Function at 0x14007b7a0
Capabilities:
Encode data using base64
Encode data using xor
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1b8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x120], xmm8
movdqa xmmword [rbp + 0x110], xmm7
movaps xmmword [rbp + 0x100], xmm6
and rsp, 0xffffffffffffff80
mov rbx, rsp
mov r8, rdx
mov eax, dword [0x141dcd6f8]
imul eax, dword [0x141dcd6fc]
add eax, 0x111bf99d
xor eax, 0xb883c192
add eax, 0xec67dbec
cmp eax, 0x8c2013a1
jbe 0x14007b80d
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0xe8], rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dcd700]
add eax, dword [0x141dcd704]
imul eax, eax, 0xbe71b4a5
or eax, 0x2c7aa63e
imul ecx, eax, 0x82bc8040
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x4747b35f
je 0x14007b820
mov qword [rbx + 0x128], rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x130], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x168], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x138], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x108], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x140], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov r13, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x110], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r11, rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x98], rsp
mov eax, 0x30
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0xa0], rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x118], rsp
mov eax, 0x180
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
and rax, 0xffffffffffffff80
mov qword [rbx + 0x178], rax
mov rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0xb8], rsp
mov eax, 0x70
call fcn.1400f07c0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x158], rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov qword [rbx + 0x150], rsp
mov eax, dword [0x141dcd708]
xor edx, edx
div dword [0x141dcd70c]
add eax, 0xa1471613
and eax, 0x98480a08
cmp eax, 0x2935c22f
je 0x14007ba47
mov eax, dword [0x141dcd710]
xor edx, edx
div dword [0x141dcd714]
add eax, 0x5f116eaf
mov ecx, 0xe2003c93
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x309da432
mov eax, 0x60
call fcn.1400f07c0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov r14, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x19bb8525
jae 0x14007ba80
mov eax, 0x60
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x20
call fcn.1400f07c0
sub rsp, rax
jmp 0x14007b9d9
mov qword [rbx + 0x90], rax
mov qword [rbx + 0xf8], r14
mov qword [rbx + 0xd8], r9
mov qword [rbx + 0xc0], rdx
mov qword [rbx + 0x88], r8
mov r14, qword [r8 + 0x10]
test r14, r14
mov qword [rbx + 0x148], r10
mov qword [rbx + 0x100], r11
jne 0x14007cf50
nop
mov eax, dword [0x141dcd718]
imul eax, dword [0x141dcd71c]
imul eax, eax, 0x5efa709f
or eax, 0xd9bb60ad
cmp eax, 0xfa515b57
je 0x14007bac0
sub rsp, 0x20
lea rdx, [0x141dba4d0]
mov r8d, 0x11
mov rcx, rdi
call fcn.140090a00
add rsp, 0x20
mov rcx, qword [rdi]
movabs rax, 0x8000000000000001
lea r12, [rax - 1]
nop dword [rax]
mov eax, dword [0x141dcd720]
xor eax, dword [0x141dcd724]
imul eax, eax, 0xcad42928
add eax, 0x24537a2b
cmp eax, 0xb2bff510
ja 0x14007bb10
cmp rcx, r12
jne 0x14007bba7
nop word cs:[rax + rax]
mov eax, dword [0x141dcd728]
add eax, dword [0x141dcd72c]
imul rax, rax, 0xd6818c9
shr rax, 0x3a
and eax, 0xfffffffe
xor eax, 0x7eb2a86a
cmp eax, 0x82773cd2
ja 0x14007bb40
nop word cs:[rax + rax]
mov eax, dword [0x141dcd730]
xor eax, dword [0x141dcd734]
xor eax, 0xe7370985
imul rcx, rax, 0xd7bf2a7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul eax, eax, 0xa55f1da6
cmp eax, 0xbc256ad1
jbe 0x14007bb70
jmp 0x14007c61e
mov r15, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
cmp byte [rdi + 0x18], 0
mov qword [rbx + 0x70], r13
mov qword [rbx + 0x78], r12
mov qword [rbx + 0x80], rcx
je 0x14007bca7
nop dword [rax + rax]
mov eax, dword [0x141dcd790]
add eax, dword [0x141dcd794]
imul eax, eax, 0xc16ef364
and eax, 0x20c6c1ac
add eax, 0x4adf1a52
cmp eax, 0x7dc56155
ja 0x14007bbd0
nop word cs:[rax + rax]
mov eax, dword [0x141dcd798]
sub eax, dword [0x141dcd79c]
imul eax, eax, 0xc78ecbd8
cmp eax, 0x5b472a8b
je 0x14007bc00
nop dword [rax]
mov eax, dword [0x141dcd7a0]
sub eax, dword [0x141dcd7a4]
add eax, 0x2fe32cd5
and eax, 0xe1fc159f
add eax, 0xacacbc2d
cmp eax, 0xbb7fa91b
ja 0x14007bc20
test r8, r8
je 0x14007c4e8
cmp r8, 1
jne 0x14007bec8
nop word cs:[rax + rax]
mov eax, dword [0x141dcd7a8]
sub eax, dword [0x141dcd7ac]
and eax, 0xe0d305c
imul eax, eax, 0x6260b88b
or eax, 0xcaf142ea
cmp eax, 0x3534ba87
je 0x14007bc60
movzx eax, byte [r15]
cmp eax, 0x2b
je 0x14007c4e8
mov r8d, 1
mov r9, r15
cmp eax, 0x2d
je 0x14007c4e8
jmp 0x14007c10a
test r8, r8
je 0x14007c4b6
lea r9, [r15 + r8]
xor r10d, r10d
mov r11, r15
jmp 0x14007bcd0
mov r11, rax
cmp r11, r9
je 0x14007bbd0
nop dword [rax + rax]
mov eax, dword [0x141dcd740]
or eax, dword [0x141dcd744]
xor eax, 0x4020c000
and eax, 0xd1e7f7ae
cmp eax, 0x7e6adde
jb 0x14007bcd0
lea rax, [r11 + 1]
movzx edx, byte [r11]
test dl, dl
jns 0x14007bcbc
nop dword [rax]
mov edi, dword [0x141dcd748]
sub edi, dword [0x141dcd74c]
imul edi, edi, 0x1f750daa
imul rdi, rdi, 0x1be1ae73
shr rdi, 0x3c
or edi, 0x11412b60
cmp edi, 0x7550a8a4
ja 0x14007bd00
cmp dl, 0xe0
jae 0x14007bdd0
nop word cs:[rax + rax]
mov edx, dword [0x141dcd758]
xor edx, dword [0x141dcd75c]
imul rdx, rdx, 0x141a633d
shr rdx, 0x3c
or edx, 0xa2863bac
cmp edx, 0x43939401
je 0x14007bd40
nop word cs:[rax + rax]
mov edi, dword [0x141dcd760]
imul edi, dword [0x141dcd764]
add edi, 0x9e164341
lea rdx, [r11 + 2]
cmp rax, r9
cmove rdx, rax
cmp edi, 0xb6046c6b
jb 0x14007bd70
nop word cs:[rax + rax]
mov eax, dword [0x141dcd768]
xor eax, dword [0x141dcd76c]
and eax, 0xb31e9889
imul eax, eax, 0x24140a79
cmp eax, 0xbf9142b6
jae 0x14007bda0
mov r11, rdx
jmp 0x14007bcbf
mov edi, dword [0x141dcd750]
xor edi, dword [0x141dcd754]
and edi, 0xf800c0b4
cmp edi, 0x7c143ab2
je 0x14007bdd0
cmp dl, 0xed
jne 0x14007be42
cmp rax, r9
je 0x14007bbd0
lea rax, [r11 + 2]
cmp rax, r9
je 0x14007bbd0
mov eax, dword [0x141dcd778]
or eax, dword [0x141dcd77c]
imul eax, eax, 0x9889c68b
or eax, 0xf6e66f2e
cmp eax, 0x4f6a7eeb
jb 0x14007be05
movzx eax, byte [r11 + 1]
add r11, 3
nop dword [rax]
test r10b, r10b
jne 0x14007be30
cmp al, 0x9f
jbe 0x14007bcbf
jmp 0x14007ccf7
add r11, 2
cmp rax, r9
mov rdi, r11
cmove rdi, rax
xor r11d, r11d
cmp rdi, r9
setne r11b
add r11, rdi
nop dword [rax]
mov eax, dword [0x141dcd770]
sub eax, dword [0x141dcd774]
xor eax, 0x3e5f2e7
imul eax, eax, 0xa683fcaa
and eax, 0x719d48f2
cmp eax, 0x35bf4088
ja 0x14007be60
cmp dl, 0xf0
jb 0x14007bcbf
mov eax, dword [0x141dcd780]
xor edx, edx
div dword [0x141dcd784]
mov eax, dword [0x141dcd788]
imul eax, dword [0x141dcd78c]
or eax, 0xdde39ff7
and eax, 0xfde7bff7
cmp eax, 0xa923efc9
je 0x14007be9a
xor eax, eax
cmp r11, r9
setne al
add r11, rax
jmp 0x14007bcbf
movzx r9d, byte [r15]
mov eax, dword [0x141dcd7b8]
xor edx, edx
div dword [0x141dcd7bc]
nop word [rax + rax]
mov eax, dword [0x141dcd7c0]
and eax, dword [0x141dcd7c4]
xor eax, 0x6b0a9e43
imul eax, eax, 0x6eecbcd7
xor eax, 0xaaa9178f
cmp eax, 0x3035de31
jb 0x14007bee0
cmp r9b, 0x2b
jne 0x14007c0e0
lea r9, [r15 + 1]
lea rax, [r8 - 1]
nop word cs:[rax + rax]
mov edx, dword [0x141dcd7c8]
or edx, dword [0x141dcd7cc]
imul r10, rdx, 0x18cf610b
shr r10, 0x20
sub edx, r10d
shr edx, 1
add edx, r10d
shr edx, 0x1f
or edx, 0xdfffbbfe
cmp edx, 0x8000d5bd
jb 0x14007bf20
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x14007bf60
cmp r8, 0x12
mov r8, rax
jb 0x14007c10a
mov eax, 0xcc50be4f
nop word cs:[rax + rax]
mov edx, dword [0x141dcd7d0]
and edx, dword [0x141dcd7d4]
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0xc208bb47
je 0x14007bf80
xor r10d, r10d
mov r11d, 0xaa784921
mov edi, 0xa
mov r12d, 0xb7cc669b
xor r14d, r14d
nop word cs:[rax + rax]
mov eax, dword [0x141dcd7d8]
xor eax, dword [0x141dcd7dc]
imul eax, eax, 0xaf4bcc70
add eax, 0x2010919c
cmp eax, 0x996cc74
jb 0x14007bfc0
test r8, r8
je 0x14007c1b4
mov eax, dword [0x141dcd7e0]
xor edx, edx
div dword [0x141dcd7e4]
mov eax, dword [0x141dcd7e8]
or eax, dword [0x141dcd7ec]
imul ecx, eax, 0xf0fd524b
add ecx, 0xd2bf8ac0
imul rcx, r11
shr rcx, 0x3e
mov rax, r14
mul rdi
seto r13b
cmp ecx, 0x911a5a3d
ja 0x14007bff5
movzx edx, byte [r9]
add edx, 0xffffffd0
cmp edx, 9
ja 0x14007c4e8
inc r9
dec r8
mov ecx, dword [0x141dcd7f0]
or ecx, dword [0x141dcd7f4]
xor ecx, 0x17682c78
add ecx, 0x43e2cb7b
or ecx, 0xa1a882f4
cmp ecx, 0xb312af26
je 0x14007c03d
nop word cs:[rax + rax]
test r10b, r10b
jne 0x14007c070
test r13b, r13b
jne 0x14007c4e8
nop
mov ecx, dword [0x141dcd7f8]
xor ecx, dword [0x141dcd7fc]
or ecx, 0x9ff4afe6
and ecx, 0x9ffeeff6
cmp ecx, 0xecffe291
ja 0x14007c080
mov ecx, edx
mov r14, rax
add r14, rcx
setb al
mov ecx, dword [0x141dcd800]
imul ecx, dword [0x141dcd804]
add ecx, 0x854080a8
imul rcx, r12
shr rcx, 0x3f
cmp ecx, 0x7eea4c19
je 0x14007c0ab
test al, al
je 0x14007bfc0
jmp 0x14007c4e8
mov eax, dword [0x141dcd7b0]
or eax, dword [0x141dcd7b4]
xor eax, 0x83040b80
or eax, 0x2c79304a
cmp eax, 0x2dbeda8c
je 0x14007c0e0
mov r9, r15
cmp r8, 0x11
jae 0x14007bf71
xor eax, eax
mov edx, 0xa849eb9d
xor r14d, r14d
nop word cs:[rax + rax]
mov eax, 0xc774eebd
nop dword [rax + rax]
mov edx, dword [0x141dcd738]
or edx, dword [0x141dcd73c]
xor edx, 0x29112000
or edx, 0x926ecefe
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x8c8fa8e0
ja 0x14007c4c0
shl rcx, 1
test rcx, rcx
je 0x14007c61e
mov eax, dword [0x141dcd820]
and eax, dword [0x141dcd824]
cmp eax, 0xd99415a6
je 0x14007cd30
mov eax, dword [0x141dcd828]
xor eax, dword [0x141dcd82c]
mov rdi, qword [0x141ddc4e0]
cmp eax, 0xcd13c354
jne 0x14007cd39
mov rax, qword [0x141ddc4e0]
jmp 0x14007cd16
mov eax, dword [0x141dcd830]
or eax, dword [0x141dcd834]
imul eax, eax, 0xe06e23db
or eax, 0x40d13fd7
add eax, 0xe8e2aed
cmp eax, 0x6160e0de
ja 0x14007d549
jmp 0x14007d510
mov r14d, dword [0x141dcd838]
imul r14d, dword [0x141dcd83c]
or r14d, 0x6041d8a8
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0xf1bea207
jne 0x14007c61e
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14007d510