Function at 0x14009f0a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rdi, rcx
mov eax, dword [0x141dd0858]
imul eax, dword [0x141dd085c]
imul eax, eax, 0xda4256c1
cmp eax, 0xf91c7a9c
je 0x14009f102
mov eax, dword [0x141dd0860]
sub eax, dword [0x141dd0864]
imul eax, eax, 0x2a0cc21f
rcr byte [rdi], 0xc2
or al, 0x2a
and eax, 0x57a3a577
imul ecx, eax, 0xd687fdaf
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rsi, rsp
cmp ecx, 0x49df2801
jae 0x14009f111
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
jmp 0x14009f0cd
mov eax, dword [0x141dd0868]
imul eax, dword [0x141dd086c]
mov ecx, 0xaffee6d1
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xb01a2c2a
mov eax, 0xfa92017f
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xbdeb0a40
jbe 0x14009f170
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
movzx eax, byte [0x141dda618]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0870]
xor ecx, dword [0x141dd0874]
and ecx, 0x5d3cdb7a
add ecx, 0x951f50b5
and ecx, 0x760cd379
mov eax, 0x10
call fcn.1400eeec0
sub ch, bh
add al, 0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
add al, ch
sbb ch, bh
add al, 0
sub rsp, rax
mov rbx, rsp
movzx eax, byte [0x141dda618]
cmp ecx, 0x88466ba6
je 0x14009f170
nop dword [rax]
mov ecx, dword [0x141dd0878]
sub ecx, dword [0x141dd087c]
add ecx, 0x3769a214
and ecx, 0xf4939512
cmp ecx, 0xa0211122
ja 0x14009f1c0
test al, al
je 0x14009f33f
nop dword [rax + rax]
mov eax, dword [0x141dd0880]
imul eax, dword [0x141dd0884]
imul eax, eax, 0x88a4b104
add eax, 0xbb192bbe
and eax, 0xea02c74
cmp eax, 0x17826557
je 0x14009f1f0
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x60]
test rax, rax
je 0x14009f23d
cmp eax, 1
je 0x14009f297
jmp 0x14009f33f
mov eax, dword [0x141dd0888]
xor edx, edx
div dword [0x141dd088c]
add eax, 0x7a2725dd
xor eax, 0x987b1000
or eax, 0x2584aeed
cmp eax, 0x38046f52
je 0x14009f5b5
mov eax, dword [0x141dd0890]
and eax, dword [0x141dd0894]
add eax, 0xc17e77ca
imul r15, rax, 0x7ccd1c91
shr r15, 0x3e
sub rsp, 0x20
call fcn.1400fb5f0
add rsp, 0x20
cmp r15d, 0x88b6faf
ja 0x14009f265
mov eax, dword [0x141dd0898]
xor edx, edx
div dword [0x141dd089c]
nop word cs:[rax + rax]
nop dword [rax + rax]
mov eax, dword [0x141dd08a0]
xor edx, edx
div dword [0x141dd08a4]
or eax, 0x36bff008
imul eax, eax, 0xd7e43bf4
cmp eax, 0xc3e23e70
je 0x14009f2b0
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r15, qword [rax + 0x68]
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x68], 0
test r15, r15
je 0x14009f33f
lea rsi, [r15 + 0x10]
mov eax, dword [0x141dd08a8]
xor edx, edx
div dword [0x141dd08ac]
imul eax, eax, 0x9107240
and eax, 0x5747380
add eax, 0x33623d24
cmp eax, 0x58616893
jbe 0x14009f5c7
jmp 0x14009f5f9
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r15, qword [rax + 0x88]
nop dword [rax]
mov eax, dword [0x141dd0a30]
or eax, dword [0x141dd0a34]
xor eax, 0x7f1199df
imul eax, eax, 0x626a3bf1
xor eax, 0xabe7f381
cmp eax, 0x239ce789
jb 0x14009f360
test r15, r15
jne 0x1400a020a
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0a38]
and ecx, dword [0x141dd0a3c]
add ecx, 0xc806945a
and ecx, 0x2a9c1c3d
add ecx, 0x5a09992a
cmp ecx, 0xb81b54c9
ja 0x14009f3b0
cmp eax, 1
jne 0x14009f4c0
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x90]
mov eax, 0xad66b44f
nop
mov ecx, dword [0x141dd0a48]
add ecx, dword [0x141dd0a4c]
and ecx, 0xdec239a0
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x5f3d7426
cmp ecx, 0x350f8dd7
ja 0x14009f400
test rbx, rbx
je 0x14009f4db
lock inc qword [rbx]
jle 0x14009f534
test rbx, rbx
je 0x14009f568
nop word cs:[rax + rax]
mov eax, dword [0x141dd0a78]
or eax, dword [0x141dd0a7c]
imul rcx, rax, 0x11685cf9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
xor eax, 0xcda0c917
imul rcx, rax, 0x300c6aaf
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xfb9bb6a3
je 0x14009f450
mov r15, qword [rbx + 0x28]
mov eax, dword [0x141dd0a80]
xor eax, dword [0x141dd0a84]
add eax, 0x68906c01
imul rax, rax, 0x7a98afa9
shr rax, 0x3d
cmp eax, 0x28be59b6
jne 0x1400a0168
jmp 0x1400a0189
test rax, rax
jne 0x14009f563
sub rsp, 0x20
call fcn.1400fab70
add rsp, 0x20
jmp 0x14009f3df
sub rsp, 0x20
call fcn.1400faf10
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd0a50]
xor edx, edx
div dword [0x141dd0a54]
imul eax, eax, 0x14ccd801
add eax, 0x3c5576cd
cmp eax, 0xfc7cc8bd
ja 0x14009f4f0
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x90]
lock inc qword [rbx]
jg 0x14009f43b
mov eax, dword [0x141dd0a58]
and eax, dword [0x141dd0a5c]
xor eax, 0xdf9c92b7
imul rax, rax, 0x3435b269
shr rax, 0x38
and eax, 0x1a
cmp eax, 0xcdd90be3
jbe 0x1400a010b
jmp 0x1400a0131
cmp eax, 2
jne 0x14009f593
ud2
mov eax, dword [0x141dd0a40]
sub eax, dword [str.2UL_S]
add eax, 0x95504c5f
and eax, 0x1940e853
cmp eax, 0x150938b1
je 0x14009f593
jmp 0x14009fe97
sub rsp, 0x20
call fcn.1400fb5f0
add rsp, 0x20
jmp 0x14009f265
sahf
cld
invalid
invalid
mov eax, dword [0x141dd08b0]
and eax, dword [0x141dd08b4]
imul eax, eax, 0x2e5d21f4
mov ecx, 0xcfd2410b
imul rcx, rax
shr rcx, 0x3f
mov dl, 1
xor eax, eax
lock cmpxchg byte [rsi], dl
sete al
cmp ecx, 0x3e0213c6
jbe 0x14009f610
mov cl, 1
xor eax, eax
lock cmpxchg byte [rsi], cl
jmp 0x14009f5c7
mov ecx, dword [0x141dd08b8]
xor ecx, dword [0x141dd08bc]
add ecx, 0x49c9ea8a
imul rcx, rcx, 0x4e31cf0b
shr rcx, 0x3d
cmp ecx, 0xfa7577ee
ja 0x14009f610
test al, al
jne 0x14009f68f
mov eax, dword [0x141dd08c0]
sub eax, dword [0x141dd08c4]
add eax, 0xae1a1d3d
cmp eax, 0xa1b1915f
ja 0x14009fc0a
mov eax, dword [0x141dd08c8]
add eax, dword [0x141dd08cc]
imul r14d, eax, 0x9996a64d
add r14d, 0x81265e49
and r14d, 0xbc948b7d
sub rsp, 0x20
mov rcx, rsi
call fcn.1400fb1a0
add rsp, 0x20
cmp r14d, 0xa5c0b093
ja 0x14009f655
lea rax, [r15 + 0x18]
mov qword [rbx], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd08d0]
add eax, dword [0x141dd08d4]
imul rax, rax, 0x1a58d0db
shr rax, 0x3b
add eax, 0x865d1987
imul rcx, rax, 0x17ef49f9
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x7c266099
ja 0x14009f6a0
mov eax, dword [0x141dd08d8]
and eax, dword [0x141dd08dc]
imul rax, rax, 0x2ca06133
shr rax, 0x3c
add eax, 0x763fa23b
cmp eax, 0xca7e2860
jbe 0x14009f71c
mov qword [rbx + 8], 0
sub rsp, 0x20
lea rdx, [0x141db8338]
mov rcx, rbx
mov r8, rdi
call fcn.140053150
add rsp, 0x20
lea r14, [0x141db8338]
nop word cs:[rax + rax]
mov r12d, dword [0x141dd08e0]
imul r12d, dword [0x141dd08e4]
and r12d, 0xc147194
or r12d, 0x33018a61
add dword [rbx], esi
xor r12d, 0x7aa952d9
mov qword [rbx + 8], 0
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call fcn.140053150
add rsp, 0x20
cmp r12d, 0x9e655c6e
ja 0x14009f730
mov rcx, qword [rbx + 8]
test al, al
je 0x14009fa10
test rcx, rcx
je 0x14009fc1f
mov eax, dword [0x141dd0970]
xor eax, dword [0x141dd0974]
or eax, 0x4e51c1ad
xor eax, 0xcd819c89
cmp eax, 0x3bfb43c7
ja 0x14009f790
nop dword [rax]
mov eax, dword [0x141dd0978]
sub eax, dword [0x141dd097c]
xor eax, 0x7a301efd
imul rax, rax, 0x120931a3
shr rax, 0x3b
add eax, 0x42929eef
cmp eax, 0x4efec496
ja 0x14009f7b0
mov eax, ecx
and eax, 3
cmp rax, 3
ja case.default.0x14009f7f5
lea rdx, [0x141db9f8c]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
lea rdi, [rcx - 1]
nop dword [rax + rax]
mov eax, dword [0x141dd0998]
xor edx, edx
div dword [0x141dd099c]
add eax, 0x28aec785
or eax, 0xe216bd12
cmp eax, 0xbb86d6c0
je 0x14009f800
mov rbx, qword [rcx - 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dd09a0]
imul eax, dword [0x141dd09a4]
add eax, 0xd2f78c14
xor eax, 0x2bab026f
imul rax, rax, 0x24a7b4bf
shr rax, 0x3c
cmp eax, 0x5138d070
push rcx
ja 0x14009f830
mov r14, qword [rcx + 7]
mov rax, qword [r14]
mov eax, dword [rsi]
test rax, rax
je 0x14009f884
sub rsp, 0x20
mov rcx, rbx
call rax
add rsp, 0x20
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14009f880
mov rax, qword [r14 + 8]
nop dword [rax + rax]
mov ecx, dword [0x141dd09a8]
sub ecx, dword [0x141dd09ac]
and ecx, 0xd5c02204
imul ecx, ecx, 0xfab4bade
cmp ecx, 0xb09882d
jb 0x14009f890
test rax, rax
je 0x14009f931
mov rax, qword [r14 + 0x10]
nop dword [rax]
mov ecx, dword [0x141dd09b0]
or ecx, dword [0x141dd09b4]
or ecx, 0x8804841
and ecx, 0xac06c6f
add ecx, 0xc9fd451d
cmp ecx, 0x27095ab4
jb 0x14009f8c0
cmp rax, 0x11
jb 0x14009f917
nop dword [rax]
mov eax, dword [0x141dd09b8]
or eax, dword [0x141dd09bc]
imul eax, eax, 0xd4b3f125
add eax, 0xb1d29b72
and eax, 0xe877baed
cmp eax, 0x945e433a
je 0x14009f8f0
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [0x141dda6a0]
mov eax, dword [0x141dd09c0]
xor edx, edx
div dword [0x141dd09c4]
or eax, 0xbdfe9f4f
imul rax, rax, 0x23b21803
shr rax, 0x3d
or eax, 0x577afae0
cmp eax, 0xfe4724fe
jbe 0x14009f978
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14d, 0x97f20a9d
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
and eax, 0x6194b
nop word cs:[rax + rax]
mov eax, dword [0x141dd09c8]
mov ecx, dword [0x141dd09cc]
add dword [rbp + rcx*4 + 0x2c], eax
or byte [rcx - 0x7f], al
invalid
int 0xb7
imul esp, dword [rbp + rcx*2 + 0x49eeaf0f], 0xffffffc1
in eax, dx
add r13d, 0x323b277a
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r13d, 0xe19b0316
ja 0x14009f990
nop word cs:[rax + rax]
mov eax, dword [0x141dd09d0]
or eax, dword [0x141dd09d4]
imul rax, rax, 0x4be143d5
shr rax, 0x3b
cmp eax, 0x996d00bd
je 0x14009f9e0
jmp case.0x14009f7f5.0
mov eax, dword [0x141dd08e8]
or eax, dword [0x141dd08ec]
add eax, 0xd086f54c
xor eax, 0xb0fc9008
add eax, 0xe18271ef
cmp eax, 0x1e352b2d
sub eax, 0x721e352b
invalid
test rcx, rcx
je 0x14009fc50
mov eax, 0xab770649
mov edx, dword [0x141dd08f0]
add edx, dword [0x141dd08f4]
imul rdx, rdx, 0x5f4b0c09
shr rdx, 0x3d
add edx, 0x9e72a49f
movsb byte [rdi], byte [rsi]
jb 0x14009f9fb
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x986b80cf
je 0x14009fa40
mov eax, ecx
and eax, 3
lea rdx, [0x141db9f7c]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
mov eax, dword [0x141dd0988]
xor edx, edx
div dword [0x141dd098c]
xor eax, 0xb020a181
and eax, 0xb02aa78d
add eax, 0x7773125a
cmp eax, 0x3f973ab4
ja case.0x14009f7f5.3
nop word cs:[rax + rax]
mov eax, dword [0x141dd0990]
sub eax, dword [0x141dd0994]
or eax, 0x12b4e811
add eax, 0xe1d77312
xlatb
loope 0x14009fbac
push 0x2f3d50cf
invalid
invalid
mov dl, 0x73
invalid
jmp case.0x14009f7f5.0
mov eax, dword [str.7a_aC]
imul eax, dword [0x141dd0984]
or eax, 0x3108c400
and eax, 0x314dcd00
xor eax, 0x6e82fa75
cmp eax, 0xa87a82ed
ja case.default.0x14009f7f5
jmp 0x14009fe97
sub rsp, 0x20
mov rcx, rsi
call fcn.1400fb1a0
add rsp, 0x20
jmp 0x14009f655
ud2
mov eax, dword [0x141dd0968]
imul eax, dword [0x141dd096c]
add eax, 0xc2cb30
or eax, 0x474f1017
cmp eax, 0x428f11e1
je 0x14009fc50
mov eax, dword [0x141dd09d8]
xor edx, edx
div dword [0x141dd09dc]
imul eax, eax, 0x6b6caa3e
add eax, 0x879d2e34
or eax, 0xdd3c7fdf
cmp eax, 0x2997e1b2
jae 0x14009fe99
jmp 0x14009fec5
ud2
mov ecx, dword [0x141dd09e0]
or ecx, dword [0x141dd09e4]
imul rax, rcx, 0x221de349
shr rax, 0x20
sub ecx, eax
shr ecx, 1
add ecx, eax
shr ecx, 0x1c
xor eax, eax
xchg byte [rsi], al
cmp ecx, 0xc243118d
jne 0x14009fed0
xor eax, eax
xchg byte [rsi], al
jmp 0x14009fe99
mov ecx, dword [0x141dd09e8]
and ecx, dword [0x141dd09ec]
add ecx, 0x1ce259b3
xor ecx, 0x36c153a5
cmp ecx, 0xa30cb419
ja 0x14009fed0
mov ecx, dword [0x141dd09f0]
xor ecx, dword [0x141dd09f4]
or ecx, 0x82b37919
add ecx, 0x1d9ec36c
cmp ecx, 0x9aeadd8e
jb 0x14009fef0
cmp al, 2
jne 0x14009ff65
xor eax, eax
test al, al
jne 0x14009ff52
mov eax, dword [0x141dd09f8]
imul eax, dword [0x141dd09fc]
add eax, 0x1d30ad5
imul edi, eax, 0xf4b719cd
add edi, 0xd7557159
or edi, 0x34343f44
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
cmp edi, 0x4c7aa463
jae 0x14009ff65
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
jmp 0x14009ff1a
mov eax, dword [0x141dd0a00]
sub eax, dword [0x141dd0a04]
imul eax, eax, 0x612e0dc0
cmp eax, 0x87173691
invalid
invalid
xchg dword [rsi + 0x22], esi
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x68], r15
nop dword [rax + rax]
mov eax, dword [0x141dda6bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x68]
mov qword [rax + 0x68], r15
mov eax, dword [0x141dd0a08]
xor eax, dword [0x141dd0a0c]
add dword [0x1100b08d2], ecx
and eax, 0xd3031fd2
xor eax, 0xae18a27a
cmp eax, 0x2f6af78b
jb 0x14009ffa0
mov eax, dword [0x141dd0a10]
xor edx, edx
div dword [0x141dd0a14]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400a0000
test rsi, rsi
je 0x1400a00d0
lock dec qword [rsi]
sete al
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400a0020
test al, al
je 0x1400a00d0
mov eax, dword [0x141dd0a18]
imul eax, dword [0x141dd0a1c]
add eax, 0x1d309e3
imul eax, eax, 0x214234b5
xor eax, 0xdf1a759d
imul eax, eax, 0x2e70eb7c
cmp eax, 0xae027c75
ja 0x1400a008d
mov eax, dword [0x141dd0a20]
sub eax, dword [0x141dd0a24]
add eax, 0xf5561974
mov edi, 0x80f61fd7
imul rdi, rax
shr rdi, 0x3f
xor edi, 0x2c923f73
sub rsp, 0x20
sub esp, 0x20
mov rcx, rsi
call fcn.14009e460
add rsp, 0x20
cmp edi, 0x7f12cc4
jae 0x1400a00a0
sub rsp, 0x20
mov rcx, rsi
call fcn.14009e460
add rsp, 0x20
jmp 0x1400a0051
mov eax, dword [0x141dd0a28]
imul eax, dword [0x141dd0a2c]
jg 0x1400a00b4
rol dword [rcx], cl
xor eax, 0x38d00340
or eax, 0xc4287c9f
xor eax, 0xb16c0aa7
cmp eax, 0xb1178686
jae 0x1400a00a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd0bc0]
xor edx, edx
div dword [0x141dd0bc4]
imul rax, rax, 0x72b0f325
shr rax, 0x3e
xor eax, 0xf1f0ecab
add eax, 0x226a159e
cmp eax, 0x7cc79c28
ja 0x1400a00d0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop rsi
pop r15
pop rbp
ret
mov eax, dword [0x141dd0a60]
imul eax, dword [0x141dd0a64]
xor eax, 0x5a5b592f
imul eax, eax, 0x85b017c6
add eax, 0x4a12d035
adc cl, byte [rdx + 0xf]
invalid
ud2
mov ecx, dword [0x141dd0a88]
or ecx, dword [0x141dd0a8c]
or ecx, 0xfffff7ff
lock dec qword [rbx]
or ecx, dword [rdi]
xchg esp, eax
rol byte [rcx - 0x7c74ab07], 0x6e
jne 0x1400a018f
lock dec qword [rbx]
jmp 0x1400a0168
test al, al
je 0x1400a020a
mov eax, dword [0x141dd0a90]
sub eax, dword [0x141dd0a94]
mov ecx, 0x98091f87
imul rcx, rax
scasd eax, dword [rdi]
enter 0xffffffffffffc148, 0xffffffffffffffe9
imul eax, ecx, 0xd7dafb25
fcmovbe st(0), st(7)
add eax, 0xb22fe5ee
cmp eax, 0x4fd2002b
jb 0x1400a01f8
mov eax, dword [0x141dd0a98]
xor eax, dword [0x141dd0a9c]
or eax, 0x80e041d3
add eax, 0x95254747
and eax, 0xe0694c95
popfq
pop r11
shr r12, 0x3e
sub rsp, 0x20
mov rcx, rbx
call fcn.140076300
add rsp, 0x20
cmp r12d, 0xb8b242cf
jne 0x1400a020a
sub rsp, 0x20
mov rcx, rbx
call fcn.140076300
add rsp, 0x20
jmp 0x1400a01be
mov rax, qword [0x141dda660]
cmp r15, rax
jne 0x1400a02e2
add byte [rax], al
mov ecx, dword [0x141dda668]
mov eax, dword [0x141dd0aa0]
xor edx, edx
div dword [0x141dd0aa4]
mov eax, 0xdafe6233
nop word cs:[rax + rax]
nop dword [rax + rax]
mov edx, dword [0x141dd0aa8]
or edx, dword [0x141dd0aac]
imul edx, edx, 0x480593c9
xor edx, 0xf379ee6e
imul rdx, rax
scasd eax, dword [rdi]
ror byte [rax - 0x3f], 1
invalid
cmp edx, 0x96d09286
ja 0x1400a0240
nop dword [rax + rax]
mov eax, dword [0x141dd0ab0]
and eax, dword [0x141dd0ab4]
rol dword [rcx], cl
imul eax, eax, 0x2310c464
and eax, 0x2c2a3d7c
add eax, 0x8200701f
cmp eax, 0x7ce0d8da
jb 0x1400a0270
cmp ecx, 0xffffffff
je 0x1400a031c
inc ecx
nop
mov eax, dword [0x141dd0ab8]
sub eax, dword [0x141dd0abc]
or eax, 0x79f60a33
add eax, 0x6b5bafb6
cmp eax, 0x6c43e85a
jb 0x1400a02a0
nop dword [rax]
mov eax, dword [0x141dd0ac0]
or eax, dword [0x141dd0ac4]
xor eax, 0x19399b8a
add eax, 0x336efb25
cmp eax, 0x162db549
jb 0x1400a02c0
jmp 0x1400a046a
mov cl, 1
xor eax, eax
lock cmpxchg byte [0x141dda66c], cl
movabs dword [0x11b840f01d3], eax
mov eax, dword [0x141dd0ac8]
sub eax, dword [0x141dd0acc]
imul eax, eax, 0x50c3b82d
add eax, 0x3ea5a4c5
xor eax, 0x90381792
cmp eax, 0x286c1f11
jae 0x1400a0394
jmp 0x1400a03cd
mov eax, dword [0x141dd0af0]
imul eax, dword [0x141dd0af4]
mov ecx, 0xd9e20b29
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xd2abdccd
and ecx, 0xc288884d
cmp ecx, 0x3c7ad5e0
jae case.0x140088260.635
ud2
mov eax, 0xe0db83bd
nop word cs:[rax + rax]
mov ecx, dword [0x141dd0af8]
add ecx, dword [0x141dd0afc]
imul rcx, rcx, 0x4167252b
shr rcx, 0x3d
imul ecx, ecx, 0xe93c0d59
imul rcx, rax
shr rcx, 0x3f
ud2
mov eax, dword [0x141dd0ad0]
add eax, dword [0x141dd0ad4]
xor eax, 0x92364c1d
imul ebx, eax, 0x2cd96862
add ebx, 0xe24169a2
sub rsp, 0x20
lea rcx, [0x141dda66c]
call fcn.1400fb1a0
add rsp, 0x20
cmp ebx, 0xed058b34
jbe 0x1400a03f0
sub rsp, 0x20
lea rcx, [0x141dda66c]
call fcn.1400fb1a0
add rsp, 0x20
jmp 0x1400a0394
mov eax, dword [0x141dd0ad8]
xor edx, edx
div dword [0x141dd0adc]
add eax, 0x857c038
or eax, 0x7dadcdde
cmp eax, 0x438df416
je 0x1400a03f0
mov eax, dword [0x141dd0ae0]
add eax, dword [0x141dd0ae4]
imul eax, eax, 0x4b3a1a79
sar byte [rcx + 0x1a], 0x3a
add rax, 0x421ab147
xor eax, 0x6da6c796
cmp eax, 0x24bc54d5
jb 0x1400a045c
mov eax, dword [0x141dd0ae8]
imul eax, dword [0x141dd0aec]
or eax, 0x94e9eb67
add eax, 0x5ede4814
xor eax, 0x850a3130
mov qword [0x141dda660], r15
cmp eax, 0xee785c56
jbe 0x1400a0465
mov qword [0x141dda660], r15
jmp 0x1400a0432
mov ecx, 1
mov dword [0x141dda668], ecx
lea rax, [0x141dda660]
mov qword [r14], rax
mov qword [rsi], r14
mov qword [rsi + 8], 0
sub rsp, 0x20
lea rdx, [0x141db8308]
mov rcx, rsi
mov r8, rdi
call fcn.140053150
add rsp, 0x20
mov rbx, qword [rsi + 8]
test al, al
je 0x1400a04f0
nop word [rax + rax]
mov eax, dword [0x141dd0b90]
and eax, dword [0x141dd0b94]
add eax, 0x93b2d5
xor eax, 0xd1fe41e7
cmp eax, 0x1d1a2dc1
jb 0x1400a04b0
test rbx, rbx
jne 0x1400a0538
ud2
mov eax, dword [0x141dd0b00]
xor eax, dword [0x141dd0b04]
add eax, 0x78a851bf
or eax, 0x50aed6d
add eax, 0xc9c88f00
cmp eax, 0xb84cc6b4
ja 0x1400a04f0
test rbx, rbx
je case.0x1400a0534.0
mov eax, ebx
and eax, 3
cmp rax, 3
ja case.default.0x1400a0534
lea rcx, [0x141db9f9c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor ebx, ebx
mov rcx, qword [r14]
dec dword [rcx + 8]
jne 0x1400a0570
mov qword [rcx], 0
xor eax, eax
xchg byte [rcx + 0xc], al
cmp al, 2
jne 0x1400a0570
add rcx, 0xc
sub rsp, 0x20
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd0b98]
xor edx, edx
div dword [0x141dd0b9c]
add eax, 0xc81f0a2b
or eax, 0x1d4a4716
imul eax, eax, 0xc0a8e678
cmp eax, 0x1bd28b06
je 0x1400a0570
nop word cs:[rax + rax]
mov eax, dword [0x141dd0ba0]
add eax, dword [0x141dd0ba4]
or eax, 0xf57bd9f
imul eax, eax, 0x6a7170ff
or eax, 0xb062f5ca
cmp eax, 0x59d39215
jb 0x1400a05a0
test rbx, rbx
je 0x1400a00d0
mov eax, dword [0x141dd0ba8]
xor eax, dword [0x141dd0bac]
add eax, 0x22f7ba9b
imul rax, rax, 0x65d97985
shr rax, 0x3e
imul eax, eax, 0x88bbaa3
cmp eax, 0xcfc142f0
jne 0x1400a0600
ud2
mov eax, dword [0x141dd0bb0]
or eax, dword [0x141dd0bb4]
add eax, 0x76bf8333
xor eax, 0x64579a18
imul rax, rax, 0x1a120ed3
shr rax, 0x3c
ud2
mov eax, dword [0x141dd0b10]
or eax, dword [0x141dd0b14]
add eax, 0x3e66615f
and eax, 0xe21855e8
add eax, 0xece0ed47
cmp eax, 0x70b957cc
jb case.0x1400a0534.3
xor ebx, ebx
nop word cs:[rax + rax]
mov eax, dword [0x141dd0b18]
or eax, dword [0x141dd0b1c]
and eax, 0x868a5009
add eax, 0xb69c1643
cmp eax, 0x20bbe5e4
jb 0x1400a0690
jmp 0x1400a0538
mov eax, dword [0x141dd0b08]
or eax, dword [0x141dd0b0c]
or eax, 0xa3f8012d
add eax, 0xe419422d
or eax, 0x161cd5c6
cmp eax, 0xfac64fb8
je case.default.0x1400a0534
jmp 0x14009fe97
lea rsi, [rbx - 1]
nop dword [rax + rax]
mov eax, dword [0x141dd0b20]
and eax, dword [0x141dd0b24]
imul eax, eax, 0xc27c759d
add eax, 0xbc81ea34
or eax, 0x2fcf05dd
cmp eax, 0x27a67080
je 0x1400a06f0
mov rdi, qword [rsi]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0b28]
xor eax, dword [0x141dd0b2c]
add eax, 0x3f32560d
imul rax, rax, 0x29b1b401
shr rax, 0x3d
cmp eax, 0x2b2587a2
je 0x1400a0720
mov rbx, qword [rbx + 7]
mov r15, qword [rbx]
test r15, r15
je 0x1400a0800
mov eax, dword [0x141dd0b30]
mov ecx, dword [0x141dd0b34]
add eax, ecx
add eax, 0x321fc978
imul rax, rax, 0x593816c5
shr rax, 0x3c
cmp eax, 0x286a72fb
jne 0x1400a0790
sub rsp, 0x20
mov rcx, rdi
call r15
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd0b38]
xor eax, dword [0x141dd0b3c]
shr eax, 2
imul r12, rax, 0x40821dcd
shr r12, 0x3c
or r12d, 0xfce5826
sub rsp, 0x20
mov rcx, rdi
call r15
add rsp, 0x20
cmp r12d, 0xf8de1e08
ja 0x1400a0790
nop dword [rax + rax]
mov eax, dword [0x141dd0b40]
sub eax, dword [0x141dd0b44]
add eax, 0x1b12178c
or eax, 0x1130800
and eax, 0x3973b93a
cmp eax, 0x521fc1
je 0x1400a07d0
nop word cs:[rax + rax]
mov eax, dword [0x141dd0b48]
sub eax, dword [0x141dd0b4c]
add eax, 0x59113752
xor eax, 0xd145950b
imul rax, rax, 0x674ff8a9
shr rax, 0x3d
cmp eax, 0xe71eca82
je 0x1400a0800
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400a0830
cmp qword [rbx + 8], 0
je 0x1400a0934
mov rcx, qword [rbx + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd0b50]
xor edx, edx
div dword [0x141dd0b54]
or eax, 0x4828e09
and eax, 0x6838eb9
add eax, 0xa30e8f70
cmp eax, 0x286f95bd
jb 0x1400a0850
cmp rcx, 0x11
jb 0x1400a08ad
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400a0880
mov rdi, qword [rdi - 8]
nop dword [rax + rax]
mov eax, dword [0x141dd0b58]
xor eax, dword [0x141dd0b5c]
and eax, 0x5e83fdaf
add eax, 0x2ce1b2a0
cmp eax, 0xac7dc80
jb 0x1400a0890
mov eax, dword [0x141dd0b60]
xor edx, edx
div dword [0x141dd0b64]
or eax, 0x6d19b9b1
xor eax, 0x5aaf8de2
cmp eax, 0xaa6e1c26
jbe 0x1400a08e6
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd0b68]
add eax, dword [0x141dd0b6c]
imul rax, rax, 0x46586a43
shr rax, 0x3c
imul r15d, eax, 0xb1a0d388
add r15d, 0x9fd29fb8
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call rbx
add rsp, 0x20
cmp r15d, 0xb9195426
ja 0x1400a08f0
mov eax, dword [0x141dd0b70]
and eax, dword [0x141dd0b74]
or eax, 0x53fbce7b
imul eax, eax, 0xfddf6216
and eax, 0xb53c86a8
cmp eax, 0xcfb9614a
ja 0x1400a097d
mov eax, dword [0x141dd0b78]
imul eax, dword [0x141dd0b7c]
imul eax, eax, 0x9ffa77a5
add eax, 0x4edc47cb
mov rdi, qword [0x141dda6a0]
cmp eax, 0xca34c2b6
jbe 0x1400a0986
mov rax, qword [0x141dda6a0]
jmp 0x1400a0957
mov eax, dword [0x141dd0b80]
add eax, dword [0x141dd0b84]
xor eax, 0xd89a094e
add eax, 0x2432ff90
xor eax, 0x95f5b251
cmp eax, 0x367d293e
jae case.0x140097632.149
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor ebx, ebx
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dd0b88]
imul eax, dword [0x141dd0b8c]
add eax, 0x57095480
and eax, 0x79fdc47d
imul r12d, eax, 0x8f572662
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call r15
add rsp, 0x20
cmp r12d, 0x192b175d
jbe 0x1400a09d0
jmp 0x1400a0538