Function at 0x1400b60e0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
movaps xmmword [rbp - 0x10], xmm6
mov r15, rdx
mov eax, dword [0x141dd3c98]
xor eax, dword [0x141dd3c9c]
mov rsi, rcx
and eax, 0x3c42509
add eax, 0x75dc8690
cmp eax, 0xfd0b4886
ja 0x1400b615a
mov eax, dword [0x141dd3ca0]
imul eax, dword [0x141dd3ca4]
mov ecx, 0xd837e70d
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x1aa10ab2
add ecx, 0xb4c55766
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
mov r12, rsp
cmp ecx, 0x439f9244
jae 0x1400b6169
mov eax, 0x10
call fcn.1400ef330
sub rsp, rax
jmp 0x1400b611c
mov eax, dword [0x141dd3ca8]
xor eax, dword [0x141dd3cac]
add eax, 0xe8484f0a
xor eax, 0x8652319d
imul rax, rax, 0x43ec5eb5
shr rax, 0x3e
cmp eax, 0x97b2175a
jbe 0x1400b61a0
mov qword [r12], 0
nop dword [rax]
mov eax, dword [0x141dd3cb0]
sub eax, dword [0x141dd3cb4]
imul eax, eax, 0xd88b685
xor eax, 0x72c9aa51
mov qword [r12], 0
cmp eax, 0x87641043
ja 0x1400b61a0
mov rdi, qword [r15 + 0x10]
mov eax, 0x83511ebb
nop
mov ecx, dword [0x141dd3cb8]
sub ecx, dword [0x141dd3cbc]
xor ecx, 0xb4f65ae7
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xc6ea5ec8
ja 0x1400b61d0
mov rax, rdi
shr rax, 0x20
je 0x1400b622d
mov eax, dword [0x141dd3d58]
and eax, dword [0x141dd3d5c]
imul eax, eax, 0xe48089a8
imul rax, rax, 0x10edf193
shr rax, 0x3c
or eax, 0x18f36062
cmp eax, 0xa170c227
jbe 0x1400b6c5e
jmp 0x1400b6c92
mov eax, 0x86a49793
nop word cs:[rax + rax]
mov ecx, dword [0x141dd3cc0]
sub ecx, dword [0x141dd3cc4]
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x37b2a200
add ecx, 0x808dae00
cmp ecx, 0xa0436868
ja 0x1400b6240
mov eax, dword [0x141dd3cc8]
imul eax, dword [0x141dd3ccc]
and eax, 0x3e244a47
cmp eax, 0x4eff431c
jne 0x1400b6299
sub rsp, 0x20
xor ecx, ecx
mov edx, edi
xor r8d, r8d
mov r9, r12
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
mov eax, dword [0x141dd3cd0]
add eax, dword [0x141dd3cd4]
imul r14d, eax, 0xcc866d9c
add r14d, 0xba101769
and r14d, 0x4ee86904
sub rsp, 0x20
xor ecx, ecx
mov edx, edi
xor r8d, r8d
mov r9, r12
call rbx
add rsp, 0x20
cmp r14d, 0x4b3af6d8
je 0x1400b62a0
mov r13, qword [r12]
test r13, r13
js 0x1400b631e
nop word [rax + rax]
mov eax, dword [0x141dd3ce0]
sub eax, dword [0x141dd3ce4]
cmp eax, 0x4f3a627d
je 0x1400b62f0
test r13, r13
je 0x1400b6317
xor eax, eax
test al, al
je 0x1400b6acb
jmp 0x1400b6afd
mov ebx, 1
jmp 0x1400b6354
ud2
xor r14d, r14d
mov rax, r13
sub rax, 1
cmovae r14, rax
sbb r14, 0xffffffffffffffff
cmp r13, r14
mov qword [rbp - 0x18], r14
jbe 0x1400b6494
test r14, r14
je 0x1400b63b6
mov qword [rbp - 0x20], r15
mov eax, dword [0x141dd3d28]
xor eax, dword [0x141dd3d2c]
add eax, 0x7574226d
imul rcx, rax, 0x10d5be5d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x3b896c50
cmp eax, 0x4d2d8fc4
jbe 0x1400b6b74
jmp 0x1400b6b9d
mov eax, dword [0x141dd3d00]
xor edx, edx
div dword [0x141dd3d04]
cmp eax, 0x14dabdbf
je 0x1400b63ea
mov eax, dword [0x141dd3d08]
sub eax, dword [0x141dd3d0c]
and eax, 0xa0000000
mov r13, qword [0x141ddb260]
cmp eax, 0x6048bdfa
jae 0x1400b63f3
mov rax, qword [0x141ddb260]
jmp 0x1400b63cb
mov eax, dword [0x141dd3d10]
xor edx, edx
div dword [0x141dd3d14]
xor eax, 0xc2f98933
imul eax, eax, 0xed4054ff
add eax, 0x6a545662
cmp eax, 0xfce4fba
ja 0x1400b6457
mov eax, dword [0x141dd3ce8]
xor edx, edx
div dword [0x141dd3cec]
or eax, 0x2973fed3
imul eax, eax, 0xd9302438
imul rax, rax, 0x4f18e881
shr rax, 0x3d
movzx ecx, byte [0x141ddb278]
cmp eax, 0xf9e23b0d
jbe 0x1400b6b06
movzx eax, byte [0x141ddb278]
jmp 0x1400b6acb
sub rsp, 0x20
xor ecx, ecx
mov rdx, r13
call fcn.1400c0180
add rsp, 0x20
mov rbx, rax
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400b6b20
test rbx, rbx
jne 0x1400b6354
mov eax, dword [0x141dd3cf0]
xor edx, edx
div dword [0x141dd3cf4]
imul eax, eax, 0x9e0ca88
cmp eax, 0x32c32e6d
jne 0x1400b6b50
ud2
mov eax, dword [0x141dd3cf8]
or eax, dword [0x141dd3cfc]
add eax, 0xb61e5842
xor eax, 0xe6d5e766
ud2
mov eax, dword [0x141dd3d30]
add eax, dword [0x141dd3d34]
or eax, 0x10804200
xor eax, 0x2121
and eax, 0x1083e3a1
mov r13, qword [0x141ddb260]
cmp eax, 0x5119b42d
jbe 0x1400b6ba6
mov rax, qword [0x141ddb260]
jmp 0x1400b6b74
mov eax, dword [0x141dd3d38]
or eax, dword [0x141dd3d3c]
imul eax, eax, 0x751af05
add eax, 0x6bfc3013
xor eax, 0xef22eb87
cmp eax, 0xcd03048c
jbe 0x1400b6bf0
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rbx
mov r9, r14
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
add rsp, 0x20
nop word cs:[rax + rax]
mov r15d, dword [0x141dd3d40]
imul r15d, dword [str.NHZ_]
add r15d, 0xd315a2d6
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rbx
mov r9, r14
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
add rsp, 0x20
cmp r15d, 0x63ea79b2
ja 0x1400b6bf0
mov rbx, rax
test rax, rax
mov r15, qword [rbp - 0x20]
jne 0x1400b6494
ud2
lea rax, [0x141db95a0]
mov qword [rsi + 8], rax
mov eax, dword [0x141dd3d60]
and eax, dword [0x141dd3d64]
or eax, 0xc218825
and eax, 0x1ce5f87f
add eax, 0x9c292e5a
mov qword [rsi], 0
cmp eax, 0xff026ee8
jbe 0x1400b6ca6
lea rax, [0x141db95a0]
mov qword [rsi + 8], rax
mov qword [rsi], 0
jmp 0x1400b6c5e
mov al, 1
nop dword [rax + rax]
test al, al
je 0x1400b6cb0
jmp 0x1400b6d60