Function at 0x140112920
Capabilities:
Enumerate files on windows

Disassembly:
push rax
pushf
mov eax, 0xf4d8c19d
pushf
not eax
add eax, 0xd4374e07
xor eax, 0x9a215183
rol eax, 0x59
popf
pushf
not eax
add eax, 0xfe7c2aff
xor eax, 0x9ddf9678
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc9359107
xor eax, 0x9b3e30f4
rol eax, 0xea
popf
pushf
not eax
add eax, 0xcf3d9d9a
xor eax, 0xbd41dfe0
rol eax, 0x23
popf
cmp eax, 0x29
jne 0x140112983
popf
pop rax
jmp 0x140114264
cmp eax, 0
jne 0x140112992
popf
pop rax
jmp 0x140112ce9
cmp eax, 3
jne 0x1401129a1
popf
pop rax
jmp 0x140112f69
cmp eax, 1
jne 0x1401129b0
popf
pop rax
jmp 0x140112e19
cmp eax, 0xd
jne 0x1401129bf
popf
pop rax
jmp 0x1401134f8
cmp eax, 0x1a
jne 0x1401129ce
popf
pop rax
jmp 0x140113abd
cmp eax, 0xe
jne 0x1401129dd
popf
pop rax
jmp 0x140113559
cmp eax, 0x31
jne 0x1401129ec
popf
pop rax
jmp 0x1401145e4
cmp eax, 0x19
jne 0x1401129fb
popf
pop rax
jmp 0x140113a7d
cmp eax, 8
jne 0x140112a0a
popf
pop rax
jmp 0x140113223
cmp eax, 0x2a
jne 0x140112a19
popf
pop rax
jmp 0x1401142e1
cmp eax, 0x17
jne 0x140112a28
popf
pop rax
jmp 0x1401139f3
cmp eax, 0x1c
jne 0x140112a37
popf
pop rax
jmp 0x140113c49
cmp eax, 0x2e
jne 0x140112a46
popf
pop rax
jmp 0x1401144df
cmp eax, 0x18
jne 0x140112a55
popf
pop rax
jmp 0x140113a43
cmp eax, 0x2b
jne 0x140112a64
popf
pop rax
jmp 0x14011434c
cmp eax, 0x1b
jne 0x140112a73
popf
pop rax
jmp 0x140113ba4
cmp eax, 0x2d
jne 0x140112a82
popf
pop rax
jmp 0x140114491
cmp eax, 0x23
jne 0x140112a91
popf
pop rax
jmp 0x140113fa1
cmp eax, 0x25
jne 0x140112aa0
popf
pop rax
jmp 0x14011403b
cmp eax, 0x32
jne 0x140112aaf
popf
pop rax
jmp 0x140114639
cmp eax, 0x13
jne 0x140112abe
popf
pop rax
jmp 0x1401137e7
cmp eax, 0x33
jne 0x140112acd
popf
pop rax
jmp 0x1401146c3
cmp eax, 0x24
jne 0x140112adc
popf
pop rax
jmp 0x140114005
cmp eax, 0x1e
jne 0x140112aeb
popf
pop rax
jmp 0x140113cfb
cmp eax, 0xc
jne 0x140112afa
popf
pop rax
jmp 0x1401134b9
cmp eax, 0x26
jne 0x140112b09
popf
pop rax
jmp 0x1401140c7
cmp eax, 0x27
jne 0x140112b18
popf
pop rax
jmp 0x14011415a
cmp eax, 0x30
jne 0x140112b27
popf
pop rax
jmp 0x140114543
cmp eax, 0x10
jne 0x140112b36
popf
pop rax
jmp 0x14011366d
cmp eax, 0x37
jne 0x140112b45
popf
pop rax
jmp 0x1401147f3
cmp eax, 9
jne 0x140112b54
popf
pop rax
jmp 0x1401132ef
cmp eax, 0x39
jne 0x140112b63
popf
pop rax
jmp 0x1401148f3
cmp eax, 0x16
jne 0x140112b72
popf
pop rax
jmp 0x140113961
cmp eax, 0x28
jne 0x140112b81
popf
pop rax
jmp 0x140114211
cmp eax, 0xa
jne 0x140112b90
popf
pop rax
jmp 0x140113325
cmp eax, 0x36
jne 0x140112b9f
popf
pop rax
jmp 0x1401147b8
cmp eax, 0x14
jne 0x140112bae
popf
pop rax
jmp 0x140113826
cmp eax, 7
jne 0x140112bbd
popf
pop rax
jmp 0x14011318a
cmp eax, 0x34
jne 0x140112bcc
popf
pop rax
jmp 0x140114700
cmp eax, 2
jne 0x140112bdb
popf
pop rax
jmp 0x140112ed3
cmp eax, 0x20
jne 0x140112bea
popf
pop rax
jmp 0x140113dfc
cmp eax, 0x1d
jne 0x140112bf9
popf
pop rax
jmp 0x140113cad
cmp eax, 0x11
jne 0x140112c08
popf
pop rax
jmp 0x1401136d2
cmp eax, 0x35
jne 0x140112c17
popf
pop rax
jmp 0x14011474d
cmp eax, 0x3a
jne 0x140112c26
popf
pop rax
jmp 0x14011493c
cmp eax, 0x12
jne 0x140112c35
popf
pop rax
jmp 0x140113755
cmp eax, 0x21
jne 0x140112c44
popf
pop rax
jmp 0x140113e60
cmp eax, 0x38
jne 0x140112c53
popf
pop rax
jmp 0x140114890
cmp eax, 0xb
jne 0x140112c62
popf
pop rax
jmp 0x140113427
cmp eax, 0xf
jne 0x140112c71
popf
pop rax
jmp 0x1401135db
cmp eax, 0x15
jne 0x140112c80
popf
pop rax
jmp 0x14011386f
cmp eax, 5
jne 0x140112c8f
popf
pop rax
jmp 0x140113074
cmp eax, 6
jne 0x140112c9e
popf
pop rax
jmp 0x14011312f
cmp eax, 0x22
jne 0x140112cad
popf
pop rax
jmp 0x140113f0f
cmp eax, 0x2c
jne 0x140112cbc
popf
pop rax
jmp 0x140114400
cmp eax, 0x1f
jne 0x140112ccb
popf
pop rax
jmp 0x140113d6a
cmp eax, 4
jne 0x140112cda
popf
pop rax
jmp 0x140112ff2
cmp eax, 0x2f
jne 0x140112ce9
popf
pop rax
jmp 0x14011452a
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x140058058]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0x588b9e0bc65970a1
pushf
not rbx
add rbx, 0x70e07146
xor rbx, 0x71c0816d
rol rbx, 0x72
popf
pushf
not rbx
add rbx, 0x4b57417b
xor rbx, 0x493ad4d7
rol rbx, 0x3e
popf
pushf
not rbx
add rbx, 0x55399d9f
xor rbx, 0x4c8b5d7c
rol rbx, 0xa3
popf
pushf
not rbx
add rbx, 0x6875c4f9
xor rbx, 0x5e280951
rol rbx, 0x71
popf
cmp rdx, rcx
je 0x140112de6
push rax
pushf
mov eax, 0x4c3d636a
pushf
not eax
add eax, 0xa8241da8
xor eax, 0xae9c3d08
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xe1aaf343
xor eax, 0xa83e7bc6
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xea105cae
xor eax, 0xb0837029
rol eax, 0x14
popf
pushf
not eax
add eax, 0xcac9831a
xor eax, 0xae2f664b
rol eax, 0xb6
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x3191cb6e
pushf
not eax
add eax, 0x8b22db7f
xor eax, 0xcb245c79
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf5735a1e
xor eax, 0xaa9e287f
rol eax, 0xbf
popf
jmp 0x140112974
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x140112e7a
push rax
pushf
mov eax, 0xcad26253
pushf
not eax
add eax, 0x96d04b5f
xor eax, 0xe07aca32
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xe443e18d
xor eax, 0xdc144602
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xd62f9e4f
xor eax, 0xae37b86b
rol eax, 0x35
popf
pushf
not eax
add eax, 0xd4f1a122
xor eax, 0xe560ea8f
rol eax, 0x9a
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x8b44cb48
pushf
not eax
add eax, 0x8646acae
xor eax, 0xede2f748
rol eax, 0x86
popf
pushf
not eax
add eax, 0xedbd4539
xor eax, 0xb0d6548a
rol eax, 0x84
popf
pushf
not eax
add eax, 0xbabdd055
xor eax, 0x85cc2c9a
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x93e6c9cf
xor eax, 0x9693f5ab
rol eax, 0x60
popf
jmp 0x140112974
movsx rax, al
bt rbx, rax
jb 0x140112f10
push rax
pushf
mov eax, 0x158a9475
pushf
not eax
add eax, 0xfb8f7d94
xor eax, 0x9ff8244e
rol eax, 0xad
popf
pushf
not eax
add eax, 0x91c1351b
xor eax, 0xf81725d8
rol eax, 0x80
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xbcfb3f9c
pushf
not eax
add eax, 0x9c60277f
xor eax, 0x98c642b3
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xe508d851
xor eax, 0xe89ececd
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf8918818
xor eax, 0xbddf9a29
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xf27e3852
xor eax, 0xeaa7412d
rol eax, 0x6e
popf
jmp 0x140112974
mov rcx, rdi
call fcn.1401186f4
mov rdx, rax
cmp rax, rdi
jne 0x140112fac
push rax
pushf
mov eax, 0x6f985df6
pushf
not eax
add eax, 0xa7cc19c7
xor eax, 0xb2e14401
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xd59624ef
xor eax, 0xec90bb6f
rol eax, 0xac
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xab01a09b
pushf
not eax
add eax, 0x886ebe9a
xor eax, 0xca071422
rol eax, 0x35
popf
pushf
not eax
add eax, 0xa3ea8c2f
xor eax, 0x87d392c1
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xbfc0590c
xor eax, 0xd20c4cdf
rol eax, 0x27
popf
jmp 0x140112974
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x140113041
push rax
pushf
mov eax, 0x4d6ea5ce
pushf
not eax
add eax, 0xddae2a7a
xor eax, 0x8fb2a0a2
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xc435063b
xor eax, 0xad978d87
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x961f7fbf
xor eax, 0xf818d0ae
rol eax, 0x6c
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x4611bf5c
pushf
not eax
add eax, 0xbd58bb3a
xor eax, 0x930fc3f8
rol eax, 0xa
popf
pushf
not eax
add eax, 0x9e4cf1ec
xor eax, 0x996c5a5a
rol eax, 0xa3
popf
jmp 0x140112974
lea rax, [rdi + 1]
cmp rdx, rax
je 0x1401130d6
push rax
pushf
mov eax, 0x5fde5528
pushf
not eax
add eax, 0xd4c558ff
xor eax, 0xed319854
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc4165091
xor eax, 0x9d98aff4
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xd2d15278
xor eax, 0x90919d77
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xdb565397
xor eax, 0xa46a903f
rol eax, 0xe9
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x7deee09e
pushf
not eax
add eax, 0x8e7e50ec
xor eax, 0xbea84f48
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xe1874636
xor eax, 0xcceeb14c
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xea3e4ad2
xor eax, 0xa34d622f
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x86c59508
xor eax, 0x9e80f4c2
rol eax, 0x82
popf
jmp 0x140112974
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1401a30fc
jmp 0x14011493c
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x1401131dd
push rax
pushf
mov eax, 0x6d3560ec
pushf
not eax
add eax, 0xf00c4336
xor eax, 0xaf07bddc
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xb1ee2028
xor eax, 0xb5ef1bf0
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xb795474c
xor eax, 0xaf56f3df
rol eax, 0xe
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xcf0d92d0
pushf
not eax
add eax, 0xfa580104
xor eax, 0x8909b0be
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe1a11367
xor eax, 0xf91f63f0
rol eax, 0xa
popf
pushf
not eax
add eax, 0xa9e37a9f
xor eax, 0xc93f0ac3
rol eax, 0x87
popf
jmp 0x140112974
movsx rax, r8b
bt rbx, rax
mov al, 0xcd
pushf
not al
add al, 9
xor al, 0xe0
rol al, 0xad
popf
pushf
not al
add al, 0x55
xor al, 0x72
rol al, 0xc1
popf
pushf
not al
add al, 0x5d
xor al, 0x56
rol al, 0x62
popf
pushf
not al
add al, 0x3c
xor al, 0xae
rol al, 0x9a
popf
jb 0x1401132bc
push rax
pushf
mov eax, 0xef7e47bc
pushf
not eax
add eax, 0xc82fbbbb
xor eax, 0xa7f32e9b
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb283c081
xor eax, 0x9151eb9e
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe52ca2bd
xor eax, 0xda1579c3
rol eax, 0xef
popf
pushf
not eax
add eax, 0x8fe41752
xor eax, 0xbf900c80
rol eax, 0x96
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x23d6ddc
pushf
not eax
add eax, 0x9cf17b89
xor eax, 0xf883e8e3
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xb3cda2d8
xor eax, 0xedaa2483
rol eax, 0x25
popf
jmp 0x140112974
mov al, r14b
push rax
pushf
mov eax, 0xbf840d41
pushf
not eax
add eax, 0xee1433a5
xor eax, 0xac4bd1a1
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xb9bc8687
xor eax, 0xddc4ec04
rol eax, 0x76
popf
jmp 0x140112974
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.14016a33a
mov rax, qword [rsp + 0x78]
mov ecx, 0x8d0afb15
pushf
not ecx
add ecx, 0x8de30fe8
xor ecx, 0xca1e052e
rol ecx, 0x18
popf
pushf
not ecx
add ecx, 0xfdedd52a
xor ecx, 0xf6870f1b
rol ecx, 0xee
popf
cmp dword [rax + 0xc], ecx
jne 0x1401133f4
push rax
pushf
mov eax, 0x1ed88c9a
pushf
not eax
add eax, 0xc2eb7a3c
xor eax, 0x89bcc00f
rol eax, 0x39
popf
pushf
not eax
add eax, 0xf2271c4b
xor eax, 0xc35dc8ad
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xddd59ec7
xor eax, 0xb7e9b80a
rol eax, 0x51
popf
pushf
not eax
add eax, 0xf7957b5e
xor eax, 0xb87935b0
rol eax, 0xb6
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xaf6a4713
pushf
not eax
add eax, 0xe4874459
xor eax, 0xbe946a1d
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xc1cecfb3
xor eax, 0x93ac6e50
rol eax, 0xb7
popf
jmp 0x140112974
cmp byte [rbp - 0x78], r14b
je 0x140113473
push rax
pushf
mov eax, 0x841e740c
pushf
not eax
add eax, 0xc88309b0
xor eax, 0xf74462d3
rol eax, 0x58
popf
pushf
not eax
add eax, 0xa1c97737
xor eax, 0xf3ad72fb
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xd10c65e6
xor eax, 0xa05d9d34
rol eax, 0x3b
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x25c333a6
pushf
not eax
add eax, 0x84e7ce85
xor eax, 0xa7477937
rol eax, 0x40
popf
pushf
not eax
add eax, 0xe2dd973a
xor eax, 0x80eba38c
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf4c50741
xor eax, 0x831abe95
rol eax, 0x7d
popf
jmp 0x140112974
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x6ef77568
pushf
not eax
add eax, 0xe1972f45
xor eax, 0x80a08022
rol eax, 0x97
popf
pushf
not eax
add eax, 0x84e3c795
xor eax, 0x855ea7f8
rol eax, 0xae
popf
jmp 0x140112974
mov r9d, ecx
jmp 0x14011386f
call fcn.14019069b
test eax, eax
jne 0x140113595
push rax
pushf
mov eax, 0xe04a5f57
pushf
not eax
add eax, 0xced94a9c
xor eax, 0xa284e38d
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xce34fc50
xor eax, 0xa4b3a536
rol eax, 0xd7
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x3ef9299
pushf
not eax
add eax, 0x8820cb5b
xor eax, 0xed7687b3
rol eax, 0xba
popf
pushf
not eax
add eax, 0xad8239cf
xor eax, 0xd1ff5671
rol eax, 0x39
popf
pushf
not eax
add eax, 0xcd8e2762
xor eax, 0x8d29e258
rol eax, 0x3d
popf
jmp 0x140112974
cmp byte [rbp - 0x78], r14b
je 0x140113614
push rax
pushf
mov eax, 0x2d9ca62f
pushf
not eax
add eax, 0x95bc1ea2
xor eax, 0xf3ef426c
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xfced43ac
xor eax, 0xf5a9703d
rol eax, 0x20
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x4180ff9d
pushf
not eax
add eax, 0xdef8f79f
xor eax, 0xb5ea5885
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9da7e3a0
xor eax, 0xc761d3d1
rol eax, 0x23
popf
pushf
not eax
add eax, 0xd3f2a4b3
xor eax, 0xd2b763a1
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xb2402c18
xor eax, 0xc7af3fc8
rol eax, 0x37
popf
jmp 0x140112974
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x94fd6216
pushf
not eax
add eax, 0xc85e3d91
xor eax, 0x8163d906
rol eax, 0xef
popf
pushf
not eax
add eax, 0x8e229c25
xor eax, 0xb90a5315
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xced38ddd
xor eax, 0xcfcac18d
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x87a35dc4
xor eax, 0x943a4451
rol eax, 0x34
popf
jmp 0x140112974
mov r9d, 0x85d3134c
pushf
not r9d
add r9d, 0xd2bf8fad
xor r9d, 0xd5639898
rol r9d, 0x5a
popf
pushf
not r9d
add r9d, 0xb489238c
xor r9d, 0xd622e3f8
rol r9d, 0x46
popf
jmp 0x14011386f
cmp byte [rbp - 0x78], r14b
je 0x1401137a1
push rax
pushf
mov eax, 0x4012caa1
pushf
not eax
add eax, 0xa542b56b
xor eax, 0xa1407b23
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xf0fe955e
xor eax, 0xc1cc06a8
rol eax, 0xd
popf
pushf
not eax
add eax, 0xfc3edaff
xor eax, 0x816bea4f
rol eax, 0x69
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x7c511e68
pushf
not eax
add eax, 0xff290d0a
xor eax, 0xdd79df96
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb90016c8
xor eax, 0xba3fdd4b
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc705af23
xor eax, 0xfc9a310e
rol eax, 0x5a
popf
jmp 0x140112974
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xb7fdc84f
pushf
not eax
add eax, 0x984c58fd
xor eax, 0xc234a484
rol eax, 0x56
popf
pushf
not eax
add eax, 0xc8fc7a06
xor eax, 0xbeb3d178
rol eax, 0x79
popf
jmp 0x140112974
mov r9d, r14d
push rax
pushf
mov eax, 0x2754d8d2
pushf
not eax
add eax, 0xff980257
xor eax, 0xfa1ab3bc
rol eax, 0xee
popf
pushf
not eax
add eax, 0xd52dcf9d
xor eax, 0xbba20270
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb0699a0f
xor eax, 0xd4382cbb
rol eax, 0x4f
popf
jmp 0x140112974
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.1400d3c83
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x1401138a0
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140113908
push rax
pushf
mov eax, 0x7826a17e
pushf
not eax
add eax, 0x8fa43212
xor eax, 0xf001b5ba
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x9294512b
xor eax, 0xd3f7479b
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfc23840b
xor eax, 0xfefacd44
rol eax, 0x31
popf
pushf
not eax
add eax, 0xbf9894c8
xor eax, 0xa1fd35a3
rol eax, 0x3a
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xb216e5a9
pushf
not eax
add eax, 0x9464dc3b
xor eax, 0x927d147f
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xc687720b
xor eax, 0x86e6dae5
rol eax, 0x58
popf
pushf
not eax
add eax, 0xc34ccf1d
xor eax, 0xbb25dd90
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x940abcdc
xor eax, 0xb35022b8
rol eax, 0xbc
popf
jmp 0x140112974
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1401a30fc
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x1401139ad
push rax
pushf
mov eax, 0xf3db328f
pushf
not eax
add eax, 0xf07df3cf
xor eax, 0xa6f9511d
rol eax, 0x58
popf
pushf
not eax
add eax, 0xebbf87f6
xor eax, 0xc9652e85
rol eax, 0xbb
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xc75c63a9
pushf
not eax
add eax, 0x8160b12a
xor eax, 0xcec00ed2
rol eax, 9
popf
pushf
not eax
add eax, 0x992da997
xor eax, 0xb3e7389d
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe4949a66
xor eax, 0xb090d76b
rol eax, 0x5f
popf
jmp 0x140112974
mov rcx, qword [rsp + 0x50]
call fcn.1401db152
push rax
pushf
mov eax, 0xd2cabb05
pushf
not eax
add eax, 0x99e08c04
xor eax, 0xa9632fd5
rol eax, 0xe
popf
pushf
not eax
add eax, 0xf8954a93
xor eax, 0xb3be4240
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xcb5deb9f
xor eax, 0xe3048388
rol eax, 0x5b
popf
jmp 0x140112974
mov eax, ebx
jmp 0x14011493c
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0x2564ddfa
pushf
not eax
add eax, 0xa88bfc11
xor eax, 0xf373831f
rol eax, 0xec
popf
pushf
not eax
add eax, 0xfbe8f6b9
xor eax, 0xb2705fb3
rol eax, 0x4e
popf
jmp 0x140112974
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.14016a33a
mov rax, qword [rbp - 0x68]
mov ecx, 0x1a06c058
pushf
not ecx
add ecx, 0xf832f031
xor ecx, 0xeee7c257
rol ecx, 0x95
popf
pushf
not ecx
add ecx, 0xaf76a02c
xor ecx, 0xe22da6ae
rol ecx, 0xf3
popf
cmp dword [rax + 0xc], ecx
jne 0x140113b5e
push rax
pushf
mov eax, 0xe0fc1eec
pushf
not eax
add eax, 0x9db27038
xor eax, 0xfeec7e62
rol eax, 0x94
popf
pushf
not eax
add eax, 0x808bc8aa
xor eax, 0xe1b8f76a
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xbf699cec
xor eax, 0xe5aaf411
rol eax, 0xeb
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x584322db
pushf
not eax
add eax, 0xb498b24d
xor eax, 0x87d241dc
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xc8f191b4
xor eax, 0xa134c43f
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x9349a00b
xor eax, 0x8709e1a0
rol eax, 0x44
popf
jmp 0x140112974
cmp byte [rbp - 0x58], r14b
je 0x140113c03
push rax
pushf
mov eax, 0x54d82709
pushf
not eax
add eax, 0x92a2b8e7
xor eax, 0xd19be966
rol eax, 6
popf
pushf
not eax
add eax, 0xe77d11f5
xor eax, 0xd2eccf94
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x9de45164
xor eax, 0x95306677
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xa7a6489a
xor eax, 0xac18cecd
rol eax, 0x51
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x413d50fb
pushf
not eax
add eax, 0x8bcf7503
xor eax, 0x9890437c
rol eax, 0x87
popf
pushf
not eax
add eax, 0xf21d0b1e
xor eax, 0xe6c09fc3
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x8ca3cdd0
xor eax, 0xea2f100a
rol eax, 0x25
popf
jmp 0x140112974
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x790f5bb1
pushf
not eax
add eax, 0x94092e89
xor eax, 0xcefc6d2f
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xe4fc10f6
xor eax, 0x85fd9df3
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xc1094b6e
xor eax, 0x841d3fa1
rol eax, 0x61
popf
pushf
not eax
add eax, 0xf6c20376
xor eax, 0xd4cab24d
rol eax, 0x3c
popf
jmp 0x140112974
mov r9d, ecx
jmp 0x14011403b
call fcn.14019069b
test eax, eax
jne 0x140113d37
push rax
pushf
mov eax, 0x1d85d80
pushf
not eax
add eax, 0xfb003073
xor eax, 0x8414b021
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x9978aab4
xor eax, 0xc5fb76a1
rol eax, 0x3c
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xeb6a6b0e
pushf
not eax
add eax, 0x8585c0bf
xor eax, 0xd5ce6867
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xcb9cc753
xor eax, 0xe1a20e98
rol eax, 0x39
popf
jmp 0x140112974
cmp byte [rbp - 0x58], r14b
je 0x140113da3
push rax
pushf
mov eax, 0x297c2949
pushf
not eax
add eax, 0xe1ec1948
xor eax, 0x92c4e10e
rol eax, 0x34
popf
pushf
not eax
add eax, 0xd99dbac2
xor eax, 0xea9b1111
rol eax, 0xdd
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xb8b7949f
pushf
not eax
add eax, 0xc7351020
xor eax, 0xa2e0f12d
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xc8171b1d
xor eax, 0xd6cb4597
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xc0419c03
xor eax, 0xb59a384f
rol eax, 0x72
popf
pushf
not eax
add eax, 0xdee9f67f
xor eax, 0x9645d379
rol eax, 0x26
popf
jmp 0x140112974
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x62820545
pushf
not eax
add eax, 0xe2d3ed94
xor eax, 0xc2846824
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xa896ca60
xor eax, 0xabdce184
rol eax, 0x64
popf
pushf
not eax
add eax, 0x89cea4c0
xor eax, 0xf22eaff2
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xac249480
xor eax, 0xa9ff799d
rol eax, 0xc6
popf
jmp 0x140112974
mov r9d, 0x6deb6e99
pushf
not r9d
add r9d, 0xdead42e0
xor r9d, 0xec97e581
rol r9d, 0xea
popf
pushf
not r9d
add r9d, 0xed3990e6
xor r9d, 0xf8848c6d
rol r9d, 0x30
popf
pushf
not r9d
add r9d, 0xeaebdc45
xor r9d, 0xecd26fce
rol r9d, 0x59
popf
jmp 0x14011403b
cmp byte [rbp - 0x58], r14b
je 0x140113f6e
push rax
pushf
mov eax, 0x897bd434
pushf
not eax
add eax, 0x9db14873
xor eax, 0x9daa6647
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe6da7ed7
xor eax, 0xd6ffb80f
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x805d0739
xor eax, 0xe4fef0c2
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd9a9f9c3
xor eax, 0x9724388c
rol eax, 0xd8
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xffd09282
pushf
not eax
add eax, 0xdc02b911
xor eax, 0x99be2db1
rol eax, 0x91
popf
pushf
not eax
add eax, 0xd4920263
xor eax, 0xbe11374a
rol eax, 0x94
popf
jmp 0x140112974
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x7f40bd2b
pushf
not eax
add eax, 0xb29d34fc
xor eax, 0xa5222903
rol eax, 0x71
popf
pushf
not eax
add eax, 0xec4fa6a2
xor eax, 0x8cdb36ab
rol eax, 4
popf
pushf
not eax
add eax, 0xe5ce06fd
xor eax, 0xf6136829
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xabe0029c
xor eax, 0x8e3bbd55
rol eax, 0x82
popf
jmp 0x140112974
mov r9d, r14d
push rax
pushf
mov eax, 0xe53b3a6b
pushf
not eax
add eax, 0xa6ee1a58
xor eax, 0xc2557b42
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x8887973b
xor eax, 0xda83a6d6
rol eax, 0x9a
popf
jmp 0x140112974
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.1400c73e7
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x140114094
push rax
pushf
mov eax, 0x7049269e
pushf
not eax
add eax, 0x857c0d38
xor eax, 0xf0564fa6
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe8794ffe
xor eax, 0x922eb27f
rol eax, 0xba
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x94f0417b
pushf
not eax
add eax, 0xc48b87c6
xor eax, 0xeba7cf9e
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc29e4a8c
xor eax, 0xfe6370b7
rol eax, 0xd4
popf
jmp 0x140112974
mov al, byte [rcx + 1]
test al, al
jne 0x140114101
push rax
pushf
mov eax, 0xd23556db
pushf
not eax
add eax, 0xdd011a7f
xor eax, 0x81dc6d3e
rol eax, 0x88
popf
pushf
not eax
add eax, 0xef624979
xor eax, 0x99b3abed
rol eax, 0x27
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x30f65f42
pushf
not eax
add eax, 0xe17d6707
xor eax, 0x876bb5d4
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc230b771
xor eax, 0xa42dafc8
rol eax, 0x36
popf
pushf
not eax
add eax, 0xecf57996
xor eax, 0xcfabe8ca
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xcc759b8e
xor eax, 0x85fe4f8c
rol eax, 0x57
popf
jmp 0x140112974
cmp byte [rbp - 0x28], dl
je 0x1401141b8
push rax
pushf
mov eax, 0x54b3f5fd
pushf
not eax
add eax, 0xbda47dd8
xor eax, 0x9b5f78e9
rol eax, 0x69
popf
pushf
not eax
add eax, 0xec839445
xor eax, 0xc3245db1
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x914ac222
xor eax, 0x801d6776
rol eax, 0x57
popf
pushf
not eax
add eax, 0x89080a3b
xor eax, 0xa43ded10
rol eax, 0xb9
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xe80a686f
pushf
not eax
add eax, 0xcfa653f7
xor eax, 0x93402b5e
rol eax, 5
popf
pushf
not eax
add eax, 0xd6d2df36
xor eax, 0xde9b81a7
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd36b5cc2
xor eax, 0xa70fadf7
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc20cb94f
xor eax, 0x8fd358ba
rol eax, 0xd5
popf
jmp 0x140112974
mov rcx, r14
call fcn.1401db152
jmp 0x14011452a
cmp al, 0x2e
jne 0x14011429b
push rax
pushf
mov eax, 0x284fd3c4
pushf
not eax
add eax, 0x8d0543fc
xor eax, 0xee4b6d6a
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xd303c70f
xor eax, 0xfb12dc28
rol eax, 0xa2
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xca95ac58
pushf
not eax
add eax, 0xd88c0a7b
xor eax, 0xf9cbcb54
rol eax, 0x99
popf
pushf
not eax
add eax, 0x8be525ef
xor eax, 0xb3f8c3f3
rol eax, 0xa
popf
pushf
not eax
add eax, 0xaae0b34d
xor eax, 0x993bc314
rol eax, 0xd9
popf
jmp 0x140112974
cmp byte [rcx + 2], dl
je 0x140114319
push rax
pushf
mov eax, 0x7d48c0e9
pushf
not eax
add eax, 0xd862a538
xor eax, 0x9ccd3b12
rol eax, 0x56
popf
pushf
not eax
add eax, 0xc7eb4ed4
xor eax, 0xa6b9599c
rol eax, 0xa7
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xee7f4735
pushf
not eax
add eax, 0xf71ca622
xor eax, 0xef6e2347
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x96c6d54c
xor eax, 0xd76ce152
rol eax, 0xee
popf
jmp 0x140112974
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.1401a30fc
mov r13d, eax
test eax, eax
jne 0x1401143a7
push rax
pushf
mov eax, 0x34f16629
pushf
not eax
add eax, 0xac368b6f
xor eax, 0x841d3921
rol eax, 0xca
popf
pushf
not eax
add eax, 0x940fd80b
xor eax, 0x8e0ec4e2
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xbaf214c5
xor eax, 0xb8ee95cc
rol eax, 0x44
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x688a160
pushf
not eax
add eax, 0xdc185247
xor eax, 0x9a149fac
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xc408bed3
xor eax, 0xe755bf39
rol eax, 0x82
popf
pushf
not eax
add eax, 0xfc0367ee
xor eax, 0xcf09ff05
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x878022d9
xor eax, 0xfa983c58
rol eax, 0x59
popf
jmp 0x140112974
cmp byte [rbp - 0x28], al
je 0x14011444b
push rax
pushf
mov eax, 0x908b4ed8
pushf
not eax
add eax, 0xe8d82bfb
xor eax, 0xa2b2538c
rol eax, 0x82
popf
pushf
not eax
add eax, 0xa30dd5d9
xor eax, 0xdb13b631
rol eax, 0x96
popf
pushf
not eax
add eax, 0xe0b825f6
xor eax, 0x959d25b0
rol eax, 0xff
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x116b7fba
pushf
not eax
add eax, 0xa6bdfa99
xor eax, 0xc6deb921
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf14b8517
xor eax, 0xf6813929
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xe5935bdb
xor eax, 0xda4579e2
rol eax, 0xee
popf
jmp 0x140112974
mov rcx, r14
call fcn.1401db152
push rax
pushf
mov eax, 0xb03e8b14
pushf
not eax
add eax, 0xb3c570d7
xor eax, 0xd1716b09
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xa646f782
xor eax, 0xa8f19c66
rol eax, 0xee
popf
pushf
not eax
add eax, 0xbaad7016
xor eax, 0x9a11342c
rol eax, 0x13
popf
jmp 0x140112974
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xbf976874
pushf
not eax
add eax, 0x92c61429
xor eax, 0xc04e1862
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xeaa6b05a
xor eax, 0xe1c666b1
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x805bb266
xor eax, 0x9f63c401
rol eax, 0x84
popf
jmp 0x140112974
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x140114532
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x140113abd
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x14011458b
push rax
pushf
mov eax, 0xcc312b6e
pushf
not eax
add eax, 0xf564c117
xor eax, 0xb7449801
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xae2891b9
xor eax, 0xf9fb44c5
rol eax, 0xea
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x85b652c6
pushf
not eax
add eax, 0xe04693af
xor eax, 0xba600f52
rol eax, 0xec
popf
pushf
not eax
add eax, 0x8be35143
xor eax, 0xefad7a3c
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe973109f
xor eax, 0xf8b00479
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb9cf1b6c
xor eax, 0x8c19f67c
rol eax, 0x30
popf
jmp 0x140112974
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x198110300]
pushf
sub r9, 0x580dbe40
popf
lea r8d, [r14 + 8]
call fcn.1401b7d33
push rax
pushf
mov eax, 0xa85b0c23
pushf
not eax
add eax, 0x8022a50c
xor eax, 0xeac7c9b0
rol eax, 0x52
popf
pushf
not eax
add eax, 0xd3292745
xor eax, 0x8dfa3343
rol eax, 0x10
popf
jmp 0x140112974
mov rcx, rbx
jmp 0x14011463d
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x14011467d
push rax
pushf
mov eax, 0xcc3b218e
pushf
not eax
add eax, 0xaf4ae4e4
xor eax, 0xc87cf536
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x8850f7e1
xor eax, 0xc2ca1174
rol eax, 0x6c
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x31d1c62a
pushf
not eax
add eax, 0x9f48f166
xor eax, 0xbfe028ac
rol eax, 0x96
popf
pushf
not eax
add eax, 0xa2d17e15
xor eax, 0x936eecd7
rol eax, 0x57
popf
pushf
not eax
add eax, 0xc7f4b49b
xor eax, 0x865cdb50
rol eax, 0xde
popf
jmp 0x140112974
mov rcx, qword [rsp + 0x50]
call fcn.1401db152
push rax
pushf
mov eax, 0x7963778b
pushf
not eax
add eax, 0x9168a540
xor eax, 0xe9a0111f
rol eax, 0x49
popf
pushf
not eax
add eax, 0xfc9f9617
xor eax, 0xda263e33
rol eax, 0xa7
popf
jmp 0x140112974
xor eax, eax
jmp 0x14011493c
cmp byte [rbp - 0x28], 0
je 0x140114786
push rax
pushf
mov eax, 0x1270dd36
pushf
not eax
add eax, 0x812acd38
xor eax, 0xbfd2b79f
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xa1734301
xor eax, 0x82f72553
rol eax, 0x76
popf
jmp 0x140112974
push rax
pushf
mov eax, 0x2252c21
pushf
not eax
add eax, 0xaccf9b12
xor eax, 0xe1f0df87
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xc7503f80
xor eax, 0xd29a9473
rol eax, 1
popf
jmp 0x140112974
mov rcx, r14
call fcn.1401db152
push rax
pushf
mov eax, 0x1bc8668a
pushf
not eax
add eax, 0xd0e62ddd
xor eax, 0x9cf36660
rol eax, 3
popf
pushf
not eax
add eax, 0xb08b76e7
xor eax, 0xe1166d4e
rol eax, 0x41
popf
jmp 0x140112974
mov rcx, rbx
jmp 0x1401147f7
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x14011485d
push rax
pushf
mov eax, 0x5e89496f
pushf
not eax
add eax, 0xc1e9da97
xor eax, 0xe2e21340
rol eax, 0x83
popf
pushf
not eax
add eax, 0xab21b9b0
xor eax, 0xc77a72b8
rol eax, 0x97
popf
pushf
not eax
add eax, 0x9b396820
xor eax, 0xe05108f4
rol eax, 0x26
popf
pushf
not eax
add eax, 0xc5fceed6
xor eax, 0xcef3be63
rol eax, 0x44
popf
jmp 0x140112974
push rax
pushf
mov eax, 0xe2ba9eed
pushf
not eax
add eax, 0xb2d14141
xor eax, 0xaf5e5e63
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xc43d9d74
xor eax, 0xb4547c25
rol eax, 0xfd
popf
jmp 0x140112974
mov rcx, qword [rsp + 0x50]
call fcn.1401db152
push rax
pushf
mov eax, 0x3cafdd5c
pushf
not eax
add eax, 0xe393e767
xor eax, 0x89d69a94
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xea681716
xor eax, 0xe04860bb
rol eax, 0x36
popf
pushf
not eax
add eax, 0xb7125653
xor eax, 0x81096b7f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xfc70e0ce
xor eax, 0xdb538911
rol eax, 0x13
popf
jmp 0x140112974
mov eax, r13d
push rax
pushf
mov eax, 0x9225698f
pushf
not eax
add eax, 0x9b8dc77a
xor eax, 0xafb8a46b
rol eax, 0x76
popf
pushf
not eax
add eax, 0xccb85dd0
xor eax, 0xd224b7cf
rol eax, 0x55
popf
pushf
not eax
add eax, 0x920785cd
xor eax, 0xc628f889
rol eax, 0x53
popf
jmp 0x140112974
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.1401533b0
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret