Function at 0x140064ce0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
mov eax, dword [0x141dc7380]
xor eax, dword [0x141dc7384]
imul rax, rax, 0x62ad99f3
shr rax, 0x3d
imul eax, eax, 0x4bf71f2a
and eax, 0xd04582b6
cmp eax, 0x947e8314
ja 0x140064d74
mov eax, dword [0x141dc7388]
add eax, dword [0x141dc738c]
and eax, 0xc0001010
mov edx, 0xe8dd0fa7
imul rdx, rax
shr rdx, 0x3e
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
mov eax, 0x810
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
cmp edx, 0xea9d0706
jbe 0x140064d9d
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x810
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
jmp 0x140064d1e
mov r9, qword [rcx]
mov eax, dword [0x141dc7390]
xor eax, dword [0x141dc7394]
add eax, 0xe5688fd6
or eax, 0x888cd797
imul rax, rax, 0xd396bfb
shr rax, 0x39
cmp eax, 0xfbd361b1
je 0x140064dd5
mov rbx, qword [r9 + 0x200]
xor eax, eax
test al, al
je 0x140064dde
mov rax, qword [r9 + 0x200]
jmp 0x140064dc8
mov qword [rbp], r8
mov rax, rbx
and rax, 0xfffffffffffffff8
nop dword [rax]
mov edx, dword [0x141dc7398]
sub edx, dword [0x141dc739c]
cmp edx, 0x952cfbcc
je 0x140064df0
mov qword [rbp - 0x18], rcx
test rax, rax
mov qword [rbp - 0x10], r9
je 0x1400650c4
mov rdi, rsi
add rdi, 8
jmp 0x140064e31
mov rbx, qword [rbp - 8]
mov rax, rbx
and rax, 0xfffffffffffffff8
je 0x1400650c4
mov r8, qword [rax]
mov eax, r8d
and eax, 7
cmp eax, 1
jne 0x1400655dd
nop word cs:[rax + rax]
mov eax, dword [0x141dc73a0]
xor edx, edx
div dword [0x141dc73a4]
add eax, 0xceee3433
and eax, 0x6eaa44bc
cmp eax, 0x7f2fda4c
je 0x140064e50
nop
mov eax, dword [0x141dc73a8]
imul eax, dword [0x141dc73ac]
add eax, 0x6b898181
or eax, 0xd40b2d86
xor eax, 0x87485b23
cmp eax, 0x99b06a70
ja 0x140064e70
nop word cs:[rax + rax]
mov eax, dword [0x141dc73b0]
sub eax, dword [0x141dc73b4]
or eax, 0x379874d7
imul eax, eax, 0x33619379
or eax, 0x91966819
cmp eax, 0xf27f4be1
ja 0x140064ea0
test bl, 0x78
jne 0x140065609
and rbx, 0xffffffffffffff80
mov eax, dword [0x141dc73b8]
imul eax, dword [0x141dc73bc]
xor eax, 0x200a2810
or eax, 0x5df414af
cmp eax, 0x92f58944
je 0x140064ed0
mov rax, qword [rbx + 0x810]
cmp rax, 0x40
ja 0x140065656
lea r14, [rbx + 0x10]
mov rcx, rax
shl rcx, 5
lea r15, [rbx + rcx]
add r15, 0x10
nop word cs:[rax + rax]
mov ecx, dword [0x141dc73c0]
add ecx, dword [0x141dc73c4]
imul ecx, ecx, 0x23add9e3
add ecx, 0x78a015f5
cmp ecx, 0x7fecc42f
ja 0x140064f20
mov qword [rbp - 8], r8
test rax, rax
je 0x140065017
nop dword [rax]
mov eax, dword [0x141dc73e0]
xor edx, edx
div dword [0x141dc73e4]
and eax, 0xf6aa2bca
imul eax, eax, 0x8838e435
add eax, 0x20a03fa5
cmp eax, 0xb2a29037
jbe 0x140064fb0
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x141db6250]
movups xmmword [r14], xmm0
movups xmm0, xmmword [0x141db6260]
movups xmmword [r14 + 0x10], xmm0
sub rsp, 0x20
mov rcx, rdi
call qword [rsi]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dc73e8]
or eax, dword [0x141dc73ec]
add eax, 0x62204840
or eax, 0x2955d310
imul r13d, eax, 0x93971f12
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x141db6250]
movups xmmword [r14], xmm0
movups xmm0, xmmword [0x141db6260]
movups xmmword [r14 + 0x10], xmm0
sub rsp, 0x20
mov rcx, rdi
call qword [rsi]
add rsp, 0x20
cmp r13d, 0xb31ac2c9
jb 0x140064fb0
add r14, 0x20
cmp r14, r15
jne 0x140064f50
mov ecx, 0xa375cc8d
mov eax, dword [str.MC_m]
sub eax, dword [0x141dc7404]
imul rax, rcx
shr rax, 0x3e
or eax, 0x2ebc3535
add eax, 0xe67a2498
cmp eax, 0x1783af79
ja 0x14006501c
mov rbx, qword [rbx - 8]
mov r14, qword [0x141dd7fe0]
mov eax, dword [0x141dc7408]
xor eax, dword [0x141dc740c]
add eax, 0x99ff8acf
xor eax, 0x71fdaf5f
cmp eax, 0x2488b462
mov r13, qword [sym.imp.KERNEL32.dll_HeapFree]
jb 0x1400650af
mov eax, dword [0x141dc7410]
mov ecx, dword [0x141dc7414]
add eax, ecx
add eax, 0x584bf9e3
and eax, 0x53b431d1
imul r15d, eax, 0x8a3e6812
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
add rsp, 0x20
cmp r15d, 0x78efcf60
jae 0x140064e20
sub rsp, 0x20
mov rcx, r14
xor edx, edx
mov r8, rbx
call r13
add rsp, 0x20
jmp 0x140065070
mov r13, qword [rbp - 0x10]
mov rcx, qword [r13 + 0x80]
mov r8, rcx
and r8, 0xfffffffffffffff8
mov eax, dword [0x141dc7420]
mov edx, dword [0x141dc7424]
add eax, edx
add eax, 0x35cc8e95
xor eax, 0x8c89c
and eax, 0x1cbcabe
cmp eax, 0xaa1d910a
jne 0x140065110
mov rax, qword [r8 + 0x810]
nop word cs:[rax + rax]
mov eax, dword [0x141dc7428]
or eax, dword [0x141dc742c]
imul rax, rax, 0x596426ad
shr rax, 0x3e
imul eax, eax, 0x71f9c884
add eax, 0xd48ebee1
mov rdx, qword [r8 + 0x810]
cmp eax, 0xf30eb3d1
ja 0x140065110
mov r14, rdx
and r14, 0xfffffffffffffff8
je 0x1400654f5
mov rax, qword [rbp]
add rax, 8
mov qword [rbp - 8], rax
mov rbx, r12
add rbx, 8
mov eax, dword [0x141dc7430]
or eax, dword [0x141dc7434]
add eax, 0xda28e3c5
and eax, 0xdbc81ba1
cmp eax, 0x3be60e16
je 0x140065160
xor esi, esi
mov edi, 0x92a7e63d
test sil, sil
je 0x1400651a0
mov rax, rcx
lock cmpxchg qword [r13 + 0x80], rdx
nop word cs:[rax + rax]
mov r9d, dword [0x141dc7438]
or r9d, dword [0x141dc743c]
imul r9, rdi
shr r9, 0x3f
add r9d, 0x15419ce1
mov rax, rcx
lock cmpxchg qword [r13 + 0x80], rdx
sete al
cmp r9d, 0xa1667062
ja 0x1400651a0
jmp 0x1400652b8
mov rcx, qword [r13 + 0x80]
mov r8, rcx
mov eax, dword [0x141dc7450]
xor eax, dword [0x141dc7454]
and r8, 0xfffffffffffffff8
and eax, 0xb6d117f6
add eax, 0x1e6f2e94
cmp eax, 0xe24a2052
jbe 0x140065220
mov rax, qword [r8 + 0x810]
nop word cs:[rax + rax]
mov eax, dword [0x141dc7458]
xor edx, edx
div dword [0x141dc745c]
xor eax, 0x7d0e7833
add eax, 0x8b0f0a97
mov rdx, qword [r8 + 0x810]
cmp eax, 0x11e0cb6a
ja 0x140065220
mov r14, rdx
and r14, 0xfffffffffffffff8
je 0x1400654f5
mov rax, rcx
lock cmpxchg qword [r13 + 0x80], rdx
sete al
mov r9d, dword [0x141dc7440]
xor r9d, dword [0x141dc7444]
or r9d, 0xcb758a39
imul r9d, r9d, 0x4911a97a
add r9d, 0xeef2c35e
cmp r9d, 0xabcd44fa
ja 0x140065262
nop
mov r9d, dword [0x141dc7448]
mov r10d, dword [0x141dc744c]
add r9d, r10d
add r9d, 0x8681163f
and r9d, 0xcd2774c5
cmp r9d, 0x9ed4f121
ja 0x140065290
test al, al
je 0x1400651e0
mov rax, qword [r13 + 0x100]
cmp rcx, rax
jne 0x1400652d8
mov rax, rcx
lock cmpxchg qword [r13 + 0x100], rdx
test sil, sil
je 0x1400652f0
mov rax, qword [0x141dd7fe0]
nop word cs:[rax + rax]
mov eax, dword [0x141dc7460]
and eax, dword [0x141dc7464]
xor eax, 0xe586258b
imul eax, eax, 0x679dc1bb
mov rcx, qword [0x141dd7fe0]
cmp eax, 0xe7364c13
ja 0x1400652f0
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov r15, qword [r14]
add r14, 8
mov rax, qword [rbp]
mov qword [rax], r15
sub rsp, 0x20
mov r8d, 0x808
mov rcx, qword [rbp - 8]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
add rsp, 0x20
test r15, r15
je 0x1400654f5
mov eax, dword [0x141dc7468]
xor edx, edx
div dword [0x141dc746c]
cmp eax, 0x23b34d45
je 0x140065356
mov rax, qword [rbp]
mov r14, qword [rax + 0x800]
cmp r14, 0x40
ja 0x1400656b4
test r14, r14
je 0x140065468
shl r14, 5
mov r15, qword [rbp]
add r14, r15
nop word cs:[rax + rax]
mov eax, dword [0x141dc7470]
xor eax, dword [0x141dc7474]
add eax, 0xb0da84d1
or eax, 0xc9f038a9
cmp eax, 0x335b52b6
jne 0x140065400
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
movups xmm0, xmmword [0x141db6250]
movups xmmword [r15], xmm0
movups xmm0, xmmword [0x141db6260]
movups xmmword [r15 + 0x10], xmm0
sub rsp, 0x20
mov rcx, rbx
call qword [r12]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dc7478]
xor eax, dword [0x141dc747c]
or eax, 0xf4f7bef9
imul r13d, eax, 0x73da176c
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
movups xmm0, xmmword [0x141db6250]
movups xmmword [r15], xmm0
movups xmm0, xmmword [0x141db6260]
movups xmmword [r15 + 0x10], xmm0
sub rsp, 0x20
mov rcx, rbx
call qword [r12]
add rsp, 0x20
cmp r13d, 0x725729ff
je 0x140065400
add r15, 0x20
cmp r15, r14
jne 0x1400653a0
mov r13, qword [rbp - 0x10]
mov rcx, qword [r13 + 0x80]
mov eax, dword [0x141dc7480]
xor eax, dword [0x141dc7484]
or eax, 0xe3dde691
add eax, 0xe47f133
mov edx, 0x98bd16c9
imul rax, rdx
shr rax, 0x3e
cmp eax, 0xef1fd978
ja 0x1400654cd
nop dword [rax]
mov eax, dword [0x141dc7488]
xor edx, edx
div dword [str._HV]
xor eax, 0x20000000
and eax, 0xa0130000
mov r8, rcx
and r8, 0xfffffffffffffff8
mov rdx, qword [r8 + 0x810]
cmp eax, 0x7a05101
jne 0x1400654e0
mov rax, rcx
and rax, 0xfffffffffffffff8
mov rax, qword [rax + 0x810]
jmp 0x1400654a0
mov r14, rdx
and r14, 0xfffffffffffffff8
test sil, sil
jne 0x1400654e7
test r14, r14
jne 0x140065184
mov eax, dword [0x141dc7490]
xor eax, dword [0x141dc7494]
imul rax, rax, 0x6ab200a1
shr rax, 0x3c
add eax, 0x191821ec
or eax, 0x62d1276d
cmp eax, 0x2d97eb0e
jne 0x140065524
mov rax, qword [r13 + 0x80]
mov eax, 0xacb583d1
nop dword [rax]
mov ecx, dword [0x141dc7498]
and ecx, dword [0x141dc749c]
imul rcx, rax
shr rcx, 0x3f
mov r8, qword [r13 + 0x80]
cmp ecx, 0x47dde9c8
je 0x140065530
and r8, 0xfffffffffffffff8
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
nop word cs:[rax + rax]
mov ecx, dword [0x141dc74a0]
xor ecx, dword [0x141dc74a4]
add ecx, 0xf68a3055
cmp ecx, 0x18a5498e
jb 0x140065580
cmp rax, 0xffffffffffffffff
je 0x140065779
lea rcx, [rax + 8]
mov edx, dword [0x141dc74a8]
imul edx, dword [0x141dc74ac]
or edx, 0x2365a44a
imul rdx, rdx, 0x34ec565d
shr rdx, 0x3c
or edx, 0x3c61e524
cmp edx, 0xa532678b
jbe 0x1400656c2
jmp 0x1400656ee
mov eax, dword [0x141dc7418]
and eax, dword [0x141dc741c]
xor eax, 0x2f55be67
imul eax, eax, 0xfe8072a2
add eax, 0x387f47ea
cmp eax, 0x5f06b39f
jae 0x1400656b6
jmp 0x1400656be
mov eax, dword [0x141dc73f0]
xor edx, edx
div dword [0x141dc73f4]
xor eax, 0x8608b008
and eax, 0x961ef83c
imul eax, eax, 0x383bebe2
cmp eax, 0x9136c062
jne 0x140065630
ud2
mov eax, dword [0x141dc73f8]
and eax, dword [0x141dc73fc]
xor eax, 0xc200
or eax, 0xd53c0532
and eax, 0xddfccf32
ud2
mov eax, dword [0x141dc73c8]
xor edx, edx
div dword [0x141dc73cc]
cmp eax, 0xc90e57d7
je 0x140065698
mov eax, dword [0x141dc73d0]
add eax, dword [0x141dc73d4]
mov ecx, 0x84c84bbb
imul rcx, rax
shr rcx, 0x3f
imul eax, ecx, 0x9e2012f4
xor eax, 0xe1423d0a
ud2
ud2
ud2
ud2
ud2
mov r8d, dword [0x141dc74b0]
and r8d, dword [0x141dc74b4]
xor r8d, 0x27269a50
add r8d, 0x96e84b25
lock dec qword [rcx]
sete dl
cmp r8d, 0x5902746e
jae 0x1400656f4
lock dec qword [rcx]
jmp 0x1400656c2
test dl, dl
je 0x140065779
mov rsi, qword [rax - 8]
mov rdi, qword [0x141dd7fe0]
mov eax, dword [0x141dc74b8]
or eax, dword [0x141dc74bc]
or eax, 0x1d1910
imul eax, eax, 0x3c2a4e18
or eax, 0xff0dd194
cmp eax, 0xe9e33f48
jae 0x140065740
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov r14d, dword [0x141dc74c0]
sub r14d, dword [0x141dc74c4]
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
add rsp, 0x20
cmp r14d, 0xe2cc4473
je 0x140065750
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x140065780
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret