Function at 0x1401c8b9d
Capabilities:
Enumerate files on windows

Disassembly:
push rax
pushf
mov eax, 0xd2d4664e
pushf
not eax
add eax, 0x848e8492
xor eax, 0xdd0d5980
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x83f209ac
xor eax, 0xcd9665ca
rol eax, 0xb0
popf
cmp eax, 0x29
jne 0x1401c8bda
popf
pop rax
jmp 0x1401ca55f
cmp eax, 0
jne 0x1401c8be9
popf
pop rax
jmp 0x1401c8f40
cmp eax, 3
jne 0x1401c8bf8
popf
pop rax
jmp 0x1401c9194
cmp eax, 1
jne 0x1401c8c07
popf
pop rax
jmp 0x1401c9044
cmp eax, 0xd
jne 0x1401c8c16
popf
pop rax
jmp 0x1401c9789
cmp eax, 0x1a
jne 0x1401c8c25
popf
pop rax
jmp 0x1401c9dc5
cmp eax, 0xe
jne 0x1401c8c34
popf
pop rax
jmp 0x1401c97ea
cmp eax, 0x31
jne 0x1401c8c43
popf
pop rax
jmp 0x1401ca8cc
cmp eax, 0x19
jne 0x1401c8c52
popf
pop rax
jmp 0x1401c9d72
cmp eax, 8
jne 0x1401c8c61
popf
pop rax
jmp 0x1401c9460
cmp eax, 0x2a
jne 0x1401c8c70
popf
pop rax
jmp 0x1401ca5dc
cmp eax, 0x17
jne 0x1401c8c7f
popf
pop rax
jmp 0x1401c9cd5
cmp eax, 0x1c
jne 0x1401c8c8e
popf
pop rax
jmp 0x1401c9f3e
cmp eax, 0x2e
jne 0x1401c8c9d
popf
pop rax
jmp 0x1401ca7b4
cmp eax, 0x18
jne 0x1401c8cac
popf
pop rax
jmp 0x1401c9d25
cmp eax, 0x2b
jne 0x1401c8cbb
popf
pop rax
jmp 0x1401ca647
cmp eax, 0x1b
jne 0x1401c8cca
popf
pop rax
jmp 0x1401c9eac
cmp eax, 0x2d
jne 0x1401c8cd9
popf
pop rax
jmp 0x1401ca766
cmp eax, 0x23
jne 0x1401c8ce8
popf
pop rax
jmp 0x1401ca29c
cmp eax, 0x25
jne 0x1401c8cf7
popf
pop rax
jmp 0x1401ca336
cmp eax, 0x32
jne 0x1401c8d06
popf
pop rax
jmp 0x1401ca947
cmp eax, 0x13
jne 0x1401c8d15
popf
pop rax
jmp 0x1401c9ab7
cmp eax, 0x33
jne 0x1401c8d24
popf
pop rax
jmp 0x1401ca9f7
cmp eax, 0x24
jne 0x1401c8d33
popf
pop rax
jmp 0x1401ca300
cmp eax, 0x1e
jne 0x1401c8d42
popf
pop rax
jmp 0x1401c9ff0
cmp eax, 0xc
jne 0x1401c8d51
popf
pop rax
jmp 0x1401c9724
cmp eax, 0x26
jne 0x1401c8d60
popf
pop rax
jmp 0x1401ca3e8
cmp eax, 0x27
jne 0x1401c8d6f
popf
pop rax
jmp 0x1401ca47b
cmp eax, 0x30
jne 0x1401c8d7e
popf
pop rax
jmp 0x1401ca818
cmp eax, 0x10
jne 0x1401c8d8d
popf
pop rax
jmp 0x1401c9924
cmp eax, 0x37
jne 0x1401c8d9c
popf
pop rax
jmp 0x1401cab87
cmp eax, 9
jne 0x1401c8dab
popf
pop rax
jmp 0x1401c9545
cmp eax, 0x39
jne 0x1401c8dba
popf
pop rax
jmp 0x1401cac74
cmp eax, 0x16
jne 0x1401c8dc9
popf
pop rax
jmp 0x1401c9c30
cmp eax, 0x28
jne 0x1401c8dd8
popf
pop rax
jmp 0x1401ca51f
cmp eax, 0xa
jne 0x1401c8de7
popf
pop rax
jmp 0x1401c957b
cmp eax, 0x36
jne 0x1401c8df6
popf
pop rax
jmp 0x1401cab4c
cmp eax, 0x14
jne 0x1401c8e05
popf
pop rax
jmp 0x1401c9b09
cmp eax, 7
jne 0x1401c8e14
popf
pop rax
jmp 0x1401c93a1
cmp eax, 0x34
jne 0x1401c8e23
popf
pop rax
jmp 0x1401caa5a
cmp eax, 2
jne 0x1401c8e32
popf
pop rax
jmp 0x1401c90fe
cmp eax, 0x20
jne 0x1401c8e41
popf
pop rax
jmp 0x1401ca117
cmp eax, 0x1d
jne 0x1401c8e50
popf
pop rax
jmp 0x1401c9f8f
cmp eax, 0x11
jne 0x1401c8e5f
popf
pop rax
jmp 0x1401c9989
cmp eax, 0x35
jne 0x1401c8e6e
popf
pop rax
jmp 0x1401caa94
cmp eax, 0x3a
jne 0x1401c8e7d
popf
pop rax
jmp 0x1401cacaa
cmp eax, 0x12
jne 0x1401c8e8c
popf
pop rax
jmp 0x1401c9a12
cmp eax, 0x21
jne 0x1401c8e9b
popf
pop rax
jmp 0x1401ca155
cmp eax, 0x38
jne 0x1401c8eaa
popf
pop rax
jmp 0x1401cac24
cmp eax, 0xb
jne 0x1401c8eb9
popf
pop rax
jmp 0x1401c9692
cmp eax, 0xf
jne 0x1401c8ec8
popf
pop rax
jmp 0x1401c9892
cmp eax, 0x15
jne 0x1401c8ed7
popf
pop rax
jmp 0x1401c9b3e
cmp eax, 5
jne 0x1401c8ee6
popf
pop rax
jmp 0x1401c92c5
cmp eax, 6
jne 0x1401c8ef5
popf
pop rax
jmp 0x1401c9333
cmp eax, 0x22
jne 0x1401c8f04
popf
pop rax
jmp 0x1401ca20a
cmp eax, 0x2c
jne 0x1401c8f13
popf
pop rax
jmp 0x1401ca6e8
cmp eax, 0x1f
jne 0x1401c8f22
popf
pop rax
jmp 0x1401ca098
cmp eax, 4
jne 0x1401c8f31
popf
pop rax
jmp 0x1401c9243
cmp eax, 0x2f
jne 0x1401c8f40
popf
pop rax
jmp 0x1401ca7ff
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x1400a21c0]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0xf6db8693e605a36
pushf
not rbx
add rbx, 0x778e7401
xor rbx, 0x48dce736
rol rbx, 0xa7
popf
pushf
not rbx
add rbx, 0x5b289c5c
xor rbx, 0x6cfb30a3
rol rbx, 0x24
popf
pushf
not rbx
add rbx, 0x788264f5
xor rbx, 0x507a4c6d
rol rbx, 0x8f
popf
cmp rdx, rcx
je 0x1401c9011
push rax
pushf
mov eax, 0x6cf34058
pushf
not eax
add eax, 0xd9b3d95d
xor eax, 0xa5d761b1
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xb3e850e3
xor eax, 0xaa089a82
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xa743cc55
xor eax, 0x93a1d7c3
rol eax, 0xd3
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x31de75bb
pushf
not eax
add eax, 0xb062bc90
xor eax, 0xc168342a
rol eax, 0x22
popf
pushf
not eax
add eax, 0x876da052
xor eax, 0x87bfd457
rol eax, 0x30
popf
jmp 0x1401c8bcb
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x1401c90a5
push rax
pushf
mov eax, 0xc2a650e9
pushf
not eax
add eax, 0xf342f12d
xor eax, 0xa0b64d5c
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc353998c
xor eax, 0xc26ec86d
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x9f7f4a32
xor eax, 0x914ce2fd
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xe881ccae
xor eax, 0xb7ed2973
rol eax, 0xe5
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x44071b34
pushf
not eax
add eax, 0xe372f4c6
xor eax, 0xacb1cdbb
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x84e788f1
xor eax, 0xcba63807
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xc21c3c33
xor eax, 0xbbbd22eb
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xbf064d09
xor eax, 0xfd6d6ee2
rol eax, 0xa6
popf
jmp 0x1401c8bcb
movsx rax, al
bt rbx, rax
jb 0x1401c913b
push rax
pushf
mov eax, 0x2e53bb7f
pushf
not eax
add eax, 0xdf260be0
xor eax, 0xb18187cb
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xe53b1217
xor eax, 0x9d636715
rol eax, 0xe6
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xcc188918
pushf
not eax
add eax, 0xccfff053
xor eax, 0xce8d72a7
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xa005d191
xor eax, 0xbfcdaa69
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe74bb6b9
xor eax, 0xcfa8fe73
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc486d621
xor eax, 0x9932dad5
rol eax, 0x7d
popf
jmp 0x1401c8bcb
mov rcx, rdi
call fcn.1401ce695
mov rdx, rax
cmp rax, rdi
jne 0x1401c91ea
push rax
pushf
mov eax, 0x668908e7
pushf
not eax
add eax, 0x825dbf4f
xor eax, 0xc5394c84
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xce14df70
xor eax, 0xfe314f07
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xcc478079
xor eax, 0xf7b66f35
rol eax, 0xf1
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x98b4f4a0
pushf
not eax
add eax, 0x9a025001
xor eax, 0xaf35f329
rol eax, 0x66
popf
pushf
not eax
add eax, 0x9c04b918
xor eax, 0xf8581bef
rol eax, 0x14
popf
pushf
not eax
add eax, 0x992d93e0
xor eax, 0xf0ec5259
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xc3419395
xor eax, 0x9603ed52
rol eax, 0xba
popf
jmp 0x1401c8bcb
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x1401c9292
push rax
pushf
mov eax, 0x2318303b
pushf
not eax
add eax, 0x9fd33096
xor eax, 0x9fb152f2
rol eax, 0x86
popf
pushf
not eax
add eax, 0xc62d4ed3
xor eax, 0xaa229420
rol eax, 0xba
popf
pushf
not eax
add eax, 0x8a63c9df
xor eax, 0x9fbc411c
rol eax, 0x93
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x81a61ed1
pushf
not eax
add eax, 0xf6758ff8
xor eax, 0xc6ea78a9
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa8f46e6e
xor eax, 0x82b2a5d9
rol eax, 0x50
popf
jmp 0x1401c8bcb
lea rax, [rdi + 1]
cmp rdx, rax
je 0x1401c9300
push rax
pushf
mov eax, 0xa8f73565
pushf
not eax
add eax, 0xc64ad150
xor eax, 0xeed4c61f
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc1666816
xor eax, 0xd1b6cbd8
rol eax, 1
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x6df025a7
pushf
not eax
add eax, 0xea8aedc3
xor eax, 0xd2477227
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x8b69856a
xor eax, 0xd426ef8e
rol eax, 0x10
popf
jmp 0x1401c8bcb
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140295944
jmp 0x1401cacaa
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x1401c9407
push rax
pushf
mov eax, 0xed515975
pushf
not eax
add eax, 0x9938074d
xor eax, 0xa71b6b3b
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x8e5c482f
xor eax, 0x87bfe4e9
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x9a0ebaa7
xor eax, 0xd62a2ebe
rol eax, 0x72
popf
pushf
not eax
add eax, 0xf0d94f71
xor eax, 0xe04e8ecf
rol eax, 0x77
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x950e8c4e
pushf
not eax
add eax, 0xb40a1249
xor eax, 0xe9f894b0
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xd45b9fd7
xor eax, 0xe917bbb2
rol eax, 0x37
popf
pushf
not eax
add eax, 0x8d4fe561
xor eax, 0xb8406677
rol eax, 0x46
popf
pushf
not eax
add eax, 0xd6a12afb
xor eax, 0xfd97c850
rol eax, 0x68
popf
jmp 0x1401c8bcb
movsx rax, r8b
bt rbx, rax
mov al, 0x92
pushf
not al
add al, 0x4e
xor al, 0x47
rol al, 0xc4
popf
pushf
not al
add al, 0xe1
xor al, 0xac
rol al, 0x8b
popf
pushf
not al
add al, 0x88
xor al, 0xda
rol al, 0xda
popf
jb 0x1401c94ec
push rax
pushf
mov eax, 0x20053ce8
pushf
not eax
add eax, 0x82931fc3
xor eax, 0x8bea6599
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xd3001bd4
xor eax, 0xf8202b29
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xfd954d96
xor eax, 0x9a0fff36
rol eax, 3
popf
pushf
not eax
add eax, 0x8487e258
xor eax, 0xfb5210b5
rol eax, 9
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xd59ac6a2
pushf
not eax
add eax, 0xaa2fec70
xor eax, 0x91884268
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xc40d7be3
xor eax, 0xf6c0e6d0
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xf869da58
xor eax, 0xf5da2254
rol eax, 0x53
popf
pushf
not eax
add eax, 0xb9ad8e21
xor eax, 0x87e0c304
rol eax, 0x4e
popf
jmp 0x1401c8bcb
mov al, r14b
push rax
pushf
mov eax, 0x124566b1
pushf
not eax
add eax, 0xe5cbc357
xor eax, 0xe7086f03
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x83c21a46
xor eax, 0xf69edd5c
rol eax, 0x75
popf
jmp 0x1401c8bcb
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.140237ed5
mov rax, qword [rsp + 0x78]
mov ecx, 0x7123986c
pushf
not ecx
add ecx, 0xe8892edb
xor ecx, 0xd90fc77a
rol ecx, 4
popf
pushf
not ecx
add ecx, 0x8b304a64
xor ecx, 0xef3be9a1
rol ecx, 0xde
popf
pushf
not ecx
add ecx, 0xaed4976c
xor ecx, 0x9be998ef
rol ecx, 0x1f
popf
cmp dword [rax + 0xc], ecx
jne 0x1401c964c
push rax
pushf
mov eax, 0x8591f32b
pushf
not eax
add eax, 0xc74e6b81
xor eax, 0xbead9a22
rol eax, 0x80
popf
pushf
not eax
add eax, 0xcc89aca3
xor eax, 0xd095993d
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xbd53e8ff
xor eax, 0x91180858
rol eax, 0xd6
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xe349bf37
pushf
not eax
add eax, 0xacdc3761
xor eax, 0xf8308396
rol eax, 0x85
popf
pushf
not eax
add eax, 0xcb1dd332
xor eax, 0xa40a21dd
rol eax, 4
popf
pushf
not eax
add eax, 0xfe1125d0
xor eax, 0xcec97c6c
rol eax, 0x27
popf
jmp 0x1401c8bcb
cmp byte [rbp - 0x78], r14b
je 0x1401c96f1
push rax
pushf
mov eax, 0x698c7c45
pushf
not eax
add eax, 0xd2d255ac
xor eax, 0xaa17e2ca
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xbd422af2
xor eax, 0xcbe4b65d
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf00a3b02
xor eax, 0x81c6a1a3
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xa0631ffd
xor eax, 0xe7364062
rol eax, 0xa
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xa9db38d
pushf
not eax
add eax, 0xa2db4bbe
xor eax, 0x976c0f45
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xe16b31a2
xor eax, 0x9b0cfd64
rol eax, 0xf3
popf
jmp 0x1401c8bcb
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x25dd791d
pushf
not eax
add eax, 0x9c90f4f6
xor eax, 0xd4693291
rol eax, 0x28
popf
pushf
not eax
add eax, 0x9e042732
xor eax, 0xe9ca0a7c
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xb54976a3
xor eax, 0xc7e55fd9
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9c54bc77
xor eax, 0xe48294bd
rol eax, 0x59
popf
jmp 0x1401c8bcb
mov r9d, ecx
jmp 0x1401c9b3e
call fcn.14027ee59
test eax, eax
jne 0x1401c9839
push rax
pushf
mov eax, 0xa05cca1b
pushf
not eax
