Function at 0x1400c4270
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xe8
movaps xmmword [rsp + 0xd0], xmm6
mov r12d, edx
mov rsi, rcx
lea rdi, [rcx + 0x90]
mov rax, qword [rcx + 0x90]
nop
mov ecx, dword [0x141dd8ad0]
imul ecx, dword [0x141dd8ad4]
xor ecx, 0x12208d00
or ecx, 0xe0d5326b
cmp ecx, 0x714232c3
jb 0x1400c42a0
test rax, rax
mov byte [rsp + 0x2f], r12b
jne 0x1400c47ff
mov eax, dword [0x141dd8ad8]
and eax, dword [0x141dd8adc]
add eax, 0xb60df7e0
and eax, 0x2377ee89
imul eax, eax, 0xfc2442b7
cmp eax, 0xebaa9b65
jbe 0x1400c430a
mov qword [rsp + 0x60], 0
lea r8, [rsp + 0x60]
xor ecx, ecx
xor edx, edx
call qword [sym.imp.pdh.dll_PdhOpenQueryA]
lea r14, [rsp + 0x60]
mov rbx, qword [sym.imp.pdh.dll_PdhOpenQueryA]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8ae0]
sub eax, dword [0x141dd8ae4]
and eax, 0x5c182559
imul eax, eax, 0x7ec6945a
imul r15, rax, 0x4268f1c9
shr r15, 0x3d
mov qword [rsp + 0x60], 0
xor ecx, ecx
xor edx, edx
mov r8, r14
call rbx
cmp r15d, 0x7031f296
ja 0x1400c4320
mov ebp, eax
nop
mov eax, dword [0x141dd8ae8]
and eax, dword [0x141dd8aec]
add eax, 0x70688102
or eax, 0xee7ff1cf
cmp eax, 0xe7daa6bb
je 0x1400c4360
test ebp, ebp
je 0x1400c4388
xor edx, edx
jmp 0x1400c4569
mov r14, qword [rsp + 0x60]
xor eax, eax
nop
test al, al
jne 0x1400c4390
mov eax, dword [0x141dde6fc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x70]
nop
mov ecx, dword [0x141dd8af0]
sub ecx, dword [0x141dd8af4]
xor ecx, 0x2c1b2eb4
add ecx, 0xb7e6b649
and ecx, 0xabf720e3
cmp ecx, 0xb4bf8394
je 0x1400c43b0
test al, 1
je 0x1400c4430
mov eax, dword [0x141dde6fc]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rax*8]
mov rax, qword [rcx + 0x78]
mov rcx, qword [rcx + 0x80]
nop dword [rax + rax]
mov edx, dword [0x141dd8b08]
xor edx, dword [0x141dd8b0c]
xor edx, 0x9000360
or edx, 0xb64df091
xor edx, 0xa40f42d0
cmp edx, 0x7d06c95c
ja 0x1400c4400
jmp 0x1400c44d5
mov eax, dword [0x141dd8af8]
xor edx, edx
div dword [0x141dd8afc]
imul eax, eax, 0xcb7c0777
add eax, 0x6ccb9d80
xor eax, 0xa54043c5
cmp eax, 0x79784a2f
jb 0x1400c4430
mov eax, dword [0x141dd8b00]
sub eax, dword [0x141dd8b04]
or eax, 0x15510040
and eax, 0x155101f0
cmp eax, 0x9287ab6b
ja 0x1400c4490
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
xor eax, eax
test al, al
je 0x1400c44aa
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
jmp 0x1400c4472
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov edx, dword [0x141dde6fc]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov byte [rdx + 0x70], 1
mov qword [rdx + 0x80], rcx
mov edx, dword [0x141dd8b10]
sub edx, dword [0x141dd8b14]
add edx, 0x9ff9f53
and edx, 0x47cb98ed
add edx, 0xd50d8d3b
cmp edx, 0xf3bf9bb7
ja 0x1400c4541
mov edx, dword [0x141dd8b18]
imul edx, dword [0x141dd8b1c]
imul edx, edx, 0x61f28db7
add edx, 0x8e34b95d
and edx, 0xf70864e6
mov r8d, dword [0x141dde6fc]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
lea r9, [rax + 1]
mov qword [r8 + 0x78], r9
cmp edx, 0xd3e34ce3
jbe 0x1400c4562
lea rdx, [rax + 1]
mov r8d, dword [0x141dde6fc]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x78], rdx
jmp 0x1400c44fb
lea rdx, [0x141dbbd00]
mov r8d, dword [0x141dd8b20]
xor r8d, dword [0x141dd8b24]
add r8d, 0x71bb5d37
imul r8, r8, 0x70aa2a85
shr r8, 0x3e
cmp r8d, 0xb4137503
ja 0x1400c45f3
mov r8d, dword [0x141dd8b28]
or r8d, dword [0x141dd8b2c]
imul r8d, r8d, 0x27e9c70b
add r8d, 0xb609820d
mov qword [rsi + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [rsi + 0x98], xmm0
mov qword [rsi + 0xa8], 0
mov qword [rsi + 0xb0], rax
mov qword [rsi + 0xb8], rcx
mov qword [rsi + 0xc0], r14
mov qword [rsi + 0xc8], 0
cmp r8d, 0x25594166
jae 0x1400c4634
mov qword [rsi + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [rsi + 0x98], xmm0
mov qword [rsi + 0xa8], 0
mov qword [rsi + 0xb0], rax
mov qword [rsi + 0xb8], rcx
mov qword [rsi + 0xc0], r14
mov qword [rsi + 0xc8], 0
jmp 0x1400c4592
test ebp, ebp
jne 0x1400c47be
mov eax, dword [0x141dd8b38]
mov ecx, dword [0x141dd8b3c]
add eax, ecx
add eax, 0x23c2a337
xor eax, 0x450b5009
or eax, 0x1af0a376
cmp eax, 0xca0cf75b
jbe 0x1400c4680
movzx eax, byte [0x141dde6f8]
mov edx, 0x1e
xor ecx, ecx
call fcn.1400c29b0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8b40]
imul eax, dword [0x141dd8b44]
xor eax, 0x10b482f
imul ebx, eax, 0x4155b2d7
add ebx, 0x2a903bcf
movzx eax, byte [0x141dde6f8]
mov edx, 0x1e
xor ecx, ecx
call fcn.1400c29b0
cmp ebx, 0x722d746e
ja 0x1400c4680
test rax, rax
je 0x1400c4796
mov ecx, dword [0x141dd8b50]
add ecx, dword [0x141dd8b54]
imul ecx, ecx, 0xb52ad797
add ecx, 0x31d71484
shr ecx, 1
imul rcx, rcx, 0x2074e827
shr rcx, 0x3b
cmp ecx, 0x4072c6df
jbe 0x1400c4704
movups xmm0, xmmword [0x141dbbe2e]
movups xmmword [rax + 0xe], xmm0
movups xmm0, xmmword [0x141dbbe20]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x141dbbe2e]
movups xmm1, xmmword [0x141dbbe20]
movzx ebx, byte [rsp + 0x2f]
nop word [rax + rax]
mov ecx, dword [0x141dd8b58]
or ecx, dword [0x141dd8b5c]
imul ecx, ecx, 0xaa3dcc05
add ecx, 0x7d37c652
and ecx, 0x386c2289
movups xmmword [rax + 0xe], xmm0
movups xmmword [rax], xmm1
cmp ecx, 0xc7918eef
je 0x1400c4720
mov qword [rsp + 0x60], 0x1e
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 0x1e
movzx eax, byte [0x141dde6f8]
mov eax, dword [0x141dd8b60]
xor eax, dword [0x141dd8b64]
add eax, 0xef33c5ea
xor eax, 0x80080200
or eax, 0x1747759f
cmp eax, 0x59f9e467
jae 0x1400c49f0
jmp 0x1400c4a26
ud2
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8b30]
sub ecx, dword [0x141dd8b34]
or ecx, 0x45a978c1
add ecx, 0x921ad881
cmp ecx, 0x63310a9b
jb 0x1400c47d0
test rax, rax
movzx r12d, byte [rsp + 0x2f]
je 0x1400c4c7f
mov eax, dword [0x141dd8b90]
xor edx, edx
div dword [0x141dd8b94]
nop dword [rax]
mov eax, dword [0x141dd8b98]
xor eax, dword [0x141dd8b9c]
imul rax, rax, 0x581e8dd7
shr rax, 0x3e
imul eax, eax, 0xaef62fd2
cmp eax, 0xeab2f9ce
ja 0x1400c4810
mov eax, dword [0x141dd8ba0]
xor edx, edx
div dword [0x141dd8ba4]
imul rax, rax, 0x2d68b4ef
shr rax, 0x3d
cmp eax, 0x1a6ea98d
jne 0x1400c4861
mov rcx, qword [rsi + 0xc0]
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
movabs r15, 0x8000000000000000
mov rbx, qword [sym.imp.pdh.dll_PdhCollectQueryData]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8ba8]
imul eax, dword [0x141dd8bac]
imul ebp, eax, 0x854c941b
add ebp, 0xcbc3748b
and ebp, 0xa1b8ef63
mov rcx, qword [rsi + 0xc0]
call rbx
cmp ebp, 0xdb1f69c
jb 0x1400c4880
mov rax, qword [rsi + 0x18]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400c48c0
cmp rax, r15
je 0x1400c4d2d
mov r14, qword [rsi + 0x20]
mov eax, dword [0x141dd8bb8]
sub eax, dword [0x141dd8bbc]
add eax, 0xcc84ac64
xor eax, 0xe0da63b4
add eax, 0x198aca8f
cmp eax, 0xeaded6a1
jbe 0x1400c4910
mov r8, qword [rsi + 0x28]
mov rcx, rdi
mov rdx, r14
call fcn.1400dcbc0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8bc0]
xor edx, edx
div dword [0x141dd8bc4]
mov r15d, eax
add r15d, 0x28a2698f
imul rax, r15, 0x45e5c1c7
shr rax, 0x20
sub r15d, eax
shr r15d, 1
add r15d, eax
shr r15d, 0x1e
mov r8, qword [rsi + 0x28]
mov rcx, rdi
mov rdx, r14
call fcn.1400dcbc0
cmp r15d, 0xaaf04141
je 0x1400c4910
test eax, eax
je 0x1400c49c6
mov eax, dword [0x141dd8bd0]
xor edx, edx
div dword [0x141dd8bd4]
movss xmm1, dword [0x140104db0]
subss xmm1, xmm0
movabs r15, 0x8000000000000000
mov eax, dword [0x141dd8bd8]
or eax, dword [0x141dd8bdc]
cmp eax, 0x3cd1f35c
je 0x1400c4980
mov eax, dword [0x141dd8be0]
imul eax, dword [0x141dd8be4]
imul rax, rax, 0x6f8f5c1d
shr rax, 0x3e
imul eax, eax, 0x867dce1b
and eax, 0xb8d8931a
cmp eax, 0xa1bc361d
jbe 0x1400c4cd6
jmp 0x1400c4cfe
ud2
mov eax, dword [0x141dd8b68]
xor edx, edx
div dword [0x141dd8b6c]
mov ebp, eax
add ebp, 0xe2c818d6
or ebp, 0xf3080402
and ebp, 0xf39e4c22
mov edx, 5
xor ecx, ecx
call fcn.1400c29b0
cmp ebp, 0x6b1fb02c
jne 0x1400c4a34
mov edx, 5
xor ecx, ecx
call fcn.1400c29b0
jmp 0x1400c49f0
mov r15, rax
test rax, rax
je 0x1400c4a64
lea r12, [rsi + 0x18]
mov eax, dword [0x141dd8b80]
xor edx, edx
div dword [0x141dd8b84]
xor eax, 0x3060040
or eax, 0xbcd97c3f
cmp eax, 0x39c57b5f
jae 0x1400c4aa9
jmp 0x1400c4af4
mov eax, dword [0x141dd8b70]
imul eax, dword [0x141dd8b74]
and eax, 0x4dc5d93a
cmp eax, 0x84824afe
jne 0x1400c4a7f
ud2
mov eax, dword [0x141dd8b78]
imul eax, dword [0x141dd8b7c]
add eax, 0x1df3fcf2
xor eax, 0x52800408
or eax, 0xd3b0117
ud2
mov byte [r15 + 4], 0x30
mov dword [r15], 0x5f746f74
mov qword [rsp + 0x30], 5
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], 5
lea r13, [rsp + 0x60]
lea r9, [rsp + 0x30]
mov rcx, r13
mov rdx, rdi
mov r8, r12
call fcn.1400db160
mov rcx, rsi
mov edx, ebx
call fcn.1400c7a10
xor eax, eax
test al, al
je 0x1400c4b3b
mov byte [r15 + 4], 0x30
mov dword [r15], 0x5f746f74
mov qword [rsp + 0x30], 5
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], 5
lea rcx, [rsp + 0x60]
lea r9, [rsp + 0x30]
mov rdx, rdi
mov r8, r12
call fcn.1400db160
mov rcx, rsi
mov edx, ebx
call fcn.1400c7a10
jmp 0x1400c4aa9
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1400c47be
mov r15, qword [rsi + 8]
xor ecx, ecx
nop
test cl, cl
jne 0x1400c4b50
mov ecx, 0xa539ba97
nop dword [rax]
mov edx, dword [0x141dd8b88]
and edx, dword [0x141dd8b8c]
imul rdx, rcx
shr rdx, 0x3f
or edx, 0xeae9da22
imul rdx, rdx, 0x331d3feb
shr rdx, 0x3d
cmp edx, 0xaa34fe26
ja 0x1400c4b60
add r15, 0x48
imul rbx, rax, 0x70
xor r12d, r12d
nop dword [rax + rax]
mov qword [rsp + 0x88], r12
inc r12
lea rax, [rsp + 0x88]
mov qword [rsp + 0x60], rax
lea rbp, [0x140055540]
mov qword [rsp + 0x68], rbp
lea rax, [0x141dbbe58]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 2
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], 1
lea rcx, [rsp + 0xa0]
lea r14, [rsp + 0x30]
mov rdx, r14
call fcn.140039290
lea rax, [rsp + 0x88]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbp
lea rax, [0x141dbbe80]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 2
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], 1
lea rbp, [rsp + 0xb8]
mov rcx, rbp
mov rdx, r14
call fcn.140039290
lea rcx, [rsp + 0xa0]
mov rdx, rdi
mov r8, r15
mov r9, rbp
call fcn.1400db160
add r15, 0x70
add rbx, 0xffffffffffffff90
jne 0x1400c4ba0
jmp 0x1400c47be
mov eax, 0xcbfd9df3
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8bb0]
xor ecx, dword [0x141dd8bb4]
or ecx, 0xe658023e
shr ecx, 1
imul rcx, rax
shr rcx, 0x37
xor ecx, 0xf5b42166
cmp ecx, 0xdfcb3d73
jb 0x1400c4c90
movaps xmm6, xmmword [rsp + 0xd0]
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [0x141dd8be8]
or eax, dword [0x141dd8bec]
and eax, 0xb4867c9
imul eax, eax, 0x6c604fb3
add eax, 0xd99e1cb3
movss dword [rsi + 0x30], xmm1
cmp eax, 0x13eca565
jae 0x1400c4d10
movss dword [rsi + 0x30], xmm1
jmp 0x1400c4cd6
mov eax, dword [0x141dd8bf0]
and eax, dword [0x141dd8bf4]
and eax, 0x87801
xor eax, 0xa8080
cmp eax, 0xa32d1461
ja 0x1400c4d10
mov eax, dword [0x141dd8bf8]
add eax, dword [0x141dd8bfc]
or eax, 0x39968233
xor eax, 0xf2b87c7f
cmp eax, 0xad423f6a
jbe 0x1400c4d60
mov rcx, rsi
mov edx, r12d
call fcn.1400c7a10
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c00]
xor edx, edx
div dword [0x141dd8c04]
imul ebx, eax, 0x607b053a
add ebx, 0x61f2c6ba
xor ebx, 0x97c3e34e
mov rcx, rsi
mov edx, r12d
call fcn.1400c7a10
cmp ebx, 0x3b8dbdf6
jb 0x1400c4d60
mov rax, qword [rsi + 8]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsi + 0x10]
imul rax, rcx, 0x70
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x90], rcx
test rcx, rcx
je 0x1400c4fb0
mov rbp, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
lea rcx, [rax + rbp]
xor r13d, r13d
mov r14d, 0x931811b7
mov ebx, 0xbea8193b
movss xmm6, dword [0x140104db0]
mov qword [rsp + 0x98], rcx
nop dword [rax]
cmp qword [rbp + 0x48], r15
je 0x1400c4f50
mov eax, dword [0x141dd8c60]
imul eax, dword [0x141dd8c64]
add eax, 0x91c46b40
or eax, 0xc3c3e06e
xor eax, 0x50ad517a
cmp eax, 0x7b48d9af
jb 0x1400c4dfa
mov r15, qword [rbp + 0x50]
mov r12, qword [rbp + 0x58]
mov eax, dword [0x141dd8c68]
imul eax, dword [0x141dd8c6c]
imul eax, eax, 0x527c71e6
or eax, 0x54040290
and eax, 0x74eeb2b8
cmp eax, 0xdaf246bc
jbe 0x1400c4e60
mov rcx, rdi
mov rdx, r15
mov r8, r12
call fcn.1400dcbc0
nop word [rax + rax]
mov rcx, rdi
mov rdx, r15
mov r8, r12
call fcn.1400dcbc0
test r13b, r13b
jne 0x1400c4e60
test eax, eax
je 0x1400c515b
movabs r15, 0x8000000000000000
mov rcx, qword [rsp + 0x98]
nop dword [rax]
mov eax, dword [0x141dd8c78]
add eax, dword [0x141dd8c7c]
imul rax, r14
shr rax, 0x3e
imul eax, eax, 0xdf913fe5
shr eax, 1
imul rax, rbx
shr rax, 0x39
cmp eax, 0x5521fa7d
ja 0x1400c4e90
nop dword [rax + rax]
mov eax, dword [0x141dd8c80]
imul eax, dword [0x141dd8c84]
add eax, 0xfd779751
or eax, 0x4b7e79eb
imul rax, rax, 0x29d0ea57
shr rax, 0x3b
cmp eax, 0x8d26999f
ja 0x1400c4ec0
movaps xmm1, xmm6
subss xmm1, xmm0
mov eax, dword [0x141dd8c88]
and eax, dword [0x141dd8c8c]
xor eax, 0xb0007592
imul rax, rax, 0x2641e51b
shr rax, 0x3d
xor eax, 0x7517b957
cmp eax, 0x5ff1a339
jb 0x1400c4f42
nop dword [rax + rax]
mov eax, dword [0x141dd8c90]
sub eax, dword [0x141dd8c94]
add eax, 0x9792fca5
or eax, 0xd9f1fb89
movss dword [rbp + 0x60], xmm1
cmp eax, 0x16a2c1e0
jne 0x1400c4f50
movss dword [rbp + 0x60], xmm1
jmp 0x1400c4f20
add rbp, 0x70
mov eax, dword [0x141dd8c98]
xor edx, edx
div dword [0x141dd8c9c]
xor eax, 0x4afd1448
imul eax, eax, 0x4e4bdce3
cmp eax, 0xadb17ac7
je 0x1400c4f54
nop word cs:[rax + rax]
mov eax, dword [0x141dd8ca0]
imul eax, dword [0x141dd8ca4]
add eax, 0x9b3f48af
and eax, 0x86ab1e0a
add eax, 0xf505d261
cmp eax, 0x30085b0
jb 0x1400c4f80
cmp rbp, rcx
jne 0x1400c4df0
nop dword [rax]
mov eax, dword [0x141dd8c08]
and eax, dword [0x141dd8c0c]
xor eax, 0x1b0500c6
and eax, 0x5f8700ce
imul eax, eax, 0x4577a2cc
cmp eax, 0xadbdfd9c
ja 0x1400c4fb0
cmp byte [rsp + 0x2f], 0
mov rdi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
je 0x1400c4c7f
cmp byte [rsi + 0x38], 0
jne 0x1400c4c7f
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c10]
mov ecx, dword [0x141dd8c14]
add eax, ecx
add eax, 0xe587ab74
xor eax, 0xa57816bc
cmp eax, 0xb1ca2bf0
ja 0x1400c5000
lea rcx, [rsp + 0x30]
mov r14, qword [rsp + 0x90]
mov rdx, r14
call fcn.1400da5b0
mov rcx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
nop word cs:[rax + rax]
test r14, r14
sete r10b
mov eax, dword [0x141dd8c18]
xor edx, edx
div dword [0x141dd8c1c]
add eax, 0x6321210d
imul rdx, rax, 0x47e074f3
shr rdx, 0x3e
test r9, r9
sete al
cmp edx, 0x9350ee72
je 0x1400c5050
or r10b, al
jne 0x1400c50be
lea rax, [r9*8 - 8]
add rbx, 0xffffffffffffff90
xor edx, edx
xor r9d, r9d
nop dword [rax]
mov r10, qword [r8 + r9]
mov qword [rdi + rdx + 0x68], r10
cmp rbx, rdx
je 0x1400c50be
lea r10, [r9 + 8]
add rdx, 0x70
cmp rax, r9
mov r9, r10
jne 0x1400c50a0
mov eax, dword [0x141dd8c20]
xor edx, edx
div dword [0x141dd8c24]
nop dword [rax]
mov eax, dword [0x141dd8c28]
imul eax, dword [0x141dd8c2c]
add eax, 0xd3a57af1
xor eax, 0x40094912
or eax, 0xb4e4b6ec
cmp eax, 0xf5040e37
je 0x1400c50d0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8c30]
imul eax, dword [str.l_]
add eax, 0xc06bf30a
and eax, 0x77f627dd
imul eax, eax, 0xdd480298
cmp eax, 0xec4eb6fe
je 0x1400c5100
test rcx, rcx
je 0x1400c51c9
mov eax, dword [0x141dd8c38]
or eax, dword [0x141dd8c3c]
imul eax, eax, 0x92698fa9
add eax, 0x53b5b8bd
mov ecx, 0xc53b0725
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xd47a0770
jne 0x1400c519e
jmp 0x1400c51b8
ud2
mov eax, dword [0x141dd8c40]
sub eax, dword [str.J5s_]
mov rcx, qword [0x141dde6e0]
cmp eax, 0x4c3f2413
jne 0x1400c51c1
mov rax, qword [0x141dde6e0]
jmp 0x1400c519e
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd8c48]
add eax, dword [0x141dd8c4c]
xor eax, 0x370a0b68
imul rcx, rax, 0x2eafad47
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x5bfd9a3e
cmp eax, 0x3fcb888
jne 0x1400c5200
mov byte [rsi + 0x38], 1
nop
mov eax, dword [0x141dd8c50]
add eax, dword [0x141dd8c54]
or eax, 0xddccb810
imul eax, eax, 0xc2166ffa
and eax, 0xaee8070e
mov byte [rsi + 0x38], 1
cmp eax, 0x1306560d
jb 0x1400c5200
nop word [rax + rax]
mov eax, dword [0x141dd8c58]
or eax, dword [0x141dd8c5c]
imul rcx, rax, 0x13e090ed
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0x862bc48d
cmp eax, 0x26767882
jbe 0x1400c5230
jmp 0x1400c4c7f