Function at 0x1404d8ef6
Capabilities:
Encode data using base64
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
cbw
push r12
push r13
mov r13b, r11b
btc r12d, r13d
push r14
sar r12w, 0x6a
push r15
cmc
movsxd rax, r8d
btr bp, 0xfb
lea rbp, [rsp - 0x27]
movsx r12d, sp
cwde
dec si
sub rsp, 0x100
mov rax, qword [0x1400b7288]
xor rax, rsp
movsx r14w, r14b
btc r13d, 0x4c
mov qword [rbp + 0x17], rax
mov esi, 0x3ef23489
movsxd rsi, edx
bswap r13w
bts r14w, di
mov r15, r8
mov rax, rsi
mov qword [rbp - 9], rcx
bts r12, r8
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
btr r13d, r10d
and eax, 0x3f
movsx r13w, cl
btc r14w, r15w
mov r13d, r9d
clc
bsf r14d, r9d
add r13, r8
setnp r12b
shrd r12w, ax, 0x1c
cmp r9, 0x1bc2252c
mov qword [rbp - 0x21], r8
dec r14b
shr r12b, 0xe2
mov r12, rsi
mov qword [rbp - 0x51], r13
rol r14b, cl
sar r12, 6
xchg r14b, r14b
lea r14, [rax + rax*8]
mov ax, 0x8c7
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d8fd1
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d8fdb
mov qword [rbp - 0x49], rax
jmp 0x1404d8fe4
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
setns cl
not ch
movsx rcx, r9w
lea rcx, [rsp + 0x50]
jmp 0x1404d8fff
mov dword [rbp - 0x59], eax
call fcn.1404a1f46
mov rcx, qword [rsp + 0x58]
sub r11d, r11d
mov dword [rbp - 0x69], r11d
sbb rdi, 0x37326545
mov ebx, r11d
clc
mov dword [rbp - 0x65], ebx
mov rdi, r15
bsr edx, r8d
mov edx, dword [rcx + 0xc]
mov ecx, r11d
clc
stc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
jmp 0x1404d903c
cmp r15, r13
jmp 0x1404d9044
jae 0x1404d985c
mov rax, rsi
xor sil, 0xcd
mov rsi, r15
sar rax, 6
add r15b, r8b
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
mov r15d, 1
mov byte [rsp + 0x44], cl
cmp r13b, spl
test r9w, 0x5acd
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404d9084
jne 0x1404d93be
lea r15, [0x140000000]
sar dh, 0xee
test r12, r14
cmovns si, ax
mov edx, r11d
test di, ax
mov r9, qword [r15 + rax*8 + 0xba940]
sub rax, 0x23b357e3
shr sil, cl
sar ax, cl
mov rsi, r11
bsr ax, ax
lea rax, [r9 + r14*8]
cmc
stc
cmp cl, 9
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d90d0
je 0x1404d90f0
inc edx
jmp 0x1404d90dd
inc rsi
cmc
jmp 0x1404d90e6
cmp rsi, 5
jl 0x1404d90c6
test rsi, rsi
jmp 0x1404d90f8
jle 0x1404d92ed
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
sub r10w, 0x61f
xor cx, 0x35eb
sub r8, rdi
jmp 0x1404d911d
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r15d
mov r13d, r15d
bsr r10d, ebx
shld r10, r13, 0x17
sub r13d, edx
sar r10b, cl
stc
movsxd r10, r13d
cmp r9w, 0x40b1
test r13b, bpl
cmp r10, r8
jmp 0x1404d9156
jg 0x1404d9662
lea rax, [rbp - 1]
bt r8w, 0xfa
movzx rcx, r14w
add dl, sil
mov rdx, r11
movzx ecx, si
movzx r8, di
sub r9, rax
lea r8, [r9 + r14*8]
adc al, 0xe5
lea rcx, [rbp - 1]
sub al, r14b
sar al, 0x16
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp r15b, 0x23
jmp 0x1404d91a0
cmp rdx, rsi
jmp 0x1404d91a8
jl 0x1404d9180
test r13d, r13d
jmp 0x1404d91b6
jle 0x1404d91ea
lea rcx, [rbp - 1]
xor r8w, si
btc rdx, 2
mov r8, r10
and dl, r13b
add rcx, rsi
mov rdx, rdi
jmp 0x1404d91da
call fcn.1404a0f31
sub r11d, r11d
xchg r8b, r8b
rol r8b, cl
shr dl, cl
mov rdx, r11
xadd r8w, cx
rcl ch, 0x89
btr r8w, 0xb3
lea r8, [0x140000000]
or cl, r15b
test spl, 0xf4
cmp ecx, r10d
mov rcx, qword [r8 + r12*8 + 0xba940]
test r8b, bpl
add rcx, rdx
inc rdx
jmp 0x1404d922a
mov byte [rcx + r14*8 + 0x3e], r11b
jmp 0x1404d9235
cmp rdx, rsi
jmp 0x1404d923d
jl 0x1404d920c
lea rax, [rbp - 1]
sal r8, 0xff
cmp dil, 0x2f
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
neg r8w
lea r9, [rbp - 0x41]
add cx, 0x7047
sbb cl, r8b
mov eax, r11d
bts rdx, r9
xchg dl, al
lea rdx, [rbp - 0x39]
clc
cmp r15d, 4
movsxd r8, eax
lea rcx, [rsp + 0x48]
mov r15b, 0x18
jmp 0x1404d9289
sete al
setno r8b
movsx r8w, r10b
inc eax
bswap r8
mov r8d, eax
jmp 0x1404d92aa
mov r15d, eax
jmp 0x1404d92b2
call fcn.1404deabc
cmp rax, 0xffffffffffffffff
jmp 0x1404d92c0
je 0x1404d9477
lea eax, [r13 - 1]
movsx r13w, r12b
mov r13, qword [rbp - 0x51]
shld rsi, rcx, 0x6a
add rsi, rdi
movsxd rsi, eax
cmc
stc
add rsi, rdi
jmp 0x1404d92e8
jmp 0x1404d94b5
movzx eax, byte [rdi]
rol rdx, 0xbd
bsr cx, r15w
mov rdx, r13
dec cx
shr sil, 0x55
sub rdx, rdi
movsxd rsi, edx
jmp 0x1404d9311
movsx rsi, byte [rax + r15 + 0xb7d00]
btr eax, r10d
bt rax, rdx
cmc
lea ecx, [rsi + 1]
movsxd rax, r15d
movsxd rax, ecx
cmp eax, 0x1cae4a39
stc
cmp rax, rdx
jmp 0x1404d933a
jg 0x1404d96e1
cmp ecx, 4
mov ax, 0x1911
lahf
mov qword [rbp - 0x31], r11
mov eax, r11d
mov qword [rbp - 0x29], rdi
movsxd r8, esp
seto bh
movsx edx, r14w
sete al
movzx r9d, cx
cqo
movzx r8, si
lea r9, [rbp - 0x31]
setl r8b
inc eax
xchg dl, r8b
cmovbe rbx, rsi
lea rdx, [rbp - 0x29]
xchg r8b, bl
bswap bx
mov r8d, eax
movsxd rbx, r9d
lea rcx, [rsp + 0x48]
mov bx, 0x520f
movzx rbx, cx
mov ebx, eax
jmp 0x1404d939f
call fcn.1404deabc
cmp rax, 0xffffffffffffffff
je 0x1404d9477
add rsi, rdi
movsx r15w, sil
mov r15d, ebx
jmp 0x1404d94b5
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0xba940]
rcl cl, 0xa5
ror cl, cl
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404d93df
je 0x1404d941c
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x1404d93ef
and cl, 0xfb
jmp 0x1404d93f7
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
movzx rdx, r15w
cdq
jmp 0x1404d940b
lea rdx, [rbp + 7]
jmp 0x1404d9414
mov byte [rbp + 8], al
jmp 0x1404d9454
call fcn.1404a8725
movzx ecx, byte [rdi]
stc
sub edx, edx
test r11b, r10b
test rcx, 0x21e624e0
cmp word [rax + rcx*2], dx
jmp 0x1404d943a
jge 0x1404d9485
inc rsi
cmp rsi, r13
jmp 0x1404d944b
jae 0x1404d97da
mov rdx, rdi
mov r8d, 2
lea rcx, [rsp + 0x48]
jmp 0x1404d9464
call fcn.140290f17
cmp eax, 0xffffffff
jmp 0x1404d9471
jne 0x1404d94b5
cmp byte [rbp - 0x71], 0
jmp 0x1404d9480
jmp 0x1404d97cc
mov r8, r15
not dh
lea rcx, [rsp + 0x48]
movsx dx, r12b
not rdx
mov dh, 0x80
mov rdx, rdi
jmp 0x1404d94a2
call fcn.140290f17
cmp eax, 0xffffffff
jmp 0x1404d94af
je 0x1404d9839
mov ecx, dword [rbp - 0x59]
btr eax, r12d
movsx r9d, r9w
shrd di, r13w, 1
lea rax, [rbp + 0xf]
sub ebx, ebx
shld edi, r10d, 0x2c
lea r8, [rsp + 0x48]
rcl dil, 0xbb
movsx r9d, bx
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
sub r9w, dx
mov qword [rsp + 0x30], rbx
and r9b, r11b
mov r9d, r15d
mov dword [rsp + 0x28], 5
stc
sub edx, edx
jmp 0x1404d9506
mov qword [rsp + 0x20], rax
jmp 0x1404d9510
call fcn.1404c6d5a
mov esi, eax
cmc
test eax, eax
jmp 0x1404d951f
je 0x1404d98f0
mov rcx, qword [rbp - 0x49]
cdq
lea r9, [rsp + 0x4c]
xchg dl, dh
movzx edx, r11w
mov r8d, eax
setnp dl
mov qword [rsp + 0x20], rbx
movsxd rdx, r12d
jmp 0x1404d9548
lea rdx, [rbp + 0xf]
jmp 0x1404d9551
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x1404d98e2
mov r15d, dword [rsp + 0x40]
or bh, bh
sub bl, 0x5f
mov ebx, edi
sub ebx, dword [rbp - 0x21]
add ebx, r15d
test r13, r15
jmp 0x1404d957c
mov dword [rbp - 0x65], ebx
test r8b, 0x28
cmp dword [rsp + 0x4c], esi
jmp 0x1404d958c
jb 0x1404d97bf
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d959c
jne 0x1404d9631
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
mov r8w, r15w
lea r9, [rsp + 0x4c]
mov dl, r12b
cdq
mov word [rsp + 0x44], ax
mov dx, 0x68c0
movzx r8d, r14w
movsx r8, r15w
lea r8d, [r11 + 1]
movzx dx, r10b
mov dx, ax
mov qword [rsp + 0x20], r11
jmp 0x1404d95e4
lea rdx, [rsp + 0x44]
jmp 0x1404d95ee
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmc
test eax, eax
jmp 0x1404d95ff
je 0x1404d9826
cmp dword [rsp + 0x4c], 1
jmp 0x1404d960f
jb 0x1404d97bf
inc r15d
not si
inc ebx
mov dword [rsp + 0x40], r15d
bsf rsi, r8
ror rsi, 0xa7
bts esi, r10d
mov dword [rbp - 0x65], ebx
mov rsi, rdi
test r11b, 0xa7
cmp rdi, r13
jmp 0x1404d9640
jae 0x1404d9854
mov rax, qword [rbp - 0x19]
movsxd rdx, edi
movzx dx, bh
movzx rdx, r12w
mov edx, dword [rbp - 0x55]
jmp 0x1404d965d
jmp 0x1404d905f
mov edx, r11d
test bpl, cl
test ah, 0x79
cmp ebx, r11d
test r8, r8
jmp 0x1404d9676
jle 0x1404d96d4
sub rdi, rsi
mov cx, dx
lea rbx, [0x140000000]
not cx
mov al, byte [rdi + rsi]
setge ch
xchg ch, cl
movsx cx, r13b
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404d96ab
inc rsi
test ecx, 0x7b7672d6
mov byte [rcx + r14*8 + 0x3e], al
movsx eax, dx
bsf ax, r14w
movsxd rax, edx
clc
cmc
cmp rax, r8
jl 0x1404d968c
mov ebx, dword [rbp - 0x65]
cmc
clc
add ebx, r8d
jmp 0x1404d96dc
jmp 0x1404d97b7
mov r9d, r11d
test rdx, rdx
jmp 0x1404d96ec
jle 0x1404d97a9
mov r13, qword [rbp - 0x11]
mov r8, r11
sub al, 0x46
add r10b, r11b
mov r10, r13
stc
rcr r11w, 0x7e
neg rcx
and r13d, 0x3f
sar r10, 6
test bpl, r8b
rcr ch, 0xc8
cmp rbx, 0x43db00a3
lea r11, [r13*8]
sub al, bpl
add r11, r13
movzx rcx, di
mov al, byte [r8 + rdi]
setns ch
movsx ecx, r12w
movsx rcx, sp
inc r9d
btc cx, 0x6f
rcr cl, cl
ror cx, 0x3d
mov rcx, qword [r15 + r10*8 + 0xba940]
cmc
cmp dil, 0xcf
test bpl, 0xf9
add rcx, r8
jmp 0x1404d9767
inc r8
test bpl, 0xe4
jmp 0x1404d9773
mov byte [rcx + r11*8 + 0x3e], al
shl ax, 0x30
movsx rax, r13w
movsxd rax, r9d
test r13b, r15b
jmp 0x1404d978b
cmp rax, rdx
jmp 0x1404d9793
jl 0x1404d9731
xor r11d, r11d
add cl, 0x98
sbb rcx, 0x7acd1bce
setns ch
add ebx, edx
sbb rcx, 0x69464b99
movsx cx, sil
mov dword [rbp - 0x65], ebx
movsx cx, r12b
cmp byte [rbp - 0x71], r11b
cmovle cx, di
setae cl
xchg ecx, ecx
mov ecx, dword [rsp + 0x40]
jmp 0x1404d97d5
jmp 0x1404d9860
mov al, byte [rdi]
lea r8, [0x140000000]
inc ecx
dec cl
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d97f4
inc ebx
cmp r13b, 0x6b
jmp 0x1404d97ff
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
rcr ah, cl
mov rax, qword [r8 + r12*8 + 0xba940]
cmp sil, 0x11
or byte [rax + r14*8 + 0x3d], 4
test ebp, r8d
cmp byte [rbp - 0x71], dl
jmp 0x1404d97cc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
bt rcx, 0xad
movzx cx, r10b
mov ecx, dword [rsp + 0x40]
jmp 0x1404d9846
cmp byte [rbp - 0x71], 0
jmp 0x1404d984f
jmp 0x1404d9860
mov ecx, dword [rsp + 0x40]
test spl, bl
clc
cmp byte [rbp - 0x71], r11b
je 0x1404d9878
mov rax, qword [rsp + 0x50]
test r8d, ecx
and dword [rax + 0x3a8], 0xfffffffd
cmp r11b, bl
mov rax, qword [rbp - 9]
jmp 0x1404d9885
movsd xmm0, qword [rbp - 0x69]
cmp rdx, r13
movsd qword [rax], xmm0
test r11b, cl
cmp cx, 0x38ce
mov dword [rax + 8], ecx
mov rcx, qword [rbp + 0x17]
stc
test dl, 0x1c
xor rcx, rsp
jmp 0x1404d98ac
call fcn.14049d217
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
not r12b
cmovb r13d, r10d
pop r15
pop r14
pop r13
not rdi
pop r12
pop rdi
xchg rbp, rbp
movzx rbp, dx
pop rsi
pop rbp
jmp 0x1404d98e1
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
adc cx, 0x16c3
mov ecx, dword [rsp + 0x40]
clc
test r12b, 0xa8
cmp byte [rbp - 0x71], bl
jmp 0x1404d9901
jmp 0x1404d9860