Function at 0x1f00c7f0
Capabilities:
Encode data using base64

Disassembly:
mov eax, dword [esp + 0x14]
sub esp, 0xb4
push ebx
mov ebx, dword [esp + 0xc0]
push esi
mov esi, dword [esp + 0xc8]
mov ecx, esi
shl ecx, 4
push ecx
push ebx
mov dword [eax], 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x1f00c82c
pop esi
xor eax, eax
pop ebx
add esp, 0xb4
ret
xor eax, eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], eax
test esi, esi
jbe 0x1f00cd17
push ebp
push edi
mov ebp, dword [esp + 0xd4]
test eax, eax
je 0x1f00c852
add ebx, 0x10
movzx eax, word [ebx]
add dword [esp + 0x14], 2
mov dword [esp + 0x10], eax
test ebp, ebp
je 0x1f00c874
mov word [ebp], ax
add ebp, 2
mov dword [esp + 0xd4], ebp
mov esi, ebp
jne 0x1f00c878
lea esi, [esp + 0x28]
push 0x9c
push 0
push esi
call fcn.1f03f590
add esp, 0xc
test ebp, ebp
je 0x1f00c899
add ebp, 0x9c
mov dword [esp + 0xd4], ebp
mov ecx, dword [esp + 0x10]
add dword [esp + 0x14], 0x9c
movzx eax, cx
mov edi, eax
shr edi, 0xe
shr eax, 0xd
and edi, 1
and eax, 1
mov dword [esp + 0x1c], eax
test edi, edi
je 0x1f00c8c8
and ecx, 0xbfff
mov dword [esp + 0x10], ecx
test eax, eax
je 0x1f00c8d6
and ecx, 0xdfff
mov dword [esp + 0x10], ecx
cmp cx, 0xc
jne 0x1f00c98b
mov edx, dword [ebx + 8]
push 0x10
push edx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1f00c97f
test edi, edi
je 0x1f00c97f
mov ecx, dword [ebx + 8]
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push esi
push 1
push 0x10
push ecx
push edi
call fcn.1f00c270
add esp, 0x18
test ebp, ebp
je 0x1f00c93a
mov eax, dword [esi + 0x90]
test eax, eax
je 0x1f00c93a
mov edx, dword [esi + 0xc]
push edx
push eax
push ebp
call fcn.1f03f7a0
add esp, 0xc
mov eax, dword [esi + 0x90]
test eax, eax
je 0x1f00c94e
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
je 0x1f00c961
cmp dword [esi + 0x90], 0
je 0x1f00c961
mov dword [esi + 0x90], ebp
mov eax, dword [esp + 0x18]
add dword [esp + 0x14], eax
test ebp, ebp
je 0x1f00ccff
add ebp, eax
mov dword [esp + 0xd4], ebp
jmp 0x1f00ccff
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], 1
test eax, eax
je 0x1f00c9ef
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
cmp edi, eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x20], 1
je 0x1f00c9d2
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x1f00c9c7
mov dword [esp + 0x20], 0
mov dword [esp + 0x10], 1
jmp 0x1f00c9d6
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov dword [esp + 0x18], edx
jmp 0x1f00c9d6
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
push 0x18
push ecx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x1f00ca07
mov dword [esp + 0x10], 1
movzx eax, word [esp + 0x10]
add eax, 0xfffffffe
cmp eax, 0x18
ja case.0x1f00ca00.12
jmp dword [eax*4 + 0x1f00cd34]
cmp dword [esp + 0x20], 0
je 0x1f00c9ef
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0xc8]
lea edx, [esp + 0x1c]
push edx
push esi
push 1
push 0x18
push eax
push edi
call fcn.1f00c6a0
add esp, 0x18
test ebp, ebp
je 0x1f00ca49
mov eax, dword [esi + 0x90]
test eax, eax
je 0x1f00ca49
mov ecx, dword [esi + 0xc]
push ecx
push eax
push ebp
call fcn.1f03f7a0
add esp, 0xc
mov eax, dword [esi + 0x90]
test eax, eax
je 0x1f00ca5d
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
je 0x1f00ca70
cmp dword [esi + 0x90], 0
je 0x1f00ca70
mov dword [esi + 0x90], ebp
mov eax, dword [esp + 0x1c]
jmp 0x1f00c965
test edi, edi
je 0x1f00ca8b
mov dword [esi], 0x3c
