Function at 0x140280783
Capabilities:
Authenticate hmac
Enumerate files on windows
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x3bcdc2eb
pushf
not eax
add eax, 0x9818e114
xor eax, 0xdb876a29
rol eax, 0x88
popf
pushf
not eax
add eax, 0x88852bcc
xor eax, 0x85910831
rol eax, 0x82
popf
pushf
not eax
add eax, 0xba6ae106
xor eax, 0xd46a5731
rol eax, 0xd6
popf
cmp eax, 0x29
jne 0x1402807d3
popf
pop rax
jmp 0x140282114
cmp eax, 0
jne 0x1402807e2
popf
pop rax
jmp 0x140280b39
cmp eax, 3
jne 0x1402807f1
popf
pop rax
jmp 0x140280da6
cmp eax, 1
jne 0x140280800
popf
pop rax
jmp 0x140280c69
cmp eax, 0xd
jne 0x14028080f
popf
pop rax
jmp 0x140281381
cmp eax, 0x1a
jne 0x14028081e
popf
pop rax
jmp 0x14028192c
cmp eax, 0xe
jne 0x14028082d
popf
pop rax
jmp 0x1402813cf
cmp eax, 0x31
jne 0x14028083c
popf
pop rax
jmp 0x1402824e0
cmp eax, 0x19
jne 0x14028084b
popf
pop rax
jmp 0x1402818c6
cmp eax, 8
jne 0x14028085a
popf
pop rax
jmp 0x140281099
cmp eax, 0x2a
jne 0x140280869
popf
pop rax
jmp 0x140282191
cmp eax, 0x17
jne 0x140280878
popf
pop rax
jmp 0x14028184f
cmp eax, 0x1c
jne 0x140280887
popf
pop rax
jmp 0x140281acd
cmp eax, 0x2e
jne 0x140280896
popf
pop rax
jmp 0x1402823c8
cmp eax, 0x18
jne 0x1402808a5
popf
pop rax
jmp 0x14028188c
cmp eax, 0x2b
jne 0x1402808b4
popf
pop rax
jmp 0x140282222
cmp eax, 0x1b
jne 0x1402808c3
popf
pop rax
jmp 0x140281a28
cmp eax, 0x2d
jne 0x1402808d2
popf
pop rax
jmp 0x140282367
cmp eax, 0x23
jne 0x1402808e1
popf
pop rax
jmp 0x140281e2b
cmp eax, 0x25
jne 0x1402808f0
popf
pop rax
jmp 0x140281eeb
cmp eax, 0x32
jne 0x1402808ff
popf
pop rax
jmp 0x140282535
cmp eax, 0x13
jne 0x14028090e
popf
pop rax
jmp 0x140281643
cmp eax, 0x33
jne 0x14028091d
popf
pop rax
jmp 0x1402825d2
cmp eax, 0x24
jne 0x14028092c
popf
pop rax
jmp 0x140281e8f
cmp eax, 0x1e
jne 0x14028093b
popf
pop rax
jmp 0x140281b7f
cmp eax, 0xc
jne 0x14028094a
popf
pop rax
jmp 0x14028131c
cmp eax, 0x26
jne 0x140280959
popf
pop rax
jmp 0x140281f9d
cmp eax, 0x27
jne 0x140280968
popf
pop rax
jmp 0x140282043
cmp eax, 0x30
jne 0x140280977
popf
pop rax
jmp 0x14028242c
cmp eax, 0x10
jne 0x140280986
popf
pop rax
jmp 0x1402814e3
cmp eax, 0x37
jne 0x140280995
popf
pop rax
jmp 0x140282788
cmp eax, 9
jne 0x1402809a4
popf
pop rax
jmp 0x140281152
cmp eax, 0x39
jne 0x1402809b3
popf
pop rax
jmp 0x140282888
cmp eax, 0x16
jne 0x1402809c2
popf
pop rax
jmp 0x140281784
cmp eax, 0x28
jne 0x1402809d1
popf
pop rax
jmp 0x1402820c1
cmp eax, 0xa
jne 0x1402809e0
popf
pop rax
jmp 0x140281188
cmp eax, 0x36
jne 0x1402809ef
popf
pop rax
jmp 0x140282727
cmp eax, 0x14
jne 0x1402809fe
popf
pop rax
jmp 0x140281682
cmp eax, 7
jne 0x140280a0d
popf
pop rax
jmp 0x140281000
cmp eax, 0x34
jne 0x140280a1c
popf
pop rax
jmp 0x140282622
cmp eax, 2
jne 0x140280a2b
popf
pop rax
jmp 0x140280d10
cmp eax, 0x20
jne 0x140280a3a
popf
pop rax
jmp 0x140281c80
cmp eax, 0x1d
jne 0x140280a49
popf
pop rax
jmp 0x140281b1e
cmp eax, 0x11
jne 0x140280a58
popf
pop rax
jmp 0x140281535
cmp eax, 0x35
jne 0x140280a67
popf
pop rax
jmp 0x140282682
cmp eax, 0x3a
jne 0x140280a76
popf
pop rax
jmp 0x1402828d1
cmp eax, 0x12
jne 0x140280a85
popf
pop rax
jmp 0x1402815d7
cmp eax, 0x21
jne 0x140280a94
popf
pop rax
jmp 0x140281cd1
cmp eax, 0x38
jne 0x140280aa3
popf
pop rax
jmp 0x140282838
cmp eax, 0xb
jne 0x140280ab2
popf
pop rax
jmp 0x14028128a
cmp eax, 0xf
jne 0x140280ac1
popf
pop rax
jmp 0x140281464
cmp eax, 0x15
jne 0x140280ad0
popf
pop rax
jmp 0x1402816b8
cmp eax, 5
jne 0x140280adf
popf
pop rax
jmp 0x140280ed7
cmp eax, 6
jne 0x140280aee
popf
pop rax
jmp 0x140280f92
cmp eax, 0x22
jne 0x140280afd
popf
pop rax
jmp 0x140281d99
cmp eax, 0x2c
jne 0x140280b0c
popf
pop rax
jmp 0x1402822c3
cmp eax, 0x1f
jne 0x140280b1b
popf
pop rax
jmp 0x140281c01
cmp eax, 4
jne 0x140280b2a
popf
pop rax
jmp 0x140280e42
cmp eax, 0x2f
jne 0x140280b39
popf
pop rax
jmp 0x140282413
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x140120098]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0x304550bf15058361
pushf
not rbx
add rbx, 0x6516411e
xor rbx, 0x650b64cf
rol rbx, 0xf8
popf
pushf
not rbx
add rbx, 0x55b8ded7
xor rbx, 0x74833a8f
rol rbx, 0xf
popf
pushf
not rbx
add rbx, 0x4581a02d
xor rbx, 0x76bfa5ca
rol rbx, 0x17
popf
pushf
not rbx
add rbx, 0x64f8a4a4
xor rbx, 0x7509f8fc
rol rbx, 0xd6
popf
cmp rdx, rcx
je 0x140280c36
push rax
pushf
mov eax, 0x2784e515
pushf
not eax
add eax, 0xce4ff307
xor eax, 0xd2cccde0
rol eax, 0x86
popf
pushf
not eax
add eax, 0x80d157b4
xor eax, 0xb2b93617
rol eax, 0x94
popf
pushf
not eax
add eax, 0xfe9c6336
xor eax, 0xee08980f
rol eax, 0x66
popf
pushf
not eax
add eax, 0xf7c55742
xor eax, 0xda03e730
rol eax, 0x35
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x464b778
pushf
not eax
add eax, 0xdd4579a1
xor eax, 0x9bbb5485
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf624723a
xor eax, 0xb2d8db8c
rol eax, 0x2e
popf
jmp 0x1402807c4
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x140280cca
push rax
pushf
mov eax, 0xc873e18f
pushf
not eax
add eax, 0xe267ce41
xor eax, 0xabb53a74
rol eax, 0x11
popf
pushf
not eax
add eax, 0x8dec1a43
xor eax, 0x98fa3b36
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xe0b5bc72
xor eax, 0x8e9bac55
rol eax, 0x45
popf
pushf
not eax
add eax, 0xcd87a5ec
xor eax, 0xaa213e9f
rol eax, 0xda
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x231f0386
pushf
not eax
add eax, 0xf3f3a083
xor eax, 0xfa8aaf6b
rol eax, 5
popf
pushf
not eax
add eax, 0xec10cd6c
xor eax, 0xa05e02e0
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xaad09b1e
xor eax, 0xa5ba81ad
rol eax, 0x3c
popf
jmp 0x1402807c4
movsx rax, al
bt rbx, rax
jb 0x140280d60
push rax
pushf
mov eax, 0x417913e4
pushf
not eax
add eax, 0x8973d865
xor eax, 0xa9bfb068
rol eax, 0xff
popf
pushf
not eax
add eax, 0xa383996c
xor eax, 0xd665b1f0
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xf3233c6a
xor eax, 0x9cf2bcc9
rol eax, 0x2a
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x13188938
pushf
not eax
add eax, 0x900a1fc0
xor eax, 0xc32ed635
rol eax, 0x82
popf
pushf
not eax
add eax, 0xd22f366b
xor eax, 0x9dff74cf
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x916e0d7b
xor eax, 0xa38427d2
rol eax, 0xd8
popf
jmp 0x1402807c4
mov rcx, rdi
call fcn.1402837ec
mov rdx, rax
cmp rax, rdi
jne 0x140280e0f
push rax
pushf
mov eax, 0x1f812fde
pushf
not eax
add eax, 0xc391b0e8
xor eax, 0xf7dbfc09
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x90552de6
xor eax, 0xf72b9a6d
rol eax, 0x47
popf
pushf
not eax
add eax, 0x95b7a7a4
xor eax, 0xfd94fc49
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xb17099fe
xor eax, 0xeb7f47d9
rol eax, 0x9c
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xdf12e1c9
pushf
not eax
add eax, 0x971f7fc2
xor eax, 0xbd7a81f1
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa74b9c98
xor eax, 0x8335d427
rol eax, 0x14
popf
jmp 0x1402807c4
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x140280e91
push rax
pushf
mov eax, 0xf94352a0
pushf
not eax
add eax, 0xb1747597
xor eax, 0x9c08d276
rol eax, 0x32
popf
pushf
not eax
add eax, 0x837aa5e5
xor eax, 0xb367b4f4
rol eax, 0x77
popf
pushf
not eax
add eax, 0xd3faa2e3
xor eax, 0xcf4194b2
rol eax, 0xfb
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xf523dbcd
pushf
not eax
add eax, 0xe0b9389c
xor eax, 0xdd3dc765
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xb481dc0d
xor eax, 0xadcde89e
rol eax, 0x73
popf
pushf
not eax
add eax, 0xddf87c95
xor eax, 0xaabbe5dc
rol eax, 2
popf
jmp 0x1402807c4
lea rax, [rdi + 1]
cmp rdx, rax
je 0x140280f39
push rax
pushf
mov eax, 0x15368cd2
pushf
not eax
add eax, 0xd4434d94
xor eax, 0xa5645761
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xfaee0a3f
xor eax, 0xe2dbb0ea
rol eax, 0x81
popf
pushf
not eax
add eax, 0xc569ee83
xor eax, 0xdd4719de
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x99aa629c
xor eax, 0xd077304e
rol eax, 0x1a
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xfdfb8b71
pushf
not eax
add eax, 0xe6ad3b95
xor eax, 0xa48a9c43
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xb108b3c7
xor eax, 0x87401c32
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xa1ffcc59
xor eax, 0xdbd9d8fd
rol eax, 0x61
popf
pushf
not eax
add eax, 0x8fe03294
xor eax, 0x816a51f4
rol eax, 0x2d
popf
jmp 0x1402807c4
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1402ccbdd
jmp 0x1402828d1
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x140281053
push rax
pushf
mov eax, 0x5d11f695
pushf
not eax
add eax, 0x8434ae14
xor eax, 0xa7f04513
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xd4209582
xor eax, 0x81c632e7
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xa9dc283a
xor eax, 0xcb044053
rol eax, 0xbf
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xcd49061a
pushf
not eax
add eax, 0xfcadb48d
xor eax, 0x86ea398e
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x9bdc8af3
xor eax, 0xcc563742
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xccf35029
xor eax, 0xd8b6939e
rol eax, 0x2e
popf
jmp 0x1402807c4
movsx rax, r8b
bt rbx, rax
mov al, 0xd7
pushf
not al
add al, 7
xor al, 0x8f
rol al, 0xfc
popf
pushf
not al
add al, 0xf4
xor al, 0x49
rol al, 0x12
popf
pushf
not al
add al, 0xf4
xor al, 0xf9
rol al, 0x34
popf
pushf
not al
add al, 0x34
xor al, 0xaf
rol al, 0x5e
popf
jb 0x14028111f
push rax
pushf
mov eax, 0x9e01cab0
pushf
not eax
add eax, 0xdbacc03b
xor eax, 0x97f7eaa3
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xf954d296
xor eax, 0xb85c3f96
rol eax, 0x13
popf
pushf
not eax
add eax, 0xcaf37e71
xor eax, 0xd14d46d7
rol eax, 0x90
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xfa353417
pushf
not eax
add eax, 0xbad88c79
xor eax, 0x8ab71993
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd7e63c91
xor eax, 0x8dd1fa9b
rol eax, 0x81
popf
jmp 0x1402807c4
mov al, r14b
push rax
pushf
mov eax, 0x87af9dc2
pushf
not eax
add eax, 0xbdf4822c
xor eax, 0xaf3e1ce6
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc6813ae4
xor eax, 0xd0901b11
rol eax, 0x9c
popf
jmp 0x1402807c4
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.1402b065d
mov rax, qword [rsp + 0x78]
mov ecx, 0x9016191e
pushf
not ecx
add ecx, 0xe032c1dc
xor ecx, 0x9844f9ae
rol ecx, 0xf
popf
pushf
not ecx
add ecx, 0xc14b79a9
xor ecx, 0x993a477c
rol ecx, 0xf7
popf
cmp dword [rax + 0xc], ecx
jne 0x140281257
push rax
pushf
mov eax, 0x8941607e
pushf
not eax
add eax, 0xd122f608
xor eax, 0xc7f61027
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xdcc24131
xor eax, 0xda8878d9
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xe959d3d5
xor eax, 0xc377d06a
rol eax, 0x56
popf
pushf
not eax
add eax, 0xb5f66e61
xor eax, 0xd20c9da7
rol eax, 0x7c
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x7d6d914c
pushf
not eax
add eax, 0xeb5100be
xor eax, 0x8f38862c
rol eax, 0x16
popf
pushf
not eax
add eax, 0xe74a41bc
xor eax, 0x8fe98ac1
rol eax, 0x2e
popf
jmp 0x1402807c4
cmp byte [rbp - 0x78], r14b
je 0x1402812d6
push rax
pushf
mov eax, 0xed3795ab
pushf
not eax
add eax, 0xbfdaa665
xor eax, 0x87da29d0
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xbff651ea
xor eax, 0xcb07743a
rol eax, 0x45
popf
pushf
not eax
add eax, 0x94ed5405
xor eax, 0xdfefc2b1
rol eax, 0xcf
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x5157c23f
pushf
not eax
add eax, 0xfbbf9850
xor eax, 0xe53187da
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xfb427297
xor eax, 0x8ba6bc60
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xb0cf59f6
xor eax, 0xca50c0cd
rol eax, 0xa
popf
jmp 0x1402807c4
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xc7394481
pushf
not eax
add eax, 0xc2beb7f8
xor eax, 0xa37ae358
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x9ddda9b9
xor eax, 0xa24e3505
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xb7720e43
xor eax, 0x8c2fe9e5
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xdc8242ee
xor eax, 0x90c86a7e
rol eax, 0xba
popf
jmp 0x1402807c4
mov r9d, ecx
jmp 0x1402816b8
call fcn.1402bebd5
test eax, eax
jne 0x14028141e
push rax
pushf
mov eax, 0x17eef03f
pushf
not eax
add eax, 0xc5ca6c99
xor eax, 0xa4ef154c
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xa9bef6cf
xor eax, 0x93cafdc2
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xf71ba983
xor eax, 0x8096ec7a
rol eax, 0x41
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xcbbda996
pushf
not eax
add eax, 0x8a18b9cf
xor eax, 0xc4e6d547
rol eax, 0x41
popf
pushf
not eax
add eax, 0xcc818f65
xor eax, 0xff319b4b
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xf0664b92
xor eax, 0xdd96b4fd
rol eax, 0xe9
popf
jmp 0x1402807c4
cmp byte [rbp - 0x78], r14b
je 0x14028149d
push rax
pushf
mov eax, 0xc9138817
pushf
not eax
add eax, 0x81b06094
xor eax, 0x99f398e2
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xceb5c366
xor eax, 0xdaa3e14f
rol eax, 0xd1
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x2b0d460a
pushf
not eax
add eax, 0xc6e52abf
xor eax, 0xd2d0fc7c
rol eax, 0x85
popf
pushf
not eax
add eax, 0xec553c5c
xor eax, 0xadc42f7d
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc4fa1bec
xor eax, 0xecc97c51
rol eax, 0xf7
popf
jmp 0x1402807c4
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x69ad5cee
pushf
not eax
add eax, 0xbe44ce5e
xor eax, 0xe7b31831
rol eax, 0x39
popf
pushf
not eax
add eax, 0x93e2273e
xor eax, 0xf3a90d92
rol eax, 0xe
popf
pushf
not eax
add eax, 0x9c6ac35d
xor eax, 0xe76e59e8
rol eax, 0x53
popf
jmp 0x1402807c4
mov r9d, 0x1a69e46b
pushf
not r9d
add r9d, 0x87c77864
xor r9d, 0xab9bb946
rol r9d, 0x97
popf
pushf
not r9d
add r9d, 0xb1d6d86f
xor r9d, 0xe16aa257
rol r9d, 0xa7
popf
pushf
not r9d
add r9d, 0x84ca7d24
xor r9d, 0xafee4fa7
rol r9d, 0x12
popf
pushf
not r9d
add r9d, 0xd698913f
xor r9d, 0xece3107c
rol r9d, 0x93
popf
jmp 0x1402816b8
cmp byte [rbp - 0x78], r14b
je 0x140281610
push rax
pushf
mov eax, 0x9cdcd82d
pushf
not eax
add eax, 0xc3420c9e
xor eax, 0xf6db4d31
rol eax, 0x24
popf
pushf
not eax
add eax, 0xf24db295
xor eax, 0xe6663877
rol eax, 0xf7
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xdbf11646
pushf
not eax
add eax, 0xbda3c15d
xor eax, 0xcd2d7e16
rol eax, 0x71
popf
pushf
not eax
add eax, 0x86dbf701
xor eax, 0xdcdb9d91
rol eax, 0xde
popf
jmp 0x1402807c4
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xaaa0b07b
pushf
not eax
add eax, 0xc6c1fec7
xor eax, 0xdeaa74ed
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe2849e69
xor eax, 0xf9d0f3fd
rol eax, 0x44
popf
jmp 0x1402807c4
mov r9d, r14d
push rax
pushf
mov eax, 0xb977bd70
pushf
not eax
add eax, 0xf966e2cb
xor eax, 0x843705ac
rol eax, 0x98
popf
pushf
not eax
add eax, 0xa09b87fe
xor eax, 0xa9f5afdd
rol eax, 0x2f
popf
jmp 0x1402807c4
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.140256f62
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x1402816e9
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14028173e
push rax
pushf
mov eax, 0xf61c7cfc
pushf
not eax
add eax, 0x89818e78
xor eax, 0xdc730317
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa82d6c9d
xor eax, 0xb31e5b83
rol eax, 0x33
popf
pushf
not eax
add eax, 0xc1fa1dd0
xor eax, 0xf82f679a
rol eax, 0x9e
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x7e5b48e7
pushf
not eax
add eax, 0xa2fcf652
xor eax, 0xac74068c
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xd3967570
xor eax, 0xfd324aaa
rol eax, 0x74
popf
pushf
not eax
add eax, 0xa87feeff
xor eax, 0xed8f2de7
rol eax, 0x55
popf
jmp 0x1402807c4
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1402ccbdd
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x1402817f6
push rax
pushf
mov eax, 0x500ebb8a
pushf
not eax
add eax, 0x93adbd97
xor eax, 0xb48ce854
rol eax, 0x50
popf
pushf
not eax
add eax, 0xcedaa70d
xor eax, 0xfac6f503
rol eax, 0xca
popf
pushf
not eax
add eax, 0xe7897c67
xor eax, 0xc0a5ac3c
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xb7990d3b
xor eax, 0x9640e540
rol eax, 0x13
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x3d8c7a2f
pushf
not eax
add eax, 0xc1dff976
xor eax, 0xdf14a655
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x92bfbfad
xor eax, 0x83d85c75
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xaa93211f
xor eax, 0x9776b851
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xda39745d
xor eax, 0xac01079d
rol eax, 0x6a
popf
jmp 0x1402807c4
mov rcx, qword [rsp + 0x50]
call fcn.1402ee2cb
push rax
pushf
mov eax, 0xdc291388
pushf
not eax
add eax, 0xf150a0c9
xor eax, 0xebb3adc4
rol eax, 0x21
popf
pushf
not eax
add eax, 0xd93f2e34
xor eax, 0xdc10ed2a
rol eax, 0xf2
popf
jmp 0x1402807c4
mov eax, ebx
jmp 0x1402828d1
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0x399d3e54
pushf
not eax
add eax, 0xb02d5090
xor eax, 0xf00fde9f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x85bcca16
xor eax, 0x8258b6cf
rol eax, 0xad
popf
pushf
not eax
add eax, 0x90ad52f7
xor eax, 0xd32600ce
rol eax, 0x86
popf
pushf
not eax
add eax, 0xdc9e7bc8
xor eax, 0xf0ad48ed
rol eax, 0xb0
popf
jmp 0x1402807c4
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.1402b065d
mov rax, qword [rbp - 0x68]
mov ecx, 0x6e6a4738
pushf
not ecx
add ecx, 0xdd73a210
xor ecx, 0x8dac7adb
rol ecx, 0x5c
popf
pushf
not ecx
add ecx, 0xc6fee835
xor ecx, 0x9ef896df
rol ecx, 0xb6
popf
pushf
not ecx
add ecx, 0xe45fa006
xor ecx, 0xa87dc705
rol ecx, 0x17
popf
cmp dword [rax + 0xc], ecx
jne 0x1402819e2
push rax
pushf
mov eax, 0xf2611641
pushf
not eax
add eax, 0x914e9037
xor eax, 0x9bb21659
rol eax, 0x59
popf
pushf
not eax
add eax, 0xd84182cf
xor eax, 0xc41567f7
rol eax, 0x11
popf
pushf
not eax
add eax, 0xe4f76ef7
xor eax, 0x9a06e6af
rol eax, 0x6a
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xb2e0154d
pushf
not eax
add eax, 0xff38c0c9
xor eax, 0xb6cb091f
rol eax, 0x33
popf
pushf
not eax
add eax, 0xe1848ea6
xor eax, 0xe51ade71
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xd6844810
xor eax, 0x80e115d0
rol eax, 0xe3
popf
jmp 0x1402807c4
cmp byte [rbp - 0x58], r14b
je 0x140281a74
push rax
pushf
mov eax, 0x9714993a
pushf
not eax
add eax, 0xec15f828
xor eax, 0x8e6a784a
rol eax, 0x26
popf
pushf
not eax
add eax, 0xc6f898f0
xor eax, 0xd39a0abc
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x873baa3b
xor eax, 0x89970811
rol eax, 0xd3
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x76daef84
pushf
not eax
add eax, 0xcd913283
xor eax, 0x8f62d3e4
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x9d08650a
xor eax, 0xeddbb794
rol eax, 0x26
popf
pushf
not eax
add eax, 0x8def7250
xor eax, 0x97832b23
rol eax, 0x34
popf
pushf
not eax
add eax, 0xe55445c4
xor eax, 0xd594b973
rol eax, 0x23
popf
jmp 0x1402807c4
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x3d1507f9
pushf
not eax
add eax, 0xcfbcc8c5
xor eax, 0xf5724dc2
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xd674874f
xor eax, 0xe5aabc1c
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xcc67bb05
xor eax, 0xb66567d0
rol eax, 4
popf
jmp 0x1402807c4
mov r9d, ecx
jmp 0x140281eeb
call fcn.1402bebd5
test eax, eax
jne 0x140281bce
push rax
pushf
mov eax, 0x2c4e542c
pushf
not eax
add eax, 0x944ce36b
xor eax, 0xf757fbc7
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xc1db5698
xor eax, 0x85608e32
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x97c03d2a
xor eax, 0xe7d5756a
rol eax, 0xf6
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xcc077300
pushf
not eax
add eax, 0xf9b68860
xor eax, 0x92afdc39
rol eax, 8
popf
pushf
not eax
add eax, 0x83eb5d40
xor eax, 0x8323d680
rol eax, 0x94
popf
jmp 0x1402807c4
cmp byte [rbp - 0x58], r14b
je 0x140281c4d
push rax
pushf
mov eax, 0xf611997
pushf
not eax
add eax, 0x8ec11951
xor eax, 0x87f1c3c7
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb550dc5a
xor eax, 0x869b66c9
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xd737f82f
xor eax, 0xf66c047d
rol eax, 0x48
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x725ae4f1
pushf
not eax
add eax, 0xc14755ae
xor eax, 0xf35ae93e
rol eax, 0x43
popf
pushf
not eax
add eax, 0x97da7dc9
xor eax, 0xaa25b9f3
rol eax, 0x1a
popf
jmp 0x1402807c4
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xee37bdcc
pushf
not eax
add eax, 0x8d1f982d
xor eax, 0xa2de296a
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x81bba10c
xor eax, 0xde31e99e
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x984fde7c
xor eax, 0xa19da273
rol eax, 0x5c
popf
jmp 0x1402807c4
mov r9d, 0x702a6116
pushf
not r9d
add r9d, 0xb0947d15
xor r9d, 0x824c1918
rol r9d, 0xda
popf
pushf
not r9d
add r9d, 0xbe8a9450
xor r9d, 0xd8fb48cd
rol r9d, 0xee
popf
pushf
not r9d
add r9d, 0x8e57e11c
xor r9d, 0xd0295a3b
rol r9d, 0xe5
popf
pushf
not r9d
add r9d, 0xd0126a09
xor r9d, 0xae8b6942
rol r9d, 0xa7
popf
jmp 0x140281eeb
cmp byte [rbp - 0x58], r14b
je 0x140281dd2
push rax
pushf
mov eax, 0x4535509c
pushf
not eax
add eax, 0xe524c827
xor eax, 0xa1147e88
rol eax, 0x66
popf
pushf
not eax
add eax, 0xa29d7e7a
xor eax, 0xe1eb3dea
rol eax, 0xec
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xab080911
pushf
not eax
add eax, 0x8c322948
xor eax, 0xdb3e9b25
rol eax, 0x43
popf
pushf
not eax
add eax, 0xe01669eb
xor eax, 0x9c0c7442
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xbd5b6a53
xor eax, 0xda403a9f
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xbc92c083
xor eax, 0xde5010a7
rol eax, 0xe5
popf
jmp 0x1402807c4
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xa778a738
pushf
not eax
add eax, 0xbdab6e98
xor eax, 0xdb65f5f9
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xbc3240ab
xor eax, 0x8b59a024
rol eax, 0x49
popf
pushf
not eax
add eax, 0xff72a46d
xor eax, 0xef5fed85
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd9d8c866
xor eax, 0xde28fe3d
rol eax, 0x23
popf
jmp 0x1402807c4
mov r9d, r14d
push rax
pushf
mov eax, 0x70d0e5a4
pushf
not eax
add eax, 0xaa7bf13a
xor eax, 0xdff4d1b6
rol eax, 0xd
popf
pushf
not eax
add eax, 0x9aecb755
xor eax, 0x8b68262f
rol eax, 0x33
popf
pushf
not eax
add eax, 0xac9164a5
xor eax, 0xe3939119
rol eax, 0x77
popf
pushf
not eax
add eax, 0xa79c91c4
xor eax, 0xc04a182c
rol eax, 0x8a
popf
jmp 0x1402807c4
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.14024e36d
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x140281f57
push rax
pushf
mov eax, 0xa047f27
pushf
not eax
add eax, 0xd637e960
xor eax, 0xe69f9649
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xff5cf813
xor eax, 0xf8af52db
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xf30109b3
xor eax, 0xd9d6ef02
rol eax, 0xd6
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x1fbf45f4
pushf
not eax
add eax, 0xf90fc4f6
xor eax, 0x8e16cdfc
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x94a9dc00
xor eax, 0xbd9bf99d
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xca05d914
xor eax, 0xf223fbf1
rol eax, 0x19
popf
jmp 0x1402807c4
mov al, byte [rcx + 1]
test al, al
jne 0x140281ffd
push rax
pushf
mov eax, 0x7413decc
pushf
not eax
add eax, 0xe863c16f
xor eax, 0xf6fb74ae
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xa4d575ef
xor eax, 0x92de0713
rol eax, 0x50
popf
pushf
not eax
add eax, 0x8db52515
xor eax, 0xeddb0203
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xbe0ab8fe
xor eax, 0xcfb8f117
rol eax, 0x86
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xcf98ba24
pushf
not eax
add eax, 0xc1054778
xor eax, 0xa1af88c1
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xced2fc2e
xor eax, 0xe6f83905
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xc99eeb3f
xor eax, 0xb829e95a
rol eax, 0x1e
popf
jmp 0x1402807c4
cmp byte [rbp - 0x28], dl
je 0x14028208e
push rax
pushf
mov eax, 0x8632d29a
pushf
not eax
add eax, 0x8490a1c8
xor eax, 0xe49e79bf
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb94ebc92
xor eax, 0xea593371
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xbd92a0b6
xor eax, 0xb0cfa235
rol eax, 0x30
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x428e2616
pushf
not eax
add eax, 0xdd5d33c5
xor eax, 0x8e4d8509
rol eax, 0x90
popf
pushf
not eax
add eax, 0xdb99b5a3
xor eax, 0xa2f2a122
rol eax, 0x24
popf
jmp 0x1402807c4
mov rcx, r14
call fcn.1402ee2cb
jmp 0x140282413
cmp al, 0x2e
jne 0x14028215e
push rax
pushf
mov eax, 0x8434cce1
pushf
not eax
add eax, 0x805dcce1
xor eax, 0xacf96a81
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xad0ea248
xor eax, 0xfeb335f6
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xb545fdb6
xor eax, 0xf0de21e8
rol eax, 0xef
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x9334fc92
pushf
not eax
add eax, 0xc083c87c
xor eax, 0x9a72206c
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x94038b88
xor eax, 0xa82bd44b
rol eax, 0xaf
popf
jmp 0x1402807c4
cmp byte [rcx + 2], dl
je 0x1402821dc
push rax
pushf
mov eax, 0xe3370318
pushf
not eax
add eax, 0x80e9b30e
xor eax, 0x858a942e
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xaf9ef841
xor eax, 0x8f331781
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xe4008225
xor eax, 0xb6f4befc
rol eax, 0x33
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xf9a891eb
pushf
not eax
add eax, 0xd4b676f7
xor eax, 0x8458ab58
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xe0037fbf
xor eax, 0xcdb94bcb
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xc1341e46
xor eax, 0xb7787900
rol eax, 0xdd
popf
jmp 0x1402807c4
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.1402ccbdd
mov r13d, eax
test eax, eax
jne 0x140282290
push rax
pushf
mov eax, 0x7e916165
pushf
not eax
add eax, 0xb41b263c
xor eax, 0xa059fd52
rol eax, 0x61
popf
pushf
not eax
add eax, 0x99b5935d
xor eax, 0xdd4a514e
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xefe00dfd
xor eax, 0x9b8832bb
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xdc86fae3
xor eax, 0xe9406e3c
rol eax, 0x25
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xe3359f01
pushf
not eax
add eax, 0xc20a06c9
xor eax, 0xcec8b3a0
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xd09d57ac
xor eax, 0x9ed01139
rol eax, 4
popf
jmp 0x1402807c4
cmp byte [rbp - 0x28], al
je 0x140282321
push rax
pushf
mov eax, 0x3312c465
pushf
not eax
add eax, 0xae6fd484
xor eax, 0xa2c731d6
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xf742162e
xor eax, 0xc0c7df47
rol eax, 0xde
popf
pushf
not eax
add eax, 0xe2a601fb
xor eax, 0xd8a55e91
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xed6fb4aa
xor eax, 0x8d429763
rol eax, 0x9f
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x3b01a841
pushf
not eax
add eax, 0xfb326211
xor eax, 0xf9b3758d
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xc8dd8422
xor eax, 0xab23a576
rol eax, 0x19
popf
pushf
not eax
add eax, 0xa44a5711
xor eax, 0xe492eb23
rol eax, 0x6c
popf
jmp 0x1402807c4
mov rcx, r14
call fcn.1402ee2cb
push rax
pushf
mov eax, 0x5973ee8f
pushf
not eax
add eax, 0xdf802b46
xor eax, 0xee2d39ac
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x819df3ea
xor eax, 0xf5ecdea2
rol eax, 0xd
popf
pushf
not eax
add eax, 0xfe2991b2
xor eax, 0xc361094a
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xfa56a324
xor eax, 0xcecc9e31
rol eax, 0x48
popf
jmp 0x1402807c4
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xa1b6ab99
pushf
not eax
add eax, 0xe2d47b52
xor eax, 0xca2e130f
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa606fca6
xor eax, 0x85e07189
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa880896f
xor eax, 0xc2ad30cc
rol eax, 0x65
popf
jmp 0x1402807c4
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x14028241b
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x14028192c
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x14028249a
push rax
pushf
mov eax, 0x92dcdd25
pushf
not eax
add eax, 0xff7d10ee
xor eax, 0xfda65a88
rol eax, 0x29
popf
pushf
not eax
add eax, 0xb70a3545
xor eax, 0xc365efb9
rol eax, 0xea
popf
pushf
not eax
add eax, 0xff25ce5e
xor eax, 0xee2be344
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xb13ee69b
xor eax, 0xbf2ef534
rol eax, 0xa1
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0x4d2d58e4
pushf
not eax
add eax, 0xdfd9b25d
xor eax, 0x86c61a0e
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xaf829f5b
xor eax, 0xf013d72e
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x83b9cac0
xor eax, 0xa71f47ff
rol eax, 0x8e
popf
jmp 0x1402807c4
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x18f69989d]
pushf
sub r9, 0x4f592771
popf
lea r8d, [r14 + 8]
call fcn.1402d60b9
push rax
pushf
mov eax, 0x3784c1ea
pushf
not eax
add eax, 0xa1eca242
xor eax, 0x84c3911f
rol eax, 0x95
popf
pushf
not eax
add eax, 0xd1e0d2c9
xor eax, 0xa8a6fe3a
rol eax, 0xef
popf
jmp 0x1402807c4
mov rcx, rbx
jmp 0x140282539
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x14028258c
push rax
pushf
mov eax, 0x458e888b
pushf
not eax
add eax, 0x9c248763
xor eax, 0xeee9986e
rol eax, 0x32
popf
pushf
not eax
add eax, 0x93265ff2
xor eax, 0xc941a200
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xe09a1a68
xor eax, 0xee822ca7
rol eax, 0x88
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xa705da92
pushf
not eax
add eax, 0x847adfe0
xor eax, 0x9221727c
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xb8bf1c0b
xor eax, 0xb2008452
rol eax, 0x90
popf
pushf
not eax
add eax, 0xe099f54c
xor eax, 0xbb649c17
rol eax, 0x18
popf
jmp 0x1402807c4
mov rcx, qword [rsp + 0x50]
call fcn.1402ee2cb
push rax
pushf
mov eax, 0xbd85e9dd
pushf
not eax
add eax, 0xe2f9c071
xor eax, 0x8976b4de
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf6eee579
xor eax, 0xe99212ca
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8d84a3fe
xor eax, 0xff88e84c
rol eax, 0x6c
popf
jmp 0x1402807c4
xor eax, eax
jmp 0x1402828d1
cmp byte [rbp - 0x28], 0
je 0x1402826e1
push rax
pushf
mov eax, 0x2320c11f
pushf
not eax
add eax, 0x9b4b7abf
xor eax, 0xa3e78f79
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x9a6c1f87
xor eax, 0xd6cb4304
rol eax, 0x38
popf
pushf
not eax
add eax, 0xd8116d41
xor eax, 0xca117d78
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xd80ee541
xor eax, 0xb390c25e
rol eax, 0x1b
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xd28e6ca5
pushf
not eax
add eax, 0xd36b8f5b
xor eax, 0x9c062bf1
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xe1adfe44
xor eax, 0xed6d0ffc
rol eax, 0x27
popf
pushf
not eax
add eax, 0xd4ecb9e2
xor eax, 0xbc0330e8
rol eax, 0x94
popf
jmp 0x1402807c4
mov rcx, r14
call fcn.1402ee2cb
push rax
pushf
mov eax, 0xdc6e6426
pushf
not eax
add eax, 0xae4f175e
xor eax, 0xd7f9dd48
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xc5dec5ef
xor eax, 0xd6f23173
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xcb841a9e
xor eax, 0xe1f1a338
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe710e95f
xor eax, 0x880d6dcd
rol eax, 0xc2
popf
jmp 0x1402807c4
mov rcx, rbx
jmp 0x14028278c
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x1402827df
push rax
pushf
mov eax, 0xb06a7481
pushf
not eax
add eax, 0xf1c68ed0
xor eax, 0x814cab43
rol eax, 0x15
popf
pushf
not eax
add eax, 0xee058c57
xor eax, 0xb07bf1dd
rol eax, 0x26
popf
pushf
not eax
add eax, 0x92322a98
xor eax, 0x84937b38
rol eax, 0xf8
popf
jmp 0x1402807c4
push rax
pushf
mov eax, 0xf3e40d22
pushf
not eax
add eax, 0xfb7ad43f
xor eax, 0xd4b524ef
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x92eacae7
xor eax, 0xb58ded56
rol eax, 0x70
popf
pushf
not eax
add eax, 0xfc08346b
xor eax, 0x8dd3955f
rol eax, 0xd
popf
pushf
not eax
add eax, 0x841f9449
xor eax, 0x86aa4c1f
rol eax, 0x7d
popf
jmp 0x1402807c4
mov rcx, qword [rsp + 0x50]
call fcn.1402ee2cb
push rax
pushf
mov eax, 0x441453f2
pushf
not eax
add eax, 0x88f5f609
xor eax, 0xde4fb629
rol eax, 0x62
popf
pushf
not eax
add eax, 0x90cfb26a
xor eax, 0x8d16ef97
rol eax, 0xda
popf
pushf
not eax
add eax, 0x83b72146
xor eax, 0x910b690a
rol eax, 0xf7
popf
jmp 0x1402807c4
mov eax, r13d
push rax
pushf
mov eax, 0x7ee0b7b0
pushf
not eax
add eax, 0xb5928047
xor eax, 0xc3830705
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x9620c494
xor eax, 0xbbcaadc9
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xb3f1ead1
xor eax, 0xc8e7e37f
rol eax, 0x4d
popf
jmp 0x1402807c4
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.1402a1891
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret