Function at 0x1400c23f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
nop dword [rax]
mov eax, dword [0x141f41138]
and eax, dword [0x141f4113c]
or eax, 0x8200512a
and eax, 0xea08fbaa
add eax, 0x6778424f
cmp eax, 0x6761f2df
jb 0x1400b8390
mov rcx, qword [rsi + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141f41140]
imul eax, dword [0x141f41144]
cmp eax, 0x6d81a32c
je 0x1400b83c0
cmp rcx, 0x104
jbe 0x1400b8420
xor eax, eax
test al, al
je 0x1400b83f1
mov rax, qword [rsi + 0x10]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
xor eax, eax
nop word cs:[rax + rax]
mov rcx, qword [rsi + 0x10]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
test al, al
jne 0x1400b8400
jmp 0x1400b886c
mov eax, dword [0x141f41148]
or eax, dword [str._9]
imul eax, eax, 0x4d142533
add eax, 0x3487ef0c
cmp eax, 0x3e03a634
jb 0x1400b8420
xor eax, eax
test al, al
jne 0x1400b8440
mov r8, qword [rsi + 8]
nop dword [rax + rax]
mov eax, dword [0x141f41150]
sub eax, dword [0x141f41154]
add eax, 0x1e32822a
imul rax, rax, 0x5b9019bf
shr rax, 0x3e
cmp eax, 0x3b1922be
je 0x1400b8450
cmp rcx, 6
jbe 0x1400b85cf
mov eax, dword [0x141f41168]
xor edx, edx
div dword [0x141f4116c]
nop dword [rax + rax]
mov eax, dword [0x141f41170]
xor edx, edx
div dword [0x141f41174]
add eax, 0xdffc3a9b
or eax, 0x217fa6b1
cmp eax, 0x5646e610
jb 0x1400b8490
movzx eax, word [r8]
nop word cs:[rax + rax]
mov edx, dword [0x141f41178]
xor edx, dword [0x141f4117c]
and edx, 0x40004481
cmp edx, 0x7717790c
ja 0x1400b84c0
cmp ax, 0x5c
jne 0x1400b85cf
mov r9d, 0xc23f8649
nop word [rax + rax]
mov eax, dword [0x141f41180]
xor edx, edx
div dword [0x141f41184]
imul rax, rax, 0x601b610d
shr rax, 0x34
xor eax, 0x5d266d1f
imul rax, r9
shr rax, 0x3d
cmp eax, 0xb419d2a7
ja 0x1400b84f0
movzx eax, word [r8 + 2]
mov edx, 0x8f331adb
nop word [rax + rax]
mov r9d, dword [0x141f41188]
add r9d, dword [0x141f4118c]
imul r9, rdx
shr r9, 0x3d
or r9d, 0x7fd3e929
add r9d, 0xb61b1e18
cmp r9d, 0x8d6643ad
ja 0x1400b8530
cmp ax, 0x5c
jne 0x1400b85cf
mov eax, dword [0x141f41190]
xor edx, edx
div dword [0x141f41194]
nop word cs:[rax + rax]
mov eax, dword [0x141f41198]
imul eax, dword [0x141f4119c]
and eax, 0xc2314822
cmp eax, 0xd28bc459
je 0x1400b8580
nop dword [rax]
mov eax, dword [0x141f411a0]
sub eax, dword [0x141f411a4]
xor eax, 0xe44f000
and eax, 0x7f5ef9c8
imul eax, eax, 0x632e21c5
cmp eax, 0xdb26fa02
jb 0x1400b85a0
movzx r9d, word [r8 + 4]
cmp r9w, 0x3f
je 0x1400b85fb
mov eax, dword [0x141f41158]
and eax, dword [0x141f4115c]
add eax, 0x5ea0d73c
and eax, 0xc7fbe9db
imul eax, eax, 0x42937689
cmp eax, 0x8014dd3d
jae 0x1400b8829
jmp 0x1400b885c
movzx r10d, word [r8 + 6]
mov eax, dword [0x141f411a8]
xor r11d, r11d
xor edx, edx
div dword [0x141f411ac]
nop word cs:[rax + rax]
test r11b, r11b
jne 0x1400b8620
cmp r10w, 0x5c
jne 0x1400b86d9
mov eax, dword [0x141f411b0]
imul eax, dword [0x141f411b4]
xor eax, 0x202775cc
imul eax, eax, 0x975dacbc
cmp eax, 0x204b6bc2
je 0x1400b8630
movzx eax, word [r8 + 0xa]
nop word cs:[rax + rax]
mov edx, dword [0x141f411b8]
or edx, dword [0x141f411bc]
add edx, 0x8ab444b3
and edx, 0x30005100
cmp edx, 0xfab6854b
ja 0x1400b8660
cmp ax, 0x3a
jne 0x1400b86d9
mov eax, 0x9272b1c1
nop dword [rax + rax]
mov edx, dword [0x141f411c0]
xor edx, dword [0x141f411c4]
add edx, 0xd2f17b46
xor edx, 0xa62a98df
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x7b67a964
ja 0x1400b8690
cmp word [r8 + 0xc], 0x5c
jne 0x1400b86d9
add r8, 8
mov rcx, rdi
mov rdx, r8
mov r8, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.1400c1950
cmp rcx, 8
jb 0x1400b85cf
cmp r9w, 0x3f
jne 0x1400b85cf
movzx eax, word [r8 + 6]
nop word cs:[rax + rax]
mov ecx, dword [0x141f411c8]
or ecx, dword [0x141f411cc]
imul ecx, ecx, 0xcd534ce0
and ecx, 0xae044cc0
cmp ecx, 0x8d45b0bb
je 0x1400b8700
mov ecx, 0xae94cc11
nop word cs:[rax + rax]
mov edx, dword [0x141f411d0]
xor edx, dword [0x141f411d4]
or edx, 0x90823280
and edx, 0x95c6f7f1
imul rdx, rcx
shr rdx, 0x3d
cmp edx, 0x9013f212
ja 0x1400b8730
cmp ax, 0x5c
jne 0x1400b85cf
movzx ecx, word [r8 + 8]
nop word [rax + rax]
mov eax, dword [0x141f411d8]
xor edx, edx
div dword [0x141f411dc]
xor eax, 0x4288e888
or eax, 0x9d051356
add eax, 0xce54a0bb
cmp eax, 0xe6972b03
ja 0x1400b8770
cmp cx, 0x55
jne 0x1400b85cf
cmp word [r8 + 0xa], 0x4e
jne 0x1400b85cf
cmp word [r8 + 0xc], 0x43
jne 0x1400b85cf
lea rdx, [r8 + 0xc]
mov eax, dword [0x141f411e0]
xor eax, dword [0x141f411e4]
add eax, 0x8f26f6f
or eax, 0x97cbbec6
imul eax, eax, 0x48b722a1
cmp eax, 0xcdf29471
ja 0x1400b87ba
movzx eax, word [r8 + 0xe]
mov ecx, dword [0x141f411e8]
xor ecx, dword [0x141f411ec]
and ecx, 0xd40280d9
or ecx, 0x2aa94e06
xor ecx, 0x16779942
cmp ecx, 0xb1229c96
ja 0x1400b87e2
cmp ax, 0x5c
jne 0x1400b85cf
mov word [rdx], 0x5c
mov rcx, rdi
mov r8, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp 0x1400c23f0
mov eax, dword [0x141f41160]
or eax, dword [0x141f41164]
imul rbx, rax, 0x45d06df9
shr rbx, 0x3e
or ebx, 0xe50e7fdc
mov rcx, rdi
mov rdx, rsi
xor r8d, r8d
call fcn.14009a1f0
cmp ebx, 0x41c02476
jne 0x1400b886c
mov rcx, rdi
mov rdx, rsi
xor r8d, r8d
call fcn.14009a1f0
jmp 0x1400b8829
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x488
mov qword [rsp + 0x50], r8
mov r12, rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x68], 0
mov ebx, 0x200
mov eax, 2
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x38], rax
xor esi, esi
nop word [rax + rax]
mov eax, dword [0x141f42640]
xor eax, dword [0x141f42644]
xor eax, 0xa185855
imul rax, rax, 0x689f7a21
shr rax, 0x3e
imul eax, eax, 0xd3a83752
cmp eax, 0x95635887
ja 0x1400c2450
mov r15d, 0x200
cmp rbx, 0x201
jae 0x1400c2498
lea r14, [rsp + 0x88]
mov rbp, rbx
jmp 0x1400c2523
sub rbx, rsi
mov rcx, qword [rsp + 0x38]
sub rcx, rsi
lea r14, [rsp + 0x58]
nop dword [rax + rax]
mov eax, dword [0x141f42648]
xor edx, edx
div dword [0x141f4264c]
cmp eax, 0xaa526be2
je 0x1400c24b0
nop word cs:[rax + rax]
mov eax, dword [0x141f42650]
imul eax, dword [0x141f42654]
add eax, 0x9d634ac7
or eax, 0x2c581101
and eax, 0x6eda1921
cmp eax, 0x8b0b46fc
ja 0x1400c24d0
cmp rbx, rcx
ja 0x1400c2555
mov rdi, qword [rsp + 0x30]
mov eax, 0xffffffff
cmp rdi, rax
mov esi, 0xffffffff
cmovb rsi, rdi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x38], rdi
mov r15, rsi
mov r14, qword [rsp + 0x48]
mov rbp, rsi
mov eax, dword [0x141f42670]
and eax, dword [0x141f42674]
add eax, 0xe9645fc6
xor eax, 0xaf0798f4
add eax, 0x3be3d099
cmp eax, 0x952b2ccc
mov rdi, qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
jae 0x1400c2618
jmp 0x1400c264e
mov eax, dword [0x141f42658]
imul eax, dword [0x141f4265c]
imul eax, eax, 0xf1d64c60
add eax, 0xc8e63d60
cmp eax, 0xfa3eea7b
jbe 0x1400c2591
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r14
mov rdx, rsi
mov r8, rbx
call fcn.1401035b0
mov eax, dword [0x141f42660]
xor edx, edx
div dword [str.eLPv]
add eax, 0x39f7a427
xor eax, 0x3770d842
imul edi, eax, 0xddfded96
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r14
mov rdx, rsi
mov r8, rbx
call fcn.1401035b0
cmp edi, 0x61e7824d
je 0x1400c2574
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x48], rax
nop dword [rax + rax]
mov eax, dword [0x141f42668]
or eax, dword [0x141f4266c]
imul eax, eax, 0x5a9609d1
add eax, 0x99ca3d06
xor eax, 0x909cd5a0
cmp eax, 0xd9a5a06
jbe 0x1400c25f0
jmp 0x1400c24f8
mov ebx, dword [0x141f42678]
imul ebx, dword [0x141f4267c]
add ebx, 0xbc8c402d
and ebx, 0x2010c040
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r12
mov edx, ebp
mov r8, r14
xor r9d, r9d
call rdi
cmp ebx, 0xbe024a73
jbe 0x1400c2665
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r12
mov edx, ebp
mov r8, r14
xor r9d, r9d
call rdi
jmp 0x1400c2618
mov r13d, eax
test eax, eax
jne 0x1400c2680
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400c2adf
nop word [rax + rax]
mov eax, dword [0x141f426c8]
or eax, dword [0x141f426cc]
xor eax, 0x50a585de
imul rax, rax, 0x24c198e9
shr rax, 0x3c
imul eax, eax, 0x6c88b969
cmp eax, 0xc94ff8c3
ja 0x1400c2680
mov ebx, r13d
cmp rbp, rbx
jne 0x1400c26e0
mov eax, dword [0x141f426d0]
imul eax, dword [0x141f426d4]
add eax, 0x70a08dea
and eax, 0xf3b13b47
xor eax, 0x2ba65603
cmp eax, 0xc71e17d1
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
jbe 0x1400c2710
jmp 0x1400c27a4
mov eax, dword [0x141f426e8]
add eax, dword [0x141f426ec]
or eax, 0x40000686
xor eax, 0x8020604
or eax, 0xb7f9b971
cmp eax, 0xc93b0fde
jb 0x1400c26e0
cmp rbp, rbx
jb 0x1400c2450
jmp 0x1400c27ab
mov eax, dword [0x141f426d8]
or eax, dword [0x141f426dc]
imul ebx, eax, 0xdad3f972
add ebx, 0x48b36b98
call rdi
cmp ebx, 0x9f3af3da
jb 0x1400c27a4
mov ecx, eax
nop word cs:[rax + rax]
mov eax, dword [0x141f426e0]
xor edx, edx
div dword [0x141f426e4]
imul eax, eax, 0x4fe12adc
cmp eax, 0x46994ce4
je 0x1400c2740
cmp ecx, 0x7a
jne 0x1400c2d4e
lea rax, [rbp*2]
mov ecx, dword [0x141f426f0]
and ecx, dword [0x141f426f4]
or ecx, 0x90006233
and ecx, 0x98056633
cmp rbp, 0x7fffffff
mov rbx, rax
mov edx, 0xffffffff
cmova rbx, rdx
cmp ecx, 0xc0b01c33
jae 0x1400c276c
jmp 0x1400c2450
call rdi
jmp 0x1400c2710
cmp r15, rbx
jb 0x1400c2f9b
mov rcx, qword [rsp + 0x50]
nop dword [rax]
mov eax, dword [0x141f42708]
and eax, dword [0x141f4270c]
xor eax, 0xa201db71
imul rax, rax, 0xb2b9837
shr rax, 0x3b
add eax, 0x7057a261
cmp eax, 0xb4ed09c5
ja 0x1400c27c0
mov r12, qword [rcx]
mov r8, qword [rcx + 8]
nop
mov eax, dword [0x141f42710]
xor eax, dword [0x141f42714]
or eax, 0x3d660ba
cmp eax, 0x71c73834
je 0x1400c27f0
mov rbp, qword [rcx + 0x10]
lea rax, [rbp - 1]
mov ecx, dword [0x141f42718]
xor ecx, dword [0x141f4271c]
imul rcx, rcx, 0x1bacaa1d
shr rcx, 0x39
imul ecx, ecx, 0x58e41178
add ecx, 0xc183260
cmp ecx, 0xfa61a37f
ja 0x1400c2810
cmp rax, 6
jb 0x1400c2d82
nop word cs:[rax + rax]
mov eax, dword [0x141f42720]
add eax, dword [0x141f42724]
or eax, 0x1b68388
and eax, 0xcbb7ebbc
add eax, 0x99f3962b
cmp eax, 0x9fb55b2a
jb 0x1400c2850
test rbp, rbp
je 0x1400c2d1a
lea rax, [rbp - 7]
nop
mov ecx, dword [0x141f42740]
sub ecx, dword [0x141f42744]
xor ecx, 0xa84
or ecx, 0xe13bf07b
imul ecx, ecx, 0x7a52bfcc
cmp ecx, 0xeaa0852e
jb 0x1400c2880
mov ecx, 0x95511bdf
nop dword [rax + rax]
mov edx, dword [0x141f42748]
and edx, dword [0x141f4274c]
or edx, 0x23c4fec4
imul edx, edx, 0x6d3d3bb
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0xc83f76eb
ja 0x1400c28b0
cmp rax, rbx
jne 0x1400c295c
mov qword [rsp + 0x38], r8
lea rdi, [r8 + 0xc]
lea rsi, [rbx + rbx]
mov eax, dword [0x141f42750]
and eax, dword [0x141f42754]
add eax, 0xbf69b9f4
or eax, 0xd199690d
add eax, 0x7defb6b1
cmp eax, 0xf0d58ffc
jbe 0x1400c2920
mov rcx, r14
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
nop word [rax + rax]
mov eax, dword [0x141f42758]
and eax, dword [0x141f4275c]
and eax, 0x8220f
imul r15d, eax, 0xe413d718
mov rcx, r14
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
cmp r15d, 0xa662154
je 0x1400c2920
test eax, eax
mov r8, qword [rsp + 0x38]
je 0x1400c2b44
mov word [r8 + 0xc], 0x43
mov al, 1
nop word cs:[rax + rax]
test al, al
je 0x1400c2970
mov rdi, r12
mov rsi, r8
mov rbx, rbp
mov rax, qword [rsp + 0x40]
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rbx
cmp qword [rsp + 0x30], 0
je 0x1400c2a80
nop dword [rax]
mov eax, dword [0x141f427a8]
and eax, dword [0x141f427ac]
add eax, 0x17d15f31
or eax, 0x8d156d58
imul eax, eax, 0xa8949f64
cmp eax, 0xb6e974c0
ja 0x1400c29a0
mov rsi, qword [rsp + 0x60]
mov eax, dword [0x141f427b0]
and eax, dword [0x141f427b4]
add eax, 0xfaab93f4
or eax, 0xe8e9007e
mov ecx, 0xc3dda283
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc32bd0be
jbe 0x1400c2a00
mov rax, qword [0x141f49060]
nop word [rax + rax]
mov eax, dword [0x141f427b8]
add eax, dword [0x141f427bc]
xor eax, 0xccd82386
add eax, 0x609446a3
xor eax, 0x1ac3a6b3
mov rdi, qword [0x141f49060]
cmp eax, 0x717d5231
jb 0x1400c2a00
xor eax, eax
test al, al
je 0x1400c2a3d
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebp, dword [0x141f427c0]
imul ebp, dword [0x141f427c4]
add ebp, 0x58a2c760
and ebp, 0xc144a27a
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
cmp ebp, 0x65e32c0c
jb 0x1400c2a50
nop dword [rax + rax]
mov eax, dword [0x141f427c8]
xor edx, edx
div dword [0x141f427cc]
xor eax, 0x6051c89
or eax, 0xd9da8264
add eax, 0x7e9b36a8
cmp eax, 0x220a4ca7
jb 0x1400c2a80
nop word cs:[rax + rax]
mov eax, dword [0x141f427d0]
xor eax, dword [0x141f427d4]
xor eax, 0xbc58839f
add eax, 0x2685b8d4
shr eax, 1
imul rax, rax, 0x20328571
shr rax, 0x3c
cmp eax, 0x3b2c5809
jae 0x1400c2ab0
jmp 0x1400c2f55
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x40]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
cmp qword [rsp + 0x30], 0
je 0x1400c2e30
mov eax, dword [0x141f42680]
and eax, dword [0x141f42684]
xor eax, 0xaf105502
mov ecx, 0xa65cc4db
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x2f25edb9
cmp ecx, 0x4e61931
jae 0x1400c2df2
jmp 0x1400c2e18
mov eax, 0xf2175e7f
nop dword [rax]
mov ecx, dword [0x141f42768]
and ecx, dword [0x141f4276c]
add ecx, 0x3b3adc78
imul rcx, rax
shr rcx, 0x3e
or ecx, 0x2734c3d4
cmp ecx, 0x6393352f
ja 0x1400c2b50
mov eax, dword [0x141f42770]
xor edx, edx
div dword [0x141f42774]
nop word cs:[rax + rax]
mov eax, dword [0x141f42778]
imul eax, dword [0x141f4277c]
imul rcx, rax, 0x3b08068f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0x36f0af57
and eax, 0x22500e01
cmp eax, 0x68862fb7
ja 0x1400c2b90
test r13d, r13d
je 0x1400c2cac
movzx eax, byte [0x141f49078]
xor ecx, ecx
mov rdx, rsi
call fcn.1400c6170
mov rdi, rax
nop
mov eax, dword [0x141f42780]
and eax, dword [0x141f42784]
and eax, 0x6111cef4
imul eax, eax, 0xecbf503
cmp eax, 0x915dca44
je 0x1400c2be0
nop
mov eax, dword [0x141f42788]
imul eax, dword [0x141f4278c]
imul rax, rax, 0x35e1764d
shr rax, 0x3c
or eax, 0x84c3f992
imul rax, rax, 0x2adf9a59
shr rax, 0x3b
cmp eax, 0x252685fc
je 0x1400c2c00
test rdi, rdi
jne 0x1400c2cb1
mov eax, dword [0x141f42790]
imul eax, dword [0x141f42794]
imul eax, eax, 0xdfb0b518
add eax, 0x59624953
or eax, 0x11c520af
cmp eax, 0x9856ea6e
jne 0x1400c2c5a
ud2
mov eax, dword [0x141f42798]
and eax, dword [0x141f4279c]
imul eax, eax, 0x8a314a39
and eax, 0xa70af956
add eax, 0x28b97903
ud2
mov edi, 2
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], rbx
lea rcx, [rsp + 0x70]
call fcn.1400e09f0
mov rsi, qword [rsp + 0x78]
mov word [rsi + rbx*2], 0
inc rbx
mov rdi, qword [rsp + 0x70]
test r12, r12
je 0x1400c297d
mov rcx, qword [0x141f49060]
xor edx, edx
mov r8, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x30], rax
jmp 0x1400c297d
ud2
mov eax, dword [0x141f426f8]
xor eax, dword [0x141f426fc]
add eax, 0x2c79f753
mov ecx, 0xe43ea1bb
imul rcx, rax
shr rcx, 0x3b
imul eax, ecx, 0x793f3d72
cmp eax, 0x13f47e06
jne 0x1400c2f78
jmp 0x1400c2f97
mov eax, dword [0x141f42728]
xor edx, edx
div dword [0x141f4272c]
add eax, 0x2c861c60
imul rax, rax, 0x8c45773
shr rax, 0x3a
xor eax, 0x2c3b415b
cmp eax, 0x7ae994a9
jbe 0x1400c2db0
ud2
mov eax, dword [0x141f42730]
add eax, dword [0x141f42734]
and eax, 0x824062
ud2
mov eax, dword [0x141f42688]
mov ecx, dword [0x141f4268c]
add eax, ecx
add eax, 0x2930f5de
or eax, 0x6ccc9fbd
mov rcx, qword [0x141f49060]
cmp eax, 0x35b7620d
jae 0x1400c2e21
mov rax, qword [0x141f49060]
jmp 0x1400c2df2
xor edx, edx
mov r8, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141f42690]
sub eax, dword [0x141f42694]
cmp eax, 0xe1275027
je 0x1400c2e30
mov eax, dword [0x141f42698]
xor edx, edx
div dword [0x141f4269c]
mov rdx, qword [rsp + 0x50]
nop word cs:[rax + rax]
mov eax, dword [0x141f426a0]
sub eax, dword [0x141f426a4]
imul eax, eax, 0x7b09981
add eax, 0x42353fdb
and eax, 0xd5328819
cmp eax, 0x7afa3105
ja 0x1400c2e60
mov rax, qword [rdx]
nop word cs:[rax + rax]
mov ecx, dword [0x141f426a8]
and ecx, dword [0x141f426ac]
or ecx, 0xd6992c93
imul ecx, ecx, 0xdd6beb23
add ecx, 0x8e84e4e1
cmp ecx, 0x65366a00
ja 0x1400c2e90
test rax, rax
je 0x1400c2f55
mov eax, dword [0x141f426b0]
sub eax, dword [0x141f426b4]
and eax, 0xbad889b4
imul eax, eax, 0x40edc76e
and eax, 0x95350768
cmp eax, 0xe6508cdc
ja 0x1400c2f0a
mov eax, dword [0x141f426b8]
xor eax, dword [0x141f426bc]
or eax, 0x402003
and eax, 0x502883
mov rsi, qword [rdx + 8]
mov rbx, qword [0x141f49060]
cmp eax, 0x7663de41
jbe 0x1400c2f13
mov rax, qword [0x141f49060]
jmp 0x1400c2ee2
xor eax, eax
test al, al
je 0x1400c2f27
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov ebp, dword [0x141f426c0]
imul ebp, dword [0x141f426c4]
add ebp, 0xf7c28249
mov rcx, rbx
xor edx, edx
mov r8, rsi
call rdi
cmp ebp, 0x9714ea30
ja 0x1400c2f30
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400c2f60
add rsp, 0x488
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [str._E_M]
sub eax, dword [0x141f42704]
xor eax, 0x963236df
add eax, 0x71e48f05
ud2
ud2
ud2