Function at 0x1400480c8
Capabilities:
Enumerate files on windows
Enumerate files recursively
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0x37a759f9
pushf
not eax
add eax, 0x2780a5f2
xor eax, 0x66aa50d6
rol eax, 2
popf
pushf
not eax
add eax, 0x2c6ab2ee
xor eax, 0x69e4633
rol eax, 0xc7
popf
cmp eax, 8
jne 0x140048105
popf
pop rax
jmp 0x140048746
cmp eax, 0xe
jne 0x140048114
popf
pop rax
jmp 0x140048a80
cmp eax, 0x16
jne 0x140048123
popf
pop rax
jmp 0x140048e52
cmp eax, 0x1e
jne 0x140048132
popf
pop rax
jmp 0x140049351
cmp eax, 0x15
jne 0x140048141
popf
pop rax
jmp 0x140048dfd
cmp eax, 0xa
jne 0x140048150
popf
pop rax
jmp 0x140048910
cmp eax, 1
jne 0x14004815f
popf
pop rax
jmp 0x140048376
cmp eax, 0x11
jne 0x14004816e
popf
pop rax
jmp 0x140048bba
cmp eax, 2
jne 0x14004817d
popf
pop rax
jmp 0x1400483d7
cmp eax, 0x10
jne 0x14004818c
popf
pop rax
jmp 0x140048b75
cmp eax, 3
jne 0x14004819b
popf
pop rax
jmp 0x140048469
cmp eax, 0x1b
jne 0x1400481aa
popf
pop rax
jmp 0x140049228
cmp eax, 9
jne 0x1400481b9
popf
pop rax
jmp 0x14004886d
cmp eax, 0xf
jne 0x1400481c8
popf
pop rax
jmp 0x140048b27
cmp eax, 0xd
jne 0x1400481d7
popf
pop rax
jmp 0x140048a43
cmp eax, 0x14
jne 0x1400481e6
popf
pop rax
jmp 0x140048d67
cmp eax, 0x13
jne 0x1400481f5
popf
pop rax
jmp 0x140048cd5
cmp eax, 0x1d
jne 0x140048204
popf
pop rax
jmp 0x1400492f1
cmp eax, 0x19
jne 0x140048213
popf
pop rax
jmp 0x1400490a7
cmp eax, 7
jne 0x140048222
popf
pop rax
jmp 0x140048631
cmp eax, 0x18
jne 0x140048231
popf
pop rax
jmp 0x140049001
cmp eax, 4
jne 0x140048240
popf
pop rax
jmp 0x1400484ec
cmp eax, 6
jne 0x14004824f
popf
pop rax
jmp 0x1400485ae
cmp eax, 5
jne 0x14004825e
popf
pop rax
jmp 0x140048554
cmp eax, 0x17
jne 0x14004826d
popf
pop rax
jmp 0x140048f5e
cmp eax, 0x1c
jne 0x14004827c
popf
pop rax
jmp 0x1400492b4
cmp eax, 0xc
jne 0x14004828b
popf
pop rax
jmp 0x1400489fa
cmp eax, 0x12
jne 0x14004829a
popf
pop rax
jmp 0x140048c74
cmp eax, 0x1a
jne 0x1400482a9
popf
pop rax
jmp 0x14004914e
cmp eax, 0xb
jne 0x1400482b8
popf
pop rax
jmp 0x1400489c5
cmp eax, 0
jne 0x1400482c7
popf
pop rax
jmp 0x1400482c7
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4c0
xor r12d, r12d
mov r15, r9
mov rbx, rcx
mov r14d, r12d
mov ebp, r12d
mov rax, rcx
test rcx, rcx
jne 0x140048330
push rax
pushf
mov eax, 0x2647641f
pushf
not eax
add eax, 0x244448c5
xor eax, 0x180bf057
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x3b92e86a
xor eax, 0x5f3d1cd2
rol eax, 0x6f
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xfd548ad6
pushf
not eax
add eax, 0x3ab97498
xor eax, 0x17822001
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x5ddf6ee9
xor eax, 0x7a5b2f83
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x2c3d34d0
xor eax, 0x1e9308ce
rol eax, 0x6f
popf
jmp 0x1400480f6
mov eax, r12d
jmp 0x140048554
cmp word [rcx], r12w
je 0x140048423
push rax
pushf
mov eax, 0x556c2e8d
pushf
not eax
add eax, 0x47a591ce
xor eax, 0x2236fcf6
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x6e48a348
xor eax, 0x2ec41d28
rol eax, 0x90
popf
pushf
not eax
