Function at 0x1000f1da
Capabilities:
Encode data using base64
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x1007f7c4]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x30], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x28], edi
lea ecx, [edi + 0x74]
call fcn.10001945
mov ecx, edi
mov esi, eax
call fcn.10004e64
xor ebx, ebx
mov ecx, edi
push 0
inc ebx
push ebx
call fcn.10001030
push 0x32
mov ecx, esi
mov dword [edi + 0x18], ebx
call fcn.1000f17d
push 0
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.1000f1b4
push dword [ebp - 0xc]
mov ebx, dword [ebp - 0x14]
push dword [ebp - 8]
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x10]
push edi
call fcn.1000fe46
add esp, 0x1c
cmp ebx, 1
jb 0x1000f59c
push 0
lea eax, [ebp - 0x14]
push 1
push eax
call fcn.1000f1b4
mov edi, dword [ebp - 0x14]
add esp, 0xc
mov ecx, edi
mov edx, edi
shr ecx, 8
shr edx, 4
push 0xf
pop ebx
and ecx, ebx
and edx, ebx
cmp ecx, 6
je 0x1000f27c
cmp ecx, ebx
jne 0x1000f299
mov eax, edi
shr eax, 0xc
and eax, 0xf0
add edx, eax
cmp ecx, ebx
jne 0x1000f299
mov ecx, edi
shr ecx, 0x10
and ecx, 0xff0
add ecx, ebx
mov ebx, dword [ebp - 0x28]
push 0
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x10]
movzx eax, cl
mov dword [ebx + 0xc], eax
mov eax, edi
shr eax, 0xc
and edi, 0xf
and eax, 3
mov dword [ebx + 0x10], edi
mov edi, dword [ebp - 0xc]
mov dword [ebx + 0x14], eax
mov eax, ecx
shr eax, 0x10
movzx eax, al
mov dword [ebx + 0x18], eax
shr ecx, 8
movzx eax, cl
shl eax, 3
push edi
mov dword [ebx + 8], edx
mov dword [ebx + 0x1c], eax
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f2ed
push 0x54
mov ecx, esi
call fcn.1000f17d
push 1
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f304
push 0x41
mov ecx, esi
call fcn.1000f17d
push 3
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f31b
push 0x38
mov ecx, esi
call fcn.1000f17d
push 5
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f332
push 0x5d
mov ecx, esi
call fcn.1000f17d
push 6
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f349
push 0x51
mov ecx, esi
call fcn.1000f17d
push 9
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f360
push 0x58
mov ecx, esi
call fcn.1000f17d
push 0xd
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f377
push 0x23
mov ecx, esi
call fcn.1000f17d
push 0x13
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f38e
push 0x55
mov ecx, esi
call fcn.1000f17d
push 0x14
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f3a5
push 0x56
mov ecx, esi
call fcn.1000f17d
push 0x16
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f3bc
push 0x3a
mov ecx, esi
call fcn.1000f17d
push 0x17
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f3d3
push 0x44
mov ecx, esi
call fcn.1000f17d
push 0x19
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f3ea
push 6
mov ecx, esi
call fcn.1000f17d
push 0x1a
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f401
push 0x62
mov ecx, esi
call fcn.1000f17d
push 0x1b
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f418
push 0x40
mov ecx, esi
call fcn.1000f17d
push 0x1e
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f42f
push 0x48
mov ecx, esi
call fcn.1000f17d
mov ebx, dword [ebp - 8]
push 0
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f449
push 0x2b
mov ecx, esi
call fcn.1000f17d
push 4
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f460
push 0x4a
mov ecx, esi
call fcn.1000f17d
push 5
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f477
push 0x3e
mov ecx, esi
call fcn.1000f17d
push 8
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f48e
push 0x24
mov ecx, esi
call fcn.1000f17d
push 0xf
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f4a5
push 0x22
mov ecx, esi
call fcn.1000f17d
push 0x13
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f4bc
push 0x1e
mov ecx, esi
call fcn.1000f17d
push 0x17
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f4d3
push 0x36
mov ecx, esi
call fcn.1000f17d
push 0x18
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f4ea
push 0x2d
mov ecx, esi
call fcn.1000f17d
push 0x19
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f503
push 0x37
push 0x52
mov ecx, esi
call fcn.1000f14d
push 0x1a
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f51c
push 0x53
push 0x52
mov ecx, esi
call fcn.1000f14d
push 0x1c
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f533
push 1
mov ecx, esi
call fcn.1000f17d
mov ecx, 0xc000000
mov eax, edi
and eax, ecx
cmp eax, ecx
jne 0x1000f54d
lea eax, [ebp - 0x30]
push 0
push eax
call fcn.1000fe97
pop ecx
pop ecx
push 0x1c
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f59c
mov eax, dword [ebp - 0x30]
and eax, 6
cmp al, 6
jne 0x1000f59c
push 8
mov ecx, esi
call fcn.1000f17d
push 0xc
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f585
push 0x29
mov ecx, esi
call fcn.1000f17d
push 0x1d
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f59c
push 0x28
mov ecx, esi
call fcn.1000f17d
mov eax, dword [ebp - 0x1c]
xor bl, bl
cmp eax, 7
jb 0x1000fa16
push 0
lea eax, [ebp - 0x14]
push 7
push eax
call fcn.1000f1b4
mov edi, dword [ebp - 0x10]
push 0
push edi
call fcn.1000f16a
add esp, 0x14
test al, al
je 0x1000f5d2
push 0x2c
mov ecx, esi
call fcn.1000f17d
push 3
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f5e9
push 0x1b
mov ecx, esi
call fcn.1000f17d
push 4
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f600
push 0x31
mov ecx, esi
call fcn.1000f17d
push 7
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f617
push 0x50
mov ecx, esi
call fcn.1000f17d
push 8
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f62e
push 0x1c
mov ecx, esi
call fcn.1000f17d
push 9
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f645
push 0x27
mov ecx, esi
call fcn.1000f17d
push 0xb
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f65c
push 0x4c
mov ecx, esi
call fcn.1000f17d
push 0xe
push edi
call fcn.1000f16a
push 0x12
push edi
mov byte [ebp - 0x15], al
call fcn.1000f16a
add esp, 0x10
test al, al
je 0x1000f67f
push 0x49
mov ecx, esi
call fcn.1000f17d
push 0x13
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f696
push 5
mov ecx, esi
call fcn.1000f17d
push 0x14
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f6ad
push 0x4f
mov ecx, esi
call fcn.1000f17d
push 0x16
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f6c4
push 0x42
mov ecx, esi
call fcn.1000f17d
push 0x17
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f6db
push 0x1f
mov ecx, esi
call fcn.1000f17d
push 0x18
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f6f2
push 0x20
mov ecx, esi
call fcn.1000f17d
push 0x1d
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f709
push 0x4d
mov ecx, esi
call fcn.1000f17d
mov ebx, dword [ebp - 0xc]
push 0
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f723
push 0x46
mov ecx, esi
call fcn.1000f17d
push 0x16
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f73a
push 0x47
mov ecx, esi
call fcn.1000f17d
push 0x19
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f751
push 0x1d
mov ecx, esi
call fcn.1000f17d
push 0x1b
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f768
push 0x3c
mov ecx, esi
call fcn.1000f17d
push 0x1c
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f77f
push 0x3b
mov ecx, esi
call fcn.1000f17d
push 0x1d
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f796
push 0x26
mov ecx, esi
call fcn.1000f17d
push 0x12
push dword [ebp - 8]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f7af
push 0x43
mov ecx, esi
call fcn.1000f17d
mov ecx, esi
call fcn.1000fdec
test al, al
jne 0x1000f7c5
mov ecx, esi
call fcn.1000fdf4
test al, al
je 0x1000f7ce
push 0x5b
mov ecx, esi
call fcn.1000f17d
push 5
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f7f0
mov ecx, esi
call fcn.1000fdd8
test al, al
je 0x1000f7f0
push 9
mov ecx, esi
call fcn.1000f17d
push 0x10
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f9d6
mov eax, dword [ebp - 0x30]
and eax, 0xe6
cmp al, 0xe6
jne 0x1000f9d6
push 0x12
mov ecx, esi
call fcn.1000f17d
push 0x11
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f832
push 0x10
mov ecx, esi
call fcn.1000f17d
push 0x15
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f849
push 0x13
mov ecx, esi
call fcn.1000f17d
push 0x1a
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f860
push 0x14
mov ecx, esi
call fcn.1000f17d
push 0x1b
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f877
push 0x11
mov ecx, esi
call fcn.1000f17d
push 0x1c
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f88e
push 0xf
mov ecx, esi
call fcn.1000f17d
push 0x1e
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f8a5
push 0xe
mov ecx, esi
call fcn.1000f17d
push 0x1f
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f8bc
push 0x17
mov ecx, esi
call fcn.1000f17d
push 1
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f8d3
push 0x15
mov ecx, esi
call fcn.1000f17d
push 5
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f8ea
push 0x5f
mov ecx, esi
call fcn.1000f17d
push 6
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f901
push 0x16
mov ecx, esi
call fcn.1000f17d
push 8
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f918
push 0x30
mov ecx, esi
call fcn.1000f17d
push 9
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f92f
push 0x5c
mov ecx, esi
call fcn.1000f17d
push 0xa
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f946
push 0x5e
mov ecx, esi
call fcn.1000f17d
push 0xb
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f95d
push 0x18
mov ecx, esi
call fcn.1000f17d
push 0xc
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f974
push 0xd
mov ecx, esi
call fcn.1000f17d
push 0xe
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f98b
push 0x1a
mov ecx, esi
call fcn.1000f17d
push 2
push dword [ebp - 8]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f9a4
push 0xb
mov ecx, esi
call fcn.1000f17d
push 3
push dword [ebp - 8]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f9bd
push 0xa
mov ecx, esi
call fcn.1000f17d
push 8
push dword [ebp - 8]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000f9d6
push 0x19
mov ecx, esi
call fcn.1000f17d
cmp dword [ebp - 0x14], 1
mov bl, byte [ebp - 0x15]
jb 0x1000fa13
mov ecx, esi
call fcn.1000fdd0
test al, al
je 0x1000fa13
push 1
lea eax, [ebp - 0x14]
push 7
push eax
call fcn.1000f1b4
push 5
push dword [ebp - 0x14]
mov bh, bl
call fcn.1000f16a
add esp, 0x14
test al, al
je 0x1000fa13
push 0xc
mov ecx, esi
call fcn.1000f17d
mov eax, dword [ebp - 0x1c]
cmp eax, 0xd
jb 0x1000faa2
push 0
lea eax, [ebp - 0x14]
push 0xd
push eax
call fcn.1000f1b4
mov eax, dword [ebp - 0x14]
add esp, 0xc
and eax, dword [ebp - 0x30]
and eax, 0x18
cmp al, 0x18
jne 0x1000fa49
test bl, bl
je 0x1000fa49
push 0x3d
mov ecx, esi
call fcn.1000f17d
push 1
lea eax, [ebp - 0x14]
push 0xd
push eax
call fcn.1000f1b4
push 0
push dword [ebp - 0x14]
call fcn.1000f16a
add esp, 0x14
test al, al
je 0x1000fa70
push 0x64
mov ecx, esi
call fcn.1000f17d
push 1
push dword [ebp - 0x14]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fa89
push 0x63
mov ecx, esi
call fcn.1000f17d
push 3
push dword [ebp - 0x14]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000faa2
push 0x65
mov ecx, esi
call fcn.1000f17d
mov edi, dword [ebp - 0x28]
mov eax, 0x80000000
mov ebx, eax
mov dword [ebp - 0x1c], eax
add edi, 0x34
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], 0x80000008
mov dword [ebp - 0x20], edi
push 0
lea eax, [ebp - 0x14]
push ebx
push eax
call fcn.1000f1b4
add esp, 0xc
cmp ebx, 0x80000000
je 0x1000fd6f
cmp ebx, 0x80000001
je 0x1000fb61
cmp ebx, 0x80000002
je 0x1000fb28
cmp ebx, 0x80000003
je 0x1000fb28
cmp ebx, 0x80000004
je 0x1000fb28
cmp ebx, 0x80000008
jne 0x1000fd44
push 0
push dword [ebp - 0x10]
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fd44
push 0x21
mov ecx, esi
call fcn.1000f17d
jmp 0x1000fd44
mov eax, dword [ebp - 0x14]
mov dword [edi], eax
mov eax, dword [ebp - 0x10]
push 4
pop ecx
add edi, ecx
mov dword [edi], eax
add edi, ecx
mov eax, dword [ebp - 0xc]
mov dword [edi], eax
add edi, ecx
mov eax, dword [ebp - 8]
mov dword [edi], eax
add edi, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edi
cmp ebx, 0x80000004
jne 0x1000fd47
add ebx, 3
jmp 0x1000fd47
mov edi, dword [ebp - 0xc]
push 0
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fb7b
push 0x33
mov ecx, esi
call fcn.1000f17d
push 2
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fb92
push 0x59
mov ecx, esi
call fcn.1000f17d
push 5
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fba9
push 0x35
mov ecx, esi
call fcn.1000f17d
push 6
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fbc0
push 0x57
mov ecx, esi
call fcn.1000f17d
push 7
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fbd7
push 0x3f
mov ecx, esi
call fcn.1000f17d
push 8
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fbee
push 0x45
mov ecx, esi
call fcn.1000f17d
push 0xc
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc05
push 0x4e
mov ecx, esi
call fcn.1000f17d
push 0xf
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc1c
push 0x34
mov ecx, esi
call fcn.1000f17d
push 0x15
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc33
push 0x5a
mov ecx, esi
call fcn.1000f17d
push 0x1d
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc4a
push 0x39
mov ecx, esi
call fcn.1000f17d
mov ebx, dword [ebp - 8]
push 0x14
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc64
push 2
mov ecx, esi
call fcn.1000f17d
push 0x15
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc7b
push 0x2e
mov ecx, esi
call fcn.1000f17d
push 0x16
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fc92
push 0x37
mov ecx, esi
call fcn.1000f17d
push 0x1b
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fca9
push 0x4b
mov ecx, esi
call fcn.1000f17d
push 0x1e
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fcc2
push 0x37
push 4
mov ecx, esi
call fcn.1000f14d
push 0x1f
push ebx
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fcd9
push 3
mov ecx, esi
call fcn.1000f17d
mov ebx, dword [ebp - 0x28]
mov ecx, ebx
push 8
call fcn.1000fde0
test al, al
je 0x1000fd17
push 0xb
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fd00
push 0x61
mov ecx, esi
call fcn.1000f17d
push 0x10
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fd17
push 0x2a
mov ecx, esi
call fcn.1000f17d
push 0x100426a0
mov ecx, ebx
call fcn.1000fdfc
test al, al
je 0x1000fd3e
push 4
push edi
call fcn.1000f16a
pop ecx
pop ecx
test al, al
je 0x1000fd3e
push 7
mov ecx, esi
call fcn.1000f17d
mov edi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
inc ebx
mov dword [ebp - 0x24], ebx
cmp ebx, eax
jbe 0x1000fabf
mov eax, dword [ebp - 0x28]
add eax, 0x34
push eax
call fcn.1000fe08
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10027632
leave
ret
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100050f1
pop ecx
pop ecx
mov dword [ebp - 0x1c], eax
jmp 0x1000fd47