Function at 0x1400bce20
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x488
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 2
mov qword [rsp + 0x80], 0
mov ebx, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
xor r15d, r15d
mov r12b, 1
xor eax, eax
mov qword [rsp + 0x30], rax
xor esi, esi
xor r13d, r13d
nop word cs:[rax + rax]
cmp rbx, 0x201
jae 0x1400bceb0
mov r14d, 0x200
lea rdi, [rsp + 0x88]
mov rbp, rbx
jmp 0x1400bcf5f
sub rbx, r13
sub rsi, r13
cmp rbx, rsi
jbe 0x1400bcf35
mov eax, dword [0x141dd5a80]
and eax, dword [0x141dd5a84]
add eax, 0x722508a9
or eax, 0xc16066a4
cmp eax, 0x3c609eed
lea rdi, [rsp + 0x70]
je 0x1400bd0d9
mov eax, dword [0x141dd5a88]
xor edx, edx
div dword [0x141dd5a8c]
imul esi, eax, 0x1c1f6ee1
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, r13
mov r8, rbx
call fcn.1400fe550
cmp esi, 0x44d774e6
je 0x1400bcee1
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
nop
test r12b, r12b
je 0x1400bcf30
mov rsi, qword [rsp + 0x30]
mov eax, 0xffffffff
cmp rsi, rax
mov r13d, 0xffffffff
cmovb r13, rsi
mov qword [rsp + 0x80], r13
mov r14, r13
mov rdi, qword [rsp + 0x28]
mov rbp, r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rsp + 0x48]
mov edx, ebp
mov qword [rsp + 0x40], rdi
mov r8, rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov edi, eax
test eax, eax
jne 0x1400bcf9d
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
test r15b, r15b
jne 0x1400bcf90
test eax, eax
jne 0x1400bd46e
mov ebx, edi
mov eax, dword [0x141dd5ad0]
xor eax, dword [0x141dd5ad4]
imul eax, eax, 0x83891cd7
or eax, 0xf79b61e0
add eax, 0x809051c
cmp eax, 0x1a401e3
jb 0x1400bcf9f
nop word cs:[rax + rax]
test r15b, r15b
jne 0x1400bcfd0
cmp rbp, rbx
jne 0x1400bd080
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [str.oY_zF]
and ecx, dword [0x141dd5adc]
xor ecx, 0x8d0b3b3f
add ecx, 0xf1a9784d
cmp ecx, 0xc937d3c6
ja 0x1400bcfe4
cmp eax, 0x7a
jne 0x1400bd6b6
nop dword [rax]
mov eax, dword [0x141dd5af0]
xor eax, dword [0x141dd5af4]
add eax, 0xaffd7df6
and eax, 0x4e3614e4
add eax, 0x35590073
cmp eax, 0x2bfdf3c4
jb 0x1400bd010
lea rbx, [rbp*2]
cmp rbp, 0x7fffffff
mov eax, 0xffffffff
cmova rbx, rax
nop word [rax + rax]
mov eax, dword [0x141dd5af8]
imul eax, dword [0x141dd5afc]
imul eax, eax, 0x6eda02e0
add eax, 0x9538bbce
cmp eax, 0xe9fd717f
ja 0x1400bd050
jmp 0x1400bce90
mov eax, dword [0x141dd5ae0]
xor edx, edx
div dword [0x141dd5ae4]
imul eax, eax, 0x58f7c20
add eax, 0x2998e0c0
imul rax, rax, 0x552c53d5
shr rax, 0x3e
cmp eax, 0x96833aa7
ja 0x1400bd080
nop dword [rax + rax]
mov eax, dword [0x141dd5ae8]
imul eax, dword [0x141dd5aec]
and eax, 0x49000
xor eax, 0x9000b004
cmp eax, 0x4b39eb39
jb 0x1400bd0b0
cmp rbp, rbx
jb 0x1400bce90
jmp 0x1400bd100
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, r13
mov r8, rbx
call fcn.1400fe550
jmp 0x1400bcee1
mov eax, dword [0x141dd5b18]
add eax, dword [0x141dd5b1c]
or eax, 0xce5b370
xor eax, 0xf66e56fd
cmp eax, 0xe8b91b92
ja 0x1400bd100
cmp r14, rbx
jb 0x1400bd878
mov rcx, qword [rsp + 0x68]
nop dword [rax + rax]
mov eax, dword [0x141dd5b20]
xor eax, dword [0x141dd5b24]
imul eax, eax, 0x69bbfa8d
xor eax, 0xf7a163a1
add eax, 0x6b179c21
cmp eax, 0x3820137a
jb 0x1400bd130
mov r14, qword [rcx]
mov rsi, qword [rcx + 8]
mov r15, qword [rcx + 0x10]
lea rcx, [r15 - 1]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5b28]
xor edx, edx
div dword [0x141dd5b2c]
imul rax, rax, 0x7330d77b
shr rax, 0x3e
add eax, 0x389fdebf
or eax, 0x9ded2ba8
cmp eax, 0xe58b64b5
je 0x1400bd170
cmp rcx, 6
jb 0x1400bd6e7
nop word cs:[rax + rax]
mov eax, dword [0x141dd5b30]
imul eax, dword [0x141dd5b34]
imul eax, eax, 0xf7319ece
add eax, 0x614de2e8
or eax, 0x82d1c67c
cmp eax, 0xd5cddf19
jb 0x1400bd1b0
test r15, r15
je 0x1400bd712
lea rax, [r15 - 7]
cmp rax, rbx
jne 0x1400bd22f
lea rdx, [rsi + 0xc]
lea r12, [rbx + rbx]
mov rcx, qword [rsp + 0x40]
mov r8, r12
call sub.VCRUNTIME140.dll_memcmp
mov ecx, eax
nop dword [rax]
mov eax, dword [0x141dd5b48]
xor edx, edx
div dword [0x141dd5b4c]
add eax, 0x3f99fe1f
imul rax, rax, 0x34114e19
shr rax, 0x3c
imul eax, eax, 0xc3c0a60b
cmp eax, 0x96a61423
je 0x1400bd200
test ecx, ecx
je 0x1400bd260
mov word [rsi + 0xc], 0x43
mov al, 1
nop word [rax + rax]
test al, al
je 0x1400bd240
mov rcx, qword [rsp + 0x38]
xor eax, eax
test al, al
jne 0x1400bd7c8
jmp 0x1400bd7a5
mov eax, dword [0x141dd5b60]
xor eax, dword [0x141dd5b64]
add eax, 0xcf6d0af9
or eax, 0xe167bd0b
and eax, 0xfbfffd4f
cmp eax, 0xd62f22b
je 0x1400bd260
test edi, edi
je 0x1400bd69d
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
mov rdx, r12
call fcn.1400c0a10
mov rdi, rax
nop
mov eax, dword [0x141dd5b68]
add eax, dword [0x141dd5b6c]
imul eax, eax, 0x45c60eac
add eax, 0xccb1f0b8
imul rcx, rax, 0x1eaac32d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xbab689ae
ja 0x1400bd2a0
test rdi, rdi
je 0x1400bd76a
mov qword [rsp + 0x28], rsi
xor eax, eax
test al, al
je 0x1400bd31a
mov rcx, rdi
mov rdx, qword [rsp + 0x40]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rbx
lea rcx, [rsp + 0x50]
call fcn.1400dbaf0
mov rax, qword [rsp + 0x58]
mov word [rax + rbx*2], 0
mov qword [rsp + 0x48], r14
lea r13, [rsp + 0x50]
lea r15, [rbx + 1]
mov rbp, qword [rsp + 0x40]
nop dword [rax]
mov eax, dword [0x141dd5b80]
xor edx, edx
div dword [0x141dd5b84]
imul eax, eax, 0xcb2335c7
xor eax, 0xfbec1539
imul r14, rax, 0x6130da4d
shr r14, 0x3e
mov rcx, rdi
mov rdx, rbp
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rbx
mov rcx, r13
call fcn.1400dbaf0
mov rsi, qword [rsp + 0x58]
mov word [rsi + rbx*2], 0
cmp r14d, 0x392147dd
ja 0x1400bd330
mov r14, qword [rsp + 0x50]
cmp qword [rsp + 0x48], 0
je 0x1400bd244
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dd5b88]
or eax, dword [0x141dd5b8c]
add eax, 0x731870bf
xor eax, 0x58430e35
imul eax, eax, 0x45a5e370
cmp eax, 0xff18effd
mov r13, qword [rsp + 0x28]
jne 0x1400bd3db
mov rcx, rdi
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5b90]
xor edx, edx
div dword [0x141dd5b94]
mov ebx, eax
add ebx, 0x7ffe7bbc
or ebx, 0x484222
and ebx, 0x8568cbaa
mov rcx, rdi
xor edx, edx
mov r8, r13
call r12
cmp ebx, 0x7eb10ee1
ja 0x1400bd3f0
mov rcx, qword [rsp + 0x38]
nop word [rax + rax]
mov eax, dword [0x141dd5b98]
imul eax, dword [0x141dd5b9c]
imul eax, eax, 0xaa2bf4e7
or eax, 0x26c65b9
imul eax, eax, 0xc1175eba
cmp eax, 0x33e22b0e
ja 0x1400bd430
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
xor eax, eax
test al, al
jne 0x1400bd7c8
jmp 0x1400bd7a5
mov eax, dword [0x141dd5a90]
sub eax, dword [0x141dd5a94]
movabs rsi, 0x8000000000000000
or eax, 0x8fe5184e
add eax, 0x805311c2
cmp eax, 0xa1c0b5f6
mov rbx, qword [rsp + 0x38]
jbe 0x1400bd4af
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
xor edi, edi
mov r14, qword [rsp + 0x68]
mov r15, qword [rsp + 0x28]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
call r12
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
test dil, dil
jne 0x1400bd4d0
cmp qword [rsp + 0x30], 0
je 0x1400bd5f0
mov eax, dword [0x141dd5a98]
xor edx, edx
div dword [0x141dd5a9c]
imul eax, eax, 0x397e751a
add eax, 0x1b8be90d
or eax, 0x46c01d47
cmp eax, 0x3b422a52
jae 0x1400bd51f
mov rax, qword [0x141ddc4e0]
xor eax, eax
nop word cs:[rax + rax]
mov rsi, qword [0x141ddc4e0]
test al, al
jne 0x1400bd530
mov eax, dword [0x141dd5aa0]
xor edx, edx
div dword [0x141dd5aa4]
add eax, 0xee412b60
or eax, 0xe69e0509
and eax, 0xf7bf3dff
cmp eax, 0xaae3fe7e
jne 0x1400bd56d
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5aa8]
or eax, dword [0x141dd5aac]
and eax, 0x12c9aca5
imul ebx, eax, 0x610d3412
xor ebx, 0x1babadb1
mov rcx, rsi
xor edx, edx
mov r8, r15
call rdi
cmp ebx, 0xf23c8b51
ja 0x1400bd580
mov eax, 0xd301dad1
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5ab0]
or ecx, dword [0x141dd5ab4]
add ecx, 0xa263bd9a
xor ecx, 0xbf81275f
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x4da77f31
ja 0x1400bd5c0
nop dword [rax + rax]
mov eax, dword [0x141dd5ab8]
xor edx, edx
div dword [0x141dd5abc]
imul eax, eax, 0x278bba25
add eax, 0x5d241e2e
or eax, 0x3ec336a3
cmp eax, 0x2adf4b5e
jb 0x1400bd5f0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5ac0]
add eax, dword [0x141dd5ac4]
xor eax, 0x6d451a59
imul rcx, rax, 0x90b57c5
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
add eax, 0xf0de6b73
cmp eax, 0x6831b4c
jb 0x1400bd620
cmp qword [r14], 0
je 0x1400bd817
nop dword [rax + rax]
mov eax, dword [0x141dd5ac8]
xor eax, dword [0x141dd5acc]
or eax, 0x92cc49d8
imul rax, rax, 0x17729a59
shr rax, 0x3c
or eax, 0x1374a888
cmp eax, 0xba9c1c68
ja 0x1400bd660
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400bd690
mov r8, qword [r14 + 8]
jmp 0x1400bd808
mov edi, 2
mov qword [rsp + 0x28], rsi
xor eax, eax
test al, al
jne 0x1400bd2e6
jmp 0x1400bd31a
mov eax, dword [0x141dd5b00]
or eax, dword [0x141dd5b04]
and eax, 0x97c188c1
or eax, 0x281c770a
imul rax, rax, 0x2f0d3b99
shr rax, 0x3a
cmp eax, 0xefe30a0
ja 0x1400bd857
jmp 0x1400bd82c
mov eax, dword [0x141dd5b38]
or eax, dword [0x141dd5b3c]
or eax, 0xc7981612
add eax, 0x3d878e4e
xor eax, 0x1393ab55
cmp eax, 0x7725545f
ja 0x1400bd89f
jmp 0x1400bd87a
mov eax, dword [0x141dd5b50]
sub eax, dword [0x141dd5b54]
imul eax, eax, 0xd8762afb
and eax, 0x1188500
cmp eax, 0x6472dc94
jbe 0x1400bd740
ud2
mov eax, dword [0x141dd5b58]
xor eax, dword [0x141dd5b5c]
xor eax, 0x59f389d0
imul eax, eax, 0x54d4277d
xor eax, 0x33381972
ud2
mov eax, dword [0x141dd5b70]
imul eax, dword [0x141dd5b74]
add eax, 0x2b7996be
imul rcx, rax, 0x468ef4e7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
or eax, 0x1645e80
cmp eax, 0x546485e7
ja 0x1400bd8e9
jmp 0x1400bd8b6
mov eax, dword [0x141dd5ba0]
and eax, dword [0x141dd5ba4]
or eax, 0x77ffbfff
mov qword [rcx], r14
mov qword [rcx + 8], rsi
mov qword [rcx + 0x10], r15
cmp eax, 0x1e0fe78c
jne 0x1400bd7d5
mov qword [rcx], r14
mov qword [rcx + 8], rsi
mov qword [rcx + 0x10], r15
jmp 0x1400bd7a5
cmp qword [rsp + 0x30], 0
je 0x1400bd817
nop dword [rax]
mov eax, dword [0x141dd5ba8]
sub eax, dword [0x141dd5bac]
and eax, 0xaa3d7312
imul eax, eax, 0xd8fc6446
or eax, 0x53e99ac0
cmp eax, 0x6972d99b
je 0x1400bd7e0
mov r8, qword [rsp + 0x78]
mov rcx, qword [0x141ddc4e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
add rsp, 0x488
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [0x141dd5b08]
add eax, dword [0x141dd5b0c]
imul eax, eax, 0x4ee7872a
imul rax, rax, 0x598884d3
shr rax, 0x3d
or eax, 0xe0a9d24
ud2
ud2
ud2
mov eax, dword [0x141dd5b40]
or eax, dword [0x141dd5b44]
imul eax, eax, 0x941abf7
or eax, 0xbc0baccc
xor eax, 0x2d120588
ud2
ud2
mov eax, dword [0x141dd5b78]
or eax, dword [0x141dd5b7c]
add eax, 0x5234bfc4
xor eax, 0xd409374a
imul rcx, rax, 0x61dde77
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
ud2
ud2