Function at 0x140bd2f84
Capabilities:
Encode data using base64

Disassembly:
mov dword [rdi + rax - 0x1f7b43e4], ebx
imul eax, edx
lea rdi, [rdi + rcx - 0x2f37eb54]
movzx r8d, al
and r8, r8
jmp r9
mov dword [rdi + 4], ebx
mov eax, 0xe084bc14
mov ebx, dword [rsi + riz]
lea rdx, [rax - 0x31facc7c]
movzx r10d, ax
bts r10d, 0x39
lea rsi, [rsi + r10 - 0x200bc10]
xor ebx, ebp
lea rcx, [r10 + 0x2b367334]
lea r8, [r10*2 + 0x4b0129ae]
ror ebx, 3
add ecx, r10d
bswap ebx
sar r10w, 0x8c
sbb r10, 0x3712f83d
xor ebx, 0xf696f285
lea ebx, [rbx + r10*2 - 0x655ed427]
movsx r11d, r8b
push rbp
xor dword [rsp + r10*2 + 0x6a23f086], ebx
mov ebp, 0x281a0ba5
sar bp, 0x69
pop rbp
lea r10, [r8 + rax - 0x33e70fe3]
movsxd rbx, ebx
sbb r8, 0x2b3dad3b
neg eax
add r9, rbx
xor r8w, cx
neg r8b
mov ebx, dword [rdi + rax*2 - 0x3ef687d4]
mov r8d, dword [rdi + rax*4 - 0x7ded0fa8]
or ebx, r8d
not ebx
shl r11b, 0x26
jnp 0x140b80e81
inc edx
rol edx, 1
lea rax, [rax + r10 - 0xcde874a]
xchg r10, r8
add edx, 0xa08def3d
xor cx, ax
call fcn.140b90b55
mov edx, 0x114ac35
xor dl, dh
shr dx, 0xea
mov rdx, qword [rdi + rdx*2 - 0x2280056]
mov ebx, dword ss:[rdx]
jns 0x140b97e9a
ror r8d, 1
xchg r10b, dl
sar bpl, 0x86
dec r11
sbb r8d, r11d
mov qword [rsp + r11*8 + 8], rbp
ror r8d, 3
movzx ecx, word [rsp + r11 + 4]
ror word [rsp + r11*2 + 5], 0x6f
or qword [rsp + r11*2 + 2], rdi
call fcn.140b874c6
mov edx, dword [rsi]
mov eax, 0x532cfe3c
lea rsi, [rsi + rax - 0x532cfe38]
movzx r8d, ax
mov ecx, r8d
xor edx, ebp
neg rcx
lea r10, [rcx + rax*8 - 0x3cd810f2]
jle 0x140bb01bd
mul r8d
dec cl
shl bpl, 0xe7
sbb dl, al
rol cl, 1
xor cl, 0xab
inc rbp
ror r11b, 0x83
xor dil, cl
btr edx, r8d
btc edx, 0xbc
inc ebp
adc rcx, rsp
bswap r10d
and r10w, r8w
mov rax, qword [rcx + rbp*2 - 0x3ee9b304]
xadd r10w, r8w
lea r9, [r9 + rbp*2 - 0x3ee9b30c]
lea r10, [r11 + rdx*2 + 0x382171ac]
neg r11b
mov qword [r9 + rbp - 0x1f74d982], rax
jbe fcn.140badb97
mov ebx, dword [rsi]
mov ecx, 0xd7115e3a
movzx r11d, cx
movsx eax, cl
lea rsi, [rsi + r11 - 0x5e36]
xor ebx, ebp
lea rax, [rax*2 + 0x39a9f52b]
or rax, 0x73fd125
ror ebx, 3
lea rcx, [rax + rcx*2 + 0x7d86f581]
btc cx, cx
lea ebx, [rbx + r11*2 + 0x7511ca30]
neg ebx
lea r11, [rcx*8 + 0x2d2a7e92]
not ebx
push rbp
xor dword [rsp + rax*2 - 0x7f7feb7e], ebx
not ecx
shl cl, 0xa3
not r11b
pop rbp
ja 0x140c09abd

Function at 0x140bdb9b2
Capabilities:
Encode data using base64

Disassembly:
lea rsp, [rsp + 0x10]
je 0x140b699ab
jmp 0x140bca928
call fcn.140b5fe15
mov r8d, 0x2e8be5aa
lea rcx, [r8*8 + 0x7dbb55ae]
mov ebx, ecx
mov r10, qword [r8 + rdi - 0x2e8be5aa]
movzx edx, cl
lea r11, [rcx*4 - 0x4474547d]
mov ax, word [rdi + r8 - 0x2e8be5a2]
and r8b, 0x1a
jge 0x140c187eb
test r10, r10
jmp 0x140b690fd
mov ecx, dword [rsi + rdx*2 - 0x1fc]
movzx eax, r11b
mul ax
bts ebx, ebx
lea rsi, [rdx + rsi + 4]
setae dl
xor ecx, ebp
inc bl
shl rbx, 0x4f
not al
inc ecx
neg r8d
rol ecx, 1
lea r10, [r8*8 - 0x495407e6]
idiv r10d
lea rdi, [r8 + rdi - 0x2e8be500]
mov word ss:[r8 + r10 - 0x2e8be50a], ax
or rbx, rcx
jne 0x140c00a64

Function at 0x140bdcd09
Capabilities:
Parse pe header

Disassembly:
or byte [rsp + 0xf], 0x2e
neg dword [rsp + 9]
xor ecx, ecx
mov qword [rsp], 0xffffffffb43107ae
call fcn.140c07b4e