Function at 0x1404d7a4f
Capabilities:
Authenticate hmac
Encode data using base64
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
xadd ax, ax
push rbp
shl ax, cl
push rsi
push rdi
ror sil, cl
bts rsi, rdx
sar bpl, cl
push r12
cbw
push r13
movsx r13d, bx
movsxd rbp, ebx
push r14
push r15
and r15b, 0x90
sub r13b, cl
lea rbp, [rsp - 0x27]
sub rsp, 0x100
sar r12d, 0x47
clc
mov rax, qword [0x1400b7288]
sal r15b, 0xc8
xor rax, rsp
sar esi, cl
sar r15, 0x8a
sbb r13d, 0x5aea4c0d
mov qword [rbp + 0x17], rax
bt ax, cx
movsxd rsi, edx
rol r12w, 0x98
cmc
mov r15, r8
rcr r14d, cl
mov rax, rsi
movsx r12, r8w
mov qword [rbp - 9], rcx
xor cl, r10b
add r12b, r14b
shr r14w, cl
mov qword [rbp - 0x11], rax
ror r12b, cl
lea rcx, [0x140000000]
and eax, 0x3f
stc
shl r14b, cl
mov r13d, r9d
movsx r12w, r8b
add r13, r8
mov qword [rbp - 0x21], r8
mov r12, rsi
shrd r14d, esp, 0xc5
sar r14, 0x7c
movzx r14, r8w
mov qword [rbp - 0x51], r13
xchg r14w, r14w
sar r12, 6
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404d7b32
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
xchg rcx, rcx
lea rcx, [rsp + 0x50]
jmp 0x1404d7b47
mov dword [rbp - 0x59], eax
jmp 0x1404d7b4f
call fcn.1404a0a5e
mov rcx, qword [rsp + 0x58]
sbb dx, 0x71c4
adc rdi, r10
sub r11d, r11d
mov dword [rbp - 0x69], r11d
ror bh, cl
mov ebx, r11d
sar rdi, 0x71
bt dx, 0xb2
mov dword [rbp - 0x65], ebx
or dx, bx
mov rdi, r15
mov edx, dword [rcx + 0xc]
shld cx, r12w, 0x3a
ror ch, 0x92
mov ecx, r11d
test si, r11w
clc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
cmp r15, r13
jae 0x1404d8399
mov rax, rsi
bts esi, r9d
or si, 0x2fde
mov rsi, r15
rcl r15b, cl
add cl, 0x40
sar rax, 6
not r15b
setae r15b
mov qword [rbp - 0x19], rax
cmc
rol r15b, cl
mov cl, byte [rdi]
clc
test r14b, 0xc6
mov r15d, 1
test r12d, 0x3b080c62
mov byte [rsp + 0x44], cl
jmp 0x1404d7bec
mov dword [rsp + 0x48], r11d
stc
cmp edx, 0xfde9
jmp 0x1404d7bfd
jne 0x1404d7f26
lea r15, [0x140000000]
rol sil, 0xcc
and r9d, ebp
btc edx, r9d
mov edx, r11d
shl r9b, 0xbe
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
jmp 0x1404d7c2c
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404d7c54
inc edx
jmp 0x1404d7c42
inc rsi
jmp 0x1404d7c4a
cmp rsi, 5
jl 0x1404d7c30
test rsi, rsi
jle 0x1404d7e4f
mov rax, qword [r15 + r12*8 + 0xba940]
movzx r8d, di
bt r10w, r9w
rol cx, 0xb0
mov r8, qword [rbp - 0x51]
btr ecx, r8d
btr r10d, 0x9f
movzx r13d, sp
sub r8, rdi
setp r10b
mov r10d, 0x494d0c3f
movzx ecx, byte [rax + r14*8 + 0x3e]
movzx r13w, r13b
cmovl r13w, si
movzx r10d, r12w
movsx r15d, byte [rcx + r15 + 0xb7d00]
bswap r13d
inc r15d
rcr r10w, 0x5c
sbb r10b, sil
movzx r13, r10w
mov r13d, r15d
or r10b, 0xb8
cmovo r10, r14
xadd r10b, r10b
sub r13d, edx
movzx r10w, r14b
sar r10w, cl
movsxd r10, r13d
jmp 0x1404d7ce2
cmp r10, r8
jg 0x1404d81ea
lea rax, [rbp - 1]
sbb rdx, rbx
mov rdx, r11
or cl, 0x3e
shl r8b, 0x3d
sub r9, rax
lea r8, [r9 + r14*8]
shr rcx, 0xf4
xchg ecx, ecx
lea rcx, [rbp - 1]
neg al
shr al, cl
add rcx, rdx
inc al
inc rdx
xor al, bpl
rcl al, 0xcb
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
stc
test bp, r10w
cmc
cmp rdx, rsi
jmp 0x1404d7d34
jl 0x1404d7d09
test r13d, r13d
jmp 0x1404d7d42
jle 0x1404d7d70
lea rcx, [rbp - 1]
cwd
btr rdx, r8
mov r8, r10
cwd
add rcx, rsi
bswap edx
movzx rdx, r15w
mov rdx, rdi
jmp 0x1404d7d68
call fcn.14049fa7b
xor r11d, r11d
mov rdx, r11
btr r8w, r10w
sar r8d, 0x79
rol r8, 0xde
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
clc
add rcx, rdx
jmp 0x1404d7d98
inc rdx
cmp rbp, r10
mov byte [rcx + r14*8 + 0x3e], r11b
jmp 0x1404d7da8
cmp rdx, rsi
jmp 0x1404d7db0
jl 0x1404d7d87
lea rax, [rbp - 1]
bts rdx, r12
mov qword [rbp - 0x41], r11
sub r9b, cl
mov qword [rbp - 0x39], rax
cmc
lea r9, [rbp - 0x41]
mov eax, r11d
xchg r8b, al
not cl
movzx dx, r13b
lea rdx, [rbp - 0x39]
adc r8w, 0xb8e
sbb al, r9b
jmp 0x1404d7ded
cmp r15d, 4
lea rcx, [rsp + 0x48]
bswap r8
movsx r15w, r8b
sete al
movzx r15, r12w
inc eax
movsx r8, r9w
cmovl r15w, r13w
mov r15w, 0x6632
mov r8d, eax
mov r15b, bpl
mov r15d, eax
jmp 0x1404d7e23
call fcn.1404dd605
cmp rax, 0xffffffffffffffff
je 0x1404d7fe1
lea eax, [r13 - 1]
btr r13d, 0xa1
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
add rsi, rdi
jmp 0x1404d7e4a
jmp 0x1404d8019
movzx eax, byte [rdi]
cmc
or dh, ah
mov rdx, r13
mov cl, r13b
movsxd rcx, esp
sub rdx, rdi
rcl sil, cl
xor ch, 0x19
test r12b, 0x6c
movsx rsi, byte [rax + r15 + 0xb7d00]
movzx ax, spl
lea ecx, [rsi + 1]
neg ax
xor ax, 0x2ffd
btr ax, dx
movsxd rax, ecx
cmp rax, rdx
cmp rax, rdx
jmp 0x1404d7e95
jg 0x1404d825b
cmp ecx, 4
mov qword [rbp - 0x31], r11
lahf
mov eax, r11d
cmovnp cx, si
movsxd rbx, r10d
mov qword [rbp - 0x29], rdi
mov r8d, 0x72190cee
movzx r8w, sil
movzx rdx, r14w
sete al
lea r9, [rbp - 0x31]
movsx r8, cx
cwd
movsx r8d, bp
inc eax
lea rdx, [rbp - 0x29]
jmp 0x1404d7edc
mov r8d, eax
jmp 0x1404d7ee9
lea rcx, [rsp + 0x48]
jmp 0x1404d7efb
mov ebx, eax
jmp 0x1404d7f02
call fcn.1404dd605
cmp rax, 0xffffffffffffffff
je 0x1404d7fe1
add rsi, rdi
jmp 0x1404d7f19
mov r15d, ebx
jmp 0x1404d7f21
jmp 0x1404d8019
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
test dx, 0x4b34
test cl, 4
je 0x1404d7f88
mov al, byte [rdx + r14*8 + 0x3e]
test r11b, 0x96
cmp r10, 0x48b108f0
and cl, 0xfb
mov byte [rbp + 7], al
mov al, 0xd2
mov al, byte [rdi]
jmp 0x1404d7f67
mov byte [rdx + r14*8 + 0x3d], cl
movzx rdx, cx
cwd
jmp 0x1404d7f77
lea rdx, [rbp + 7]
jmp 0x1404d7f80
mov byte [rbp + 8], al
jmp 0x1404d7fc3
call fcn.1404a7122
movzx ecx, byte [rdi]
xor edx, edx
cmp bh, 0x58
jmp 0x1404d7f9b
cmp word [rax + rcx*2], dx
jge 0x1404d7fef
inc rsi
cmp rsi, r13
jmp 0x1404d7fb0
jae 0x1404d8319
mov rdx, rdi
movsx rcx, r10w
movsxd rcx, ecx
setnp cl
mov r8d, 2
lea rcx, [rsp + 0x48]
jmp 0x1404d7fd3
call fcn.140213ce6
cmp eax, 0xffffffff
jne 0x1404d8019
cmp byte [rbp - 0x71], 0
jmp 0x1404d7fea
jmp 0x1404d830b
mov r8, r15
movsx edx, si
lea rcx, [rsp + 0x48]
movsx edx, r12w
mov rdx, rdi
jmp 0x1404d8006
call fcn.140213ce6
cmp eax, 0xffffffff
jmp 0x1404d8013
je 0x1404d8383
mov ecx, dword [rbp - 0x59]
xor r9b, 0x6d
movzx r9, r9w
movsxd rax, edi
lea rax, [rbp + 0xf]
btr di, 0x7a
sub ebx, ebx
test r15, rcx
or r8b, 0xe4
movzx di, r9b
lea r8, [rsp + 0x48]
rcr r9w, 0x4a
mov qword [rsp + 0x38], rbx
rol dil, cl
lea rdi, [rsi + 1]
shld r9, r12, 0xb2
mov qword [rsp + 0x30], rbx
cmc
rcr r9, 0x88
mov r9d, r15d
mov dword [rsp + 0x28], 5
stc
sub edx, edx
jmp 0x1404d8076
mov qword [rsp + 0x20], rax
jmp 0x1404d8080
call fcn.1404c5aca
mov esi, eax
cmp rdi, r9
cmc
test eax, eax
jmp 0x1404d8092
je 0x1404d8447
mov rcx, qword [rbp - 0x49]
jmp 0x1404d80a1
lea r9, [rsp + 0x4c]
mov rdx, 0xa9e691b
not r8w
mov r8d, eax
cdq
movsxd rdx, r9d
mov qword [rsp + 0x20], rbx
cdq
movsx dx, r14b
lea rdx, [rbp + 0xf]
jmp 0x1404d80cc
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp bp, bp
test eax, eax
jmp 0x1404d80df
je 0x1404d843e
mov r15d, dword [rsp + 0x40]
test bh, 0x24
mov ebx, edi
sub ebx, dword [rbp - 0x21]
cmp r15, r12
jmp 0x1404d80fa
add ebx, r15d
cmp rdi, 0x4fdd5e5b
test r11b, 0x97
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jb 0x1404d8307
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d811f
jne 0x1404d81c2
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
movzx r8w, r15b
movsxd rdx, r9d
mov word [rsp + 0x44], ax
cdq
lea r8d, [r11 + 1]
movzx rdx, bx
movsx edx, bp
movsx dx, dil
mov qword [rsp + 0x20], r11
movsx dx, sil
cqo
cwd
lea rdx, [rsp + 0x44]
jmp 0x1404d8168
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp sil, 0x36
test dil, 0x92
test eax, eax
jmp 0x1404d8180
je 0x1404d8373
cmp dword [rsp + 0x4c], 1
jmp 0x1404d8190
jb 0x1404d8307
inc r15d
inc ebx
sar rsi, 0x6c
btc si, dx
mov dword [rsp + 0x40], r15d
bt esi, 0x76
bts si, r8w
btr esi, 3
mov dword [rbp - 0x65], ebx
add sil, 0xab
ror sil, cl
shr esi, 0x80
mov rsi, rdi
clc
cmp al, 0x73
test spl, r9b
cmp rdi, r13
jmp 0x1404d81d3
jae 0x1404d8395
mov rax, qword [rbp - 0x19]
mov edx, 0x445310f8
mov edx, dword [rbp - 0x55]
jmp 0x1404d7bcb
mov edx, r11d
test r8, r8
jmp 0x1404d81f5
jle 0x1404d824e
sub rdi, rsi
dec al
movsx cx, r15b
not ebx
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
inc edx
movzx rcx, bx
setl cl
mov rcx, qword [rbx + r12*8 + 0xba940]
clc
cmp r15b, 0xa2
add rcx, rsi
inc rsi
test bp, r9w
mov byte [rcx + r14*8 + 0x3e], al
sar ah, 0x4d
movsxd rax, edx
stc
cmp rax, r8
jl 0x1404d820e
mov ebx, dword [rbp - 0x65]
cmp r8w, r13w
clc
add ebx, r8d
jmp 0x1404d8256
jmp 0x1404d82ff
mov r9d, r11d
cmp r14d, r11d
test rdx, rdx
jmp 0x1404d8269
jle 0x1404d82fa
mov r13, qword [rbp - 0x11]
test bp, sp
mov r8, r11
rcr r10, cl
stc
bts cx, bp
mov r10, r13
cmp dh, 0xf8
and r13d, 0x3f
btr r11w, 0x64
sar r10, 6
lea r11, [r13*8]
rcl cl, cl
rcl al, 0xa7
add r11, r13
mov al, byte [r8 + rdi]
dec cl
inc r9d
setle cl
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404d82c1
inc r8
test r15d, 0x68273631
mov byte [rcx + r11*8 + 0x3e], al
bts eax, ecx
sar ah, cl
shld ax, r14w, 6
movsxd rax, r9d
jmp 0x1404d82e9
cmp rax, rdx
jmp 0x1404d82f1
jl 0x1404d82a5
sub r11d, r11d
add ebx, edx
bswap cx
mov dword [rbp - 0x65], ebx
bswap cx
inc cl
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404d8314
jmp 0x1404d83a2
mov al, byte [rdi]
dec cl
mov r8d, 0x6b0e2111
movsxd rcx, r8d
lea r8, [0x140000000]
movzx rcx, bx
mov cx, 0x78d5
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d8342
inc ebx
mov dword [rbp - 0x65], ebx
cmc
jmp 0x1404d834d
mov byte [rcx + r14*8 + 0x3e], al
sbb rax, r8
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp edi, r14d
cmp byte [rbp - 0x71], dl
jmp 0x1404d836e
jmp 0x1404d830b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
bsr ecx, r8d
sal ecx, 0x2e
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404d8390
jmp 0x1404d83a2
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
jmp 0x1404d83a2
je 0x1404d83b8
mov rax, qword [rsp + 0x50]
test spl, al
cmc
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
stc
cmc
clc
movsd xmm0, qword [rbp - 0x69]
test ax, 0x50b2
cmp r11b, r13b
test esi, ecx
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
bts rcx, r15
ror cl, 0x4e
shr rcx, 0x18
mov rcx, qword [rbp + 0x17]
test rcx, r15
xor rcx, rsp
jmp 0x1404d83ee
call fcn.14049bea6
mov rbx, qword [rsp + 0x140]
movzx r15d, cx
sal r13b, cl
add rsp, 0x100
not r14b
pop r15
pop r14
movsx r13w, r15b
pop r13
movsx rdi, bx
movzx rdi, r13w
pop r12
xchg dil, bpl
movsx di, sil
pop rdi
mov si, 0x5d05
jmp 0x1404d8436
pop rsi
pop rbp
jmp 0x1404d843d
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
test esp, 0x72c82fcf
cmp byte [rbp - 0x71], bl
jmp 0x1404d83a2