pop rax
jmp 0x140b03ae0
cmp eax, 0x18
jne 0x140b01f44
popf
pop rax
jmp 0x140b02f97
cmp eax, 0x2b
jne 0x140b01f53
popf
pop rax
jmp 0x140b0394d
cmp eax, 0x1b
jne 0x140b01f62
popf
pop rax
jmp 0x140b03146
cmp eax, 0x2d
jne 0x140b01f71
popf
pop rax
jmp 0x140b03a7f
cmp eax, 0x23
jne 0x140b01f80
popf
pop rax
jmp 0x140b03530
cmp eax, 0x25
jne 0x140b01f8f
popf
pop rax
jmp 0x140b035ca
cmp eax, 0x32
jne 0x140b01f9e
popf
pop rax
jmp 0x140b03c4d
cmp eax, 0x13
jne 0x140b01fad
popf
pop rax
jmp 0x140b02cef
cmp eax, 0x33
jne 0x140b01fbc
popf
pop rax
jmp 0x140b03cea
cmp eax, 0x24
jne 0x140b01fcb
popf
pop rax
jmp 0x140b03594
cmp eax, 0x1e
jne 0x140b01fda
popf
pop rax
jmp 0x140b03277
cmp eax, 0xc
jne 0x140b01fe9
popf
pop rax
jmp 0x140b029c1
cmp eax, 0x26
jne 0x140b01ff8
popf
pop rax
jmp 0x140b0367c
cmp eax, 0x27
jne 0x140b02007
popf
pop rax
jmp 0x140b03722
cmp eax, 0x30
jne 0x140b02016
popf
pop rax
jmp 0x140b03b57
cmp eax, 0x10
jne 0x140b02025
popf
pop rax
jmp 0x140b02bae
cmp eax, 0x37
jne 0x140b02034
popf
pop rax
jmp 0x140b03e67
cmp eax, 9
jne 0x140b02043
popf
pop rax
jmp 0x140b027e4
cmp eax, 0x39
jne 0x140b02052
popf
pop rax
jmp 0x140b03f41
cmp eax, 0x16
jne 0x140b02061
popf
pop rax
jmp 0x140b02e8f
cmp eax, 0x28
jne 0x140b02070
popf
pop rax
jmp 0x140b037c6
cmp eax, 0xa
jne 0x140b0207f
popf
pop rax
jmp 0x140b0281a
cmp eax, 0x36
jne 0x140b0208e
popf
pop rax
jmp 0x140b03e19
cmp eax, 0x14
jne 0x140b0209d
popf
pop rax
jmp 0x140b02d41
cmp eax, 7
jne 0x140b020ac
popf
pop rax
jmp 0x140b02673
cmp eax, 0x34
jne 0x140b020bb
popf
pop rax
jmp 0x140b03d3a
cmp eax, 2
jne 0x140b020ca
popf
pop rax
jmp 0x140b023a9
cmp eax, 0x20
jne 0x140b020d9
popf
pop rax
jmp 0x140b033b1
cmp eax, 0x1d
jne 0x140b020e8
popf
pop rax
jmp 0x140b03229
cmp eax, 0x11
jne 0x140b020f7
popf
pop rax
jmp 0x140b02bed
cmp eax, 0x35
jne 0x140b02106
popf
pop rax
jmp 0x140b03d87
cmp eax, 0x3a
jne 0x140b02115
popf
pop rax
jmp 0x140b03f9d
cmp eax, 0x12
jne 0x140b02124
popf
pop rax
jmp 0x140b02c5d
cmp eax, 0x21
jne 0x140b02133
popf
pop rax
jmp 0x140b03415
cmp eax, 0x38
jne 0x140b02142
popf
pop rax
jmp 0x140b03f04
cmp eax, 0xb
jne 0x140b02151
popf
pop rax
jmp 0x140b0292f
cmp eax, 0xf
jne 0x140b02160
popf
pop rax
jmp 0x140b02b1c
cmp eax, 0x15
jne 0x140b0216f
popf
pop rax
jmp 0x140b02d9d
cmp eax, 5
jne 0x140b0217e
popf
pop rax
jmp 0x140b02596
cmp eax, 6
jne 0x140b0218d
popf
pop rax
jmp 0x140b0262b
cmp eax, 0x22
jne 0x140b0219c
popf
pop rax
jmp 0x140b034c4
cmp eax, 0x2c
jne 0x140b021ab
popf
pop rax
jmp 0x140b039ee
cmp eax, 0x1f
jne 0x140b021ba
popf
pop rax
jmp 0x140b0331f
cmp eax, 4
jne 0x140b021c9
popf
pop rax
jmp 0x140b024db
cmp eax, 0x2f
jne 0x140b021d8
popf
pop rax
jmp 0x140b03b3e
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0xdf8137b30c6191c4
pushf
not rbx
add rbx, 0x7835aa2f
xor rbx, 0x511be9e1
rol rbx, 0x44
popf
pushf
not rbx
add rbx, 0x774a73c6
xor rbx, 0x69b4e4ec
rol rbx, 0x27
popf
pushf
not rbx
add rbx, 0x64d66ddb
xor rbx, 0x5b18d788
rol rbx, 0xb
popf
cmp rdx, rcx
je 0x140b022bc
push rax
pushf
mov eax, 0x74c21011
pushf
not eax
add eax, 0x8f2b8611
xor eax, 0xf6988098
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x9067d666
xor eax, 0xb12f79ef
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xdeca12e2
xor eax, 0xefa71fc1
rol eax, 0xae
popf
pushf
not eax
add eax, 0xceb64021
xor eax, 0xe66f761b
rol eax, 0x3d
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x995f3f14
pushf
not eax
add eax, 0xce14d2dc
xor eax, 0x926acf3d
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xe7990ec2
xor eax, 0xa9dbb4dd
rol eax, 0x17
popf
pushf
not eax
add eax, 0x918fa526
xor eax, 0x91f1f1de
rol eax, 0xc0
popf
jmp 0x140b01e63
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x140b02350
push rax
pushf
mov eax, 0x46cb6b69
pushf
not eax
add eax, 0xdf1fe1b4
xor eax, 0x99808cce
rol eax, 0x43
popf
pushf
not eax
add eax, 0x8ab4df33
xor eax, 0xba42391a
rol eax, 0x17
popf
pushf
not eax
add eax, 0xeb46c646
xor eax, 0xe6e39fac
rol eax, 0x19
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x3118528a
pushf
not eax
add eax, 0xa7a70a2c
xor eax, 0x9bf6d635
rol eax, 0x81
popf
pushf
not eax
add eax, 0xc299c582
xor eax, 0x8179b9cc
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xdd9081a0
xor eax, 0xbafd8c6c
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x89f5f367
xor eax, 0xa33595be
rol eax, 0x95
popf
jmp 0x140b01e63
movsx rax, al
bt rbx, rax
jb 0x140b023f9
push rax
pushf
mov eax, 0x869f0251
pushf
not eax
add eax, 0xaac1ac93
xor eax, 0xf49426f4
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa96d458f
xor eax, 0xd55afc2c
rol eax, 0xea
popf
pushf
not eax
add eax, 0xffffbdf2
xor eax, 0xd9c54f22
rol eax, 0x49
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x35f8f9cb
pushf
not eax
add eax, 0xd17a2b93
xor eax, 0xf9f64f63
rol eax, 0xe
popf
pushf
not eax
add eax, 0xa323245d
xor eax, 0x9044340c
rol eax, 4
popf
pushf
not eax
add eax, 0xf339b0bb
xor eax, 0xbd55b585
rol eax, 0xe9
popf
jmp 0x140b01e63
mov rcx, rdi
call fcn.140b05b83
mov rdx, rax
cmp rax, rdi
jne 0x140b024a8
push rax
pushf
mov eax, 0x201d6a2e
pushf
not eax
add eax, 0xa45fe7ac
xor eax, 0xaeac8b23
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xf8e0d3fe
xor eax, 0x874eeec6
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xd0e86235
xor eax, 0xfa08828f
rol eax, 0x52
popf
pushf
not eax
add eax, 0xfa7375f4
xor eax, 0x9d767534
rol eax, 0xd3
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xc24d53d1
pushf
not eax
add eax, 0x85fe1c33
xor eax, 0xa5d233dd
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xbec09d82
xor eax, 0xcfcf0376
rol eax, 0xf9
popf
jmp 0x140b01e63
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x140b0253d
push rax
pushf
mov eax, 0xfb8907ab
pushf
not eax
add eax, 0x9f8ae577
xor eax, 0xca4afc27
rol eax, 0x93
popf
pushf
not eax
add eax, 0xb73f4436
xor eax, 0x918c2cd1
rol eax, 0xad
popf
pushf
not eax
add eax, 0xb4eadd2c
xor eax, 0xe4580850
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xbb68ab86
xor eax, 0xc2a33741
rol eax, 0x74
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x4bf19e47
pushf
not eax
add eax, 0xd8406d37
xor eax, 0x9ba8f22c
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xd1778eb8
xor eax, 0x9d8f3ef8
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xa29c271c
xor eax, 0xba36a490
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xee811992
xor eax, 0xaf043690
rol eax, 0x88
popf
jmp 0x140b01e63
lea rax, [rdi + 1]
cmp rdx, rax
je 0x140b025f8
push rax
pushf
mov eax, 0x6258aecf
pushf
not eax
add eax, 0xeb09dbb8
xor eax, 0xd1bf49ad
rol eax, 0xe
popf
pushf
not eax
add eax, 0xf4065117
xor eax, 0xef40af93
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xc5d26c89
xor eax, 0x855cf700
rol eax, 0x83
popf
pushf
not eax
add eax, 0xe71fdd59
xor eax, 0xb31b4e8b
rol eax, 0x4c
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x91b2921d
pushf
not eax
add eax, 0x9f41651f
xor eax, 0xf4bb97b9
rol eax, 0x21
popf
pushf
not eax
add eax, 0xabdb6368
xor eax, 0xb970e1f6
rol eax, 0xf5
popf
jmp 0x140b01e63
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140b37837
jmp 0x140b03f9d
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x140b026d9
push rax
pushf
mov eax, 0xd93dd75a
pushf
not eax
add eax, 0xa8040188
xor eax, 0xff085596
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x96d701ac
xor eax, 0xf2db5c9d
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa7116fa7
xor eax, 0x9f4d44c9
rol eax, 0x31
popf
pushf
not eax
add eax, 0x80cbc802
xor eax, 0x855fc28c
rol eax, 0x4b
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x73e469b5
pushf
not eax
add eax, 0xc048c0a5
xor eax, 0xa009842a
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x8dbf7187
xor eax, 0xf0d8dff9
rol eax, 0xce
popf
pushf
not eax
add eax, 0xcc631fd2
xor eax, 0x8dec2dc6
rol eax, 0x27
popf
pushf
not eax
add eax, 0x8aa70eae
xor eax, 0xc182c1a5
rol eax, 0xa2
popf
jmp 0x140b01e63
movsx rax, r8b
bt rbx, rax
mov al, 0xda
pushf
not al
add al, 0x97
xor al, 0xd1
rol al, 0x22
popf
pushf
not al
add al, 0xb0
xor al, 0xfb
rol al, 0xe8
popf
jb 0x140b027b1
push rax
pushf
mov eax, 0x22f6fded
pushf
not eax
add eax, 0xf02df3c6
xor eax, 0xc9662e94
rol eax, 0x82
popf
pushf
not eax
add eax, 0xa4d570a2
xor eax, 0xaca118d8
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd88c0300
xor eax, 0x88a23981
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xbb654485
xor eax, 0xe7daa88e
rol eax, 0x15
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xf0914099
pushf
not eax
add eax, 0xeb2aa0e7
xor eax, 0xea54f05a
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x90c19482
xor eax, 0x853928b9
rol eax, 0xb9
popf
jmp 0x140b01e63
mov al, r14b
push rax
pushf
mov eax, 0xa0c35183
pushf
not eax
add eax, 0xd249dc6f
xor eax, 0xfa6f2e97
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb4d00a6e
xor eax, 0xbffdcca8
rol eax, 0x1c
popf
jmp 0x140b01e63
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.140b261a5
mov rax, qword [rsp + 0x78]
mov ecx, 0x8da8f613
pushf
not ecx
add ecx, 0xb5f8425d
xor ecx, 0x9a9af73c
rol ecx, 0x43
popf
pushf
not ecx
add ecx, 0xb9044aed
xor ecx, 0xdfbf6f3f
rol ecx, 0x70
popf
cmp dword [rax + 0xc], ecx
jne 0x140b028e9
push rax
pushf
mov eax, 0xb1c16084
pushf
not eax
add eax, 0xda08b75e
xor eax, 0xb8354068
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x93701257
xor eax, 0xec706143
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x83ee6cd8
xor eax, 0x9d5eee25
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x9586990f
xor eax, 0x84666531
rol eax, 0x24
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x98b76cd7
pushf
not eax
add eax, 0xe9579bc7
xor eax, 0x8d4f923a
rol eax, 0x44
popf
pushf
not eax
add eax, 0xe1d91dd1
xor eax, 0x9314273f
rol eax, 0x11
popf
pushf
not eax
add eax, 0xc5f11b02
xor eax, 0xd727f76f
rol eax, 0x8d
popf
jmp 0x140b01e63
cmp byte [rbp - 0x78], r14b
je 0x140b0297b
push rax
pushf
mov eax, 0xf19e2e9a
pushf
not eax
add eax, 0xafdc33ce
xor eax, 0x94995ea4
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xad15d3f9
xor eax, 0xb76830fd
rol eax, 0xef
popf
pushf
not eax
add eax, 0xfc23765e
xor eax, 0xf4f753cc
rol eax, 0xbb
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x862aba57
pushf
not eax
add eax, 0xe0b19bce
xor eax, 0xc2f809b1
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x92ffc7ae
xor eax, 0xed9d6b94
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe9beea03
xor eax, 0xbf990fad
rol eax, 0x5d
popf
jmp 0x140b01e63
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x452aa7ec
pushf
not eax
add eax, 0xd5795ff8
xor eax, 0xf3cec58f
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x84d1eafb
xor eax, 0xe2fc69f6
rol eax, 0x33
popf
pushf
not eax
add eax, 0x998d1865
xor eax, 0x87a5f930
rol eax, 0x99
popf
pushf
not eax
add eax, 0xd67a57c9
xor eax, 0xd67e0e4f
rol eax, 0xc
popf
jmp 0x140b01e63
mov r9d, ecx
jmp 0x140b02d9d
call fcn.140b32e32
test eax, eax
jne 0x140b02ac3
push rax
pushf
mov eax, 0xecd4191e
pushf
not eax
add eax, 0x92d1a21c
xor eax, 0x9bd26f0e
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xe5cbf90f
xor eax, 0xe8cd90a9
rol eax, 0x9b
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x2d2ff5d8
pushf
not eax
add eax, 0xe1e9b480
xor eax, 0x81c1f888
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd39f215c
xor eax, 0xc4af8555
rol eax, 0x25
popf
pushf
not eax
add eax, 0x93cd1916
xor eax, 0xa2e87d54
rol eax, 7
popf
pushf
not eax
add eax, 0xd472ff0b
xor eax, 0xafd8d79a
rol eax, 0x56
popf
jmp 0x140b01e63
cmp byte [rbp - 0x78], r14b
je 0x140b02b7b
push rax
pushf
mov eax, 0x7bf7161a
pushf
not eax
add eax, 0xe32d409c
xor eax, 0xc30f173e
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xe9cd23a7
xor eax, 0xb07127da
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xf14d796a
xor eax, 0x91bfa2ec
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x95e79a53
xor eax, 0xc3e10451
rol eax, 0xae
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x6555deb3
pushf
not eax
add eax, 0xaf11e733
xor eax, 0x8b637f2a
rol eax, 0x69
popf
pushf
not eax
add eax, 0xb76d4b0d
xor eax, 0xf87e9f0f
rol eax, 0xbd
popf
jmp 0x140b01e63
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xa3dc5bc
pushf
not eax
add eax, 0x9d4bbc17
xor eax, 0xd73b9fc6
rol eax, 0xd
popf
pushf
not eax
add eax, 0x9c2cae5f
xor eax, 0xcef924c8
rol eax, 0x9c
popf
jmp 0x140b01e63
mov r9d, 0x327c49a6
pushf
not r9d
add r9d, 0xf3d918f6
xor r9d, 0xfb07e16e
rol r9d, 3
popf
pushf
not r9d
add r9d, 0xa27671c5
xor r9d, 0xcf9d00ba
rol r9d, 0
popf
jmp 0x140b02d9d
cmp byte [rbp - 0x78], r14b
je 0x140b02c96
push rax
pushf
mov eax, 0x7b63e7cf
pushf
not eax
add eax, 0x937edaf4
xor eax, 0xa8ee43db
rol eax, 0x26
popf
pushf
not eax
add eax, 0xecf3e19a
xor eax, 0xe3c7a1ad
rol eax, 0x66
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xc89b84e7
pushf
not eax
add eax, 0xed0a8a04
xor eax, 0xd7eeb311
rol eax, 0x99
popf
pushf
not eax
add eax, 0xc4ab532c
xor eax, 0xf15fb71d
rol eax, 0x63
popf
pushf
not eax
add eax, 0xa550e8bc
xor eax, 0xa289dc7a
rol eax, 0x56
popf
pushf
not eax
add eax, 0xc73bfbde
xor eax, 0xd25d379e
rol eax, 0x99
popf
jmp 0x140b01e63
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x2be00000
pushf
not eax
add eax, 0xd1f536df
xor eax, 0xe1817002
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xfee02ac9
xor eax, 0xfc545354
rol eax, 0x50
popf
pushf
not eax
add eax, 0xc64ce50d
xor eax, 0xaad4440f
rol eax, 0xcd
popf
jmp 0x140b01e63
mov r9d, r14d
push rax
pushf
mov eax, 0x1ef44778
pushf
not eax
add eax, 0xfe2aec9b
xor eax, 0xbd285dca
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xde659ede
xor eax, 0xcb09fd9b
rol eax, 0xda
popf
pushf
not eax
add eax, 0xbc085a3e
xor eax, 0xbf313ec7
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xe5f8bf38
xor eax, 0xc5dfbe1f
rol eax, 0x75
popf
jmp 0x140b01e63
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.140aec52c
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x140b02dce
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140b02e36
push rax
pushf
mov eax, 0x612d97d1
pushf
not eax
add eax, 0xdf9965d4
xor eax, 0xe7eaff22
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x9a992fc2
xor eax, 0x8a1ecf4b
rol eax, 0x98
popf
pushf
not eax
add eax, 0x95b08ed7
xor eax, 0xd2f59681
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xf73e2a6b
xor eax, 0xb7f775d2
rol eax, 0xe2
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xadf30d02
pushf
not eax
add eax, 0xc72d85cd
xor eax, 0xdc85d15a
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf8f0c801
xor eax, 0x9174055e
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x9d992ce8
xor eax, 0xaf57b559
rol eax, 0xec
popf
pushf
not eax
add eax, 0x888efc63
xor eax, 0xf923da49
rol eax, 0x90
popf
jmp 0x140b01e63
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140b37837
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x140b02edb
push rax
pushf
mov eax, 0x4a75f50b
pushf
not eax
add eax, 0xfa05a147
xor eax, 0xf9bac1b7
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xd6baa5dd
xor eax, 0xc13a4a79
rol eax, 0x10
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xf3212b
pushf
not eax
add eax, 0xe1b48bd0
xor eax, 0xd9f773e6
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9a6cbe0c
xor eax, 0x80823bad
rol eax, 0xec
popf
pushf
not eax
add eax, 0xaa699757
xor eax, 0xb1680eea
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xa327453b
xor eax, 0xa6081426
rol eax, 0xfe
popf
jmp 0x140b01e63
mov rcx, qword [rsp + 0x50]
call fcn.140b5046f
push rax
pushf
mov eax, 0x2172954f
pushf
not eax
add eax, 0xbf276bd4
xor eax, 0xb3e64a42
rol eax, 0x83
popf
pushf
not eax
add eax, 0xb109eca8
xor eax, 0x9818e391
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xe3d5bd78
xor eax, 0x9a3c7f61
rol eax, 0x51
popf
pushf
not eax
add eax, 0xfe4ca15f
xor eax, 0x850d8152
rol eax, 0xf6
popf
jmp 0x140b01e63
mov eax, ebx
jmp 0x140b03f9d
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0x686df637
pushf
not eax
add eax, 0xddc9bf00
xor eax, 0xa7987a7c
rol eax, 0x60
popf
pushf
not eax
add eax, 0xc0e3d307
xor eax, 0xed602052
rol eax, 0x8b
popf
jmp 0x140b01e63
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.140b261a5
mov rax, qword [rbp - 0x68]
mov ecx, 0x2e49433e
pushf
not ecx
add ecx, 0xaca8378e
xor ecx, 0xf6e758c5
rol ecx, 0x6a
popf
pushf
not ecx
add ecx, 0xa145d528
xor ecx, 0xb6f1677d
rol ecx, 0xeb
popf
pushf
not ecx
add ecx, 0x97f325c1
xor ecx, 0xbef5255d
rol ecx, 0x52
popf
cmp dword [rax + 0xc], ecx
jne 0x140b030ed
push rax
pushf
mov eax, 0x39b2860a
pushf
not eax
add eax, 0xc9408520
xor eax, 0xe0283782
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xee76e392
xor eax, 0xb796110e
rol eax, 0x74
popf
pushf
not eax
add eax, 0xbb3d4b87
xor eax, 0xec9e2393
rol eax, 4
popf
pushf
not eax
add eax, 0xe266bcf0
xor eax, 0xc6554007
rol eax, 0xd4
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xf98a5921
pushf
not eax
add eax, 0xc6529bbd
xor eax, 0xb39b59bd
rol eax, 0xad
popf
pushf
not eax
add eax, 0xc97b3cc5
xor eax, 0xcf5b03ee
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xead31ee6
xor eax, 0x98df0d02
rol eax, 0xea
popf
pushf
not eax
add eax, 0xb30310d2
xor eax, 0xc76618bb
rol eax, 0xa6
popf
jmp 0x140b01e63
cmp byte [rbp - 0x58], r14b
je 0x140b03192
push rax
pushf
mov eax, 0x8e936ae5
pushf
not eax
add eax, 0xd5642d12
xor eax, 0xfebe1eaf
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x9e8338b4
xor eax, 0xddf53ca0
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xfb78d5b5
xor eax, 0x96ca08d9
rol eax, 0xf3
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x10f1fe21
pushf
not eax
add eax, 0xde69ead1
xor eax, 0x96383295
rol eax, 0x57
popf
pushf
not eax
add eax, 0xc9fe6bef
xor eax, 0xad858d00
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xafd0b547
xor eax, 0xb7fc0acf
rol eax, 0xf
popf
jmp 0x140b01e63
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xf7cc72d3
pushf
not eax
add eax, 0x98e131f4
xor eax, 0xe3e54ce4
rol eax, 0xe
popf
pushf
not eax
add eax, 0x827e16d5
xor eax, 0x9024c858
rol eax, 0x32
popf
pushf
not eax
add eax, 0xec0b7ea7
xor eax, 0xb3093aff
rol eax, 0x18
popf
jmp 0x140b01e63
mov r9d, ecx
jmp 0x140b035ca
call fcn.140b32e32
test eax, eax
jne 0x140b032d9
push rax
pushf
mov eax, 0x6acc0b03
pushf
not eax
add eax, 0xe844383b
xor eax, 0xa454c7be
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe7b66eba
xor eax, 0xe5e408cb
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xc7e712ea
xor eax, 0xb0ae7fac
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xfe4bc3fc
xor eax, 0xead1766d
rol eax, 0xbf
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xc44ce0a7
pushf
not eax
add eax, 0xdd4b31f2
xor eax, 0x964d8677
rol eax, 0xf
popf
pushf
not eax
add eax, 0xcc7f04dd
xor eax, 0xb306c85b
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xf24bd02f
xor eax, 0xe7cab173
rol eax, 0xb3
popf
jmp 0x140b01e63
cmp byte [rbp - 0x58], r14b
je 0x140b0336b
push rax
pushf
mov eax, 0x9c3f0d24
pushf
not eax
add eax, 0x99404efb
xor eax, 0xf5da94d7
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xdd60cda6
xor eax, 0xeb83d1e2
rol eax, 0x72
popf
pushf
not eax
add eax, 0xf457fcab
xor eax, 0xce3a3e02
rol eax, 0x5b
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xaea4b39c
pushf
not eax
add eax, 0xe43587a4
xor eax, 0xe9d57adc
rol eax, 8
popf
pushf
not eax
add eax, 0xe3aa18fa
xor eax, 0x8663a63a
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x914884b7
xor eax, 0xded6dbad
rol eax, 0x79
popf
jmp 0x140b01e63
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x3010564d
pushf
not eax
add eax, 0x894cdd79
xor eax, 0xa79d5817
rol eax, 0x95
popf
pushf
not eax
add eax, 0xe86bb7d0
xor eax, 0xcd3cfa34
rol eax, 0x45
popf
pushf
not eax
add eax, 0x986c7700
xor eax, 0xcb9196da
rol eax, 0x13
popf
pushf
not eax
add eax, 0xb2ff849f
xor eax, 0x911ef3c8
rol eax, 0x81
popf
jmp 0x140b01e63
mov r9d, 0xcaf8c0e4
pushf
not r9d
add r9d, 0xe3e189d7
xor r9d, 0xc17381c8
rol r9d, 0x34
popf
pushf
not r9d
add r9d, 0xbddbb14a
xor r9d, 0xf875d68f
rol r9d, 0xd5
popf
pushf
not r9d
add r9d, 0xad56000e
xor r9d, 0x89fbb485
rol r9d, 0x5c
popf
jmp 0x140b035ca
cmp byte [rbp - 0x58], r14b
je 0x140b034fd
push rax
pushf
mov eax, 0x3e77c2b8
pushf
not eax
add eax, 0xe9235007
xor eax, 0xb9922e06
rol eax, 0x39
popf
pushf
not eax
add eax, 0xfb0c549e
xor eax, 0xe6e5e157
rol eax, 0x66
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x2f1edbfd
pushf
not eax
add eax, 0x8ddedffa
xor eax, 0x9f7294d9
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x893440c1
xor eax, 0xe67b12b3
rol eax, 0x49
popf
jmp 0x140b01e63
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xbc0bf824
pushf
not eax
add eax, 0xc005d61c
xor eax, 0xeaa08f5e
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb082ff40
xor eax, 0xf069de2e
rol eax, 0xee
popf
pushf
not eax
add eax, 0xb2fca0bc
xor eax, 0x8c865af4
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf882826a
xor eax, 0xbc4ec57a
rol eax, 0x4a
popf
jmp 0x140b01e63
mov r9d, r14d
push rax
pushf
mov eax, 0x2162680a
pushf
not eax
add eax, 0xa4dcb906
xor eax, 0xfbb37512
rol eax, 0x50
popf
pushf
not eax
add eax, 0xc10ccef2
xor eax, 0x92635628
rol eax, 0x6a
popf
jmp 0x140b01e63
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.140ae8d35
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x140b03636
push rax
pushf
mov eax, 0x43bbd6a4
pushf
not eax
add eax, 0xfc2afcdc
xor eax, 0xb01d386d
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x98b858a8
xor eax, 0xbe3cfd05
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xdb1fb39d
xor eax, 0x974d3472
rol eax, 0x30
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x62343220
pushf
not eax
add eax, 0xbad654a4
xor eax, 0xf50bc5c7
rol eax, 0x99
popf
pushf
not eax
add eax, 0xcb2079b8
xor eax, 0x9e24b20e
rol eax, 0x84
popf
pushf
not eax
add eax, 0x8078ceca
xor eax, 0x825f552c
rol eax, 0x1b
popf
jmp 0x140b01e63
mov al, byte [rcx + 1]
test al, al
jne 0x140b036dc
push rax
pushf
mov eax, 0xb4c7c269
pushf
not eax
add eax, 0xdcad47d9
xor eax, 0xc4b7385e
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xad308ffc
xor eax, 0xe0d4bc7a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9bc8db29
xor eax, 0xd7e7d22b
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xe82bdf19
xor eax, 0xd7ec3b6c
rol eax, 0x7e
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x42ea7ed5
pushf
not eax
add eax, 0xce9a7991
xor eax, 0xe40927d1
rol eax, 0x55
popf
pushf
not eax
add eax, 0xc90cd060
xor eax, 0xfcf70a23
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xa6fdc10d
xor eax, 0xbe29c728
rol eax, 0x5a
popf
jmp 0x140b01e63
cmp byte [rbp - 0x28], dl
je 0x140b0376d
push rax
pushf
mov eax, 0xaeb53fac
pushf
not eax
add eax, 0xb493cc2f
xor eax, 0xb284bcc4
rol eax, 5
popf
pushf
not eax
add eax, 0xf85c913a
xor eax, 0xe28aebca
rol eax, 0x40
popf
pushf
not eax
add eax, 0xcc13b915
xor eax, 0xdc77557f
rol eax, 0x61
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x17bf42bf
pushf
not eax
add eax, 0xc383a79f
xor eax, 0xf0bf02f2
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xc90a48f5
xor eax, 0xb307fa81
rol eax, 0x22
popf
pushf
not eax
add eax, 0xefa3ae22
xor eax, 0x97f8ad25
rol eax, 5
popf
pushf
not eax
add eax, 0xdabd2682
xor eax, 0xd9fda009
rol eax, 0x63
popf
jmp 0x140b01e63
mov rcx, r14
call fcn.140b5046f
jmp 0x140b03b3e
cmp al, 0x2e
jne 0x140b03863
push rax
pushf
mov eax, 0xeb1012b7
pushf
not eax
add eax, 0x9ced8fe8
xor eax, 0xdc81923a
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xa182d421
xor eax, 0xccf85918
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x9c264ad9
xor eax, 0xb1659011
rol eax, 0x60
popf
pushf
not eax
add eax, 0xb6f7a0f3
xor eax, 0xdfc4b186
rol eax, 0x59
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x5ff6918e
pushf
not eax
add eax, 0xea71720d
xor eax, 0xe1ecf7d0
rol eax, 0xba
popf
pushf
not eax
add eax, 0xadbdca1f
xor eax, 0x960ab952
rol eax, 0x89
popf
pushf
not eax
add eax, 0xbd081e00
xor eax, 0xad29a5b9
rol eax, 0x13
popf
pushf
not eax
add eax, 0x83b3dfb5
xor eax, 0x9fa2fcec
rol eax, 0x3f
popf
jmp 0x140b01e63
cmp byte [rcx + 2], dl
je 0x140b038f4
push rax
pushf
mov eax, 0xc64603e8
pushf
not eax
add eax, 0xd8cb7eec
xor eax, 0xc308091b
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xdcd465e0
xor eax, 0x9cda3431
rol eax, 0xb
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xa0c81a39
pushf
not eax
add eax, 0xa5c0f051
xor eax, 0xcd7e3ee4
rol eax, 4
popf
pushf
not eax
add eax, 0x96ef246f
xor eax, 0x8beaf693
rol eax, 0x97
popf
pushf
not eax
add eax, 0xaf6f927c
xor eax, 0xf7c30061
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9190dfd8
xor eax, 0xb21c320a
rol eax, 0x7d
popf
jmp 0x140b01e63
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.140b37837
mov r13d, eax
test eax, eax
jne 0x140b039bb
push rax
pushf
mov eax, 0x88b7f7
pushf
not eax
add eax, 0xbe417692
xor eax, 0x9e2c35fd
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xe54ef6b7
xor eax, 0xe567a420
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xec6e1453
xor eax, 0xce1e5ebe
rol eax, 0x20
popf
pushf
not eax
add eax, 0xfc1be706
xor eax, 0xae7397b8
rol eax, 0x57
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xd80eca56
pushf
not eax
add eax, 0xc2ccea0c
xor eax, 0x849d701a
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9b0e7a63
xor eax, 0xf9b6c351
rol eax, 0xa9
popf
jmp 0x140b01e63
cmp byte [rbp - 0x28], al
je 0x140b03a4c
push rax
pushf
mov eax, 0x6d55105
pushf
not eax
add eax, 0x8828a0c8
xor eax, 0xc0980b77
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xce683ae8
xor eax, 0x849a3b51
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x8c78919b
xor eax, 0xb1c0bba5
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xdfad656c
xor eax, 0xaaa22ab4
rol eax, 0x6f
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x8ec818e4
pushf
not eax
add eax, 0x94c29181
xor eax, 0x8fabe7bf
rol eax, 0x76
popf
pushf
not eax
add eax, 0x92d65a44
xor eax, 0xc9f3c4ac
rol eax, 0xdd
popf
jmp 0x140b01e63
mov rcx, r14
call fcn.140b5046f
push rax
pushf
mov eax, 0x280ff073
pushf
not eax
add eax, 0x956c814b
xor eax, 0xb633066e
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xe531d041
xor eax, 0xcf2e7a47
rol eax, 0xea
popf
pushf
not eax
add eax, 0x8213b89a
xor eax, 0xfcc20612
rol eax, 0xef
popf
pushf
not eax
add eax, 0xe1ac4e5a
xor eax, 0xafa91d50
rol eax, 0x7a
popf
jmp 0x140b01e63
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x6231bd74
pushf
not eax
add eax, 0xa6bdb75d
xor eax, 0xf4600392
rol eax, 0x97
popf
pushf
not eax
add eax, 0x89ba7591
xor eax, 0x9da81207
rol eax, 0x44
popf
pushf
not eax
add eax, 0x95635ad0
xor eax, 0x811a320d
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x9744feb2
xor eax, 0xb4079792
rol eax, 0x69
popf
jmp 0x140b01e63
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x140b03b46
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x140b03024
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x140b03b9f
push rax
pushf
mov eax, 0x97f7c179
pushf
not eax
add eax, 0xf18facb9
xor eax, 0x8d14819c
rol eax, 0x83
popf
pushf
not eax
add eax, 0x99974d13
xor eax, 0xf57bfbb4
rol eax, 0xba
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x62d0036
pushf
not eax
add eax, 0x9b952da0
xor eax, 0xfc66b9d9
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xf1b9c61c
xor eax, 0x99861ed1
rol eax, 0xb4
popf