add eax, 0xd29f3664
xor eax, 0xf26a7766
rol eax, 0xa
popf
pushf
not eax
add eax, 0x96225571
xor eax, 0xb7038eec
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x9af32a57
xor eax, 0xd6c7c60d
rol eax, 0xf8
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x9e11acc
pushf
not eax
add eax, 0xdfcce300
xor eax, 0xe6a79161
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x843abc24
xor eax, 0xd0adc55d
rol eax, 0x29
popf
pushf
not eax
add eax, 0xbbd10b27
xor eax, 0xaa28a138
rol eax, 0x13
popf
pushf
not eax
add eax, 0xc015c920
xor eax, 0xa14571d2
rol eax, 0xfb
popf
jmp 0x1401c8bcb
cmp byte [rbp - 0x78], r14b
je 0x1401c98cb
push rax
pushf
mov eax, 0x30875256
pushf
not eax
add eax, 0xbbdfd45a
xor eax, 0xbc891dd8
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xa4cbf56d
xor eax, 0xa944fb39
rol eax, 0xcf
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x810f3912
pushf
not eax
add eax, 0xa46874cc
xor eax, 0x9ceae5e3
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x9c3813d2
xor eax, 0xb10aaafd
rol eax, 0xca
popf
pushf
not eax
add eax, 0xfd33d8b7
xor eax, 0x828a10ef
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x8c0eb495
xor eax, 0x97a17229
rol eax, 7
popf
jmp 0x1401c8bcb
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xd2898c34
pushf
not eax
add eax, 0xb1f608a9
xor eax, 0x8215fde3
rol eax, 0xec
popf
pushf
not eax
add eax, 0xf8a78bff
xor eax, 0xf2cf831a
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xc1f8a8a8
xor eax, 0xa1b1ece9
rol eax, 0xab
popf
pushf
not eax
add eax, 0xdc5a6007
xor eax, 0xfe4f0b09
rol eax, 0xe3
popf
jmp 0x1401c8bcb
mov r9d, 0x61ab774
pushf
not r9d
add r9d, 0xd651cbb3
xor r9d, 0xaf725987
rol r9d, 0xae
popf
pushf
not r9d
add r9d, 0xc573fbf5
xor r9d, 0xa5d41be4
rol r9d, 0x12
popf
pushf
not r9d
add r9d, 0xf088c0cc
xor r9d, 0xd1696181
rol r9d, 0x5e
popf
jmp 0x1401c9b3e
cmp byte [rbp - 0x78], r14b
je 0x1401c9a5e
push rax
pushf
mov eax, 0x24d6b227
pushf
not eax
add eax, 0xe009ee18
xor eax, 0x95b164f7
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xdf6258ab
xor eax, 0xfdbde427
rol eax, 0xce
popf
pushf
not eax
add eax, 0xff1236d7
xor eax, 0x93778b10
rol eax, 0x77
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x925f7c5
pushf
not eax
add eax, 0xb2204135
xor eax, 0x9216627d
rol eax, 0x94
popf
pushf
not eax
add eax, 0xda3a48eb
xor eax, 0x850548bf
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xbe9428b4
xor eax, 0x97797c82
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xeb022f9a
xor eax, 0x91d4d523
rol eax, 0xd3
popf
jmp 0x1401c8bcb
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xd12584e5
pushf
not eax
add eax, 0xd51ad1e9
xor eax, 0xc9d1fe94
rol eax, 0x22
popf
pushf
not eax
add eax, 0xb8ffa029
xor eax, 0x83aa4e13
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xa10af98c
xor eax, 0x8681913c
rol eax, 0xd1
popf
jmp 0x1401c8bcb
mov r9d, r14d
push rax
pushf
mov eax, 0xca6a2643
pushf
not eax
add eax, 0xc65d29ec
xor eax, 0xa9639008
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xf37da222
xor eax, 0xd32b1184
rol eax, 1
popf
jmp 0x1401c8bcb
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.14016a6c4
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x1401c9b6f
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1401c9bd7
push rax
pushf
mov eax, 0xa331c543
pushf
not eax
add eax, 0xd0259f90
xor eax, 0x8c3e7efc
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa7fc0cdf
xor eax, 0xe7ed8835
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x8ccd345c
xor eax, 0x8ce2afa0
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xdda091ef
xor eax, 0xee9bf43a
rol eax, 0x11
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x70651595
pushf
not eax
add eax, 0xa5472014
xor eax, 0xc5520e5f
rol eax, 9
popf
pushf
not eax
add eax, 0xaca4945f
xor eax, 0xd5d0a20b
rol eax, 0xf
popf
pushf
not eax
add eax, 0xd0d35c7a
xor eax, 0xa17c4c25
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xaa8d6615
xor eax, 0xdfcfa85b
rol eax, 0x4a
popf
jmp 0x1401c8bcb
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140295944
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x1401c9ca2
push rax
pushf
mov eax, 0x34e178ee
pushf
not eax
add eax, 0xf9e0babb
xor eax, 0xdf7cdf3a
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x83bb8445
xor eax, 0xc77128c9
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xba6f6950
xor eax, 0xfbe09162
rol eax, 0x58
popf
pushf
not eax
add eax, 0xb4f48b55
xor eax, 0xdae10396
rol eax, 0x1a
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x5f0d62ed
pushf
not eax
add eax, 0xaf16dcb2
xor eax, 0xe459fc7e
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xc66ec235
xor eax, 0x81666685
rol eax, 0xe1
popf
jmp 0x1401c8bcb
mov rcx, qword [rsp + 0x50]
call fcn.1402e3b5e
push rax
pushf
mov eax, 0x6f394a58
pushf
not eax
add eax, 0xedae81a3
xor eax, 0xeddf06e6
rol eax, 9
popf
pushf
not eax
add eax, 0x81c99ba0
xor eax, 0xc096a73a
rol eax, 0xce
popf
pushf
not eax
add eax, 0xd08f95d0
xor eax, 0x9738da53
rol eax, 0xd2
popf
jmp 0x1401c8bcb
mov eax, ebx
jmp 0x1401cacaa
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0x375d208e
pushf
not eax
add eax, 0x8fcb87af
xor eax, 0xeb74557b
rol eax, 0xae
popf
pushf
not eax
add eax, 0x85e521bd
xor eax, 0xfd0efaf2
rol eax, 0xed
popf
pushf
not eax
add eax, 0xabb523d8
xor eax, 0x91f4a00f
rol eax, 0xdb
popf
jmp 0x1401c8bcb
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.140237ed5
mov rax, qword [rbp - 0x68]
mov ecx, 0x4b801c0c
pushf
not ecx
add ecx, 0xf260f27d
xor ecx, 0x99e108af
rol ecx, 0x4c
popf
pushf
not ecx
add ecx, 0xa121dac7
xor ecx, 0xcb33e139
rol ecx, 0x25
popf
cmp dword [rax + 0xc], ecx
jne 0x1401c9e66
push rax
pushf
mov eax, 0x5186cace
pushf
not eax
add eax, 0x8aad0f6a
xor eax, 0x889f7053
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xd27c2605
xor eax, 0x82314166
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x94459630
xor eax, 0xe378e954
rol eax, 0x30
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x52b32322
pushf
not eax
add eax, 0xc9da3313
xor eax, 0x8d835e86
rol eax, 0x45
popf
pushf
not eax
add eax, 0x8f8f0ca0
xor eax, 0x8deb9244
rol eax, 0x35
popf
pushf
not eax
add eax, 0xeff89568
xor eax, 0xff62777e
rol eax, 0x93
popf
jmp 0x1401c8bcb
cmp byte [rbp - 0x58], r14b
je 0x1401c9ee5
push rax
pushf
mov eax, 0x10aeeb30
pushf
not eax
add eax, 0xba5c6e83
xor eax, 0xb2eecf82
rol eax, 0x83
popf
pushf
not eax
add eax, 0xed773e6d
xor eax, 0xf35cd7ec
rol eax, 0xe5
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x72f51258
pushf
not eax
add eax, 0x8e4f52b3
xor eax, 0xaf22a123
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe99a6e85
xor eax, 0xd5fb50f1
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xf79ce497
xor eax, 0xb0ce3af1
rol eax, 0x12
popf
pushf
not eax
add eax, 0x971bf810
xor eax, 0xc1b50a44
rol eax, 0x66
popf
jmp 0x1401c8bcb
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x686dbfb3
pushf
not eax
add eax, 0xcc5a83ea
xor eax, 0xaed674d3
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf04461c4
xor eax, 0xdc5db260
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xaffbdff1
xor eax, 0x9f5189c4
rol eax, 0x79
popf
jmp 0x1401c8bcb
mov r9d, ecx
jmp 0x1401ca336
call fcn.14027ee59
test eax, eax
jne 0x1401ca03f
push rax
pushf
mov eax, 0x58263f78
pushf
not eax
add eax, 0xec9f6c77
xor eax, 0xb5ea8d29
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xe37b3b32
xor eax, 0xc602753e
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xacde9567
xor eax, 0xb7688000
rol eax, 0x1d
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x58c631f1
pushf
not eax
add eax, 0xbf6fbf78
xor eax, 0x83eaf930
rol eax, 0x19
popf
pushf
not eax
add eax, 0xb5b74048
xor eax, 0xb3f6c13c
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xba09725d
xor eax, 0xf7f5ceab
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x83b71df5
xor eax, 0xdcc56f04
rol eax, 0x2a
popf
jmp 0x1401c8bcb
cmp byte [rbp - 0x58], r14b
je 0x1401ca0e4
push rax
pushf
mov eax, 0xfe2d39e2
pushf
not eax
add eax, 0xe4c598ed
xor eax, 0x8d04e324
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xde591a5f
xor eax, 0xa9d60ea3
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x89a703fe
xor eax, 0x96ff4dc8
rol eax, 0xf6
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x30ceb47b
pushf
not eax
add eax, 0xc49cf2fb
xor eax, 0xe38fb11e
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xd6ac2ea6
xor eax, 0xcb2b2a2a
rol eax, 0x55
popf
jmp 0x1401c8bcb
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x97da2fd8
pushf
not eax
add eax, 0x9eef276a
xor eax, 0xea9666eb
rol eax, 0x27
popf
pushf
not eax
add eax, 0xab5c65de
xor eax, 0xfa13a865
rol eax, 0x24
popf
jmp 0x1401c8bcb
mov r9d, 0x232092b1
pushf
not r9d
add r9d, 0xaacea6bd
xor r9d, 0xb02ff9bf
rol r9d, 0x71
popf
pushf
not r9d
add r9d, 0xd921f320
xor r9d, 0xc0eb88d0
rol r9d, 0xae
popf
pushf
not r9d
add r9d, 0xf1a2819d
xor r9d, 0xb3080ec3
rol r9d, 0x1e
popf
pushf
not r9d
add r9d, 0xf2ba49c0
xor r9d, 0xfb616a9d
rol r9d, 0xb0
popf
jmp 0x1401ca336
cmp byte [rbp - 0x58], r14b
je 0x1401ca269
push rax
pushf
mov eax, 0xae1cf9f8
pushf
not eax
add eax, 0xce6bcf1f
xor eax, 0xb39263cb
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xde6b6e6f
xor eax, 0xe5c358d4
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xad043655
xor eax, 0x9a14c2a1
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xcdc99c19
xor eax, 0xfa175cb8
rol eax, 0xe
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x5ae85593
pushf
not eax
add eax, 0xc107dde0
xor eax, 0xb04c933c
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xefcbadfc
xor eax, 0xa3cdeaa2
rol eax, 0x2e
popf
jmp 0x1401c8bcb
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xc93ab870
pushf
not eax
add eax, 0xc7692727
xor eax, 0xa7cbae2d
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xc17b6eca
xor eax, 0xa83e8dcd
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb2556377
xor eax, 0x956c32f7
rol eax, 0x21
popf
pushf
not eax
add eax, 0xd5d58cec
xor eax, 0x9e0f5267
rol eax, 0xf7
popf
jmp 0x1401c8bcb
mov r9d, r14d
push rax
pushf
mov eax, 0xc7fe3658
pushf
not eax
add eax, 0xdd09dda9
xor eax, 0xf34307ac
rol eax, 0xef
popf
pushf
not eax
add eax, 0x981a8e6d
xor eax, 0xd39c1b48
rol eax, 0xe6
popf
jmp 0x1401c8bcb
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.140154f4a
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x1401ca3b5
push rax
pushf
mov eax, 0x20c7bd4
pushf
not eax
add eax, 0xa53a2ff8
xor eax, 0xe6e518fb
rol eax, 0x90
popf
pushf
not eax
add eax, 0xae1b4e16
xor eax, 0xeac9c00a
rol eax, 0x28
popf
pushf
not eax
add eax, 0xf9c168a7
xor eax, 0xb97d9434
rol eax, 0x10
popf
pushf
not eax
add eax, 0x88a1c67c
xor eax, 0xd4186ef7
rol eax, 0xf2
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x241b0d1d
pushf
not eax
add eax, 0xbe13aab5
xor eax, 0xe7f811e2
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd34fbc5f
xor eax, 0xb5a63c3b
rol eax, 0xef
popf
jmp 0x1401c8bcb
mov al, byte [rcx + 1]
test al, al
jne 0x1401ca435
push rax
pushf
mov eax, 0xd1f2d737
pushf
not eax
add eax, 0xae6b4d36
xor eax, 0xa6e1d30e
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xd421d013
xor eax, 0x81d773cd
rol eax, 0xd
popf
pushf
not eax
add eax, 0xda4435e0
xor eax, 0x9c0571f8
rol eax, 0x15
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x1c526386
pushf
not eax
add eax, 0xeca24e66
xor eax, 0xa18b687e
rol eax, 0x56
popf
pushf
not eax
add eax, 0xb570b46d
xor eax, 0xc8ab418d
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xaa73dd00
xor eax, 0xba47c584
rol eax, 0x3b
popf
jmp 0x1401c8bcb
cmp byte [rbp - 0x28], dl
je 0x1401ca4d9
push rax
pushf
mov eax, 0xbc7b3347
pushf
not eax
add eax, 0xeaed8dbb
xor eax, 0xbfefb92c
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xf86bd173
xor eax, 0xf660ccf0
rol eax, 8
popf
pushf
not eax
add eax, 0xec055879
xor eax, 0xc45b2c2f
rol eax, 0x27
popf
pushf
not eax
add eax, 0x9b6936d8
xor eax, 0xf0005bcd
rol eax, 0x4b
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x313fbaf0
pushf
not eax
add eax, 0xe5a31610
xor eax, 0xf3b56106
rol eax, 0x69
popf
pushf
not eax
add eax, 0xb715a2e2
xor eax, 0xda62af50
rol eax, 0x61
popf
pushf
not eax
add eax, 0x9e9e0b9f
xor eax, 0xfd164dc7
rol eax, 0x1f
popf
jmp 0x1401c8bcb
mov rcx, r14
call fcn.1402e3b5e
jmp 0x1401ca7ff
cmp al, 0x2e
jne 0x1401ca5a9
push rax
pushf
mov eax, 0x65a3ba48
pushf
not eax
add eax, 0xbf5969c1
xor eax, 0x942fd5dc
rol eax, 0x99
popf
pushf
not eax
add eax, 0xe5cfcc79
xor eax, 0xee32fa91
rol eax, 0x89
popf
pushf
not eax
add eax, 0xd90747bb
xor eax, 0x982d22d6
rol eax, 0x27
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xe033a898
pushf
not eax
add eax, 0xa1ff3e61
xor eax, 0xa24718c9
rol eax, 0x34
popf
pushf
not eax
add eax, 0xc01ce0ae
xor eax, 0xf006a7b3
rol eax, 0xff
popf
jmp 0x1401c8bcb
cmp byte [rcx + 2], dl
je 0x1401ca614
push rax
pushf
mov eax, 0x3a21d256
pushf
not eax
add eax, 0xb9b769b9
xor eax, 0x9e16a45a
rol eax, 9
popf
pushf
not eax
add eax, 0xfef06e11
xor eax, 0xf889504d
rol eax, 0xd6
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xa51538d6
pushf
not eax
add eax, 0xef9cf666
xor eax, 0xb0eb4dab
rol eax, 0x90
popf
pushf
not eax
add eax, 0xe5f9cd51
xor eax, 0xf5d4d278
rol eax, 0xfe
popf
jmp 0x1401c8bcb
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.140295944
mov r13d, eax
test eax, eax
jne 0x1401ca68f
push rax
pushf
mov eax, 0x6b3cfbec
pushf
not eax
add eax, 0xee3239c0
xor eax, 0xd4ec353c
rol eax, 0x88
popf
pushf
not eax
add eax, 0xfd5af00a
xor eax, 0xe1d200b3
rol eax, 0xeb
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x9f864297
pushf
not eax
add eax, 0xec201aca
xor eax, 0x84006a54
rol eax, 0x85
popf
pushf
not eax
add eax, 0xdc803874
xor eax, 0xbd8422f4
rol eax, 0x92
popf
pushf
not eax
add eax, 0xb7a354b6
xor eax, 0xd3dec650
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xf9c1c64c
xor eax, 0xd8a62260
rol eax, 0x1e
popf
jmp 0x1401c8bcb
cmp byte [rbp - 0x28], al
je 0x1401ca733
push rax
pushf
mov eax, 0xf2ed494b
pushf
not eax
add eax, 0x98143ded
xor eax, 0xd6449d57
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8a5c8127
xor eax, 0x8057cfd5
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xbb070bc3
xor eax, 0xe3dc1332
rol eax, 0xc9
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x8953e44a
pushf
not eax
add eax, 0xa6d34cba
xor eax, 0xda9ff962
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xfc12fa4f
xor eax, 0xf78a8c21
rol eax, 0x80
popf
jmp 0x1401c8bcb
mov rcx, r14
call fcn.1402e3b5e
push rax
pushf
mov eax, 0x9ed11fe5
pushf
not eax
add eax, 0xbd61e456
xor eax, 0x97cddf2a
rol eax, 0x88
popf
pushf
not eax
add eax, 0xed26c39c
xor eax, 0xc56967d8
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x9336007b
xor eax, 0xdd1513d7
rol eax, 0x44
popf
jmp 0x1401c8bcb
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x4527412f
pushf
not eax
add eax, 0xb5adfae0
xor eax, 0xbc48e3c2
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x815eba5a
xor eax, 0xc8e5f1ca
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x9e063bec
xor eax, 0xe1b85fd9
rol eax, 0x57
popf
jmp 0x1401c8bcb
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x1401ca807
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x1401c9dc5
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x1401ca873
push rax
pushf
mov eax, 0xcd41f8c5
pushf
not eax
add eax, 0x9c64193e
xor eax, 0xfe60318d
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xd28a3f1c
xor eax, 0xea89b45c
rol eax, 8
popf
pushf
not eax
add eax, 0x981fa8a6
xor eax, 0xe76b7f65
rol eax, 0x88
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x94e231c3
pushf
not eax
add eax, 0x9433d087
xor eax, 0xd48c6990
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe6908f93
xor eax, 0x87f08bf4
rol eax, 0xec
popf
pushf
not eax
add eax, 0x9a2d7139
xor eax, 0x86c37ca3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x9bd2581e
xor eax, 0xad3eff5d
rol eax, 0xe8
popf
jmp 0x1401c8bcb
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x192cc7481]
pushf
sub r9, 0x52c59939
popf
lea r8d, [r14 + 8]
call fcn.1402afacc
push rax
pushf
mov eax, 0xbc6a3e4f
pushf
not eax
add eax, 0x9fb1e233
xor eax, 0x8172011a
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x91433d2a
xor eax, 0xe9304b41
rol eax, 0x23
popf
pushf
not eax
add eax, 0x83c189c8
xor eax, 0xcd316952
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb3f02346
xor eax, 0xc291838b
rol eax, 0xc6
popf
jmp 0x1401c8bcb
mov rcx, rbx
jmp 0x1401ca94b
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x1401ca9b1
push rax
pushf
mov eax, 0x1cb1abfd
pushf
not eax
add eax, 0xc5483b74
xor eax, 0xffdcd39c
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf22449cb
xor eax, 0xd7a511a3
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xbebcca94
xor eax, 0x975737f2
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa33fbd1e
xor eax, 0x8004ddab
rol eax, 3
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x4da47600
pushf
not eax
add eax, 0xded36fe5
xor eax, 0xae9e5296
rol eax, 0xab
popf
pushf
not eax
add eax, 0x8ce5498d
xor eax, 0xac46b5fb
rol eax, 0x35
popf
pushf
not eax
add eax, 0xd7ba1d1a
xor eax, 0x8424a339
rol eax, 0x4a
popf
jmp 0x1401c8bcb
mov rcx, qword [rsp + 0x50]
call fcn.1402e3b5e
push rax
pushf
mov eax, 0xc993a170
pushf
not eax
add eax, 0x8027d03c
xor eax, 0xb53e66b5
rol eax, 0x13
popf
pushf
not eax
add eax, 0xeb968d3c
xor eax, 0xf29b4061
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x8b60766f
xor eax, 0xae1d731e
rol eax, 0xde
popf
pushf
not eax
add eax, 0xbe60e690
xor eax, 0xc0ef9484
rol eax, 0x9b
popf
jmp 0x1401c8bcb
xor eax, eax
jmp 0x1401cacaa
cmp byte [rbp - 0x28], 0
je 0x1401caaf3
push rax
pushf
mov eax, 0x97fb3e45
pushf
not eax
add eax, 0xd9a73ecd
xor eax, 0xf5693f95
rol eax, 0x89
popf
pushf
not eax
add eax, 0xc6ce623e
xor eax, 0xd557469a
rol eax, 0xb
popf
pushf
not eax
add eax, 0x97ed6f25
xor eax, 0xdfd5ee8a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xff05abc6
xor eax, 0xa0c8ba30
rol eax, 0xc8
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0xf7a699b
pushf
not eax
add eax, 0xb92e135d
xor eax, 0xb65cdacc
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9143d9c6
xor eax, 0xf83e68ed
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa82d8149
xor eax, 0xc4d60092
rol eax, 0xff
popf
pushf
not eax
add eax, 0x9baee206
xor eax, 0x9e021a81
rol eax, 0x61
popf
jmp 0x1401c8bcb
mov rcx, r14
call fcn.1402e3b5e
push rax
pushf
mov eax, 0xe6c7141a
pushf
not eax
add eax, 0x913e7969
xor eax, 0xc3a849e0
rol eax, 0xff
popf
pushf
not eax
add eax, 0xc562f91d
xor eax, 0x8bf362c5
rol eax, 0x49
popf
jmp 0x1401c8bcb
mov rcx, rbx
jmp 0x1401cab8b
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x1401cabf1
push rax
pushf
mov eax, 0xb8b468f0
pushf
not eax
add eax, 0xa1637f58
xor eax, 0xd712bf92
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xe1e745a2
xor eax, 0xe359156d
rol eax, 0x41
popf
pushf
not eax
add eax, 0x958c8ee6
xor eax, 0xdaa2fde7
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xf0e79554
xor eax, 0x8898ad23
rol eax, 0xa9
popf
jmp 0x1401c8bcb
push rax
pushf
mov eax, 0x6952cbf
pushf
not eax
add eax, 0xc442286b
xor eax, 0xaa3868f2
rol eax, 0x15
popf
pushf
not eax
add eax, 0xdcc3360a
xor eax, 0x95a04377
rol eax, 0xa6
popf
jmp 0x1401c8bcb
mov rcx, qword [rsp + 0x50]
call fcn.1402e3b5e
push rax
pushf
mov eax, 0xfeef7a3
pushf
not eax
add eax, 0xbf77935d
xor eax, 0x99068852
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x9eb8d14b
xor eax, 0x834aead4
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x9bf15504
xor eax, 0x987b0a31
rol eax, 0x4a
popf
jmp 0x1401c8bcb
mov eax, r13d
push rax
pushf
mov eax, 0x76cc99bf
pushf
not eax
add eax, 0xca3eb938
xor eax, 0xa247d327
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xe9ded4e6
xor eax, 0xf7cb7820
rol eax, 0x29
popf
jmp 0x1401c8bcb
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.14021cfd0
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret