Function at 0x1400c78a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x11], dl
mov qword [rbp - 0x28], rcx
mov eax, dword [0x141f43158]
xor eax, dword [0x141f4315c]
xor eax, 0x185d050e
imul eax, eax, 0xde15cad5
and eax, 0x5aaf24c0
cmp eax, 0x93045e51
jbe 0x1400c7960
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
nop dword [rax + rax]
mov eax, dword [0x141f43160]
sub eax, dword [0x141f43164]
add eax, 0x81c6cdb2
and eax, 0xa5851bc6
imul ecx, eax, 0xbb522238
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rsi, rsp
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r8, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r12, rsp
mov eax, 0x30
call fcn.1400f4d10
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rbx, rsp
cmp ecx, 0x83303c70
ja 0x1400c7960
mov eax, dword [0x141f43168]
and eax, dword [0x141f4316c]
imul eax, eax, 0xbdcad5af
add eax, 0x5808c71d
cmp eax, 0xd4786322
ja 0x1400c7a66
mov ecx, dword [0x141f43170]
xor ecx, dword [0x141f43174]
add ecx, 0xf4438db
and ecx, 0xc3f69339
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r9, rsp
cmp ecx, 0x95608221
jbe 0x1400c7a75
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
jmp 0x1400c7a36
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r11, rsp
mov rax, qword [rbp - 0x28]
lea rcx, [rax + 0x90]
mov qword [rbp - 0x38], rcx
cmp qword [rax + 0x90], 0
mov qword [rbp - 0x48], rdx
jne 0x1400c7c10
mov qword [rbp - 0x30], r11
mov qword [rbp - 0x20], r10
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x58], r8
nop word cs:[rax + rax]
mov eax, dword [0x141f43178]
and eax, dword [0x141f4317c]
xor eax, 0x6d200d9c
imul eax, eax, 0xbbd69ee8
cmp eax, 0xd9353daf
je 0x1400c7ad0
mov qword [rdi], 0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8, rdi
call qword [sym.imp.pdh.dll_PdhOpenQueryA]
xor r9d, r9d
add rsp, 0x20
mov r10d, eax
test r10d, r10d
je 0x1400c7d83
xor edx, edx
test dl, dl
mov r8, qword [rbp - 0x28]
je 0x1400c7b60
mov qword [r8 + 0x90], r9
xorps xmm0, xmm0
movups xmmword [r8 + 0x98], xmm0
mov qword [r8 + 0xa8], 0
mov qword [r8 + 0xb0], rax
mov qword [r8 + 0xb8], rcx
mov qword [r8 + 0xc0], r11
mov qword [r8 + 0xc8], 0
xorps xmm0, xmm0
xor edx, edx
nop word cs:[rax + rax]
mov qword [r8 + 0x90], r9
movups xmmword [r8 + 0x98], xmm0
mov qword [r8 + 0xa8], 0
mov qword [r8 + 0xb0], rax
mov qword [r8 + 0xb8], rcx
mov qword [r8 + 0xc0], r11
mov qword [r8 + 0xc8], 0
test dl, dl
jne 0x1400c7b70
test r10d, r10d
je 0x1400c7e37
mov rax, qword [rbp - 0x38]
mov rcx, qword [rax]
mov eax, dword [0x141f43198]
xor edx, edx
div dword [0x141f4319c]
nop dword [rax]
mov eax, dword [0x141f431a0]
or eax, dword [0x141f431a4]
imul rax, rax, 0x501b7e2f
shr rax, 0x3e
imul eax, eax, 0xd905d67e
or eax, 0x88356c8a
cmp eax, 0x4585dc3a
jb 0x1400c7bd0
test rcx, rcx
je 0x1400c89ee
nop word cs:[rax + rax]
mov eax, dword [0x141f43218]
or eax, dword [0x141f4321c]
imul eax, eax, 0x14732f46
add eax, 0x45c3cbf9
imul rax, rax, 0x1b30d7e9
shr rax, 0x3c
cmp eax, 0xe3350691
ja 0x1400c7c10
mov rbx, qword [rbp - 0x28]
mov rcx, qword [rbx + 0xc0]
sub rsp, 0x20
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
add rsp, 0x20
movabs rsi, 0x8000000000000000
movzx r14d, byte [rbp - 0x11]
mov r15, qword [rbp - 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141f43220]
xor edx, edx
div dword [0x141f43224]
cmp eax, 0x3edb7e72
je 0x1400c7c70
cmp qword [rbx + 0x18], rsi
je 0x1400c843f
mov eax, dword [0x141f43228]
add eax, dword [0x141f4322c]
imul eax, eax, 0x3e585d1f
add eax, 0x4f7bc6d7
xor eax, 0x4f6049bc
cmp eax, 0xd788b8c9
jbe 0x1400c7cd0
mov rdx, qword [rbx + 0x20]
mov r8, qword [rbx + 0x28]
sub rsp, 0x20
mov rcx, r15
call fcn.1400e0700
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141f43230]
and eax, dword [0x141f43234]
imul edi, eax, 0xdeeb0877
add edi, 0x753332cc
or edi, 0x10b1de49
mov rdx, qword [rbx + 0x20]
mov r8, qword [rbx + 0x28]
sub rsp, 0x20
mov rcx, r15
call fcn.1400e0700
add rsp, 0x20
cmp edi, 0x308eac37
je 0x1400c7cd0
xor ecx, ecx
test cl, cl
jne 0x1400c7d10
nop word cs:[rax + rax]
mov ecx, dword [0x141f43238]
imul ecx, dword [0x141f4323c]
add ecx, 0xa46bb151
xor ecx, 0x81520a0a
or ecx, 0x7aad7171
cmp ecx, 0xae6cab0
je 0x1400c7d20
test eax, eax
je 0x1400c7f10
movss xmm1, dword [0x140108db0]
mov eax, dword [0x141f43250]
imul eax, dword [0x141f43254]
subss xmm1, xmm0
xor eax, 0x5421915f
imul eax, eax, 0x75019786
cmp eax, 0x52a4ff5b
jne 0x1400c83ea
jmp 0x1400c840c
mov r11, qword [rdi]
mov ecx, 0x8ff872e3
nop dword [rax + rax]
mov eax, dword [0x141f43180]
xor edx, edx
div dword [0x141f43184]
add eax, 0xd6799589
imul rax, rcx
shr rax, 0x3b
xor eax, 0xb1d3e34a
cmp eax, 0xf628e480
ja 0x1400c7d90
mov eax, dword [0x141f4907c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
test byte [rax + 0x70], 1
je 0x1400c7e62
nop word [rax + rax]
mov eax, dword [0x141f43190]
or eax, dword [0x141f43194]
xor eax, 0x97ca61bc
imul eax, eax, 0x90a09260
cmp eax, 0xb064b999
je 0x1400c7de0
mov eax, dword [0x141f4907c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x78]
mov ecx, dword [0x141f4907c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov rcx, qword [rcx + 0x80]
jmp 0x1400c7ed7
mov eax, dword [0x141f431a8]
and eax, dword [0x141f431ac]
add eax, 0x700670e7
or eax, 0xeacde143
and eax, 0xeffff75f
cmp eax, 0xa922ba7c
jne 0x1400c7f5d
jmp 0x1400c7f6a
mov qword [rbp - 0x40], r11
mov edi, r10d
xorps xmm0, xmm0
movups xmmword [r14], xmm0
sub rsp, 0x20
mov edx, 0x10
mov rcx, r14
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
mov edx, dword [0x141f4907c]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov byte [rdx + 0x70], 1
mov qword [rdx + 0x80], rcx
nop
mov edx, dword [0x141f43188]
and edx, dword [0x141f4318c]
imul edx, edx, 0xf9ac594
add edx, 0x2b46a70
cmp edx, 0x3fcca9fc
jbe 0x1400c7eb0
mov r10d, edi
mov r11, qword [rbp - 0x40]
lea rdx, [rax + 1]
mov r8d, dword [0x141f4907c]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x78], rdx
lea r9, [0x141f25dd0]
xor edx, edx
test dl, dl
mov r8, qword [rbp - 0x28]
jne 0x1400c7b23
jmp 0x1400c7b60
mov eax, dword [0x141f43240]
xor eax, dword [0x141f43244]
xor eax, 0xc24c08cb
imul eax, eax, 0x203521f
or eax, 0x2b4a1f62
cmp eax, 0x98a621a4
ja 0x1400c7f3b
ud2
ud2
movzx eax, byte [0x141f49078]
xor eax, eax
test al, al
je 0x1400c7f73
movzx eax, byte [0x141f49078]
jmp 0x1400c7f5d
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1400c6170
add rsp, 0x20
test rax, rax
je 0x1400c8345
mov rcx, rax
movups xmm0, xmmword [0x141f25efe]
movups xmmword [rax + 0xe], xmm0
movups xmm0, xmmword [0x141f25ef0]
movups xmmword [rax], xmm0
mov r14, qword [rbp - 0x30]
mov qword [r14], 0x1e
mov eax, dword [0x141f431b8]
add eax, dword [0x141f431bc]
cmp eax, 0x6d52515f
mov rdi, qword [rbp - 0x28]
jne 0x1400c7fd0
mov qword [r14 + 8], rcx
nop
mov eax, dword [0x141f431c0]
xor edx, edx
div dword [0x141f431c4]
add eax, 0xdedc8cd9
and eax, 0x50515508
imul eax, eax, 0x1744f3f4
mov qword [r14 + 8], rcx
cmp eax, 0x59ef5ea5
je 0x1400c7fd0
mov qword [r14 + 0x10], 0x1e
movzx eax, byte [0x141f49078]
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c6170
add rsp, 0x20
test rax, rax
je 0x1400c8371
lea r8, [rdi + 0x18]
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov r9, qword [rbp - 0x20]
mov qword [r9], 5
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], 5
sub rsp, 0x20
mov rcx, r14
mov rdx, qword [rbp - 0x38]
call fcn.1400df160
mov rcx, rdi
movzx edx, byte [rbp - 0x11]
call fcn.1400cb050
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141f431e0]
and eax, dword [0x141f431e4]
and eax, 0x41035010
or eax, 0xaec2dea
imul rcx, rax, 0x2e2b2d3f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x81ac576f
ja 0x1400c8070
mov r8, qword [rdi + 8]
mov rcx, qword [rdi + 0x10]
nop dword [rax]
mov eax, dword [0x141f431e8]
xor edx, edx
div dword [0x141f431ec]
imul rax, rax, 0x3efe095
shr rax, 0x38
or eax, 0xeb973f89
add eax, 0x17179b54
cmp eax, 0xa7476936
ja 0x1400c80b0
test rcx, rcx
je 0x1400c7bb7
nop word cs:[rax + rax]
mov eax, dword [0x141f431f0]
add eax, dword [0x141f431f4]
or eax, 0xabffef6d
xor eax, 0x4cc2733d
cmp eax, 0x6bdafbd4
jb 0x1400c80f0
nop dword [rax]
mov eax, dword [0x141f431f8]
add eax, dword [0x141f431fc]
imul eax, eax, 0x476a6da6
add eax, 0x5ddfcfe7
cmp eax, 0x8109498b
ja 0x1400c8110
mov eax, dword [0x141f43200]
xor edx, edx
div dword [0x141f43204]
nop dword [rax]
mov eax, dword [0x141f43208]
and eax, dword [0x141f4320c]
or eax, 0xf6b9fffa
add eax, 0xd3a48671
cmp eax, 0x1f5f3ae2
jb 0x1400c8140
add r8, 0x48
imul rax, rcx, 0x70
lea rdx, [0x140057000]
lea r9, [0x141f25f28]
xor r10d, r10d
mov r14, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x50]
jmp 0x1400c819c
mov rcx, qword [rbp - 0x20]
add rcx, 0x70
inc r10
mov rax, qword [rbp - 0x40]
add rax, 0xffffffffffffff90
mov r8, rcx
je 0x1400c7bb7
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x40], rax
mov eax, dword [0x141f43210]
xor eax, dword [0x141f43214]
and eax, 0x60d9bd77
mov ecx, 0xc350675b
imul rax, rcx
shr rax, 0x38
and eax, 0xffffffde
cmp eax, 0x3a57d828
mov qword [rbp - 0x30], r10
je 0x1400c8295
nop word cs:[rax + rax]
mov qword [rdi], r10
mov qword [r12], rdi
mov qword [r12 + 8], rdx
mov qword [r13], r9
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], r12
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov rcx, rbx
mov rdx, r13
call fcn.14003b520
add rsp, 0x20
mov qword [rsi], rdi
lea rax, [0x140057000]
mov qword [rsi + 8], rax
lea rax, [0x141f25f50]
mov qword [r15], rax
mov qword [r15 + 8], 2
mov qword [r15 + 0x20], 0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 1
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
call fcn.14003b520
mov rcx, rbx
mov rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x20]
mov r9, r14
call fcn.1400df160
mov r10, qword [rbp - 0x30]
lea r9, [0x141f25f28]
lea rdx, [0x140057000]
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400c8180
mov qword [rdi], r10
mov qword [r12], rdi
mov qword [r12 + 8], rdx
mov qword [r13], r9
mov qword [r13 + 8], 2
mov qword [r13 + 0x20], 0
mov qword [r13 + 0x10], r12
mov qword [r13 + 0x18], 1
sub rsp, 0x20
mov rcx, rbx
mov rdx, r13
call fcn.14003b520
add rsp, 0x20
mov qword [rsi], rdi
lea rax, [0x140057000]
mov qword [rsi + 8], rax
lea rax, [0x141f25f50]
mov qword [r15], rax
mov qword [r15 + 8], 2
mov qword [r15 + 0x20], 0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 1
sub rsp, 0x20
mov rcx, r14
mov rdx, r15
call fcn.14003b520
mov rcx, rbx
mov rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x20]
mov r9, r14
call fcn.1400df160
mov r10, qword [rbp - 0x30]
lea r9, [0x141f25f28]
lea rdx, [0x140057000]
add rsp, 0x20
jmp 0x1400c81e0
ud2
mov eax, dword [0x141f431c8]
imul eax, dword [0x141f431cc]
mov ecx, 0x8f7e0751
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xadca787c
imul eax, ecx, 0x9e640e8e
cmp eax, 0x2e90fca4
jne 0x1400c83a2
jmp 0x1400c83c7
mov eax, dword [0x141f431d0]
imul eax, dword [0x141f431d4]
xor eax, 0xcacd4d9
add eax, 0xcc680ef0
or eax, 0xf5a4a41f
ud2
ud2
mov eax, dword [0x141f43258]
or eax, dword [0x141f4325c]
add eax, 0x1adc543e
xor eax, 0x26e07f43
movss dword [rbx + 0x30], xmm1
cmp eax, 0x8fdec393
jae 0x1400c8420
movss dword [rbx + 0x30], xmm1
jmp 0x1400c83ea
mov eax, dword [0x141f43260]
imul eax, dword [0x141f43264]
imul eax, eax, 0x9a031968
add eax, 0xf03d3858
cmp eax, 0xd9d1d1f1
ja 0x1400c8420
mov eax, dword [0x141f43268]
and eax, dword [0x141f4326c]
and eax, 0x169a6e03
imul eax, eax, 0x6dc04f06
imul rax, rax, 0x1b96b2bd
shr rax, 0x3c
cmp eax, 0x78067a13
je 0x1400c84a1
mov edi, dword [0x141f43270]
add edi, dword [0x141f43274]
or edi, 0x15167914
add edi, 0xc2c6a2e2
xor edi, 0x48a06adc
sub rsp, 0x20
mov rcx, rbx
mov edx, r14d
call fcn.1400cb050
add rsp, 0x20
cmp edi, 0xebf338d3
jbe 0x1400c84b6
sub rsp, 0x20
mov rcx, rbx
mov edx, r14d
call fcn.1400cb050
add rsp, 0x20
jmp 0x1400c8468
mov rdx, qword [rbx + 8]
nop word [rax + rax]
mov eax, dword [0x141f43278]
and eax, dword [0x141f4327c]
imul eax, eax, 0xe455fdb9
imul rax, rax, 0x7b260fe5
shr rax, 0x3d
add eax, 0x3d4a816b
cmp eax, 0xea8a1e4
jb 0x1400c84c0
mov r8, qword [rbx + 0x10]
mov ecx, 0xe8119463
imul rax, r8, 0x70
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x40], rax
lea r12, [rdx + rax]
nop word cs:[rax + rax]
mov eax, dword [0x141f43280]
xor edx, edx
div dword [0x141f43284]
or eax, 0x2bbe0523
add eax, 0xc90b285d
imul rax, rcx
shr rax, 0x3d
cmp eax, 0x6cc7b697
ja 0x1400c8510
mov qword [rbp - 0x30], r8
test r8, r8
je 0x1400c8688
xor r13d, r13d
movss xmm6, dword [0x140108db0]
mov r14, qword [rbp - 0x20]
mov r15, qword [rbp - 0x38]
nop word [rax + rax]
cmp qword [r14 + 0x48], rsi
je 0x1400c85d0
nop word cs:[rax + rax]
mov eax, dword [0x141f43300]
imul eax, dword [0x141f43304]
cmp eax, 0xa788639d
je 0x1400c8570
mov rdi, qword [r14 + 0x50]
mov eax, dword [0x141f43308]
and eax, dword [0x141f4330c]
or eax, 0xb5139af6
imul eax, eax, 0xa3de1724
add eax, 0x3c152158
cmp eax, 0xe9f04c3c
jbe 0x1400c8600
jmp 0x1400c863d
mov eax, dword [0x141f43320]
sub eax, dword [0x141f43324]
cmp eax, 0x47bebac9
je 0x1400c85b0
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [r14 + 0x60], xmm1
add r14, 0x70
mov eax, dword [0x141f43328]
xor edx, edx
div dword [0x141f4332c]
test r13b, r13b
jne 0x1400c85e2
cmp r14, r12
jne 0x1400c8560
jmp 0x1400c8688
mov eax, dword [0x141f43310]
sub eax, dword [0x141f43314]
imul ebx, eax, 0xdf0e57a9
add ebx, 0x65ba6af7
xor ebx, 0x60a6795f
mov r8, qword [r14 + 0x58]
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
call fcn.1400e0700
add rsp, 0x20
cmp ebx, 0xa7edf3ac
jbe 0x1400c8660
mov r8, qword [r14 + 0x58]
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
call fcn.1400e0700
add rsp, 0x20
jmp 0x1400c8600
test eax, eax
jne 0x1400c85b0
ud2
mov eax, 0x8873057f
nop dword [rax]
mov ecx, dword [0x141f43288]
mov edx, dword [0x141f4328c]
add ecx, edx
add ecx, 0xf15af632
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x3d004f28
cmp ecx, 0x33962ff0
jb 0x1400c8690
cmp byte [rbp - 0x11], 0
mov r15, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x30]
je 0x1400c89ee
mov eax, 0xad9aa6b9
mov r8, qword [rbp - 0x28]
nop word cs:[rax + rax]
mov ecx, dword [0x141f43290]
or ecx, dword [0x141f43294]
xor ecx, 0x527f891a
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x5ff156dc
je 0x1400c86e0
mov eax, 0x8f37949d
nop word [rax + rax]
mov ecx, dword [0x141f43298]
imul ecx, dword [0x141f4329c]
add ecx, 0x8447b8ab
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x8f6fc09a
cmp ecx, 0x73dffa2b
ja 0x1400c8710
cmp byte [r8 + 0x38], 0
mov rcx, qword [rbp - 0x48]
jne 0x1400c89ee
test rdx, rdx
sete sil
sub rsp, 0x20
mov rdi, rcx
call fcn.1400de5a0
add rsp, 0x20
mov rcx, qword [rdi]
mov rbx, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
test rax, rax
sete dl
or dl, sil
nop word cs:[rax + rax]
mov r8d, dword [0x141f432a0]
sub r8d, dword [0x141f432a4]
or r8d, 0xce29638
imul r8d, r8d, 0x7f1c2d81
shr r8d, 2
imul r8, r8, 0x42dba0cd
shr r8, 0x3b
cmp r8d, 0xb4ef77b
je 0x1400c8780
test dl, dl
mov r14, qword [rbp - 0x28]
mov r10, qword [rbp - 0x40]
jne 0x1400c87fe
lea rax, [rax*8 - 8]
add r10, 0xffffffffffffff90
xor edx, edx
xor r8d, r8d
nop word cs:[rax + rax]
mov r9, qword [rbx + r8]
mov qword [r15 + rdx + 0x68], r9
cmp r10, rdx
je 0x1400c87fe
lea r9, [r8 + 8]
add rdx, 0x70
cmp rax, r8
mov r8, r9
jne 0x1400c87e0
mov eax, dword [0x141f432a8]
xor edx, edx
div dword [0x141f432ac]
mov eax, 0xc0dd3427
nop word cs:[rax + rax]
mov edx, dword [0x141f432b0]
add edx, dword [0x141f432b4]
imul rdx, rax
shr rdx, 0x3f
add edx, 0xe2442c15
or edx, 0x2a9a0c1c
cmp edx, 0x179920f6
je 0x1400c8820
test rcx, rcx
je 0x1400c8953
mov eax, dword [0x141f432b8]
and eax, dword [0x141f432bc]
add eax, 0x11c8a68a
imul rax, rax, 0x395ac5eb
shr rax, 0x3b
add eax, 0xace4169b
cmp eax, 0x6d6203fb
jb 0x1400c889d
mov eax, dword [0x141f432c0]
add eax, dword [0x141f432c4]
and eax, 0xb14e180e
xor eax, 0xf8ed38a7
mov rdi, qword [0x141f49060]
cmp eax, 0xb67d9a8d
jae 0x1400c88a6
mov rax, qword [0x141f49060]
jmp 0x1400c8879
mov eax, dword [0x141f432c8]
xor edx, edx
div dword [0x141f432cc]
imul rcx, rax, 0x58b5947
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0x39a49d97
or eax, 0x34c0bb3c
cmp eax, 0x7d1ba282
ja 0x1400c890e
mov eax, dword [str._lX]
xor eax, dword [0x141f432d4]
and eax, 0x55fffd02
imul esi, eax, 0x4f651bbc
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x93b92cb3
jne 0x1400c8930
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400c88d9
mov eax, dword [0x141f432d8]
imul eax, dword [0x141f432dc]
add eax, 0x7c0eedae
and eax, 0x22dbe9aa
xor eax, 0x4b23c1d3
cmp eax, 0x4028c4e5
jb 0x1400c8930
mov eax, dword [0x141f432e0]
sub eax, dword [0x141f432e4]
imul eax, eax, 0x350a4c92
cmp eax, 0x807d0e92
jne 0x1400c8980
mov byte [r14 + 0x38], 1
nop word cs:[rax + rax]
mov eax, dword [0x141f432e8]
or eax, dword [str.Y2ue]
or eax, 0xb48636ce
and eax, 0xf7867fcf
mov byte [r14 + 0x38], 1
cmp eax, 0x14bdab6c
je 0x1400c8980
nop word cs:[rax + rax]
mov eax, dword [0x141f432f0]
and eax, dword [0x141f432f4]
and eax, 0x10100000
cmp eax, 0x10e22296
ja 0x1400c89b0
nop dword [rax + rax]
mov eax, dword [0x141f432f8]
add eax, dword [0x141f432fc]
imul eax, eax, 0x57da02a7
xor eax, 0xe3691710
cmp eax, 0x8a1e4280
jb 0x1400c89d0
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret