Function at 0x140079450
Capabilities:
Encode data using base64
Encode data using xor
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xa0], xmm8
movdqa xmmword [rbp + 0x90], xmm7
movaps xmmword [rbp + 0x80], xmm6
and rsp, 0xffffffffffffff80
mov rbx, rsp
mov qword [rbx + 0x38], rdx
mov qword [rbx + 0xb8], rcx
xor eax, eax
test al, al
je 0x140079540
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
nop dword [rax + rax]
mov eax, dword [0x141dccb28]
imul eax, dword [str.ye_bV]
and eax, 0x1000ccf0
imul eax, eax, 0x208487b1
mov dword [rbx + 0x68], eax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r10, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rcx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov rsi, rsp
cmp dword [rbx + 0x68], 0x248b2ff7
jb 0x140079540
mov qword [rbx + 0x70], rcx
mov qword [rbx + 0xb0], r13
mov qword [rbx + 0xa8], rdi
mov qword [rbx + 0xd0], r11
mov qword [rbx], r15
mov qword [rbx + 0x20], r14
mov eax, dword [0x141dccb30]
sub eax, dword [0x141dccb34]
add eax, 0x1ee10ecb
imul rax, rax, 0x9106dc7
shr rax, 0x3a
cmp eax, 0xcb695882
jne 0x14007969c
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x180
call fcn.1400ef3b0
sub rsp, rax
mov rax, rsp
and rax, 0xffffffffffffff80
mov rsp, rax
xor ecx, ecx
nop
mov eax, 0x30
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
mov eax, 0x180
call fcn.1400ef3b0
sub rsp, rax
mov rax, rsp
and rax, 0xffffffffffffff80
mov rsp, rax
test cl, cl
jne 0x1400796a0
mov qword [rbx + 0xc8], rdx
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x28], r14
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x98], r9
mov qword [rbx + 0xf8], rax
mov qword [rbx + 0x80], r8
mov eax, dword [0x141dccb38]
or eax, dword [0x141dccb3c]
or eax, 0x9a00ec1a
add eax, 0xccb85d31
cmp eax, 0x5d3cf79
jae 0x140079790
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x60
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
nop dword [rax + rax]
mov eax, dword [0x141dccb40]
and eax, dword [0x141dccb44]
imul rax, rax, 0x116d4067
shr rax, 0x3c
imul ecx, eax, 0x7a4ea878
add ecx, 0x8072d2f0
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r13, rsp
mov eax, 0x70
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x60
call fcn.1400ef3b0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rdx, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x42d122ce
jb 0x140079790
mov qword [rbx + 0x18], rax
mov qword [rbx + 0xd8], r9
mov qword [rbx + 0xe0], r12
mov qword [rbx + 0xa0], r14
mov qword [rbx + 0x68], r13
mov qword [rbx + 0xc0], r8
mov rax, qword [rbx + 0x38]
mov rax, qword [rax + 0x10]
movabs r12, 0x8000000000000000
mov r8, rax
test rax, rax
mov qword [rbx + 0x58], rdx
mov qword [rbx + 0x88], r10
mov qword [rbx + 0x60], r15
mov qword [rbx + 8], rsi
mov r13, qword [rbx + 0x10]
jne 0x14007a9af
mov eax, dword [0x141dccb48]
xor edx, edx
div dword [0x141dccb4c]
imul eax, eax, 0xca145ec3
or eax, 0x64850
and eax, 0x1126697a
cmp eax, 0x1a7dcb54
jbe 0x1400798da
sub rsp, 0x20
lea rdx, [0x141db90d0]
mov r8d, 0x11
mov rcx, qword [rbx]
call fcn.14008f4d0
add rsp, 0x20
lea r15, [0x141db90d0]
mov rdi, qword [rbx + 0x20]
mov r14, qword [rbx]
nop dword [rax + rax]
mov eax, dword [0x141dccb50]
xor edx, edx
div dword [0x141dccb54]
mov esi, eax
or esi, 0xa140000
and esi, 0x2a9c0280
sub rsp, 0x20
mov r8d, 0x11
mov rcx, r14
mov rdx, r15
call fcn.14008f4d0
add rsp, 0x20
cmp esi, 0xd5f96b81
ja 0x1400798f0
mov eax, 0x93c0d02f
mov rdx, qword [rbx]
nop word cs:[rax + rax]
mov ecx, dword [0x141dccb58]
xor ecx, dword [0x141dccb5c]
or ecx, 0xfa8cd20e
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x6947525
cmp ecx, 0x5e61e11a
je 0x140079940
mov rcx, qword [rdx]
mov rsi, qword [rbx + 8]
nop
mov eax, dword [0x141dccb60]
sub eax, dword [0x141dccb64]
and eax, 0x706bc2aa
add eax, 0x88efcf83
cmp eax, 0xc62433b2
ja 0x140079970
cmp rcx, r12
jne 0x1400799c2
nop word cs:[rax + rax]
mov eax, dword [0x141dccb68]
and eax, dword [0x141dccb6c]
add eax, 0x9d8acfcf
and eax, 0xfb7a498a
cmp eax, 0xa668e706
je 0x1400799a0
jmp 0x14007a191
mov r8, qword [rdx + 8]
mov r14, qword [rdx + 0x10]
cmp byte [rdx + 0x18], 0
jne 0x140079cb0
nop word cs:[rax + rax]
mov eax, dword [0x141dccb70]
add eax, dword [0x141dccb74]
xor eax, 0x93563ae3
imul eax, eax, 0x2f0e9ca2
add eax, 0x7e2a5b3c
cmp eax, 0xa05254fa
ja 0x1400799e0
nop word cs:[rax + rax]
mov eax, dword [0x141dccb78]
imul eax, dword [0x141dccb7c]
xor eax, 0x8464011a
and eax, 0x866d213a
imul eax, eax, 0xc12bb4b4
cmp eax, 0x3a02c352
je 0x140079a10
lea r9, [r8 + r14]
nop dword [rax + rax]
mov eax, dword [0x141dccb80]
sub eax, dword [0x141dccb84]
and eax, 0x1c89d506
imul eax, eax, 0xfc4231f
cmp eax, 0x31d0e552
je 0x140079a40
test r14, r14
je 0x14007a11b
mov r10d, 0xfcfbe16b
mov r11, r8
lea rax, [r11 + 1]
movzx edx, byte [r11]
test dl, dl
js 0x140079a90
mov r11, rax
jmp 0x140079c80
mov esi, dword [0x141dccb90]
sub esi, dword [0x141dccb94]
and esi, 0x1700052
or esi, 0xfe0bdf81
imul rsi, rsi, 0x529f6f01
shr rsi, 0x3e
cmp esi, 0x3e973ef7
ja 0x140079a90
cmp dl, 0xe0
jae 0x140079b00
add r11, 2
cmp rax, r9
cmove r11, rax
nop dword [rax + rax]
mov eax, dword [0x141dccba8]
sub eax, dword [0x141dccbac]
xor eax, 0x582c3225
and eax, 0x59efb2af
xor eax, 0x4aec4420
cmp eax, 0x2496bdd0
jbe 0x140079ad0
mov rsi, qword [rbx + 8]
jmp 0x140079c80
mov esi, dword [0x141dccb98]
add esi, dword [0x141dccb9c]
or esi, 0x7c051202
and esi, 0x7c059242
cmp esi, 0xd65ef937
ja 0x140079b00
mov esi, dword [0x141dccba0]
add esi, dword [0x141dccba4]
imul rsi, r10
shr rsi, 0x3f
add esi, 0xf52d1753
cmp esi, 0x54dfc07
jb 0x140079b20
cmp dl, 0xed
jne 0x140079c00
mov rsi, qword [rbx + 8]
nop
mov edx, dword [0x141dccbb0]
or edx, dword [0x141dccbb4]
cmp edx, 0x2a2f04a5
je 0x140079b50
lea rdx, [r11 + 2]
cmp rdx, r9
sete dl
cmp rax, r9
sete al
or al, dl
nop word cs:[rax + rax]
mov edx, dword [0x141dccbb8]
imul edx, dword [0x141dccbbc]
or edx, 0xc90562af
imul edx, edx, 0x1f56f7d6
add edx, 0xc3c2aea8
cmp edx, 0x446179b
jb 0x140079b80
test al, al
jne 0x140079cb0
movzx eax, byte [r11 + 1]
add r11, 3
nop dword [rax + rax]
mov edx, dword [0x141dccbc8]
xor edx, dword [0x141dccbcc]
imul rsi, rdx, 0x2c02bf7
shr rsi, 0x20
sub edx, esi
shr edx, 1
add edx, esi
shr edx, 0x1d
or edx, 0xfefdedf3
cmp edx, 0x87fc9701
je 0x140079bc0
cmp al, 0x9f
mov rsi, qword [rbx + 8]
jbe 0x140079c80
jmp 0x14007a08e
mov esi, dword [0x141dccbc0]
and esi, dword [0x141dccbc4]
xor esi, 0x1319800
or esi, 0xf244461c
cmp esi, 0xec63a1e2
jb 0x140079c00
add r11, 2
cmp rax, r9
mov rsi, r11
cmove rsi, rax
xor r11d, r11d
cmp rsi, r9
setne r11b
add r11, rsi
cmp dl, 0xf0
jae 0x140079c46
mov rsi, qword [rbx + 8]
jmp 0x140079c80
mov rsi, qword [rbx + 8]
mov eax, dword [0x141dccbd0]
xor edx, edx
div dword [0x141dccbd4]
or eax, 0x3068c20
add eax, 0x8c62819e
and eax, 0x5581ba59
cmp eax, 0x315dfc82
ja 0x140079c4a
xor eax, eax
cmp r11, r9
setne al
add r11, rax
nop dword [rax]
mov eax, dword [0x141dccbd8]
imul eax, dword [0x141dccbdc]
imul eax, eax, 0x70ea8c93
add eax, 0x49dad229
cmp eax, 0x3809d657
jb 0x140079c80
cmp r11, r9
jne 0x140079a70
nop dword [rax + rax]
mov eax, dword [0x141dccbe0]
and eax, dword [0x141dccbe4]
or eax, 0x78efbfdb
cmp eax, 0xac9bce28
ja 0x140079cb0
test r14, r14
je 0x14007a160
cmp r14, 1
jne 0x140079d60
nop dword [rax + rax]
mov eax, dword [0x141dccbf8]
sub eax, dword [0x141dccbfc]
xor eax, 0xf255fbb7
add eax, 0x44cf9a52
cmp eax, 0x2d8656cd
ja 0x140079ce0
movzx eax, byte [r8]
mov edx, 0xa7b3809b
nop word cs:[rax + rax]
mov r9d, dword [0x141dccc00]
add r9d, dword [0x141dccc04]
imul r9d, r9d, 0xfb4c1292
add r9d, 0xc299837
imul r9, rdx
shr r9, 0x3f
cmp r9d, 0xea3688cb
je 0x140079d10
cmp eax, 0x2b
je 0x14007a160
mov r14d, 1
mov r9, r8
cmp eax, 0x2d
je 0x14007a160
jmp 0x140079ec5
mov eax, dword [0x141dccc10]
imul eax, dword [0x141dccc14]
imul eax, eax, 0x813ab2aa
add eax, 0xebdd045e
and eax, 0x90074d46
cmp eax, 0x71c73640
je 0x140079d60
movzx r9d, byte [r8]
mov eax, dword [0x141dccc18]
xor edx, edx
div dword [0x141dccc1c]
nop word cs:[rax + rax]
mov eax, dword [0x141dccc20]
or eax, dword [0x141dccc24]
imul eax, eax, 0x303ed5a8
add eax, 0x2dfbf6e0
cmp eax, 0xb3db9330
ja 0x140079da0
nop
mov eax, dword [0x141dccc28]
xor eax, dword [0x141dccc2c]
or eax, 0x9c2077db
imul eax, eax, 0x5de8fdd7
add eax, 0xcffa335
cmp eax, 0x2cad31ed
jb 0x140079dc0
cmp r9b, 0x2b
jne 0x140079e90
lea r9, [r8 + 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dccc30]
imul eax, dword [0x141dccc34]
add eax, 0xdc8e74b
or eax, 0x40a5a361
add eax, 0x639ea11c
cmp eax, 0xf7683324
ja 0x140079e00
lea rax, [r14 - 1]
nop word [rax + rax]
mov edx, dword [0x141dccc38]
xor edx, dword [0x141dccc3c]
add edx, 0x6ded11b6
xor edx, 0x85220542
and edx, 0xaf2bc5ea
cmp edx, 0x49978eb6
ja 0x140079e30
nop word cs:[rax + rax]
mov edx, dword [0x141dccc40]
or edx, dword [0x141dccc44]
imul edx, edx, 0x422a4440
add edx, 0x90fe9623
cmp edx, 0xbc20ff21
ja 0x140079e60
cmp r14, 0x12
mov r14, rax
jb 0x140079ec5
jmp 0x140079f90
mov eax, dword [0x141dccc08]
sub eax, dword [0x141dccc0c]
xor eax, 0xb0a34ba1
imul rax, rax, 0x1efb370f
shr rax, 0x3c
add eax, 0x766e61dd
cmp eax, 0x13abf37c
jb 0x140079e90
mov r9, r8
cmp r14, 0x11
jae 0x140079f90
xor r15d, r15d
nop dword [rax + rax]
mov eax, dword [0x141dccc70]
xor edx, edx
div dword [0x141dccc74]
or eax, 0x217196b7
cmp eax, 0xa36ca833
je 0x140079ed0
movzx eax, byte [r9]
add eax, 0xffffffd0
cmp eax, 9
ja 0x14007a160
lea rdx, [r15 + r15*4]
dec r14
inc r9
mov eax, eax
lea r15, [rax + rdx*2]
nop word [rax + rax]
mov eax, dword [0x141dccc78]
or eax, dword [0x141dccc7c]
or eax, 0x44714092
xor eax, 0x40109
cmp eax, 0x442bf62c
jb 0x140079f10
test r14, r14
jne 0x140079ed0
xor eax, eax
mov rdi, r8
nop word [rax + rax]
test al, al
jne 0x140079f40
test rcx, rcx
je 0x14007be0e
mov r14, qword [0x141ddb9a0]
mov eax, dword [0x141dccc88]
xor edx, edx
div dword [0x141dccc8c]
add eax, 0xd96b4e6f
mov ecx, 0x9d1d4315
imul rcx, rax
shr rcx, 0x3d
or ecx, 0x23e2d318
cmp ecx, 0x2127403f
jb 0x14007bdd1
jmp 0x14007bd90
mov eax, dword [0x141dccc48]
and eax, dword [0x141dccc4c]
add eax, 0xcf6c8298
imul rax, rax, 0x4f1861ff
shr rax, 0x3e
cmp eax, 0x69ccd269
ja 0x140079f90
xor r15d, r15d
mov r10d, 0xa
nop dword [rax]
mov eax, dword [0x141dccc50]
imul eax, dword [0x141dccc54]
xor eax, 0x229121
or eax, 0xebd56ed2
xor eax, 0xa863d7a5
cmp eax, 0xea28e59f
ja 0x140079fc0
test r14, r14
je 0x140079f32
mov eax, dword [0x141dccc58]
xor edx, edx
div dword [0x141dccc5c]
mov eax, dword [0x141dccc60]
or eax, dword [0x141dccc64]
add eax, 0x98a8e1d0
or eax, 0x62fc3517
and eax, 0x67fe3ff7
cmp eax, 0xc9867404
ja 0x140079ffa
dec r14
mov rax, r15
mul r10
lea rdx, [r9 + 1]
seto r11b
movzx r9d, byte [r9]
mov r15, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dccc68]
add eax, dword [0x141dccc6c]
xor eax, 0xfc40316e
imul eax, eax, 0xd7a13fac
xor eax, 0x7b46fb97
cmp eax, 0x43f63e63
jb 0x14007a040
add r9d, 0xffffffd0
cmp r9d, 9
ja 0x14007a160
test r11b, r11b
jne 0x14007a160
mov eax, r9d
mov r9, rdx
add r15, rax
jae 0x140079fc0
jmp 0x14007a160
mov eax, dword [0x141dccbe8]
or eax, dword [0x141dccbec]
and eax, 0xaff04413
imul eax, eax, 0x43f6102b
or eax, 0x214ba3be
cmp eax, 0x10bf1e5a
jb 0x14007a08e
mov eax, 0x92677137
mov edx, dword [0x141dccbf0]
or edx, dword [0x141dccbf4]
imul rdx, rax
shr rdx, 0x3e
or edx, 0x8c104040
and edx, 0x8c104042
cmp edx, 0xf8295940
je 0x14007a0b6
shl rcx, 1
test rcx, rcx
je 0x14007a191
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dccc80]
or eax, dword [0x141dccc84]
and eax, 0x54242438
cmp eax, 0x1c93b1c3
je 0x14007a101
jmp 0x14007a191
mov eax, 0xcb43824b
mov edx, dword [0x141dccb88]
imul edx, dword [0x141dccb8c]
add edx, 0x735ef6cf
and edx, 0xb72ef2d5
imul rdx, rax
shr rdx, 0x3c
cmp edx, 0x4b126b43
je 0x14007a120
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x14007a150
nop word cs:[rax + rax]
mov eax, dword [0x141dccca0]
and eax, dword [0x141dccca4]
xor eax, 0xb624ccf0
add eax, 0x3706de9e
cmp eax, 0x7b669d21
ja 0x14007a160
test rcx, rcx
je 0x14007a191
xor eax, eax
test al, al
jne 0x14007c0e0
jmp 0x14007c0ac
mov eax, dword [0x141dccd08]
sub eax, dword [0x141dccd0c]
xor eax, 0x10100801
and eax, 0x58100801
cmp eax, 0xad230e83
jbe 0x14007a1cb
sub rsp, 0x20
lea rdx, [0x141db90e1]
mov r8d, 0x11
mov rcx, rdi
call fcn.14008f4d0
add rsp, 0x20
lea r15, [0x141db90e1]
xor esi, esi
nop word cs:[rax + rax]
sub rsp, 0x20
mov r8d, 0x11
mov rcx, rdi
mov rdx, r15
call fcn.14008f4d0
add rsp, 0x20
test sil, sil
jne 0x14007a1e0
mov rax, qword [rdi]
cmp rax, r12
jne 0x14007a219
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x14007a210
jmp 0x14007a8c3
mov qword [rbx + 0x30], rax
mov eax, 0x9d7af833
nop word cs:[rax + rax]
mov edx, dword [0x141dccd10]
or edx, dword [0x141dccd14]
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0xca8b9904
je 0x14007a230
mov rdx, qword [rdi + 8]
mov rcx, qword [rdi + 0x10]
cmp byte [rdi + 0x18], 0
mov qword [rbx], rdx
je 0x14007a37f
lea r9, [rdx + rcx]
nop word cs:[rax + rax]
mov eax, dword [0x141dccd18]
xor eax, dword [0x141dccd1c]
xor eax, 0x20000000
or eax, 0x16fcfa62
and eax, 0xb7fcfa73
cmp eax, 0x8421a834
ja 0x14007a390
test rcx, rcx
je 0x14007a710
mov r10d, 0x98cdc45b
mov r11d, 0xd0160909
mov rdi, rdx
mov r8, qword [rbx]
nop dword [rax]
mov eax, dword [0x141dccd20]
or eax, dword [0x141dccd24]
add eax, 0x6b253587
cmp eax, 0xfdba01a2
ja 0x14007a710
mov eax, 0x9ba3ca85
nop dword [rax]
mov edx, dword [0x141dccd28]
sub edx, dword [0x141dccd2c]
xor edx, 0xb529d2dd
imul rdx, rax
scasd eax, dword [rdi]
ror byte [rax - 0x3f], 1
invalid
invalid
cmp edx, 0x27e99714
je 0x14007a730
nop word cs:[rax + rax]
mov eax, dword [0x141dccc90]
or eax, dword [0x141dccc94]
imul eax, eax, 0xf0be4064
imul rsi, rax, 0x24bb3079
shr rsi, 0x3d
or esi, 0xa5026664
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp esi, 0x7b7e9420
jae 0x14007bde9
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14007bd90
mov rsi, qword [rbx + 8]
nop dword [rax]
mov eax, dword [0x141dccc98]
add eax, dword [0x141dccc9c]
imul eax, eax, 0x1bb3111
add eax, 0x9e45dd78
cmp eax, 0x8eac6a3
jb 0x14007bdf0
mov r8, r15
test r15, r15
jne 0x14007a9af
jmp 0x14007be18
invalid
sub rsp, 0x20
call fcn.14008b950
add rsp, 0x20
mov r14, rdx
test rax, rax
je 0x14007c072
mov eax, r14d
and eax, 3
cmp rax, 3
ja case.default.0x14007be5b
mov r15d, 1
lea rcx, [0x141dba2d0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
mov r13, qword [rbx + 0x28]
jmp rax
mov r12, qword [r14 - 1]
mov rsi, qword [r14 + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14007be97
sub rsp, 0x20
mov rcx, r12
call rax
add rsp, 0x20
mov eax, dword [0x141dcccd0]
add eax, dword [0x141dcccd4]
xor eax, 0xe1b08f2
and eax, 0x9edbccf6
cmp eax, 0xa54369f4
je 0x14007be7a
dec r14
mov eax, dword [0x141dcccd8]
imul eax, dword [0x141dcccdc]
add eax, 0x72b3c85c
imul rax, rax, 0x5957d541
shr rax, 0x3c
cmp eax, 0x104abadf
je 0x14007be9a
mov rcx, qword [rsi + 8]
mov rax, qword [rsi + 0x10]
xor edx, edx
test dl, dl
jne 0x14007bec8
test rcx, rcx
je 0x14007bfce
mov ecx, dword [0x141dccce0]
imul ecx, dword [0x141dccce4]
imul ecx, ecx, 0xa5a3e759
and ecx, 0x5ed7776b
cmp ecx, 0x174bbb5e
jb 0x14007bed5
mov eax, dword [0x141dcccb8]
or eax, dword [0x141dcccbc]
xor eax, 0xb11c1461
imul eax, eax, 0x1eec8fa3
cmp eax, 0xc2e28638
je case.0x14007be5b.3
mov eax, dword [0x141dcccc0]
or eax, dword [0x141dcccc4]
add eax, 0x48f20f39
and eax, 0x50220c08
cmp eax, 0xa3244621
ja 0x14007c019
mov eax, 0xab9516b9
mov r9, qword [rbx + 0x18]
mov r14, qword [rbx + 0x40]
mov ecx, dword [0x141dcccc8]
mov edx, dword [0x141dccccc]
add ecx, edx
add ecx, 0x98cd0a95
xor ecx, 0xddffdf8a
imul rcx, rax
shr rcx, 0x3b
cmp ecx, 0x3703f03a
jae 0x14007c043
jmp 0x14007acc9
mov r8, r14
jmp 0x14007a9af
mov eax, 0xe996e5a7
mov ecx, dword [0x141dcccb0]
sub ecx, dword [0x141dcccb4]
imul rcx, rax
shr rcx, 0x3c
imul ecx, ecx, 0xe958494b
add ecx, 0x70500fd2
cmp ecx, 0x19bc6a4b
jb 0x14007c07f
jmp 0x14007c9ab
mov eax, dword [0x141dccca8]
imul eax, dword [0x141dcccac]
imul eax, eax, 0x9ee71716
add eax, 0x5b155898
shr eax, 4
imul rax, rax, 0x20d17f9
shr rax, 0x35
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x4de0ecbd
jbe 0x14007c0e9
mov rax, qword [0x141ddb9a0]
jmp 0x14007c0ac
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14007a191