add eax, 0x7fb655e1
xor eax, 0x5d49824
rol eax, 0x9c
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x46807829
pushf
not eax
add eax, 0x5c051f78
xor eax, 0x2b125019
rol eax, 0x10
popf
pushf
not eax
add eax, 0x3ba0d713
xor eax, 0x25b4e912
rol eax, 0xf
popf
pushf
not eax
add eax, 0xfdb7e9
xor eax, 0x484286ea
rol eax, 0x90
popf
jmp 0x1400480f6
add rax, 2
cmp word [rax], r12w
jne 0x1400484a6
push rax
pushf
mov eax, 0x5ec4691b
pushf
not eax
add eax, 0x4cacb732
xor eax, 0x6aec7110
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x4a7bb883
xor eax, 0x2e6abc78
rol eax, 0x7e
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xdf31b7e0
pushf
not eax
add eax, 0x2495f0d9
xor eax, 0x1cb720d3
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x48c73864
xor eax, 0x2453aeb6
rol eax, 0x29
popf
pushf
not eax
add eax, 0x321cb580
xor eax, 0x3668b6c3
rol eax, 0x91
popf
jmp 0x1400480f6
push rbx
not rbx
add rax, rbx
pop rbx
add rax, 1
sar rax, 1
push rax
pushf
mov eax, 0x8ee7e322
pushf
not eax
add eax, 0x7bf69737
xor eax, 0x38fe822e
rol eax, 0x70
popf
pushf
not eax
add eax, 0x46d08515
xor eax, 0x1228db92
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x2e3f3be1
xor eax, 0x1219e241
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x6e87d0e9
xor eax, 0x2556a85d
rol eax, 0x75
popf
jmp 0x1400480f6
lea r13, [0x1a3ca2fcf]
pushf
sub r13, 0x63c7b927
popf
mov rcx, r13
push rax
pushf
mov eax, 0xa9313ad0
pushf
not eax
add eax, 0x1048fb2a
xor eax, 0x5b29263
rol eax, 1
popf
pushf
not eax
add eax, 0x12f7892b
xor eax, 0x5d62ca25
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x29dd984e
xor eax, 0x65aa0d29
rol eax, 0x9a
popf
jmp 0x1400480f6
add rcx, 2
cmp word [rcx], r12w
jne 0x1400485fe
push rax
pushf
mov eax, 0x54a01d76
pushf
not eax
add eax, 0x45e504f2
xor eax, 0xc0c5274
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x4ca643b7
xor eax, 0x79c281f2
rol eax, 0x13
popf
pushf
not eax
add eax, 0x27612631
xor eax, 0x6437c746
rol eax, 0x1d
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x86932933
pushf
not eax
add eax, 0x2a34c58b
xor eax, 0x5d42951c
rol eax, 8
popf
pushf
not eax
add eax, 0x5afc9281
xor eax, 0x77f34582
rol eax, 0xf9
popf
jmp 0x1400480f6
push r13
not r13
add rcx, r13
pop r13
add rcx, 1
mov edx, 0x6d2cb7f8
pushf
not edx
add edx, 0x7730771d
xor edx, 0x325e7a0a
rol edx, 0x8b
popf
pushf
not edx
add edx, 0x7aa3e3f8
xor edx, 0x4837c661
rol edx, 0xb2
popf
pushf
not edx
add edx, 0x29ccd7a4
xor edx, 0x628c0e69
rol edx, 0xe0
popf
pushf
not edx
add edx, 0x64a40c21
xor edx, 0x29ae449c
rol edx, 0x7c
popf
sar rcx, 1
lea rdi, [rcx + 2]
mov rcx, qword [0x14002fa90]
push rax
not rax
sub rdi, rax
pop rax
sub rdi, 1
mov rcx, qword [rcx + 0x18]
lea r8, [rdi + rdi]
jmp 0x1400486bb
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rsi, rax
test rax, rax
je 0x140048713
push rax
pushf
mov eax, 0x657fea57
pushf
not eax
add eax, 0x7a1da563
xor eax, 0x3f09719b
rol eax, 0x57
popf
pushf
not eax
add eax, 0x4c1014dd
xor eax, 0x1b734182
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x3000f9f1
xor eax, 0x2897cc
rol eax, 0xb1
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xa2cd00c
pushf
not eax
add eax, 0x227929c2
xor eax, 0x1a84a785
rol eax, 0x23
popf
pushf
not eax
add eax, 0x2d7ba710
xor eax, 0x1373b58f
rol eax, 0xa
popf
jmp 0x1400480f6
mov rdx, rbx
mov rcx, rax
call fcn.140041acc
mov r8, rdi
mov rdx, r13
call fcn.14007acec
lea rdx, [rsp + 0x270]
mov rcx, rsi
jmp 0x140048768
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
mov r13d, 0xdcf3e12a
pushf
not r13d
add r13d, 0x51294c2a
xor r13d, 0x458c6fcf
rol r13d, 0xed
popf
pushf
not r13d
add r13d, 0x42b674ab
xor r13d, 0x139c3d6d
rol r13d, 0xff
popf
pushf
not r13d
add r13d, 0x2baa72d9
xor r13d, 0x53820efa
rol r13d, 0x42
popf
pushf
not r13d
add r13d, 0x420a2c3b
xor r13d, 0x3c71096d
rol r13d, 0xf6
popf
cmp rax, 0xffffffffffffffff
je 0x140048814
push rax
pushf
mov eax, 0x80575ecf
pushf
not eax
add eax, 0x145fb62a
xor eax, 0x58004ca5
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x2df6f0d9
xor eax, 0x3451ed59
rol eax, 0xe
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xd0a5ef2e
pushf
not eax
add eax, 0x62df8f65
xor eax, 0x5fdd753b
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x41312639
xor eax, 0x1efd6191
rol eax, 0x91
popf
pushf
not eax
add eax, 0x62e8865c
xor eax, 0x7a182aa3
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x522695de
xor eax, 0x6bb3b8dc
rol eax, 0xf7
popf
jmp 0x1400480f6
mov r8, r15
lea rdx, [rsp + 0x270]
mov rcx, rbx
call fcn.140049372
test eax, eax
jne 0x1400488b7
push rax
pushf
mov eax, 0xef13f84b
pushf
not eax
add eax, 0x2edd3917
xor eax, 0x7d6c4629
rol eax, 0x46
popf
pushf
not eax
add eax, 0x23d057da
xor eax, 0x708e9f49
rol eax, 0x88
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x712ad386
pushf
not eax
add eax, 0x2b5ea83c
xor eax, 0x666fb235
rol eax, 0x97
popf
pushf
not eax
add eax, 0x4cca66ef
xor eax, 0x3741f763
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x58cd22cd
xor eax, 0x16e2b421
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x6fffe3dc
xor eax, 0x42ff04eb
rol eax, 0x9e
popf
jmp 0x1400480f6
lea rdx, [rsp + 0x270]
mov rcx, rdi
jmp 0x14004891c
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14004897f
push rax
pushf
mov eax, 0xe2b5ce7d
pushf
not eax
add eax, 0x3accc99
xor eax, 0x428248ab
rol eax, 4
popf
pushf
not eax
add eax, 0x6d451c7b
xor eax, 0x18765b5c
rol eax, 0x61
popf
pushf
not eax
add eax, 0x75c4b961
xor eax, 0x744b973
rol eax, 0x48
popf
pushf
not eax
add eax, 0x526b1b72
xor eax, 0x720eb798
rol eax, 0x5e
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x2c709f0
pushf
not eax
add eax, 0x21fe7ba9
xor eax, 0x455a702
rol eax, 0x49
popf
pushf
not eax
add eax, 0x4c262c23
xor eax, 0x8ed91b9
rol eax, 0x95
popf
pushf
not eax
add eax, 0xe785060
xor eax, 0x43e27dbb
rol eax, 0xee
popf
jmp 0x1400480f6
jmp 0x140048a43
mov ebp, r13d
push rax
pushf
mov eax, 0x4d6acb32
pushf
not eax
add eax, 0x2516604
xor eax, 0x383a3a9c
rol eax, 5
popf
pushf
not eax
add eax, 0x1aa409ce
xor eax, 0x6531399c
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x4acb6120
xor eax, 0x168e6e1f
rol eax, 0xb1
popf
jmp 0x1400480f6
mov rcx, rdi
jmp 0x140048a47
call qword [sym.imp.KERNEL32.dll_FindClose]
push rax
pushf
mov eax, 0xda26da8d
pushf
not eax
add eax, 0x4c52db42
xor eax, 0x7caa24fb
rol eax, 0x50
popf
pushf
not eax
add eax, 0x3779c4c3
xor eax, 0x135ab63c
rol eax, 0xed
popf
jmp 0x1400480f6
mov rcx, qword [0x14002fa90]
mov r8, rsi
xor edx, edx
mov rcx, qword [rcx + 0x18]
jmp 0x140048a91
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
test ebp, ebp
je 0x140048af4
push rax
pushf
mov eax, 0xe5d5acc0
pushf
not eax
add eax, 0x70fc5bb3
xor eax, 0x2fc9a4ab
rol eax, 0x32
popf
pushf
not eax
add eax, 0x1a5d2156
xor eax, 0x38f5eaaf
rol eax, 0x33
popf
pushf
not eax
add eax, 0x67fa1253
xor eax, 0x74f75394
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x4b6928f1
xor eax, 0x75351bd6
xor eax, 0xcc0c175
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x2a0f0baa
stosb byte [rdi], al
or ecx, dword [rdi]
sub ah, byte [rsi - 0x64]
not eax
add eax, 0x54ae57e1
xor eax, 0x5a197536
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x579ff41d
xor eax, 0x3ebbf21a
rol eax, 0xbe
sar byte [rsi - 0x3016629a], 0xf5
invalid
invalid
mov eax, r13d
jmp 0x140049351
lea r13, [0x18d4fbbbf]
pushf
sub r13, 0x4d4d4517
popf
push rax
pushf
mov eax, 0xd90c198d
pushf
not eax
add eax, 0x1feeb9eb
xor eax, 0x6f5a26cf
rol eax, 0x21
popf
pushf
not eax
add eax, 0x6f1e5458
xor eax, 0x1bad5633
rol eax, 0x38
popf
jmp 0x1400480f6
mov rax, rbx
test rbx, rbx
jne 0x140048c1b
push rax
pushf
mov eax, 0x20304f7
pushf
not eax
add eax, 0x37c3b7d6
xor eax, 0x7bf69345
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x199c27ac
xor eax, 0x5b71d8ec
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x7fe32a78
xor eax, 0x7e72d5e5
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x1ce52f1a
xor eax, 0x34cc78c6
rol eax, 0xf
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x5d3a13b1
pushf
not eax
add eax, 0x3ac33ddf
xor eax, 0x1c59c01d
rol eax, 0x14
popf
pushf
not eax
add eax, 0x3b7d3bf
xor eax, 0x29050b43
rol eax, 0x73
popf
pushf
not eax
add eax, 0x15aec37a
xor eax, 0x1d7c0764
rol eax, 0x11
popf
pushf
not eax
add eax, 0x23aaaeb6
xor eax, 0x40eef7e5
rol eax, 0xf2
popf
jmp 0x1400480f6
mov rax, r12
jmp 0x140048e52
cmp word [rbx], r12w
je 0x140048d21
push rax
pushf
mov eax, 0x4cc9b0df
pushf
not eax
add eax, 0x5f3d6bfe
xor eax, 0x56fb8519
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x69c5fbaa
xor eax, 0xb1a01a
rol eax, 0x12
popf
pushf
not eax
add eax, 0x7c2420ee
xor eax, 0x159770ad
rol eax, 0xf8
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xe308fa6
pushf
not eax
add eax, 0x4d2c9465
xor eax, 0x38018ca3
rol eax, 0xb
popf
pushf
not eax
add eax, 0x2e7b66eb
xor eax, 0x6e294c0
rol eax, 0x59
popf
pushf
not eax
add eax, 0x83094e6
xor eax, 0x21a64b11
rol eax, 0x35
popf
jmp 0x1400480f6
add rax, 2
cmp word [rax], r12w
jne 0x140048db7
push rax
pushf
mov eax, 0x7b7fe557
pushf
not eax
add eax, 0x5acfac43
xor eax, 0x7b6f5b62
rol eax, 0x50
popf
pushf
not eax
add eax, 0x51d08621
xor eax, 0x2190c74d
rol eax, 0xd
popf
pushf
not eax
add eax, 0x2ef15d08
xor eax, 0x6a47a8ed
rol eax, 0xdb
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x868fdf47
pushf
not eax
add eax, 0x6cdbe89c
xor eax, 0x65ea2477
rol eax, 0xca
popf
pushf
not eax
add eax, 0x380dd77c
xor eax, 0x61b7ba8f
rol eax, 0xac
popf
pushf
not eax
add eax, 0x43d49f58
xor eax, 0x54964769
rol eax, 0x97
popf
jmp 0x1400480f6
push rbx
not rbx
add rax, rbx
pop rbx
add rax, 1
sar rax, 1
push rax
pushf
mov eax, 0x4c2c4d4
pushf
not eax
add eax, 0x19f53520
xor eax, 0x7ae0969c
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x63d9d95f
xor eax, 0x369a1bc9
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x12c36371
xor eax, 0x68ecbbd5
rol eax, 0xde
popf
jmp 0x1400480f6
mov rcx, qword [0x14002fa90]
lea rsi, [rax + 0x108]
lea r8, [rsi + rsi]
mov edx, 0x127bdfe2
pushf
not edx
add edx, 0x37d0a9b7
xor edx, 0x42f439ad
rol edx, 0xfa
popf
pushf
not edx
add edx, 0x1d98cae2
xor edx, 0x48751022
rol edx, 0xc4
popf
pushf
not edx
add edx, 0x65e3076c
xor edx, 0x6ced9704
rol edx, 0x5d
popf
mov rcx, qword [rcx + 0x18]
jmp 0x140048ead
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov rdi, rax
test rax, rax
je 0x140048f18
push rax
pushf
mov eax, 0x92c0658d
pushf
not eax
add eax, 0x3f7a3514
xor eax, 0x5f3f60
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x78879df3
xor eax, 0xb47a8ae
rol eax, 0x32
popf
pushf
not eax
add eax, 0x67aad8a9
xor eax, 0x18ab587d
rol eax, 0x10
popf
pushf
not eax
add eax, 0x2d9b89c5
xor eax, 0x3e2755a8
rol eax, 0x5f
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x153f7b27
pushf
not eax
add eax, 0x4f6a79aa
xor eax, 0x6d7f8d4a
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x7827d2a9
xor eax, 0x6acc7e21
rol eax, 0x69
popf
pushf
not eax
add eax, 0x1717a0c9
xor eax, 0x2391bc65
rol eax, 0xda
popf
jmp 0x1400480f6
mov rdx, rbx
mov rcx, rdi
call fcn.140041acc
mov r8, rsi
lea rdx, [0x18eb756f7]
pushf
sub rdx, 0x4eb4e2ff
popf
call fcn.14007acec
lea rdx, [rsp + 0x20]
mov rcx, rdi
jmp 0x140048f8c
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140048fce
push rax
pushf
mov eax, 0xf0fa2a12
pushf
not eax
add eax, 0x13e70158
xor eax, 0x45ca9e53
rol eax, 0x69
popf
pushf
not eax
add eax, 0x7a77a7f4
xor eax, 0x2de57b23
rol eax, 0xa2
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x91966a96
pushf
not eax
add eax, 0x6376bc68
xor eax, 0x265278b5
rol eax, 0xc
popf
pushf
not eax
add eax, 0x2de8c1df
xor eax, 0xb553263
rol eax, 0xf2
popf
jmp 0x1400480f6
test byte [rsp + 0x20], 0x10
je 0x140049061
push rax
pushf
mov eax, 0xfe8577c2
pushf
not eax
add eax, 0x9a7eda0
xor eax, 0x3b700022
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x68749961
xor eax, 0x262dff77
rol eax, 0x75
popf
pushf
not eax
add eax, 0x282d6ddb
xor eax, 0x38d9304a
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xc117276
xor eax, 0x7e893972
rol eax, 0xe0
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xd80c0678
pushf
not eax
add eax, 0x1d5d813d
xor eax, 0x66fdcb47
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x72c9f8d4
xor eax, 0x33aae026
rol eax, 0x62
popf
pushf
not eax
add eax, 0x7f5ec28
xor eax, 0x3156acee
rol eax, 0x6c
popf
jmp 0x1400480f6
cmp word [rsp + 0x4c], 0x2e
je 0x140049108
push rax
pushf
mov eax, 0xcfa70fcd
pushf
not eax
add eax, 0x32dcd365
xor eax, 0x7bcda0f
rol eax, 0x88
popf
pushf
not eax
add eax, 0x59e9b9e
xor eax, 0x6b4fcd69
rol eax, 0x52
popf
pushf
not eax
add eax, 0x6ee392f8
xor eax, 0x6e45d050
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x78d8875c
xor eax, 0x3f12c8f7
rol eax, 0x40
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xb4cf8ca6
pushf
not eax
add eax, 0x1cfe3716
xor eax, 0x7667c97c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x1eb7cacb
xor eax, 0x598a84d0
rol eax, 0x44
popf
pushf
not eax
add eax, 0x6afa0dba
xor eax, 0x60da65a9
rol eax, 0xff
popf
jmp 0x1400480f6
mov rdx, rbx
mov rcx, rdi
call fcn.140041acc
lea rdx, [rsp + 0x4c]
call fcn.1400415c6
lea r8, [0x185a387cc]
pushf
sub r8, 0x45a35e30
popf
mov rdx, r13
mov rcx, rdi
mov r9, r15
call fcn.1400480c8
mov r14d, eax
test eax, eax
jne 0x1400491e3
push rax
pushf
mov eax, 0x94183593
pushf
not eax
add eax, 0x7fbe1037
xor eax, 0x71378353
rol eax, 0x34
popf
pushf
not eax
add eax, 0x46cb8199
xor eax, 0x534fc578
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xf0276d1
xor eax, 0x3155af33
rol eax, 0x93
popf
pushf
not eax
add eax, 0x1b3d5ed7
xor eax, 0x63ba05c7
rol eax, 0x2f
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0xf63f520b
pushf
not eax
add eax, 0x15dfea7b
xor eax, 0x19747079
rol eax, 1
popf
pushf
not eax
add eax, 0x2bb4d195
xor eax, 0x64972b6a
rol eax, 0x33
popf
pushf
not eax
add eax, 0x5fa6eb8a
xor eax, 0x379316a8
rol eax, 0xe7
popf
jmp 0x1400480f6
lea rdx, [rsp + 0x20]
mov rcx, rsi
jmp 0x140049231
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140049281
push rax
pushf
mov eax, 0xf5b773e9
pushf
not eax
add eax, 0x7f8b4944
xor eax, 0x412e7cb6
rol eax, 0x70
popf
pushf
not eax
add eax, 0x715cf32f
xor eax, 0x20a32a2f
rol eax, 7
popf
pushf
not eax
add eax, 0x9b72a9d
xor eax, 0x20372329
rol eax, 0x57
popf
jmp 0x1400480f6
push rax
pushf
mov eax, 0x8c0de54d
pushf
not eax
add eax, 0x4750a9e
xor eax, 0x8171cbd
rol eax, 2
popf
pushf
not eax
add eax, 0x74441122
xor eax, 0x7283296c
rol eax, 0xa5
popf
jmp 0x1400480f6
mov rcx, rsi
jmp 0x1400492b8
call qword [sym.imp.KERNEL32.dll_FindClose]
push rax
pushf
mov eax, 0x1562e41a
pushf
not eax
add eax, 0x32ed183a
xor eax, 0xf1b34c3
rol eax, 4
popf
pushf
not eax
add eax, 0x6038276d
xor eax, 0x306819ab
rol eax, 0x4a
popf
jmp 0x1400480f6
mov rcx, qword [0x14002fa90]
mov r8, rdi
xor edx, edx
mov rcx, qword [rcx + 0x18]
jmp 0x140049302
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov eax, r14d
push rax
pushf
mov eax, 0x4aa7484b
pushf
not eax
add eax, 0x59f4dab1
xor eax, 0x59886915
rol eax, 2
popf
pushf
not eax
add eax, 0x32f25c2
xor eax, 0x6f5df394
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x76c32bc3
xor eax, 0x6b1dc5f8
rol eax, 0x86
popf
jmp 0x1400480f6
lea r11, [rsp + 0x4c0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret