Function at 0x1401005d0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x141f3ba38]
sub eax, dword [0x141f3ba3c]
add eax, 0x759aa445
or eax, 0x87dc5e8b
cmp eax, 0xa6d5e298
je 0x14008af80
nop dword [rax]
mov eax, dword [0x141f3ba40]
sub eax, dword [0x141f3ba44]
cmp eax, 0xdf6e20da
je 0x14008afa0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2
leave
invalid
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp]
call rbx
add rsp, 0x20
xor r13d, r13d
nop word [rax + rax]
mov r12, qword [0x141f49008]
cmp rsi, r12
jae 0x14008c1e0
test r13b, r13b
je 0x14008b7c0
mov byte [0x141f49010], 1
mov r8, r12
sub r8, rsi
mov rdx, qword [0x141f49000]
add rdx, rsi
sub rsp, 0x20
mov ecx, 0xfffffff5
mov r9, rdi
call fcn.14008c970
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141f3b7d0]
sub eax, dword [0x141f3b7d4]
imul r14d, eax, 0x291b23c6
or r14d, 0x40239080
and r14d, 0x4067d0a4
mov byte [0x141f49010], 1
mov rbx, r12
sub rbx, rsi
mov rdx, qword [0x141f49000]
add rdx, rsi
sub rsp, 0x20
mov ecx, 0xfffffff5
mov r8, rbx
mov r9, rdi
call fcn.14008c970
add rsp, 0x20
cmp r14d, 0x16823b59
je 0x14008b7c0
mov rcx, rdx
cmp rax, 1
jne 0x14008b8f0
nop word cs:[rax + rax]
mov eax, dword [0x141f3b7f0]
xor edx, edx
div dword [0x141f3b7f4]
add eax, 0xcf34f0da
or eax, 0x81ab16b0
xor eax, 0x57e9a8f3
cmp eax, 0xf021f2c
jb 0x14008b830
test r13b, r13b
jne 0x14008b854
mov r8d, ecx
and r8d, 3
mov eax, dword [0x141f3b7f8]
xor edx, edx
div dword [0x141f3b7fc]
imul eax, eax, 0x566fe99f
or eax, 0xd592b5ee
imul rax, r15
shr rax, 0x3c
cmp eax, 0x5e0a6ab0
je 0x14008b860
cmp r8d, 2
jae 0x14008b9b0
mov byte [0x141f49010], 0
nop dword [rax]
test r13b, r13b
jne 0x14008b8a0
lea rdx, [0x141f26820]
movsxd rax, dword [rdx + r8*4]
add rax, rdx
jmp rax
mov eax, dword [0x141f3b7d8]
add eax, dword [0x141f3b7dc]
imul rax, rax, 0x8dd6f4b
shr rax, 0x38
add eax, 0x4955b235
cmp eax, 0xcea0b479
ja 0x14008b8f0
mov eax, dword [0x141f3b7e0]
sub eax, dword [0x141f3b7e4]
or eax, 0x63d16012
add eax, 0xc5fcc0be
xor eax, 0x423f5b82
cmp eax, 0x173597a5
jae 0x14008b940
mov byte [0x141f49010], 0
nop dword [rax]
mov eax, dword [str._h3ff_]
add eax, dword [0x141f3b7ec]
xor eax, 0x3345c401
imul eax, eax, 0xdefababd
xor eax, 0xefbfac8c
mov byte [0x141f49010], 0
cmp eax, 0xff2d71ba
ja 0x14008b940
mov rbx, rcx
test rbx, rbx
je 0x14008c25d
add rsi, rbx
nop dword [rax]
mov eax, dword [0x141f3b938]
imul eax, dword [0x141f3b93c]
add eax, 0x9f5c8551
or eax, 0xe6cb0e91
imul eax, eax, 0x5abe8afd
cmp eax, 0xc7363d7c
jae 0x14008b980
jmp case.0x14008bac6.0
cmp r8d, 2
jne 0x14008bcb9
mov eax, dword [0x141f3b800]
xor edx, edx
div dword [0x141f3b804]
xor eax, 0xd65a54fd
imul eax, eax, 0xbc131aac
cmp eax, 0x574de0d5
je 0x14008b9ba
mov r8, rcx
movabs rax, 0xffffffff00000000
and r8, rax
mov eax, dword [0x141f3b808]
xor edx, edx
div dword [0x141f3b80c]
and eax, 0x5a4d9ba1
imul eax, eax, 0x1fa21524
add eax, 0x829a4cc7
movabs rdx, 0x600000000
add byte [rax], al
invalid
add byte [rax], al
add byte [rcx + 0x39], cl
ror byte [rcx - 0x77], 1
invalid
cmove r14, rbx
cmp eax, 0x1a5ad71
jb 0x14008b9ea
add byte [rax], al
invalid
mov eax, dword [0x141f3b810]
add eax, dword [0x141f3b814]
and eax, 0x40222500
or eax, 0x979dd873
imul eax, eax, 0x5f3a2fee
cmp eax, 0x18142556
push rsi
and eax, 0x850f1814
invalid
invalid
add byte [rax], al
push rsi
and eax, 0x850f1814
invalid
jmp 0x14008c1b9
cmp r9b, 0x23
jne 0x14008c266
nop word [rax + rax]
mov eax, dword [0x141f3b950]
imul eax, dword [0x141f3b954]
add eax, 0x935b9f05
or eax, 0xce7bfeb1
cmp eax, 0x9944c687
je 0x14008ba90
cmp r8, 3
ja case.default.0x14008bac6
lea rdx, [0x141f268d4]
movsxd rax, dword [rdx + r8*4]
add rax, rdx
jmp rax
mov eax, dword [0x141f3b968]
xor eax, dword [0x141f3b96c]
imul rax, rax, 0x12684eb7
shr rax, 0x3c
imul eax, eax, 0xf5c85884
or eax, 0x2f57412f
cmp eax, 0x2a37a7af
jb case.0x14008bac6.1
mov rax, rcx
dec rax
mov qword [rbp], rax
mov r14, qword [rcx - 1]
mov eax, dword [0x141f3b970]
xor eax, dword [0x141f3b974]
or eax, 0x40bb4738
and eax, 0x40bbc7ba
cmp eax, 0x2191ea30
jb 0x14008bb07
mov r12, qword [rcx + 7]
mov rax, qword [r12]
nop dword [rax]
mov ecx, dword [0x141f3b978]
and ecx, dword [0x141f3b97c]
add ecx, 0xa112f647
imul rcx, rcx, 0x335e58b9
shr rcx, 0x3d
imul ecx, ecx, 0x4db2c6b1
cmp ecx, 0x4d21c397
ja 0x14008bb30
test rax, rax
je 0x14008bb98
sub rsp, 0x20
mov rcx, r14
call rax
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141f3b980]
or eax, dword [0x141f3b984]
xor eax, 0x148cb4c7
and eax, 0xf4adb5cf
imul rax, rax, 0x316c09ff
shr rax, 0x3c
cmp eax, 0x26c557cb
ja 0x14008bb70
mov eax, dword [0x141f3b988]
xor edx, edx
div dword [0x141f3b98c]
mov eax, dword [0x141f3b990]
sub eax, dword [0x141f3b994]
xor eax, 0x7f1142b
imul eax, eax, 0x96681a7
cmp eax, 0xee5ea8fb
je 0x14008bba6
mov rcx, qword [r12 + 8]
mov rax, qword [r12 + 0x10]
and al, 0x10
and al, 0x10
nop
mov edx, dword [0x141f3b998]
and edx, dword [0x141f3b99c]
or edx, 0x684025d8
and edx, 0xfb54a5da
xor edx, 0x1e436d72
cmp edx, 0xb68486b2
jb 0x14008bbd0
test rcx, rcx
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
je 0x14008b750
cmp rax, 0x11
jb 0x14008bc10
mov r14, qword [r14 - 8]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
test al, al
je 0x14008bc33
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call rbx
add rsp, 0x20
mov r13d, 0xb41b959b
nop dword [rax]
mov r12d, dword [0x141f3b9a0]
add r12d, dword [0x141f3b9a4]
imul r12, r13
shr r12, 0x3f
or r12d, 0x4b016eac
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, r14
call rbx
add rsp, 0x20
cmp r12d, 0xc57f58f6
ja 0x14008bc40
jmp 0x14008b750
mov eax, dword [str.Vpe]
xor edx, edx
div dword [0x141f3b964]
add eax, 0x28a3df8e
xor eax, 0x908e3e8
and eax, 0x91febed
cmp eax, 0x1d179f24
invalid
invalid
ja case.0x14008bac6.3
invalid
jmp case.0x14008bac6.0
mov byte [0x141f49010], 0
mov rax, rcx
shr rax, 0x20
nop word [rax + rax]
mov edx, dword [0x141f3b828]
or edx, dword [0x141f3b82c]
xor edx, 0xc3e135a8
cmp edx, 0xa8f6e405
ja 0x14008bcd0
nop word [rax + rax]
mov edx, dword [0x141f3b830]
or edx, dword [0x141f3b834]
add edx, 0x5595e1f5
xor edx, 0x92e1edb0
imul edx, edx, 0x887cdce1
cmp edx, 0x188ccf40
iretd
mov word [rax], ds
jb 0x14008bcf0
iretd
cmp eax, 0x28
ja case.default.0x14008bd2f
mov eax, eax
lea rdx, [0x141f26830]
movsxd rax, dword [rdx + rax*4]
ror byte [rax - 0x73], 0x15
or byte [rbx + 0x634801e9], ch
add al, 0x82
add rax, rdx
jmp rax
xor r9d, r9d
jmp 0x14008ba80
mov eax, dword [0x141f3b8b0]
sub eax, dword [0x141f3b8b4]
or eax, 0x3d1318d1
imul rdx, rax, 0x5a56d41
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
or eax, 0x40c55672
mov r9b, 0x23
cmp eax, 0x93026d0a
invalid
xchg ebx, eax
ja case.0x14008bd2f.35
add dl, byte [rbx + 0x7e9cc77]
std
invalid
jmp 0x14008ba80
mov r9b, 0x24
mov al, 1
test al, al
je case.0x14008bd2f.36
jmp 0x14008ba80
mov eax, dword [0x141f3b890]
add eax, dword [0x141f3b894]
imul eax, eax, 0xbf262d8f
mov edi, 0x8fb6bd05
adc dword [0x17c5aef60], esp
mov edi, 0x8fb6bd05
adc dword [0x17c5aef60], esp
mov r9b, 0x1b
cmp eax, 0xaa84f560
je case.0x14008bd2f.27
jmp 0x14008ba80
mov eax, dword [0x141f3b8a8]
sub eax, dword [0x141f3b8ac]
xor eax, 0xf499f50b
imul eax, eax, 0x474b79ce
imul rax, rax, 0x6c56875
shr rax, 0x3a
call 0x162b9ff1f
call 0x162b9ff1f
cmp eax, 0xe78f8831
ja case.0x14008bd2f.34
jmp 0x14008ba80
mov eax, dword [str.eg_tD]
xor edx, edx
div dword [0x141f3b864]
add eax, 0x1f3e6b09
imul edi, dword [rsi], 0x1f
imul edi, dword [rsi], 0x1f
xor eax, 0x62145246
or eax, 0x1deaa5b9
mov r9b, 0x10
cmp eax, 0xe4da55b9
jae case.0x14008bd2f.16
jmp 0x14008ba80
mov eax, dword [0x141f3b858]
sub eax, dword [0x141f3b85c]
imul eax, eax, 0x15c1c02
pop rsp
add dword [0x1b70c4e9b], eax
pop rsp
add dword [0x1b70c4e9b], eax
or eax, 0xc2d13b57
mov r9b, 0xe
cmp eax, 0xccdca38c
jb case.0x14008bd2f.14
jmp 0x14008ba80
mov eax, dword [0x141f3b850]
and eax, dword [0x141f3b854]
mov r9b, 0xb
cmp eax, 0x9312fbd3
je case.0x14008bd2f.11
jmp 0x14008ba80
mov eax, dword [0x141f3b840]
sub eax, dword [0x141f3b844]
or eax, 0x85a083dd
test dword [rcx - 0x4f], eax
add al, 0x3d
sbb byte [rdi], dl
adc al, bh
test dword [rcx - 0x4f], eax
add al, 0x3d
sbb byte [rdi], dl
adc al, bh
je case.0x14008bd2f.4
jmp 0x14008ba80
mov r9b, 0x18
mov al, 1
test al, al
je case.0x14008bd2f.24
jmp 0x14008ba80
mov eax, dword [0x141f3b838]
add eax, dword [0x141f3b83c]
and eax, 0x6d114b8e
add eax, 0x7898d209
mov edx, 0xd418ee99
imul rdx, rax
shr rdx, 0x3e
shr edx, 0x3e
shr edx, 0x3e
mov r9b, 1
cmp edx, 0x26b11b29
ja case.0x14008bd2f.1
jmp 0x14008ba80
mov eax, dword [0x141f3b898]
sub eax, dword [0x141f3b89c]
imul eax, eax, 0xd2d26dca
rcl dl, cl
rcl dl, cl
or eax, 0x2503a84b
imul eax, eax, 0x61bf0c52
mov r9b, 0x1f
cmp eax, 0xcef7e1f7
jae case.0x14008bd2f.31
jmp 0x14008ba80
mov eax, dword [0x141f3b868]
add eax, dword [0x141f3b86c]
imul rax, rax, 0x60e3c8cd
shr rax, 0x3e
imul eax, eax, 0x1277427a
xor eax, 0xc618069f
sbb dh, al
sbb dh, al
mov r9b, 0x11
cmp eax, 0xef837b58
ja case.0x14008bd2f.17
jmp 0x14008ba80
mov eax, dword [0x141f3b848]
imul eax, dword [0x141f3b84c]
imul rdx, rax, 0xa1c018b
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
invalid
add eax, 0x9074cb35
xor eax, 0x5ba5e60c
mov r9b, 6
cmp eax, 0xa0027c95
jb case.0x14008bd2f.6
invalid
jmp 0x14008ba80
mov eax, dword [0x141f3b870]
imul eax, dword [0x141f3b874]
add eax, 0x4e444dd2
xor rax, 0x12f9596f
xor rax, 0x12f9596f
imul eax, eax, 0x83ce9591
mov r9b, 0x12
cmp eax, 0xcad320cb
jb case.0x14008bd2f.18
jmp 0x14008ba80
mov eax, dword [0x141f3b8a0]
and eax, dword [0x141f3b8a4]
add eax, 0x8c533777
mov word [0x12fb86c06], cs
mov word [0x12fb86c06], cs
xor eax, 0x7e39bd87
mov r9b, 0x20
cmp eax, 0xe1cc8556
ja case.0x14008bd2f.32
jmp 0x14008ba80
mov eax, dword [0x141f3b880]
and eax, dword [0x141f3b884]
add eax, 0xa4ea344d
imul rax, rax, 0x68147fc7
