Function at 0x1400bbcc0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov r15, rdx
mov qword [rbp - 0x10], rcx
mov eax, dword [0x141dd4840]
sub eax, dword [0x141dd4844]
and eax, 0x28142400
xor eax, 0x10040854
or eax, 0xc3ead3ab
cmp eax, 0x26c999a1
jne 0x1400bbd30
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rcx, rsp
mov eax, 0x400
call fcn.1400ef330
sub rsp, rax
mov qword [rcx], 0
mov qword [rcx + 8], 2
nop word [rax + rax]
mov eax, dword [0x141dd4848]
sub eax, dword [0x141dd484c]
imul ecx, eax, 0x897d41ce
add ecx, 0x47299dde
or ecx, 0x61cc46ad
mov eax, 0x20
call fcn.1400ef330
sub rsp, rax
mov rdx, rsp
mov eax, 0x400
call fcn.1400ef330
sub rsp, rax
mov rax, rsp
mov qword [rdx], 0
mov qword [rdx + 8], 2
cmp ecx, 0xe1d51c91
ja 0x1400bbd30
mov qword [rbp - 0x40], rax
mov eax, dword [0x141dd4850]
sub eax, dword [0x141dd4854]
xor eax, 0x320220
or eax, 0x6d8cd5df
cmp eax, 0xe20fd4f9
jae 0x1400bbdae
mov qword [rdx + 0x10], 0
mov qword [rbp - 0x30], r8
nop word cs:[rax + rax]
mov eax, dword [0x141dd4858]
or eax, dword [0x141dd485c]
imul eax, eax, 0x1df2dcb9
mov qword [rdx + 0x10], 0
cmp eax, 0xcba50b96
je 0x1400bbdc0
mov qword [rbp - 0x20], rdx
mov r14d, 0x200
mov eax, 2
mov qword [rbp - 0x28], rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
mov rbx, qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
xor eax, eax
mov qword [rbp], rax
xor eax, eax
mov qword [rbp - 0x18], rax
xor eax, eax
mov qword [rbp - 8], rax
nop word cs:[rax + rax]
cmp r14, 0x201
jae 0x1400bbe50
mov eax, 0x200
mov qword [rbp - 0x38], rax
mov r12, qword [rbp - 0x40]
mov rsi, r14
xor eax, eax
test al, al
je 0x1400bbee0
jmp 0x1400bbebf
mov rdx, qword [rbp - 8]
sub r14, rdx
mov rsi, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x18]
nop
mov eax, dword [0x141dd4860]
xor eax, dword [0x141dd4864]
xor eax, 0x5acc65d5
add eax, 0xcb94dcc7
cmp eax, 0x9d64c674
ja 0x1400bbe60
sub rcx, rdx
xor eax, eax
test al, al
jne 0x1400bbe80
cmp r14, rcx
ja 0x1400bc021
mov rax, qword [rbp]
mov ecx, 0xffffffff
cmp rax, rcx
cmovb rcx, rax
mov qword [rsi + 0x10], rcx
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x38], rcx
mov r12, qword [rbp - 0x28]
mov rax, rcx
mov qword [rbp - 8], rcx
mov rsi, rcx
xor eax, eax
test al, al
je 0x1400bbee0
sub rsp, 0x20
xor ecx, ecx
call rdi
mov rcx, r15
mov edx, esi
mov r8, r12
xor r9d, r9d
call rbx
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd4880]
and eax, dword [0x141dd4884]
and eax, 0x341115d3
imul r14d, eax, 0x215c103
add r14d, 0xb42d2606
sub rsp, 0x20
xor ecx, ecx
call rdi
mov rcx, r15
mov edx, esi
mov r8, r12
xor r9d, r9d
call rbx
add rsp, 0x20
cmp r14d, 0xd781d8f6
ja 0x1400bbee0
mov r13d, eax
test eax, eax
jne 0x1400bbf73
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4888]
and ecx, dword [0x141dd488c]
imul rcx, rcx, 0x7d80684d
shr rcx, 0x38
xor ecx, 0xc57fd49e
imul ecx, ecx, 0x47b0adeb
cmp ecx, 0xe1110c10
je 0x1400bbf40
test eax, eax
jne 0x1400bc47b
mov r14d, r13d
mov eax, dword [0x141dd48a8]
or eax, dword [0x141dd48ac]
and eax, 0x95554cd
cmp eax, 0x5fd13e2a
je 0x1400bbf76
nop
mov eax, dword [0x141dd48b0]
add eax, dword [0x141dd48b4]
imul eax, eax, 0x3077ffa9
cmp eax, 0x34010c81
je 0x1400bbf90
cmp rsi, r14
jne 0x1400bbfe0
mov eax, dword [0x141dd48c0]
xor eax, dword [0x141dd48c4]
imul eax, eax, 0x21a708e7
and eax, 0x95f45e9b
cmp eax, 0x10d7247e
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x1400bc0c0
jmp 0x1400bc0f8
mov eax, dword [0x141dd48d8]
xor edx, edx
div dword [0x141dd48dc]
mov eax, dword [0x141dd48e0]
sub eax, dword [0x141dd48e4]
add eax, 0x958503db
mov ecx, 0xb970f705
imul rax, rcx
shr rax, 0x3f
cmp eax, 0x53ab6d67
ja 0x1400bbfee
cmp rsi, r14
jb 0x1400bbe20
jmp 0x1400bc1af
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rsi
mov r8, r14
call fcn.1400fe010
add rsp, 0x30
mov eax, dword [0x141dd4868]
xor edx, edx
div dword [0x141dd486c]
mov eax, dword [0x141dd4870]
xor edx, edx
div dword [str._r_H]
imul eax, eax, 0xa2aa7aa1
xor eax, 0x7993dfba
imul eax, eax, 0xefe041eb
cmp eax, 0x29b3d83a
jb 0x1400bc051
mov rax, qword [rsi]
mov qword [rbp], rax
nop
mov eax, dword [0x141dd4878]
mov ecx, dword [0x141dd487c]
add eax, ecx
add eax, 0x38604cf9
and eax, 0x3d076d45
imul eax, eax, 0xaad64d90
cmp eax, 0xc7262fb9
jbe 0x1400bc080
mov rax, qword [rsi + 8]
mov qword [rbp - 0x28], rax
jmp 0x1400bbe8f
mov eax, dword [0x141dd48c8]
xor edx, edx
div dword [0x141dd48cc]
imul eax, eax, 0x7b5e0806
xor eax, 0x4e6f3361
imul r14, rax, 0x1668cfdb
shr r14, 0x3b
sub rsp, 0x20
call r12
add rsp, 0x20
cmp r14d, 0xc10e90a3
jbe 0x1400bc110
sub rsp, 0x20
call r12
add rsp, 0x20
jmp 0x1400bc0c0
mov ecx, dword [0x141dd48d0]
sub ecx, dword [0x141dd48d4]
add ecx, 0xab6b1c2a
imul rcx, rcx, 0x4fbc9103
shr rcx, 0x3c
imul ecx, ecx, 0x33d4937a
cmp ecx, 0x2be82f9c
jb 0x1400bc110
cmp eax, 0x7a
jne 0x1400bc637
nop word cs:[rax + rax]
mov eax, dword [0x141dd48e8]
mov ecx, dword [0x141dd48ec]
add eax, ecx
add eax, 0xf413b691
or eax, 0xc89cca5a
xor eax, 0x94496596
cmp eax, 0xa27a8467
ja 0x1400bc150
lea r14, [rsi + rsi]
cmp rsi, 0x7fffffff
mov eax, 0xffffffff
cmova r14, rax
nop dword [rax + rax]
mov eax, dword [0x141dd48f0]
xor edx, edx
div dword [0x141dd48f4]
add eax, 0x5f56e000
cmp eax, 0xcf3871e0
ja 0x1400bc190
jmp 0x1400bbe20
cmp qword [rbp - 0x38], r14
jb 0x1400bc68c
mov rcx, qword [rbp - 0x30]
mov r8, qword [rcx + 0x10]
lea rax, [r8 - 1]
cmp rax, 6
jb 0x1400bc60b
mov rdi, qword [rcx]
mov rbx, qword [rcx + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4908]
sub eax, dword [0x141dd490c]
or eax, 0x868c1010
and eax, 0xf6ee13d0
imul eax, eax, 0x8255c130
cmp eax, 0x414fbe2e
jb 0x1400bc1e0
test r8, r8
je 0x1400bc6b9
lea rax, [r8 - 7]
mov ecx, dword [0x141dd4918]
xor ecx, dword [0x141dd491c]
imul ecx, ecx, 0xbe3f0535
and ecx, 0x2f84e19c
add ecx, 0x817caed1
cmp ecx, 0x6fd860c2
jb 0x1400bc210
mov ecx, 0xad7e8641
nop dword [rax + rax]
mov edx, dword [0x141dd4920]
and edx, dword [0x141dd4924]
imul rdx, rcx
shr rdx, 0x3d
add edx, 0x698275a1
and edx, 0x49806403
cmp edx, 0x6df78481
ja 0x1400bc240
nop dword [rax + rax]
mov ecx, dword [0x141dd4928]
add ecx, dword [0x141dd492c]
and ecx, 0xb96bcd5f
add ecx, 0xaee74ca1
cmp ecx, 0xa366bbf4
jb 0x1400bc270
cmp rax, r14
jne 0x1400bc320
mov qword [rbp - 0x18], r8
mov qword [rbp - 8], rdi
mov eax, dword [0x141dd4930]
xor edx, edx
div dword [0x141dd4934]
shr eax, 1
imul rax, rax, 0x45add5ed
shr rax, 0x3c
cmp eax, 0x67addcef
jne 0x1400bc2db
lea rdx, [rbx + 0xc]
lea r8, [r14 + r14]
sub rsp, 0x20
mov rcx, r12
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
lea r15, [rbx + 0xc]
lea rsi, [r14 + r14]
xor edi, edi
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, r12
mov rdx, r15
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
test dil, dil
jne 0x1400bc2f0
test eax, eax
mov rdi, qword [rbp - 8]
mov r8, qword [rbp - 0x18]
je 0x1400bc370
nop word [rax + rax]
mov eax, dword [0x141dd4968]
sub eax, dword [0x141dd496c]
imul eax, eax, 0xf9391678
add eax, 0x3db988bc
cmp eax, 0x7c8b0d09
ja 0x1400bc320
mov eax, dword [0x141dd4970]
and eax, dword [0x141dd4974]
or eax, 0x22531415
xor eax, 0xaf1dfd24
cmp eax, 0xf767058a
mov rcx, qword [rbp - 0x10]
jbe 0x1400bc7f0
jmp 0x1400bc819
mov eax, dword [0x141dd4940]
imul eax, dword [0x141dd4944]
or eax, 0x42682001
and eax, 0x5e69a64d
cmp eax, 0x675dacfe
je 0x1400bc370
nop
mov eax, dword [0x141dd4948]
xor eax, dword [0x141dd494c]
add eax, 0x1932f60a
or eax, 0xa455b066
add eax, 0xf7d3519d
cmp eax, 0x450c25
jb 0x1400bc390
nop word cs:[rax + rax]
mov eax, dword [0x141dd4950]
xor eax, dword [0x141dd4954]
add eax, 0x4fcaaa93
imul rax, rax, 0x2810a10f
shr rax, 0x38
add eax, 0x26c11fd2
cmp eax, 0xde54cb0d
ja 0x1400bc3c0
test r13d, r13d
je 0x1400bc589
mov eax, dword [0x141dd4958]
sub eax, dword [0x141dd495c]
imul eax, eax, 0xcd072ccb
add eax, 0xde32aed8
cmp eax, 0xcd16ba6b
jae 0x1400bc430
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x141dd4960]
and eax, dword [0x141dd4964]
imul edi, eax, 0x136ace99
or edi, 0x733a2f0b
movzx eax, byte [0x141ddb278]
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call fcn.1400c0180
add rsp, 0x20
cmp edi, 0xe8814bfa
jb 0x1400bc430
mov r15, rax
test rax, rax
mov rdi, qword [rbp - 8]
jne 0x1400bc58f
ud2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp - 0x10]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
cmp qword [rbp], 0
je 0x1400bc4f9
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xa141413f
nop dword [rax]
mov ecx, dword [0x141dd4890]
imul ecx, dword [0x141dd4894]
and ecx, 0xdc9dd7a4
imul rcx, rax
shr rcx, 0x3d
imul ecx, ecx, 0x7a54fad6
cmp ecx, 0xa91d7acb
jb 0x1400bc4d0
mov rdx, qword [rbp - 0x30]
cmp qword [rdx], 0
je 0x1400bc700
mov eax, 0x95942273
nop dword [rax]
mov ecx, dword [0x141dd4898]
and ecx, dword [0x141dd489c]
add ecx, 0x845a109b
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xf94d3cdd
cmp ecx, 0x1ce2f574
jb 0x1400bc510
mov r8, qword [rdx + 8]
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd48a0]
imul eax, dword [0x141dd48a4]
imul eax, eax, 0x5708b269
add eax, 0xd257e979
or eax, 0xedf624e8
cmp eax, 0xba0fcb9b
jb 0x1400bc560
jmp 0x1400bc700
mov r15d, 2
sub rsp, 0x20
mov rcx, r15
mov rdx, r12
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r14
sub rsp, 0x20
lea rcx, [rbp - 0x58]
call fcn.1400dac30
add rsp, 0x20
mov r15, qword [rbp - 0x50]
mov word [r15 + r14*2], 0
inc r14
mov r12, qword [rbp - 0x58]
test rdi, rdi
je 0x1400bc7ea
mov eax, dword [0x141dd4988]
xor edx, edx
div dword [0x141dd498c]
xor eax, 0x621447b7
imul eax, eax, 0x2910b650
add eax, 0x8a5d0243
cmp eax, 0x25084eed
jae 0x1400bc734
jmp 0x1400bc765
ud2
mov eax, dword [0x141dd48f8]
imul eax, dword [0x141dd48fc]
add eax, 0xa9e270f7
mov ecx, 0x8f4d79c9
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x2e86cdeb
jne 0x1400bc660
ud2
mov eax, dword [0x141dd4900]
xor eax, dword [0x141dd4904]
add eax, 0x1389f3d5
shr eax, 1
imul rax, rax, 0xcd1853f
shr rax, 0x38
ud2
mov eax, dword [0x141dd49c8]
xor edx, edx
div dword [0x141dd49cc]
xor eax, 0x480daa04
or eax, 0x91c254da
add eax, 0x4b662ac7
cmp eax, 0xac1f2ab9
jbe 0x1400bc95a
jmp 0x1400bc985
xor eax, eax
test al, al
je 0x1400bc6c1
ud2
mov ecx, 0x84406a5d
nop word cs:[rax + rax]
mov eax, dword [0x141dd4938]
xor edx, edx
div dword [0x141dd493c]
shr eax, 1
imul rax, rcx
shr rax, 0x3c
and eax, 3
imul eax, eax, 0x519d360f
ud2
mov eax, dword [0x141dd48b8]
add eax, dword [0x141dd48bc]
or eax, 0x61008242
and eax, 0x7362825e
imul eax, eax, 0xa34bb4f
cmp eax, 0xb203c57b
ja 0x1400bc700
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd4990]
imul eax, dword [0x141dd4994]
add eax, 0x9751f2f8
imul rax, rax, 0xc1bf0b7
shr rax, 0x3a
imul eax, eax, 0xe83ad79d
mov rsi, qword [0x141ddb260]
cmp eax, 0xec5e6b1f
jbe 0x1400bc76e
mov rax, qword [0x141ddb260]
jmp 0x1400bc734
mov eax, dword [0x141dd4998]
sub eax, dword [0x141dd499c]
or eax, 0xf6f5cd8b
xor eax, 0xc50c6382
cmp eax, 0x1e6e73cc
jb 0x1400bc7c7
mov edi, dword [0x141dd49a0]
add edi, dword [0x141dd49a4]
and edi, 0xc71a5f25
xor edi, 0x18a6e396
add edi, 0xe5448e95
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x89622f2f
jae 0x1400bc7df
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400bc78b
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov qword [rbp], rax
mov rcx, qword [rbp - 0x10]
jmp 0x1400bc856
mov eax, dword [0x141dd4978]
imul eax, dword [0x141dd497c]
xor eax, 0x21b7820a
add eax, 0xb2506363
or eax, 0x87713a2e
mov word [rbx + 0xc], 0x43
cmp eax, 0x60fc084d
jae 0x1400bc830
mov word [rbx + 0xc], 0x43
jmp 0x1400bc7f0
mov eax, dword [0x141dd4980]
xor eax, dword [0x141dd4984]
add eax, 0x6716c580
or eax, 0xeeb72455
cmp eax, 0xd0f87bdd
je 0x1400bc830
mov r12, rdi
mov r15, rbx
mov r14, r8
mov qword [rcx], r12
mov qword [rcx + 8], r15
mov qword [rcx + 0x10], r14
cmp qword [rbp], 0
je 0x1400bc900
mov rax, qword [rbp - 0x20]
mov rsi, qword [rax + 8]
mov eax, dword [0x141dd49a8]
sub eax, dword [0x141dd49ac]
add eax, 0xb312e180
mov ecx, 0xc6aa7269
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0x61a8440
ja 0x1400bc8d8
mov eax, dword [str._D._]
xor edx, edx
div dword [0x141dd49b4]
mov edi, eax
add edi, 0xf943d46f
xor edi, 0xaf588fea
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xf611b7a2
jbe 0x1400bc900
mov rcx, qword [0x141ddb260]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400bc89a
mov eax, dword [0x141dd49b8]
xor eax, dword [0x141dd49bc]
add eax, 0xdcaf9cc6
or eax, 0x1ed54f78
add eax, 0x486d9805
cmp eax, 0xa9d662a6
jb 0x1400bc900
nop word cs:[rax + rax]
mov eax, dword [0x141dd49c0]
xor edx, edx
div dword [0x141dd49c4]
imul eax, eax, 0xdc8e9b61
and eax, 0x7a4842b9
add eax, 0xab30545f
cmp eax, 0xf3317246
ja 0x1400bc930
jmp 0x1400bc700
mov eax, dword [0x141dd49d0]
or eax, dword [0x141dd49d4]
imul eax, eax, 0x498ddfe6
add eax, 0xc2a7f202
imul rax, rax, 0x7382a3bf
shr rax, 0x3e
ud2
ud2