Function at 0x1404dbb67
Capabilities:
Encode data using base64
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
sal rax, cl
movsx eax, di
cmp di, r10w
push rbp
bts rbp, r10
test r13w, 0x5a14
push rsi
sar ax, cl
push rdi
push r12
push r13
sar sil, cl
sbb r13w, dx
not r12
push r14
test r15b, 0xad
not r14w
setge r12b
push r15
lea rbp, [rsp - 0x27]
rcr r13b, cl
bsf ax, r15w
sub rsp, 0x100
mov rax, qword [0x1400b7288]
movzx esi, r9w
xor rax, rsp
bts r14w, r8w
xor esi, 0x2e0f1b4b
mov r15w, si
mov qword [rbp + 0x17], rax
test r13b, r10b
movsxd rsi, edx
clc
xor r14b, r10b
movsxd r12, r9d
mov r15, r8
xor r13b, spl
bswap r13w
mov rax, rsi
mov qword [rbp - 9], rcx
cmp rdi, r11
test spl, 0x6b
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
and eax, 0x3f
movsxd r13, r15d
jmp 0x1404dbc14
mov r13d, r9d
test eax, r15d
movzx r12, r13w
add r13, r8
mov qword [rbp - 0x21], r8
stc
sbb r12b, sil
and r14, 0x7e6047a9
mov r12, rsi
shr r14b, cl
mov qword [rbp - 0x51], r13
sar r12, 6
movzx r14d, r12w
movsxd r14, r13d
lea r14, [rax + rax*8]
jmp 0x1404dbc52
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404dbc68
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
mov cl, sil
bswap rcx
movsx cx, r13b
lea rcx, [rsp + 0x50]
jmp 0x1404dbc85
mov dword [rbp - 0x59], eax
call fcn.1404a50d9
mov rcx, qword [rsp + 0x58]
inc dil
not dil
or di, cx
xor r11d, r11d
mov dword [rbp - 0x69], r11d
mov ebx, r11d
bts dx, di
sar dh, cl
cqo
mov dword [rbp - 0x65], ebx
cwd
test r11w, bx
sar dil, 0x78
mov rdi, r15
rcr dh, 0xd8
test r12d, edi
mov edx, dword [rcx + 0xc]
rcl cx, cl
mov ecx, r11d
jmp 0x1404dbcd4
mov dword [rsp + 0x40], ecx
clc
cmc
stc
mov dword [rbp - 0x55], edx
test r14b, spl
jmp 0x1404dbce9
cmp r15, r13
jae 0x1404dc51f
mov rax, rsi
mov rsi, r15
adc r15, rdx
cmp bl, 0xaf
sar rax, 6
shld r15w, r11w, 0x87
shr r15d, 7
mov qword [rbp - 0x19], rax
shl cl, cl
mov cl, byte [rdi]
rcr r15d, 0x91
btc r15, 0x25
bt r15d, 0x72
mov r15d, 1
cmp r13w, 0x436b
jmp 0x1404dbd33
mov byte [rsp + 0x44], cl
jmp 0x1404dbd3e
mov dword [rsp + 0x48], r11d
jmp 0x1404dbd4b
cmp edx, 0xfde9
jmp 0x1404dbd56
jne 0x1404dc07c
lea r15, [0x140000000]
inc r9b
xor r9w, 0x7d90
movsx si, al
mov edx, r11d
rcl sil, 0xa0
bt r9, 0x3b
and sil, r13b
mov r9, qword [r15 + rax*8 + 0xba940]
xchg al, ah
movsxd rsi, r13d
mov rsi, r11
stc
lea rax, [r9 + r14*8]
cmp r14w, di
cmc
jmp 0x1404dbd9e
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404dbda8
je 0x1404dbdc8
inc edx
jmp 0x1404dbdb5
inc rsi
stc
cmp rsi, 5
jmp 0x1404dbdc2
jl 0x1404dbd9e
test rsi, rsi
jmp 0x1404dbdd0
jle 0x1404dbf9b
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
dec ch
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
bswap r13d
movsx r10d, r9w
movsx r15d, byte [rcx + r15 + 0xb7d00]
movsxd r10, r9d
movsx r10d, r11w
inc r15d
mov r13d, r15d
shr r10d, 0x99
and r10b, r12b
mov r10b, r14b
sub r13d, edx
rcr r10, 0xe8
movsxd r10, r13d
test r9b, 0x29
cmp r10, r8
jmp 0x1404dbe2a
jg 0x1404dc37a
lea rax, [rbp - 1]
bts cx, ax
stc
cdq
mov rdx, r11
neg r8b
sub r9, rax
movzx r8d, r12w
test r12w, r12w
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
jmp 0x1404dbe5d
inc rdx
rcl al, 0xfb
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmc
test r13b, r10b
clc
cmp rdx, rsi
jmp 0x1404dbe77
jl 0x1404dbe4f
test r13d, r13d
jle 0x1404dbeb8
lea rcx, [rbp - 1]
sar dh, 0x3d
cqo
dec rdx
mov r8, r10
xchg edx, edx
shrd dx, r15w, 0x65
add rcx, rsi
xchg dl, dh
movsxd rdx, ecx
mov rdx, rdi
jmp 0x1404dbead
call fcn.1404a40ed
sub r11d, r11d
add r8b, r12b
mov rdx, r11
xchg cl, r8b
mov r8b, 0x7a
lea r8, [0x140000000]
cmc
mov rcx, qword [r8 + r12*8 + 0xba940]
add rcx, rdx
jmp 0x1404dbed9
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r11b, bpl
cmc
cmp rdx, rsi
jmp 0x1404dbeed
jl 0x1404dbec9
lea rax, [rbp - 1]
bsf r8w, r12w
rcl rcx, 0x10
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
sbb ah, 0x2d
cmp r11w, r8w
not ah
mov eax, r11d
rcr al, cl
lea rdx, [rbp - 0x39]
rcr cx, cl
cmp r15d, 4
jmp 0x1404dbf2e
lea rcx, [rsp + 0x48]
sete al
not r15w
bswap r15w
mov r8, 0x1fa5139c
inc eax
xchg r8b, r8b
mov r8w, sp
mov r8d, eax
movsxd r15, ebx
mov r15d, eax
jmp 0x1404dbf5c
call fcn.1404e170a
cmp rax, 0xffffffffffffffff
je 0x1404dc15a
lea eax, [r13 - 1]
adc r13b, 0x61
sar r13w, 0xee
mov r13, qword [rbp - 0x51]
movsx rsi, sp
add sil, 0x93
shl rsi, cl
movsxd rsi, eax
clc
test rbx, r9
add rsi, rdi
jmp 0x1404dbf96
jmp 0x1404dc18b
movzx eax, byte [rdi]
sub si, 0x6de4
xchg sil, dl
rol rdx, cl
mov rdx, r13
mov cl, spl
rcr ch, cl
sub rdx, rdi
sub ecx, r11d
adc rcx, 0x48572640
setg sil
movsx rsi, byte [rax + r15 + 0xb7d00]
lea ecx, [rsi + 1]
rcl rax, 0xef
dec al
sbb eax, ebx
movsxd rax, ecx
clc
jmp 0x1404dbfdf
cmp rax, rdx
jmp 0x1404dbfe7
jg 0x1404dc3f9
cmp ecx, 4
mov qword [rbp - 0x31], r11
cmovl ax, r10w
mov ebx, 0x30ad74d0
cdqe
mov eax, r11d
not ch
mov qword [rbp - 0x29], rdi
mov bx, 0x751e
movzx cx, dh
bswap r9w
sete al
movsx r9d, bx
movsx cx, r8b
lea r9, [rbp - 0x31]
mov r8d, 0x6ad7169e
cmove rdx, rdi
cdq
inc eax
lea rdx, [rbp - 0x29]
movsx r8d, cx
mov r8d, eax
mov cl, 0x58
cmovo rbx, rbx
lea rcx, [rsp + 0x48]
cmovge rbx, r15
not bx
movsx rbx, r12w
mov ebx, eax
jmp 0x1404dc05a
call fcn.1404e170a
cmp rax, 0xffffffffffffffff
jmp 0x1404dc068
je 0x1404dc15a
add rsi, rdi
xchg r15d, r15d
mov r15d, ebx
jmp 0x1404dc18b
lea rax, [0x140000000]
sub edx, 0x1c07639d
neg cl
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
jmp 0x1404dc09d
test cl, 4
jmp 0x1404dc0a5
je 0x1404dc0ec
mov al, byte [rdx + r14*8 + 0x3e]
cmp sp, 0x6038
and cl, 0xfb
jmp 0x1404dc0bd
mov byte [rbp + 7], al
mov al, 0xc
mov al, byte [rdi]
jmp 0x1404dc0c9
mov byte [rdx + r14*8 + 0x3d], cl
movsx dx, al
mov dx, r9w
jmp 0x1404dc0db
lea rdx, [rbp + 7]
jmp 0x1404dc0e4
mov byte [rbp + 8], al
jmp 0x1404dc130
call fcn.1404ab7b3
movzx ecx, byte [rdi]
test r9, r9
cmc
xor edx, edx
cmp r8, 0x7a3225e8
cmp word [rax + rcx*2], dx
jmp 0x1404dc10a
jge 0x1404dc163
inc rsi
stc
jmp 0x1404dc11c
cmp rsi, r13
jmp 0x1404dc124
jae 0x1404dc4ae
mov rdx, rdi
setg ch
mov r8d, 2
cmovle rcx, r8
bswap cx
lea rcx, [rsp + 0x48]
jmp 0x1404dc147
call fcn.14010b77f
cmp eax, 0xffffffff
jmp 0x1404dc154
jne 0x1404dc18b
cmp byte [rbp - 0x71], 0
jmp 0x1404dc4a0
mov r8, r15
lea rcx, [rsp + 0x48]
not dh
mov dh, 0x9a
movsx dx, r9b
mov rdx, rdi
jmp 0x1404dc17d
call fcn.14010b77f
cmp eax, 0xffffffff
je 0x1404dc502
mov ecx, dword [rbp - 0x59]
rcl r9b, cl
cmp r10b, r9b
sbb r9, 0x15890210
lea rax, [rbp + 0xf]
setge r9b
test spl, 0x4e
bts rdi, rdi
xor ebx, ebx
btr di, di
lea r8, [rsp + 0x48]
btc r9w, 0x67
sub r9b, 0x5a
rcl dil, cl
mov qword [rsp + 0x38], rbx
movsx r9w, r13b
not r9w
btr di, 0x43
lea rdi, [rsi + 1]
neg r9b
mov qword [rsp + 0x30], rbx
movsxd r9, esi
movsx r9w, r8b
mov r9d, r15d
cmp rsp, rdx
mov dword [rsp + 0x28], 5
cmp si, 0x436c
test sil, 0x99
xor edx, edx
jmp 0x1404dc208
mov qword [rsp + 0x20], rax
jmp 0x1404dc212
call fcn.1404c9bd0
mov esi, eax
stc
test eax, eax
jmp 0x1404dc221
je 0x1404dc5d7
mov rcx, qword [rbp - 0x49]
jmp 0x1404dc232
lea r9, [rsp + 0x4c]
mov r8d, eax
jmp 0x1404dc245
mov qword [rsp + 0x20], rbx
movsx dx, sil
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
clc
cmp cl, 0xec
test eax, eax
jmp 0x1404dc267
je 0x1404dc5ce
mov r15d, dword [rsp + 0x40]
xadd bx, bx
add ebx, ebp
bt ebx, r11d
mov ebx, edi
test sil, 0xda
sub ebx, dword [rbp - 0x21]
add ebx, r15d
clc
test r10b, dil
cmp r12w, 0x492a
mov dword [rbp - 0x65], ebx
test r8d, r13d
cmc
cmp dword [rsp + 0x4c], esi
jb 0x1404dc494
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dc2ad
jne 0x1404dc347
mov rcx, qword [rbp - 0x49]
mov r8b, 0x94
movzx ax, bpl
jmp 0x1404dc2c4
lea eax, [r11 + 0xd]
mov r8b, r14b
movzx rdx, di
not dx
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
not dh
lea rdx, [rsp + 0x44]
jmp 0x1404dc2f1
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
cmp r10b, 0xbf
test sil, r8b
test eax, eax
jmp 0x1404dc308
je 0x1404dc4f5
cmp dword [rsp + 0x4c], 1
jb 0x1404dc494
inc r15d
movzx rsi, r8w
movzx si, r12b
movzx esi, r14w
inc ebx
movsxd rsi, eax
shr sil, 0x8b
mov dword [rsp + 0x40], r15d
bsr si, r9w
xadd sil, sil
mov dword [rbp - 0x65], ebx
stc
movsx esi, dx
mov rsi, rdi
cmp r15, 0x7d5b5021
cmp rdi, r13
jmp 0x1404dc359
jae 0x1404dc512
mov rax, qword [rbp - 0x19]
movzx rdx, si
movsxd rdx, ecx
movzx edx, cx
mov edx, dword [rbp - 0x55]
jmp 0x1404dc375
jmp 0x1404dbd12
mov edx, r11d
test r8, r8
jmp 0x1404dc385
jle 0x1404dc3ec
sub rdi, rsi
mov bl, 0x4a
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
movsxd rcx, r10d
movsx ecx, r13w
inc edx
rcr cl, cl
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
test di, 0x62b2
cmp rdi, rdi
add rcx, rsi
jmp 0x1404dc3be
inc rsi
cmp r12w, r15w
cmp r8, 0x4ddc47c3
mov byte [rcx + r14*8 + 0x3e], al
cbw
bsr ax, ax
rcl ah, cl
movsxd rax, edx
test r11b, 0xb6
cmp rax, r8
jl 0x1404dc397
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404dc3f4
jmp 0x1404dc48b
mov r9d, r11d
test ch, dh
test rdx, rdx
jmp 0x1404dc406
jle 0x1404dc489
mov r13, qword [rbp - 0x11]
inc al
mov r8, r11
mov r10, r13
and r13d, 0x3f
test rdx, r11
test r12, 0x704c7ae8
sar r10, 6
sbb r11w, r10w
sub al, r11b
lea r11, [r13*8]
add r11, r13
mov al, byte [r8 + rdi]
movsx ecx, sp
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404dc456
inc r8
test bp, 0x3c02
cmp bpl, r8b
mov byte [rcx + r11*8 + 0x3e], al
cmovno rax, r12
clc
movsx ax, ch
movsxd rax, r9d
clc
cmc
cmp rax, rdx
jmp 0x1404dc47c
jl 0x1404dc43c
sub r11d, r11d
cmovnp rcx, r10
add ebx, edx
mov dword [rbp - 0x65], ebx
rol ch, 0x12
sub cl, sil
cmp byte [rbp - 0x71], r11b
movzx cx, r12b
setg cl
mov ecx, dword [rsp + 0x40]
jmp 0x1404dc4a9
jmp 0x1404dc528
mov al, byte [rdi]
lea r8, [0x140000000]
setb ch
movzx cx, r14b
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dc4cc
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
bt ax, 0x9e
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp r8b, 0xbd
cmp byte [rbp - 0x71], dl
jmp 0x1404dc4a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
sal cx, 0x83
mov ecx, dword [rsp + 0x40]
cmp spl, bl
cmp byte [rbp - 0x71], 0
jmp 0x1404dc528
mov ecx, dword [rsp + 0x40]
cmp r13d, 0x73c3744f
clc
cmc
cmp byte [rbp - 0x71], r11b
jmp 0x1404dc528
je 0x1404dc53b
mov rax, qword [rsp + 0x50]
cmc
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
cmp r9w, 0x123c
movsd xmm0, qword [rbp - 0x69]
cmp rcx, r12
test r11b, r14b
movsd qword [rax], xmm0
cmp r12d, 0x294f5e73
mov dword [rax + 8], ecx
cmc
btc cx, r8w
setp ch
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1404a04c2
mov rbx, qword [rsp + 0x140]
shr di, 0x36
cmc
add rsp, 0x100
movsxd r15, r12d
movsx di, r14b
movzx di, r11b
pop r15
pop r14
movsx esi, bp
movsx r12w, dl
movzx r12d, r11w
pop r13
movsx rbp, sp
pop r12
movzx rdi, sp
bswap si
setno bpl
pop rdi
movzx si, r12b
movsx bp, r8b
pop rsi
not bpl
movsxd rbp, ebp
mov bp, di
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp al, r15b
test rcx, r12
cmp byte [rbp - 0x71], bl
jmp 0x1404dc5e9
jmp 0x1404dc528