shr rax, 0x3b
imul eax, eax, 0xdc2057e2
and ah, bl
and ah, bl
mov r9b, 0x16
cmp eax, 0x51849442
jb case.0x14008bd2f.22
jmp 0x14008ba80
mov eax, dword [0x141f3b8b8]
imul eax, dword [0x141f3b8bc]
xor eax, 0x932b883c
imul rax, rax, 0x6c6557c3
shr rax, 0x3d
imul eax, eax, 0x9c24e776
out 0x24, eax
pushfq
out 0x24, eax
pushfq
mov r9b, 0x27
cmp eax, 0x816ee02f
je case.0x14008bd2f.39
jmp 0x14008ba80
mov eax, dword [0x141f3b878]
xor eax, dword [0x141f3b87c]
add eax, 0x1709675d
invalid
or eax, 0xf6618feb
imul eax, eax, 0x9cebbec8
mov r9b, 0x13
cmp eax, 0xc4517b60
jae case.0x14008bd2f.19
invalid
jmp 0x14008ba80
mov eax, dword [0x141f3b888]
imul eax, dword [0x141f3b88c]
add eax, 0x7a03e124
and al, 0xe1
add edi, dword [rdx + 0xd]
iretd
invalid
invalid
mov dh, 0x41
mov cl, 0x17
and al, 0xe1
add edi, dword [rdx + 0xd]
iretd
mov dh, 0x41
mov cl, 0x17
cmp eax, 0xcb08cfb4
jb case.0x14008bd2f.23
retf
jmp 0x14008ba80
mov r9b, 0x25
jmp 0x14008ba80
mov r9b, 0x21
jmp 0x14008ba80
mov r9b, 0xc
jmp 0x14008ba80
mov r9b, 0x28
jmp 0x14008ba80
mov r9b, 9
jmp 0x14008ba80
mov r9b, 0x19
jmp 0x14008ba80
mov r9b, 2
jmp 0x14008ba80
mov r9b, 0xf
jmp 0x14008ba80
mov r9b, 3
jmp 0x14008ba80
mov r9b, 7
jmp 0x14008ba80
mov r9b, 0x29
jmp 0x14008ba80
mov r9b, 5
jmp 0x14008ba80
mov r9b, 0xd
jmp 0x14008ba80
mov r9b, 0x14
jmp 0x14008ba80
mov r9b, 0x15
jmp 0x14008ba80
mov r9b, 8
jmp 0x14008ba80
mov r9b, 0xa
jmp 0x14008ba80
mov r9b, 0x1e
jmp 0x14008ba80
mov r9b, 0x1c
jmp 0x14008ba80
mov r9b, 0x1d
jmp 0x14008ba80
mov r9b, 0x26
jmp 0x14008ba80
mov r9b, 0x1a
jmp 0x14008ba80
mov eax, dword [0x141f3b818]
or eax, dword [0x141f3b81c]
or eax, 0x5244b058
xor eax, 0x4c3040
or eax, 0xadb34386
mov byte [0x141f49010], 0
cmp eax, 0xc888426b
jae 0x14008c1c2
mov byte [0x141f49010], 0
jmp 0x14008c190
movabs rax, 0x600000000
cmp r8, rax
je 0x14008b96d
jmp 0x14008c269
mov eax, dword [0x141f3b820]
add eax, dword [0x141f3b824]
xor eax, 0x3221e2da
imul eax, eax, 0xd5181a87
xor eax, 0x3cb34115
cmp eax, 0x49daf69c
jb 0x14008c1e0
test rsi, rsi
je case.0x14008c478.0
xor edi, edi
mov r14d, 0
cmp r12, rsi
jae 0x14008c3c7
jmp 0x14008b609
mov eax, dword [0x141f3b958]
or eax, dword [0x141f3b95c]
and eax, 0x7da90c42
add eax, 0x7b4e2303
imul rax, rax, 0x2cef40a1
shr rax, 0x3d
cmp eax, 0x3f99d1dd
ja case.default.0x14008bac6
jmp 0x14008b609
lea r14, [0x141f25770]
jmp 0x14008c269
mov r14, rcx
mov eax, dword [0x141f3b8c0]
xor edx, edx
div dword [0x141f3b8c4]
nop word [rax + rax]
mov eax, dword [0x141f3b8c8]
add eax, dword [0x141f3b8cc]
and eax, 0x6888e97a
add eax, 0xf462216b
imul rax, rax, 0x26292b27
shr rax, 0x38
cmp eax, 0xabfc06a1
je 0x14008c280
test rsi, rsi
je 0x14008c3d0
nop word cs:[rax + rax]
mov eax, dword [0x141f3b8d0]
xor eax, dword [0x141f3b8d4]
or eax, 0x50444290
and eax, 0x724c42b4
imul eax, eax, 0x56d7b21a
cmp eax, 0x38c5ede8
je 0x14008c2c0
mov rdi, qword [0x141f49008]
nop word [rax + rax]
mov eax, dword [str.V02b]
sub eax, dword [0x141f3b8dc]
add eax, 0xbeafb51
and eax, 0xae2d3dea
cmp eax, 0xcce715c0
je 0x14008c2f0
nop dword [rax]
mov eax, dword [0x141f3b8e0]
and eax, dword [0x141f3b8e4]
add eax, 0x7d1189bb
and eax, 0xc63437db
cmp eax, 0x784d7b25
jb 0x14008c310
cmp rdi, rsi
jb 0x14008c365
mov eax, dword [0x141f3b900]
and eax, dword [0x141f3b904]
imul eax, eax, 0xc78867f2
imul rax, rax, 0x89a024f
shr rax, 0x3a
imul eax, eax, 0x31bbbe53
cmp eax, 0x8221aaca
jbe 0x14008c53d
jmp 0x14008c56a
mov eax, dword [0x141f3b8e8]
xor eax, dword [0x141f3b8ec]
add eax, 0xce2729f6
imul rax, rax, 0x5ff0da99
shr rax, 0x3e
cmp eax, 0xded4c8b2
jbe 0x14008c38a
ud2
mov eax, dword [0x141f3b8f0]
xor eax, dword [0x141f3b8f4]
imul eax, eax, 0x79377e60
ud2
mov eax, dword [0x141f3b8f8]
add eax, 0x1eaf54d
or eax, dword [0x141f3b8fc]
and eax, 0x1104401a
add eax, 0xa7ffc9a6
cmp eax, 0xf80cf2bb
ja 0x14008c3a5
jmp 0x14008b609
mov qword [0x141f49008], rdi
nop
mov eax, dword [0x141f3b9a8]
or eax, dword [str.hgCE]
imul eax, eax, 0x13f424a8
add eax, 0x8294a492
cmp eax, 0xf0b4f1cc
ja 0x14008c3d0
test r14, r14
je case.0x14008c478.0
nop word [rax + rax]
mov eax, dword [0x141f3b9b0]
or eax, dword [0x141f3b9b4]
or eax, 0x3907e801
imul eax, eax, 0x3c164e66
and eax, 0xc83e6922
cmp eax, 0x22f8fa1b
je 0x14008c400
nop word cs:[rax + rax]
mov eax, dword [0x141f3b9b8]
xor edx, edx
div dword [0x141f3b9bc]
add eax, 0x94d2a920
and eax, 0xcad1af86
xor eax, 0x32a78481
cmp eax, 0x3ab4214d
jb 0x14008c430
cmc
invalid
mov eax, r14d
and eax, 3
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x14008c460
cmp rax, 3
ja case.default.0x14008c478
lea rcx, [0x141f268e4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rsi, [r14 - 1]
mov rdi, qword [r14 - 1]
nop word cs:[rax + rax]
mov eax, dword [0x141f3b9d0]
or eax, dword [0x141f3b9d4]
imul eax, eax, 0x1a1b8a4e
add eax, 0x2548246c
and eax, 0x65a93f72
cmp eax, 0xf31439f1
ja 0x14008c490
mov rbx, qword [r14 + 7]
mov r14, qword [rbx]
test r14, r14
je 0x14008c6e7
mov eax, dword [0x141f3b9d8]
sub eax, dword [0x141f3b9dc]
add eax, 0x589308c0
cmp eax, 0xe10cf783
jbe 0x14008c6b2
jmp 0x14008c6d7
mov eax, dword [0x141f3b9c0]
or eax, dword [0x141f3b9c4]
or eax, 0xb3cde398
imul eax, eax, 0x4d04452b
cmp eax, 0x4e1e08dd
je case.default.0x14008c478
jmp 0x14008b609
mov eax, 0xb71535cb
nop dword [rax]
mov ecx, dword [0x141f3b9c8]
sub ecx, dword [0x141f3b9cc]
or ecx, 0xc2e1e072
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x51cf8a5f
cmp ecx, 0xa653dd43
ja 0x14008c510
jmp case.0x14008c478.0
mov eax, dword [0x141f3b908]
or eax, dword [0x141f3b90c]
add eax, 0xa8430b10
or eax, 0x28169139
add eax, 0xf6921d4
mov qword [0x141f49008], 0
cmp eax, 0xad4013a1
jae 0x14008c577
mov qword [0x141f49008], 0
jmp 0x14008c53d
xor eax, eax
nop dword [rax]
test al, al
jne 0x14008c580
mov ecx, 0xf10c3a23
nop dword [rax]
mov eax, dword [0x141f3b910]
xor edx, edx
div dword [0x141f3b914]
imul rax, rcx
shr rax, 0x3e
or eax, 0xfa94987c
imul rax, rax, 0xc7d9057
shr rax, 0x3b
cmp eax, 0x91a3f172
ja 0x14008c590
sub rdi, rsi
je 0x14008c3d0
nop word cs:[rax + rax]
mov eax, dword [0x141f3b918]
imul eax, dword [0x141f3b91c]
add eax, 0xb46721c0
or eax, 0x1fa607d6
and eax, 0x9fae27fe
cmp eax, 0x925e70f6
jb 0x14008c5d0
mov rbx, qword [0x141f49000]
add rsi, rbx
mov eax, dword [0x141f3b920]
xor edx, edx
div dword [0x141f3b924]
add eax, 0x7aa054aa
or eax, 0xc8891000
and eax, 0xf999108c
cmp eax, 0x80fb2101
je 0x14008c66a
mov eax, dword [0x141f3b928]
sub eax, dword [0x141f3b92c]
mov ecx, 0x92678b29
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0xda542570
imul r15, rax, 0x3945266d
shr r15, 0x3d
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
cmp r15d, 0x56776b4f
jne 0x14008c690
sub rsp, 0x20
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
jmp 0x14008c621
mov eax, dword [0x141f3b930]
or eax, dword [0x141f3b934]
add eax, 0xc134429c
and eax, 0xb250fde
cmp eax, 0xd386365b
jae 0x14008c690
jmp 0x14008c3c7
mov r15d, dword [0x141f3b9e0]
and r15d, dword [0x141f3b9e4]
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
cmp r15d, 0x29d86887
jne 0x14008c6e7
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
jmp 0x14008c6b2
mov eax, dword [0x141f3b9e8]
xor edx, edx
div dword [0x141f3b9ec]
nop word cs:[rax + rax]
mov eax, dword [0x141f3b9f0]
xor eax, dword [0x141f3b9f4]
and eax, 0x1d7da3ab
xor eax, 0x1a52aad0
imul eax, eax, 0xbe070d1e
cmp eax, 0x13b8a2e0
jb 0x14008c700
cmp qword [rbx + 8], 0
je 0x14008c7cf
mov rax, qword [rbx + 0x10]
nop word cs:[rax + rax]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov ecx, dword [0x141f3b9f8]
add ecx, dword [0x141f3b9fc]
imul ecx, ecx, 0x712678f
add ecx, 0x92e20e44
and ecx, 0xef5410ca
cmp ecx, 0x1d352289
jb 0x14008c740
cmp rax, 0x11
jb 0x14008c7b5
mov eax, dword [0x141f3ba00]
xor eax, dword [0x141f3ba04]
or eax, 0xdbe7ff67
cmp eax, 0xa5d491a7
je 0x14008c76c
mov rdi, qword [rdi - 8]
mov eax, 0xc36e6c37
mov ecx, dword [0x141f3ba08]
and ecx, dword [0x141f3ba0c]
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0x910d0211
or ecx, 0xcf011ec
cmp ecx, 0x78fc1c6a
jb 0x14008c78d
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141f3ba10]
xor edx, edx
div dword [0x141f3ba14]
or eax, 0x3ef7dfee
cmp eax, 0x88c97e9c
je 0x14008c7f0
nop word [rax + rax]
mov eax, dword [0x141f3ba18]
or eax, dword [0x141f3ba1c]
and eax, 0x3cd5f2ff
add eax, 0x90addc5f
shr eax, 1
imul rax, rax, 0x40cf4675
shr rax, 0x3d
cmp eax, 0x837129fb
ja case.0x14008c478.0
mov rax, qword [0x141f48ff8]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x14008c850
nop word cs:[rax + rax]
mov ecx, dword [0x141f3ba20]
and ecx, dword [0x141f3ba24]
or ecx, 0x10124202
and ecx, 0x129263a2
cmp ecx, 0xafa38810
je 0x14008c860
test rax, rax
je 0x14008c8a3
mov r8, qword [0x141f49000]
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov qword [0x141f48ff8], 0
mov qword [0x141f49000], 1
mov qword [0x141f49008], 0
mov qword [0x141f4900e], 0
inc qword [0x141f48ff0]
mov eax, dword [0x141f48fe8]
dec eax
mov dword [0x141f48fe8], eax
nop word cs:[rax + rax]
mov ecx, dword [0x141f3ba28]
sub ecx, dword [0x141f3ba2c]
imul ecx, ecx, 0xbeb42cf8
cmp ecx, 0xd6d7ea9d
je 0x14008c8f0
nop word [rax + rax]
mov ecx, dword [0x141f3ba30]
sub ecx, dword [0x141f3ba34]
imul ecx, ecx, 0xaec9f8c7
add ecx, 0xabf8efa
cmp ecx, 0xe74348b9
ja 0x14008c910
test eax, eax
jne 0x14008af80
mov qword [0x141f48fe0], 0
xor eax, eax
xchg byte [0x141f48fec], al
cmp al, 2
jne 0x14008af80
sub rsp, 0x20
lea rcx, [0x141f48fec]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
jmp 0x14008af80
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov rdi, r9
mov rbx, r8
mov rsi, rcx
mov r15d, dword [rcx]
test dl, dl
je 0x14010098b
mov r12d, 0x8f2197bb
lea r10, [rsp + 0x2c]
mov rbp, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, 0x874c9c15
nop dword [rax]
mov eax, dword [0x141f3b5a0]
xor edx, edx
div dword [0x141f3b5a4]
mov eax, dword [0x141f3b5a8]
xor eax, dword [0x141f3b5ac]
xor eax, 0x7b9d2b74
imul eax, eax, 0xca66101d
cmp eax, 0x510c499
je 0x14010061e
mov ecx, r15d
and ecx, 3
mov edx, r15d
and edx, 4
cmp ecx, 2
jae 0x140100730
mov eax, dword [0x141f3b5f0]
imul eax, dword [0x141f3b5f4]
and eax, 0x756455f1
add eax, 0xb832c61d
cmp eax, 0x27e74978
jae 0x140100680
mov r8d, edx
or r8d, 2
mov eax, r15d
lock cmpxchg dword [rsi], r8d
nop
mov r9d, dword [0x141f3b5f8]
and r9d, dword [0x141f3b5fc]
xor r9d, 0x42080046
and r9d, 0x6e29005e
add r9d, 0x5ff3fc72
mov r8d, edx
or r8d, 2
mov eax, r15d
lock cmpxchg dword [rsi], r8d
sete r8b
cmp r9d, 0x202a7c3
jb 0x140100680
mov edx, dword [0x141f3b600]
mov r9d, dword [0x141f3b604]
add edx, r9d
add edx, 0x30bd31b9
and edx, 0xc898d1
add edx, 0xe6fee4d2
cmp edx, 0xe2dfa460
jb 0x1401006bf
nop dword [rax]
mov edx, dword [0x141f3b608]
and edx, dword [0x141f3b60c]
and edx, 0x570156f3
imul edx, edx, 0xfc94a0db
shr edx, 1
imul rdx, rdx, 0x829cd2d
shr rdx, 0x3a
cmp edx, 0x3557fdaf
ja 0x1401006f0
test r8b, r8b
je 0x140100900
jmp 0x140100960
jne 0x140100b54
nop word cs:[rax + rax]
mov eax, dword [0x141f3b5b0]
add eax, dword [0x141f3b5b4]
or eax, 0xa11bfc5d
add eax, 0x43f414f2
cmp eax, 0x34ba41c6
jb 0x140100740
test edx, edx
jne 0x1401007e3
nop word cs:[rax + rax]
mov eax, dword [0x141f3b5b8]
and eax, dword [0x141f3b5bc]
imul eax, eax, 0x6d32dc8a
or eax, 0x156ca77e
imul rax, r12
shr rax, 0x3f
cmp eax, 0x14a1e61c
ja 0x140100770
add r15d, 4
mov eax, 2
lock cmpxchg dword [rsi], r15d
sete cl
nop word [rax + rax]
mov edx, dword [0x141f3b5c0]
and edx, dword [0x141f3b5c4]
imul rdx, rdx, 0x3ae6e9cd
shr rdx, 0x3d
add edx, 0xe70c8c3b
xor edx, 0xdd5865d3
cmp edx, 0x392a4069
jb 0x1401007b0
test cl, cl
je 0x140100900
mov eax, dword [str._1dL]
add eax, dword [0x141f3b5cc]
imul eax, eax, 0xf9ba686f
or eax, 0xd9a80f1
add eax, 0x8cd60722
cmp eax, 0xd2589a41
ja 0x140100930
nop word [rax + rax]
mov eax, dword [0x141f3b5d0]
xor eax, dword [0x141f3b5d4]
and eax, 0x58401520
imul r14d, eax, 0x2378c656
mov dword [rsp + 0x2c], r15d
mov r8d, 4
mov rcx, rsi
mov rdx, r10
mov r9d, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
lea r10, [rsp + 0x2c]
cmp r14d, 0x5028eb82
jb 0x140100930
cmp eax, 1
je 0x1401008f5
mov eax, dword [0x141f3b5d8]
or eax, dword [0x141f3b5dc]
add eax, 0xe3c0c377
mov ecx, 0xd1288d8d
imul rax, rcx
shr rax, 0x3d
add eax, 0xa549ae09
cmp eax, 0xc9178c16
jbe 0x140100890
call rbp
nop dword [rax]
mov eax, dword [0x141f3b5e0]
xor edx, edx
div dword [0x141f3b5e4]
or eax, 0x65554c5
imul r14d, eax, 0x233085a6
add r14d, 0x7bb1e982
call rbp
cmp r14d, 0xba6ccf0a
jb 0x140100890
lea r10, [rsp + 0x2c]
nop word cs:[rax + rax]
mov eax, dword [0x141f3b5e8]
and eax, dword [0x141f3b5ec]
imul rax, r13
shr rax, 0x3c
add eax, 0x1d13ad7c
and eax, 0x1d12a520
cmp eax, 0xc14cdc75
je 0x1401008d0
mov eax, dword [rsi]
nop word [rax + rax]
mov ecx, dword [0x141f3b610]
mov edx, dword [0x141f3b614]
add ecx, edx
add ecx, 0xce108f68
cmp ecx, 0xe54ab3c8
jae 0x140100900
mov r15d, eax
jmp 0x140100610
mov dword [rsp + 0x2c], r15d
mov r8d, 4
mov rcx, rsi
mov rdx, r10
mov r9d, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
lea r10, [rsp + 0x2c]
jmp 0x140100810
mov eax, dword [0x141f3b630]
mov edx, dword [0x141f3b634]
add eax, edx
add eax, 0x4206323b
or eax, 0xebe6ff7b
cmp ecx, 1
sete bpl
cmp eax, 0x8398a03b
je 0x140100960
jmp 0x140100b2c
xor ebp, ebp
lea r12, [0x141f26810]
mov r13, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
test bpl, bpl
jne 0x1401009b0
mov eax, r15d
and eax, 3
mov ecx, r15d
and ecx, 4
mov eax, eax
movsxd rax, dword [r12 + rax*4]
add rax, r12
jmp rax
or ecx, 2
mov eax, r15d
lock cmpxchg dword [rsi], ecx
sete cl
mov r15d, eax
mov eax, dword [0x141f3b620]
xor eax, dword [0x141f3b624]
and eax, 0x15f9cb08
imul eax, eax, 0x1e2a2a6b
cmp eax, 0xb0cdefdf
je 0x1401009dc
test cl, cl
je 0x1401009b0
jmp 0x140100b2a
mov eax, dword [0x141f3b658]
or eax, dword [0x141f3b65c]
imul eax, eax, 0x8493fd37
add eax, 0xebabd65
cmp eax, 0x5ebf0905
jb case.0x1401009ca.2
test ecx, ecx
jne 0x140100a3c
test bpl, bpl
je 0x140100a41
jmp 0x140100b18
mov ecx, r15d
jmp 0x140100a8a
lea ecx, [r15 + 4]
mov eax, 2
lock cmpxchg dword [rsi], ecx
sete dl
test bpl, bpl
jne 0x140100b18
mov r8d, dword [0x141f3b660]
or r8d, dword [0x141f3b664]
and r8d, 0xad0d9470
imul r8d, r8d, 0x87bc6ed4
cmp r8d, 0xf86be8f2
je 0x140100a5a
mov r15d, eax
test dl, dl
je 0x1401009b0
mov dword [rsp + 0x2c], ecx
mov r8d, 4
mov rcx, rsi
lea rdx, [rsp + 0x2c]
mov r9d, 0xffffffff
call r13
cmp eax, 1
je 0x140100af8
mov eax, dword [0x141f3b668]
xor eax, dword [0x141f3b66c]
or eax, 0xea39cb1a
imul eax, eax, 0xed6fe879
add eax, 0xacd1e72a
cmp eax, 0x4f90213c
jae 0x140100ad0
call r14
mov r15d, dword [0x141f3b670]
xor r15d, dword [0x141f3b674]
or r15d, 0x4b00c02
and r15d, 0x4b00c92
call r14
cmp r15d, 0x51363fd0
ja 0x140100ad0
mov r15d, dword [rsi]
nop dword [rax + rax]
mov eax, dword [0x141f3b678]
or eax, dword [0x141f3b67c]
cmp eax, 0x5d730016
je 0x140100b00
jmp 0x1401009b0
lea ecx, [r15 + 4]
mov eax, 2
lock cmpxchg dword [rsi], ecx
jmp 0x140100a41
xor ebp, ebp
mov eax, dword [0x141f3b638]
imul eax, dword [0x141f3b63c]
or eax, 0x8522438b
add eax, 0x2e501e6f
xor eax, 0x59ffb1e0
cmp eax, 0x2558bba9
jae 0x140100baf
jmp 0x140100bed
cmp ecx, 3
je case.0x1401009ca.3
mov eax, 0xba4f38f3
mov ecx, dword [0x141f3b618]
sub ecx, dword [0x141f3b61c]
or ecx, 0x442e792a
xor ecx, 0x8617a8cc
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xca6ec579
ja 0x140100b62
jmp 0x140100bad
ud2
ud2
mov eax, dword [0x141f3b640]
mov ecx, dword [0x141f3b644]
lea r14d, [rax + rcx]
add r14d, 0x76369e62
mov dword [rsp + 0x30], 3
mov byte [rsp + 0x34], bpl
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [rdi + 0x20]
mov eax, dword [rsp + 0x30]
xchg dword [rsi], eax
cmp r14d, 0x46f498f2
jae 0x140100c0d
mov dword [rsp + 0x30], 3
mov byte [rsp + 0x34], bpl
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [rdi + 0x20]
mov eax, dword [rsp + 0x30]
xchg dword [rsi], eax
jmp 0x140100baf
test al, 4
je case.0x1401009ca.3
mov eax, dword [0x141f3b648]
add eax, dword [0x141f3b64c]
or eax, 0xf6b5fc7f
and eax, 0xfefdfcff
cmp eax, 0xd1897c40
jae 0x140100c37
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressAll]
mov rdi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressAll]
nop
mov ebx, dword [0x141f3b650]
and ebx, dword [0x141f3b654]
add ebx, 0xa9eb10e2
xor ebx, 0x21030701
and ebx, 0x31bf1f89
mov rcx, rsi
call rdi
cmp ebx, 0xf153e8e4
ja 0x140100c40
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret