Function at 0x1800198c0
Capabilities:
Encode data using base64
Terminate process

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x108
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
mov rax, qword [0x1800923a0]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov eax, dword [rsp + 0x170]
mov r13, rcx
mov qword [rsp + 0x68], rcx
mov r12, rdx
imul ecx, eax, 0x58e
mov r10, r9
mov qword [rsp + 0x60], r9
mov r11, r8
mov qword [rsp + 0x70], r8
mov edx, eax
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], ecx
cmp eax, ecx
ja 0x18001a540
movsd xmm7, qword [0x18008c0b0]
movsd xmm8, qword [0x18008bde0]
movsd xmm9, qword [0x18008be80]
mov rbp, qword [rsp + 0x68]
mov r14, qword [rsp + 0x68]
movsd xmm6, qword [rsp + 0x68]
mov dword [rsp + 0x48], 0x30
mov ebx, dword [rsp + 0x48]
mov r15d, dword [rsp + 0x48]
lea rsi, [0x180000000]
mov r8d, 1
cmp edx, 0x15e0
ja 0x180019cef
je 0x18001a540
cmp edx, 0xf5
ja 0x180019b05
je 0x18001a3c7
mov eax, edx
sub eax, 0x16
je 0x180019aaa
sub eax, 0x30
je 0x180019a4f
sub eax, 0x72
je 0x1800199e1
cmp eax, 0xd
jne 0x18001a398
mov edi, dword [r11]
mov rbp, qword [r13]
shr edi, 0xb
and edi, r8d
mov dword [rsp + 0x80], edi
inc rbp
jmp 0x18001a398
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x18001a3b3
movsd xmm3, qword [rax]
movsd xmm1, qword [r13]
ucomisd xmm3, xmm1
jp 0x180019a08
jne 0x180019a08
xorps xmm6, xmm6
jmp 0x18001a398
movsd xmm2, qword [r13 + 8]
subsd xmm1, xmm3
subsd xmm2, qword [rax + 8]
movsd xmm6, qword [r13 + 0x10]
movaps xmm0, xmm2
andps xmm0, xmm7
comisd xmm8, xmm0
jbe 0x180019a3d
addsd xmm6, qword [rax + 0x10]
mulsd xmm6, xmm9
mulsd xmm6, xmm1
jmp 0x18001a398
subsd xmm6, qword [rax + 0x10]
divsd xmm6, xmm2
mulsd xmm6, xmm1
jmp 0x18001a398
mov rax, qword [r12]
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x30], r11
mov r9, r10
mov qword [rsp + 0x90], rax
mov r8, r13
lea rax, [rsp + 0x78]
mov dword [rsp + 0x28], 0x82
xor edx, edx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x78], 0
call fcn.1800140e0
mov edx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x44]
mov dword [rsp + 0x50], eax
jmp 0x18001a398
mov rax, qword [r13]
mov dword [rsp + 0x58], 0
cmp dword [rax], 9
je 0x18001a3bd
mov r9, qword [r13 + 8]
xor edx, edx
xor ecx, ecx
mov r8d, 0xcd
lea rax, [r9 + 0x1078]
add r9, 0x1010
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
call fcn.1800267d0
mov edx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x44]
jmp 0x18001a398
cmp edx, 0x11a
je 0x180019cc8
cmp edx, 0x6e0
je 0x180019bfb
cmp edx, 0xdaa
je 0x180019be8
cmp edx, 0x1474
jne 0x18001a398
mov rax, qword [r13 + 8]
mov dword [rax + 0x1bc], 0
mov rax, qword [r13 + 8]
cmp qword [rax + 0x68], 0
je 0x180019b81
mov rsi, qword [rax + 0x68]
xor ecx, ecx
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rsi, rax
je 0x180019b6f
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rdi, qword [r13 + 8]
mov qword [rdi + 0x68], 0
mov r8d, 1
mov rax, qword [r13 + 8]
cmp dword [rax + 0x1000], 0
je 0x180019bb7
mov rcx, qword [rax + 0x210]
sub rcx, qword [rax + 0x1078]
jne 0x180019ba8
mov rcx, qword [rax + 0x218]
sub rcx, qword [rax + 0x1080]
mov edi, dword [rsp + 0x58]
test rcx, rcx
cmovne edi, r8d
mov dword [rsp + 0x58], edi
mov r8d, 0x12b
mov dword [rax + 0x1008], 0
mov rdx, r13
xor ecx, ecx
call fcn.1800540c0
mov edx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x44]
jmp 0x18001a398
mov rax, qword [r13 + 8]
mov dword [rax + 0x1b8], 0
jmp 0x18001a398
mov rcx, qword [r13 + 8]
mov rcx, qword [rcx + 0x2a0]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [r13 + 8]
xor ecx, ecx
xor r9d, r9d
xor edx, edx
mov qword [rax + 0x2a0], rcx
mov rax, qword [r13 + 8]
lea r8d, [r9 + 0x5f]
mov dword [rax + 0x1d4], ecx
mov rax, qword [r13 + 8]
mov rcx, qword [rax + 0x70]
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.18000a360
mov edi, 0x78
lea esi, [rdi - 0x70]
nop dword [rax + rax]
mov rax, qword [r13 + 8]
mov rcx, qword [rdi + rax]
test rcx, rcx
je 0x180019c77
add rcx, 0xfffffffffffffff0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [r13 + 8]
mov qword [rdi + rax], 0
mov rax, qword [r13 + 8]
mov rcx, qword [rdi + rax + 0xf48]
test rcx, rcx
je 0x180019ca7
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [r13 + 8]
mov qword [rax + rdi + 0x40], 0
mov rax, qword [r13 + 8]
mov qword [rdi + rax + 0xf48], 0
add rdi, 8
sub rsi, 1
jne 0x180019c50
mov edx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x44]
jmp 0x18001a398
mov ecx, dword [r13 + 0xc]
sub ecx, dword [r13 + 0x14]
mov eax, dword [r13 + 0x10]
lea edx, [rax + rcx*8]
mov ecx, dword [rsp + 0x44]
shl edx, 3
sub edx, dword [r13 + 0x18]
mov dword [rsp + 0x50], edx
mov edx, dword [rsp + 0x40]
jmp 0x18001a398
cmp edx, 0x5820
ja 0x18001a36e
je 0x18001a540
cmp edx, 0x1b3e
je 0x18001a355
cmp edx, 0x2208
je 0x18001a540
cmp edx, 0x3980
je 0x18001a34d
cmp edx, 0x3d90
jne 0x18001a398
movzx ebx, byte [rbp]
inc rbp
mov edi, dword [rsp + 0x80]
test edi, edi
je 0x180019d97
cmp ebx, 0xc0
jb 0x180019d97
mov eax, ebx
and eax, 0x3f
movzx r8d, byte [rax + rsi + 0x7aa10]
and ebx, dword [rsi + r8*4 + 0x7a9f8]
lea ecx, [r8 + r8*2]
add ecx, ecx
shl ebx, cl
test r8d, r8d
je 0x180019d89
nop
movzx eax, byte [rbp]
sub ecx, 6
and eax, 0x3f
dec r8d
shl eax, cl
inc rbp
or ebx, eax
test r8d, r8d
jg 0x180019d70
mov ecx, dword [rsp + 0x44]
mov r8d, 1
mov edx, dword [rsp + 0x40]
dec rbp
test ebx, ebx
jne 0x180019da6
mov dword [r10], r8d
jmp 0x18001a398
lea eax, [rbx - 0x30]
cmp eax, 0x4a
ja 0x18001a398
movsxd rax, ebx
movsx r9d, word [rsi + rax*2 + 0x81460]
test r9d, r9d
je 0x180019dcb
mov ebx, r9d
jmp 0x18001a398
mov r13, qword [rsp + 0x178]
mov ecx, 0x107
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x105
je 0x18001a32b
sub eax, 1
je 0x18001a306
cmp eax, 1
jne 0x18001a334
mov r8, qword [rsp + 0x68]
lea eax, [rbx - 0x30]
cmp eax, 0x48
ja case.0x180019e24.55
cdqe
movzx eax, byte [rsi + rax + 0x1a5a4]
mov ecx, dword [rsi + rax*4 + 0x1a584]
add rcx, rsi
jmp rcx
mov dword [r10], 0x25
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
mov edx, 0x2a
mov eax, edx
sub eax, 0x2a
je 0x180019f0f
sub eax, 0x6b
je 0x180019ebc
sub eax, 0x6b
je 0x180019e8d
cmp eax, 0x6b
jne 0x180019fc0
cmp dword [rsp + 0x88], 0
je 0x180019fff
mov eax, dword [r12]
cmp ebx, eax
jle 0x180019ffa
mov dword [r10], 0xf
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
test r15d, r15d
je 0x180019e9f
inc rbp
cmp byte [rbp], 0x7d
jne 0x18001a016
test ebx, ebx
jne 0x180019fc0
mov dword [r10], 0x3a
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
movzx eax, byte [rbp + 1]
lea rcx, [rbp + 1]
test byte [rax + rsi + 0x81fb0], 4
je 0x180019ef2
nop
mov rbp, rcx
lea ecx, [rbx - 6]
lea ecx, [rbx + rcx*4]
movzx eax, byte [rbp]
lea ebx, [rax + rcx*2]
movzx eax, byte [rbp + 1]
lea rcx, [rbp + 1]
test byte [rax + rsi + 0x81fb0], 4
jne 0x180019ed0
test ebx, ebx
jns 0x180019fc0
mov dword [r10], 0x3d
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
movzx eax, byte [rbp + 1]
cmp al, 0x3c
je 0x18001a03e
cmp al, 0x27
je 0x18001a03e
cmp al, 0x7b
jne 0x180019f9d
mov ecx, 0x7f
nop dword [rax]
mov eax, ecx
sub eax, 0x7f
je 0x180019f5c
sub eax, 0xb
je 0x180019f8b
cmp eax, 0xb
jne 0x180019f90
movzx eax, byte [r14]
test al, al
je 0x180019f51
cmp al, 0x7d
jne 0x18001a02b
mov r15d, 1
inc rbp
jmp 0x180019f90
movzx eax, byte [rbp + 2]
lea r14, [rbp + 2]
test al, al
je 0x180019f90
cmp al, 0x7d
je 0x180019f90
cmp al, 0x2d
je 0x180019f7d
movzx eax, al
test byte [rax + rsi + 0x81fb0], 4
je 0x180019f8b
movzx eax, byte [r14 + 1]
inc r14
test al, al
jne 0x180019f68
jmp 0x180019f90
mov ecx, 0x8a
add ecx, 0xb
cmp ecx, 0xa0
jb 0x180019f30
jmp 0x180019fa0
xor r15d, r15d
movzx ecx, byte [rbp + 1]
lea rax, [rbp + 1]
cmp cl, 0x2d
cmove rbp, rax
xor eax, eax
xor ebx, ebx
cmp cl, 0x2d
sete al
mov dword [rsp + 0x88], eax
add edx, 0x6b
cmp edx, 0x1d6
jb 0x180019e40
cmp dword [r13], 0
jne 0x18001a0be
mov edx, 0xc5
nop
mov eax, edx
sub eax, 0xc4
je 0x18001a051
cmp eax, 1
jne 0x18001a0b0
mov r8, rbp
jmp 0x18001a0b0
sub eax, ebx
lea ebx, [rax + 1]
mov eax, 0xffffffe3
sub eax, ebx
mov ebx, eax
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
mov dword [r10], 0x39
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
mov ebx, 0xffffffe4
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
mov ebx, 0xffffffe5
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
movzx eax, byte [rbp + 1]
lea rcx, [rbp + 1]
sub ebx, 0x30
test byte [rax + rsi + 0x81fb0], 4
je 0x18001a092
nop word [rax + rax]
mov rbp, rcx
lea ecx, [rbx - 6]
lea ecx, [rbx + rcx*4]
movzx eax, byte [rbp]
lea ebx, [rax + rcx*2]
movzx eax, byte [rbp + 1]
lea rcx, [rbp + 1]
test byte [rax + rsi + 0x81fb0], 4
jne 0x18001a070
test ebx, ebx
js 0x180019efa
cmp ebx, 0xa
jl 0x180019fff
cmp ebx, dword [r12]
jle 0x180019fff
mov rbp, r8
dec edx
cmp edx, 0xc3
ja 0x180019fe0
movzx ebx, byte [rbp]
cmp ebx, 0x38
jb case.0x180019e24.48
dec rbp
xor ebx, ebx
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
sub ebx, 0x30
cmp r9d, 2
jge 0x18001a10d
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbp + 1]
inc r9d
lea eax, [rdx - 0x30]
cmp al, 7
ja 0x18001a110
add ebx, 0xfffffffa
inc rbp
lea ebx, [rdx + rbx*8]
cmp r9d, 2
jl 0x18001a0f0
inc r9d
test edi, edi
jne 0x18001a306
cmp ebx, 0xff
jle 0x18001a306
mov dword [r10], 0x33
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
cmp byte [rbp + 1], 0x7b
jne 0x18001a1d4
movzx ecx, byte [rbp + 2]
lea rdx, [rbp + 2]
xor r8d, r8d
xor ebx, ebx
test byte [rcx + rsi + 0x81fb0], 8
je 0x18001a19f
nop word [rax + rax]
inc rdx
movzx eax, cl
test ebx, ebx
jne 0x18001a16f
cmp eax, 0x30
je 0x18001a18f
inc r8d
lea ecx, [rax - 0x20]
cmp eax, 0x61
cmovb ecx, eax
mov eax, 0x37
cmp ecx, 0x41
cmovl eax, dword [rsp + 0x48]
shl ebx, 4
sub ebx, eax
add ebx, ecx
movzx eax, byte [rdx]
movzx ecx, al
test byte [rax + rsi + 0x81fb0], 8
jne 0x18001a160
cmp cl, 0x7d
jne 0x18001a1d4
test ebx, ebx
js 0x18001a1bc
test edi, edi
mov eax, 2
mov ecx, 8
cmovne eax, ecx
cmp r8d, eax
jle 0x18001a1c3
mov dword [r10], 0x22
mov rbp, rdx
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
xor ebx, ebx
cmp r9d, 2
jge 0x18001a21b
lea edx, [rbx + 0x30]
nop
movzx ecx, byte [rbp + 1]
inc r9d
test byte [rcx + rsi + 0x81fb0], 8
je 0x18001a306
mov eax, ecx
inc rbp
add ecx, 0xffffffe0
cmp eax, 0x61
cmovb ecx, eax
mov eax, 0x37
cmp ecx, 0x41
cmovl eax, edx
shl ebx, 4
sub ebx, eax
add ebx, ecx
cmp r9d, 2
jl 0x18001a1e0
inc r9d
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
xor ebx, ebx
cmp r9d, 4
jge 0x18001a21b
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp + 1]
inc r9d
test byte [rax + rsi + 0x81fb0], 8
je 0x18001a306
mov edx, 0x74
lea esi, [rdx - 0x44]
nop dword [rax]
mov eax, edx
sub eax, 0x73
je 0x18001a290
cmp eax, 1
jne 0x18001a293
movzx eax, byte [rbp + 1]
inc rbp
cmp eax, 0x61
lea ecx, [rax - 0x20]
cmovb ecx, eax
mov eax, 0x37
cmp ecx, 0x41
cmovl eax, esi
shl ebx, 4
sub ebx, eax
add ebx, ecx
jmp 0x18001a293
movzx ebx, bl
dec edx
cmp edx, 0x72
ja 0x18001a260
lea rsi, [0x180000000]
cmp r9d, 4
jl 0x18001a240
inc r9d
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
mov eax, 0x103
nop word [rax + rax]
mov ecx, ebx
cmp eax, 0x103
je 0x18001a2e6
cmp eax, 0x704d
jne 0x18001a2ed
test ebx, ebx
jne 0x18001a311
mov dword [r10], 2
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
movzx ebx, byte [rbp + 1]
inc rbp
add eax, 0x6f4a
cmp eax, 0xde94
jbe 0x18001a2c0
test byte [r11], 0x40
je 0x18001a306
mov dword [r10], 3
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
lea eax, [rbx - 0x61]
add ebx, 0xffffffe0
cmp eax, 0x19
cmova ebx, ecx
xor ebx, 0x40
mov edx, dword [rsp + 0x40]
mov ecx, 0x106
jmp 0x18001a334
mov edx, 0x3d90
mov dword [rsp + 0x40], edx
dec ecx
cmp ecx, 0x104
ja 0x180019de0
mov r13, qword [rsp + 0x68]
mov ecx, dword [rsp + 0x44]
jmp 0x18001a398
movsd qword [rsp + 0x50], xmm6
jmp 0x18001a398
mov rax, qword [r13]
mov dword [rax], 9
xor eax, eax
cmp dword [rsp + 0x58], eax
sete al
mov dword [rsp + 0x50], eax
jmp 0x18001a398
cmp edx, 0x7248
je 0x18001a540
cmp edx, 0x7a5b
je 0x18001a390
cmp edx, 0xb726
je 0x18001a540
jmp 0x18001a398
mov qword [r13], rbp
mov dword [rsp + 0x50], ebx
imul eax, dword [rsp + 0x170], 0x4f
add edx, eax
mov dword [rsp + 0x40], edx
cmp edx, ecx
ja 0x18001a540
jmp 0x180019972
mov ecx, r8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x50], r8d
jmp 0x18001a540
mov esi, 0x9b
nop dword [rax]
mov eax, esi
sub eax, 0x9b
je 0x18001a3e7
cmp eax, 1
je 0x18001a540
jmp 0x18001a51e
mov eax, 0x38e38e39
mul dword [r11]
shr edx, 2
mov dword [r12], edx
test edx, edx
jne 0x18001a405
mov qword [r12 + 8], 0
jmp 0x18001a443
mov eax, edx
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x68], rax
mov r8d, 0x1a
mov qword [rsp + 0x90], 0x18
call fcn.18002b960
mov qword [r12 + 8], rax
test rax, rax
je 0x18001a538
mov r10, qword [rsp + 0x60]
xor edi, edi
cmp dword [r12], edi
jbe 0x18001a50c
lea ebp, [rdi + 8]
mov r9, qword [r13]
lea rcx, [rsp + 0x98]
mov edx, 1
lea r8d, [rdx + 0x11]
call qword [r10]
cmp rax, 0x12
jne 0x18001a52e
mov r8d, 0x12a
mov dword [rsp + 0x48], ebp
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x98]
call fcn.180070ca0
mov rcx, qword [r12 + 8]
lea rbx, [rdi + rdi*2]
mov r8d, 0x12a
mov dword [rsp + 0x48], ebp
lea rdx, [rsp + 0x48]
mov qword [rcx + rbx*8], rax
lea rcx, [rsp + 0xa0]
call fcn.180070ca0
mov rcx, qword [r12 + 8]
lea r8, [rsp + 0xa8]
mov r9d, 0x78
mov dword [rsp + 0x88], 2
xor edx, edx
mov qword [rcx + rbx*8 + 8], rax
lea rax, [rsp + 0x88]
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.180029570
mov rcx, qword [r12 + 8]
inc edi
mov r10, qword [rsp + 0x60]
mov dword [rcx + rbx*8 + 0x10], eax
cmp edi, dword [r12]
jb 0x18001a452
mov r10, qword [rsp + 0x60]
mov r11, qword [rsp + 0x70]
mov dword [rsp + 0x50], 0
inc esi
cmp esi, 0x9d
jb 0x18001a3d0
jmp 0x18001a540
mov dword [rsp + 0x50], 6
jmp 0x18001a540
mov dword [rsp + 0x50], 0xb
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.180077c10
lea r11, [rsp + 0x108]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret