Function at 0x1800c5617
Capabilities:
Authenticate hmac
Enumerate files on windows

Disassembly:
push rax
pushf
mov eax, 0x8b703a7c
pushf
not eax
add eax, 0xb3c41c08
xor eax, 0xafa50152
rol eax, 0x69
popf
pushf
not eax
add eax, 0xdc37d413
xor eax, 0x8150cf22
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xabef9edc
xor eax, 0xf45c27cb
rol eax, 0xcd
popf
cmp eax, 0x29
jne 0x1800c5667
popf
pop rax
jmp 0x1800c6f76
cmp eax, 0
jne 0x1800c5676
popf
pop rax
jmp 0x1800c59cd
cmp eax, 3
jne 0x1800c5685
popf
pop rax
jmp 0x1800c5c26
cmp eax, 1
jne 0x1800c5694
popf
pop rax
jmp 0x1800c5b22
cmp eax, 0xd
jne 0x1800c56a3
popf
pop rax
jmp 0x1800c620f
cmp eax, 0x1a
jne 0x1800c56b2
popf
pop rax
jmp 0x1800c67f3
cmp eax, 0xe
jne 0x1800c56c1
popf
pop rax
jmp 0x1800c6270
cmp eax, 0x31
jne 0x1800c56d0
popf
pop rax
jmp 0x1800c72f6
cmp eax, 0x19
jne 0x1800c56df
popf
pop rax
jmp 0x1800c67a0
cmp eax, 8
jne 0x1800c56ee
popf
pop rax
jmp 0x1800c5f19
cmp eax, 0x2a
jne 0x1800c56fd
popf
pop rax
jmp 0x1800c6ff3
cmp eax, 0x17
jne 0x1800c570c
popf
pop rax
jmp 0x1800c6729
cmp eax, 0x1c
jne 0x1800c571b
popf
pop rax
jmp 0x1800c6981
cmp eax, 0x2e
jne 0x1800c572a
popf
pop rax
jmp 0x1800c7204
cmp eax, 0x18
jne 0x1800c5739
popf
pop rax
jmp 0x1800c6766
cmp eax, 0x2b
jne 0x1800c5748
popf
pop rax
jmp 0x1800c705e
cmp eax, 0x1b
jne 0x1800c5757
popf
pop rax
jmp 0x1800c68ef
cmp eax, 0x2d
jne 0x1800c5766
popf
pop rax
jmp 0x1800c71a3
cmp eax, 0x23
jne 0x1800c5775
popf
pop rax
jmp 0x1800c6cd9
cmp eax, 0x25
jne 0x1800c5784
popf
pop rax
jmp 0x1800c6d73
cmp eax, 0x32
jne 0x1800c5793
popf
pop rax
jmp 0x1800c735e
cmp eax, 0x13
jne 0x1800c57a2
popf
pop rax
jmp 0x1800c650a
cmp eax, 0x33
jne 0x1800c57b1
popf
pop rax
jmp 0x1800c73e8
cmp eax, 0x24
jne 0x1800c57c0
popf
pop rax
jmp 0x1800c6d3d
cmp eax, 0x1e
jne 0x1800c57cf
popf
pop rax
jmp 0x1800c6a33
cmp eax, 0xc
jne 0x1800c57de
popf
pop rax
jmp 0x1800c61bd
cmp eax, 0x26
jne 0x1800c57ed
popf
pop rax
jmp 0x1800c6e12
cmp eax, 0x27
jne 0x1800c57fc
popf
pop rax
jmp 0x1800c6ea5
cmp eax, 0x30
jne 0x1800c580b
popf
pop rax
jmp 0x1800c7268
cmp eax, 0x10
jne 0x1800c581a
popf
pop rax
jmp 0x1800c6384
cmp eax, 0x37
jne 0x1800c5829
popf
pop rax
jmp 0x1800c7565
cmp eax, 9
jne 0x1800c5838
popf
pop rax
jmp 0x1800c5fde
cmp eax, 0x39
jne 0x1800c5847
popf
pop rax
jmp 0x1800c7665
cmp eax, 0x16
jne 0x1800c5856
popf
pop rax
jmp 0x1800c6671
cmp eax, 0x28
jne 0x1800c5865
popf
pop rax
jmp 0x1800c6f36
cmp eax, 0xa
jne 0x1800c5874
popf
pop rax
jmp 0x1800c6027
cmp eax, 0x36
jne 0x1800c5883
popf
pop rax
jmp 0x1800c7504
cmp eax, 0x14
jne 0x1800c5892
popf
pop rax
jmp 0x1800c656f
cmp eax, 7
jne 0x1800c58a1
popf
pop rax
jmp 0x1800c5e6d
cmp eax, 0x34
jne 0x1800c58b0
popf
pop rax
jmp 0x1800c744b
cmp eax, 2
jne 0x1800c58bf
popf
pop rax
jmp 0x1800c5ba3
cmp eax, 0x20
jne 0x1800c58ce
popf
pop rax
jmp 0x1800c6b80
cmp eax, 0x1d
jne 0x1800c58dd
popf
pop rax
jmp 0x1800c69e5
cmp eax, 0x11
jne 0x1800c58ec
popf
pop rax
jmp 0x1800c63c3
cmp eax, 0x35
jne 0x1800c58fb
popf
pop rax
jmp 0x1800c7485
cmp eax, 0x3a
jne 0x1800c590a
popf
pop rax
jmp 0x1800c76ae
cmp eax, 0x12
jne 0x1800c5919
popf
pop rax
jmp 0x1800c6465
cmp eax, 0x21
jne 0x1800c5928
popf
pop rax
jmp 0x1800c6bbe
cmp eax, 0x38
jne 0x1800c5937
popf
pop rax
jmp 0x1800c7628
cmp eax, 0xb
jne 0x1800c5946
popf
pop rax
jmp 0x1800c613e
cmp eax, 0xf
jne 0x1800c5955
popf
pop rax
jmp 0x1800c6305
cmp eax, 0x15
jne 0x1800c5964
popf
pop rax
jmp 0x1800c65a5
cmp eax, 5
jne 0x1800c5973
popf
pop rax
jmp 0x1800c5d57
cmp eax, 6
jne 0x1800c5982
popf
pop rax
jmp 0x1800c5dff
cmp eax, 0x22
jne 0x1800c5991
popf
pop rax
jmp 0x1800c6c47
cmp eax, 0x2c
jne 0x1800c59a0
popf
pop rax
jmp 0x1800c70ec
cmp eax, 0x1f
jne 0x1800c59af
popf
pop rax
jmp 0x1800c6adb
cmp eax, 4
jne 0x1800c59be
popf
pop rax
jmp 0x1800c5cd5
cmp eax, 0x2f
jne 0x1800c59cd
popf
pop rax
jmp 0x1800c724f
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x180040280]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0xf4411ab50c9ba018
pushf
not rbx
add rbx, 0x4205e5cb
xor rbx, 0x7f21bc85
rol rbx, 0xf0
popf
pushf
not rbx
add rbx, 0x4adcc579
xor rbx, 0x65967c40
rol rbx, 0x22
popf
pushf
not rbx
add rbx, 0x7526f86c
xor rbx, 0x4b7cd898
rol rbx, 0x6b
popf
pushf
not rbx
add rbx, 0x79f7380f
xor rbx, 0x5ac4d787
rol rbx, 0x2b
popf
cmp rdx, rcx
je 0x1800c5ac9
push rax
pushf
mov eax, 0x10ad1e30
pushf
not eax
add eax, 0xa81e4e0c
xor eax, 0x8544b583
rol eax, 1
popf
pushf
not eax
add eax, 0xf0900159
xor eax, 0xdc9f7631
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xf230b1e2
xor eax, 0x8cdd1b76
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa5a1bc26
xor eax, 0xdcded88d
rol eax, 0xe6
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x58697bb
pushf
not eax
add eax, 0x8ff0241a
xor eax, 0xa0a95948
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xbe61569f
xor eax, 0x9c4cafb0
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xcbbfc444
xor eax, 0xb4ac3a40
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xeec4dd8c
xor eax, 0xf0eafc03
rol eax, 9
popf
jmp 0x1800c5658
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x1800c5b5d
push rax
pushf
mov eax, 0x2f4404e3
pushf
not eax
add eax, 0xdcd93c39
xor eax, 0xf49b8c5d
rol eax, 0x78
popf
pushf
not eax
add eax, 0xf8af4da2
xor eax, 0xf0563ee4
rol eax, 0xe0
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x6403d0b8
pushf
not eax
add eax, 0xfe28cc24
xor eax, 0xcd255aee
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xc92768f7
xor eax, 0xead5ac90
rol eax, 0xda
popf
pushf
not eax
add eax, 0xc60c6a7f
xor eax, 0x89572944
rol eax, 0xdf
popf
jmp 0x1800c5658
movsx rax, al
bt rbx, rax
jb 0x1800c5bf3
push rax
pushf
mov eax, 0x1deaa1a5
pushf
not eax
add eax, 0xb98d1d36
xor eax, 0xcb476107
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf038d68d
xor eax, 0xde7f03fe
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xa669cb97
xor eax, 0xd4160da5
rol eax, 0x93
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xec3b5d38
pushf
not eax
add eax, 0xb51416f6
xor eax, 0x847553ef
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x9824969e
xor eax, 0xdd45f179
rol eax, 0x66
popf
jmp 0x1800c5658
mov rcx, rdi
call fcn.1800c8f6c
mov rdx, rax
cmp rax, rdi
jne 0x1800c5c7c
push rax
pushf
mov eax, 0x4e20f447
pushf
not eax
add eax, 0xa57305d3
xor eax, 0x8df282f2
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x820aafea
xor eax, 0x9ac10b60
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc1f7a0bb
xor eax, 0x8f061670
rol eax, 0xed
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x211b613c
pushf
not eax
add eax, 0xe5b553e0
xor eax, 0xff94eeea
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x88feaf48
xor eax, 0xc96c98fd
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xd800db4e
xor eax, 0xf3dd6f9a
rol eax, 0x98
popf
pushf
not eax
add eax, 0xc79f80f2
xor eax, 0x8b81a121
rol eax, 0xee
popf
jmp 0x1800c5658
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x1800c5d24
push rax
pushf
mov eax, 0x8fc23e22
pushf
not eax
add eax, 0x9d1ba5db
xor eax, 0xce807abe
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd7f4dbe5
xor eax, 0xf5dc0fe9
rol eax, 0x90
popf
pushf
not eax
add eax, 0xb0599de8
xor eax, 0xc5e53a42
rol eax, 0xbf
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x48fb0dfe
pushf
not eax
add eax, 0x999d0e3b
xor eax, 0xbc6c2421
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x913f3818
xor eax, 0x9ae02609
rol eax, 0xad
popf
jmp 0x1800c5658
lea rax, [rdi + 1]
cmp rdx, rax
je 0x1800c5da6
push rax
pushf
mov eax, 0x726afd20
pushf
not eax
add eax, 0xc0d2f30a
xor eax, 0x977aaa73
rol eax, 0x73
popf
pushf
not eax
add eax, 0x8c1b52d8
xor eax, 0xdf356c7c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xfa13d6cf
xor eax, 0xeaf57db9
rol eax, 0x66
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xbf90a7ec
pushf
not eax
add eax, 0x95ef5579
xor eax, 0xc3f739a3
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x8b5a7f27
xor eax, 0xda3b559c
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x8eb0e9f3
xor eax, 0xea30a192
rol eax, 0x93
popf
pushf
not eax
add eax, 0x8f512e85
xor eax, 0xb445ef2c
rol eax, 0xa9
popf
jmp 0x1800c5658
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1801397e2
jmp 0x1800c76ae
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x1800c5ec0
push rax
pushf
mov eax, 0xb0d8cc8b
pushf
not eax
add eax, 0x9ef7ac76
xor eax, 0x98ff34e6
rol eax, 0x43
popf
pushf
not eax
add eax, 0xfa15e2ee
xor eax, 0xee0a9ae0
rol eax, 0x14
popf
pushf
not eax
add eax, 0xd36fe736
xor eax, 0xccc5167c
rol eax, 0x20
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xd3652261
pushf
not eax
add eax, 0xa79ec72a
xor eax, 0xa20bdc16
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x8a562380
xor eax, 0xedd71d7d
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xa43484fa
xor eax, 0x8ce9f375
rol eax, 0xab
popf
pushf
not eax
add eax, 0xe58ef58e
xor eax, 0x83824550
rol eax, 0x88
popf
jmp 0x1800c5658
movsx rax, r8b
bt rbx, rax
mov al, 0xec
pushf
not al
add al, 0xd
xor al, 0x16
rol al, 0xdb
popf
pushf
not al
add al, 0xc9
xor al, 0x57
rol al, 0x32
popf
jb 0x1800c5f85
push rax
pushf
mov eax, 0x71f6696c
pushf
not eax
add eax, 0xe48ee2e1
xor eax, 0xa0cfe29a
rol eax, 0x44
popf
pushf
not eax
add eax, 0x80a7d05d
xor eax, 0xdb016fa5
rol eax, 0x66
popf
pushf
not eax
add eax, 0xa58e9652
xor eax, 0x99bce3b1
rol eax, 0xf
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x1d8ebd27
pushf
not eax
add eax, 0xc3996457
xor eax, 0xb1da6709
rol eax, 0x44
popf
pushf
not eax
add eax, 0xa827a442
xor eax, 0xc75c43fb
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xb50094dd
xor eax, 0xe20f3be4
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xf2fc52ea
xor eax, 0xfa5aad7f
rol eax, 0xf7
popf
jmp 0x1800c5658
mov al, r14b
push rax
pushf
mov eax, 0x64795b06
pushf
not eax
add eax, 0xdd568ae9
xor eax, 0xd85c6cfe
rol eax, 0x28
popf
pushf
not eax
add eax, 0x892bd922
xor eax, 0xdea580fa
rol eax, 0x79
popf
pushf
not eax
add eax, 0x8243a6c1
xor eax, 0x8a938c48
rol eax, 0xd2
popf
jmp 0x1800c5658
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.1800fb90c
mov rax, qword [rsp + 0x78]
mov ecx, 0xb1572151
pushf
not ecx
add ecx, 0x9778fe5e
xor ecx, 0xb7287205
rol ecx, 0x96
popf
pushf
not ecx
add ecx, 0xaaeabdfe
xor ecx, 0xb036edd3
rol ecx, 3
popf
pushf
not ecx
add ecx, 0xcd946885
xor ecx, 0xf35db67b
rol ecx, 0x2f
popf
cmp dword [rax + 0xc], ecx
jne 0x1800c60f8
push rax
pushf
mov eax, 0xd8be2afa
pushf
not eax
add eax, 0x995d0a5a
xor eax, 0xc46b971f
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xd7832bf0
xor eax, 0xce6bac10
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xc43108eb
xor eax, 0x9c86c512
rol eax, 0xeb
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x5ebf11f9
pushf
not eax
add eax, 0x8926c807
xor eax, 0x8c83c5af
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xe46a7ddd
xor eax, 0xb853a753
rol eax, 0x90
popf
pushf
not eax
add eax, 0xa85fbf43
xor eax, 0x8b6f13fe
rol eax, 0xc5
popf
jmp 0x1800c5658
cmp byte [rbp - 0x78], r14b
je 0x1800c6177
push rax
pushf
mov eax, 0x8557a8dd
pushf
not eax
add eax, 0xb7bc87da
xor eax, 0x94462046
rol eax, 0x52
popf
pushf
not eax
add eax, 0x9b26bf0a
xor eax, 0xa03c2a7e
rol eax, 0xf8
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xedb03250
pushf
not eax
add eax, 0xae910352
xor eax, 0x96d879c6
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb12a12bb
xor eax, 0x92a0b76c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xce6f1d87
xor eax, 0x88e61185
rol eax, 0xd5
popf
jmp 0x1800c5658
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x4b92f290
pushf
not eax
add eax, 0x95b15b08
xor eax, 0xd241a656
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xa6177938
xor eax, 0xfdb56cde
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x89f30b60
xor eax, 0x959766b9
rol eax, 0xf1
popf
jmp 0x1800c5658
mov r9d, ecx
jmp 0x1800c65a5
call fcn.18012b2aa
test eax, eax
jne 0x1800c62ac
push rax
pushf
mov eax, 0xc47167ed
pushf
not eax
add eax, 0xf159fbe1
xor eax, 0x992b7bb0
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xcd893c54
xor eax, 0xac1b1d11
rol eax, 0xca
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x913eaddd
pushf
not eax
add eax, 0x94f1ae13
xor eax, 0xeb6fbda9
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xaa1106ed
xor eax, 0xef075ba1
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8e6cac66
xor eax, 0xc68f9d6a
rol eax, 0x12
popf
pushf
not eax
add eax, 0xe8219e84
xor eax, 0x892a119f
rol eax, 0x2a
popf
jmp 0x1800c5658
cmp byte [rbp - 0x78], r14b
je 0x1800c633e
push rax
pushf
mov eax, 0x77169091
pushf
not eax
add eax, 0xfefcc7fe
xor eax, 0xf4966595
rol eax, 0x86
popf
pushf
not eax
add eax, 0xb96fafbd
xor eax, 0xdd5bf160
rol eax, 0x54
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x65edfb56
pushf
not eax
add eax, 0x9cf4c8f2
xor eax, 0xad6a6502
rol eax, 0x22
popf
pushf
not eax
add eax, 0xa2de3174
xor eax, 0xbabc3c80
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xed530074
xor eax, 0xb745b1a5
rol eax, 0xd4
popf
jmp 0x1800c5658
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x7fd2d3ec
pushf
not eax
add eax, 0xf8e32246
xor eax, 0xc532c01b
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xaccb7e41
xor eax, 0x966269ce
rol eax, 0x8d
popf
jmp 0x1800c5658
mov r9d, 0xc6d5f562
pushf
not r9d
add r9d, 0xb33a3132
xor r9d, 0x98b79679
rol r9d, 0x58
popf
pushf
not r9d
add r9d, 0xcd580f9a
xor r9d, 0x902d92d9
rol r9d, 0x62
popf
pushf
not r9d
add r9d, 0xa9fe3b72
xor r9d, 0x88265aa2
rol r9d, 0x82
popf
pushf
not r9d
add r9d, 0xc100a3f0
xor r9d, 0xa569530b
rol r9d, 0x13
popf
jmp 0x1800c65a5
cmp byte [rbp - 0x78], r14b
je 0x1800c64c4
push rax
pushf
mov eax, 0x529a1f9c
pushf
not eax
add eax, 0xb3d5ab43
xor eax, 0xbb665ee1
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xa536d38e
xor eax, 0xa393342f
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd2a6f23c
xor eax, 0xea741c1f
rol eax, 0x48
popf
pushf
not eax
add eax, 0xde02db0d
xor eax, 0xd01a03ef
rol eax, 0xbf
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xe59e551
pushf
not eax
add eax, 0xae8a9a2a
xor eax, 0x832d27ab
rol eax, 0xa
popf
pushf
not eax
add eax, 0xfd0ecb6b
xor eax, 0xd4b0a6c9
rol eax, 0x40
popf
pushf
not eax
add eax, 0xe7bc56f4
xor eax, 0x9f4bfedc
rol eax, 0x69
popf
jmp 0x1800c5658
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x46a69c86
pushf
not eax
add eax, 0xb1898256
xor eax, 0x929140c3
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xd61ef6d7
xor eax, 0xc36432e1
rol eax, 0xde
popf
pushf
not eax
add eax, 0xf271e62f
xor eax, 0xd0f4f36a
rol eax, 0x48
popf
pushf
not eax
add eax, 0x84aecaf9
xor eax, 0xadb69924
rol eax, 0x62
popf
jmp 0x1800c5658
mov r9d, r14d
push rax
pushf
mov eax, 0x4b8aef8c
pushf
not eax
add eax, 0x86aa17a7
xor eax, 0xe050d8ef
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xf6ab72df
xor eax, 0xe6e79b70
rol eax, 0x84
popf
jmp 0x1800c5658
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.18009636c
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x1800c65d6
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1800c662b
push rax
pushf
mov eax, 0xf3de55af
pushf
not eax
add eax, 0xb99ec0c1
xor eax, 0x8e921b73
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x922bc23c
xor eax, 0xbc330b51
rol eax, 0x62
popf
pushf
not eax
add eax, 0xe2061825
xor eax, 0xd477a25b
rol eax, 0x73
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x2c92a293
pushf
not eax
add eax, 0xd012e8d3
xor eax, 0x98fe776a
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x87c6283a
xor eax, 0xe29a9787
rol eax, 0x87
popf
pushf
not eax
add eax, 0xf840db96
xor eax, 0xa74bf7db
rol eax, 0x38
popf
jmp 0x1800c5658
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1801397e2
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x1800c66e3
push rax
pushf
mov eax, 0x3bd2f02
pushf
not eax
add eax, 0x9674d57d
xor eax, 0x821e2fdf
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xd0b31080
xor eax, 0x9df3a4eb
rol eax, 0x75
popf
pushf
not eax
add eax, 0x8cc9dd88
xor eax, 0x9e155a14
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x88c1e3f8
xor eax, 0xfd572f90
rol eax, 0x12
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x95957469
pushf
not eax
add eax, 0xa7cb8f6f
xor eax, 0xa2837453
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xbc27603a
xor eax, 0x949c18b5
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xfe148876
xor eax, 0xd7bca62a
rol eax, 0x2c
popf
jmp 0x1800c5658
mov rcx, qword [rsp + 0x50]
call fcn.180160126
push rax
pushf
mov eax, 0x61efa9f0
pushf
not eax
add eax, 0xfe11f925
xor eax, 0xb08f40b9
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xc2099450
xor eax, 0xef32c357
rol eax, 0x71
popf
jmp 0x1800c5658
mov eax, ebx
jmp 0x1800c76ae
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0xebbe19b
pushf
not eax
add eax, 0xd6ee2ea3
xor eax, 0xa9e68c86
rol eax, 0xab
popf
pushf
not eax
add eax, 0xf4e9499b
xor eax, 0xb932539c
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf1ad7288
xor eax, 0xf9bfa577
rol eax, 0x34
popf
jmp 0x1800c5658
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.1800fb90c
mov rax, qword [rbp - 0x68]
mov ecx, 0xced105cd
pushf
not ecx
add ecx, 0x833d50cd
xor ecx, 0xa359ed44
rol ecx, 0x66
popf
pushf
not ecx
add ecx, 0x814da62a
xor ecx, 0x8e0aa474
rol ecx, 0
popf
pushf
not ecx
add ecx, 0xbb2715b0
xor ecx, 0x943e0262
rol ecx, 0xc8
popf
cmp dword [rax + 0xc], ecx
jne 0x1800c68a9
push rax
pushf
mov eax, 0xd8056227
pushf
not eax
add eax, 0xf93ad225
xor eax, 0x9284a445
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xbfa2f804
xor eax, 0x938a96cb
rol eax, 0x83
popf
pushf
not eax
add eax, 0xd289580f
xor eax, 0xd7fe58b8
rol eax, 0x83
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xbde08888
pushf
not eax
add eax, 0xe257b470
xor eax, 0xb2b67d50
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xdaf5754e
xor eax, 0x9cddd805
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x9d42df07
xor eax, 0x97ab93b8
rol eax, 0x34
popf
jmp 0x1800c5658
cmp byte [rbp - 0x58], r14b
je 0x1800c693b
push rax
pushf
mov eax, 0x335ceca2
pushf
not eax
add eax, 0x8e11ceb6
xor eax, 0xa0502dde
rol eax, 0x51
popf
pushf
not eax
add eax, 0x89e088d8
xor eax, 0xc426ab62
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xcc89ae73
xor eax, 0xa972eb8c
rol eax, 0xae
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xd859a04e
pushf
not eax
add eax, 0xca179697
xor eax, 0x8c7c0de8
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xd259f904
xor eax, 0xb2bad5a2
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xf7e6d22e
xor eax, 0xc0cc9dd8
rol eax, 0xc5
popf
jmp 0x1800c5658
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xb7a7577b
pushf
not eax
add eax, 0x88d5285a
xor eax, 0xde3bcad0
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xb94d9cf9
xor eax, 0xbe78c5b8
rol eax, 0xab
popf
pushf
not eax
add eax, 0xa60184e0
xor eax, 0xc1b9dd53
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xea512c68
xor eax, 0xfd0decf8
rol eax, 0xce
popf
jmp 0x1800c5658
mov r9d, ecx
jmp 0x1800c6d73
call fcn.18012b2aa
test eax, eax
jne 0x1800c6a95
push rax
pushf
mov eax, 0x20c325ea
pushf
not eax
add eax, 0xfa9f8646
xor eax, 0xa74d4b98
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xe2eea10f
xor eax, 0xc263b9ab
rol eax, 0x44
popf
pushf
not eax
add eax, 0x88a6aa0f
xor eax, 0xe55acf66
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xa1534b0e
xor eax, 0xf547d888
rol eax, 0xd0
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x2d4780b2
pushf
not eax
add eax, 0xc299b15d
xor eax, 0xe489279a
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb33b439f
xor eax, 0x93ab4cba
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xc4f10c10
xor eax, 0xa40e5be8
rol eax, 0xa8
popf
jmp 0x1800c5658
cmp byte [rbp - 0x58], r14b
je 0x1800c6b3a
push rax
pushf
mov eax, 0xc4acc310
pushf
not eax
add eax, 0x80bbb6a4
xor eax, 0xd3e41c36
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xd7e21107
xor eax, 0xeee59b72
rol eax, 0x57
popf
pushf
not eax
add eax, 0xb223b713
xor eax, 0xb3b61702
rol eax, 0x83
popf
pushf
not eax
add eax, 0xa0fc4903
xor eax, 0x9fa486ed
rol eax, 0xb3
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x82db3528
pushf
not eax
add eax, 0xc5c8faed
xor eax, 0x9bb8655a
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xe8475246
xor eax, 0xbdb45340
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x8917a1a1
xor eax, 0xa3a29442
rol eax, 0xcd
popf
jmp 0x1800c5658
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x2c38375
pushf
not eax
add eax, 0xa7195456
xor eax, 0xaacf561b
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xca4efb6b
xor eax, 0xbc58df3d
rol eax, 0xbd
popf
jmp 0x1800c5658
mov r9d, 0xd5749d8c
pushf
not r9d
add r9d, 0x8a8ef75f
xor r9d, 0xee34ec0e
rol r9d, 0x6d
popf
pushf
not r9d
add r9d, 0xcd71f274
xor r9d, 0x923fcf7c
rol r9d, 0xbf
popf
pushf
not r9d
add r9d, 0xb92ba5f5
xor r9d, 0xa6e6d1bb
rol r9d, 0xe3
popf
jmp 0x1800c6d73
cmp byte [rbp - 0x58], r14b
je 0x1800c6c93
push rax
pushf
mov eax, 0xc7083cc6
pushf
not eax
add eax, 0xaac409dd
xor eax, 0xd2eea499
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa08ce5bc
xor eax, 0xa574f126
rol eax, 0x34
popf
pushf
not eax
add eax, 0xd1594d5c
xor eax, 0xbeefb215
rol eax, 0xc
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x90726a6b
pushf
not eax
add eax, 0xa7d59e4a
xor eax, 0xa57962e1
rol eax, 9
popf
pushf
not eax
add eax, 0xd4cc6572
xor eax, 0xd7e354c3
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xec628ff4
xor eax, 0x96836528
rol eax, 0x88
popf
jmp 0x1800c5658
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xfd102ff1
pushf
not eax
add eax, 0x92297b3a
xor eax, 0xdc07587a
rol eax, 0xee
popf
pushf
not eax
add eax, 0x9d4e6c28
xor eax, 0xe0e75109
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9065f0f1
xor eax, 0x88a6b6a7
rol eax, 0x68
popf
pushf
not eax
add eax, 0xa737a8c6
xor eax, 0xf69c8d94
rol eax, 0x1e
popf
jmp 0x1800c5658
mov r9d, r14d
push rax
pushf
mov eax, 0x3bc3f3f7
pushf
not eax
add eax, 0xf7097c2f
xor eax, 0x84f004f3
rol eax, 0x18
popf
pushf
not eax
add eax, 0xbb9d0ca7
xor eax, 0xf75d721a
rol eax, 0x18
popf
jmp 0x1800c5658
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.18008ae7a
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x1800c6dcc
push rax
pushf
mov eax, 0xf5494da4
pushf
not eax
add eax, 0xa5cc43da
xor eax, 0xedfe5810
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xaa138dec
xor eax, 0xfe619827
rol eax, 0x94
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xb03fbb5c
pushf
not eax
add eax, 0xc4993a03
xor eax, 0xecc77c87
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xb3f96d0f
xor eax, 0xbe77627e
rol eax, 0xff
popf
pushf
not eax
add eax, 0x8bf0be61
xor eax, 0xfecf25df
rol eax, 0xda
popf
jmp 0x1800c5658
mov al, byte [rcx + 1]
test al, al
jne 0x1800c6e72
push rax
pushf
mov eax, 0x783e401e
pushf
not eax
add eax, 0xe2be8b8e
xor eax, 0xb5f3f969
rol eax, 0x88
popf
pushf
not eax
add eax, 0xdba1a640
xor eax, 0xb9e67782
rol eax, 0x86
popf
pushf
not eax
add eax, 0xce8aa4e0
xor eax, 0xe5255392
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xd827a965
xor eax, 0xf35282bd
rol eax, 0xc9
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x8a817e34
pushf
not eax
add eax, 0xf1efe5aa
xor eax, 0xe4553f80
rol eax, 0x23
popf
pushf
not eax
add eax, 0xcac58883
xor eax, 0xb0efe0d6
rol eax, 0xd3
popf
jmp 0x1800c5658
cmp byte [rbp - 0x28], dl
je 0x1800c6ef0
push rax
pushf
mov eax, 0x24c5f027
pushf
not eax
add eax, 0xac9fc9ae
xor eax, 0xa8d524f3
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xf5dded8d
xor eax, 0xba91ab9d
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xe198de22
xor eax, 0xbfe9fa1b
rol eax, 0x8e
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x5b291fe8
pushf
not eax
add eax, 0xcf7b7522
xor eax, 0xa57dbf11
rol eax, 0x49
popf
pushf
not eax
add eax, 0xbf86ff17
xor eax, 0xcf96b40e
rol eax, 0x55
popf
pushf
not eax
add eax, 0xfb4e1c6b
xor eax, 0xe4fc17e7
rol eax, 8
popf
jmp 0x1800c5658
mov rcx, r14
call fcn.180160126
jmp 0x1800c724f
cmp al, 0x2e
jne 0x1800c6fad
push rax
pushf
mov eax, 0xe779822d
pushf
not eax
add eax, 0xa35c5064
xor eax, 0x824a9052
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xcaf261ac
xor eax, 0xa9250bb8
rol eax, 0x99
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x408032c5
pushf
not eax
add eax, 0xe0b06c0a
xor eax, 0x9fed1942
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x85db136a
xor eax, 0xaacd7450
rol eax, 8
popf
pushf
not eax
add eax, 0xe6132df8
xor eax, 0xb705f598
rol eax, 0x4f
popf
jmp 0x1800c5658
cmp byte [rcx + 2], dl
je 0x1800c702b
push rax
pushf
mov eax, 0x712ae5b
pushf
not eax
add eax, 0x9f4cba0e
xor eax, 0xa378b929
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xaf38b339
xor eax, 0xd55e9f14
rol eax, 0x3c
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x229f53d0
pushf
not eax
add eax, 0xfaebd55c
xor eax, 0xe86d821f
rol eax, 0x30
popf
pushf
not eax
add eax, 0x9530dd7c
xor eax, 0x919c315a
rol eax, 0xb6
popf
jmp 0x1800c5658
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.1801397e2
mov r13d, eax
test eax, eax
jne 0x1800c70a6
push rax
pushf
mov eax, 0x74273901
pushf
not eax
add eax, 0x95d7a0c0
xor eax, 0x8ee70deb
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xa24a0e54
xor eax, 0xed1436a8
rol eax, 0xb2
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x1db9991b
pushf
not eax
add eax, 0x87a12e1e
xor eax, 0xd029dc1d
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xeeb280ef
xor eax, 0x9082dad1
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x8bc61449
xor eax, 0xe7971dab
rol eax, 0x59
popf
jmp 0x1800c5658
cmp byte [rbp - 0x28], al
je 0x1800c714a
push rax
pushf
mov eax, 0xf2e5f46c
pushf
not eax
add eax, 0xbca7642c
xor eax, 0xf554b81f
rol eax, 0x37
popf
pushf
not eax
add eax, 0xacf196ab
xor eax, 0xcb550062
rol eax, 0x45
popf
pushf
not eax
add eax, 0x967f2557
xor eax, 0x9cef20e9
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf3510102
xor eax, 0xa4a05eaa
rol eax, 0xaf
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x20f81552
pushf
not eax
add eax, 0x9e814f86
xor eax, 0x85d7b8b5
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x91cc24e4
xor eax, 0xf470b37d
rol eax, 0x71
popf
pushf
not eax
add eax, 0xf6d342be
xor eax, 0xde3cec52
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd067f385
xor eax, 0xd58dbc1c
rol eax, 0xab
popf
jmp 0x1800c5658
mov rcx, r14
call fcn.180160126
push rax
pushf
mov eax, 0x2e151d8f
pushf
not eax
add eax, 0xc8481d8b
xor eax, 0xe4ec698b
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x93b10e19
xor eax, 0xb7879ea2
rol eax, 0x89
popf
pushf
not eax
add eax, 0x941417e1
xor eax, 0xb3ea5380
rol eax, 0x93
popf
pushf
not eax
add eax, 0xc85e8ced
xor eax, 0xa50d2ce2
rol eax, 0x8c
popf
jmp 0x1800c5658
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xc01abce4
pushf
not eax
add eax, 0xc7c3a486
xor eax, 0xf3e6a2cc
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc69c98c4
xor eax, 0x9b19cf3d
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf41b6670
xor eax, 0xc81e5de6
rol eax, 0xdf
popf
jmp 0x1800c5658
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x1800c7257
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x1800c67f3
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x1800c72b0
push rax
pushf
mov eax, 0x6af4fdaf
pushf
not eax
add eax, 0xe6c4fc1e
xor eax, 0xca294134
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xb4ce7bee
xor eax, 0xdce314b1
rol eax, 0xf8
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x3e8d5342
pushf
not eax
add eax, 0xb1b25f2e
xor eax, 0xf90319c0
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x90a42dc4
xor eax, 0xf2ab13ed
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x87dbd1b1
xor eax, 0xe4173289
rol eax, 0x1e
popf
jmp 0x1800c5658
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x1df7547b9]
pushf
sub r9, 0x5f72fc45
popf
lea r8d, [r14 + 8]
call fcn.180144428
push rax
pushf
mov eax, 0xeeb14d23
pushf
not eax
add eax, 0xf77149e6
xor eax, 0xa6ab42de
rol eax, 0x81
popf
pushf
not eax
add eax, 0x9f909c1f
xor eax, 0xf0aca29f
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xbcae76e8
xor eax, 0xd6d6b98e
rol eax, 0x11
popf
jmp 0x1800c5658
mov rcx, rbx
jmp 0x1800c7362
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x1800c73a2
push rax
pushf
mov eax, 0xb9c7301
pushf
not eax
add eax, 0xb1c388a5
xor eax, 0xce0fe988
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xc7b3344b
xor eax, 0x9aae14c9
rol eax, 0xc2
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0xe568802f
pushf
not eax
add eax, 0xb3c0edfd
xor eax, 0xc3821aaa
rol eax, 0x68
popf
pushf
not eax
add eax, 0xefca5a39
xor eax, 0xe11d33d0
rol eax, 0x97
popf
pushf
not eax
add eax, 0xee0d81c0
xor eax, 0xa01359df
rol eax, 6
popf
jmp 0x1800c5658
mov rcx, qword [rsp + 0x50]
call fcn.180160126
push rax
pushf
mov eax, 0xe64d30a9
pushf
not eax
add eax, 0x95f2b511
xor eax, 0xb3f25357
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x924db570
xor eax, 0xc1e93d97
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xb57a99ef
xor eax, 0xc0f79416
rol eax, 0x42
popf
pushf
not eax
add eax, 0x9fc8ab35
xor eax, 0xd4056fc0
rol eax, 0x5c
popf
jmp 0x1800c5658
xor eax, eax
jmp 0x1800c76ae
cmp byte [rbp - 0x28], 0
je 0x1800c74be
push rax
pushf
mov eax, 0xd5f3e95c
pushf
not eax
add eax, 0x9fb83b66
xor eax, 0xfc793686
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xd32b6db7
xor eax, 0x95347824
rol eax, 0x8c
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x7f10b0b1
pushf
not eax
add eax, 0xa3dfd3ea
xor eax, 0xa4251f76
rol eax, 0x74
popf
pushf
not eax
add eax, 0xab3c199b
xor eax, 0xe14e6b2f
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x924419f3
xor eax, 0x9210cdb7
rol eax, 0xcc
popf
jmp 0x1800c5658
mov rcx, r14
call fcn.180160126
push rax
pushf
mov eax, 0x4ecfc268
pushf
not eax
add eax, 0xcf5a7ec6
xor eax, 0xaa003e94
rol eax, 0x88
popf
pushf
not eax
add eax, 0xc2825830
xor eax, 0x81bc12dd
rol eax, 0x30
popf
pushf
not eax
add eax, 0x97f4b60a
xor eax, 0x856862c2
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xe026eb01
xor eax, 0xa61e9c19
rol eax, 0xd4
popf
jmp 0x1800c5658
mov rcx, rbx
jmp 0x1800c7569
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x1800c75cf
push rax
pushf
mov eax, 0xaa05b4f5
pushf
not eax
add eax, 0xfdf6e01b
xor eax, 0xe02b8003
rol eax, 0x29
popf
pushf
not eax
add eax, 0xb2cbb5e9
xor eax, 0xa81b8769
rol eax, 0x59
popf
pushf
not eax
add eax, 0xd7b42c1c
xor eax, 0xaa8e8155
rol eax, 0x59
popf
pushf
not eax
add eax, 0x9ec2dde9
xor eax, 0xcaa7ce4a
rol eax, 0xd
popf
jmp 0x1800c5658
push rax
pushf
mov eax, 0x201fbd30
pushf
not eax
add eax, 0xe496bed9
xor eax, 0xcad5dd75
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xd9d6e6b2
xor eax, 0x94ad21d4
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xa478a6b9
xor eax, 0xc6f5df93
rol eax, 0x86
popf
pushf
not eax
add eax, 0xe7a8a64b
xor eax, 0x8e56ce75
rol eax, 0x2f
popf
jmp 0x1800c5658
mov rcx, qword [rsp + 0x50]
call fcn.180160126
push rax
pushf
mov eax, 0xd576f372
pushf
not eax
add eax, 0x8e5f6fd8
xor eax, 0x92f9e223
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x8a6d9b85
xor eax, 0x983fdaf8
rol eax, 0xf4
popf
jmp 0x1800c5658
mov eax, r13d
push rax
pushf
mov eax, 0xfaf93829
pushf
not eax
add eax, 0x868bda51
xor eax, 0x8407ace5
rol eax, 0x34
popf
pushf
not eax
add eax, 0xcd7095ec
xor eax, 0xbc70f83d
rol eax, 0xab
popf
pushf
not eax
add eax, 0xc92b74dd
xor eax, 0xf40641f3
rol eax, 0x88
popf
jmp 0x1800c5658
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.1800e9129
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret