Function at 0x1400ee317
Capabilities:
Authenticate hmac
Enumerate files on windows

Disassembly:
push rax
pushf
mov eax, 0x1df99e61
pushf
not eax
add eax, 0xa5dde55b
xor eax, 0xc01ce068
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x9844af9a
xor eax, 0x9bf166f6
rol eax, 0xb6
popf
cmp eax, 0x29
jne 0x1400ee354
popf
pop rax
jmp 0x1400efc60
cmp eax, 0
jne 0x1400ee363
popf
pop rax
jmp 0x1400ee6ba
cmp eax, 3
jne 0x1400ee372
popf
pop rax
jmp 0x1400ee960
cmp eax, 1
jne 0x1400ee381
popf
pop rax
jmp 0x1400ee810
cmp eax, 0xd
jne 0x1400ee390
popf
pop rax
jmp 0x1400eef27
cmp eax, 0x1a
jne 0x1400ee39f
popf
pop rax
jmp 0x1400ef4f8
cmp eax, 0xe
jne 0x1400ee3ae
popf
pop rax
jmp 0x1400eef62
cmp eax, 0x31
jne 0x1400ee3bd
popf
pop rax
jmp 0x1400f0005
cmp eax, 0x19
jne 0x1400ee3cc
popf
pop rax
jmp 0x1400ef4a5
cmp eax, 8
jne 0x1400ee3db
popf
pop rax
jmp 0x1400eec52
cmp eax, 0x2a
jne 0x1400ee3ea
popf
pop rax
jmp 0x1400efd03
cmp eax, 0x17
jne 0x1400ee3f9
popf
pop rax
jmp 0x1400ef42e
cmp eax, 0x1c
jne 0x1400ee408
popf
pop rax
jmp 0x1400ef671
cmp eax, 0x2e
jne 0x1400ee417
popf
pop rax
jmp 0x1400eff26
cmp eax, 0x18
jne 0x1400ee426
popf
pop rax
jmp 0x1400ef46b
cmp eax, 0x2b
jne 0x1400ee435
popf
pop rax
jmp 0x1400efd94
cmp eax, 0x1b
jne 0x1400ee444
popf
pop rax
jmp 0x1400ef5b9
cmp eax, 0x2d
jne 0x1400ee453
popf
pop rax
jmp 0x1400efec6
cmp eax, 0x23
jne 0x1400ee462
popf
pop rax
jmp 0x1400ef98a
cmp eax, 0x25
jne 0x1400ee471
popf
pop rax
jmp 0x1400efa11
cmp eax, 0x32
jne 0x1400ee480
popf
pop rax
jmp 0x1400f005a
cmp eax, 0x13
jne 0x1400ee48f
popf
pop rax
jmp 0x1400ef222
cmp eax, 0x33
jne 0x1400ee49e
popf
pop rax
jmp 0x1400f00e4
cmp eax, 0x24
jne 0x1400ee4ad
popf
pop rax
jmp 0x1400ef9db
cmp eax, 0x1e
jne 0x1400ee4bc
popf
pop rax
jmp 0x1400ef723
cmp eax, 0xc
jne 0x1400ee4cb
popf
pop rax
jmp 0x1400eeec2
cmp eax, 0x26
jne 0x1400ee4da
popf
pop rax
jmp 0x1400efac3
cmp eax, 0x27
jne 0x1400ee4e9
popf
pop rax
jmp 0x1400efb43
cmp eax, 0x30
jne 0x1400ee4f8
popf
pop rax
jmp 0x1400eff77
cmp eax, 0x10
jne 0x1400ee507
popf
pop rax
jmp 0x1400ef063
cmp eax, 0x37
jne 0x1400ee516
popf
pop rax
jmp 0x1400f0261
cmp eax, 9
jne 0x1400ee525
popf
pop rax
jmp 0x1400eed1e
cmp eax, 0x39
jne 0x1400ee534
popf
pop rax
jmp 0x1400f0374
cmp eax, 0x16
jne 0x1400ee543
popf
pop rax
jmp 0x1400ef389
cmp eax, 0x28
jne 0x1400ee552
popf
pop rax
jmp 0x1400efbfa
cmp eax, 0xa
jne 0x1400ee561
popf
pop rax
jmp 0x1400eed7a
cmp eax, 0x36
jne 0x1400ee570
popf
pop rax
jmp 0x1400f0200
cmp eax, 0x14
jne 0x1400ee57f
popf
pop rax
jmp 0x1400ef287
cmp eax, 7
jne 0x1400ee58e
popf
pop rax
jmp 0x1400eeba6
cmp eax, 0x34
jne 0x1400ee59d
popf
pop rax
jmp 0x1400f0134
cmp eax, 2
jne 0x1400ee5ac
popf
pop rax
jmp 0x1400ee8a4
cmp eax, 0x20
jne 0x1400ee5bb
popf
pop rax
jmp 0x1400ef837
cmp eax, 0x1d
jne 0x1400ee5ca
popf
pop rax
jmp 0x1400ef6d5
cmp eax, 0x11
jne 0x1400ee5d9
popf
pop rax
jmp 0x1400ef0c8
cmp eax, 0x35
jne 0x1400ee5e8
popf
pop rax
jmp 0x1400f016e
cmp eax, 0x3a
jne 0x1400ee5f7
popf
pop rax
jmp 0x1400f03aa
cmp eax, 0x12
jne 0x1400ee606
popf
pop rax
jmp 0x1400ef17d
cmp eax, 0x21
jne 0x1400ee615
popf
pop rax
jmp 0x1400ef89b
cmp eax, 0x38
jne 0x1400ee624
popf
pop rax
jmp 0x1400f0324
cmp eax, 0xb
jne 0x1400ee633
popf
pop rax
jmp 0x1400eee56
cmp eax, 0xf
jne 0x1400ee642
popf
pop rax
jmp 0x1400eeff7
cmp eax, 0x15
jne 0x1400ee651
popf
pop rax
jmp 0x1400ef2bd
cmp eax, 5
jne 0x1400ee660
popf
pop rax
jmp 0x1400eea91
cmp eax, 6
jne 0x1400ee66f
popf
pop rax
jmp 0x1400eeb38
cmp eax, 0x22
jne 0x1400ee67e
popf
pop rax
jmp 0x1400ef90b
cmp eax, 0x2c
jne 0x1400ee68d
popf
pop rax
jmp 0x1400efe35
cmp eax, 0x1f
jne 0x1400ee69c
popf
pop rax
jmp 0x1400ef792
cmp eax, 4
jne 0x1400ee6ab
popf
pop rax
jmp 0x1400ee9fc
cmp eax, 0x2f
jne 0x1400ee6ba
popf
pop rax
jmp 0x1400eff5e
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x14004b090]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, r8
mov rdi, rcx
movabs rbx, 0x6052d09972a5e823
pushf
not rbx
add rbx, 0x52bbeb2f
xor rbx, 0x581414eb
rol rbx, 0x8d
popf
pushf
not rbx
add rbx, 0x63fb630d
xor rbx, 0x73213083
rol rbx, 0xf1
popf
pushf
not rbx
add rbx, 0x4090e67a
xor rbx, 0x46903ebd
rol rbx, 0xe6
popf
pushf
not rbx
add rbx, 0x73aeda6c
xor rbx, 0x7dd3e400
rol rbx, 0x2d
popf
cmp rdx, rcx
je 0x1400ee7b7
push rax
pushf
mov eax, 0x913368f0
pushf
not eax
add eax, 0xebb511cb
xor eax, 0xd8d89087
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xcbd6e204
xor eax, 0xd46637c2
rol eax, 0x47
popf
pushf
not eax
add eax, 0xc9a95759
xor eax, 0xa50ff4f4
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xff5ac7e3
xor eax, 0x9854dae8
rol eax, 0x19
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xba8c2bd8
pushf
not eax
add eax, 0xaeb6bfd4
xor eax, 0xedea9f5d
rol eax, 0x82
popf
pushf
not eax
add eax, 0x97fb57de
xor eax, 0x9ef4b5e1
rol eax, 0x12
popf
pushf
not eax
add eax, 0x94bf1e1a
xor eax, 0x95f66b08
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xe316498e
xor eax, 0xc3a60e3e
rol eax, 0xaf
popf
jmp 0x1400ee345
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x1400ee85e
push rax
pushf
mov eax, 0xb2e0835b
pushf
not eax
add eax, 0xa7e34ab1
xor eax, 0xbcb1436e
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xb3dce747
xor eax, 0xebf0653d
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xbc759b1c
xor eax, 0xaf4e07f3
rol eax, 0xba
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xac8078e3
pushf
not eax
add eax, 0xae3ce626
xor eax, 0xd4e810f5
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xb3dea9ae
xor eax, 0xd22574f5
rol eax, 0x11
popf
pushf
not eax
add eax, 0xdfecbb2e
xor eax, 0xc8b8af8c
rol eax, 0x3e
popf
jmp 0x1400ee345
movsx rax, al
bt rbx, rax
jb 0x1400ee907
push rax
pushf
mov eax, 0xa7ef2e82
pushf
not eax
add eax, 0xf9584ca1
xor eax, 0x9560da3f
rol eax, 0x21
popf
pushf
not eax
add eax, 0x97008a77
xor eax, 0xc12385a7
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x9520d6e0
xor eax, 0x858fad13
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xfb55677b
xor eax, 0xfb5dfdba
rol eax, 0x39
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x946d4b3
pushf
not eax
add eax, 0x9c0fdddd
xor eax, 0xe61601ee
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xd780dd3b
xor eax, 0xfe651946
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xf652adab
xor eax, 0xeab0e590
rol eax, 0x80
popf
pushf
not eax
add eax, 0xfd820b29
xor eax, 0xb568a9fc
rol eax, 0xb4
popf
jmp 0x1400ee345
mov rcx, rdi
call fcn.1400f2d7a
mov rdx, rax
cmp rax, rdi
jne 0x1400ee9b6
push rax
pushf
mov eax, 0x3c0963c9
pushf
not eax
add eax, 0xffb9bf3c
xor eax, 0x9ef88b9b
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x82010aab
xor eax, 0xf7755192
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xe4dc53ee
xor eax, 0xd6852f32
rol eax, 0x29
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xde4d711f
pushf
not eax
add eax, 0x87221d4c
xor eax, 0xff65fb27
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xf6bd2667
xor eax, 0xba192e26
rol eax, 0x48
popf
pushf
not eax
add eax, 0xda8fa452
xor eax, 0xdd38dc61
rol eax, 0x8f
popf
jmp 0x1400ee345
mov r8b, byte [rdx]
cmp r8b, 0x3a
jne 0x1400eea5e
push rax
pushf
mov eax, 0x2a17e2e5
pushf
not eax
add eax, 0xe0d662c7
xor eax, 0xe2f6e986
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf47f7828
xor eax, 0xf08fb881
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xb3eee181
xor eax, 0xd517f36e
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xa68fb783
xor eax, 0xe8242ae6
rol eax, 0xe8
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xcd689f47
pushf
not eax
add eax, 0xcc1ef47e
xor eax, 0x8747380e
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xf89d220e
xor eax, 0xe1c99d6e
rol eax, 0xb8
popf
jmp 0x1400ee345
lea rax, [rdi + 1]
cmp rdx, rax
je 0x1400eeaf3
push rax
pushf
mov eax, 0x9ba6cdf
pushf
not eax
add eax, 0xa9109a74
xor eax, 0xf2806b96
rol eax, 0x26
popf
pushf
not eax
add eax, 0x98fb7f73
xor eax, 0xc8f48069
rol eax, 0x14
popf
pushf
not eax
add eax, 0x819d0816
xor eax, 0xb21f9468
rol eax, 0xea
popf
pushf
not eax
add eax, 0xb473f548
xor eax, 0xed069ca9
rol eax, 0x2f
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x1fefa143
pushf
not eax
add eax, 0xcd41d5b2
xor eax, 0x97e995fc
rol eax, 1
popf
pushf
not eax
add eax, 0x9795b577
xor eax, 0x95dcfde9
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xd2a36e1c
xor eax, 0xf525599e
rol eax, 0xea
popf
jmp 0x1400ee345
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1401725dd
jmp 0x1400f03aa
sub r8b, 0x2f
xor r14d, r14d
cmp r8b, 0x2d
ja 0x1400eebf9
push rax
pushf
mov eax, 0x36164000
pushf
not eax
add eax, 0xcbc1ab28
xor eax, 0xfaab8982
rol eax, 0x26
popf
pushf
not eax
add eax, 0xad1703fb
xor eax, 0xd1b10370
rol eax, 7
popf
pushf
not eax
add eax, 0x9a8bf23e
xor eax, 0xe2dffa9f
rol eax, 0x33
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x7e80343
pushf
not eax
add eax, 0xc0e816ae
xor eax, 0xcf2ade31
rol eax, 0x59
popf
pushf
not eax
add eax, 0xde83ad68
xor eax, 0xa79a5a3b
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x914d2ad6
xor eax, 0xb587e5e1
rol eax, 0
popf
pushf
not eax
add eax, 0x8ce6eb98
xor eax, 0xf0532f80
rol eax, 0x8d
popf
jmp 0x1400ee345
movsx rax, r8b
bt rbx, rax
mov al, 0xe9
pushf
not al
add al, 0x85
xor al, 0xbc
rol al, 0x12
popf
pushf
not al
add al, 0xe3
xor al, 0x6e
rol al, 0x59
popf
pushf
not al
add al, 0x8b
xor al, 0xaa
rol al, 0xfe
popf
pushf
not al
add al, 0xd9
xor al, 0xf4
rol al, 0xa
popf
jb 0x1400eecc5
push rax
pushf
mov eax, 0xa5b602f8
pushf
not eax
add eax, 0xeed2e499
xor eax, 0x823edff7
rol eax, 0x64
popf
pushf
not eax
add eax, 0x8a004905
xor eax, 0xd7dc6a88
rol eax, 0x18
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x723e73d6
pushf
not eax
add eax, 0xbc7e5e72
xor eax, 0x9212ed3f
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xf5629da2
xor eax, 0xdeef35a2
rol eax, 2
popf
pushf
not eax
add eax, 0xe51524d6
xor eax, 0xaf2bccf6
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x85d1b957
xor eax, 0x8ca92038
rol eax, 0x76
popf
jmp 0x1400ee345
mov al, r14b
push rax
pushf
mov eax, 0x684ede54
pushf
not eax
add eax, 0xb30d1ee6
xor eax, 0xa8acf5c1
rol eax, 0x78
popf
pushf
not eax
add eax, 0xae8e936f
xor eax, 0xa8e77edb
rol eax, 0x46
popf
pushf
not eax
add eax, 0xe82075bd
xor eax, 0xc67c5980
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb6ee95af
xor eax, 0xcc83a4ff
rol eax, 0xf4
popf
jmp 0x1400ee345
sub rdx, rdi
mov qword [rsp + 0x40], r14
inc rdx
mov qword [rsp + 0x48], r14
neg al
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], r14
sbb r13, r13
mov qword [rsp + 0x60], r14
and r13, rdx
mov byte [rsp + 0x68], r14b
xor edx, edx
mov qword [rsp + 0x38], r13
call fcn.140141c6a
mov rax, qword [rsp + 0x78]
mov ecx, 0x3234123f
pushf
not ecx
add ecx, 0xb081ac9d
xor ecx, 0xe487ff9f
rol ecx, 0
popf
pushf
not ecx
add ecx, 0xff358af2
xor ecx, 0x8d6b25d2
rol ecx, 0x68
popf
cmp dword [rax + 0xc], ecx
jne 0x1400eee23
push rax
pushf
mov eax, 0x6d80af98
pushf
not eax
add eax, 0xfeee7bbb
xor eax, 0x8d63931a
rol eax, 0x42
popf
pushf
not eax
add eax, 0xf305a2d9
xor eax, 0x82cc09f8
rol eax, 0x36
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xb958908e
pushf
not eax
add eax, 0xdac623c3
xor eax, 0xfd08c4ab
rol eax, 0x26
popf
pushf
not eax
add eax, 0xeb63b6a7
xor eax, 0xd20dbeaf
rol eax, 0xd5
popf
jmp 0x1400ee345
cmp byte [rbp - 0x78], r14b
je 0x1400eee8f
push rax
pushf
mov eax, 0xf88bcd3a
pushf
not eax
add eax, 0x8ddf9451
xor eax, 0xdd9abcf1
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xc34b4a27
xor eax, 0xc9cf62de
rol eax, 0xc6
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xdedd8c60
pushf
not eax
add eax, 0x9fa49e3d
xor eax, 0xae82ca5c
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xeb494737
xor eax, 0x8c64e97e
rol eax, 0x45
popf
jmp 0x1400ee345
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe5faf79b
pushf
not eax
add eax, 0x88bbf9fe
xor eax, 0xa77b8c63
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xc9ad2354
xor eax, 0xa9ff5caf
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb39e0f30
xor eax, 0xa742d1ac
rol eax, 0xed
popf
pushf
not eax
add eax, 0xc597541f
xor eax, 0xe1c14c17
rol eax, 0x70
popf
jmp 0x1400ee345
mov r9d, ecx
jmp 0x1400ef2bd
call fcn.140161814
test eax, eax
jne 0x1400eef9e
push rax
pushf
mov eax, 0xc0eb8863
pushf
not eax
add eax, 0x8d2e8f83
xor eax, 0x9289d506
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x9419cceb
xor eax, 0xefe70eb5
rol eax, 0x7b
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xbee93f7f
pushf
not eax
add eax, 0xb64a3104
xor eax, 0x8bf48956
rol eax, 0x75
popf
pushf
not eax
add eax, 0xf558bbe5
xor eax, 0xc184c9ec
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xb3187c03
xor eax, 0x8debf7f0
rol eax, 0x92
popf
pushf
not eax
add eax, 0xd49af8f0
xor eax, 0xb604d9a9
rol eax, 0xcd
popf
jmp 0x1400ee345
cmp byte [rbp - 0x78], r14b
je 0x1400ef030
push rax
pushf
mov eax, 0xc400f143
pushf
not eax
add eax, 0xaab2dd2a
xor eax, 0xda45c5f6
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xcb597759
xor eax, 0xc79a3477
rol eax, 0x30
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x1b25c6dd
pushf
not eax
add eax, 0xc36b17ce
xor eax, 0x9c4a8e3d
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa0da558e
xor eax, 0x98e8cef3
rol eax, 0x53
popf
jmp 0x1400ee345
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xc9515549
pushf
not eax
add eax, 0x8713212d
xor eax, 0xa77c86d6
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xeefa6ce7
xor eax, 0xc28a3c8b
rol eax, 0x25
popf
pushf
not eax
add eax, 0xf3dc89ce
xor eax, 0x80946f3e
rol eax, 0x28
popf
pushf
not eax
add eax, 0x898eae40
xor eax, 0xd5484cae
rol eax, 0xdd
popf
jmp 0x1400ee345
mov r9d, 0x5d6a8d61
pushf
not r9d
add r9d, 0x9aa27924
xor r9d, 0x9182a558
rol r9d, 0x9d
popf
pushf
not r9d
add r9d, 0x96da1ce1
xor r9d, 0xff52746c
rol r9d, 0xbc
popf
pushf
not r9d
add r9d, 0xc18dc798
xor r9d, 0xd8cdb2f1
rol r9d, 0x99
popf
pushf
not r9d
add r9d, 0xcbfd3ad4
xor r9d, 0xab0278c8
rol r9d, 0xc1
popf
jmp 0x1400ef2bd
cmp byte [rbp - 0x78], r14b
je 0x1400ef1dc
push rax
pushf
mov eax, 0x9c61ce24
pushf
not eax
add eax, 0xc30549c0
xor eax, 0xa62dd6e2
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xcb1de311
xor eax, 0xc4a878df
rol eax, 0x51
popf
pushf
not eax
add eax, 0x81249145
xor eax, 0xd53df677
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf09ba9f4
xor eax, 0xe437cacf
rol eax, 0x91
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xffdebeb
pushf
not eax
add eax, 0xc118f489
xor eax, 0xb2c9b2e9
rol eax, 0x52
popf
pushf
not eax
add eax, 0xa5b26a73
xor eax, 0xe3145bf2
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xbc473d54
xor eax, 0x85cc3ce6
rol eax, 0x89
popf
jmp 0x1400ee345
mov rax, qword [rsp + 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xc2834095
pushf
not eax
add eax, 0xebaf667e
xor eax, 0xa72ccf2c
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xff985cfc
xor eax, 0xe06f0672
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb4354533
xor eax, 0xf8cab13c
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x8f05ac52
xor eax, 0xc3787238
rol eax, 0xd7
popf
jmp 0x1400ee345
mov r9d, r14d
push rax
pushf
mov eax, 0x460ef3dc
pushf
not eax
add eax, 0xbb156f60
xor eax, 0x8c6758c2
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xf6b27b8a
xor eax, 0xb4b84a66
rol eax, 0x74
popf
jmp 0x1400ee345
lea r8, [rsp + 0x30]
mov rcx, rdi
lea rdx, [rsp + 0x40]
call fcn.1400b99fd
mov rcx, qword [rsp + 0x50]
lea r8, [rbp - 0x20]
test eax, eax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
cmovne rcx, r14
xor r9d, r9d
xor edx, edx
jmp 0x1400ef2ee
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ef330
push rax
pushf
mov eax, 0x1102a53d
pushf
not eax
add eax, 0xa62f40e2
xor eax, 0xe65108b1
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xed030dcc
xor eax, 0xa21c12a4
rol eax, 0xa4
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x4b0ab42f
pushf
not eax
add eax, 0xca19512c
xor eax, 0x96915a00
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb24f1b09
xor eax, 0xb9b0bdbe
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xe12e3d4c
xor eax, 0x969479d9
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x833bc50a
xor eax, 0xe8161d1c
rol eax, 0x90
popf
jmp 0x1400ee345
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1401725dd
mov ebx, eax
cmp byte [rsp + 0x68], r14b
je 0x1400ef3d5
push rax
pushf
mov eax, 0x4181a93e
pushf
not eax
add eax, 0xe7d72969
xor eax, 0x81758556
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xff88fe9d
xor eax, 0xffccd77c
rol eax, 0xea
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x659624b
pushf
not eax
add eax, 0xb45b6d2f
xor eax, 0xa722cc33
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xe33bf874
xor eax, 0xfd43b918
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xe662ed30
xor eax, 0xf24bdca9
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc6178913
xor eax, 0x87bf0c8a
rol eax, 8
popf
jmp 0x1400ee345
mov rcx, qword [rsp + 0x50]
call fcn.14019fe1c
push rax
pushf
mov eax, 0xba0e417d
pushf
not eax
add eax, 0xef006694
xor eax, 0xd1c577b8
rol eax, 0x66
popf
pushf
not eax
add eax, 0xdeaa192b
xor eax, 0x90d50d71
rol eax, 0x76
popf
jmp 0x1400ee345
mov eax, ebx
jmp 0x1400f03aa
mov rsi, qword [r12 + 8]
sub rsi, qword [r12]
sar rsi, 3
push rax
pushf
mov eax, 0x68134add
pushf
not eax
add eax, 0xaec037ce
xor eax, 0xfa3b5c1d
rol eax, 0x47
popf
pushf
not eax
add eax, 0xc53dbb77
xor eax, 0xac5d7737
rol eax, 0x33
popf
pushf
not eax
add eax, 0xbc1cd62a
xor eax, 0xce9e2c68
rol eax, 0xc5
popf
jmp 0x1400ee345
xor edx, edx
mov qword [rbp - 0x50], r14
lea rcx, [rbp - 0x70]
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov byte [rbp - 0x28], r14b
call fcn.140141c6a
mov rax, qword [rbp - 0x68]
mov ecx, 0x91ac61ba
pushf
not ecx
add ecx, 0x92b63532
xor ecx, 0xd85bea91
rol ecx, 0x47
popf
pushf
not ecx
add ecx, 0xa6efee3a
xor ecx, 0x83267acd
rol ecx, 0xf1
popf
cmp dword [rax + 0xc], ecx
jne 0x1400ef586
push rax
pushf
mov eax, 0xa37a84de
pushf
not eax
add eax, 0xf9a4ff2b
xor eax, 0xc04119c3
rol eax, 0x51
popf
pushf
not eax
add eax, 0xc1190264
xor eax, 0xf9f9d80d
rol eax, 0x39
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x55e35455
pushf
not eax
add eax, 0x9cd76c5e
xor eax, 0xd2997ec9
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x88faac41
xor eax, 0xb2ee08d4
rol eax, 0x24
popf
jmp 0x1400ee345
cmp byte [rbp - 0x58], r14b
je 0x1400ef618
push rax
pushf
mov eax, 0xdbed522f
pushf
not eax
add eax, 0xbd20b194
xor eax, 0xf7125ddf
rol eax, 0x41
popf
pushf
not eax
add eax, 0xa6eb1346
xor eax, 0xa24d5bf2
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xba6f470c
xor eax, 0xdc5a9423
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xef4eef5a
xor eax, 0xb3efb0f6
rol eax, 0xca
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xe482efac
pushf
not eax
add eax, 0xf35e6332
xor eax, 0x8dfd44c4
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb3362c2f
xor eax, 0x9e204ff1
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xe25436dc
xor eax, 0xf7042f16
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x8fc7495d
xor eax, 0xcc49ba27
rol eax, 0xfa
popf
jmp 0x1400ee345
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xce77f061
pushf
not eax
add eax, 0x8d7aefae
xor eax, 0xd6c4e9dc
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x8904d460
xor eax, 0xe72e81af
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa9895538
xor eax, 0x95622cb5
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xf0d3755a
xor eax, 0x89d79134
rol eax, 0x74
popf
jmp 0x1400ee345
mov r9d, ecx
jmp 0x1400efa11
call fcn.140161814
test eax, eax
jne 0x1400ef75f
push rax
pushf
mov eax, 0x7091e88d
pushf
not eax
add eax, 0x8c204c03
xor eax, 0xfb24d868
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xa285f3fc
xor eax, 0xe64e9c98
rol eax, 0xf
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x1cd7c6f0
pushf
not eax
add eax, 0xca77f5e8
xor eax, 0xa957b803
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe6563ac2
xor eax, 0xf76c52b8
rol eax, 0x4f
popf
jmp 0x1400ee345
cmp byte [rbp - 0x58], r14b
je 0x1400ef7f1
push rax
pushf
mov eax, 0x480fab57
pushf
not eax
add eax, 0xb3e1930d
xor eax, 0xbddf2d07
rol eax, 0x58
popf
pushf
not eax
add eax, 0x85b44d22
xor eax, 0xb1d4f59d
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xa015bf38
xor eax, 0x8cd6c72a
rol eax, 0x92
popf
pushf
not eax
add eax, 0xfd159804
xor eax, 0xa6cfc334
rol eax, 0xcd
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xeb4552b5
pushf
not eax
add eax, 0xb7916d23
xor eax, 0x8a562153
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x91fd1c38
xor eax, 0xa948c376
rol eax, 0x13
popf
pushf
not eax
add eax, 0x8a278ce8
xor eax, 0x9aa1cfae
rol eax, 0xb1
popf
jmp 0x1400ee345
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x4bb1c5b5
pushf
not eax
add eax, 0xddff0b90
xor eax, 0xe643e4c8
rol eax, 0x89
popf
pushf
not eax
add eax, 0xaff1710a
xor eax, 0x95d36783
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9ec03e0b
xor eax, 0xea40dfb7
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xf35a5490
xor eax, 0x9dc0f438
rol eax, 0x33
popf
jmp 0x1400ee345
mov r9d, 0x8e8e691b
pushf
not r9d
add r9d, 0xa6dc0003
xor r9d, 0xda227946
rol r9d, 0x20
popf
pushf
not r9d
add r9d, 0xbd341f8c
xor r9d, 0xfac42fca
rol r9d, 0xdb
popf
jmp 0x1400efa11
cmp byte [rbp - 0x58], r14b
je 0x1400ef957
push rax
pushf
mov eax, 0x2f5c265f
pushf
not eax
add eax, 0xa2c82992
xor eax, 0xfc717ac3
rol eax, 0x53
popf
pushf
not eax
add eax, 0xbd3ea57d
xor eax, 0xe8bb9729
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xffdf33bc
xor eax, 0xf5cb9f4b
rol eax, 0xf8
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x59d3a38e
pushf
not eax
add eax, 0xc19db5b5
xor eax, 0x9563a90c
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x945d4869
xor eax, 0xe5a2acb6
rol eax, 0x2e
popf
jmp 0x1400ee345
mov rax, qword [rbp - 0x70]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe225ca72
pushf
not eax
add eax, 0xb81bab60
xor eax, 0xe09a02f0
rol eax, 0x45
popf
pushf
not eax
add eax, 0xc20232f4
xor eax, 0xe57d0043
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd6192af3
xor eax, 0xe4a032e4
rol eax, 0xda
popf
jmp 0x1400ee345
mov r9d, r14d
push rax
pushf
mov eax, 0x3caebd2a
pushf
not eax
add eax, 0xf6aab3cc
xor eax, 0x96259d90
rol eax, 0xad
popf
pushf
not eax
add eax, 0xe9b79824
xor eax, 0xbc51722c
rol eax, 3
popf
jmp 0x1400ee345
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc]
call fcn.1400ab1dd
mov r14, qword [rbp - 0x40]
xor edx, edx
test eax, eax
mov rcx, r14
cmovne rcx, rdx
cmp byte [rcx], 0x2e
jne 0x1400efa7d
push rax
pushf
mov eax, 0xfad3313c
pushf
not eax
add eax, 0xadff08c2
xor eax, 0xff386dfa
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xb1ef7b8e
xor eax, 0xa7ad10ac
rol eax, 0xee
popf
pushf
not eax
add eax, 0xe03c09bf
xor eax, 0xe1f4d445
rol eax, 0x68
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xa52dc1f1
pushf
not eax
add eax, 0x8284d525
xor eax, 0xf4bb2800
rol eax, 0x66
popf
pushf
not eax
add eax, 0xb892bf7d
xor eax, 0xde4d2937
rol eax, 0x68
popf
pushf
not eax
add eax, 0xb1165202
xor eax, 0xe23ad99e
rol eax, 0x59
popf
jmp 0x1400ee345
mov al, byte [rcx + 1]
test al, al
jne 0x1400efb10
push rax
pushf
mov eax, 0x6e4668fc
pushf
not eax
add eax, 0xbc8249b2
xor eax, 0xe5bee565
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x8460b21d
xor eax, 0xe90eb257
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xcb9ef5da
xor eax, 0xc04780c9
rol eax, 0xdd
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x8f0018f
pushf
not eax
add eax, 0x86c640b8
xor eax, 0x93caa76d
rol eax, 0
popf
pushf
not eax
add eax, 0x89774ba1
xor eax, 0x9b5ab91b
rol eax, 0x1a
popf
jmp 0x1400ee345
cmp byte [rbp - 0x28], dl
je 0x1400efba1
push rax
pushf
mov eax, 0x7c8213e
pushf
not eax
add eax, 0xbcbca252
xor eax, 0xf4b2a3fb
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x8d77635c
xor eax, 0x8dcc17f4
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x9a7ff32b
xor eax, 0xbb811b61
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa6f82ec1
xor eax, 0xef278603
rol eax, 0xa8
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x70b49c3a
pushf
not eax
add eax, 0xe75c4df2
xor eax, 0xf5c6fd68
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xf2ee8166
xor eax, 0xb0a6df4d
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xa5db9481
xor eax, 0x9bab1fb5
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xd8905b0d
xor eax, 0xda010ba2
rol eax, 0x1b
popf
jmp 0x1400ee345
mov rcx, r14
call fcn.14019fe1c
jmp 0x1400eff5e
cmp al, 0x2e
jne 0x1400efcaa
push rax
pushf
mov eax, 0x6ceb3b0d
pushf
not eax
add eax, 0xe84085a6
xor eax, 0xf0b68093
rol eax, 0x10
popf
pushf
not eax
add eax, 0xdc9512d5
xor eax, 0xf63059d1
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xa6336bee
xor eax, 0x89997009
rol eax, 0x53
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xaa4e87dc
pushf
not eax
add eax, 0xe5713c1c
xor eax, 0xee75db6b
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe5faea07
xor eax, 0xc33ef1f0
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xa85a98e5
xor eax, 0xd72d9179
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xfad45b39
xor eax, 0xb11ea6a1
rol eax, 0x87
popf
jmp 0x1400ee345
cmp byte [rcx + 2], dl
je 0x1400efd61
push rax
pushf
mov eax, 0x9a6d1bfb
pushf
not eax
add eax, 0xe2e5c275
xor eax, 0xd633e814
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xc133df8c
xor eax, 0x9d930898
rol eax, 0x27
popf
pushf
not eax
add eax, 0xe066e00e
xor eax, 0xdecfe94a
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd10088aa
xor eax, 0x800d8da5
rol eax, 0x62
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x9a15c33b
pushf
not eax
add eax, 0xc3296a18
xor eax, 0xec6c1ea4
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe30a145f
xor eax, 0xa6a7c882
rol eax, 0x36
popf
jmp 0x1400ee345
mov r9, r12
mov r8, r13
mov rdx, rdi
call fcn.1401725dd
mov r13d, eax
test eax, eax
jne 0x1400efe02
push rax
pushf
mov eax, 0x5a61c5ba
pushf
not eax
add eax, 0xe78508b0
xor eax, 0x87c78304
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf11b5886
xor eax, 0xfaf7d111
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xc863a5f2
xor eax, 0x9eaad341
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xa1fd3887
xor eax, 0xd3e67c4a
rol eax, 0x55
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xcd3d5ded
pushf
not eax
add eax, 0xb553e214
xor eax, 0xa5a5a9f5
rol eax, 0x98
popf
pushf
not eax
add eax, 0x8412241f
xor eax, 0xb0c4a4f1
rol eax, 0x36
popf
jmp 0x1400ee345
cmp byte [rbp - 0x28], al
je 0x1400efe93
push rax
pushf
mov eax, 0x58724e08
pushf
not eax
add eax, 0xfda24ba3
xor eax, 0xe2adcfbb
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x9b1fe4b2
xor eax, 0xe1d84b56
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xcef7e430
xor eax, 0xfcbd19f2
rol eax, 0x73
popf
pushf
not eax
add eax, 0xd3427dbf
xor eax, 0xdc9b3f26
rol eax, 0x6c
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xb665a3db
pushf
not eax
add eax, 0x8bd72ea7
xor eax, 0xa9a15bda
rol eax, 0x64
popf
pushf
not eax
add eax, 0xc2cf1e0f
xor eax, 0xf5c98cf7
rol eax, 0x72
popf
jmp 0x1400ee345
mov rcx, r14
call fcn.14019fe1c
push rax
pushf
mov eax, 0x39e70efb
pushf
not eax
add eax, 0xf9fbc86e
xor eax, 0xf9d585bd
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x8ffa8357
xor eax, 0xee1a5514
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xff2bb009
xor eax, 0xd16fac51
rol eax, 0
popf
pushf
not eax
add eax, 0xa913b0ad
xor eax, 0x9c5e63b9
rol eax, 1
popf
jmp 0x1400ee345
mov r13, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x7a91bf49
pushf
not eax
add eax, 0xbdb61942
xor eax, 0x9a75cdad
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x8370f0b2
xor eax, 0xd4a66451
rol eax, 0xbf
popf
jmp 0x1400ee345
lea rdx, [rbp - 0x20]
mov rcx, rbx
jmp 0x1400eff66
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
xor r14d, r14d
test eax, eax
jne 0x1400ef4f8
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp rsi, rdx
je 0x1400effbf
push rax
pushf
mov eax, 0x16fda7b1
pushf
not eax
add eax, 0xafc364f2
xor eax, 0x944afa4b
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x992af89f
xor eax, 0xb049941d
rol eax, 0x7c
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x4bcaeb68
pushf
not eax
add eax, 0xd1c545ac
xor eax, 0xb4fd789a
rol eax, 6
popf
pushf
not eax
add eax, 0x8f824cd9
xor eax, 0xfc4aa211
rol eax, 0x69
popf
pushf
not eax
add eax, 0x864fb1c8
xor eax, 0x9f827664
rol eax, 0x2f
popf
jmp 0x1400ee345
sub rdx, rsi
lea rcx, [rax + rsi*8]
lea r9, [0x185b0e74c]
pushf
sub r9, 0x45ae45ec
popf
lea r8d, [r14 + 8]
call fcn.1401823d8
push rax
pushf
mov eax, 0x5ab610a5
pushf
not eax
add eax, 0xcd745abe
xor eax, 0xa3289a4d
rol eax, 0x44
popf
pushf
not eax
add eax, 0xf27c1015
xor eax, 0xbd0f0ab7
rol eax, 0x87
popf
jmp 0x1400ee345
mov rcx, rbx
jmp 0x1400f005e
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], r14b
je 0x1400f009e
push rax
pushf
mov eax, 0xd53b90c9
pushf
not eax
add eax, 0xdef7a360
xor eax, 0xfba5b657
rol eax, 0x82
popf
pushf
not eax
add eax, 0x82fb36e0
xor eax, 0xbaa7a3d8
rol eax, 0x30
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x576de0f9
pushf
not eax
add eax, 0x9a5288a7
xor eax, 0xc4e8091d
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x833fbf7f
xor eax, 0xb93de679
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa0b4f94b
xor eax, 0xd22c0c50
rol eax, 0xd6
popf
jmp 0x1400ee345
mov rcx, qword [rsp + 0x50]
call fcn.14019fe1c
push rax
pushf
mov eax, 0x23800750
pushf
not eax
add eax, 0xbd9a1f9e
xor eax, 0x96bde659
rol eax, 0x17
popf
pushf
not eax
add eax, 0xf4e881a5
xor eax, 0xab08a3f4
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xf7953883
xor eax, 0xdaf2b9ad
rol eax, 0x7a
popf
jmp 0x1400ee345
xor eax, eax
jmp 0x1400f03aa
cmp byte [rbp - 0x28], 0
je 0x1400f01a7
push rax
pushf
mov eax, 0x872fa2c0
pushf
not eax
add eax, 0xcbc57d31
xor eax, 0x86a3c1dc
rol eax, 0x68
popf
pushf
not eax
add eax, 0xfc9dfc81
xor eax, 0xc6824cde
rol eax, 0x1c
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0xaf3c7298
pushf
not eax
add eax, 0x88eeec32
xor eax, 0xf6206cf0
rol eax, 7
popf
pushf
not eax
add eax, 0xdd13df91
xor eax, 0xac637fc0
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc2e6b90d
xor eax, 0x9d080421
rol eax, 0xda
popf
pushf
not eax
add eax, 0xb82ae82e
xor eax, 0xae8ae6a4
rol eax, 0x56
popf
jmp 0x1400ee345
mov rcx, r14
call fcn.14019fe1c
push rax
pushf
mov eax, 0x3eecb2da
pushf
not eax
add eax, 0xc1a39a4c
xor eax, 0xa2e60bf4
rol eax, 0xba
popf
pushf
not eax
add eax, 0xbfc20d11
xor eax, 0xd4c51593
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8fa8b956
xor eax, 0xba68af20
rol eax, 0x59
popf
pushf
not eax
add eax, 0x9c76ec9f
xor eax, 0xbc684571
rol eax, 0xd2
popf
jmp 0x1400ee345
mov rcx, rbx
jmp 0x1400f0265
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rsp + 0x68], 0
je 0x1400f02cb
push rax
pushf
mov eax, 0x69412f00
pushf
not eax
add eax, 0xb95c8bb3
xor eax, 0xa7b4478a
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xe72c89bb
xor eax, 0xb678c2ec
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc380ee2b
xor eax, 0x9acb5d4b
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x994f95f9
xor eax, 0xcbbe56ee
rol eax, 0x51
popf
jmp 0x1400ee345
push rax
pushf
mov eax, 0x362d4702
pushf
not eax
add eax, 0xabfa18a5
xor eax, 0xff1ef230
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xd3921013
xor eax, 0xdf6458c7
rol eax, 0x23
popf
pushf
not eax
add eax, 0xf7a3d645
xor eax, 0x87748e8b
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xd6b14987
xor eax, 0x8a14ae86
rol eax, 0xcf
popf
jmp 0x1400ee345
mov rcx, qword [rsp + 0x50]
call fcn.14019fe1c
push rax
pushf
mov eax, 0xb33551eb
pushf
not eax
add eax, 0xd02d358c
xor eax, 0xd6dd4cb5
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xa8693115
xor eax, 0xa0b64106
rol eax, 0x92
popf
pushf
not eax
add eax, 0x8ad8f035
xor eax, 0x8ca778fd
rol eax, 0x5b
popf
jmp 0x1400ee345
mov eax, r13d
push rax
pushf
mov eax, 0xde0c7fec
pushf
not eax
add eax, 0x9fdede26
xor eax, 0xdad08831
rol eax, 0xff
popf
pushf
not eax
add eax, 0xe7e4740f
xor eax, 0xda7e090a
rol eax, 0x91
popf
jmp 0x1400ee345
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.14012cd5d
add rsp, 0x340
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret