Function at 0x140007220
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov rdi, r9
mov r14, r8
mov r15, rdx
mov rsi, rcx
lea rcx, [0x140104e44]
mov edx, 3
call fcn.1400df440
mov rbx, rax
mov rcx, r14
mov rdx, rdi
call fcn.1400df440
mov r14, rax
mov r15, qword [r15]
mov qword [rsp + 0x30], 0
mov rax, qword [r15]
mov r12, qword [rax + 0xa0]
mov eax, dword [0x141dc2b40]
xor eax, dword [0x141dc2b44]
xor eax, 0x8dc108e
add eax, 0x79854a0e
and eax, 0x18f2e290
cmp eax, 0x1ad33b3c
ja 0x1400072c6
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov rcx, r15
mov rdx, rbx
mov r8, r14
mov r9d, 0x30
call r12
mov edi, eax
xor eax, eax
test al, al
je 0x1400072ed
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov rcx, r15
mov rdx, rbx
mov r8, r14
mov r9d, 0x30
call r12
jmp 0x140007299
test edi, edi
js 0x140007410
mov rdi, qword [rsp + 0x30]
nop word [rax + rax]
mov eax, dword [0x141dc2b48]
add eax, dword [0x141dc2b4c]
xor eax, 0xeb10a99d
imul eax, eax, 0xb10a67eb
cmp eax, 0xd621ad9c
je 0x140007300
xor eax, eax
test al, al
jne 0x140007320
test rdi, rdi
je 0x14000745a
nop dword [rax]
mov eax, dword [0x141dc2b50]
imul eax, dword [0x141dc2b54]
imul eax, eax, 0xedaddf74
add eax, 0xd4f90500
cmp eax, 0x4fedd257
jb 0x140007330
test r14, r14
je 0x140007380
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop dword [rax]
mov eax, dword [0x141dc2b58]
xor eax, dword [0x141dc2b5c]
imul eax, eax, 0x350d9995
cmp eax, 0x4afe9d5b
je 0x140007360
nop dword [rax]
mov eax, dword [0x141dc2b60]
sub eax, dword [0x141dc2b64]
or eax, 0x74ce047d
cmp eax, 0x345e4191
je 0x140007380
test rbx, rbx
je 0x1400073dd
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, 0xbfaf787d
nop dword [rax + rax]
mov ecx, dword [0x141dc2b68]
or ecx, dword [0x141dc2b6c]
imul rcx, rax
shr rcx, 0x3d
or ecx, 0xa0f4b3fd
imul rcx, rcx, 0x6f31ee57
shr rcx, 0x3c
cmp ecx, 0x1885a25a
ja 0x1400073b0
mov eax, dword [0x141dc2b90]
xor eax, dword [0x141dc2b94]
imul eax, eax, 0x727a9dee
add eax, 0x3aff3fe6
cmp eax, 0xdab4ea39
jbe 0x140007528
jmp 0x14000756c
mov eax, dword [0x141dc2b70]
and eax, dword [0x141dc2b74]
add eax, 0xa5dc2f67
and eax, 0xc93d807
cmp eax, 0x64a1bb3
ja 0x140007410
mov qword [rsp + 0x68], 0
lea rdx, [rsp + 0x68]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140007453
mov rax, qword [rcx]
call qword [rax + 0x10]
test r14, r14
jne 0x140007461
jmp 0x140007470
xor edi, edi
test r14, r14
je 0x140007470
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop word [rax + rax]
mov eax, dword [0x141dc2b78]
imul eax, dword [0x141dc2b7c]
and eax, 0xe82dafef
add eax, 0x3a9b6355
cmp eax, 0xc1b1084c
jb 0x140007470
test rbx, rbx
je 0x1400074fb
mov eax, dword [0x141dc2b80]
xor edx, edx
div dword [0x141dc2b84]
imul eax, eax, 0x4b892006
add eax, 0xcb0c6a4e
cmp eax, 0xfc36be46
jbe 0x1400074bc
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysFreeString]
mov r14, qword [sym.imp.oleaut32.dll_SysFreeString]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2b88]
or eax, dword [0x141dc2b8c]
xor eax, 0xe2ca5915
imul ebp, eax, 0x832a9917
add ebp, 0x81672d27
mov rcx, rbx
call r14
cmp ebp, 0x97416ef0
jae 0x1400074d0
mov eax, dword [0x141dc2c40]
imul eax, dword [0x141dc2c44]
imul eax, eax, 0x650e36f7
xor eax, 0x518e48c2
add eax, 0xe30be781
cmp eax, 0x45c5e632
jae 0x14000770d
jmp 0x14000773a
mov eax, dword [0x141dc2b98]
xor edx, edx
div dword [0x141dc2b9c]
add eax, 0xf52ecac2
xor eax, 0x90075a4a
mov ebx, 0x96a7bf27
imul rbx, rax
shr rbx, 0x3e
mov byte [rsp + 0x30], 0x12
lea rcx, [rsp + 0x68]
lea r8, [rsp + 0x30]
mov rdx, rdi
call section..text
cmp ebx, 0xde207415
jne 0x140007585
mov byte [rsp + 0x30], 0x12
lea rcx, [rsp + 0x68]
lea r8, [rsp + 0x30]
mov rdx, rdi
call section..text
jmp 0x140007528
cmp qword [rsp + 0x68], 0
je 0x140007656
movzx eax, byte [0x141dde6f8]
mov edx, 0xc0
xor ecx, ecx
call fcn.1400c29b0
mov rbx, rax
nop word [rax + rax]
mov eax, dword [0x141dc2ba0]
or eax, dword [0x141dc2ba4]
xor eax, 0xaf904916
imul rcx, rax, 0x1c8e6f9d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
xor eax, 0xb7db22b9
cmp eax, 0xaf4516d
jb 0x1400075b0
nop word cs:[rax + rax]
mov eax, dword [0x141dc2ba8]
and eax, dword [0x141dc2bac]
imul rax, rax, 0x3a880edb
shr rax, 0x3c
add eax, 0x3868727b
xor eax, 0x6e01d4ef
cmp eax, 0x7121308
jb 0x1400075f0
test rbx, rbx
je 0x1400076b9
movups xmm0, xmmword [rsp + 0x68]
movups xmm1, xmmword [rsp + 0x78]
movups xmm2, xmmword [rsp + 0x88]
movups xmmword [rbx + 0x20], xmm2
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov qword [rsp + 0x50], 4
xor eax, eax
test al, al
je 0x140007747
jmp 0x140007782
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
movzx eax, byte [rsp + 0x30]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2c08]
xor ecx, dword [0x141dc2c0c]
xor ecx, 0xd7ce2899
add ecx, 0x1377b0f7
cmp ecx, 0x1c82cf63
jb 0x140007670
cmp al, 0x12
jne 0x1400076a3
mov ebx, 8
xor edi, edi
xor r14d, r14d
jmp 0x1400079cc
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
jmp 0x140007b41
mov eax, dword [0x141dc2bb0]
imul eax, dword [0x141dc2bb4]
imul eax, eax, 0x2d3c0292
or eax, 0xf6e3f0f9
add eax, 0xa322537a
cmp eax, 0x64aeb942
jb 0x140007707
mov eax, dword [0x141dc2bb8]
add eax, dword [0x141dc2bbc]
or eax, 0x569652e2
imul rax, rax, 0x178dd621
shr rax, 0x3b
xor eax, 0xc947c8da
ud2
ud2
mov eax, dword [0x141dc2c48]
xor edx, edx
div dword [0x141dc2c4c]
add eax, 0xf2412e7a
xor eax, 0xf5862235
imul rax, rax, 0x4f97a223
shr rax, 0x3c
mov dword [rsi + 4], edi
cmp eax, 0xd4b6ab52
jbe 0x14000773f
mov dword [rsi + 4], edi
jmp 0x14000770d
mov byte [rsi], 0
jmp 0x140007b41
mov eax, dword [0x141dc2bc0]
imul eax, dword [0x141dc2bc4]
or eax, 0x65f1b089
mov ecx, 0xc10d30b3
imul rcx, rax
shr rcx, 0x3e
add ecx, 0x14d59c4d
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], 1
cmp ecx, 0x51678b9a
jbe 0x140007792
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], 1
jmp 0x140007747
mov ecx, 0x8f804e49
nop word [rax + rax]
mov eax, dword [0x141dc2bc8]
xor edx, edx
div dword [0x141dc2bcc]
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0x36552b41
xor eax, 0xeefe84e
cmp eax, 0x25f393a3
ja 0x1400077a0
mov r14d, 1
lea r15, [rsp + 0x68]
lea r12, [rsp + 0x30]
xor ebp, ebp
jmp 0x140007810
lea rax, [r14 + r14*2]
shl rax, 4
movups xmm0, xmmword [rsp + 0x68]
movups xmm1, xmmword [rsp + 0x78]
movups xmm2, xmmword [rsp + 0x88]
movups xmmword [rbx + rax + 0x20], xmm2
movups xmmword [rbx + rax + 0x10], xmm1
movups xmmword [rbx + rax], xmm0
inc r14
mov qword [rsp + 0x60], r14
mov eax, dword [0x141dc2bd0]
xor eax, dword [0x141dc2bd4]
or eax, 0x71d3dbf7
and eax, 0xf5dbdff7
cmp eax, 0xf595ac62
je 0x140007970
nop word cs:[rax + rax]
mov eax, dword [0x141dc2bd8]
xor edx, edx
div dword [str.dY_]
add eax, 0xb1598c98
imul rax, rax, 0x1272235f
shr rax, 0x3a
imul r13d, eax, 0xb887bf99
mov rcx, r15
mov rdx, rdi
mov r8, r12
call section..text
cmp r13d, 0x64b0496a
je 0x140007970
cmp qword [rsp + 0x68], 0
je 0x140007983
nop dword [rax]
mov eax, dword [0x141dc2be0]
imul eax, dword [0x141dc2be4]
and eax, 0xcd36ee43
imul eax, eax, 0x24143278
cmp eax, 0x46754780
je 0x140007890
mov rcx, qword [rsp + 0x50]
mov eax, dword [0x141dc2be8]
xor edx, edx
div dword [0x141dc2bec]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2bf0]
xor edx, edx
div dword [str.06]
or eax, 0x1893e901
xor eax, 0xa7b26bc0
imul eax, eax, 0xa0f5ecbb
cmp eax, 0xdd52ba89
ja 0x1400078d0
nop word cs:[rax + rax]
test bpl, bpl
jne 0x140007900
cmp r14, rcx
jne 0x1400077e0
mov qword [rsp + 0x20], 0x30
mov r8d, 1
mov r9d, 8
lea rcx, [rsp + 0x50]
mov rdx, r14
call fcn.1400f2140
mov rbx, qword [rsp + 0x58]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2bf8]
and eax, dword [0x141dc2bfc]
xor eax, 0xf1f847a6
imul eax, eax, 0x2a432166
add eax, 0x2f292a98
cmp eax, 0x1f5f6214
jbe 0x140007940
jmp 0x1400077e0
mov rcx, r15
mov rdx, rdi
mov r8, r12
call section..text
jmp 0x140007840
mov eax, dword [0x141dc2c00]
sub eax, dword [0x141dc2c04]
xor eax, 0xe2ca2c1d
imul eax, eax, 0x1758b739
add eax, 0x8182e265
cmp eax, 0xcfb69386
ja 0x1400079b5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor eax, eax
test al, al
je 0x1400079c0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x1400079a6
mov rdi, qword [rsp + 0x50]
cmp byte [rsp + 0x30], 0x12
jne 0x1400079e0
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], r14
mov byte [rsi], 0x12
jmp 0x140007b41
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
nop word cs:[rax + rax]
mov eax, dword [0x141dc2c10]
and eax, dword [0x141dc2c14]
imul rax, rax, 0x447b7f3d
shr rax, 0x3e
add eax, 0xf55ebb2d
and eax, 0xb1103901
cmp eax, 0xaf779688
jb 0x140007a00
mov eax, 0x9d4c3af3
nop dword [rax]
mov ecx, dword [0x141dc2c18]
add ecx, dword [0x141dc2c1c]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x61ddc417
cmp ecx, 0x9b1f7973
je 0x140007a30
test r14, r14
je 0x140007a71
mov rsi, rbx
nop word [rax + rax]
mov rcx, rsi
call fcn.14000d040
add rsi, 0x30
dec r14
jne 0x140007a60
mov eax, 0x92ade863
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2c20]
imul ecx, dword [0x141dc2c24]
imul ecx, ecx, 0x9e91327f
add ecx, 0x2bd21e4d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xe5684298
ja 0x140007a80
test rdi, rdi
je 0x140007b41
mov eax, dword [0x141dc2c28]
sub eax, dword [0x141dc2c2c]
xor eax, 0xf77994a5
imul rax, rax, 0x7d1671d5
shr rax, 0x3a
and eax, 8
cmp eax, 0xdb49f150
jne 0x140007ae0
mov rax, qword [0x141dde6e0]
nop
mov eax, dword [0x141dc2c30]
xor eax, dword [0x141dc2c34]
mov rcx, qword [0x141dde6e0]
cmp eax, 0x416b187c
je 0x140007ae0
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dc2c38]
or eax, dword [0x141dc2c3c]
add eax, 0x6a5517a9
and eax, 0xba52872a
imul rcx, rax, 0xa2bdc29
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0x8d5e6167
ja 0x140007b10
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret