Function at 0x140079990
Capabilities:
Encode data using base64
Encode data using xor
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0xa0], xmm8
movdqa xmmword [rbp + 0x90], xmm7
movaps xmmword [rbp + 0x80], xmm6
and rsp, 0xffffffffffffff80
mov rbx, rsp
mov qword [rbx], rdx
mov qword [rbx + 0xa8], rcx
xor eax, eax
test al, al
jne 0x140079b23
mov eax, dword [0x141dcb8e8]
imul eax, dword [0x141dcb8ec]
and eax, 0xa1e8159e
add eax, 0xf64b1206
imul rcx, rax, 0x6b49af45
shr rcx, 0x3e
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0xb0], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0xa0], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0xf0], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0xf8], rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r15, rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r10, rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov r11, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov r13, rsp
mov eax, 0x180
call fcn.1400eeec0
sub rsp, rax
mov rdi, rsp
and rdi, 0xffffffffffffff80
mov rsp, rdi
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
cmp ecx, 0xeaf772f9
jbe 0x140079c02
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x30
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x180
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
and rax, 0xffffffffffffff80
mov rsp, rax
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
jmp 0x1400799de
mov qword [rbx + 0xc0], r13
mov qword [rbx + 0x80], r8
mov qword [rbx + 0xb8], r15
mov qword [rbx + 0x70], r12
mov qword [rbx + 0x10], r9
mov qword [rbx + 0x48], rsi
mov qword [rbx + 0x28], r14
mov qword [rbx + 8], r11
mov qword [rbx + 0x18], rdx
mov qword [rbx + 0x30], r10
mov qword [rbx + 0xc8], rax
mov qword [rbx + 0xe8], rdi
mov eax, 0x70
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0x40], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0xd0], rsp
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0x90], rsp
mov eax, 0x60
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0x88], rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov qword [rbx + 0x20], rsp
mov eax, dword [0x141dcb8f0]
or eax, dword [0x141dcb8f4]
imul eax, eax, 0xc75330ef
cmp eax, 0x21443480
je 0x140079cfe
mov ecx, dword [0x141dcb8f8]
sub ecx, dword [0x141dcb8fc]
add ecx, 0x1240c48b
or ecx, 0x70ca6bb9
add ecx, 0x69befd17
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x7d17f995
jae 0x140079d1a
mov eax, 0x10
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
jmp 0x140079cb8
mov qword [rbx + 0x60], rax
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
test rdi, rdi
mov qword [rbx + 0x78], r8
jne 0x14007b2d0
mov eax, dword [0x141dcb900]
add eax, dword [0x141dcb904]
imul eax, eax, 0x8614cc16
or eax, 0xbfbff242
imul rax, rax, 0x180dd19d
shr rax, 0x3c
cmp eax, 0xd5b7fac8
mov rdi, qword [rbx + 0x10]
jbe 0x140079d7c
sub rsp, 0x20
lea rdx, [0x141db82b0]
mov r8d, 0x11
mov rcx, rdi
call fcn.14008f490
add rsp, 0x20
lea r13, [0x141db82b0]
nop word cs:[rax + rax]
mov eax, dword [0x141dcb908]
xor edx, edx
div dword [str._Q_]
mov esi, eax
or esi, 0xb53b7a02
sub rsp, 0x20
mov r8d, 0x11
mov rcx, rdi
mov rdx, r13
call fcn.14008f490
add rsp, 0x20
cmp esi, 0xd227ba3e
je 0x140079d90
mov rcx, qword [rdi]
movabs rax, 0x8000000000000001
lea rsi, [rax - 1]
cmp rcx, rsi
je 0x14007a26d
mov r13, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
nop dword [rax]
mov eax, dword [0x141dcb910]
xor eax, dword [0x141dcb914]
and eax, 0x6dfd0699
imul eax, eax, 0x77484195
and eax, 0xf9c0f556
cmp eax, 0xbe635fc2
ja 0x140079df0
cmp byte [rdi + 0x18], 0
jne 0x14007a080
nop dword [rax]
mov eax, dword [0x141dcb918]
sub eax, dword [0x141dcb91c]
or eax, 0x5ffecb59
cmp eax, 0xaf6157c2
je 0x140079e20
test r8, r8
je 0x14007a110
lea r9, [r8 + r13]
xor r10d, r10d
mov r11d, 0xa6bf0ec9
mov r14, r13
nop word cs:[rax + rax]
lea r15, [r14 + 1]
movzx r12d, byte [r14]
test r12b, r12b
js 0x140079e80
mov r14, r15
jmp 0x14007a070
mov eax, dword [0x141dcb930]
xor edx, edx
div dword [0x141dcb934]
mov eax, dword [str._b9]
xor eax, dword [0x141dcb93c]
add eax, 0xa64e16d3
or eax, 0xdc0b858
cmp eax, 0xed4084a5
jb 0x140079e8e
nop dword [rax + rax]
mov eax, dword [0x141dcb940]
add eax, dword [0x141dcb944]
imul eax, eax, 0xcd79d891
add eax, 0xb7a20467
cmp eax, 0x90b9be9f
ja 0x140079eb0
cmp r12b, 0xe0
jae 0x140079f10
add r14, 2
cmp r15, r9
cmove r14, r15
nop
mov eax, dword [0x141dcb950]
imul eax, dword [0x141dcb954]
or eax, 0x8115492
and eax, 0x2dbb56be
add eax, 0x6b24783a
cmp eax, 0xc63cdc91
ja 0x140079ee0
jmp 0x14007a070
mov eax, dword [0x141dcb948]
imul eax, dword [0x141dcb94c]
and eax, 0x64b8d833
imul eax, eax, 0x807c36cc
or eax, 0x9f6c9771
cmp eax, 0xa1ae997
jb 0x140079f10
cmp r12b, 0xed
jne 0x140079fb7
mov eax, dword [0x141dcb958]
xor eax, dword [0x141dcb95c]
imul rax, rax, 0x2cf49579
shr rax, 0x3d
imul eax, eax, 0x462225c8
cmp eax, 0x4dc0f7e5
je 0x140079f3a
cmp r15, r9
je 0x14007a080
lea rax, [r14 + 2]
cmp rax, r9
je 0x14007a080
nop word cs:[rax + rax]
mov eax, dword [0x141dcb968]
xor eax, dword [0x141dcb96c]
imul eax, eax, 0x510b940
add eax, 0x44d3da80
or eax, 0x94fb433d
cmp eax, 0x44feb838
jb 0x140079f80
cmp byte [r14 + 1], 0x9f
ja 0x14007a5e8
add r14, 3
jmp 0x14007a070
add r14, 2
cmp r15, r9
mov rax, r14
cmove rax, r15
xor r14d, r14d
cmp rax, r9
setne r14b
add r14, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dcb960]
xor edx, edx
div dword [0x141dcb964]
imul eax, eax, 0x9c592065
cmp eax, 0x9f158941
je 0x140079fe0
cmp r12b, 0xf0
jb 0x14007a070
nop word cs:[rax + rax]
mov eax, dword [0x141dcb970]
sub eax, dword [0x141dcb974]
xor eax, 0x63000023
and eax, 0x63421667
add eax, 0x7a54d95d
cmp eax, 0xc804e3dd
ja 0x14007a010
xor eax, eax
cmp r14, r9
setne al
nop word [rax + rax]
mov edx, dword [0x141dcb978]
xor edx, dword [0x141dcb97c]
imul rdx, r11
shr rdx, 0x3f
or edx, 0xaae4a06c
cmp edx, 0x2d00043e
je 0x14007a040
add r14, rax
nop word cs:[rax + rax]
test r10b, r10b
jne 0x14007a070
cmp r14, r9
jne 0x140079e60
nop
mov eax, dword [0x141dcb980]
imul eax, dword [0x141dcb984]
or eax, 0xf320f7f6
imul eax, eax, 0x7e30a7f4
cmp eax, 0xef76549d
ja 0x14007a080
mov r9d, 0x80da8aa9
nop word cs:[rax + rax]
mov eax, dword [0x141dcb988]
xor edx, edx
div dword [0x141dcb98c]
shr eax, 2
imul rax, rax, 0x487a69ed
shr rax, 0x3c
imul eax, eax, 0x49933967
imul rax, r9
shr rax, 0x3c
cmp eax, 0x1745bee5
ja 0x14007a0b0
test r8, r8
je 0x14007a15e
cmp r8, 1
jne 0x14007a29c
movzx eax, byte [r13]
cmp eax, 0x2b
je 0x14007a15e
mov r8d, 1
mov r9, r13
cmp eax, 0x2d
je 0x14007a15e
jmp 0x14007a4ea
mov eax, dword [0x141dcb920]
and eax, dword [0x141dcb924]
xor eax, 0x5702c965
add eax, 0x4a57c8da
xor eax, 0x6063718
cmp eax, 0x32e7bcdf
jb 0x14007a110
nop word cs:[rax + rax]
mov eax, dword [0x141dcb928]
xor eax, dword [0x141dcb92c]
or eax, 0xfff9dbfe
imul eax, eax, 0x9221bd1f
cmp eax, 0x2700842e
je 0x14007a140
xor eax, eax
test al, al
jne 0x14007a160
test rcx, rcx
je 0x14007a26d
mov eax, dword [0x141dcba38]
sub eax, dword [0x141dcba3c]
xor eax, 0x433f268e
imul eax, eax, 0x778e7af9
and eax, 0x69afc677
cmp eax, 0xa80955d2
jbe 0x14007a1a0
mov rax, qword [0x141dda6a0]
nop word [rax + rax]
mov eax, dword [0x141dcba40]
xor eax, dword [0x141dcba44]
xor eax, 0x4260881
or eax, 0xe3c1766e
imul eax, eax, 0xda15f0d5
mov r15, qword [0x141dda6a0]
cmp eax, 0xd33765b0
je 0x14007a1a0
mov eax, dword [0x141dcba48]
or eax, dword [0x141dcba4c]
imul eax, eax, 0x5d36e731
add eax, 0x45de5897
cmp eax, 0x40f75047
jae 0x14007a1fe
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dcba50]
xor edx, edx
div dword [0x141dcba54]
imul r12d, eax, 0x4e22486c
add r12d, 0x964b464c
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r13
call r14
add rsp, 0x20
cmp r12d, 0x99ecb601
jb 0x14007a210
nop dword [rax + rax]
mov eax, dword [0x141dcba58]
sub eax, dword [0x141dcba5c]
or eax, 0x177601d4
add eax, 0x6a8b50b9
cmp eax, 0xf8a8b2cf
ja 0x14007a250
mov eax, dword [0x141dcbad8]
or eax, dword [0x141dcbadc]
add eax, 0xd17556c2
or eax, 0x8f62cb59
add eax, 0xf6b36f74
cmp eax, 0x2b9cf812
mov rdi, qword [rbx + 0x48]
jb 0x14007a69c
jmp 0x14007a65a
cmp byte [r13], 0x2b
jne 0x14007a4a0
mov r10d, 0x946d946b
lea r9, [r13 + 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dcb9a0]
xor edx, edx
div dword [0x141dcb9a4]
xor eax, 0x32ea21b
imul rax, r10
shr rax, 0x3a
imul eax, eax, 0xf686e600
cmp eax, 0xa799edba
ja 0x14007a2c0
mov eax, dword [0x141dcb9a8]
xor edx, edx
div dword [0x141dcb9ac]
lea r10, [r8 - 1]
nop word [rax + rax]
mov eax, dword [0x141dcb9b0]
xor edx, edx
div dword [0x141dcb9b4]
imul eax, eax, 0xd315e79e
xor eax, 0xa51cf2fc
shr eax, 2
imul rax, rax, 0x1953666d
shr rax, 0x2d
cmp eax, 0x9d655daf
ja 0x14007a300
mov r11d, 0xb368504d
nop word cs:[rax + rax]
mov eax, dword [0x141dcb9b8]
xor edx, edx
div dword [0x141dcb9bc]
imul eax, eax, 0x142a8c92
imul rax, r11
shr rax, 0x3f
cmp eax, 0x23b6923c
je 0x14007a340
cmp r8, 0x12
mov r8, r10
jb 0x14007a4ea
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x14007a380
xor edi, edi
mov r10d, 0xa
nop dword [rax]
sub r8, 1
jb 0x14007a5a0
mov rax, rdi
mul r10
lea rdx, [r9 + 1]
seto r11b
movzx r9d, byte [r9]
mov rdi, rax
mov eax, dword [0x141dcb9c0]
and eax, dword [0x141dcb9c4]
or eax, 0x3a2f7c61
xor eax, 0x4a555bb3
add eax, 0xd5008a7d
cmp eax, 0xc21e4c44
ja 0x14007a3af
add r9d, 0xffffffd0
nop word cs:[rax + rax]
mov eax, dword [0x141dcb9c8]
sub eax, dword [0x141dcb9cc]
cmp eax, 0xbc4b7eb7
je 0x14007a3e0
cmp r9d, 9
ja 0x14007a15e
nop dword [rax]
mov eax, dword [0x141dcb9d0]
imul eax, dword [0x141dcb9d4]
add eax, 0x8c8a203
or eax, 0x8bd4ada
add eax, 0x3b76de88
cmp eax, 0x84ce323c
ja 0x14007a400
nop word cs:[rax + rax]
mov eax, dword [0x141dcb9d8]
or eax, dword [0x141dcb9dc]
add eax, 0x25795356
and eax, 0x2fa92fc4
cmp eax, 0xd7bef253
je 0x14007a430
test r11b, r11b
jne 0x14007a15e
mov eax, r9d
add rdi, rax
setb al
nop
mov r9d, dword [0x141dcb9e0]
xor r9d, dword [0x141dcb9e4]
or r9d, 0xe52edc81
imul r9d, r9d, 0xff878b5c
add r9d, 0x9f752a6c
cmp r9d, 0xbb2ae5d
jb 0x14007a460
mov r9, rdx
test al, al
je 0x14007a390
jmp 0x14007a15e
mov eax, dword [0x141dcb990]
and eax, dword [0x141dcb994]
add eax, 0xaf338947
and eax, 0x9cce4d4b
cmp eax, 0x97ba4451
je 0x14007a4a0
nop dword [rax]
mov eax, dword [0x141dcb998]
sub eax, dword [0x141dcb99c]
add eax, 0xf6c3ae0f
xor eax, 0x76011d7d
cmp eax, 0xc3c060fd
ja 0x14007a4c0
mov r9, r13
cmp r8, 0x11
jae 0x14007a370
xor edi, edi
nop dword [rax]
mov eax, dword [0x141dcb9e8]
add eax, dword [0x141dcb9ec]
imul eax, eax, 0x44766ae9
imul rdx, rax, 0x7053ea67
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
xor eax, 0xc61c66ae
cmp eax, 0x307356cd
jb 0x14007a4f0
movzx r10d, byte [r9]
add r10d, 0xffffffd0
cmp r10d, 9
ja 0x14007a15e
mov eax, dword [0x141dcb9f0]
xor edx, edx
div dword [0x141dcb9f4]
nop word cs:[rax + rax]
mov eax, dword [0x141dcb9f8]
or eax, dword [0x141dcb9fc]
imul rax, rax, 0x54fb34b9
shr rax, 0x3e
xor eax, 0xb72f65db
imul eax, eax, 0x43c3b036
cmp eax, 0x77c157b1
je 0x14007a550
add rdi, rdi
dec r8
inc r9
lea rax, [rdi + rdi*4]
mov edi, r10d
add rdi, rax
test r8, r8
jne 0x14007a4f0
nop word cs:[rax + rax]
mov eax, dword [0x141dcba20]
xor eax, dword [0x141dcba24]
imul eax, eax, 0xbbb566ee
add eax, 0x5578a420
cmp eax, 0x7aaf13c
jb 0x14007a5a0
test rcx, rcx
je 0x14007aea4
mov eax, dword [0x141dcba28]
add eax, dword [0x141dcba2c]
or eax, 0x13ab5160
cmp eax, 0xe7de2424
je 0x14007ae88
jmp 0x14007ae5e
shl rcx, 1
test rcx, rcx
je 0x14007a26d
mov eax, dword [0x141dcba00]
add eax, dword [0x141dcba04]
xor eax, 0x516fed7f
imul eax, eax, 0xaeb08c64
add eax, 0x40bf55bd
cmp eax, 0x387f0f61
jae 0x14007a61e
mov rax, qword [0x141dda6a0]
xor eax, eax
mov r15, qword [0x141dda6a0]
test al, al
jne 0x14007a620
mov eax, dword [0x141dcba08]
xor eax, dword [0x141dcba0c]
xor eax, 0xd14c84a0
mov ecx, 0xb8ab4bf7
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xab78bfb7
ja 0x14007b19f
jmp 0x14007b161
mov eax, dword [0x141dcbae0]
and eax, dword [0x141dcbae4]
add eax, 0x19e36f4a
imul r14, rax, 0x4ae309d5
shr r14, 0x3c
sub rsp, 0x20
lea rdx, [0x141db82c1]
mov r8d, 0x11
mov rcx, rdi
call fcn.14008f490
add rsp, 0x20
cmp r14d, 0x8ee27620
jbe 0x14007a6bb
sub rsp, 0x20
lea rdx, [0x141db82c1]
mov r8d, 0x11
mov rcx, rdi
call fcn.14008f490
add rsp, 0x20
jmp 0x14007a65a
mov r9, qword [rdi]
mov eax, dword [0x141dcbae8]
xor edx, edx
div dword [0x141dcbaec]
nop dword [rax]
mov eax, dword [0x141dcbaf0]
and eax, dword [0x141dcbaf4]
or eax, 0xf4f3b6ab
and eax, 0xfcf3feaf
cmp eax, 0x6e80d544
jb 0x14007a6d0
mov eax, 0x9b695fe7
nop word cs:[rax + rax]
mov ecx, dword [0x141dcbaf8]
imul ecx, dword [0x141dcbafc]
xor ecx, 0xa4cff3a2
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x98f0934a
ja 0x14007a700
cmp r9, rsi
jne 0x14007a78d
nop dword [rax + rax]
mov eax, dword [0x141dcbb00]
add eax, dword [0x141dcbb04]
imul eax, eax, 0x72db5424
add eax, 0x16aaba8
cmp eax, 0x489ed0a2
ja 0x14007a730
mov eax, 0x823d14a5
nop word cs:[rax + rax]
mov ecx, dword [0x141dcbb08]
and ecx, dword [0x141dcbb0c]
xor ecx, 0x82ebaf67
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xcf7228a8
cmp ecx, 0x519dda9c
jbe 0x14007a760
jmp 0x14007a90e
mov r8, qword [rdi + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dcbb10]
sub eax, dword [0x141dcbb14]
and eax, 0x4a3fcec7
imul eax, eax, 0x161dd12b
and eax, 0x61f0e947
cmp eax, 0x7e83b8a7
ja 0x14007a7a0
mov r10, qword [rdi + 0x10]
cmp byte [rdi + 0x18], 0
je 0x14007a849
xor eax, eax
nop
test al, al
jne 0x14007a7d0
nop word cs:[rax + rax]
mov eax, dword [0x141dcbb78]
xor eax, dword [0x141dcbb7c]
imul eax, eax, 0xc565cbc1
imul rcx, rax, 0x1877ebf1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
add eax, 0x22fde3fb
cmp eax, 0x632c56c8
ja 0x14007a7e0
test r10, r10
je 0x14007a8d0
cmp r10, 1
jne 0x14007aba5
movzx eax, byte [r8]
cmp eax, 0x2b
je 0x14007a8d0
mov r10d, 1
mov r11, r8
cmp eax, 0x2d
je 0x14007a8d0
jmp 0x14007ada0
lea rcx, [r8 + r10]
nop dword [rax]
mov eax, dword [0x141dcbb18]
and eax, dword [0x141dcbb1c]
cmp eax, 0xd8cc7598
je 0x14007a850
test r10, r10
je 0x14007a880
mov r11d, 0xbbafa399
mov rsi, r8
jmp 0x14007a94c
mov eax, dword [0x141dcbb20]
xor eax, dword [0x141dcbb24]
xor eax, 0x268fa1ec
imul eax, eax, 0xee4f8607
cmp eax, 0x88841a4c
je 0x14007a880
nop
mov eax, dword [0x141dcbb28]
mov ecx, dword [0x141dcbb2c]
add eax, ecx
add eax, 0x4846e03
imul rax, rax, 0x3517f111
shr rax, 0x3d
cmp eax, 0x2c86ebd0
ja 0x14007a8a0
nop word cs:[rax + rax]
mov rsi, r14
cmp rsi, rcx
je 0x14007a7cd
mov eax, dword [0x141dcbb30]
xor eax, dword [0x141dcbb34]
add eax, 0x92027ccf
and eax, 0xfa6c2cd8
cmp eax, 0x5936003
je 0x14007a94c
lea r14, [rsi + 1]
movzx eax, byte [rsi]
test al, al
jns 0x14007a940
cmp al, 0xe0
jae 0x14007a9b0
mov eax, dword [0x141dcbb40]
add eax, dword [0x141dcbb44]
or eax, 0xb0176e67
xor eax, 0x6df9a1a8
cmp eax, 0x2702f1d0
jb 0x14007a978
add rsi, 2
cmp r14, rcx
cmove rsi, r14
jmp 0x14007a943
mov edx, dword [0x141dcbb38]
sub edx, dword [0x141dcbb3c]
imul edx, edx, 0x19c46f7b
add edx, 0xa908be0c
and edx, 0x437333dd
cmp edx, 0xb040d3c1
je 0x14007a9b0
cmp al, 0xed
jne 0x14007aa93
nop
mov eax, dword [0x141dcbb48]
sub eax, dword [0x141dcbb4c]
imul eax, eax, 0x7808ac7c
xor eax, 0xdb69ebf2
imul eax, eax, 0xb02223d6
cmp eax, 0x3c880744
ja 0x14007a9e0
lea r15, [rsi + 2]
mov eax, dword [0x141dcbb50]
xor edx, edx
div dword [0x141dcbb54]
cmp r15, rcx
sete r12b
cmp r14, rcx
sete r13b
mov eax, dword [0x141dcbb58]
xor edx, edx
div dword [0x141dcbb5c]
or eax, 0x99ae9e72
imul eax, eax, 0xac9edf04
add eax, 0x96926bad
cmp eax, 0x133229fb
jb 0x14007aa16
or r13b, r12b
jne 0x14007a7cd
movzx eax, byte [rsi + 1]
add rsi, 3
nop word [rax + rax]
mov edx, dword [0x141dcbb68]
xor edx, dword [0x141dcbb6c]
add edx, 0x9cd20e1b
xor edx, 0x80d0b8b5
imul edx, edx, 0xd0a5b11d
cmp edx, 0xb2c8e7b6
ja 0x14007aa60
cmp al, 0x9f
jbe 0x14007a943
jmp 0x14007ab28
add rsi, 2
cmp r14, rcx
cmove rsi, r14
xor edx, edx
cmp rsi, rcx
setne dl
nop word cs:[rax + rax]
mov r14d, dword [0x141dcbb60]
mov r15d, dword [0x141dcbb64]
add r14d, r15d
add r14d, 0xdb47faae
imul r14, r11
shr r14, 0x3e
xor r14d, 0x22379b01
cmp r14d, 0x95511ac9
ja 0x14007aab0
add rsi, rdx
cmp al, 0xf0
jb 0x14007a943
xor eax, eax
cmp rsi, rcx
setne al
add rsi, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dcbb70]
imul eax, dword [0x141dcbb74]
add eax, 0x5ce5849
xor eax, 0xcc0014ac
and eax, 0xdc2217bd
cmp eax, 0x8646f5f6
je 0x14007ab00
jmp 0x14007a943
mov eax, dword [0x141dcbb80]
and eax, dword [0x141dcbb84]
imul rcx, rax, 0x3874de83
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1a
or eax, 0x47968079
cmp eax, 0x695f1983
je 0x14007ab28
shl r9, 1
test r9, r9
je 0x14007a90e
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [0x141dcbbe0]
or eax, dword [0x141dcbbe4]
imul eax, eax, 0x99c3ab5f
add eax, 0xe58a3e90
imul rax, rax, 0x7ad53c8f
shr rax, 0x3d
cmp eax, 0x6bf02797
je 0x14007ab77
jmp 0x14007a90e
mov eax, dword [0x141dcbb90]
xor edx, edx
div dword [0x141dcbb94]
nop word cs:[rax + rax]
mov eax, dword [0x141dcbb98]
and eax, dword [0x141dcbb9c]
imul eax, eax, 0xa9d79558
add eax, 0x94539ad8
or eax, 0x793dfb20
cmp eax, 0x6bcde354
jb 0x14007abc0
cmp byte [r8], 0x2b
jne 0x14007ad70
lea r11, [r8 + 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dcbba0]
add eax, dword [0x141dcbba4]
or eax, 0xa21a084c
imul eax, eax, 0xd78507d1
add eax, 0xcb443d15
cmp eax, 0xd58a5ec5
ja 0x14007ac00
lea rax, [r10 - 1]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x14007ac30
cmp r10, 0x12
mov r10, rax
jb 0x14007ada0
xor esi, esi
mov r14d, 0xa
xor edi, edi
nop dword [rax + rax]
mov eax, dword [0x141dcbb88]
or eax, dword [0x141dcbb8c]
and eax, 0xcc9cc1b7
imul eax, eax, 0x4923c1d0
add eax, 0xfe17dfc
cmp eax, 0xf02412e2
ja 0x14007ad70
mov r11, r8
cmp r10, 0x11
jae 0x14007ac41
invalid
xor edi, edi
nop word cs:[rax + rax]
movzx eax, byte [r11]
add eax, 0xffffffd0
cmp eax, 9
ja 0x14007a8d0
mov ecx, dword [0x141dcbbd0]
imul ecx, dword [0x141dcbbd4]
add ecx, 0x2b4f9665
imul rcx, rcx, 0x6902fa01
shr rcx, 0x3e
cmp ecx, 0xd0e0bb7a
je 0x14007adc0
dec r10
inc r11
lea rcx, [rdi + rdi*4]
mov eax, eax
lea rdi, [rax + rcx*2]
mov eax, dword [0x141dcbbd8]
xor eax, dword [0x141dcbbdc]
xor eax, 0x79be316
add eax, 0x8e3be397
imul rax, rax, 0x72061bf7
shr rax, 0x3e
cmp eax, 0x656a8e99
je 0x14007adf6
test r10, r10
jne 0x14007adb0
mov eax, dword [0x141dcba10]
or eax, dword [0x141dcba14]
xor eax, 0x41651ecd
imul r14d, eax, 0x151daf2b
add r14d, 0x805ee432
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp r14d, 0xad78397e
jbe 0x14007b1b7
sub rsp, 0x20
mov rcx, r15
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14007b161
mov ecx, 0xad7c9003
mov eax, dword [0x141dcba18]
xor edx, edx
div dword [0x141dcba1c]
add eax, 0xce3997e1
or eax, 0x228d6dec
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x199bb37a
jae 0x14007b1bc
jmp 0x14007a26d