Function at 0x14005a810
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x1400c9008]
xor rax, rsp
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x18], rdx
xor r13d, r13d
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], 7
lea r8d, [r13 + 0x14]
lea rdx, str.HPSysInfoRpcEndpoint
lea rcx, [rbp + 0x48]
call fcn.140005ae0
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x28]
call qword [sym.imp.RpcClient.Native.dll_public:_static_class_std::shared_ptr_class_Hp::Bridge::Client::Native::RpcClient____cdecl_Hp::Bridge::Client::Native::RpcClient::GetClientForEndpoint_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___]
nop
lea rcx, [rbp + 0xb8]
call qword [sym.imp.RpcClient.Native.dll_public:_void___cdecl_Hp::Bridge::Client::Core::ServerInfo::constructor_void____ptr64]
mov ebx, r13d
mov rdi, qword [rbp - 0x28]
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], 7
xor r8d, r8d
lea rdx, [0x140077fa0]
lea rcx, [rbp + 0x68]
call fcn.140005ae0
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0xb8]
mov rcx, rdi
call qword [sym.imp.RpcClient.Native.dll_public:_int___cdecl_Hp::Bridge::Client::Core::RpcClient::OpenConnection_class_Hp::Bridge::Client::Core::ServerInfo____ptr64__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64]
mov esi, eax
mov r14d, 0xffffffff
test eax, eax
je 0x14005a8f5
lea ecx, [r14 + 0xb]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x1f4
jl 0x14005a892
jmp 0x14005b0e3
lea rcx, [rsp + 0x50]
call fcn.140024a40
nop
movsd xmm0, qword [0x1400a91c0]
movsd qword [rbp - 0x60], xmm0
lea rax, [rbp - 0x60]
mov qword [rbp + 8], rax
lea rax, [0x1400cdfd8]
mov qword [rbp + 0xa8], rax
lock inc qword [0x1400cdfd8]
mov rcx, qword [0x1400cdfd0]
test rcx, rcx
je 0x14005a965
mov qword [rbp - 0x58], r13
mov rax, qword [rcx]
lea r8, [rbp - 0x58]
movsd xmm1, qword [rbp - 0x60]
call qword [rax + 0x48]
test eax, eax
js 0x14005b153
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x68], rax
lock dec qword [0x1400cdfd8]
jmp 0x14005a97c
lock dec qword [0x1400cdfd8]
lea r8, [rbp + 8]
lea rdx, [rsp + 0x68]
call fcn.140045b50
nop
lea r9, [rbp + 0x168]
lea r8, [rbp + 0x170]
mov edx, 4
lea rcx, str.type
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov rdi, qword [rsp + 0x68]
mov r8, rdi
mov rdx, qword [rbp + 0x168]
call qword [rax + 0x38]
test eax, eax
js 0x14005b15e
test rdi, rdi
je 0x14005a9cc
lea rcx, [rsp + 0x68]
call fcn.140013170
mov qword [rbp - 0x40], r13
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x14005a9df
mov rcx, r13
jmp 0x14005a9f7
mov qword [rbp - 0x50], r13
mov rax, qword [rcx]
lea r8, [rbp - 0x50]
lea rdx, [0x140088dc8]
call qword [rax]
mov rcx, qword [rbp - 0x50]
mov qword [rbp - 0x48], rcx
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x38]
test eax, eax
js 0x14005b169
lea rcx, [rbp - 0x48]
call fcn.140013170
mov rdi, qword [rbp - 0x40]
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], r13w
lea rdx, [rsp + 0x58]
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8d, dword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.140005ae0
nop
test rdi, rdi
je 0x14005aa72
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rbp + 0x10], r13
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], r13w
mov r12, qword [rbp - 0x28]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x60], rax
mov qword [rbp - 0x18], r13
mov qword [rbp - 8], r13
mov qword [rbp], r13
lea r14, [rbp + 0xe8]
mov rdi, qword [rbp + 0xe8]
mov rbx, qword [rbp + 0x100]
cmp rbx, 8
cmovae r14, rdi
mov r15, qword [rbp + 0xf8]
cmp r15, 8
jae 0x14005aae5
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x18], xmm0
mov esi, 7
jmp 0x14005ab1d
mov rsi, r15
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
cmova rsi, rax
lea rdx, [rsi + 1]
call fcn.140005c10
mov qword [rbp - 0x18], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 8], r15
mov qword [rbp], rsi
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], 7
mov r8d, 0xd
lea rdx, str.SMBiosService
lea rcx, [rbp + 0x88]
call fcn.140005ae0
nop
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x18]
mov r8d, 2
lea rdx, [rbp + 0x88]
mov rcx, r12
call qword [sym.imp.RpcClient.Native.dll_public:_int___cdecl_Hp::Bridge::Client::Core::RpcClient::ExecuteCommand_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____unsigned_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64____ptr64]
mov esi, eax
mov dword [rbp - 0x68], eax
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.RpcClient.Native.dll_public:_int___cdecl_Hp::Bridge::Client::Core::RpcClient::CloseConnection_void____ptr64]
test esi, esi
jne 0x14005b029
lea rcx, [rsp + 0x48]
call fcn.140024a40
nop
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae rcx, qword [rbp + 0xc8]
mov edx, dword [rbp + 0xd8]
test edx, edx
jne 0x14005abca
mov qword [rbp + 0x128], r13
jmp 0x14005abdd
lea r9, [rbp + 0x128]
lea r8, [rbp + 0x130]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea rax, [rbp + 0x128]
mov qword [rbp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rbp + 0x30], rax
lea rax, [0x1400cdff8]
mov qword [rbp + 0xb0], rax
lock inc qword [0x1400cdff8]
cmp qword [0x1400cdff0], 0
je 0x14005ac2c
lea rdx, [0x1400cdff0]
lea rcx, [rbp + 0x28]
call fcn.1400590d0
nop
lock dec qword [0x1400cdff8]
jmp 0x14005ac3d
lock dec qword [0x1400cdff8]
lea rdx, [rbp + 0x28]
call fcn.140059140
test al, al
je 0x14005b009
lea r9, [rbp + 0x188]
lea r8, [rbp + 0x190]
mov edx, 6
lea rcx, str.result
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0x188]
call qword [rax + 0x40]
test eax, eax
js 0x14005b174
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rbx
lea rcx, str.Hp_Bridge_Network
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::SetProvider_char_const____ptr64_]
mov qword [rsp + 0x60], rax
lea rdx, [0x1400cde70]
lea rcx, [0x1400c9f18]
call qword [sym.imp.VCRUNTIME140.dll___std_type_info_name]
lea r9, [rbp + 0x1a8]
lea r8, [rbp + 0x1b0]
mov edx, 8
lea rcx, str.instance
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rcx, qword [rbx]
mov rdi, qword [rcx + 0x58]
lea r8, [rbp - 0x30]
mov rdx, qword [rbp + 0x1a8]
mov rcx, rbx
call rdi
test eax, eax
js 0x14005b17f
cvttsd2si eax, qword [rbp - 0x30]
mov r13d, 1
cmp eax, r13d
jl 0x14005affc
nop word [rax + rax]
mov edx, r13d
lea rcx, [rbp + 0x108]
call fcn.14001a130
nop
lea rcx, [rbp + 0x108]
cmp qword [rbp + 0x120], 8
cmovae rcx, qword [rbp + 0x108]
mov edx, dword [rbp + 0x118]
test edx, edx
jne 0x14005ad4e
xor edi, edi
mov edx, edi
mov qword [rbp + 0x148], rdx
jmp 0x14005ad6a
lea r9, [rbp + 0x148]
lea r8, [rbp + 0x150]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rdx, qword [rbp + 0x148]
xor edi, edi
mov qword [rbp - 0x38], rdi
mov rax, qword [rbx]
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
js 0x14005b148
mov r15, qword [rbp - 0x38]
mov qword [rbp + 0x20], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov rsi, rdi
mov qword [rbp - 0x70], rdi
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov r12d, eax
xor edx, edx
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov dword [rbp + 0x3c], edi
mov dword [rsp + 0x40], edi
test rax, rax
je 0x14005af9b
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, r12d
mov rcx, r14
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x14005af89
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov ecx, dword [rsp + 0x40]
mov rdi, rax
xor eax, eax
rep stosb byte [rdi], al
mov edx, dword [rsp + 0x40]
mov dword [rsp + 0x44], edx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov r8d, 1
mov edx, r12d
mov rcx, r14
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x14005af6c
mov eax, dword [rsp + 0x44]
mov dword [rbp + 0x38], eax
mov qword [rbp + 0x40], rbx
mov edi, eax
test eax, eax
je 0x14005ae87
mov rdx, qword [rbp - 0x78]
cmp rdx, rsi
je 0x14005ae6a
movzx eax, byte [rbx]
mov byte [rdx], al
inc rdx
mov qword [rbp - 0x78], rdx
jmp 0x14005ae7e
mov r8, rbx
lea rcx, [rbp - 0x80]
call fcn.14005cb30
mov rsi, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x78]
inc rbx
sub rdi, 1
jne 0x14005ae57
mov rdi, qword [rbp + 0x18]
mov rax, qword [rdi + 8]
cmp rax, qword [rdi + 0x10]
je 0x14005aea8
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.140019fd0
add qword [rdi + 8], 0x18
jmp 0x14005aeb8
lea r8, [rbp - 0x80]
mov rdx, rax
mov rcx, rdi
call fcn.14005c800
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14005aeef
mov rdx, qword [rbp - 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005aee9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005af65
call fcn.140061c30
nop
test r15, r15
je 0x14005af04
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rbp + 0x20], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x14005af4a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005af45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005afeb
call fcn.140061c30
inc r13d
cvttsd2si eax, qword [rbp - 0x30]
cmp r13d, eax
jg 0x14005aff9
mov rbx, qword [rsp + 0x70]
jmp 0x14005ad10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Problem_while_decoding_from_base64.__i
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
jmp 0x14005af9b
lea rdx, str.Problem_while_finding_the_count_of_bytes_to_decode_from_base64.
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
mov esi, 0xffffffff
test r15, r15
je 0x14005afae
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x14005affc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005aff2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005aff2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061c30
jmp 0x14005affc
mov esi, dword [rbp - 0x68]
lea rcx, [rsp + 0x78]
call fcn.140013170
xor r13d, r13d
cmp qword [rsp + 0x48], 0
je 0x14005b01b
lea rcx, [rsp + 0x48]
call fcn.140013170
mov rdi, qword [rbp + 0xe8]
mov rbx, qword [rbp + 0x100]
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x14005b072
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b06d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b06d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061c30
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], r13w
cmp rbx, 8
jb 0x14005b0cb
lea rdx, [rbx*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14005b0c2
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b0c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140061c30
nop
cmp qword [rsp + 0x50], 0
je 0x14005b0dd
lea rcx, [rsp + 0x50]
call fcn.140013170
mov r14d, 0xffffffff
mov rdi, qword [rbp - 0x20]
test rdi, rdi
je 0x14005b116
mov eax, r14d
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14005b116
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], r14d
cmp r14d, 1
jne 0x14005b116
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov eax, esi
mov rcx, qword [rbp + 0x1c8]
xor rcx, rsp
call fcn.140061c10
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lfence
mov ecx, eax
call fcn.1400062e0
nop
lfence
mov ecx, eax
call fcn.1400062e0
nop
lfence
mov ecx, eax
call fcn.1400062e0
nop
lfence
mov ecx, eax
call fcn.1400062e0
nop
lfence
mov ecx, eax
call fcn.1400062e0
nop
lfence
mov ecx, eax
call fcn.1400062e0
int3