Function at 0x140103ca0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xe8
lea rbp, [rsp + 0x80]
xor eax, eax
test al, al
jne 0x140103ce7
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov r14, rsp
mov eax, 0x40
call fcn.1401516e0
sub rsp, rax
mov r15, rsp
xor eax, eax
test al, al
je 0x140103d03
mov eax, 0x20
call fcn.1401516e0
sub rsp, rax
mov eax, 0x40
call fcn.1401516e0
sub rsp, rax
jmp 0x140103cc1
mov rdi, qword [rcx]
mov rsi, qword [rcx + 8]
mov r12, qword [rcx + 0x18]
mov r9, qword [rcx + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x140225270]
mov edx, dword [0x140225274]
mov r8d, eax
xor r8d, edx
not r8d
or eax, edx
and eax, r8d
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x9ee6cd35
and edx, 0x611932ca
imul edx, r8d
mov r8d, eax
and r8d, 0x611932ca
or eax, 0x611932ca
imul eax, r8d
add eax, edx
mov edx, eax
not edx
and edx, 0xabd7404e
mov r8d, eax
and r8d, 0x5428bfb0
imul r8d, edx
mov edx, eax
and edx, 0xabd7404e
or eax, 0xabd7404e
imul eax, edx
add eax, r8d
mov edx, eax
not edx
and edx, 0x89448c0
and eax, 0xf76bb73c
sub eax, edx
cmp eax, 0x57e743d5
je 0x140103d20
movzx r10d, word [r12 + 0x3d2]
mov r11, r10
or r11, 1
xor eax, eax
test al, al
jne 0x140103dc0
mov rbx, qword [rcx + 0x28]
movzx r8d, word [rbx + 0x3d2]
mov r13d, r10d
and r13d, 1
add r13, r11
mov eax, r8d
and eax, r13d
mov rdx, r13
mov qword [rbp + 0x48], r8
or rdx, r8
add rdx, rax
cmp edx, 0xc
jae 0x1401046d5
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x18], r14
mov qword [rbp - 8], rsi
mov qword [rbp + 8], r11
mov qword [rbp - 0x18], r9
movzx esi, word [rdi + 0x3d2]
mov r8, qword [rcx + 0x10]
mov qword [rbp], rdx
mov word [r12 + 0x3d2], dx
lea rax, [rdi + 0x168]
mov qword [rbp + 0x30], rax
imul rax, r8, 0x38
lea rcx, [rdi + rax]
add rcx, 0x168
mov eax, dword [0x140225280]
imul eax, dword [0x140225284]
mov r9d, eax
not r9d
mov edx, eax
and edx, 0xa6a158b2
and r9d, 0x595ea74d
imul r9d, edx
mov edx, eax
and edx, 0x595ea74d
or eax, 0x595ea74d
imul eax, edx
add eax, r9d
add eax, 0xdc870dd5
mov rdx, r8
not rdx
mov qword [rbp + 0x28], rdx
cmp eax, 0x778815e8
mov qword [rbp + 0x60], r8
mov qword [rbp + 0x58], r10
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x50], rbx
jae 0x140104070
mov rax, qword [rcx + 0x30]
mov r15, qword [rbp + 0x20]
mov qword [r15 + 0x30], rax
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movups xmmword [r15 + 0x20], xmm2
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
mov rax, r8
xor rax, 1
mov edx, r8d
and edx, 1
lea rax, [rax + rdx*2]
mov qword [rbp + 0x38], rax
imul rdx, rax, 0x38
add rdx, qword [rbp + 0x30]
mov rax, qword [rbp + 0x40]
mov r8, qword [rbp + 0x28]
lea r14, [r8 + rax]
mov eax, r14d
not eax
mov r8, r14
and r8, 0xffffffffffffffc7
and eax, 0x38
imul rax, r8
mov r9d, r14d
and r9d, 0x38
mov r8, r14
or r8, 0x38
imul r8, r9
add r8, rax
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
imul rax, qword [rbp + 0x58], 0x38
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmm2, xmmword [r15 + 0x20]
movups xmmword [r12 + rax + 0x168], xmm0
movups xmmword [r12 + rax + 0x178], xmm1
movups xmmword [r12 + rax + 0x188], xmm2
mov rcx, qword [r15 + 0x30]
mov qword [r12 + rax + 0x198], rcx
lea rdx, [rbx + 0x168]
imul rax, r13, 0x38
lea rcx, [r12 + rax]
add rcx, 0x168
mov rsi, qword [rbp + 0x48]
mov eax, esi
not eax
and eax, 0x38
mov r9d, esi
and r9d, 0xffffffc7
imul r9, rax
mov eax, esi
and eax, 0x38
mov r8, rsi
or r8, 0x38
imul r8, rax
add r8, r9
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0x60]
shl rax, 5
lea rcx, [rdi + rax]
movups xmm0, xmmword [rdi + rax]
movups xmm1, xmmword [rdi + rax + 0x10]
mov r15, qword [rbp + 0x18]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
mov rbx, qword [rbp + 0x38]
mov rdx, rbx
shl rdx, 5
add rdx, rdi
mov r8, r14
shl r8, 5
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
mov rax, qword [rbp + 0x58]
shl rax, 5
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r12 + rax], xmm0
movups xmmword [r12 + rax + 0x10], xmm1
mov rcx, r13
shl rcx, 5
add rcx, r12
shl rsi, 5
sub rsp, 0x20
mov rdx, qword [rbp + 0x50]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
lea rcx, [rdi + rbx*8]
add rcx, 0x3d8
mov rbx, qword [rbp + 0x50]
mov rax, qword [rbp + 0x60]
lea rdx, [rdi + rax*8]
add rdx, 0x3e8
shl r14, 3
sub rsp, 0x20
mov r8, r14
mov rsi, qword [rbp + 0x40]
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rbp + 0x10]
mov r8, qword [rbp + 0x60]
mov r10, qword [rbp + 0x58]
add rsp, 0x20
mov rdx, r13
lea r13, [r8 + 1]
imul rax, r13, 0x38
add qword [rbp + 0x30], rax
lea r9, [r8 + r8]
sub r9, rsi
not r9
add r9, r8
mov rax, r9
and rax, 0xffffffffffffffc7
mov qword [rbp - 0x80], rax
mov rax, r9
or rax, 0x38
mov qword [rbp - 0x78], rax
imul rax, r10, 0x38
mov qword [rbp - 0x70], rax
imul rax, rdx, 0x38
add rax, r12
add rax, 0x168
mov qword [rbp - 0x68], rax
mov rax, qword [rbp + 0x48]
mov r11, rax
or r11, 0x38
mov qword [rbp - 0x60], r11
mov r11, r8
shl r11, 5
mov rsi, r13
shl rsi, 5
add rsi, rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp + 0x38], r9
shl r9, 5
mov qword [rbp - 0x48], r9
shl r10, 5
mov qword [rbp - 0x40], r10
mov qword [rbp - 0x10], rdx
shl rdx, 5
add rdx, r12
mov qword [rbp - 0x38], rdx
shl rax, 5
mov qword [rbp - 0x30], rax
lea rax, [rbx + 0x168]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x58], r11
lea rax, [rdi + r11]
mov qword [rbp - 0x20], rax
mov rbx, r12
mov r15, qword [rbp + 0x18]
mov r14, qword [rbp + 0x20]
mov rsi, qword [rbp + 0x38]
mov r12d, dword [0x140225288]
or r12d, dword [0x14022528c]
xor r12d, 0x8c0f08
or r12d, 0x735150b3
add r12d, 0xddcdfa0b
mov rax, qword [rcx + 0x30]
mov qword [r14 + 0x30], rax
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmm2, xmmword [rcx + 0x20]
movups xmmword [r14 + 0x20], xmm2
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
mov eax, esi
not eax
and eax, 0x38
imul rax, qword [rbp - 0x80]
mov r8d, esi
and r8d, 0x38
imul r8, qword [rbp - 0x78]
add r8, rax
sub rsp, 0x20
mov rdx, qword [rbp + 0x30]
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmm2, xmmword [r14 + 0x20]
mov rcx, qword [rbp - 0x70]
movups xmmword [rbx + rcx + 0x168], xmm0
movups xmmword [rbx + rcx + 0x178], xmm1
movups xmmword [rbx + rcx + 0x188], xmm2
mov rax, qword [r14 + 0x30]
mov qword [rbx + rcx + 0x198], rax
mov r8, qword [rbp + 0x48]
mov eax, r8d
and eax, 0xffffffc7
mov ecx, r8d
not ecx
and ecx, 0x38
imul rcx, rax
and r8d, 0x38
imul r8, qword [rbp - 0x60]
add r8, rcx
sub rsp, 0x20
mov rcx, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp - 0x58]
movups xmm0, xmmword [rdi + rax]
movups xmm1, xmmword [rdi + rax + 0x10]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
sub rsp, 0x20
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x48]
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
mov rax, qword [rbp - 0x40]
movups xmmword [rbx + rax], xmm0
movups xmmword [rbx + rax + 0x10], xmm1
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0x60]
lea rcx, [rdi + rax*8]
add rcx, 0x3e0
lea rdx, [rdi + rax*8]
add rdx, 0x3e8
lea r8, [rsi*8]
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rbp + 0x10]
add rsp, 0x20
cmp r12d, 0x57cd7e3
jb 0x140104130
mov r15, qword [rbp + 0x50]
mov r14, qword [rbp + 0x40]
cmp r13, r14
mov rsi, qword [rbp - 8]
jae 0x140104493
mov r8, qword [rbp + 0x28]
lea ecx, [r14 + r8]
movabs rax, 0xf652dd8817cdda59
mov rdx, r14
sub rdx, rax
add rax, rdx
add rax, 0xfffffffffffffffe
mov rdx, qword [rbp + 0x60]
xor rdx, rax
and rax, r8
add rax, rax
sub rax, rdx
and ecx, 3
nop word cs:[rax + rax]
mov edx, dword [0x140225290]
or edx, dword [0x140225294]
mov r8d, edx
or r8d, 0x4504100
not edx
and edx, 0x4a073024
and r8d, 0x2478c198
or r8d, edx
xor r8d, 0xc37be994
cmp r8d, 0x5e78e029
jb 0x140104300
xor edx, edx
nop word [rax + rax]
test dl, dl
jne 0x140104340
test rcx, rcx
je 0x140104489
xor edx, edx
nop
mov r8d, dword [0x140225298]
mov r9d, dword [0x14022529c]
mov r10d, r9d
not r10d
mov r11d, r8d
and r11d, r10d
or r10d, r8d
not r10d
imul r10d, r11d
mov r11d, r8d
and r11d, r9d
or r8d, r9d
imul r8d, r11d
add r8d, r10d
add r8d, 0xffbc0bca
mov r9d, r8d
and r9d, 0x2eaf2f1f
add r9d, r9d
sub r8d, r9d
add r8d, 0xaeaf2f1f
mov r9d, r8d
not r9d
and r9d, 0x8d4fdd80
mov r10d, r8d
and r10d, 0x72b0227f
imul r10d, r9d
mov r9d, r8d
and r9d, 0x8d4fdd80
or r8d, 0x8d4fdd80
imul r8d, r9d
add r8d, r10d
cmp r8d, 0x65e7848c
jae 0x140104400
mov r8, qword [rdi + r13*8 + 0x3d8]
mov qword [r8 + 0x160], rdi
mov word [r8 + 0x3d0], r13w
nop word cs:[rax + rax]
mov r8d, dword [0x1402252a0]
mov r9d, dword [0x1402252a4]
mov r10d, r8d
not r10d
and r10d, r9d
mov r11d, r9d
not r11d
and r11d, r8d
imul r11d, r10d
mov r10d, r8d
and r10d, r9d
or r8d, r9d
imul r8d, r10d
add r8d, r11d
add r8d, 0x22bad419
imul r9, r8, 0x1d5d1311
shr r9, 0x20
sub r8d, r9d
shr r8d, 1
add r8d, r9d
shr r8d, 0x1e
or r8d, 0xbf817110
mov r9, qword [rdi + r13*8 + 0x3d8]
mov qword [r9 + 0x160], rdi
mov word [r9 + 0x3d0], r13w
cmp r8d, 0xa0ffbcb6
jb 0x140104400
inc r13
inc rdx
cmp rdx, rcx
jne 0x140104350
cmp rax, 3
jae 0x14010451f
mov r12, qword [rbp - 0x10]
nop word [rax + rax]
mov eax, dword [0x1402252b8]
mov ecx, dword [0x1402252bc]
mov edx, eax
and edx, ecx
or eax, ecx
add eax, edx
mov ecx, eax
not ecx
and ecx, 0x2fe78662
and eax, 0xd018799d
sub eax, ecx
add eax, 0xb8d22744
cmp eax, 0xe8fc7cf0
ja 0x1401044a0
movzx eax, word [rdi + 0x3d2]
mov ecx, dword [0x1402252c0]
mov edx, dword [0x1402252c4]
mov r8d, ecx
not r8d
or ecx, edx
not edx
and edx, r8d
not edx
and edx, ecx
add edx, 0x900bacfb
shr edx, 1
imul rcx, rdx, 0x296b55d3
shr rcx, 0x3b
or ecx, 0x8f4ff994
cmp ecx, 0x288e190
jae 0x14010470b
jmp 0x140104771
mov eax, 0x8b4f9c19
jmp 0x140104548
mov ecx, r13d
and ecx, 4
xor r13, 4
lea r13, [r13 + rcx*2]
cmp r13, r14
je 0x140104493
mov ecx, dword [0x1402252a8]
mov edx, dword [0x1402252ac]
xor edx, ecx
not edx
and edx, ecx
add edx, 0x4d0c766
shr edx, 1
imul rdx, rax
shr rdx, 0x3e
mov ecx, edx
add ecx, ecx
neg ecx
add ecx, edx
add ecx, 0xd36fe955
cmp ecx, 0x577b54da
jb 0x14010466a
nop word cs:[rax + rax]
mov ecx, dword [0x1402252b0]
mov edx, dword [0x1402252b4]
mov r8d, ecx
not r8d
or ecx, edx
not edx
and edx, r8d
not ecx
or ecx, edx
mov edx, ecx
not edx
or ecx, 0x11223111
and ecx, 0x15633315
and edx, 0xe890c46a
or edx, ecx
mov ecx, edx
xor ecx, 0xab01556d
xor edx, 0x4848a00
and edx, 0xa5858f4c
mov r8d, ecx
and r8d, 0x4a504022
or r8d, edx
xor r8d, 0x45c3d247
and ecx, 0xf060641a
or ecx, r8d
lea rdx, [r13 + 2]
lea r8d, [r13 + 1]
mov r9, qword [rdi + r13*8 + 0x3d8]
mov qword [r9 + 0x160], rdi
mov word [r9 + 0x3d0], r13w
mov r9, qword [rdi + r13*8 + 0x3e0]
mov qword [r9 + 0x160], rdi
mov word [r9 + 0x3d0], r8w
lea r8d, [r13 + 3]
mov r9, qword [rdi + r13*8 + 0x3e8]
mov qword [r9 + 0x160], rdi
mov word [r9 + 0x3d0], dx
mov rdx, qword [rdi + r13*8 + 0x3f0]
mov qword [rdx + 0x160], rdi
mov word [rdx + 0x3d0], r8w
cmp ecx, 0xa5f3a87a
jae 0x140104530
mov rcx, qword [rdi + r13*8 + 0x3d8]
mov qword [rcx + 0x160], rdi
mov word [rcx + 0x3d0], r13w
lea rcx, [r13 + 2]
mov rdx, qword [rdi + r13*8 + 0x3e0]
mov qword [rdx + 0x160], rdi
lea r8d, [r13 + 1]
mov word [rdx + 0x3d0], r8w
mov rdx, qword [rdi + r13*8 + 0x3e8]
mov qword [rdx + 0x160], rdi
mov word [rdx + 0x3d0], cx
mov rcx, qword [rdi + r13*8 + 0x3f0]
mov qword [rcx + 0x160], rdi
lea edx, [r13 + 3]
mov word [rcx + 0x3d0], dx
jmp 0x140104590
ud2
mov ecx, dword [0x1402252cc]
add ecx, dword [0x1402252c8]
imul rdx, rcx, 0xc16ab5b
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1e
imul ecx, ecx, 0xfda47924
mov edx, ecx
not edx
mov r8d, ecx
and r8d, 0x3957bb5c
and edx, 0xc6a844a3
imul edx, r8d
mov r8d, ecx
and r8d, 0xc6a844a0
or ecx, 0xc6a844a3
imul ecx, r8d
add ecx, edx
lea edx, [rax - 1]
mov word [rdi + 0x3d2], dx
cmp ecx, 0x3d201624
jae 0x14010477d
lea ecx, [rax - 1]
mov word [rdi + 0x3d2], cx
jmp 0x14010470b
cmp rsi, 2
jb 0x140104a0c
lea r14, [rbx + r12*8]
add r14, 0x3d8
mov rdi, qword [rbp + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x1402252d0]
mov ecx, dword [0x1402252d4]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4b436455
and ecx, 0xb4bc9baa
imul ecx, edx
mov edx, eax
and edx, 0xb4bc9baa
or eax, 0xb4bc9baa
imul eax, edx
add eax, ecx
imul rax, rax, 0x645d8937
shr rax, 0x3e
or eax, 0x27a094d0
cmp eax, 0xfcc08348
ja 0x1401047a0
mov eax, dword [0x1402252d8]
mov ecx, dword [0x1402252dc]
not eax
not ecx
mov edx, eax
or edx, ecx
and ecx, eax
not ecx
and ecx, edx
and ecx, 0xf07901c0
mov eax, ecx
xor eax, 0x10000000
xor ecx, 0x202280
or ecx, 0x7c945842
or eax, 0x8ded7b96
and eax, ecx
cmp eax, 0x37e6a669
je 0x1401048ae
mov eax, dword [0x1402252e0]
sub eax, dword [0x1402252e4]
xor eax, 0x1349ffe8
imul esi, eax, 0x6a8cf08d
mov eax, esi
not eax
and eax, 0xf5db69c2
mov ecx, esi
and ecx, 0xa24963d
imul ecx, eax
mov eax, esi
and eax, 0xf5db69c2
or esi, 0xf5db69c2
imul esi, eax
add esi, ecx
lea rdx, [r15 + 0x3d8]
lea r8, [rdi*8 + 8]
sub rsp, 0x20
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp esi, 0x4cfc0041
jbe 0x1401048d2
lea rdx, [r15 + 0x3d8]
lea r8, [rdi*8 + 8]
sub rsp, 0x20
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
jmp 0x14010484a
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1401048e0
lea eax, [rdi + 1]
and eax, 3
mov r9, qword [rbp + 0x58]
mov rcx, qword [rbp + 8]
je 0x140104984
and r9d, 1
add r9, rcx
neg r9
xor ecx, ecx
xor edx, edx
jmp 0x140104929
mov r8d, edx
and r8d, 1
or rdx, 1
add rdx, r8
dec r9
inc r12
cmp rdx, rax
je 0x140104984
mov r8d, dword [0x1402252e8]
sub r8d, dword [0x1402252ec]
and r8d, 0xdacafc05
cmp r8d, 0x75cdfb48
je 0x14010496b
nop word [rax + rax]
mov r8, qword [rbx + r12*8 + 0x3d8]
mov qword [r8 + 0x160], rbx
mov word [r8 + 0x3d0], r12w
test cl, cl
je 0x140104910
mov r8, qword [rbx + r12*8 + 0x3d8]
mov qword [r8 + 0x160], rbx
mov word [r8 + 0x3d0], r12w
jmp 0x140104950
cmp di, 3
mov r8, qword [rbp]
jb 0x140104a0c
nop
mov rax, qword [rbx + r12*8 + 0x3d8]
mov qword [rax + 0x160], rbx
mov word [rax + 0x3d0], r12w
mov eax, r12d
and eax, 2
mov rcx, r12
or rcx, 2
add rcx, rax
mov rax, qword [rbx + r12*8 + 0x3e0]
mov qword [rax + 0x160], rbx
lea edx, [r12 + 1]
mov word [rax + 0x3d0], dx
mov rax, qword [rbx + rcx*8 + 0x3d8]
mov qword [rax + 0x160], rbx
mov word [rax + 0x3d0], cx
mov rax, qword [rbx + r12*8 + 0x3f0]
mov qword [rax + 0x160], rbx
lea rcx, [r12 + 3]
mov word [rax + 0x3d0], cx
add r12, 4
cmp rcx, r8
jne 0x140104990
mov rdi, qword [0x14022cb48]
mov eax, dword [0x1402252f0]
sub eax, dword [0x1402252f4]
not eax
or eax, 0x28014022
xor eax, 0x80080
and eax, 0x290dc0a2
cmp eax, 0x910640aa
ja 0x140104a71
mov eax, dword [0x1402252f8]
sub eax, dword [0x1402252fc]
add eax, 0xcbc3846d
imul rsi, rax, 0x19f2ec8b
shr rsi, 0x3c
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x6a06064c
jne 0x140104a90
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x140104a37
mov eax, dword [0x140225304]
add eax, dword [0x140225300]
mov ecx, eax
and ecx, 0xb8d30b21
xor ecx, 0x20500b01
and eax, 0x20500b01
or eax, ecx
xor eax, 0x820
or eax, 0x472cf4de
cmp eax, 0x52a30cf1
jb 0x140104a90
mov rax, rbx
mov rdx, qword [rbp - 0x18]
lea rsp, [rbp + 0x68]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret