Function at 0x1400c1a30
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
movaps xmmword [rbp], xmm6
mov ebx, edx
mov rdi, rcx
mov eax, dword [0x141dd5470]
sub eax, dword [0x141dd5474]
xor eax, 0x6b6cedba
add eax, 0xc33f83f7
xor eax, 0x44690d8c
cmp eax, 0x210cf5e0
jae 0x1400c1ab0
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
nop word [rax + rax]
mov eax, dword [0x141dd5478]
sub eax, dword [0x141dd547c]
imul eax, eax, 0x11f6a1ba
imul rcx, rax, 0x4c9a2a07
shr rcx, 0x3e
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov r13, rsp
cmp ecx, 0x7fd6c605
je 0x1400c1ab0
lea rax, [rdi + 0x90]
mov qword [rbp - 0x60], rax
cmp qword [rdi + 0x90], 0
mov qword [rbp - 0x58], rdi
mov byte [rbp - 1], bl
jne 0x1400c1f59
mov eax, dword [0x141dd5480]
or eax, dword [0x141dd5484]
imul rcx, rax, 0x34747e4d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul eax, eax, 0xda72249b
cmp eax, 0x1a833890
jne 0x1400c1b80
mov qword [rbp - 0x18], 0
sub rsp, 0x20
lea r8, [rbp - 0x18]
xor ecx, ecx
xor edx, edx
call qword [sym.imp.pdh.dll_PdhOpenQueryA]
add rsp, 0x20
lea r8, [rbp - 0x18]
mov rsi, qword [sym.imp.pdh.dll_PdhOpenQueryA]
nop dword [rax + rax]
mov edi, dword [0x141dd5488]
or edi, dword [0x141dd548c]
and edi, 0x750a2833
mov qword [rbp - 0x18], 0
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
call rsi
add rsp, 0x20
lea r8, [rbp - 0x18]
cmp edi, 0x8db2755c
je 0x1400c1b90
mov ebx, eax
test eax, eax
je 0x1400c1bd5
xor edx, edx
mov rdi, qword [rbp - 0x58]
jmp 0x1400c1e79
mov rsi, qword [rbp - 0x18]
mov eax, dword [0x141dd5490]
xor edx, edx
div dword [0x141dd5494]
mov rdi, qword [rbp - 0x58]
nop dword [rax + rax]
mov eax, dword [0x141dd5498]
and eax, dword [0x141dd549c]
add eax, 0xfd06a806
cmp eax, 0x1b5227d2
jb 0x1400c1bf0
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
test byte [rax + 0x70], 1
je 0x1400c1cc5
mov eax, 0xe5fb3029
nop dword [rax]
mov ecx, dword [0x141dd54c0]
or ecx, dword [0x141dd54c4]
imul rcx, rax
shr rcx, 0x3c
imul ecx, ecx, 0x6c2315ad
imul rcx, rcx, 0x7782b287
shr rcx, 0x3c
cmp ecx, 0x2dc603ed
je 0x1400c1c30
mov eax, dword [0x141ddb27c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x78]
nop word [rax + rax]
mov ecx, dword [0x141dd54c8]
or ecx, dword [0x141dd54cc]
xor ecx, 0xd9eec022
add ecx, 0x90e150a0
and ecx, 0xfdfd193a
cmp ecx, 0xd942f61b
je 0x1400c1c80
mov ecx, dword [0x141ddb27c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov rcx, qword [rcx + 0x80]
jmp 0x1400c1dea
mov qword [rbp - 0x68], rsi
mov eax, dword [0x141dd54a0]
and eax, dword [0x141dd54a4]
and eax, 0xb5bd2c86
add eax, 0xfe9fb67e
cmp eax, 0x696bc26a
jb 0x1400c1d2a
mov esi, dword [0x141dd54a8]
xor esi, dword [0x141dd54ac]
or esi, 0xa1a131e9
add esi, 0x88c5da1c
and esi, 0xb8c8ce09
xorps xmm0, xmm0
movaps xmmword [rbp - 0x50], xmm0
sub rsp, 0x20
lea rcx, [rbp - 0x50]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
cmp esi, 0x9b286f1
jae 0x1400c1d4a
xorps xmm0, xmm0
movaps xmmword [rbp - 0x50], xmm0
sub rsp, 0x20
lea rcx, [rbp - 0x50]
mov edx, 0x10
call qword [sym.imp.bcryptprimitives.dll_ProcessPrng]
add rsp, 0x20
jmp 0x1400c1ce6
mov eax, dword [0x141dd54b0]
add eax, dword [0x141dd54b4]
imul eax, eax, 0x185ac671
xor eax, 0x74168b51
add eax, 0x5e7c3049
cmp eax, 0x4059620e
jbe 0x1400c1d92
mov rax, qword [rbp - 0x48]
mov ecx, dword [0x141ddb27c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov byte [rcx + 0x70], 1
mov qword [rcx + 0x80], rax
mov rax, qword [rbp - 0x50]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd54b8]
sub ecx, dword [0x141dd54bc]
imul edx, ecx, 0x56989e63
add edx, 0xf330765a
mov ecx, dword [0x141ddb27c]
mov r8, qword gs:[0x58]
mov r8, qword [r8 + rcx*8]
mov rcx, qword [rbp - 0x48]
mov byte [r8 + 0x70], 1
mov qword [r8 + 0x80], rcx
cmp edx, 0xb86ac92b
ja 0x1400c1da0
mov rsi, qword [rbp - 0x68]
mov edx, dword [0x141dd54d0]
and edx, dword [0x141dd54d4]
add edx, 0xd0d95439
xor edx, 0x2481c107
and edx, 0xecd1f727
cmp edx, 0x53b8395a
jne 0x1400c1e2f
lea rdx, [rax + 1]
mov r8d, dword [0x141ddb27c]
mov r9, qword gs:[0x58]
mov r8, qword [r9 + r8*8]
mov qword [r8 + 0x78], rdx
lea r8, [rax + 1]
lea rdx, [0x141db98e0]
nop word [rax + rax]
mov r9d, dword [0x141dd54d8]
add r9d, dword [0x141dd54dc]
mov r10d, dword [0x141ddb27c]
mov r11, qword gs:[0x58]
mov r10, qword [r11 + r10*8]
imul r9d, r9d, 0x2fc75e38
mov qword [r10 + 0x78], r8
cmp r9d, 0xd8c4f81d
ja 0x1400c1e40
mov qword [rdi + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [rdi + 0x98], xmm0
mov qword [rdi + 0xa8], 0
mov qword [rdi + 0xb0], rax
mov qword [rdi + 0xb8], rcx
mov qword [rdi + 0xc0], rsi
mov qword [rdi + 0xc8], 0
test ebx, ebx
je 0x1400c2007
mov ecx, 0x976f0ced
movzx ebx, byte [rbp - 1]
mov r8, qword [rbp - 0x60]
nop word [rax + rax]
mov eax, dword [0x141dd54e0]
xor edx, edx
div dword [0x141dd54e4]
shr eax, 1
imul rax, rcx
shr rax, 0x3e
add eax, 0x194511a7
cmp eax, 0x98f974c6
ja 0x1400c1ed0
mov rax, qword [r8]
mov rdi, qword [rbp - 0x58]
nop dword [rax + rax]
mov ecx, dword [0x141dd54e8]
sub ecx, dword [0x141dd54ec]
add ecx, 0x25fa8ce4
or ecx, 0xabc21b56
and ecx, 0xeffe3bf7
cmp ecx, 0x7b431a52
jb 0x1400c1f00
nop word cs:[rax + rax]
mov ecx, dword [0x141dd54f0]
and ecx, dword [0x141dd54f4]
and ecx, 0x9080208
xor ecx, 0x3549212a
cmp ecx, 0x2666a4fd
jb 0x1400c1f30
test rax, rax
je 0x1400c239e
mov rcx, qword [rdi + 0xc0]
sub rsp, 0x20
call qword [sym.imp.pdh.dll_PdhCollectQueryData]
add rsp, 0x20
movabs r14, 0x8000000000000000
nop dword [rax + rax]
mov eax, dword [0x141dd5570]
imul eax, dword [0x141dd5574]
add eax, 0x6ab083bf
xor eax, 0x68eadd69
cmp eax, 0xeaf22710
ja 0x1400c1f80
cmp qword [rdi + 0x18], r14
je 0x1400c2139
mov eax, 0x8998f627
mov r15, qword [rbp - 0x60]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5578]
imul ecx, dword [0x141dd557c]
add ecx, 0x497ea8c7
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xf15ace8c
cmp ecx, 0xaf504485
jb 0x1400c1fc0
mov eax, dword [0x141dd5580]
add eax, dword [0x141dd5584]
imul eax, eax, 0xc0abcc80
cmp eax, 0x98b90f0c
jne 0x1400c207a
jmp 0x1400c20ac
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
mov edx, 0x1e
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
test rax, rax
je 0x1400c2053
mov rcx, rax
mov eax, dword [0x141dd5508]
xor edx, edx
div dword [0x141dd550c]
imul eax, eax, 0xc8ba07a8
add eax, 0xdbc9fb3e
cmp eax, 0xd70d2e28
jbe 0x1400c2424
jmp 0x1400c2459
mov eax, dword [0x141dd54f8]
xor eax, dword [0x141dd54fc]
xor eax, 0x474ff9c6
imul eax, eax, 0x7ab3d3fe
cmp eax, 0xa69def62
jbe 0x1400c23f7
jmp 0x1400c241e
mov esi, dword [str.eD_j3]
add esi, dword [0x141dd558c]
and esi, 0xa02442
mov rdx, qword [rdi + 0x20]
mov r8, qword [rdi + 0x28]
sub rsp, 0x20
mov rcx, r15
call fcn.1400da840
add rsp, 0x20
cmp esi, 0x2165fd26
jne 0x1400c20d0
mov rdx, qword [rdi + 0x20]
mov r8, qword [rdi + 0x28]
sub rsp, 0x20
mov rcx, r15
call fcn.1400da840
add rsp, 0x20
jmp 0x1400c207a
mov ecx, dword [0x141dd5590]
xor ecx, dword [0x141dd5594]
imul ecx, ecx, 0xc03e9004
or ecx, 0xdf3fdc3e
cmp ecx, 0x99dce8d8
jb 0x1400c20d0
test eax, eax
je 0x1400c23b3
movss xmm1, dword [0x140102d90]
subss xmm1, xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dd55a8]
xor edx, edx
div dword [0x141dd55ac]
or eax, 0x40080d0a
xor eax, 0x40880502
or eax, 0xbb73f0f5
cmp eax, 0x1429c1bd
jb 0x1400c2110
movss dword [rdi + 0x30], xmm1
sub rsp, 0x20
mov rcx, rdi
mov edx, ebx
call fcn.1400c50a0
add rsp, 0x20
mov r15, qword [rdi + 8]
mov rbx, qword [rdi + 0x10]
imul r12, rbx, 0x70
lea rsi, [r15 + r12]
nop dword [rax + rax]
mov eax, dword [0x141dd55b0]
imul eax, dword [0x141dd55b4]
add eax, 0x1faab2fb
or eax, 0x6838c84d
imul rax, rax, 0x1e71557f
shr rax, 0x37
cmp eax, 0xaed376c1
je 0x1400c2160
test rbx, rbx
je 0x1400c2216
xor edi, edi
movss xmm6, dword [0x140102d90]
mov r13, r15
nop
cmp qword [r13 + 0x48], r14
je 0x1400c21d9
mov rdx, qword [r13 + 0x50]
mov r8, qword [r13 + 0x58]
sub rsp, 0x20
mov rcx, qword [rbp - 0x60]
call fcn.1400da840
add rsp, 0x20
test eax, eax
je 0x1400c2422
test dil, dil
jne 0x1400c21c7
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [r13 + 0x60], xmm1
add r13, 0x70
nop dword [rax]
mov eax, dword [0x141dd55e0]
sub eax, dword [0x141dd55e4]
or eax, 0x551c5d5c
add eax, 0x1361dfb3
imul rcx, rax, 0x14e22693
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xeeffd5b7
ja 0x1400c21e0
cmp r13, rsi
jne 0x1400c21a0
cmp byte [rbp - 1], 0
mov rsi, qword [rbp - 0x58]
je 0x1400c239e
nop word cs:[rax + rax]
mov eax, dword [0x141dd55b8]
or eax, dword [0x141dd55bc]
or eax, 0x12f0b010
and eax, 0x52f9b754
imul rax, rax, 0x49e50f9d
shr rax, 0x3b
cmp eax, 0x8e9e92fe
ja 0x1400c2230
cmp byte [rsi + 0x38], 0
jne 0x1400c239e
sub rsp, 0x20
lea rcx, [rbp - 0x50]
mov rdx, rbx
call fcn.1400d81b0
add rsp, 0x20
mov rax, qword [rbp - 0x50]
mov r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
nop word cs:[rax + rax]
test rbx, rbx
sete dl
mov r9d, dword [0x141dd55c0]
imul r9d, dword [0x141dd55c4]
imul r10d, r9d, 0x9332bb3f
and r10d, 0x18bec13f
add r10d, 0xefe5d1b7
test rcx, rcx
sete r9b
cmp r10d, 0xe8023d6e
ja 0x1400c2290
or dl, r9b
jne 0x1400c2300
lea rcx, [rcx*8 - 8]
add r12, 0xffffffffffffff90
xor edx, edx
xor r9d, r9d
mov r10, qword [r8 + r9]
mov qword [r15 + rdx + 0x68], r10
cmp r12, rdx
je 0x1400c2300
lea r10, [r9 + 8]
add rdx, 0x70
cmp rcx, r9
mov r9, r10
jne 0x1400c22e0
nop
mov ecx, dword [0x141dd55c8]
and ecx, dword [0x141dd55cc]
and ecx, 0x830f1777
xor ecx, 0x7c3afe06
imul ecx, ecx, 0x1e2debd5
cmp ecx, 0xc765134f
ja 0x1400c2300
test rax, rax
je 0x1400c2374
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd55d0]
xor edx, edx
div dword [0x141dd55d4]
add eax, 0xabee8ff3
xor eax, 0x884d1009
or eax, 0x5620e6e6
cmp eax, 0xf2cc6eab
je 0x1400c2350
mov byte [rsi + 0x38], 1
nop dword [rax + rax]
mov eax, dword [0x141dd55d8]
and eax, dword [0x141dd55dc]
imul eax, eax, 0x47ecd1fd
or eax, 0xab8cd955
cmp eax, 0x67e72790
jb 0x1400c2380
movaps xmm6, xmmword [rbp]
lea rsp, [rbp + 0x18]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd5598]
imul eax, dword [0x141dd559c]
imul eax, eax, 0xf3f7bff8
cmp eax, 0xfbe481a4
je 0x1400c23f3
mov eax, dword [0x141dd55a0]
xor edx, edx
div dword [0x141dd55a4]
add eax, 0xbbc82c15
xor eax, 0xab050c80
or eax, 0x430a322
ud2
ud2
mov eax, dword [0x141dd5500]
imul eax, dword [0x141dd5504]
imul eax, eax, 0x21450b2
imul rax, rax, 0x75bbc5af
shr rax, 0x3e
ud2
ud2
ud2
mov eax, dword [0x141dd5510]
imul eax, dword [0x141dd5514]
movups xmm0, xmmword [0x141db9a0e]
movups xmmword [rcx + 0xe], xmm0
movups xmm0, xmmword [0x141db9a00]
movups xmmword [rcx], xmm0
mov qword [r13], 0x1e
mov qword [r13 + 8], rcx
cmp eax, 0xc63c2d6e
jne 0x1400c247c
movups xmm0, xmmword [0x141db9a0e]
movups xmmword [rcx + 0xe], xmm0
movups xmm0, xmmword [0x141db9a00]
movups xmmword [rcx], xmm0
mov qword [r13], 0x1e
mov qword [r13 + 8], rcx
jmp 0x1400c2424
mov qword [r13 + 0x10], 0x1e
movzx eax, byte [0x141ddb278]
mov eax, dword [0x141dd5518]
xor eax, dword [0x141dd551c]
add eax, 0x73992931
imul rax, rax, 0x62f01b9
shr rax, 0x3a
cmp eax, 0x46c292df
jbe 0x1400c24c2
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
mov rsi, qword [rbp - 0x58]
nop word cs:[rax + rax]
mov eax, dword [str.N_E]
xor edx, edx
div dword [0x141dd5524]
mov ebx, eax
sub rsp, 0x20
mov edx, 5
xor ecx, ecx
call fcn.1400c0180
add rsp, 0x20
cmp ebx, 0x12c70eef
je 0x1400c24d0
test rax, rax
je 0x1400c2805
lea r8, [rsi + 0x18]
mov byte [rax + 4], 0x30
mov dword [rax], 0x5f746f74
mov qword [r12], 5
mov qword [r12 + 8], rax
mov qword [r12 + 0x10], 5
sub rsp, 0x20
mov rcx, r13
mov rdx, qword [rbp - 0x60]
mov r9, r12
call fcn.1400d8d60
mov rcx, rsi
movzx edx, byte [rbp - 1]
call fcn.1400c50a0
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd5540]
add eax, dword [0x141dd5544]
imul eax, eax, 0x8a963cc0
add eax, 0xaaac0400
or eax, 0x7a4c3fc2
cmp eax, 0x48168976
jb 0x1400c2550
mov rbx, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
nop dword [rax + rax]
mov ecx, dword [0x141dd5548]
and ecx, dword [0x141dd554c]
imul ecx, ecx, 0x68a3de66
and ecx, 0xcf992508
shr ecx, 3
imul rcx, rcx, 0x1345ec09
shr rcx, 0x38
cmp ecx, 0x1c7c050e
je 0x1400c2580
test rax, rax
je 0x1400c1ebd
nop word [rax + rax]
mov ecx, dword [str.a_]
sub ecx, dword [0x141dd5554]
xor ecx, 0x4d5a5b44
add ecx, 0x5a3447f8
cmp ecx, 0x19c51ca5
jb 0x1400c25c0
mov ecx, dword [0x141dd5558]
or ecx, dword [0x141dd555c]
and ecx, 0xb1e877a4
xor ecx, 0x62739bbd
cmp ecx, 0xd0a84fe9
jb 0x1400c25e0
mov ecx, dword [0x141dd5560]
and ecx, dword [0x141dd5564]
xor ecx, 0xc0000000
or ecx, 0x102fde5a
and ecx, 0xdc2fdedb
cmp ecx, 0xc0b0f458
je 0x1400c2600
add rbx, 0x48
imul rax, rax, 0x70
lea rdx, [0x140053a40]
lea r8, [0x141db9a38]
lea r9, [rbp - 0x50]
xor esi, esi
mov r12, qword [rbp - 0x60]
jmp 0x1400c2665
add rbx, 0x70
inc rsi
mov rax, qword [rbp - 0x68]
add rax, 0xffffffffffffff90
je 0x1400c1ebd
mov qword [rbp - 0x68], rax
mov eax, dword [0x141dd5568]
or eax, dword [0x141dd556c]
mov ecx, 0xf29fe555
imul rax, rcx
shr rax, 0x3c
imul eax, eax, 0xfa0bc103
cmp eax, 0x71d4dc4c
lea r13, [rbp - 0x18]
lea rdi, [rbp - 0x80]
je 0x1400c2755
nop dword [rax + rax]
mov qword [r15], rsi
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], rdx
mov qword [rbp - 0x50], r8
mov qword [rbp - 0x48], 2
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 1
sub rsp, 0x20
mov rcx, r14
mov rdx, r9
call fcn.1400384d0
add rsp, 0x20
mov qword [rbp - 0x18], r15
lea rax, [0x140053a40]
mov qword [rbp - 0x10], rax
lea rax, [0x141db9a60]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 2
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 1
sub rsp, 0x20
mov rcx, rdi
lea rdx, [rbp - 0x50]
call fcn.1400384d0
mov rcx, r14
mov rdx, r12
mov r8, rbx
mov r9, rdi
call fcn.1400d8d60
lea r9, [rbp - 0x50]
lea r8, [0x141db9a38]
lea rdx, [0x140053a40]
add rsp, 0x20
xor eax, eax
test al, al
je 0x1400c2650
mov qword [r15], rsi
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], rdx
mov qword [rbp - 0x50], r8
mov qword [rbp - 0x48], 2
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 1
sub rsp, 0x20
mov rcx, r14
mov rdx, r9
call fcn.1400384d0
add rsp, 0x20
mov qword [rbp - 0x18], r15
lea rax, [0x140053a40]
mov qword [rbp - 0x10], rax
lea rax, [0x141db9a60]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 2
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 1
sub rsp, 0x20
mov rcx, rdi
lea rdx, [rbp - 0x50]
call fcn.1400384d0
mov rcx, r14
mov rdx, r12
mov r8, rbx
mov r9, rdi
call fcn.1400d8d60
lea r9, [rbp - 0x50]
lea r8, [0x141db9a38]
lea rdx, [0x140053a40]
add rsp, 0x20
jmp 0x1400c26a0
mov eax, dword [0x141dd5528]
sub eax, dword [0x141dd552c]
imul eax, eax, 0xa8110ee6
add eax, 0xf220f3b7
cmp eax, 0x44f0b769
jbe 0x1400c2825
ud2
mov eax, dword [0x141dd5530]
and eax, dword [0x141dd5534]
add eax, 0x56a792cd
and eax, 0x35080086
ud2