Function at 0x140643d6e
Capabilities:
Authenticate hmac
Enumerate files on windows
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xc2d03feb
pushf
not eax
add eax, 0xe02a6b45
xor eax, 0x8f1e2df2
rol eax, 0x10
popf
pushf
not eax
add eax, 0x82fec3e9
xor eax, 0xc7832bce
rol eax, 0x90
popf
pushf
not eax
add eax, 0xd1f16dc6
xor eax, 0xb786b1f5
rol eax, 0x4d
popf
cmp eax, 0x29
jne 0x140643dbe
popf
pop rax
jmp 0x14064575b
cmp eax, 0
jne 0x140643dcd
popf
pop rax
jmp 0x140644124
cmp eax, 3
jne 0x140643ddc
popf
pop rax
jmp 0x140644345
cmp eax, 1
jne 0x140643deb
popf
pop rax
jmp 0x14064422e
cmp eax, 0xd
jne 0x140643dfa
popf
pop rax
jmp 0x1406448f0
cmp eax, 0x1a
jne 0x140643e09
popf
pop rax
jmp 0x140644f60
cmp eax, 0xe
jne 0x140643e18
popf
pop rax
jmp 0x140644951
cmp eax, 0x31
jne 0x140643e27
popf
pop rax
jmp 0x140645b27
cmp eax, 0x19
jne 0x140643e36
popf
pop rax
jmp 0x140644f20
cmp eax, 8
jne 0x140643e45
popf
pop rax
jmp 0x140644612
cmp eax, 0x2a
jne 0x140643e54
popf
pop rax
jmp 0x1406457fe
cmp eax, 0x17
jne 0x140643e63
popf
pop rax
jmp 0x140644e5d
cmp eax, 0x1c
jne 0x140643e72
popf
pop rax
jmp 0x1406450ee
cmp eax, 0x2e
jne 0x140643e81
popf
pop rax
jmp 0x140645a5b
cmp eax, 0x18
jne 0x140643e90
popf
pop rax
jmp 0x140644ec0
cmp eax, 0x2b
jne 0x140643e9f
popf
pop rax
jmp 0x1406458a2
cmp eax, 0x1b
jne 0x140643eae
popf
pop rax
jmp 0x140645049
cmp eax, 0x2d
jne 0x140643ebd
popf
pop rax
jmp 0x1406459fa
cmp eax, 0x23
jne 0x140643ecc
popf
pop rax
jmp 0x14064545f
cmp eax, 0x25
jne 0x140643edb
popf
pop rax
jmp 0x1406454f9
cmp eax, 0x32
jne 0x140643eea
popf
pop rax
jmp 0x140645b8f
cmp eax, 0x13
jne 0x140643ef9
popf
pop rax
jmp 0x140644bf2
cmp eax, 0x33
jne 0x140643f08
popf
pop rax
jmp 0x140645c2c
cmp eax, 0x24
jne 0x140643f17
popf
pop rax
jmp 0x14064549d
cmp eax, 0x1e
jne 0x140643f26
popf
pop rax
jmp 0x1406451b3
cmp eax, 0xc
jne 0x140643f35
popf
pop rax
jmp 0x14064489e
cmp eax, 0x26
jne 0x140643f44
popf
pop rax
jmp 0x1406455ab
cmp eax, 0x27
jne 0x140643f53
popf
pop rax
jmp 0x140645664
cmp eax, 0x30
jne 0x140643f62
popf
pop rax
jmp 0x140645aac
cmp eax, 0x10
jne 0x140643f71
popf
pop rax
jmp 0x140644a78
cmp eax, 0x37
jne 0x140643f80
popf
pop rax
jmp 0x140645dcf
cmp eax, 9
jne 0x140643f8f
popf
pop rax
jmp 0x1406446b1
cmp eax, 0x39
jne 0x140643f9e
popf
pop rax
jmp 0x140645ea9
cmp eax, 0x16
jne 0x140643fad
popf
pop rax
jmp 0x140644d92
cmp eax, 0x28
jne 0x140643fbc
popf
pop rax
jmp 0x140645708
cmp eax, 0xa
jne 0x140643fcb
popf
pop rax
jmp 0x1406446e7
cmp eax, 0x36
jne 0x140643fda
popf
pop rax
jmp 0x140645d94
cmp eax, 0x14
jne 0x140643fe9
popf
pop rax
jmp 0x140644c57
cmp eax, 7
jne 0x140643ff8
popf
pop rax
jmp 0x140644579
cmp eax, 0x34
jne 0x140644007
popf
pop rax
jmp 0x140645c8f
cmp eax, 2
jne 0x140644016
popf
pop rax
jmp 0x1406442c2
cmp eax, 0x20
jne 0x140644025
popf
pop rax
jmp 0x1406452b4
cmp eax, 0x1d
jne 0x140644034
popf
pop rax
jmp 0x140645152
cmp eax, 0x11
jne 0x140644043
popf
pop rax
jmp 0x140644ab7
cmp eax, 0x35
jne 0x140644052
popf
pop rax
jmp 0x140645cdc
cmp eax, 0x3a
jne 0x140644061
popf
pop rax
jmp 0x140645ef2
cmp eax, 0x12
jne 0x140644070
popf
pop rax
jmp 0x140644b3a
cmp eax, 0x21
jne 0x14064407f
popf
pop rax
jmp 0x140645305
cmp eax, 0x38
jne 0x14064408e
popf
pop rax
jmp 0x140645e6c
cmp eax, 0xb
jne 0x14064409d
popf
pop rax
jmp 0x140644832
cmp eax, 0xf
jne 0x1406440ac
popf
pop rax
jmp 0x1406449c0
cmp eax, 0x15
jne 0x1406440bb
popf
pop rax
jmp 0x140644cb3
cmp eax, 5
jne 0x1406440ca
popf
pop rax
jmp 0x140644463
cmp eax, 6
jne 0x1406440d9
popf
pop rax
jmp 0x14064450b
cmp eax, 0x22
jne 0x1406440e8
popf
pop rax
jmp 0x1406453a7
cmp eax, 0x2c
jne 0x1406440f7
popf
pop rax
jmp 0x140645943
cmp eax, 0x1f
jne 0x140644106
popf
pop rax
jmp 0x140645248
cmp eax, 4
jne 0x140644115
popf
pop rax
jmp 0x1406443ce
cmp eax, 0x2f
jne 0x140644124
popf
pop rax
jmp 0x140645a93
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x14004b080]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0xa2cff80d40f3485
pushf
not rbx
add rbx, 0x63ebbd63
xor rbx, 0x74923163
rol rbx, 0
popf
pushf
not rbx
add rbx, 0x5dfcb10c
xor rbx, 0x628df743
rol rbx, 0x9b
popf
pushf
not rbx
add rbx, 0x7496d168
xor rbx, 0x552cf01c
rol rbx, 0xba
popf
pushf
not rbx
add rbx, 0x5c5a4fcb
xor rbx, 0x5b14a865
rol rbx, 3
popf
cmp rdx, rcx
je 0x1406441fb
push rax
pushf
mov eax, 0xb3cebe24
pushf
not eax
add eax, 0xe4fbef7e
xor eax, 0xd606b2ba
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x971e2e94
xor eax, 0x9e2461b3
rol eax, 0x57
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xcc0cef93
pushf
not eax
add eax, 0xea299588
xor eax, 0x844c5dbd
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xfb88772a
xor eax, 0xaebdef67
rol eax, 0x6f
popf
jmp 0x140643daf
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x140644269
push rax
pushf
mov eax, 0xbe580868
pushf
not eax
add eax, 0xd4186b75
xor eax, 0xa3de4915
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe18e036d
xor eax, 0xae21c708
rol eax, 0x1d
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xe5a8149b
pushf
not eax
add eax, 0xca7d897d
xor eax, 0xbfc4e3bd
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xc8d2dbb8
xor eax, 0xf99b594b
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x91b75b4f
xor eax, 0xf6647af7
rol eax, 0xf
popf
pushf
not eax
add eax, 0xcaf18fec
xor eax, 0xb51fcf2f
rol eax, 0xd4
popf
jmp 0x140643daf
movsx rax, al
bt rbx, rax
jb 0x1406442ff
push rax
pushf
mov eax, 0x19b33ccc
pushf
not eax
add eax, 0xf8d4158f
xor eax, 0xc135ad3b
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xe2f1650e
xor eax, 0x9b6c0797
rol eax, 0xbd
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xddcfb703
pushf
not eax
add eax, 0x9df67624
xor eax, 0xdfafb69d
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa1eef9fd
xor eax, 0xad738d49
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x98163936
xor eax, 0xf892bd40
rol eax, 0x91
popf
jmp 0x140643daf
mov rcx, rdi
call fcn.14064749a
mov rdx, rax
cmp rax, rdi
jne 0x140644388
push rax
pushf
mov eax, 0x1c275ad
pushf
not eax
add eax, 0xa826b66b
xor eax, 0x9f412b28
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xa106ee5a
xor eax, 0xae5fc9ac
rol eax, 3
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x73729b5c
pushf
not eax
add eax, 0xa57ddfa4
xor eax, 0x82a27449
rol eax, 0xee
popf
pushf
not eax
add eax, 0xe5b1d8fb
xor eax, 0xf03200ed
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xd5135ffa
xor eax, 0x9789c3cd
rol eax, 0xeb
popf
jmp 0x140643daf
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x14064441d
push rax
pushf
mov eax, 0x71e91fc6
pushf
not eax
add eax, 0xa6e195b4
xor eax, 0xc403926f
rol eax, 6
popf
pushf
not eax
add eax, 0xe29d166c
xor eax, 0xa4a4fac1
rol eax, 0x51
popf
pushf
not eax
add eax, 0x98d49f61
xor eax, 0xf9f89154
rol eax, 0x60
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x1ec99d2b
pushf
not eax
add eax, 0xb7c8b858
xor eax, 0x8c5e456e
rol eax, 0xed
popf
pushf
not eax
add eax, 0xaddcd17e
xor eax, 0x94160310
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xd339b3e3
xor eax, 0xaa5a2342
rol eax, 0x5a
popf
jmp 0x140643daf
lea rax, [rdi + 1]
cmp rdx, rax
je 0x1406444b2
push rax
pushf
mov eax, 0x6aed2e88
pushf
not eax
add eax, 0xb805b835
xor eax, 0x94319a6f
rol eax, 0x38
popf
pushf
not eax
add eax, 0xd74ed637
xor eax, 0xc926e03e
rol eax, 0x87
popf
pushf
not eax
add eax, 0xcbb6bb08
xor eax, 0xa2102c16
rol eax, 0xdf
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x70f1bf1c
pushf
not eax
add eax, 0xe0f1e527
xor eax, 0xce6c290e
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x96d2f71d
xor eax, 0xe38765a3
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xffe16426
xor eax, 0xc54dade8
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xfbb48de9
xor eax, 0x853c1843
rol eax, 0xe6
popf
jmp 0x140643daf
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1406a0de3
jmp 0x140645ef2
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x1406445cc
push rax
pushf
mov eax, 0xbe489879
pushf
not eax
add eax, 0xbe6ba27a
xor eax, 0xae70dec6
rol eax, 0x22
popf
pushf
not eax
add eax, 0x80271693
xor eax, 0xcd9aa907
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xc5cbed70
xor eax, 0xcc71821c
rol eax, 0x4b
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x4506f5b4
pushf
not eax
add eax, 0xa941b338
xor eax, 0xb229c867
rol eax, 0x11
popf
pushf
not eax
add eax, 0xe4a2199d
xor eax, 0xdb90746b
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xe6171f8f
xor eax, 0xc5e4e548
rol eax, 0x44
popf
jmp 0x140643daf
movsx rax, r8b
bt rbx, rax
mov al, 0x9b
pushf
not al
add al, 0x6d
xor al, 0xf6
rol al, 0xca
popf
pushf
not al
add al, 0x87
xor al, 0xca
rol al, 0xf3
popf
jb 0x14064467e
push rax
pushf
mov eax, 0x259329a7
pushf
not eax
add eax, 0xe784c2bc
xor eax, 0xbe4035cd
rol eax, 0xef
popf
pushf
not eax
add eax, 0x91efe2f9
xor eax, 0xf3943395
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xd8221c3f
xor eax, 0xaad0047a
rol eax, 0x37
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xfd4b8d93
pushf
not eax
add eax, 0xbd2e0f64
xor eax, 0x9de19219
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xdcca28f6
xor eax, 0xb84208a6
rol eax, 0xf7
popf
jmp 0x140643daf
mov al, r14b
push rax
pushf
mov eax, 0x5c4a5a9e
pushf
not eax
add eax, 0xeccd0454
xor eax, 0x9f6c464b
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xc93f7f0f
xor eax, 0xd1c7800d
rol eax, 0
popf
jmp 0x140643daf
sub rdx, rdi
lea rcx, [rbp - 0x20]
inc rdx
mov r8d, 0xed9a4535
pushf
not r8d
add r8d, 0xfdd0e717
xor r8d, 0x896cc2e8
rol r8d, 0x52
popf
pushf
not r8d
add r8d, 0x8a04eb8d
xor r8d, 0xaca286bc
rol r8d, 0x3d
popf
pushf
not r8d
add r8d, 0xe8c0ad47
xor r8d, 0xfe052d33
rol r8d, 0x92
popf
neg al
sbb r13, r13
and r13, rdx
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.14002f2d0
xor edx, edx
mov qword [rsp + 0x40], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
mov byte [rsp + 0x68], r14b
call fcn.14067c990
mov rax, qword [rsp + 0x78]
mov ecx, 0x52a0708e
pushf
not ecx
add ecx, 0x81320f5e
xor ecx, 0x804fb656
rol ecx, 0xd5
popf
pushf
not ecx
add ecx, 0xb188f885
xor ecx, 0x9eaef5bf
rol ecx, 0xf8
popf
cmp dword [rax + 0xc], ecx
jne 0x1406447ff
push rax
pushf
mov eax, 0xbe8141b1
pushf
not eax
add eax, 0xfcd42ece
xor eax, 0xcc3c8cea
rol eax, 0x69
popf
pushf
not eax
add eax, 0xcaa187be
xor eax, 0xbbd80926
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x87259734
xor eax, 0xbea72c31
rol eax, 0x52
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xf51739fb
pushf
not eax
add eax, 0xeaa17e3b
xor eax, 0xbfd15add
rol eax, 0x65
popf
pushf
not eax
add eax, 0xc19e0dfe
xor eax, 0x963a31b4
rol eax, 4
popf
jmp 0x140643daf
cmp byte [rbp - 0x78], r14b
je 0x14064486b
push rax
pushf
mov eax, 0xd1e019f0
pushf
not eax
add eax, 0xad84876d
xor eax, 0xa0c5ba2c
rol eax, 0x81
popf
pushf
not eax
add eax, 0x94d8c91b
xor eax, 0x9e151bfa
rol eax, 0xdb
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x6bda1182
pushf
not eax
add eax, 0xdc652a10
xor eax, 0xdb3e27a8
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x879d6b89
xor eax, 0xcc49632e
rol eax, 0x17
popf
jmp 0x140643daf
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x5c79c152
pushf
not eax
add eax, 0xe84fe122
xor eax, 0xf6e8f663
rol eax, 0x85
popf
pushf
not eax
add eax, 0xfd134fba
xor eax, 0x80db80ad
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xbf61808b
xor eax, 0xeb22d1ce
rol eax, 0x3c
popf
jmp 0x140643daf
mov r9d, ecx
jmp 0x140644cb3
call fcn.14068fc40
test eax, eax
jne 0x14064498d
push rax
pushf
mov eax, 0xaba6d26d
pushf
not eax
add eax, 0x984771a4
xor eax, 0x881ed5e9
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xbe025fae
xor eax, 0x989dad4e
rol eax, 0xf0
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x7b841069
pushf
not eax
add eax, 0xb7a7b1ae
xor eax, 0xa0345596
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9499c3e5
xor eax, 0x9fc7258d
rol eax, 0xbb
popf
jmp 0x140643daf
cmp byte [rbp - 0x78], r14b
je 0x140644a1f
push rax
pushf
mov eax, 0x2094a27
pushf
not eax
add eax, 0x95f8b300
xor eax, 0x85bb54a1
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xb5ae1f8f
xor eax, 0xa63b896e
rol eax, 0xca
popf
pushf
not eax
add eax, 0xd15c3fbd
xor eax, 0xa716f525
rol eax, 0x34
popf
pushf
not eax
add eax, 0xddb2d234
xor eax, 0x844179d1
rol eax, 0xbf
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x4f3e012f
pushf
not eax
add eax, 0xde1ca3f4
xor eax, 0x8c7d31c2
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa7236626
xor eax, 0xc7282bef
rol eax, 9
popf
pushf
not eax
add eax, 0xbdd30d4a
xor eax, 0xf63cc651
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xa688b15f
xor eax, 0x85eec56f
rol eax, 0xbd
popf
jmp 0x140643daf
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x1bd3bee4
pushf
not eax
add eax, 0x813a80ce
xor eax, 0xc71e8893
rol eax, 0x24
popf
pushf
not eax
add eax, 0xbe2c5700
xor eax, 0x92e7bf55
rol eax, 0x6a
popf
jmp 0x140643daf
mov r9d, 0xf1872383
pushf
not r9d
add r9d, 0xc82aaf04
xor r9d, 0xb2055ef8
rol r9d, 0x37
popf
pushf
not r9d
add r9d, 0xb058dfe3
xor r9d, 0xf4268c79
rol r9d, 0xe0
popf
jmp 0x140644cb3
cmp byte [rbp - 0x78], r14b
je 0x140644b99
push rax
pushf
mov eax, 0x1705c3c2
pushf
not eax
add eax, 0xdbd7d953
xor eax, 0xa0a24d11
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x9397c68f
xor eax, 0x932457f2
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x8d6db06d
xor eax, 0xd32548f9
rol eax, 0x61
popf
pushf
not eax
add eax, 0x823ede0c
xor eax, 0xbd0f8686
rol eax, 0xcd
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x2037b06d
pushf
not eax
add eax, 0x9e7348cf
xor eax, 0xa40667de
rol eax, 0x72
popf
pushf
not eax
add eax, 0xefb8c788
xor eax, 0x893bc799
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xf05a4d76
xor eax, 0x9877cbaa
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xbe125fe3
xor eax, 0xd216feb7
rol eax, 0x10
popf
jmp 0x140643daf
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x306e0fd8
pushf
not eax
add eax, 0x92ca3b36
xor eax, 0x8d7862b8
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xf56fc710
xor eax, 0xa67b6268
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xde69870c
xor eax, 0xf5c246f8
rol eax, 9
popf
pushf
not eax
add eax, 0xfe9c7dc4
xor eax, 0xdfe02ae6
rol eax, 0x59
popf
jmp 0x140643daf
mov r9d, r14d
push rax
pushf
mov eax, 0x3d10ad3e
pushf
not eax
add eax, 0xf81796eb
xor eax, 0xab595f69
rol eax, 0xca
popf
pushf
not eax
add eax, 0x97bb513a
xor eax, 0xab247718
rol eax, 0x66
popf
pushf
not eax
add eax, 0xa7170350
xor eax, 0x94651e6f
rol eax, 0x74
popf
pushf
not eax
add eax, 0xb2744598
xor eax, 0xddb21f8c
rol eax, 0x61
popf
jmp 0x140643daf
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.14060851d
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x140644ce4
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140644d39
push rax
pushf
mov eax, 0xfaf354e6
pushf
not eax
add eax, 0xb045a615
xor eax, 0xfb6e65a8
rol eax, 0xda
popf
pushf
not eax
add eax, 0x874a3795
xor eax, 0xbce1e7ea
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xeadc4f1b
xor eax, 0xc2094879
rol eax, 0xf8
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xcacfcaee
pushf
not eax
add eax, 0xbe007bb6
xor eax, 0x9f76ec6a
rol eax, 0xed
popf
pushf
not eax
add eax, 0xe3475e65
xor eax, 0xa6c8c58a
rol eax, 0x47
popf
pushf
not eax
add eax, 0xd223f5bf
xor eax, 0xc6f6a1bb
rol eax, 0x46
popf
pushf
not eax
add eax, 0xd110c14c
xor eax, 0xe915c557
rol eax, 0x79
popf
jmp 0x140643daf
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1406a0de3
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x140644e04
push rax
pushf
mov eax, 0xe0404995
pushf
not eax
add eax, 0x9b4cc650
xor eax, 0x80d1e0a0
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xac98fd77
xor eax, 0xdfef6e4c
rol eax, 0x99
popf
pushf
not eax
add eax, 0xce545f4c
xor eax, 0xf233bd2a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xf4f11cb1
xor eax, 0xb267b7f5
rol eax, 0xe3
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xd0e1716
pushf
not eax
add eax, 0x9525ead5
xor eax, 0x86a851ba
rol eax, 0xd
popf
pushf
not eax
add eax, 0xee8d3f38
xor eax, 0xb39c5699
rol eax, 0xad
popf
pushf
not eax
add eax, 0xcfe71405
xor eax, 0x9f430817
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf464a33f
xor eax, 0x9b377e5c
rol eax, 0x29
popf
jmp 0x140643daf
mov rcx, qword [rsp + 0x50]
call fcn.1406d037b
push rax
pushf
mov eax, 0xb13306c2
pushf
not eax
add eax, 0xffcd8d86
xor eax, 0xd71de733
rol eax, 0x69
popf
pushf
not eax
add eax, 0xafc7c848
xor eax, 0x9e3a6db6
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x916f3c7e
xor eax, 0x828b35e2
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x97189e52
xor eax, 0xe3199f2f
rol eax, 0x6e
popf
jmp 0x140643daf
mov eax, ebx
jmp 0x140645ef2
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0xe5105e42
pushf
not eax
add eax, 0x9e265bf6
xor eax, 0xe83407a9
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xdbb2f75a
xor eax, 0xe77e5816
rol eax, 0xf9
popf
jmp 0x140643daf
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.14067c990
mov rax, qword [rbp - 0x68]
mov ecx, 0x4bdf252c
pushf
not ecx
add ecx, 0xf52c599d
xor ecx, 0xfdcc1b16
rol ecx, 0x42
popf
pushf
not ecx
add ecx, 0xfbdee679
xor ecx, 0xea5c3e7c
rol ecx, 0x80
popf
pushf
not ecx
add ecx, 0xc635fd6d
xor ecx, 0x82d11249
rol ecx, 0x19
popf
cmp dword [rax + 0xc], ecx
jne 0x140645016
push rax
pushf
mov eax, 0xa25b5b6c
pushf
not eax
add eax, 0xeee09e4e
xor eax, 0xe0bceb1e
rol eax, 0xce
popf
pushf
not eax
add eax, 0xe19897ce
xor eax, 0xa3160b65
rol eax, 0xee
popf
pushf
not eax
add eax, 0x9231514c
xor eax, 0xe83a9df8
rol eax, 0x1c
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x689dca58
pushf
not eax
add eax, 0xb71214c4
xor eax, 0x966f1ee3
rol eax, 2
popf
pushf
not eax
add eax, 0x9b1a44cf
xor eax, 0xfaacf2a8
rol eax, 0xa3
popf
jmp 0x140643daf
cmp byte [rbp - 0x58], r14b
je 0x140645095
push rax
pushf
mov eax, 0x1e845659
pushf
not eax
add eax, 0xa934d1c8
xor eax, 0xa3700de1
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x8bf2fe91
xor eax, 0xc62390de
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xcb7f0cdb
xor eax, 0xb064ea60
rol eax, 0x7d
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xadd6b3fd
pushf
not eax
add eax, 0xf9a5d044
xor eax, 0xfc88f1fc
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8d4ca770
xor eax, 0x9818ffaa
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe6dcb2b7
xor eax, 0x8e2e40f0
rol eax, 0x62
popf
pushf
not eax
add eax, 0xc82723a3
xor eax, 0xc9df609a
rol eax, 0x91
popf
jmp 0x140643daf
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x5bc93ee0
pushf
not eax
add eax, 0x97579b41
xor eax, 0xabbe6098
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xf5933cb7
xor eax, 0xfdefb458
rol eax, 0x88
popf
pushf
not eax
add eax, 0x8d2d6e2f
xor eax, 0xc472c15a
rol eax, 0x85
popf
pushf
not eax
add eax, 0xbcc702a1
xor eax, 0xc8e4d6d6
rol eax, 0x30
popf
jmp 0x140643daf
mov r9d, ecx
jmp 0x1406454f9
call fcn.14068fc40
test eax, eax
jne 0x140645215
push rax
pushf
mov eax, 0x315d1181
pushf
not eax
add eax, 0xc4250cce
xor eax, 0xa834143c
rol eax, 0x43
popf
pushf
not eax
add eax, 0x85ce008a
xor eax, 0xc4e44731
rol eax, 0xea
popf
pushf
not eax
add eax, 0xdce4980c
xor eax, 0x9a000bb5
rol eax, 0x99
popf
pushf
not eax
add eax, 0x98c2f979
xor eax, 0x926b4205
rol eax, 0x46
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x3a12f31f
pushf
not eax
add eax, 0xd165fc01
xor eax, 0x8059ec1a
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb7aa8a59
xor eax, 0xcef23330
rol eax, 0xe5
popf
jmp 0x140643daf
cmp byte [rbp - 0x58], r14b
je 0x140645281
push rax
pushf
mov eax, 0x8c76fb6c
pushf
not eax
add eax, 0xa5f86399
xor eax, 0x95cc1bba
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xdb6db267
xor eax, 0x9146f89b
rol eax, 0x8b
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xb368cb54
pushf
not eax
add eax, 0xf206f14b
xor eax, 0x85103a69
rol eax, 5
popf
pushf
not eax
add eax, 0xf915d44f
xor eax, 0x8f11e057
rol eax, 0x8a
popf
jmp 0x140643daf
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x2ae3e4bb
pushf
not eax
add eax, 0xf16559ff
xor eax, 0xdbece9e5
rol eax, 0x13
popf
pushf
not eax
add eax, 0x835ba913
xor eax, 0x9af1db69
rol eax, 0x98
popf
pushf
not eax
add eax, 0x99bc9752
xor eax, 0xcab7ab6b
rol eax, 0xb9
popf
jmp 0x140643daf
mov r9d, 0x4b521c71
pushf
not r9d
add r9d, 0xaf01a86c
xor r9d, 0x9318f1c8
rol r9d, 0x40
popf
pushf
not r9d
add r9d, 0xf580ec93
xor r9d, 0xd57ed9c8
rol r9d, 0x31
popf
pushf
not r9d
add r9d, 0xdfec0b78
xor r9d, 0x8790b00d
rol r9d, 0x35
popf
pushf
not r9d
add r9d, 0xd8668ec9
xor r9d, 0xd7c4ad6f
rol r9d, 0x7f
popf
jmp 0x1406454f9
cmp byte [rbp - 0x58], r14b
je 0x140645406
push rax
pushf
mov eax, 0x83818c89
pushf
not eax
add eax, 0xe079a5ed
xor eax, 0x96f2070c
rol eax, 0x14
popf
pushf
not eax
add eax, 0x850250e1
xor eax, 0xd97cb688
rol eax, 0x80
popf
pushf
not eax
add eax, 0x9fa347d4
xor eax, 0x9390c02d
rol eax, 0x11
popf
pushf
not eax
add eax, 0x9fcdfb82
xor eax, 0x9d2c640c
rol eax, 0xf
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xcb7f5a3
pushf
not eax
add eax, 0x8bb4bcf7
xor eax, 0xbabe8174
rol eax, 0x39
popf
pushf
not eax
add eax, 0xb9fb154e
xor eax, 0xc01102d6
rol eax, 6
popf
pushf
not eax
add eax, 0xd2463aad
xor eax, 0x9c6470ad
rol eax, 0x80
popf
pushf
not eax
add eax, 0x99282b15
xor eax, 0xf42346a5
rol eax, 0xd5
popf
jmp 0x140643daf
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x31c4319e
pushf
not eax
add eax, 0xe7646940
xor eax, 0xbd4de022
rol eax, 0x76
popf
pushf
not eax
add eax, 0x9ca22ee2
xor eax, 0xbb4ff36c
rol eax, 0xae
popf
jmp 0x140643daf
mov r9d, r14d
push rax
pushf
mov eax, 0xb09840d2
pushf
not eax
add eax, 0xa37e8dd5
xor eax, 0xdb6ba1c7
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa4921a58
xor eax, 0xfc57bf73
rol eax, 0x28
popf
pushf
not eax
add eax, 0xc2fb48e9
xor eax, 0x8ca4a691
rol eax, 0x11
popf
pushf
not eax
add eax, 0xa41a49f8
xor eax, 0xe239d835
rol eax, 0xba
popf
jmp 0x140643daf
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.1405fbc63
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x140645578
push rax
pushf
mov eax, 0xc671161c
pushf
not eax
add eax, 0xb136d51e
xor eax, 0xe8d16226
rol eax, 0x17
popf
pushf
not eax
add eax, 0x9a96a70c
xor eax, 0xfdd684bb
rol eax, 0x79
popf
pushf
not eax
add eax, 0xf55f388e
xor eax, 0xc9409d61
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xbd2c6e32
xor eax, 0xc1a22260
rol eax, 0x64
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xe5534d59
pushf
not eax
add eax, 0xfb02dad8
xor eax, 0xe2b2b9b0
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xfe1bdc3e
xor eax, 0x8eaa08e4
rol eax, 0xc1
popf
jmp 0x140643daf
mov al, byte [rcx + 1]
test al, al
jne 0x14064560b
push rax
pushf
mov eax, 0xd143bb1f
pushf
not eax
add eax, 0xaa81e082
xor eax, 0xedbe1a51
rol eax, 2
popf
pushf
not eax
add eax, 0x8e16009a
xor eax, 0xc61d9499
rol eax, 0x72
popf
pushf
not eax
add eax, 0xb6341ddc
xor eax, 0x87f56a9a
rol eax, 0x55
popf
pushf
not eax
add eax, 0xcb90e441
xor eax, 0xe3f50155
rol eax, 0xab
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xf1f799d8
pushf
not eax
add eax, 0xb1f3630c
xor eax, 0x8a143786
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x95b6653a
xor eax, 0xee77fa09
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xe663d615
xor eax, 0x94555f4e
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xf1c82bf3
xor eax, 0xe4e1c701
rol eax, 0x23
popf
jmp 0x140643daf
cmp byte [rbp - 0x28], dl
je 0x1406456af
push rax
pushf
mov eax, 0x7b5fcacd
pushf
not eax
add eax, 0xb71a202e
xor eax, 0xda806231
rol eax, 0x31
popf
pushf
not eax
add eax, 0xd5d5705f
xor eax, 0x95df2cde
rol eax, 0x52
popf
pushf
not eax
add eax, 0xf47498c4
xor eax, 0xe5a0cd09
rol eax, 0xca
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xb29bb2f3
pushf
not eax
add eax, 0x86e52c49
xor eax, 0x84a008b9
rol eax, 0x45
popf
pushf
not eax
add eax, 0xaf557c2f
xor eax, 0xab64c1ad
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc7a953c1
xor eax, 0xcd31a9e8
rol eax, 0x26
popf
pushf
not eax
add eax, 0x91890644
xor eax, 0xea393965
rol eax, 0xf
popf
jmp 0x140643daf
mov rcx, r14
call fcn.1406d037b
jmp 0x140645a93
cmp al, 0x2e
jne 0x1406457b8
push rax
pushf
mov eax, 0xee5b7099
pushf
not eax
add eax, 0x8d5c3e84
xor eax, 0xa97036ad
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa347d034
xor eax, 0x81a7a00f
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8436edff
xor eax, 0xefb2ce49
rol eax, 0xf
popf
pushf
not eax
add eax, 0xd72089f2
xor eax, 0xeba4d87e
rol eax, 0xa
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xf8e132c7
pushf
not eax
add eax, 0xc91f8598
xor eax, 0x98e65018
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xf7f98e40
xor eax, 0xf6e377f8
rol eax, 0xec
popf
pushf
not eax
add eax, 0xc2b1965f
xor eax, 0x81f84644
rol eax, 0x12
popf
jmp 0x140643daf
cmp byte [rcx + 2], dl
je 0x140645849
push rax
pushf
mov eax, 0x16f8b42c
pushf
not eax
add eax, 0xcade6d87
xor eax, 0xbb538c70
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xec47113b
xor eax, 0xe86dc12d
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xf2bfa01b
xor eax, 0xcf5aaa22
rol eax, 0xa1
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x6635ca34
pushf
not eax
add eax, 0xd9e353e8
xor eax, 0x9e77b64b
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xb6027577
xor eax, 0xa06a3fba
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe5190253
xor eax, 0x8967e07e
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xee3c2121
xor eax, 0xda9a3685
rol eax, 0x4d
popf
jmp 0x140643daf
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.1406a0de3
mov r13d, eax
test eax, eax
jne 0x1406458fd
push rax
pushf
mov eax, 0x86faf7f5
pushf
not eax
add eax, 0x802ea06e
xor eax, 0xa3f577b7
rol eax, 0x42
popf
pushf
not eax
add eax, 0xbc09435b
xor eax, 0xb85e7644
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x9397c6cf
xor eax, 0xf604f7a5
rol eax, 0
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xe509479e
pushf
not eax
add eax, 0xfb1a11ee
xor eax, 0xbd100edf
rol eax, 0x37
popf
pushf
not eax
add eax, 0xe8f2aede
xor eax, 0xba93595c
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xcad51a37
xor eax, 0xfbf003f5
rol eax, 0x98
popf
jmp 0x140643daf
cmp byte [rbp - 0x28], al
je 0x1406459a1
push rax
pushf
mov eax, 0xd149e386
pushf
not eax
add eax, 0x9d817872
xor eax, 0xd79aa6f9
rol eax, 4
popf
pushf
not eax
add eax, 0xabcb55e9
xor eax, 0xb523f040
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xcbfb94c4
xor eax, 0x9449611d
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xb79a3261
xor eax, 0x83c44151
rol eax, 0x91
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x54d0b09e
pushf
not eax
add eax, 0xb4bd36e3
xor eax, 0xfc17570a
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x86a86a0d
xor eax, 0xccab0672
rol eax, 0x21
popf
pushf
not eax
add eax, 0xcd66b928
xor eax, 0x8d1c949a
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xb64cf797
xor eax, 0xbdaef535
rol eax, 0xb5
popf
jmp 0x140643daf
mov rcx, r14
call fcn.1406d037b
push rax
pushf
mov eax, 0xf9ec0f17
pushf
not eax
add eax, 0xba96d91e
xor eax, 0x8b09b391
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xb3fdb926
xor eax, 0xce4363da
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xfc6cec41
xor eax, 0xdeb4e2f6
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xe68fc45e
xor eax, 0xf4558dce
rol eax, 0x66
popf
jmp 0x140643daf
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xc55fd89e
pushf
not eax
add eax, 0x8e2c96bc
xor eax, 0x829513b2
rol eax, 0x94
popf
pushf
not eax
add eax, 0xca859ed5
xor eax, 0xef90a73a
rol eax, 0x17
popf
jmp 0x140643daf
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x140645a9b
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x140644f60
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x140645af4
push rax
pushf
mov eax, 0x4f3e8a88
pushf
not eax
add eax, 0xdc18b5bc
xor eax, 0x998b61fa
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xfd868546
xor eax, 0xdb545bec
rol eax, 0xed
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0xe1403e46
pushf
not eax
add eax, 0xac2178c9
xor eax, 0xbbb28964
rol eax, 0xea
popf
pushf
not eax
add eax, 0xd62a204c
xor eax, 0x875b1686
rol eax, 0x35
popf
jmp 0x140643daf
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x1a56ae9e3]
pushf
sub r9, 0x656868c7
popf
lea r8d, [r14 + 8]
call fcn.1406ad363
push rax
pushf
mov eax, 0xe07a3be8
pushf
not eax
add eax, 0xc2c13e4e
xor eax, 0xc157dd60
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x9fed30f6
xor eax, 0xc9600e9e
rol eax, 0x76
popf
pushf
not eax
add eax, 0xbc5e9ffb
xor eax, 0xc6acdec7
rol eax, 0x8b
popf
jmp 0x140643daf
mov rcx, rbx
jmp 0x140645b93
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x140645bd3
push rax
pushf
mov eax, 0xd046b8ed
pushf
not eax
add eax, 0xa6235a9c
xor eax, 0x84c08ce2
rol eax, 8
popf
pushf
not eax
add eax, 0xab408950
xor eax, 0x8e8b3cfe
rol eax, 0x4d
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x738cf19a
pushf
not eax
add eax, 0xb1685b39
xor eax, 0x8088cc2b
rol eax, 0xec
popf
pushf
not eax
add eax, 0xc2af65fe
xor eax, 0xd43e919a
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa5cc3b63
xor eax, 0xd710b654
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xe9f29c5e
xor eax, 0xf831def7
rol eax, 0xcf
popf
jmp 0x140643daf
mov rcx, qword [rsp + 0x50]
call fcn.1406d037b
push rax
pushf
mov eax, 0xef15ec0c
pushf
not eax
add eax, 0xd0e77c56
xor eax, 0x8fa5fb3e
rol eax, 0xed
popf
pushf
not eax
add eax, 0x83412440
xor eax, 0xb6f36796
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xa66ec7b4
xor eax, 0xad883333
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xfbeda29e
xor eax, 0xc03bdf75
rol eax, 0x3e
popf
jmp 0x140643daf
xor eax, eax
jmp 0x140645ef2
cmp byte [rbp - 0x28], 0
je 0x140645d3b
push rax
pushf
mov eax, 0xc49c17b3
pushf
not eax
add eax, 0xf112e1c5
xor eax, 0xf5e948b2
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xba152c7e
xor eax, 0xdccb51bd
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd5db825c
xor eax, 0x819d4f04
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x91dbcb00
xor eax, 0xd9e40fed
rol eax, 0x27
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x42d24a66
pushf
not eax
add eax, 0xf44d7f5d
xor eax, 0xfd552e80
rol eax, 0x56
popf
pushf
not eax
add eax, 0x9bc65472
xor eax, 0x989c1e25
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd76c31ab
xor eax, 0x9e4e33aa
rol eax, 0x43
popf
pushf
not eax
add eax, 0x9b6fbdb0
xor eax, 0xdf95363a
rol eax, 0xc8
popf
jmp 0x140643daf
mov rcx, r14
call fcn.1406d037b
push rax
pushf
mov eax, 0x79a5db3f
pushf
not eax
add eax, 0x97cc4e68
xor eax, 0x8d5bb18e
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe38aa7e1
xor eax, 0xe2ab3737
rol eax, 0x66
popf
jmp 0x140643daf
mov rcx, rbx
jmp 0x140645dd3
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x140645e39
push rax
pushf
mov eax, 0x5b7ea64f
pushf
not eax
add eax, 0xfb5983df
xor eax, 0xcda2e58d
rol eax, 0x85
popf
pushf
not eax
add eax, 0xfa7c6416
xor eax, 0xc09196b0
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xdbafc079
xor eax, 0xef815a45
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xe2e49557
xor eax, 0xe7bb44d7
rol eax, 0xd6
popf
jmp 0x140643daf
push rax
pushf
mov eax, 0x8fc2f4a7
pushf
not eax
add eax, 0xd451272c
xor eax, 0xc88d8952
rol eax, 0xea
popf
pushf
not eax
add eax, 0xb2039ac7
xor eax, 0xa3f04096
rol eax, 0xee
popf
jmp 0x140643daf
mov rcx, qword [rsp + 0x50]
call fcn.1406d037b
push rax
pushf
mov eax, 0xeaefac7f
pushf
not eax
add eax, 0xabbace40
xor eax, 0x88e1a986
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xdee7ae5e
xor eax, 0xb89f83d2
rol eax, 0x43
popf
jmp 0x140643daf
mov eax, r13d
push rax
pushf
mov eax, 0xc550c90a
pushf
not eax
add eax, 0x97c12a2f
xor eax, 0xa093f60c
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xfbdd039b
xor eax, 0xd7462256
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xc6c295ab
xor eax, 0xa9b7e27b
rol eax, 0x59
popf
jmp 0x140643daf
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.14066b1de
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret