Function at 0x14004ce8e
Capabilities:
Encode data using base64

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1f8
movaps xmmword [rsp + 0x1e0], xmm6
mov rdi, r8
mov r15, rdx
mov rsi, rcx
mov ecx, 8
call fcn.14003b720
mov r12, rax
and qword [rax], 0
mov qword [rsp + 0x78], rax
call fcn.1400826df
mov qword [r12], rax
test rax, rax
je 0x14004cee6
mov rbx, qword [rdi]
mov rdi, qword [rdi + 8]
test edi, edi
js 0x14004cf05
mov r14d, edi
jmp 0x14004cf10
xor eax, eax
mov byte [rsi + 0x40], al
xorps xmm0, xmm0
and qword [rsi + 0x10], 0
movups xmmword [rsi], xmm0
mov byte [rsi + 0x18], al
lea rax, [0x14022bdba]
jmp 0x14004d67c
mov rcx, rbx
call sub.msvcrt.dll_strlen
mov r14, rax
test rbx, rbx
jne 0x14004cf34
test edi, edi
je 0x14004cf34
lea r8, [0x14025e7a9]
mov ecx, 0x11
mov edx, 0x6f
call fcn.140078457
jmp 0x14004d662
lea rcx, [0x140232250]
call fcn.14007ffed
test rax, rax
je 0x14004d662
mov r13, rax
mov qword [rsp + 0x48], r15
mov rax, qword [rax + 0x20]
mov qword [rax + 8], rbx
mov qword [rax], r14
mov qword [rax + 0x10], r14
or byte [r13 + 0x11], 2
and dword [r13 + 0x18], 0
lea rbp, [rsp + 0xe0]
xorps xmm6, xmm6
call fcn.1400e31ff
mov r14, rax
call fcn.1400e31ff
mov r15, rax
call fcn.1400e31ff
mov rdi, rax
test r14, r14
je 0x14004d783
test r15, r15
je 0x14004d783
test rdi, rdi
je 0x14004d783
mov byte [rsp + 0x1de], 0
mov rcx, r13
mov rdx, rbp
call fcn.140080128
test eax, eax
jle 0x14004d6cb
test eax, eax
js 0x14004cfd7
mov ecx, eax
cmp byte [rsp + rcx + 0xe0], 0x20
jg 0x14004cfdc
dec eax
jmp 0x14004cfc3
mov eax, 0xffffffff
lea ecx, [rax + 1]
mov byte [rsp + rcx + 0xe0], 0xa
add eax, 2
mov byte [rsp + rax + 0xe0], 0
mov r8d, 0xb
mov rcx, rbp
lea rdx, str._____BEGIN
call fcn.140121360
test eax, eax
jne 0x14004cfb0
lea rcx, [rsp + 0xeb]
call sub.msvcrt.dll_strlen
mov rbx, rax
shl rbx, 0x20
movabs rax, 0x500000000
add rax, rbx
sar rax, 0x20
lea rcx, [rsp + rax]
add rcx, 0xe0
mov r8d, 6
lea rdx, str.______n
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x14004cfb0
movabs rax, 0x900000000
lea rdx, [rbx + rax]
sar rdx, 0x20
mov rcx, r14
call fcn.1400e330e
mov edx, 0x41
test rax, rax
je 0x14004d6d0
mov qword [rsp + 0x20], rdi
movabs rax, 0xfffffffa00000000
add rbx, rax
mov rdi, rbx
sar rdi, 0x20
test rbx, rbx
je 0x14004d0af
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0xeb]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rax, qword [r14 + 8]
mov byte [rax + rdi], 0
mov edx, 0x100
mov rcx, r15
call fcn.1400e330e
test rax, rax
je 0x14004d7ea
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x50], r12
mov rax, qword [r15 + 8]
xor r14d, r14d
mov byte [rax], 0
mov rcx, r13
mov rdx, rbp
call fcn.140080128
mov dil, 1
test eax, eax
jle 0x14004d196
mov r12d, eax
test r12d, r12d
js 0x14004d111
mov eax, r12d
cmp byte [rsp + rax + 0xe0], 0x20
jg 0x14004d117
dec r12d
jmp 0x14004d0fa
mov r12d, 0xffffffff
lea eax, [r12 + 1]
mov byte [rsp + rax + 0xe0], 0xa
add r12d, 2
mov byte [rsp + r12 + 0xe0], 0
cmp byte [rsp + 0xe0], 0xa
je 0x14004d196
lea eax, [r12 + r14]
add eax, 9
movsxd rdx, eax
mov rcx, r15
call fcn.1400e330e
test rax, rax
je 0x14004d76f
mov r8d, 9
mov rcx, rbp
lea rdx, str._____END
call fcn.140121360
test eax, eax
je 0x14004d194
lea edi, [r12 + r14]
movsxd rcx, r14d
add rcx, qword [r15 + 8]
mov rdx, rbp
mov r8, r12
call sub.msvcrt.dll_memcpy
movsxd rax, edi
add rax, qword [r15 + 8]
mov r14d, edi
jmp 0x14004d0de
xor edi, edi
mov edx, 0x400
mov rbx, qword [rsp + 0x20]
mov rcx, rbx
call fcn.1400e330e
test rax, rax
je 0x14004d7f1
mov rax, qword [rbx + 8]
mov byte [rax], 0
test dil, dil
je 0x14004d2aa
xor r14d, r14d
mov rdi, rbx
mov rcx, r13
mov rdx, rbp
call fcn.140080128
test eax, eax
jle 0x14004d2ca
mov r12d, eax
test r12d, r12d
js 0x14004d1f4
mov eax, r12d
cmp byte [rsp + rax + 0xe0], 0x20
jg 0x14004d1fa
dec r12d
jmp 0x14004d1dd
mov r12d, 0xffffffff
lea eax, [r12 + 1]
mov byte [rsp + rax + 0xe0], 0xa
lea ebx, [r12 + 2]
mov byte [rsp + rbx + 0xe0], 0
mov r8d, 9
mov rcx, rbp
lea rdx, str._____END
call fcn.140121360
test eax, eax
je 0x14004d2ca
cmp r12d, 0x3f
jg 0x14004d2ca
lea eax, [r12 + r14]
add eax, 0xb
movsxd rdx, eax
mov rcx, rdi
call fcn.1400e330e
test rax, rax
je 0x14004d774
movsxd rcx, r14d
add rcx, qword [rdi + 8]
mov rdx, rbp
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r14d, ebx
mov rax, qword [rdi + 8]
movsxd rcx, r14d
mov byte [rax + rcx], 0
cmp ebx, 0x41
je 0x14004d1c7
mov byte [rsp + 0xe0], 0
mov rcx, r13
mov rdx, rbp
call fcn.140080128
test eax, eax
jle 0x14004d2ca
test eax, eax
js 0x14004d2af
mov ecx, eax
cmp byte [rsp + rcx + 0xe0], 0x20
jg 0x14004d2b4
dec eax
jmp 0x14004d296
mov rdi, r15
jmp 0x14004d2cd
mov eax, 0xffffffff
lea ecx, [rax + 1]
mov byte [rsp + rcx + 0xe0], 0xa
add eax, 2
mov byte [rsp + rax + 0xe0], 0
mov rbx, r15
mov r8d, 9
mov rcx, rbp
lea rdx, str._____END
call fcn.140121360
mov edx, 0x66
test eax, eax
jne 0x14004d7f9
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x28]
mov rbx, qword [rax + 8]
mov rcx, rbx
call sub.msvcrt.dll_strlen
mov rdi, rax
movsxd r8, edi
mov rcx, rbx
lea rdx, [rsp + 0xe9]
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x14004d7c0
shl rdi, 0x20
movabs rax, 0x900000000
add rdi, rax
sar rdi, 0x20
lea rcx, [rsp + rdi]
add rcx, 0xe0
mov r8d, 6
lea rdx, str.______n
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x14004d7c0
movaps xmmword [rsp + 0xc0], xmm6
and qword [rsp + 0xd0], 0
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
mov rdi, qword [rsp + 0x20]
mov r9, qword [rdi + 8]
movsxd r10, r14d
xor eax, eax
mov qword [rsp + 0x58], r9
xor ebx, ebx
xor r12d, r12d
mov r14, qword [rsp + 0x28]
movabs r8, 0x100002600
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x60], r10
cmp r10, r12
je 0x14004d5cb
movsx ecx, byte [r9 + r12]
cmp ecx, 0x20
ja 0x14004d3d7
bt r8, rcx
jae 0x14004d3d7
inc r12
jmp 0x14004d3b9
mov edx, 0x64
cmp byte [rsp + 0xd4], 0
jne 0x14004d7b6
mov edx, eax
inc eax
mov byte [rsp + rdx + 0xa4], cl
cmp eax, 4
jne 0x14004d3d2
mov qword [rsp + 0x70], rbx
mov bl, byte [rsp + 0xa4]
mov ecx, ebx
call fcn.14011095c
mov r14d, eax
mov r13b, byte [rsp + 0xa5]
mov ecx, r13d
call fcn.14011095c
mov edi, eax
mov cl, byte [rsp + 0xa6]
mov byte [rsp + 0x36], cl
call fcn.14011095c
mov r15d, eax
mov cl, byte [rsp + 0xa7]
mov byte [rsp + 0x37], cl
call fcn.14011095c
cmp r14b, 0xff
je 0x14004d87f
cmp dil, 0xff
mov edx, 0x64
je 0x14004d7d9
cmp r15b, 0xff
je 0x14004d7d9
cmp al, 0xff
je 0x14004d7d9
movzx r10d, r15b
movzx ecx, dil
movzx r8d, r14b
shl r8d, 0x12
shl ecx, 0xc
or ecx, r8d
shl r10d, 6
mov r8d, r10d
or r8d, ecx
mov r11d, r8d
xor r8d, r8d
cmp bl, 0x3d
sete r8b
shl r8d, 3
xor r9d, r9d
cmp r13b, 0x3d
sete r9b
lea r8d, [r8 + r9*4]
xor r9d, r9d
cmp byte [rsp + 0x36], 0x3d
sete r9b
lea r9d, [r8 + r9*2]
xor r8d, r8d
cmp byte [rsp + 0x37], 0x3d
sete r8b
or r8d, r9d
je 0x14004d571
cmp r8d, 3
mov rbx, qword [rsp + 0x70]
je 0x14004d51d
cmp r8d, 1
mov r13, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
jne 0x14004d7b6
shr ecx, 0x10
mov byte [rax], cl
mov ecx, r11d
mov byte [rax + 1], ch
mov rdx, rax
mov eax, 2
jmp 0x14004d545
shr ecx, 0x10
mov rdx, qword [rsp + 0x58]
mov byte [rdx], cl
mov eax, 1
mov r13, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x60]
and dword [rsp + 0xa0], 0
add rbx, rax
add rdx, rax
mov qword [rsp + 0x58], rdx
mov byte [rsp + 0xd4], 1
xor eax, eax
movabs r8, 0x100002600
jmp 0x14004d3d2
shr ecx, 0x10
mov rdx, qword [rsp + 0x58]
mov byte [rdx], cl
mov ecx, r11d
mov byte [rdx + 1], ch
or al, r10b
mov byte [rdx + 2], al
and dword [rsp + 0xa0], 0
mov rbx, qword [rsp + 0x70]
add rbx, 3
add rdx, 3
mov qword [rsp + 0x58], rdx
xor eax, eax
mov r13, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
movabs r8, 0x100002600
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x60]
jmp 0x14004d3d2
mov edx, 0x64
cmp rbx, 0x7fffffff
ja 0x14004d7b6
cmp byte [rsp + 0xd5], 0
jne 0x14004d7b6
test eax, eax
jne 0x14004d7b6
test ebx, ebx
je 0x14004d806
mov rcx, r14
mov r15, qword [r14 + 8]
mov r14, qword [rsp + 0x38]
mov r13, qword [r14 + 8]
mov r12, qword [rdi + 8]
call fcn.140081da5
mov rcx, r14
call fcn.140081da5
mov rcx, rdi
call fcn.140081da5
mov rcx, r15
lea rdx, str.PUBLIC_KEY
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14004d810
mov rcx, r15
call fcn.140081da5
mov rcx, r13
call fcn.140081da5
mov rcx, r12
call fcn.140081da5
mov r13, qword [rsp + 0x40]
mov r12, qword [rsp + 0x50]
jmp 0x14004cf75
xor eax, eax
mov byte [rsi + 0x40], al
xorps xmm0, xmm0
and qword [rsi + 0x10], 0
movups xmmword [rsi], xmm0
mov byte [rsi + 0x18], al
lea rax, [0x14022bdea]
mov qword [rsi + 0x20], rax
mov qword [rsi + 0x28], 0x30
mov al, 1
mov byte [rsi + 0x30], al
mov byte [rsi + 0x38], al
xor ecx, ecx
xor edx, edx
call fcn.1400223ae
xor ecx, ecx
xor edx, edx
call fcn.1400223ae
lea rcx, [rsp + 0x78]
call fcn.14004ddfc
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x1e0]
add rsp, 0x1f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov edx, 0x6e
lea r8, [0x14025e7a9]
mov ecx, 9
call fcn.140078457
mov rcx, r14
call fcn.1400e3242
mov rcx, r15
call fcn.1400e3242
mov rcx, rdi
call fcn.1400e3242
call fcn.1400783ea
and eax, 0xff000fff
cmp eax, 0x900006e
jne 0x14004d722
lea rdx, str.Expecting:
lea r8, str.PUBLIC_KEY
mov ecx, 2
call fcn.1400784d5
xor eax, eax
mov byte [rsi + 0x40], al
xorps xmm0, xmm0
and qword [rsi + 0x10], 0
movups xmmword [rsi], xmm0
mov byte [rsi + 0x18], al
lea rax, str.AWfV
mov qword [rsi + 0x20], rax
mov qword [rsi + 0x28], 0x38
mov al, 1
mov byte [rsi + 0x30], al
mov byte [rsi + 0x38], al
xor ecx, ecx
xor edx, edx
call fcn.1400223ae
xor ecx, ecx
xor edx, edx
call fcn.1400223ae
mov rcx, r13
call fcn.140080068
jmp 0x14004d6a2
mov rdi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov edx, 0x41
jmp 0x14004d6d0
mov rcx, r14
call fcn.1400e3242
mov rcx, r15
call fcn.1400e3242
mov rcx, rdi
call fcn.1400e3242
lea r8, [0x14025e7a9]
mov ecx, 9
mov edx, 0x41
call fcn.140078457
jmp 0x14004d6f9
mov r15, qword [rsp + 0x38]
jmp 0x14004d6d0
mov r15, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov edx, 0x66
jmp 0x14004d6d0
mov r15, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x20]
jmp 0x14004d7fc
mov rdi, qword [rsp + 0x20]
jmp 0x14004d779
mov rdi, rbx
jmp 0x14004d774
mov r15, rbx
mov r14, qword [rsp + 0x28]
jmp 0x14004d6d0
mov r15, qword [rsp + 0x38]
jmp 0x14004d6e1
mov rbp, rbx
and qword [rsp + 0x90], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
mov bl, 1
test r13, r13
mov qword [rsp + 0x20], r12
je 0x14004d89d
movzx eax, byte [r13]
xor edi, edi
test eax, eax
je 0x14004d8f6
cmp eax, 0xa
je 0x14004d8f6
lea rdx, str.Proc_Type:
mov r8d, 0xb
mov rcx, r13
call sub.msvcrt.dll_strncmp
mov edx, 0x6d
test eax, eax
je 0x14004d8a1
lea r8, [0x14025e7a9]
mov ecx, 9
call fcn.140078457
mov dil, 1
jmp 0x14004d8f1
mov r15, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov edx, 0x64
jmp 0x14004d6d0
xor edi, edi
jmp 0x14004d8f6
mov dil, 1
cmp byte [r13 + 0xb], 0x34
jne 0x14004d8f1
cmp byte [r13 + 0xc], 0x2c
jne 0x14004d8f1
lea rcx, [r13 + 0xd]
lea rdx, str.ENCRYPTED
mov r8d, 9
call sub.msvcrt.dll_strncmp
mov edx, 0x6c
test eax, eax
jne 0x14004d869
lea r12, [r13 + 0x18]
movzx eax, byte [r12 - 0xb]
test eax, eax
je 0x14004dc17
cmp eax, 0xa
je 0x14004dc21
inc r12
jmp 0x14004d8d5
xor r12d, r12d
xor ebx, ebx
mov rcx, r15
call fcn.140081da5
mov rcx, r13
call fcn.140081da5
test bl, bl
jne 0x14004d914
mov rcx, qword [rsp + 0x20]
call fcn.140081da5
test dil, dil
mov r13, qword [rsp + 0x40]
jne 0x14004d722
test ebp, ebp
js 0x14004d972
mov eax, ebp
lea rcx, [rsp + 0xe0]
mov qword [rcx], r12
mov qword [rcx + 8], rax
call fcn.1400e46ef
test rax, rax
je 0x14004d972
mov rdi, rax
mov rcx, rax
call fcn.140082889
test rax, rax
je 0x14004d96a
mov rbp, rax
mov rcx, rax
add rcx, 0x50
call fcn.1400cd29c
mov rcx, rdi
call fcn.140082728
jmp 0x14004d98a
mov rcx, rdi
call fcn.140082728
lea r8, [0x14025e7a9]
mov ecx, 9
mov edx, 0xc
call fcn.140078457
xor ebp, ebp
mov rcx, r12
call fcn.140081da5
test rbp, rbp
je 0x14004d722
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov rdx, rbp
call fcn.1400827a5
test eax, eax
je 0x14004d9de
lea rcx, [rbp + 0x50]
call fcn.1400cd29c
and qword [rsp + 0x78], 0
mov r8, qword [rsp + 0x48]
mov rax, qword [r8 + 0x28]
cmp qword [r8 + 0x20], rax
je 0x14004da21
mov r12d, dword [rax - 4]
add rax, 0xfffffffffffffffc
mov qword [r8 + 0x28], rax
jmp 0x14004db2a
xorps xmm0, xmm0
and qword [rsi + 0x10], 0
movups xmmword [rsi], xmm0
mov byte [rsi + 0x18], 0
lea rax, [0x14022be52]
mov qword [rsi + 0x20], rax
mov qword [rsi + 0x28], 0x30
mov al, 1
mov byte [rsi + 0x30], al
mov byte [rsi + 0x38], al
xor edi, edi
xor ecx, ecx
xor edx, edx
call fcn.1400223ae
xor ecx, ecx
xor edx, edx
call fcn.1400223ae
jmp 0x14004dc06
mov rcx, qword [r8 + 8]
mov rdx, qword [r8 + 0x10]
mov rdi, rdx
sub rdi, rcx
mov r12, rdi
shr r12, 3
mov rax, qword [r8 + 0x18]
cmp rdx, rax
jae 0x14004da55
and qword [rdx], 0
add rdx, 8
mov r8, qword [rsp + 0x48]
mov qword [r8 + 0x10], rdx
jmp 0x14004db2a
sar rdi, 3
lea r9, [rdi + 1]
mov r8, r9
shr r8, 0x3d
jne 0x14004ddf0
movabs r8, 0x1fffffffffffffff
sub rax, rcx
mov rbx, rax
shr rbx, 2
cmp rbx, r9
cmovbe rbx, r9
movabs r9, 0x7ffffffffffffff8
cmp rax, r9
cmovae rbx, r8
test rbx, rbx
je 0x14004dac0
cmp rbx, r8
ja 0x14004ddf5
lea rcx, [rbx*8]
call fcn.14003b720
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rdx + 8]
mov rdx, qword [rdx + 0x10]
jmp 0x14004dac2
xor eax, eax
lea r8, [rax + rdi*8]
and qword [r8], 0
mov r9, r8
cmp rdx, rcx
je 0x14004dae9
mov r10, qword [rdx - 8]
and qword [rdx - 8], 0
add rdx, 0xfffffffffffffff8
mov qword [r9 - 8], r10
add r9, 0xfffffffffffffff8
jmp 0x14004dacd
lea rax, [rax + rbx*8]
add r8, 8
mov rcx, qword [rsp + 0x48]
mov rdi, qword [rcx + 8]
mov rbx, qword [rcx + 0x10]
mov qword [rcx + 8], r9
mov qword [rcx + 0x10], r8
mov qword [rcx + 0x18], rax
cmp rbx, rdi
je 0x14004db1d
add rbx, 0xfffffffffffffff8
mov rcx, rbx
call fcn.14004ddfc
jmp 0x14004db0a
mov rcx, rdi
call sub.msvcrt.dll_free
mov r8, qword [rsp + 0x48]
mov rax, qword [r8 + 0x40]
test rax, rax
je 0x14004db5f
mov r15, rax
mov rax, qword [rax + 0x20]
cmp qword [rsp + 0x50], rax
jae 0x14004db4e
mov rax, qword [r15]
mov rdi, r15
test rax, rax
jne 0x14004db33
jmp 0x14004db6b
jbe 0x14004dbc6
mov rax, qword [r15 + 8]
test rax, rax
jne 0x14004db33
lea rdi, [r15 + 8]
jmp 0x14004db6b
mov rax, qword [rsp + 0x48]
lea r15, [rax + 0x40]
mov rdi, r15
mov rbx, r15
mov ecx, 0x30
call fcn.14003b720
mov r15, rax
mov rax, qword [rsp + 0x50]
mov qword [r15 + 0x20], rax
and dword [r15 + 0x28], 0
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], rbx
mov qword [rdi], r15
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx + 0x38]
mov rax, qword [rax]
mov rdx, r15
test rax, rax
je 0x14004dbb2
mov qword [rbx + 0x38], rax
mov rdx, qword [rdi]
mov rcx, qword [rbx + 0x40]
call fcn.1400318db
inc qword [rbx + 0x48]
mov r13, qword [rsp + 0x40]
jmp 0x14004dbd0
mov r13, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
mov dword [r15 + 0x28], r12d
mov ecx, r12d
shl rcx, 3
add rcx, qword [rbx + 8]
lea rdi, [rsp + 0xe0]
and qword [rdi], 0
mov rbx, qword [rsp + 0x50]
mov rdx, rbx
call fcn.14004de04
mov rcx, rdi
call fcn.14004ddfc
mov qword [rsi], rbx
mov dil, 1
mov byte [rsi + 0x40], dil
mov rcx, rbp
call fcn.14009aaf9
jmp 0x14004d762
mov edx, 0x70
jmp 0x14004d869
lea rcx, [r12 - 0xa]
lea rdx, str.DEK_Info:
mov r8d, 0xa
call sub.msvcrt.dll_strncmp
mov edx, 0x6b
test eax, eax
jne 0x14004d869
mov rdi, r12
mov bl, byte [rdi]
lea eax, [rbx - 0x30]
inc rdi
cmp al, 0xa
jb 0x14004dc48
lea eax, [rbx - 0x41]
cmp bl, 0x2d
je 0x14004dc48
cmp al, 0x1a
jb 0x14004dc48
mov byte [rdi - 1], 0
lea rdx, str.DES_CBC
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14004dcd9
lea rdx, str.DES_EDE3_CBC
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14004dce2
lea rdx, str.AES_128_CBC
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14004dceb
lea rdx, str.AES_192_CBC
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14004dcf9
lea rdx, str.AES_256_CBC
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14004dd15
and qword [rsp + 0x80], 0
mov byte [rdi - 1], bl
mov edx, 0x72
jmp 0x14004d869
lea rax, [0x14025a8a0]
jmp 0x14004dd21
lea rax, [0x14025a8e0]
jmp 0x14004dd21
call fcn.14008b042
lea rax, [0x140277530]
jmp 0x14004dd21
lea rcx, [0x140277570]
lea rdx, [0x14008b340]
call fcn.1400ca99e
lea rax, [0x140277580]
jmp 0x14004dd21
call fcn.14008b395
lea rax, [0x1402775d0]
mov qword [rsp + 0x80], rax
mov byte [rdi - 1], bl
mov eax, dword [rax + 0xc]
mov edx, 0x72
cmp eax, 8
jb 0x14004d869
xor ecx, ecx
test eax, eax
mov edx, 0
cmovg edx, eax
cmp rdx, rcx
je 0x14004dd5b
mov byte [rsp + rcx + 0x88], 0
inc rcx
jmp 0x14004dd49
add eax, eax
xor edx, edx
test eax, eax
cmovle eax, edx
xor r8d, r8d
cmp eax, r8d
je 0x14004ddc4
movzx ecx, byte [rdi + r8]
lea r10d, [rcx - 0x30]
mov r9d, 0xffffffd0
cmp r10b, 0xa
jb 0x14004dda1
lea r10d, [rcx - 0x41]
mov r9d, 0xffffffc9
cmp r10b, 6
jb 0x14004dda1
lea r10d, [rcx - 0x61]
mov r9d, 0xffffffa9
cmp r10b, 5
ja 0x14004dde6
add r9d, ecx
mov ecx, edx
not cl
and cl, 4
shl r9d, cl
mov ecx, r8d
shr rcx, 1
or byte [rsp + rcx + 0x88], r9b
inc r8
add edx, 4
jmp 0x14004dd67
mov edx, 0x68
cmp qword [rsp + 0x80], 0
jne 0x14004d869
mov bl, 1
xor edi, edi
mov r12, qword [rsp + 0x20]
jmp 0x14004d8f6
mov edx, 0x67
jmp 0x14004d869
call sub.msvcrt.dll_abort
call fcn.140015ae8
int3