Function at 0x140112bef
Capabilities:
Authenticate hmac
Enumerate files on windows
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xf2bbfb61
pushf
not eax
add eax, 0xfd180b9f
xor eax, 0xc26855df
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xced03446
xor eax, 0xec080000
rol eax, 0x28
popf
cmp eax, 0x29
jne 0x140112c2c
popf
pop rax
jmp 0x1401144c5
cmp eax, 0
jne 0x140112c3b
popf
pop rax
jmp 0x140112f92
cmp eax, 3
jne 0x140112c4a
popf
pop rax
jmp 0x1401131cd
cmp eax, 1
jne 0x140112c59
popf
pop rax
jmp 0x140113090
cmp eax, 0xd
jne 0x140112c68
popf
pop rax
jmp 0x1401136ea
cmp eax, 0x1a
jne 0x140112c77
popf
pop rax
jmp 0x140113d14
cmp eax, 0xe
jne 0x140112c86
popf
pop rax
jmp 0x14011374b
cmp eax, 0x31
jne 0x140112c95
popf
pop rax
jmp 0x140114858
cmp eax, 0x19
jne 0x140112ca4
popf
pop rax
jmp 0x140113cc1
cmp eax, 8
jne 0x140112cb3
popf
pop rax
jmp 0x14011343b
cmp eax, 0x2a
jne 0x140112cc2
popf
pop rax
jmp 0x140114555
cmp eax, 0x17
jne 0x140112cd1
popf
pop rax
jmp 0x140113c37
cmp eax, 0x1c
jne 0x140112ce0
popf
pop rax
jmp 0x140113eb7
cmp eax, 0x2e
jne 0x140112cef
popf
pop rax
jmp 0x140114766
cmp eax, 0x18
jne 0x140112cfe
popf
pop rax
jmp 0x140113c74
cmp eax, 0x2b
jne 0x140112d0d
popf
pop rax
jmp 0x1401145e6
cmp eax, 0x1b
jne 0x140112d1c
popf
pop rax
jmp 0x140113e12
cmp eax, 0x2d
jne 0x140112d2b
popf
pop rax
jmp 0x140114705
cmp eax, 0x23
jne 0x140112d3a
popf
pop rax
jmp 0x140114202
cmp eax, 0x25
jne 0x140112d49
popf
pop rax
jmp 0x140114276
cmp eax, 0x32
jne 0x140112d58
popf
pop rax
jmp 0x1401148c0
cmp eax, 0x13
jne 0x140112d67
popf
pop rax
jmp 0x140113a3e
cmp eax, 0x33
jne 0x140112d76
popf
pop rax
jmp 0x14011494a
cmp eax, 0x24
jne 0x140112d85
popf
pop rax
jmp 0x140114240
cmp eax, 0x1e
jne 0x140112d94
popf
pop rax
jmp 0x140113f56
cmp eax, 0xc
jne 0x140112da3
popf
pop rax
jmp 0x1401136ab
cmp eax, 0x26
jne 0x140112db2
popf
pop rax
jmp 0x14011433b
cmp eax, 0x27
jne 0x140112dc1
popf
pop rax
jmp 0x1401143e1
cmp eax, 0x30
jne 0x140112dd0
popf
pop rax
jmp 0x1401147b7
cmp eax, 0x10
jne 0x140112ddf
popf
pop rax
jmp 0x140113898
cmp eax, 0x37
jne 0x140112dee
popf
pop rax
jmp 0x140114ada
cmp eax, 9
jne 0x140112dfd
popf
pop rax
jmp 0x1401134e1
cmp eax, 0x39
jne 0x140112e0c
popf
pop rax
jmp 0x140114bda
cmp eax, 0x16
jne 0x140112e1b
popf
pop rax
jmp 0x140113b92
cmp eax, 0x28
jne 0x140112e2a
popf
pop rax
jmp 0x14011445f
cmp eax, 0xa
jne 0x140112e39
popf
pop rax
jmp 0x14011352a
cmp eax, 0x36
jne 0x140112e48
popf
pop rax
jmp 0x140114a8c
cmp eax, 0x14
jne 0x140112e57
popf
pop rax
jmp 0x140113aa3
cmp eax, 7
jne 0x140112e66
popf
pop rax
jmp 0x1401133a2
cmp eax, 0x34
jne 0x140112e75
popf
pop rax
jmp 0x140114987
cmp eax, 2
jne 0x140112e84
popf
pop rax
jmp 0x140113137
cmp eax, 0x20
jne 0x140112e93
popf
pop rax
jmp 0x1401140a3
cmp eax, 0x1d
jne 0x140112ea2
popf
pop rax
jmp 0x140113f08
cmp eax, 0x11
jne 0x140112eb1
popf
pop rax
jmp 0x1401138d7
cmp eax, 0x35
jne 0x140112ec0
popf
pop rax
jmp 0x1401149e7
cmp eax, 0x3a
jne 0x140112ecf
popf
pop rax
jmp 0x140114c23
cmp eax, 0x12
jne 0x140112ede
popf
pop rax
jmp 0x140113986
cmp eax, 0x21
jne 0x140112eed
popf
pop rax
jmp 0x1401140e1
cmp eax, 0x38
jne 0x140112efc
popf
pop rax
jmp 0x140114b9d
cmp eax, 0xb
jne 0x140112f0b
popf
pop rax
jmp 0x140113619
cmp eax, 0xf
jne 0x140112f1a
popf
pop rax
jmp 0x1401137f3
cmp eax, 0x15
jne 0x140112f29
popf
pop rax
jmp 0x140113aec
cmp eax, 5
jne 0x140112f38
popf
pop rax
jmp 0x1401132d8
cmp eax, 6
jne 0x140112f47
popf
pop rax
jmp 0x14011335a
cmp eax, 0x22
jne 0x140112f56
popf
pop rax
jmp 0x140114183
cmp eax, 0x2c
jne 0x140112f65
popf
pop rax
jmp 0x14011469a
cmp eax, 0x1f
jne 0x140112f74
popf
pop rax
jmp 0x140113feb
cmp eax, 4
jne 0x140112f83
popf
pop rax
jmp 0x140113243
cmp eax, 0x2f
jne 0x140112f92
popf
pop rax
jmp 0x14011479e
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x140058058]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0x68000000c4b345dd
pushf
not rbx
add rbx, 0x7180e770
xor rbx, 0x518142c3
rol rbx, 3
popf
pushf
not rbx
add rbx, 0x64da64c0
xor rbx, 0x6a714a33
rol rbx, 0x6f
popf
cmp rdx, rcx
je 0x14011305d
push rax
pushf
mov eax, 0xb7146df3
pushf
not eax
add eax, 0xaf5eb7a9
xor eax, 0x81731dca
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xc20aeac0
xor eax, 0xe9bba13f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xe840c9f0
xor eax, 0x9b095ef5
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xd11ee6df
xor eax, 0xb671d104
rol eax, 0x96
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x5010640c
pushf
not eax
add eax, 0xb06768f0
xor eax, 0x97b78eea
rol eax, 0x38
popf
pushf
not eax
add eax, 0xdca664a3
xor eax, 0xd2ae8438
rol eax, 0x7d
popf
jmp 0x140112c1d
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x1401130f1
push rax
pushf
mov eax, 0xc8c4786c
pushf
not eax
add eax, 0x8eedc271
xor eax, 0xcf5467e4
rol eax, 0x60
popf
pushf
not eax
add eax, 0xd9fcecff
xor eax, 0xd4579c7b
rol eax, 0x77
popf
pushf
not eax
add eax, 0xe1fac3e2
xor eax, 0xd96ea5c7
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe33529f8
xor eax, 0x81d40878
rol eax, 0x32
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x72855f94
pushf
not eax
add eax, 0xcaed4f12
xor eax, 0xfb77d353
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xd157d2ef
xor eax, 0x9693d426
rol eax, 0x78
popf
pushf
not eax
add eax, 0xcd57ba85
xor eax, 0x965df6eb
rol eax, 0x87
popf
jmp 0x140112c1d
movsx rax, al
bt rbx, rax
jb 0x140113187
push rax
pushf
mov eax, 0x6030fdd0
pushf
not eax
add eax, 0xe6496c78
xor eax, 0x983e22d9
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf3a2b4c1
xor eax, 0xa85326e3
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x83f8d2e6
xor eax, 0xb1712418
rol eax, 0x73
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x2c5a57e4
pushf
not eax
add eax, 0xe0e328b4
xor eax, 0xdb93324a
rol eax, 0x20
popf
pushf
not eax
add eax, 0xe2f77181
xor eax, 0xaac343b8
rol eax, 3
popf
pushf
not eax
add eax, 0xbacb5cad
xor eax, 0xf204f28c
rol eax, 0xe1
popf
jmp 0x140112c1d
mov rcx, rdi
call fcn.140118890
mov rdx, rax
cmp rax, rdi
jne 0x140113210
push rax
pushf
mov eax, 0xf5bbf02b
pushf
not eax
add eax, 0xec450fc2
xor eax, 0xf27a5b1e
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xddaea479
xor eax, 0x942e5544
rol eax, 0x8a
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xe2b86be6
pushf
not eax
add eax, 0xe9f952fb
xor eax, 0xdb29f3b0
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc793756a
xor eax, 0xeb2e60c5
rol eax, 0xe
popf
jmp 0x140112c1d
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x1401132a5
push rax
pushf
mov eax, 0x61dbd506
pushf
not eax
add eax, 0x8d0ff3b6
xor eax, 0x98a402ea
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xeca3f0e1
xor eax, 0x971e2e80
rol eax, 0x16
popf
pushf
not eax
add eax, 0xed47330f
xor eax, 0xf49fdc63
rol eax, 0x45
popf
pushf
not eax
add eax, 0xac67bab7
xor eax, 0xf08cdad9
rol eax, 0xa9
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x5ff9b864
pushf
not eax
add eax, 0xc7e2baf1
xor eax, 0xdb5e8ac0
rol eax, 8
popf
pushf
not eax
add eax, 0xbbd47561
xor eax, 0xc44c28a5
rol eax, 2
popf
jmp 0x140112c1d
lea rax, [rdi + 1]
cmp rdx, rax
je 0x140113314
push rax
pushf
mov eax, 0xb86b5a0a
pushf
not eax
add eax, 0x8a88c481
xor eax, 0x802c7a94
rol eax, 0x72
popf
pushf
not eax
add eax, 0xfa4f9e72
xor eax, 0xb6c7d5ad
rol eax, 0x32
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x765e7130
pushf
not eax
add eax, 0xcd60f60f
xor eax, 0x82eabaac
rol eax, 0x42
popf
pushf
not eax
add eax, 0xc3d3af52
xor eax, 0xc1f7e81c
rol eax, 0
popf
pushf
not eax
add eax, 0x9a01373c
xor eax, 0xec35d9a1
rol eax, 0xf
popf
jmp 0x140112c1d
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1401a30a4
jmp 0x140114c23
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x140113408
push rax
pushf
mov eax, 0x7038f221
pushf
not eax
add eax, 0xffe76dea
xor eax, 0xfdb53cb7
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x85a3a4cc
xor eax, 0xba592926
rol eax, 0x77
popf
pushf
not eax
add eax, 0xd7edd5e3
xor eax, 0x95020f9c
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xfb190cb2
xor eax, 0xb6313f22
rol eax, 9
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xb1039ac8
pushf
not eax
add eax, 0xeab82e32
xor eax, 0xe41714d6
rol eax, 0x98
popf
pushf
not eax
add eax, 0xa4e1ec31
xor eax, 0xa50448ab
rol eax, 0xe2
popf
jmp 0x140112c1d
movsx rax, r8b
bt rbx, rax
mov al, 8
pushf
not al
add al, 0x26
xor al, 0x29
rol al, 0x2c
popf
pushf
not al
add al, 0xd0
xor al, 0xf4
rol al, 0x78
popf
pushf
not al
add al, 0x3f
xor al, 0xf2
rol al, 0x1b
popf
pushf
not al
add al, 0xbb
xor al, 0x1b
rol al, 0x17
popf
jb 0x1401134ae
push rax
pushf
mov eax, 0x9eb9434e
pushf
not eax
add eax, 0xfbb4152c
xor eax, 0xb4101ee4
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xe7718d6c
xor eax, 0xf6cde22f
rol eax, 0xe8
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xb966f36f
pushf
not eax
add eax, 0x84664216
xor eax, 0xdc53a291
rol eax, 0x87
popf
pushf
not eax
add eax, 0xd965f2f6
xor eax, 0x82efdd6a
rol eax, 0x38
popf
jmp 0x140112c1d
mov al, r14b
push rax
pushf
mov eax, 0xeca05927
pushf
not eax
add eax, 0xeb453440
xor eax, 0x96c7d58d
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xc7c96907
xor eax, 0xfa2e317f
rol eax, 3
popf
pushf
not eax
add eax, 0xea01a694
xor eax, 0xf55a8587
rol eax, 0x58
popf
jmp 0x140112c1d
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.14016a0bb
mov rax, qword [rsp + 0x78]
mov ecx, 0x75792be1
pushf
not ecx
add ecx, 0x8f79caed
xor ecx, 0xc330fb65
rol ecx, 0x6f
popf
pushf
not ecx
add ecx, 0x9f5b4ff6
xor ecx, 0x90cae35d
rol ecx, 0x10
popf
cmp dword [rax + 0xc], ecx
jne 0x1401135d3
push rax
pushf
mov eax, 0x892f13eb
pushf
not eax
add eax, 0xc48e2450
xor eax, 0x84e0cfcf
rol eax, 0x75
popf
pushf
not eax
add eax, 0xe533b54d
xor eax, 0xefbbb8d1
rol eax, 0x19
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x4f190ced
pushf
not eax
add eax, 0x80a12bc2
xor eax, 0xd61f311e
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xd7bce10e
xor eax, 0x9fbacbdb
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x946c19d8
xor eax, 0x928d5b84
rol eax, 0xe9
popf
jmp 0x140112c1d
cmp byte [rbp - 0x78], r14b
je 0x140113678
push rax
pushf
mov eax, 0xc9869fb2
pushf
not eax
add eax, 0xe6f902e8
xor eax, 0x81278429
rol eax, 0xca
popf
pushf
not eax
add eax, 0xa97177d0
xor eax, 0xd8ae5779
rol eax, 0x17
popf
pushf
not eax
add eax, 0x9927f24f
xor eax, 0xce467e0c
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x86bba055
xor eax, 0xe166cac2
rol eax, 0xf6
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xd3174d9c
pushf
not eax
add eax, 0x869264cd
xor eax, 0x88033ebc
rol eax, 0x51
popf
pushf
not eax
add eax, 0xd4e48502
xor eax, 0x828c0e11
rol eax, 0x4a
popf
jmp 0x140112c1d
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x8fabd32c
pushf
not eax
add eax, 0xaec6a0c5
xor eax, 0x88643e8d
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x9c600444
xor eax, 0xbdfd5160
rol eax, 0xbe
popf
jmp 0x140112c1d
mov r9d, ecx
jmp 0x140113aec
call fcn.1401905a8
test eax, eax
jne 0x1401137ad
push rax
pushf
mov eax, 0x3bf198d6
pushf
not eax
add eax, 0xab6cd2ab
xor eax, 0xfcc04fde
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xbb408c75
xor eax, 0xcde25759
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xcdcc9727
xor eax, 0x93044053
rol eax, 5
popf
pushf
not eax
add eax, 0xaeba9baa
xor eax, 0x8ea0c97b
rol eax, 0xfc
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xdc0a35
pushf
not eax
add eax, 0xa45d1863
xor eax, 0xf16503d3
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xe64ec76d
xor eax, 0x809f1189
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb0f79058
xor eax, 0xe5a4dd09
rol eax, 0xa3
popf
jmp 0x140112c1d
cmp byte [rbp - 0x78], r14b
je 0x140113852
push rax
pushf
mov eax, 0x3c061576
pushf
not eax
add eax, 0xd9d092e3
xor eax, 0xf306866d
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xcb516306
xor eax, 0x9767c00a
rol eax, 0x84
popf
pushf
not eax
add eax, 0xab84f2a6
xor eax, 0xf8b7aba2
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xa1b71141
xor eax, 0xb3db186d
rol eax, 0x56
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xd30d03db
pushf
not eax
add eax, 0xb44215ec
xor eax, 0xb7c4bd17
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xcc79a7c9
xor eax, 0xaa7cdbad
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xc31b5221
xor eax, 0xa747f6b3
rol eax, 0xd2
popf
jmp 0x140112c1d
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x3576c5d5
pushf
not eax
add eax, 0x807fd43a
xor eax, 0xbb58f20f
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xe5725de9
xor eax, 0xf564617d
rol eax, 0x8e
popf
jmp 0x140112c1d
mov r9d, 0x7dd2f5f7
pushf
not r9d
add r9d, 0xaae937fb
xor r9d, 0xaa997912
rol r9d, 0xb
popf
pushf
not r9d
add r9d, 0x85c5d8dd
xor r9d, 0xa27c5114
rol r9d, 0xc1
popf
pushf
not r9d
add r9d, 0xe2f5e169
xor r9d, 0x8bd3a5ff
rol r9d, 0x66
popf
jmp 0x140113aec
cmp byte [rbp - 0x78], r14b
je 0x1401139e5
push rax
pushf
mov eax, 0x6b49769e
pushf
not eax
add eax, 0xa289ee37
xor eax, 0xb1118e5c
rol eax, 0x69
popf
pushf
not eax
add eax, 0xa7721a15
xor eax, 0xf53bcf0b
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf54bf05f
xor eax, 0xa9b9b95d
rol eax, 0x57
popf
pushf
not eax
add eax, 0xc8f61e71
xor eax, 0xd0451d3c
rol eax, 0xd4
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xdd57cc69
pushf
not eax
add eax, 0xc4c4ae80
xor eax, 0xf99215cd
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd242952c
xor eax, 0xbbc19132
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xa0d5d8a6
xor eax, 0xd7af86c0
rol eax, 0xca
popf
pushf
not eax
add eax, 0xd4cc7086
xor eax, 0xa300e22a
rol eax, 0xab
popf
jmp 0x140112c1d
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x8c61a502
pushf
not eax
add eax, 0xb18885a2
xor eax, 0x90a26a96
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x9bce7180
xor eax, 0xadb951dd
rol eax, 0xde
popf
pushf
not eax
add eax, 0xc052f919
xor eax, 0xd5e2e480
rol eax, 0x50
popf
pushf
not eax
add eax, 0x9b159123
xor eax, 0xf82933f3
rol eax, 0xc1
popf
jmp 0x140112c1d
mov r9d, r14d
push rax
pushf
mov eax, 0x820fad56
pushf
not eax
add eax, 0xc4410ef2
xor eax, 0x86fd7468
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xa28cb1bc
xor eax, 0xd3c7693f
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xde0c8bd8
xor eax, 0xc596004b
rol eax, 0x19
popf
jmp 0x140112c1d
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.1400d40a6
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x140113b1d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140113b5f
push rax
pushf
mov eax, 0x932fac13
pushf
not eax
add eax, 0x8d03f6d9
xor eax, 0xe89684a2
rol eax, 0x67
popf
pushf
not eax
add eax, 0x8057754a
xor eax, 0xdf9041c1
rol eax, 0x4c
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xf07fcefb
pushf
not eax
add eax, 0xb9751938
xor eax, 0xa214158f
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xbeee4e79
xor eax, 0xa47317ca
rol eax, 0xc9
popf
jmp 0x140112c1d
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1401a30a4
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x140113bf1
push rax
pushf
mov eax, 0x3a87452c
pushf
not eax
add eax, 0xe1e0d8f2
xor eax, 0x8a3ec468
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x9e9aceb1
xor eax, 0xd3a8ce3b
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe77b28cc
xor eax, 0x87675780
rol eax, 0x10
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xd5ce8445
pushf
not eax
add eax, 0xec250725
xor eax, 0xe97ea89a
rol eax, 0x29
popf
pushf
not eax
add eax, 0xb6f9ee91
xor eax, 0xbd30d38e
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xfe81ab6b
xor eax, 0x90b6dedc
rol eax, 0xf9
popf
jmp 0x140112c1d
mov rcx, qword [rsp + 0x50]
call fcn.1401db1bf
push rax
pushf
mov eax, 0x8d9254cc
pushf
not eax
add eax, 0xf7e010a6
xor eax, 0xc330d98e
rol eax, 0x21
popf
pushf
not eax
add eax, 0xef8691a5
xor eax, 0x9c8bd4f5
rol eax, 0x98
popf
jmp 0x140112c1d
mov eax, ebx
jmp 0x140114c23
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0x9a38f3e1
pushf
not eax
add eax, 0xa0fd78f2
xor eax, 0xa217d8b7
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x89c50d8d
xor eax, 0xbf05abbe
rol eax, 0x61
popf
pushf
not eax
add eax, 0xface5a06
xor eax, 0xf4358f76
rol eax, 0x53
popf
jmp 0x140112c1d
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.14016a0bb
mov rax, qword [rbp - 0x68]
mov ecx, 0xbfa34412
pushf
not ecx
add ecx, 0x88014dc9
xor ecx, 0xfa25f527
rol ecx, 0x4d
popf
pushf
not ecx
add ecx, 0xff6ebdfd
xor ecx, 0x9b97adff
rol ecx, 0xb6
popf
pushf
not ecx
add ecx, 0xeef807de
xor ecx, 0x98b2aeba
rol ecx, 0x22
popf
pushf
not ecx
add ecx, 0xe09648df
xor ecx, 0xd66427ee
rol ecx, 0x80
popf
cmp dword [rax + 0xc], ecx
jne 0x140113ddf
push rax
pushf
mov eax, 0xeb3a0241
pushf
not eax
add eax, 0xa7daf0b2
xor eax, 0x95d6fcb3
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xecbb87e5
xor eax, 0xacac9a03
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa70f687e
xor eax, 0xba7f49e9
rol eax, 0xe4
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x1ad40c3f
pushf
not eax
add eax, 0xcc9a72d5
xor eax, 0xe646f351
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xbeefab4b
xor eax, 0x932f6076
rol eax, 0
popf
jmp 0x140112c1d
cmp byte [rbp - 0x58], r14b
je 0x140113e71
push rax
pushf
mov eax, 0x7e87c0c2
pushf
not eax
add eax, 0xd18bb0bb
xor eax, 0xb2878953
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xda786de8
xor eax, 0xec61ca8b
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf75131a6
xor eax, 0xd528bfe4
rol eax, 2
popf
pushf
not eax
add eax, 0xc0d6cf6c
xor eax, 0xa8666f6c
rol eax, 0x8c
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xbee12da3
pushf
not eax
add eax, 0xb7ef4ba4
xor eax, 0xc89457cd
rol eax, 0x12
popf
pushf
not eax
add eax, 0x9872a7c1
xor eax, 0xab99b569
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x850933e5
xor eax, 0xa95ca95d
rol eax, 0xd
popf
jmp 0x140112c1d
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x3ee29f8
pushf
not eax
add eax, 0xead1f283
xor eax, 0xe938f4de
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x987630db
xor eax, 0x816834a6
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x8cc4b9c2
xor eax, 0xb26857ca
rol eax, 0x37
popf
jmp 0x140112c1d
mov r9d, ecx
jmp 0x140114276
call fcn.1401905a8
test eax, eax
jne 0x140113fa5
push rax
pushf
mov eax, 0x907f48e9
pushf
not eax
add eax, 0xe5a3a16b
xor eax, 0xcb39d025
rol eax, 0x40
popf
pushf
not eax
add eax, 0xb4967ae9
xor eax, 0xb516fa8d
rol eax, 0xca
popf
pushf
not eax
add eax, 0x8c579030
xor eax, 0xd44869a2
rol eax, 0xae
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xc3587a59
pushf
not eax
add eax, 0xa242bd2a
xor eax, 0xf4cbc371
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe2391d4a
xor eax, 0xf27baa42
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xdee294c2
xor eax, 0xc8e01e00
rol eax, 0x13
popf
jmp 0x140112c1d
cmp byte [rbp - 0x58], r14b
je 0x14011404a
push rax
pushf
mov eax, 0x1d577cde
pushf
not eax
add eax, 0x89fe2d35
xor eax, 0xeb313b65
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x8d235bf9
xor eax, 0xb12573b1
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xf2c7e12a
xor eax, 0xebd1d4ec
rol eax, 0x44
popf
pushf
not eax
add eax, 0x84e43cdd
xor eax, 0x8b4fdf1a
rol eax, 2
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x2551bbd3
pushf
not eax
add eax, 0xf85eae24
xor eax, 0xba4d9727
rol eax, 0x82
popf
pushf
not eax
add eax, 0x96f8a207
xor eax, 0xeeb8d86f
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xfd8c0ae6
xor eax, 0xecb55113
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xbd5aabf8
xor eax, 0xe933c9ee
rol eax, 0x3d
popf
jmp 0x140112c1d
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x93284fbd
pushf
not eax
add eax, 0xab892da2
xor eax, 0x9f2fc949
rol eax, 0xa
popf
pushf
not eax
add eax, 0xf11a6d88
xor eax, 0xb4c7b74b
rol eax, 0
popf
jmp 0x140112c1d
mov r9d, 0x2ea63d55
pushf
not r9d
add r9d, 0xa0d13d8a
xor r9d, 0xdc76672e
rol r9d, 0xd
popf
pushf
not r9d
add r9d, 0xa3781ab9
xor r9d, 0x98288d20
rol r9d, 0x42
popf
pushf
not r9d
add r9d, 0xa3b01358
xor r9d, 0xf3af5575
rol r9d, 0x52
popf
pushf
not r9d
add r9d, 0xccb26adf
xor r9d, 0xa755fe98
rol r9d, 0x22
popf
jmp 0x140114276
cmp byte [rbp - 0x58], r14b
je 0x1401141cf
push rax
pushf
mov eax, 0xd8f1747b
pushf
not eax
add eax, 0xe6e3bce2
xor eax, 0x8844ed4f
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xa457eb14
xor eax, 0xd7e154a4
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x8b5072af
xor eax, 0xbaaea39d
rol eax, 0x9b
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x13ef32d8
pushf
not eax
add eax, 0x9a21be32
xor eax, 0xab896b78
rol eax, 0x71
popf
pushf
not eax
add eax, 0xae3c87b3
xor eax, 0xe97a2c3b
rol eax, 0xb
popf
jmp 0x140112c1d
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xf6a43f06
pushf
not eax
add eax, 0x8bad97f2
xor eax, 0x9b3430d5
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xb3bd230c
xor eax, 0xe5101b4a
rol eax, 0xa
popf
jmp 0x140112c1d
mov r9d, r14d
push rax
pushf
mov eax, 0x58581100
pushf
not eax
add eax, 0xe25fad6e
xor eax, 0xc6b805a1
rol eax, 0x82
popf
pushf
not eax
add eax, 0xfd4ded74
xor eax, 0xca4f8412
rol eax, 0xbc
popf
jmp 0x140112c1d
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.1400c7722
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x1401142f5
push rax
pushf
mov eax, 0x4eede61b
pushf
not eax
add eax, 0xed816533
xor eax, 0xb4e7fa8d
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe36be78a
xor eax, 0xd32d0c43
rol eax, 0x26
popf
pushf
not eax
add eax, 0x97f52445
xor eax, 0xadb43282
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xaf8277fd
xor eax, 0xd23bb35f
rol eax, 0x86
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xb6b1cdca
pushf
not eax
add eax, 0xe494ee60
xor eax, 0xbf098903
rol eax, 0x29
popf
pushf
not eax
add eax, 0xa6e797d6
xor eax, 0xae69830e
rol eax, 0x74
popf
pushf
not eax
add eax, 0x8c8dac59
xor eax, 0xf0a5ac2c
rol eax, 0x3f
popf
jmp 0x140112c1d
mov al, byte [rcx + 1]
test al, al
jne 0x140114388
push rax
pushf
mov eax, 0x9daec09c
pushf
not eax
add eax, 0x85950b88
xor eax, 0xcb40b8b4
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xab0aef59
xor eax, 0xee34ec6f
rol eax, 0xca
popf
pushf
not eax
add eax, 0xf38e165e
xor eax, 0xe6a08db0
rol eax, 0x8d
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x3623e23a
pushf
not eax
add eax, 0x92e416e1
xor eax, 0xfbccf1eb
rol eax, 0x52
popf
pushf
not eax
add eax, 0xe0bccce1
xor eax, 0xbf6f12e1
rol eax, 0x96
popf
pushf
not eax
add eax, 0xb26c43d8
xor eax, 0xc67ff847
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x87555b86
xor eax, 0xbaa469bd
rol eax, 9
popf
jmp 0x140112c1d
cmp byte [rbp - 0x28], dl
je 0x14011442c
push rax
pushf
mov eax, 0x89e3142b
pushf
not eax
add eax, 0xf17b90f1
xor eax, 0xa1e255e5
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xc83c774d
xor eax, 0xfaf26eeb
rol eax, 2
popf
pushf
not eax
add eax, 0x879cf17d
xor eax, 0xb7f42f23
rol eax, 0x68
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xc49627a
pushf
not eax
add eax, 0x97671440
xor eax, 0x9b25e843
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x81aa9473
xor eax, 0xcf9432ee
rol eax, 0x86
popf
jmp 0x140112c1d
mov rcx, r14
call fcn.1401db1bf
jmp 0x14011479e
cmp al, 0x2e
jne 0x14011450f
push rax
pushf
mov eax, 0xeb19b073
pushf
not eax
add eax, 0xa9ca5f11
xor eax, 0xa0149382
rol eax, 0x10
popf
pushf
not eax
add eax, 0x98640254
xor eax, 0x9ae85054
rol eax, 0x37
popf
pushf
not eax
add eax, 0xe4422b56
xor eax, 0xe66154d6
rol eax, 0x20
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x6ca18f14
pushf
not eax
add eax, 0xa69e55fe
xor eax, 0xcc7d26db
rol eax, 0x59
popf
pushf
not eax
add eax, 0xa29f7214
xor eax, 0xcc0b9896
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x80b0dc39
xor eax, 0xa7f2c15a
rol eax, 0x7b
popf
jmp 0x140112c1d
cmp byte [rcx + 2], dl
je 0x1401145b3
push rax
pushf
mov eax, 0xee50d42e
pushf
not eax
add eax, 0xded17eb7
xor eax, 0xbdb341b9
rol eax, 0x87
popf
pushf
not eax
add eax, 0xd9a4370b
xor eax, 0x98e450b7
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x85c30d9f
xor eax, 0xf0808256
rol eax, 0x14
popf
pushf
not eax
add eax, 0x9fd001ed
xor eax, 0xdea1fc58
rol eax, 0xe5
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xe1825eac
pushf
not eax
add eax, 0xe1f55ba9
xor eax, 0xd871720b
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb271b644
xor eax, 0x8cc1af26
rol eax, 0x27
popf
jmp 0x140112c1d
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.1401a30a4
mov r13d, eax
test eax, eax
jne 0x140114654
push rax
pushf
mov eax, 0xbd707e1
pushf
not eax
add eax, 0x8e9f046e
xor eax, 0xb1e4520c
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x984c4a5f
xor eax, 0x8f5cec81
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x8d2ad3e2
xor eax, 0xfebbd201
rol eax, 0x92
popf
pushf
not eax
add eax, 0xa62f6574
xor eax, 0x8541f716
rol eax, 0xa2
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xb6d20921
pushf
not eax
add eax, 0xc4ce4345
xor eax, 0xe6ad63e4
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xdeb52623
xor eax, 0x8043058f
rol eax, 0x77
popf
pushf
not eax
add eax, 0xcb15b196
xor eax, 0xabd6dfb0
rol eax, 0x30
popf
jmp 0x140112c1d
cmp byte [rbp - 0x28], al
je 0x1401146d2
push rax
pushf
mov eax, 0xf55576
pushf
not eax
add eax, 0xecc6abf3
xor eax, 0xa074db2a
rol eax, 0x82
popf
pushf
not eax
add eax, 0xc386d868
xor eax, 0x94aaa30e
rol eax, 0xef
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x4bb6c526
pushf
not eax
add eax, 0xaee32db2
xor eax, 0xa2739fe8
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xb5e72811
xor eax, 0xdab82291
rol eax, 0xc
popf
jmp 0x140112c1d
mov rcx, r14
call fcn.1401db1bf
push rax
pushf
mov eax, 0x25668600
pushf
not eax
add eax, 0x865bba66
xor eax, 0xaa575413
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xdf9b68af
xor eax, 0xd6cf7655
rol eax, 0x88
popf
pushf
not eax
add eax, 0xb8a59cbf
xor eax, 0xfd35cbcd
rol eax, 0x49
popf
pushf
not eax
add eax, 0xba8e9ca4
xor eax, 0x828e566a
rol eax, 0x54
popf
jmp 0x140112c1d
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x35e1066b
pushf
not eax
add eax, 0x8c216ce4
xor eax, 0xdebde19d
rol eax, 0x29
popf
pushf
not eax
add eax, 0x9326194b
xor eax, 0x98173639
rol eax, 0xd5
popf
jmp 0x140112c1d
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x1401147a6
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x140113d14
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x140114812
push rax
pushf
mov eax, 0xcbaaf65d
pushf
not eax
add eax, 0xe21e791a
xor eax, 0xe4699562
rol eax, 0xee
popf
pushf
not eax
add eax, 0x947a86c4
xor eax, 0xc1e20804
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc9686ea2
xor eax, 0xc081531e
rol eax, 0x57
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0xa093eaed
pushf
not eax
add eax, 0xdda4f965
xor eax, 0xb3e0e77a
rol eax, 0x36
popf
pushf
not eax
add eax, 0xd55733d5
xor eax, 0xf1446e2a
rol eax, 0xe
popf
pushf
not eax
add eax, 0x9e03c9f8
xor eax, 0xd7a7b102
rol eax, 0x9e
popf
jmp 0x140112c1d
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x19ba949cb]
pushf
sub r9, 0x5ba6050b
popf
lea r8d, [r14 + 8]
call fcn.1401b7b31
push rax
pushf
mov eax, 0x89bccd7e
pushf
not eax
add eax, 0x8b446084
xor eax, 0xbc027d85
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x8eb5678e
xor eax, 0xc542794d
rol eax, 0x78
popf
pushf
not eax
add eax, 0xbdfb0eab
xor eax, 0xeeb5faa4
rol eax, 0x50
popf
jmp 0x140112c1d
mov rcx, rbx
jmp 0x1401148c4
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x140114917
push rax
pushf
mov eax, 0xd5cd80de
pushf
not eax
add eax, 0xf1ba066e
xor eax, 0xcc655eaf
rol eax, 0x18
popf
pushf
not eax
add eax, 0xa307efbe
xor eax, 0xd2a845a3
rol eax, 0x71
popf
pushf
not eax
add eax, 0xefd73cdf
xor eax, 0xaf549dce
rol eax, 0x9b
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x8e6e87cd
pushf
not eax
add eax, 0xf27f5437
xor eax, 0xf6b2854d
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xb3354db0
xor eax, 0xcea3048b
rol eax, 0x65
popf
jmp 0x140112c1d
mov rcx, qword [rsp + 0x50]
call fcn.1401db1bf
push rax
pushf
mov eax, 0xf701d711
pushf
not eax
add eax, 0xc81bacec
xor eax, 0x9094746c
rol eax, 0x42
popf
pushf
not eax
add eax, 0xee49ad3e
xor eax, 0x80132664
rol eax, 0x67
popf
jmp 0x140112c1d
xor eax, eax
jmp 0x140114c23
cmp byte [rbp - 0x28], 0
je 0x140114a33
push rax
pushf
mov eax, 0x2b5ddbb1
pushf
not eax
add eax, 0xceb8721d
xor eax, 0x952590f9
rol eax, 0x76
popf
pushf
not eax
add eax, 0xaa0964cb
xor eax, 0xfabdad61
rol eax, 5
popf
pushf
not eax
add eax, 0x91578c0a
xor eax, 0x988a7d8a
rol eax, 0x5c
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x2c0b44aa
pushf
not eax
add eax, 0xf1fe805e
xor eax, 0x90e7baf4
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xe0e4e4cb
xor eax, 0xd8634f74
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb952f501
xor eax, 0x883c11c1
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xe7d01657
xor eax, 0xa9128afb
rol eax, 0xe0
popf
jmp 0x140112c1d
mov rcx, r14
call fcn.1401db1bf
push rax
pushf
mov eax, 0xdc427662
pushf
not eax
add eax, 0x9ccf0ef4
xor eax, 0xca9b2277
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc3754096
xor eax, 0xcfc5b26e
rol eax, 9
popf
pushf
not eax
add eax, 0xd354adbc
xor eax, 0xd755b185
rol eax, 0xaf
popf
jmp 0x140112c1d
mov rcx, rbx
jmp 0x140114ade
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x140114b44
push rax
pushf
mov eax, 0x38975463
pushf
not eax
add eax, 0xcb9133a2
xor eax, 0x92b0d155
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xe59d903e
xor eax, 0xa288e394
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xb5f55564
xor eax, 0x95fa7d02
rol eax, 0x91
popf
pushf
not eax
add eax, 0xc94ad67c
xor eax, 0x8f1b3e6f
rol eax, 0x37
popf
jmp 0x140112c1d
push rax
pushf
mov eax, 0x214a1271
pushf
not eax
add eax, 0xc7c62339
xor eax, 0xa10faaf7
rol eax, 0x24
popf
pushf
not eax
add eax, 0xa793969c
xor eax, 0xe7a0f67b
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xf57ac062
xor eax, 0xff6782d6
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xf775cf96
xor eax, 0xde702585
rol eax, 0xac
popf
jmp 0x140112c1d
mov rcx, qword [rsp + 0x50]
call fcn.1401db1bf
push rax
pushf
mov eax, 0x91cc013
pushf
not eax
add eax, 0xa28b342a
xor eax, 0xf041e6ca
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xab919812
xor eax, 0xed45b66d
rol eax, 0x34
popf
jmp 0x140112c1d
mov eax, r13d
push rax
pushf
mov eax, 0xafe86beb
pushf
not eax
add eax, 0xa73702a9
xor eax, 0x8eb06f13
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xdb456d04
xor eax, 0xf72e8bd4
rol eax, 0xa
popf
pushf
not eax
add eax, 0xc595d173
xor eax, 0xb55b11e8
rol eax, 0xbe
popf
jmp 0x140112c1d
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.140153126
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret