Function at 0x14004588e
Capabilities:
Enumerate files on windows

Disassembly:
push rax
pushf
mov eax, 0xcdb47b69
pushf
not eax
add eax, 0xc653732e
xor eax, 0xf3dcb159
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xa82e4f19
xor eax, 0x8f20456f
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa1da353e
xor eax, 0x958c97e8
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xe8fa228d
xor eax, 0xdd30930d
rol eax, 0xdf
popf
cmp eax, 0x29
jne 0x1400458f1
popf
pop rax
jmp 0x140047035
cmp eax, 0
jne 0x140045900
popf
pop rax
jmp 0x140045bdf
cmp eax, 3
jne 0x14004590f
popf
pop rax
jmp 0x140045dd2
cmp eax, 1
jne 0x14004591e
popf
pop rax
jmp 0x140045ccf
cmp eax, 0xd
jne 0x14004592d
popf
pop rax
jmp 0x14004631f
cmp eax, 0x1a
jne 0x14004593c
popf
pop rax
jmp 0x1400468f6
cmp eax, 0xe
jne 0x14004594b
popf
pop rax
jmp 0x140046380
cmp eax, 0x31
jne 0x14004595a
popf
pop rax
jmp 0x140047505
cmp eax, 0x19
jne 0x140045969
popf
pop rax
jmp 0x14004683d
cmp eax, 8
jne 0x140045978
popf
pop rax
jmp 0x140046077
cmp eax, 0x2a
jne 0x140045987
popf
pop rax
jmp 0x1400470c7
cmp eax, 0x17
jne 0x140045996
popf
pop rax
jmp 0x14004671a
cmp eax, 0x1c
jne 0x1400459a5
popf
pop rax
jmp 0x140046996
cmp eax, 0x2e
jne 0x1400459b4
popf
pop rax
jmp 0x140047363
cmp eax, 0x18
jne 0x1400459c3
popf
pop rax
jmp 0x140046780
cmp eax, 0x2b
jne 0x1400459d2
popf
pop rax
jmp 0x140047115
cmp eax, 0x1b
jne 0x1400459e1
popf
pop rax
jmp 0x140046935
cmp eax, 0x2d
jne 0x1400459f0
popf
pop rax
jmp 0x1400472c2
cmp eax, 0x23
jne 0x1400459ff
popf
pop rax
jmp 0x140046d12
cmp eax, 0x25
jne 0x140045a0e
popf
pop rax
jmp 0x140046e2b
cmp eax, 0x32
jne 0x140045a1d
popf
pop rax
jmp 0x140047554
cmp eax, 0x13
jne 0x140045a2c
popf
pop rax
jmp 0x140046571
cmp eax, 0x15
jne 0x140045a3b
popf
pop rax
jmp 0x1400465e6
cmp eax, 0x24
jne 0x140045a4a
popf
pop rax
jmp 0x140046d98
cmp eax, 0x1e
jne 0x140045a59
popf
pop rax
jmp 0x140046ad1
cmp eax, 0xc
jne 0x140045a68
popf
pop rax
jmp 0x1400462e0
cmp eax, 0x26
jne 0x140045a77
popf
pop rax
jmp 0x140046ee1
cmp eax, 0x27
jne 0x140045a86
popf
pop rax
jmp 0x140046f4d
cmp eax, 0x30
jne 0x140045a95
popf
pop rax
jmp 0x140047469
cmp eax, 0x10
jne 0x140045aa4
popf
pop rax
jmp 0x1400463f6
cmp eax, 0x2c
jne 0x140045ab3
popf
pop rax
jmp 0x140047221
cmp eax, 9
jne 0x140045ac2
popf
pop rax
jmp 0x140046110
cmp eax, 4
jne 0x140045ad1
popf
pop rax
jmp 0x140045e6e
cmp eax, 0x16
jne 0x140045ae0
popf
pop rax
jmp 0x1400466d0
cmp eax, 0x28
jne 0x140045aef
popf
pop rax
jmp 0x140047000
cmp eax, 0xa
jne 0x140045afe
popf
pop rax
jmp 0x14004616c
cmp eax, 0x22
jne 0x140045b0d
popf
pop rax
jmp 0x140046cc9
cmp eax, 0x14
jne 0x140045b1c
popf
pop rax
jmp 0x1400465b0
cmp eax, 7
jne 0x140045b2b
popf
pop rax
jmp 0x140045ff3
cmp eax, 5
jne 0x140045b3a
popf
pop rax
jmp 0x140045f03
cmp eax, 2
jne 0x140045b49
popf
pop rax
jmp 0x140045d50
cmp eax, 0x20
jne 0x140045b58
popf
pop rax
jmp 0x140046bd1
cmp eax, 0x1d
jne 0x140045b67
popf
pop rax
jmp 0x140046a2b
cmp eax, 0x11
jne 0x140045b76
popf
pop rax
jmp 0x140046448
cmp eax, 6
jne 0x140045b85
popf
pop rax
jmp 0x140045f98
cmp eax, 0x2f
jne 0x140045b94
popf
pop rax
jmp 0x140047408
cmp eax, 0x12
jne 0x140045ba3
popf
pop rax
jmp 0x1400464cb
cmp eax, 0x21
jne 0x140045bb2
popf
pop rax
jmp 0x140046c64
cmp eax, 0x1f
jne 0x140045bc1
popf
pop rax
jmp 0x140046b22
cmp eax, 0xb
jne 0x140045bd0
popf
pop rax
jmp 0x140046260
cmp eax, 0xf
jne 0x140045bdf
popf
pop rax
jmp 0x1400463ef
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x140018008]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r12, r8
mov rsi, rcx
movabs rbx, 0x4bb49f80c82e5103
pushf
not rbx
add rbx, 0x7c6eba1e
xor rbx, 0x4bbd96d0
rol rbx, 0xd9
popf
pushf
not rbx
add rbx, 0x5dde6ae9
xor rbx, 0x4875c428
rol rbx, 0xe1
popf
cmp rdx, rcx
je 0x140045c9c
push rax
pushf
mov eax, 0xce75faa8
pushf
not eax
add eax, 0xbd98eff5
xor eax, 0xe25da305
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xffed1f00
xor eax, 0x8ecccf1d
rol eax, 0x96
popf
pushf
not eax
add eax, 0xb9bb7233
xor eax, 0xcf34208a
rol eax, 0x77
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x89ba34d4
pushf
not eax
add eax, 0x8a72f656
xor eax, 0xa8a381a2
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xc6a96f8d
xor eax, 0xf6a08786
rol eax, 0x19
popf
jmp 0x1400458e2
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x140045d1d
push rax
pushf
mov eax, 0x39aa847c
pushf
not eax
add eax, 0xa0a420e6
xor eax, 0xaaba9488
rol eax, 0xca
popf
pushf
not eax
add eax, 0xaf6211a7
xor eax, 0xacb6ef84
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xd5e5364e
xor eax, 0xf3ce2582
rol eax, 0x4e
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xd6620d4c
pushf
not eax
add eax, 0xb7550546
xor eax, 0xac2aec10
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8a6f222b
xor eax, 0xb25358de
rol eax, 0xd3
popf
jmp 0x1400458e2
movsx rax, al
bt rbx, rax
jb 0x140045da0
push rax
pushf
mov eax, 0xfb3f26c2
pushf
not eax
add eax, 0xb8f8693f
xor eax, 0xd30a0d1a
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xd1d77669
xor eax, 0xa9c16d6b
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xc3a33de8
xor eax, 0xf7fd4ad4
rol eax, 0xc5
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x409594dd
pushf
not eax
add eax, 0xd5ad0382
xor eax, 0xf46ac2dc
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb9668813
xor eax, 0xad36d281
rol eax, 1
popf
jmp 0x1400458e2
mov rcx, rsi
call fcn.140047795
mov rdx, rax
cmp rax, rsi
jne 0x140045e15
push rax
pushf
mov eax, 0x213c1b6
pushf
not eax
add eax, 0xe0fa3be0
xor eax, 0xab87b59b
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x88cc3cab
xor eax, 0xe96753e7
rol eax, 0xb9
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x8ec00c6d
pushf
not eax
add eax, 0xc00e7b4a
xor eax, 0x813d1779
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x83929118
xor eax, 0xb2c26a28
rol eax, 6
popf
pushf
not eax
add eax, 0x8bbd1fbf
xor eax, 0xd3d3e2be
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xe361f66a
xor eax, 0xbebf19a5
rol eax, 0xb4
popf
jmp 0x1400458e2
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x140045ebd
push rax
pushf
mov eax, 0x10737020
pushf
not eax
add eax, 0xa4c2fb95
xor eax, 0xda256233
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x8fb61cda
xor eax, 0xbac0a030
rol eax, 0x96
popf
pushf
not eax
add eax, 0xb9e44f1e
xor eax, 0xeafccc00
rol eax, 0x43
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x2bdb795a
pushf
not eax
add eax, 0xc6158b67
xor eax, 0xc94795e5
rol eax, 9
popf
pushf
not eax
add eax, 0xf10ffe31
xor eax, 0xe7a23cb4
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfb1924cd
xor eax, 0x8738092b
rol eax, 0xf9
popf
jmp 0x1400458e2
lea rax, [rsi + 1]
cmp rdx, rax
je 0x140045f52
push rax
pushf
mov eax, 0x4931b500
pushf
not eax
add eax, 0xfaaf3dae
xor eax, 0xd046f3aa
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xe634707b
xor eax, 0x8e984ed0
rol eax, 0x73
popf
pushf
not eax
add eax, 0x996026ae
xor eax, 0xbc54c08a
rol eax, 0x53
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x9085b7d6
pushf
not eax
add eax, 0xc61b17ce
xor eax, 0x802a59eb
rol eax, 0x44
popf
pushf
not eax
add eax, 0xe3397b78
xor eax, 0xc6d546e0
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xae74c83d
xor eax, 0xe8dc4504
rol eax, 8
popf
jmp 0x1400458e2
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400615b2
jmp 0x140047556
sub r8b, 0x2f
xor edi, edi
cmp r8b, 0x2d
ja 0x140046032
push rax
pushf
mov eax, 0x4179a4a8
pushf
not eax
add eax, 0x8e281206
xor eax, 0xced6250b
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xfdf793a9
xor eax, 0x95d00f33
rol eax, 0x7f
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x9c249915
pushf
not eax
add eax, 0xc231b681
xor eax, 0xf5705db5
rol eax, 1
popf
pushf
not eax
add eax, 0x8b516661
xor eax, 0xd47f7039
rol eax, 0x65
popf
pushf
not eax
add eax, 0xc5d7b178
xor eax, 0xe0a51e30
rol eax, 0x83
popf
jmp 0x1400458e2
movsx rax, r8b
bt rbx, rax
mov al, 0xd9
pushf
not al
add al, 0xf2
xor al, 0xf6
rol al, 0x27
popf
pushf
not al
add al, 0xe8
xor al, 0xb5
rol al, 0x35
popf
pushf
not al
add al, 0x79
xor al, 0xd0
rol al, 0xe4
popf
jb 0x1400460dd
push rax
pushf
mov eax, 0xe5d6efcc
pushf
not eax
add eax, 0xa8c49b22
xor eax, 0xbb29aafd
rol eax, 0x18
popf
pushf
not eax
add eax, 0xe7cb8fa5
xor eax, 0xbf51cba7
rol eax, 0x41
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xad2c7d54
pushf
not eax
add eax, 0xc221d6d3
xor eax, 0x97093bb6
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xc11d3af8
xor eax, 0xfad8b2b8
rol eax, 0x6e
popf
jmp 0x1400458e2
mov al, dil
push rax
pushf
mov eax, 0x3b6cfcd9
pushf
not eax
add eax, 0xd32011eb
xor eax, 0xcd5dab7b
rol eax, 0x34
popf
pushf
not eax
add eax, 0xdf938d52
xor eax, 0x95c0797b
rol eax, 0x77
popf
pushf
not eax
add eax, 0xe09252eb
xor eax, 0x8150bf87
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf6d1903f
xor eax, 0xd410840a
rol eax, 0x96
popf
jmp 0x1400458e2
sub rdx, rsi
mov qword [rbp - 0x60], rdi
inc rdx
mov qword [rbp - 0x58], rdi
neg al
mov qword [rbp - 0x50], rdi
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
sbb r13, r13
mov qword [rbp - 0x40], rdi
and r13, rdx
mov byte [rbp - 0x38], dil
xor edx, edx
call fcn.140059661
mov rax, qword [rsp + 0x38]
mov r15d, 0xe7dcfb26
pushf
not r15d
add r15d, 0xc115013d
xor r15d, 0xd3801d48
rol r15d, 0x16
popf
pushf
not r15d
add r15d, 0x88eff9d6
xor r15d, 0xa683f9ad
rol r15d, 0x1a
popf
pushf
not r15d
add r15d, 0xd4ddd0b7
xor r15d, 0xbbda15ee
rol r15d, 0xae
popf
cmp dword [rax + 0xc], r15d
jne 0x14004622d
push rax
pushf
mov eax, 0x8c6ed6ca
pushf
not eax
add eax, 0x8c600403
xor eax, 0xac90e6ef
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xa567fad0
xor eax, 0x97094154
rol eax, 0x7b
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xe4dfad10
pushf
not eax
add eax, 0x8c0be6a5
xor eax, 0xc210d1f3
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x83e544b7
xor eax, 0xe57110c4
rol eax, 0xfb
popf
jmp 0x1400458e2
cmp byte [rsp + 0x48], dil
je 0x14004629a
push rax
pushf
mov eax, 0x38fe46c2
pushf
not eax
add eax, 0xec0e99fc
xor eax, 0xf4db005c
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xd841385b
xor eax, 0xa1ecbb95
rol eax, 0x7e
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xa4329c34
pushf
not eax
add eax, 0x8db550f8
xor eax, 0xbe0e11a9
rol eax, 0x82
popf
pushf
not eax
add eax, 0xab8e8b7d
xor eax, 0x823cfbab
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x978be5a8
xor eax, 0xd110ac94
rol eax, 0x3b
popf
jmp 0x1400458e2
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xc0757f5
pushf
not eax
add eax, 0xc884eb17
xor eax, 0x9df08ec0
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x84f9c9d2
xor eax, 0xb31bb7a3
rol eax, 0x7f
popf
jmp 0x1400458e2
mov r8d, r15d
jmp 0x1400465e6
call fcn.14005ecf8
test eax, eax
jne 0x1400463bc
push rax
pushf
mov eax, 0xa272a7b7
pushf
not eax
add eax, 0xccfec6ca
xor eax, 0xb026a8f9
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xcd50eefb
xor eax, 0xe1b65a43
rol eax, 0xd7
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x877db18c
pushf
not eax
add eax, 0xc74b0fcf
xor eax, 0xbccd26d8
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x99296720
xor eax, 0x85d00710
rol eax, 0x31
popf
jmp 0x1400458e2
cmp byte [rsp + 0x48], dil
je 0x140046448
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x5127e4da
pushf
not eax
add eax, 0xb39c1155
xor eax, 0xf629281c
rol eax, 0x65
popf
pushf
not eax
add eax, 0xcbb7fc89
xor eax, 0xa439dd5b
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf329e05e
xor eax, 0xc40f9d72
rol eax, 0xce
popf
jmp 0x1400458e2
mov r8d, 0x18b5a44b
pushf
not r8d
add r8d, 0xcf65dcb1
xor r8d, 0xa10801b2
rol r8d, 0x49
popf
pushf
not r8d
add r8d, 0xf5ee25c8
xor r8d, 0xa57a7798
rol r8d, 0x23
popf
jmp 0x1400465e6
cmp byte [rsp + 0x48], dil
je 0x140046518
push rax
pushf
mov eax, 0xab480654
pushf
not eax
add eax, 0xb24f516f
xor eax, 0xeab8b489
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xf26808f9
xor eax, 0xd512613d
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf239579c
xor eax, 0xf29a3db3
rol eax, 0xe8
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x708bdeb0
pushf
not eax
add eax, 0xe7fdc968
xor eax, 0xe804321d
rol eax, 0x28
popf
pushf
not eax
add eax, 0xdaabf0ab
xor eax, 0x93414edb
rol eax, 0x19
popf
pushf
not eax
add eax, 0x903be055
xor eax, 0x887070e7
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x8c19f4d8
xor eax, 0xff525b46
rol eax, 0x82
popf
jmp 0x1400458e2
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xb5eb5094
pushf
not eax
add eax, 0xc54a228e
xor eax, 0xfc3361b1
rol eax, 0x14
popf
pushf
not eax
add eax, 0x8926facc
xor eax, 0x9097c3f0
rol eax, 0xe8
popf
jmp 0x1400458e2
mov r8d, edi
push rax
pushf
mov eax, 0x70c403e0
pushf
not eax
add eax, 0xbea6a1e1
xor eax, 0xc86fbaf5
rol eax, 0xca
popf
pushf
not eax
add eax, 0xf25b2a5e
xor eax, 0xbdc60447
rol eax, 0x54
popf
jmp 0x1400458e2
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140047800
mov rcx, qword [rbp - 0x50]
lea r8, [rbp - 0x30]
test eax, eax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
cmovne rcx, rdi
xor r9d, r9d
xor edx, edx
jmp 0x14004660f
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140046677
push rax
pushf
mov eax, 0xd74c8f64
pushf
not eax
add eax, 0xe07eef1e
xor eax, 0xe099944a
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x97d9f83d
xor eax, 0xbf376c09
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xc9aa1d70
xor eax, 0xd3284e12
rol eax, 0x12
popf
pushf
not eax
add eax, 0x9c7bca42
xor eax, 0xb508fc40
rol eax, 0x7f
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x7a26d28f
pushf
not eax
add eax, 0x975a0a8e
xor eax, 0xd0777c71
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x978e1bc2
xor eax, 0x87ce2462
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xd390c542
xor eax, 0xc31659f6
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xe07bb8f9
xor eax, 0x9deeea96
rol eax, 0xcc
popf
jmp 0x1400458e2
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400615b2
mov edi, eax
jmp 0x140047473
mov r14, qword [r12 + 8]
sub r14, qword [r12]
sar r14, 3
push rax
pushf
mov eax, 0x98d989ae
pushf
not eax
add eax, 0xa22acf07
xor eax, 0xb571c72f
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xd15f711c
xor eax, 0x93fae101
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xa9eb38a0
xor eax, 0xcc940e63
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf830b43d
xor eax, 0x878d4261
rol eax, 0x46
popf
jmp 0x1400458e2
xor edx, edx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
call fcn.140059661
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jne 0x14004680a
push rax
pushf
mov eax, 0x9687e132
pushf
not eax
add eax, 0xb0121c30
xor eax, 0x8e4b5810
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xabd89c85
xor eax, 0xb7deb6a9
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xfa731da6
xor eax, 0xf0f88bfd
rol eax, 6
popf
pushf
not eax
add eax, 0xd8810061
xor eax, 0xbea99f76
rol eax, 0x86
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x2e7a955c
pushf
not eax
add eax, 0xd4eeb0cb
xor eax, 0xb5650c99
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xba6b2fa7
xor eax, 0xae1eeb47
rol eax, 0x26
popf
jmp 0x1400458e2
cmp byte [rsp + 0x68], dil
je 0x14004689d
push rax
pushf
mov eax, 0x421ac365
pushf
not eax
add eax, 0x9d0fe0ea
xor eax, 0x858e3b2e
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xcf64c4cc
xor eax, 0xe1d30e43
rol eax, 0x56
popf
pushf
not eax
add eax, 0x8df7e601
xor eax, 0xd91f6541
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x871c9b70
xor eax, 0xf86abc77
rol eax, 0x68
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x3b85037
pushf
not eax
add eax, 0xa85b4125
xor eax, 0xf861c30d
rol eax, 3
popf
pushf
not eax
add eax, 0xf6ce2163
xor eax, 0xac2ba801
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc1cc59cc
xor eax, 0xbc10c804
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xc5b5ee4a
xor eax, 0xbec48f47
rol eax, 0x3a
popf
jmp 0x1400458e2
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe363bea4
pushf
not eax
add eax, 0x92347e6b
xor eax, 0xdf2b7f6d
rol eax, 7
popf
pushf
not eax
add eax, 0xb938d61c
xor eax, 0xd7588063
rol eax, 6
popf
jmp 0x1400458e2
mov r8d, r15d
jmp 0x140046d12
call fcn.14005ecf8
test eax, eax
jne 0x1400469e5
push rax
pushf
mov eax, 0xa145c2da
pushf
not eax
add eax, 0xc9acb118
xor eax, 0xee6852c8
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xee7a1a70
xor eax, 0x9b684725
rol eax, 0x67
popf
pushf
not eax
add eax, 0xca08ac5a
xor eax, 0xeb2c170d
rol eax, 0xcb
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xc3093081
pushf
not eax
add eax, 0x869f4bbf
xor eax, 0x901065e4
rol eax, 9
popf
pushf
not eax
add eax, 0x8b834f6e
xor eax, 0xe7ad22ee
rol eax, 0x12
popf
pushf
not eax
add eax, 0xa018b50e
xor eax, 0xa776526b
rol eax, 0x5c
popf
jmp 0x1400458e2
cmp byte [rsp + 0x68], dil
je 0x140046a78
push rax
pushf
mov eax, 0xdc0eaca2
pushf
not eax
add eax, 0xc45f907c
xor eax, 0x8bf8e000
rol eax, 0x91
popf
pushf
not eax
add eax, 0xeba00ced
xor eax, 0xf036a62b
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa16b152c
xor eax, 0xaf7f8b3e
rol eax, 0x8d
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x9be71c94
pushf
not eax
add eax, 0x91705dd9
xor eax, 0xf3cd2286
rol eax, 0x71
popf
pushf
not eax
add eax, 0x94bbf810
xor eax, 0xdb7bfeb5
rol eax, 0x97
popf
pushf
not eax
add eax, 0xbd017f25
xor eax, 0xbe11026b
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc3f46bba
xor eax, 0xed180bc0
rol eax, 0x99
popf
jmp 0x1400458e2
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x686316fe
pushf
not eax
add eax, 0x8ad164e6
xor eax, 0xb1b175e4
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xd33c587c
xor eax, 0x867edeeb
rol eax, 1
popf
pushf
not eax
add eax, 0xefc0860b
xor eax, 0xd15bdfe7
rol eax, 0xd8
popf
jmp 0x1400458e2
mov r8d, 0xdff9de69
pushf
not r8d
add r8d, 0xbcd54355
xor r8d, 0xa0a60625
rol r8d, 0x87
popf
pushf
not r8d
add r8d, 0x81fdb78f
xor r8d, 0xc5867f5a
rol r8d, 0xc5
popf
pushf
not r8d
add r8d, 0xd039dee2
xor r8d, 0xf6f3f991
rol r8d, 0x56
popf
jmp 0x140046d12
cmp byte [rsp + 0x68], dil
je 0x140046c31
push rax
pushf
mov eax, 0x3833316b
pushf
not eax
add eax, 0xfce651cd
xor eax, 0xcdf91abd
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc40aa77f
xor eax, 0xf279bdbc
rol eax, 0xca
popf
pushf
not eax
add eax, 0xfe4bd5cb
xor eax, 0x8aa73b04
rol eax, 0x87
popf
pushf
not eax
add eax, 0x9d76a9ee
xor eax, 0xbca9450b
rol eax, 0xc3
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xf022156f
pushf
not eax
add eax, 0xb58a6b77
xor eax, 0xf6b09680
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc19796ca
xor eax, 0x8dbedec2
rol eax, 0x5a
popf
jmp 0x1400458e2
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x8abe05bd
pushf
not eax
add eax, 0xa5dcdd79
xor eax, 0xf69b4972
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xd9a8c93f
xor eax, 0xb61daa66
rol eax, 0x65
popf
pushf
not eax
add eax, 0x835a25cb
xor eax, 0xfc43f3ec
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xc52d453d
xor eax, 0xec1058b7
rol eax, 0xe2
popf
jmp 0x1400458e2
mov r8d, edi
push rax
pushf
mov eax, 0x895ea221
pushf
not eax
add eax, 0xc2e77d35
xor eax, 0x8dab47dd
rol eax, 0x99
popf
pushf
not eax
add eax, 0xca86017c
xor eax, 0xb134c9ee
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xdcd3dcdb
xor eax, 0xae184955
rol eax, 0x4f
popf
jmp 0x1400458e2
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 4]
call fcn.140074328
mov r15, qword [rbp - 0x80]
test eax, eax
mov rcx, r15
cmovne rcx, rdi
cmp byte [rcx], 0x2e
jne 0x140046d65
push rax
pushf
mov eax, 0xfb41d9b4
pushf
not eax
add eax, 0xeaf840d1
xor eax, 0xbe14d381
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe24e2fd8
xor eax, 0xcde582b2
rol eax, 0xc4
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x4f0cc971
pushf
not eax
add eax, 0xc84d8788
xor eax, 0xc8a192a6
rol eax, 0x94
popf
pushf
not eax
add eax, 0xa8daa923
xor eax, 0xddcdfb10
rol eax, 0xb4
popf
jmp 0x1400458e2
mov al, byte [rcx + 1]
test al, al
je 0x140046dd2
push rax
pushf
mov eax, 0xf5cafcc0
pushf
not eax
add eax, 0xb22d2be8
xor eax, 0xd6d6dcbb
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xf4f414cb
xor eax, 0xadbb3f65
rol eax, 3
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xf69b064a
pushf
not eax
add eax, 0xbdde245d
xor eax, 0xee0feec3
rol eax, 0x20
popf
pushf
not eax
add eax, 0xec886a31
xor eax, 0x809b86e3
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xa952fdc2
xor eax, 0x8f4635bb
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x808518fe
xor eax, 0xacf79c34
rol eax, 0xc4
popf
jmp 0x1400458e2
cmp al, 0x2e
jne 0x140046e88
push rax
pushf
mov eax, 0x44b796bd
pushf
not eax
add eax, 0xca531f4d
xor eax, 0xb09fd6fa
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xc4ade9f9
xor eax, 0xf31b3217
rol eax, 0x76
popf
pushf
not eax
add eax, 0x8a67e248
xor eax, 0xee7cfd23
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x9856316b
xor eax, 0xad540766
rol eax, 0xfc
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xe164c0ef
pushf
not eax
add eax, 0x94aeb163
xor eax, 0xffdcc278
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xc4c88b9b
xor eax, 0xaa1c5990
rol eax, 0x35
popf
pushf
not eax
add eax, 0xa6bc52a3
xor eax, 0xd733aa07
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x932f7ace
xor eax, 0xb55a26c9
rol eax, 0xf7
popf
jmp 0x1400458e2
cmp byte [rcx + 2], dil
je 0x140046f1a
push rax
pushf
mov eax, 0x67f1f2e2
pushf
not eax
add eax, 0x8c624a4c
xor eax, 0x9829d0ce
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xd21e073b
xor eax, 0xe916f0d9
rol eax, 0x2d
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x493e29c2
pushf
not eax
add eax, 0x8f01b8ff
xor eax, 0xaff977e5
rol eax, 0x30
popf
pushf
not eax
add eax, 0x8ad2471b
xor eax, 0x90b05ce0
rol eax, 0xed
popf
jmp 0x1400458e2
mov r9, r12
mov r8, r13
mov rdx, rsi
call fcn.1400615b2
mov edi, eax
test eax, eax
jne 0x140046fa7
push rax
pushf
mov eax, 0x619fe3e0
pushf
not eax
add eax, 0xb0206327
xor eax, 0xd6c1e8a5
rol eax, 0x10
popf
pushf
not eax
add eax, 0x82edb13a
xor eax, 0xad23bd77
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xfe9ae2e2
xor eax, 0xaa0fc455
rol eax, 0xad
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x3d7fdd7
pushf
not eax
add eax, 0xa3baf0e1
xor eax, 0xe562b395
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x8ffbef77
xor eax, 0x9b26c785
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x846b2bf2
xor eax, 0xbc1be16e
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xe5743e1e
xor eax, 0xcbe3161f
rol eax, 0xdb
popf
jmp 0x1400458e2
xor edi, edi
push rax
pushf
mov eax, 0x8508fce
pushf
not eax
add eax, 0x88e6cfca
xor eax, 0xfe03ef1b
rol eax, 2
popf
pushf
not eax
add eax, 0xf749d8a7
xor eax, 0xfca09525
rol eax, 0x8f
popf
jmp 0x1400458e2
cmp byte [rbp - 0x68], dil
je 0x140047081
push rax
pushf
mov eax, 0x5e773982
pushf
not eax
add eax, 0xed578562
xor eax, 0xb5109c06
rol eax, 0x83
popf
pushf
not eax
add eax, 0x9dd0a4c1
xor eax, 0xcd8ab113
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xb2e01bb7
xor eax, 0xc20ae28f
rol eax, 0x61
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x887ab7a7
pushf
not eax
add eax, 0xd8842f98
xor eax, 0xa4810a76
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x99529026
xor eax, 0x8826df5f
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x8fdb41e6
xor eax, 0xfb60805a
rol eax, 0xaa
popf
jmp 0x1400458e2
mov rcx, r15
call fcn.14007221b
push rax
pushf
mov eax, 0xfc7095da
pushf
not eax
add eax, 0x896e7d2d
xor eax, 0xac9b4287
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xadcebbfd
xor eax, 0x88a8b305
rol eax, 0x31
popf
pushf
not eax
add eax, 0xf57567a2
xor eax, 0xb26fa666
rol eax, 0x18
popf
jmp 0x1400458e2
lea rdx, [rbp - 0x30]
mov rcx, rbx
jmp 0x14004711d
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0x2c3b922a
pushf
not r15d
add r15d, 0xe6a38f3b
xor r15d, 0xbccf393a
rol r15d, 0x20
popf
pushf
not r15d
add r15d, 0xb1009da0
xor r15d, 0xac965d0d
rol r15d, 0xef
popf
pushf
not r15d
add r15d, 0xcfcf70b4
xor r15d, 0x944942f9
rol r15d, 0xc2
popf
pushf
not r15d
add r15d, 0xb706c00b
xor r15d, 0xb2770160
rol r15d, 0x70
popf
test eax, eax
jne 0x1400471c8
push rax
pushf
mov eax, 0xe68f5290
pushf
not eax
add eax, 0x9bc00918
xor eax, 0xb1c011c4
rol eax, 0x63
popf
pushf
not eax
add eax, 0xed4c652e
xor eax, 0xc5c72a75
rol eax, 0xfd
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0xcd38a2c9
pushf
not eax
add eax, 0xfbbc6b56
xor eax, 0xbbb8cd5a
rol eax, 0x22
popf
pushf
not eax
add eax, 0xb1a16bd4
xor eax, 0xd6796b6d
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xfd8a4b43
xor eax, 0x9e968f61
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xd866560c
xor eax, 0xc333f5fd
rol eax, 0x84
popf
jmp 0x1400458e2
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp r14, rdx
je 0x14004727c
push rax
pushf
mov eax, 0x65d207cb
pushf
not eax
add eax, 0xac7dedb3
xor eax, 0xc1fd6836
rol eax, 3
popf
pushf
not eax
add eax, 0xe8c70187
xor eax, 0x8f50aeed
rol eax, 0x88
popf
pushf
not eax
add eax, 0xfe91a8e9
xor eax, 0xbc55919d
rol eax, 0xbf
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x50b81298
pushf
not eax
add eax, 0xe4d42b6c
xor eax, 0xd92e21a5
rol eax, 0xca
popf
pushf
not eax
add eax, 0xe52b88f2
xor eax, 0xaa0deb7e
rol eax, 0x85
popf
pushf
not eax
add eax, 0xb081c9de
xor eax, 0xd7793167
rol eax, 0x68
popf
jmp 0x1400458e2
sub rdx, r14
lea rcx, [rax + r14*8]
lea r9, [0x1946dd621]
pushf
sub r9, 0x546d7589
popf
mov r8d, 0xe025e12f
pushf
not r8d
add r8d, 0xde0787be
xor r8d, 0xd70a38d4
rol r8d, 0x7e
popf
pushf
not r8d
add r8d, 0x82e6b7ab
xor r8d, 0xf8abd014
rol r8d, 0xac
popf
call fcn.140065369
jmp 0x140047469
cmp byte [rbp - 0x68], 0
je 0x1400473af
push rax
pushf
mov eax, 0x7d524fee
pushf
not eax
add eax, 0xe7141912
xor eax, 0xd564e37c
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe0d025c4
xor eax, 0xd8b37fe8
rol eax, 0xea
popf
pushf
not eax
add eax, 0xbd6430d9
xor eax, 0xb2b3e737
rol eax, 0x94
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x7e9f60ba
pushf
not eax
add eax, 0xc584009a
xor eax, 0x995e4c51
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xe61075b4
xor eax, 0xb85c7b7c
rol eax, 0x67
popf
pushf
not eax
add eax, 0x85baa1ae
xor eax, 0x93377b37
rol eax, 7
popf
pushf
not eax
add eax, 0xe908c0da
xor eax, 0xbdd62560
rol eax, 0x3b
popf
jmp 0x1400458e2
mov rcx, r15
call fcn.14007221b
push rax
pushf
mov eax, 0x2fbc88f
pushf
not eax
add eax, 0xdd2456ab
xor eax, 0xe5edb37c
rol eax, 3
popf
pushf
not eax
add eax, 0xe3a45db4
xor eax, 0xfe2db2ad
rol eax, 0x90
popf
pushf
not eax
add eax, 0xdf97e061
xor eax, 0xbd1d601e
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x8cd15061
xor eax, 0x95680a7e
rol eax, 0xe3
popf
jmp 0x1400458e2
mov rcx, rbx
jmp 0x14004746d
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1400474ac
push rax
pushf
mov eax, 0x3ac06a1a
pushf
not eax
add eax, 0x81b8c2f3
xor eax, 0x87b370e9
rol eax, 0xee
popf
pushf
not eax
add eax, 0xc7d33817
xor eax, 0xccc6c7c4
rol eax, 0x88
popf
jmp 0x1400458e2
push rax
pushf
mov eax, 0x588a837e
pushf
not eax
add eax, 0x9d5618a6
xor eax, 0x994bc9dd
rol eax, 0x35
popf
pushf
not eax
add eax, 0xcf93eda6
xor eax, 0xc90be9c0
rol eax, 0x96
popf
pushf
not eax
add eax, 0xc41cb8a8
xor eax, 0x84abc2b2
rol eax, 0x38
popf
pushf
not eax
add eax, 0x8d225d24
xor eax, 0x8fd8677a
rol eax, 0x6c
popf
jmp 0x1400458e2
mov rcx, qword [rbp - 0x50]
call fcn.14007221b
push rax
pushf
mov eax, 0x537a5f6c
pushf
not eax
add eax, 0xaf9d580c
xor eax, 0xbd8d0754
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xddd633b5
xor eax, 0x96a3f77f
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xd9a24bbd
xor eax, 0xc14d8433
rol eax, 0xd
popf
jmp 0x1400458e2
mov eax, edi
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140053af8
mov rbx, qword [rsp + 0x388]
add rsp, 0x330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret