Function at 0x1400095d0
Capabilities:
Encode data using base64
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x140009920
cmp al, 0x54
je 0x140009930
cmp al, 0x73
je 0x140009650
cmp al, 0x66
je 0x1400096c0
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x14000961c
cmp al, 0x6f
jne 0x140009720
cmp byte [rdx + 1], 0x6e
jne 0x140009664
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400076d0
mov rsi, rax
test rax, rax
je 0x140009910
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x140009858
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x1400097d0
cmp al, 0x70
je 0x140009aa0
mov rcx, rbx
call fcn.140006ba0
mov rsi, rax
test rax, rax
je 0x140009910
mov eax, dword [rax]
cmp eax, 0x33
je 0x140009780
cmp eax, 0x34
je 0x140009978
cmp eax, 0x35
jne 0x140009910
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x140009a36
mov rcx, rbx
call fcn.1400095d0
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x140009873
cmp byte [rdx + 1], 0x70
jne 0x140009664
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
cmp byte [rdx + 2], 0x54
je 0x140009a90
call fcn.140005580
lea edx, [rax + 1]
not eax
test eax, 0x7fffffff
je 0x140009910
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x140009910
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x140009642
cmp al, 0x69
je 0x14000972c
cmp al, 0x74
jne 0x140009940
cmp byte [rdx + 1], 0x6c
jne 0x140009664
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x140009b60
cmp byte [rdx], 0
je 0x140009910
cmp byte [rdx + 1], 0
je 0x140009910
mov edx, 0x45
mov rcx, rbx
call fcn.14000a270
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x140009873
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x140009888
cmp byte [rdi + 1], 0x74
jne 0x140009888
cmp byte [rdi + 2], 0
jne 0x140009888
mov rcx, rbx
call fcn.140005e60
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x140009873
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x140009ac5
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x140009abd
sub eax, 0x43
cmp al, 0x37
ja 0x140009ac5
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x140009ac5
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.140009350
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x140009838
add rax, 1
mov qword [rbx + 0x18], rax
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rbx
call fcn.1400076d0
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140009642
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140009190
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140004cf0
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x1400099a0
jg 0x140009ad8
test ebp, ebp
je 0x14000998d
cmp ebp, 1
jne 0x140009910
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x140009a58
cmp dl, 0x70
je 0x140009a58
xor ebp, ebp
cmp eax, 0x73
jne 0x140009a80
cmp byte [rdi + 1], 0x50
jne 0x140009a80
cmp byte [rdi + 2], 0
jne 0x140009a80
mov rcx, rbx
call fcn.140009190
mov r9, rax
test ebp, ebp
je 0x1400096ad
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.140004cf0
mov r9, rax
jmp 0x1400096ad
xor esi, esi
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140008f70
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140005bc0
cmp al, 0x75
jne 0x140009664
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.140005710
mov rcx, rbx
mov rsi, rax
call fcn.140009190
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x140009873
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x1400096a2
cmp eax, 3
je 0x140009910
test eax, eax
jne 0x140009910
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x140009873
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x140009c94
cmp dl, 0x66
je 0x140009cf9
cmp eax, 0x64
jne 0x140009cdd
cmp byte [rdi + 1], 0x69
jne 0x140009cdd
cmp byte [rdi + 2], 0
jne 0x140009cdd
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400076d0
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x140009c10
cmp byte [rdi + 1], 0x6c
jne 0x140009c10
cmp byte [rdi + 2], 0
jne 0x140009c10
mov edx, 0x45
mov rcx, rbx
call fcn.14000a270
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.140004cf0
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x140009873
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14000a270
mov r9, rax
jmp 0x1400096ad
cmp byte [rdi + 1], dl
jne 0x1400098bc
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x1400098be
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x1400098bc
mov rcx, rbx
call fcn.1400095d0
mov r9, rax
jmp 0x1400098e6
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x1400096ed
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.1400095d0
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x140009873
cmp al, 0x2f
jg 0x14000980e
mov rcx, rbx
call fcn.140005e60
mov rdx, rax
jmp 0x140009838
cmp ebp, 3
jne 0x140009910
cmp eax, 0x71
jne 0x140009b78
cmp byte [rdi + 1], 0x75
jne 0x140009b78
cmp byte [rdi + 2], 0
jne 0x140009b78
mov rcx, rbx
call fcn.1400095d0
mov rcx, rbx
mov rdi, rax
call fcn.1400095d0
mov rcx, rbx
mov rbp, rax
call fcn.1400095d0
mov r9, rax
test rax, rax
je 0x140009910
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.140004cf0
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.140004cf0
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x140009873
mov rcx, rbx
call fcn.140005e60
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x140009748
cmp eax, 0x64
jne 0x140009b8d
cmp byte [rdi + 1], 0x58
jne 0x140009b8d
cmp byte [rdi + 2], 0
je 0x140009afa
movzx eax, byte [rdi]
cmp al, 0x66
je 0x140009d09
cmp al, 0x6e
jne 0x140009910
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x140009bb0
cmp al, 0x61
jne 0x140009910
mov edx, 0x5f
mov rcx, rbx
call fcn.14000a270
mov rcx, rbx
mov rdi, rax
call fcn.140005e60
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x140009d3d
cmp dl, 0x70
je 0x140009d16
cmp dl, 0x69
jne 0x140009910
cmp byte [rax + 1], 0x6c
jne 0x140009910
mov rcx, rbx
call fcn.1400095d0
mov r9, rax
jmp 0x140009b24
cmp eax, 0x64
jne 0x140009cb8
cmp byte [rdi + 1], 0x74
jne 0x140009cb8
cmp byte [rdi + 2], 0
jne 0x140009cb8
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x140009ced
cmp dl, 0x73
jne 0x140009c4c
cmp byte [rax + 1], 0x72
je 0x140009ccd
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400076d0
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x140009a13
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.140009190
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.140004cf0
mov rdi, rax
jmp 0x140009a13
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x140009ca8
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x1400099ad
mov rcx, rbx
call fcn.140005e60
mov rbp, rax
jmp 0x1400099e3
cmp eax, 0x70
jne 0x140009ccd
cmp byte [rdi + 1], 0x74
jne 0x140009ccd
cmp byte [rdi + 2], 0
je 0x140009c2d
mov rcx, rbx
call fcn.1400095d0
mov rdi, rax
jmp 0x140009a13
mov rcx, rbx
call fcn.1400095d0
mov rbp, rax
jmp 0x1400099e3
cmp byte [rax + 1], 0x73
jne 0x140009c4c
jmp 0x140009ccd
mov rcx, rbx
call fcn.140006ba0
mov rbp, rax
jmp 0x1400099e3
mov rcx, rbx
call fcn.140006ba0
jmp 0x140009b02
cmp byte [rax + 1], 0x69
jne 0x140009910
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.14000a270
mov r9, rax
jmp 0x140009b24
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x140009b24