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0x3b
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00caab
mov dword [esi], 0x3e
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0x3d
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cacb
mov dword [esi], 0x40
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0x3f
lea edi, [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0xb7
test edi, edi
je 0x1f00cb54
mov edx, dword [ebx + 8]
push 4
push edx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne case.0x1f00ca00.12
cmp dword [esi], 0xb7
mov eax, dword [ebx + 8]
mov edi, dword [eax]
jne 0x1f00cc40
push edi
mov dword [esi + 4], edi
call fcn.1f0354f0
add esp, 4
test eax, eax
jl case.0x1f00ca00.12
lea eax, [eax + eax + 2]
add dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
test ebp, ebp
je 0x1f00ccff
push eax
push edi
push ebp
mov dword [esi + 0x90], ebp
mov dword [esi + 0xc], eax
call fcn.1f03f7a0
add esp, 0xc
add ebp, dword [esp + 0x10]
mov dword [esp + 0xd4], ebp
jmp 0x1f00ccff
mov edi, dword [ebx + 8]
jmp 0x1f00cb08
test edi, edi
je 0x1f00cb6b
mov dword [esi], 0x12
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0x11
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cb8b
mov dword [esi], 7
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 5
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cbab
mov dword [esi], 0xb6
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0xb5
jmp 0x1f00cc3e
test edi, edi
je 0x1f00cbc5
mov dword [esi], 2
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cbdf
mov dword [esi], 0xe
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0xd
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cbf9
mov dword [esi], 4
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 3
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cc13
mov dword [esi], 0x10
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0xf
lea edi, [ebx + 8]
jmp 0x1f00cc40
test edi, edi
je 0x1f00cc2d
mov dword [esi], 0xab
mov edi, dword [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0xc3
lea edi, [ebx + 8]
jmp 0x1f00cc40
mov dword [esi], 0xb8
mov edi, ebx
mov ecx, dword [esi]
push ecx
push 0
call fcn.1f035a40
mov edx, dword [esi]
push edx
push 0
mov ebp, eax
call fcn.1f035a00
add esp, 0x10
mov dword [esp + 0x10], eax
mov dword [esi + 8], ebp
cmp ebp, 4
ja 0x1f00ccbd
test eax, eax
je 0x1f00ccb6
push eax
push edi
mov dword [esi + 4], edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1f00ccff
mov eax, dword [esp + 0x10]
add dword [esp + 0x14], eax
cmp dword [esp + 0xd4], 0
je 0x1f00ccff
mov ebp, dword [esp + 0xd4]
push eax
push edi
push ebp
mov dword [esi + 0x90], ebp
mov dword [esi + 0xc], eax
call fcn.1f03f7a0
add esp, 0xc
add ebp, dword [esp + 0x10]
mov dword [esp + 0xd4], ebp
jmp 0x1f00ccff
mov ecx, dword [edi]
mov dword [esi + 4], ecx
jmp 0x1f00ccff
push ebp
push edi
mov dword [esi + 4], 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1f00ccff
add dword [esp + 0x14], ebp
cmp dword [esp + 0xd4], eax
je 0x1f00ccff
mov eax, dword [esp + 0xd4]
push ebp
push edi
push eax
mov dword [esi + 0x90], eax
mov dword [esi + 8], ebp
call fcn.1f03f7a0
add esp, 0xc
add dword [esp + 0xd4], ebp
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0xd0]
jb 0x1f00c844
pop edi
pop ebp
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0xc]
pop esi
mov dword [eax], edx
mov eax, 1
pop ebx
add esp, 0xb4
ret