jmp 0x140b01e63
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x18e9ec042]
pushf
sub r9, 0x4e498a9a
popf
lea r8d, [r14 + 8]
call fcn.140b3f097
push rax
pushf
mov eax, 0xeba71dd8
pushf
not eax
add eax, 0xeff2441f
xor eax, 0xccacc9bd
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xa6357671
xor eax, 0xef4b9662
rol eax, 0x78
popf
pushf
not eax
add eax, 0xf3c28dca
xor eax, 0xd5e779cc
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x94db47e0
xor eax, 0xf4cfac88
rol eax, 0xff
popf
jmp 0x140b01e63
mov rcx, rbx
jmp 0x140b03c51
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x140b03cb7
push rax
pushf
mov eax, 0xb2333a4c
pushf
not eax
add eax, 0xdd6195b9
xor eax, 0x9bf61a9d
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xbe318170
xor eax, 0x8e84576c
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xef101f45
xor eax, 0xb7e56047
rol eax, 0xa
popf
pushf
not eax
add eax, 0x97ba4acf
xor eax, 0xa33d8679
rol eax, 0xfd
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xd9a61207
pushf
not eax
add eax, 0xe1fcaed0
xor eax, 0xcb0c732e
rol eax, 0x99
popf
pushf
not eax
add eax, 0x9f557c5e
xor eax, 0xd06ec67e
rol eax, 0x4d
popf
jmp 0x140b01e63
mov rcx, qword [rsp + 0x50]
call fcn.140b5046f
push rax
pushf
mov eax, 0x32583464
pushf
not eax
add eax, 0xf93419a7
xor eax, 0xa9183b5a
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8af66e74
xor eax, 0xb72d9af1
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xa1ec91d2
xor eax, 0xb7c2f156
rol eax, 0xb4
popf
jmp 0x140b01e63
xor eax, eax
jmp 0x140b03f9d
cmp byte [rbp - 0x28], 0
je 0x140b03de6
push rax
pushf
mov eax, 0x4b0e3d66
pushf
not eax
add eax, 0x83e29aff
xor eax, 0xd5a06c07
rol eax, 0x88
popf
pushf
not eax
add eax, 0xb4d083b3
xor eax, 0xc843c4d0
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x88a17db3
xor eax, 0xa7e27daf
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x95bed1c2
xor eax, 0xb313a0f5
rol eax, 0x23
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0xc8a260e9
pushf
not eax
add eax, 0x95cbe100
xor eax, 0xae9ad287
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb4f343a9
xor eax, 0xe774fe1a
rol eax, 0xae
popf
jmp 0x140b01e63
mov rcx, r14
call fcn.140b5046f
push rax
pushf
mov eax, 0x797cd69
pushf
not eax
add eax, 0x958feb1a
xor eax, 0x984622ac
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xf28d9ee6
xor eax, 0x92856788
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x86c24186
xor eax, 0xe0644f05
rol eax, 0x9e
popf
jmp 0x140b01e63
mov rcx, rbx
jmp 0x140b03e6b
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x140b03eab
push rax
pushf
mov eax, 0x2b3c56d0
pushf
not eax
add eax, 0xa6566a4a
xor eax, 0x8e9d04f6
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x94587b38
xor eax, 0x9994ef77
rol eax, 0x83
popf
jmp 0x140b01e63
push rax
pushf
mov eax, 0x84ff41e2
pushf
not eax
add eax, 0xb653306c
xor eax, 0x9e4c2d9d
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x9b44a3d7
xor eax, 0xf8c74585
rol eax, 0x20
popf
pushf
not eax
add eax, 0xb8a61720
xor eax, 0x8b019cd4
rol eax, 9
popf
pushf
not eax
add eax, 0xd7cca50d
xor eax, 0x88e99114
rol eax, 0xea
popf
jmp 0x140b01e63
mov rcx, qword [rsp + 0x50]
call fcn.140b5046f
push rax
pushf
mov eax, 0xe5a214dc
pushf
not eax
add eax, 0xcefddb6a
xor eax, 0x8a3b8641
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xfbaa20af
xor eax, 0x92a81a4b
rol eax, 0x27
popf
jmp 0x140b01e63
mov eax, r13d
push rax
pushf
mov eax, 0x39838828
pushf
not eax
add eax, 0xd2b1ac43
xor eax, 0xafe54bee
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xa95cf55f
xor eax, 0x8efae334
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa1302300
xor eax, 0xbcfec8ce
rol eax, 0x87
popf
pushf
not eax
add eax, 0x840718ee
xor eax, 0xdce62936
rol eax, 0x98
popf
jmp 0x140b01e63
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.140b1dac3
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret