Function at 0x1000e060
Capabilities:
Encode data using base64

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001892e
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push esi
push edi
mov eax, dword [0x10053128]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x14]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x54], 0
mov dword [edi], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 4], 1
mov edx, 8
lea ecx, [edx - 7]
call fcn.1000ed00
push eax
call dword [sym.imp.wbemcomn.dll_public:_static_void____cdecl_CWin32DefaultArena::WbemMemAlloc_unsigned_long_int_]
mov esi, eax
add esp, 4
test esi, esi
je 0x100248a7
mov dword [ebp - 0x54], esi
lea ecx, [ebp - 0x54]
mov dword [esi], 0
mov dword [esi + 4], 0
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 4], 4
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], 0
mov eax, dword [ebx + 4]
test eax, eax
jg 0x1000e22b
jne 0x1000e315
push 0x70
call dword [sym.imp.wbemcomn.dll_public:_static_void____cdecl_CWin32DefaultArena::WbemMemAlloc_unsigned_long_int_]
add esp, 4
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x10024a8d
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::constructor_void_]
mov byte [ebp - 4], 4
mov dword [edi], eax
test eax, eax
je 0x10024a94
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x40]
push 0
push 0
push ecx
mov esi, dword [eax]
push 0
push 0x100037d4
push eax
mov esi, dword [esi + 0x10]
mov ecx, esi
call dword [0x100543a4]
call esi
test eax, eax
js 0x10024b8c
mov ecx, dword [edi]
mov eax, dword [ebp - 0x38]
mov dword [ecx + 0x10], eax
mov ecx, dword [edi]
mov eax, dword [ebx + 0x30]
mov dword [ecx + 0x30], eax
mov ecx, dword [edi]
cmp dword [ecx + 0x30], 0
je 0x1000e3ce
xor ebx, ebx
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x54]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x44]
jmp 0x1000e1c0
test eax, eax
jne 0x1000e395
mov esi, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
test esi, esi
jne 0x1000e218
test ecx, ecx
jne 0x1000e3bf
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0xffffffff
push dword [ebp - 0x54]
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
mov dword [ebp - 0x54], 0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ecx + esi*4 - 4]
dec esi
test eax, eax
jne 0x1000e3ad
test esi, esi
jne 0x1000e218
jmp 0x1000e1d2
xor edx, edx
mov dword [ebp - 0x24], edx
mov esi, dword [ebx + 0xc]
add esi, edx
push 0x70
mov dword [ebp - 0x28], esi
call dword [sym.imp.wbemcomn.dll_public:_static_void____cdecl_CWin32DefaultArena::WbemMemAlloc_unsigned_long_int_]
add esp, 4
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 5
test eax, eax
je 0x100248b2
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::constructor_void_]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x14], eax
test eax, eax
je 0x10024a32
mov ecx, dword [esi]
cmp ecx, 4
jne 0x1000e500
push 0
lea eax, [esi + 4]
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], eax
push ecx
push 0
mov esi, dword [esi]
mov ecx, eax
push 0
push 0
call dword [sym.imp.wbemcomn.dll_public:_unsigned_short_int_const____thiscall_CPropertyName::GetStringAt_long_int_const]
mov esi, dword [esi + 0x10]
mov ecx, esi
push eax
push dword [ebp + 0xc]
call dword [0x100543a4]
call esi
test eax, eax
js 0x1000e2dd
mov ecx, dword [ebp - 0x1c]
push 0
push 0
call dword [sym.imp.wbemcomn.dll_public:_unsigned_short_int_const____thiscall_CPropertyName::GetStringAt_long_int_const]
mov ecx, dword [ebp + 0x10]
push eax
call dword [sym.imp.wbemcomn.dll_public:_int___thiscall_CWStringArray::FindStr_unsigned_short_int_const___int_]
test eax, eax
jns 0x1000e2dd
mov esi, dword [ebp - 0x28]
cmp dword [esi + 0x3c], 0
jne 0x1002496f
mov ecx, dword [ebp - 0x10]
push esi
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::AddToken_struct_QL_LEVEL_1_TOKEN_const__]
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x54]
call fcn.1000e5a0
cmp dword [ebp - 0x18], 0
jl 0x100249ad
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, dword [ebx + 4]
add edx, 0x48
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], edx
cmp ecx, eax
jl 0x1000e230
test eax, eax
jmp 0x1000e126
cmp dword [ebp - 0x44], 1
jne 0x10024aef
mov esi, dword [ebp - 0x48]
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x54]
mov byte [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x24], eax
test ecx, ecx
je 0x1000e345
mov eax, dword [ecx]
test eax, eax
je 0x10024b4a
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 4
mov edx, esi
xor ecx, ecx
mov dword [ebp - 0x20], edx
xor esi, esi
cmp dword [ebp - 0x24], ecx
je 0x1000e365
mov eax, dword [eax]
test eax, eax
je 0x10024b67
mov esi, dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 4
test ecx, ecx
je 0x10024b85
mov esi, dword [esi]
mov ecx, dword [esi + 8]
mov eax, edx
shr eax, 2
dec ecx
and ecx, eax
mov eax, dword [esi + 4]
and edx, 3
mov eax, dword [eax + ecx*4]
mov eax, dword [eax + edx*4]
mov dword [edi], eax
jmp 0x1000e15c
sub eax, 1
mov dword [ebp - 0x44], eax
jne 0x1000e1c0
mov dword [ebp - 0x48], 0
jmp 0x1000e1c0
push eax
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
mov ecx, dword [ebp - 0x50]
add esp, 4
jmp 0x1000e225
push ecx
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
jmp 0x1000e1da
mov eax, dword [ecx + 0x34]
test eax, eax
je 0x1000e3f4
push dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CPropertyName::destructor_void_]
lea esi, [eax - 4]
push dword [esi]
push 0x10
push eax
call fcn.10015af6
push esi
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
mov ecx, dword [edi]
add esp, 4
mov eax, dword [ebx + 0x2c]
mov edx, 0x10
inc eax
mov dword [ecx + 0x2c], eax
xor ecx, ecx
mov eax, dword [edi]
mov esi, dword [eax + 0x2c]
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call dword [sym.imp.wbemcomn.dll_public:_static_void____cdecl_CWin32DefaultArena::WbemMemAlloc_unsigned_long_int_]
add esp, 4
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x12
test eax, eax
je 0x10024bdb
push dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CPropertyName::destructor_void_]
mov dword [eax], esi
add eax, 4
push dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CPropertyName::constructor_void_]
mov dword [ebp - 0x28], eax
push esi
push 0x10
push eax
call fcn.10015bf4
mov ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 4
mov eax, dword [edi]
mov dword [eax + 0x34], ecx
mov esi, dword [edi]
mov ecx, dword [esi + 0x34]
test ecx, ecx
je 0x10024be2
push 0x100037e4
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CPropertyName::AddElement_unsigned_short_int_const__]
mov eax, dword [edi]
mov dword [ebp - 0x24], 0
mov dword [eax + 0x28], 1
cmp dword [ebx + 0x28], 0
jle 0x1000e1a2
xor eax, eax
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x30]
push 0
push ecx
mov ecx, dword [ebx + 0x34]
mov esi, dword [esi]
add ecx, eax
push 0
push 0
push 0
call dword [sym.imp.wbemcomn.dll_public:_unsigned_short_int_const____thiscall_CPropertyName::GetStringAt_long_int_const]
mov esi, dword [esi + 0x10]
mov ecx, esi
push eax
push dword [ebp + 0xc]
call dword [0x100543a4]
call esi
test eax, eax
js 0x1000e4e6
mov edx, dword [edi]
mov eax, dword [edx + 0x28]
mov ecx, eax
inc eax
shl ecx, 4
add ecx, dword [edx + 0x34]
mov dword [edx + 0x28], eax
mov eax, dword [ebx + 0x34]
add eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CPropertyName::operator_class_CPropertyName_const__]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
inc ecx
add eax, 0x10
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], eax
cmp ecx, dword [ebx + 0x28]
jl 0x1000e497
jmp 0x1000e1a2
sub ecx, 1
je 0x100248ec
sub ecx, 1
jne 0x100248b9
cmp dword [ebp - 0x44], 2
jb 0x1002498b
lea ecx, [ebp - 0x54]
call fcn.10014607
lea ecx, [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
call fcn.10012b50
call fcn.10014607
lea ecx, [ebp - 0x54]
mov esi, dword [eax]
call fcn.10012b50
push dword [ebp - 0x10]
push esi
push dword [ebp - 0x1c]
call sym.esscli.dll_protected:_static_long_int___stdcall_CQueryAnalyser::AndQueryExpressions_struct_QL_LEVEL_1_RPN_EXPRESSION___struct_QL_LEVEL_1_RPN_EXPRESSION___struct_QL_LEVEL_1_RPN_EXPRESSION__
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x14]
push eax
call fcn.1000e5a0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x1000e576
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push dword [ebp - 0x1c]
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
test esi, esi
je 0x1000e2e9
mov ecx, esi
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push esi
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
jmp 0x1000e2e9
call dword [sym.imp.wbemcomn.dll__ThrowMemoryException_]
jmp 0x1000e0eb
xor eax, eax
jmp 0x1000e25a
sub ecx, 1
jne 0x10024992
cmp dword [ebp - 0x44], 1
jb 0x1002498b
lea ecx, [ebp - 0x54]
call fcn.10014607
lea ecx, [ebp - 0x54]
mov esi, dword [eax]
call fcn.10012b50
lea eax, [ebp - 0x14]
push eax
call fcn.1000e5a0
jmp 0x1000e576
cmp dword [ebp - 0x44], 2
jb 0x1002498b
lea ecx, [ebp - 0x54]
call fcn.10014607
lea ecx, [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
call fcn.10012b50
call fcn.10014607
lea ecx, [ebp - 0x54]
mov esi, dword [eax]
call fcn.10012b50
push dword [ebp - 0x10]
push esi
push dword [ebp - 0x1c]
call sym.esscli.dll_protected:_static_long_int___stdcall_CQueryAnalyser::OrQueryExpressions_struct_QL_LEVEL_1_RPN_EXPRESSION___struct_QL_LEVEL_1_RPN_EXPRESSION___struct_QL_LEVEL_1_RPN_EXPRESSION__
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x14]
push eax
call fcn.1000e5a0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x10024950
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push dword [ebp - 0x1c]
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
test esi, esi
je 0x1000e2e9
mov ecx, esi
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push esi
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
jmp 0x1000e2e9
push dword [ebp + 0x10]
lea eax, [esi + 0x2c]
push dword [ebp + 0xc]
push eax
call sym.esscli.dll_protected:_static_int___stdcall_CQueryAnalyser::IsPropertyInClass_class_CPropertyName___struct_IWbemClassObject___class_CWStringArray__
test eax, eax
je 0x1000e2dd
jmp 0x1000e2d3
mov ebx, 0x8004100a
jmp 0x100249b0
mov ecx, eax
mov ebx, 0x8004100a
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push dword [ebp - 0x10]
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
jmp 0x100249b0
mov ebx, dword [ebp - 0x18]
cmp dword [ebp - 0x44], 0
je 0x100249e0
lea ecx, [ebp - 0x54]
call fcn.10014607
mov esi, dword [eax]
test esi, esi
je 0x100249d6
mov ecx, esi
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push esi
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
lea ecx, [ebp - 0x54]
call fcn.10012b50
jmp 0x100249b0
test ebx, ebx
jns 0x100249f3
push ebx
call dword [sym.imp.wbemcomn.dll_GetMemLogObject]
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CMemoryLog::Write_long_int_]
mov eax, dword [0x1005300c]
cmp eax, 0x1005300c
je 0x1000e1a4
test byte [eax + 0x1c], 2
je 0x1000e1a4
cmp byte [eax + 0x19], 2
jb 0x1000e1a4
push ebx
push dword [eax + 0x14]
mov edx, 0x10004358
mov ecx, 0x3b
push dword [eax + 0x10]
call fcn.100162e6
jmp 0x1000e1a4
push 0x80041006
call dword [sym.imp.wbemcomn.dll_GetMemLogObject]
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CMemoryLog::Write_long_int_]
mov eax, dword [0x1005300c]
cmp eax, 0x1005300c
je 0x10024c3d
test byte [eax + 0x1c], 2
je 0x10024c3d
cmp byte [eax + 0x19], 2
jb 0x10024c3d
push 0x80041006
push dword [eax + 0x14]
mov edx, 0x10004358
mov ecx, 0x3a
push dword [eax + 0x10]
call fcn.100162e6
mov ebx, 0x80041006
jmp 0x1000e1a4
xor eax, eax
jmp 0x1000e14e
push 0x80041006
call dword [sym.imp.wbemcomn.dll_GetMemLogObject]
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CMemoryLog::Write_long_int_]
mov eax, dword [0x1005300c]
cmp eax, 0x1005300c
je 0x10024c3d
test byte [eax + 0x1c], 2
je 0x10024c3d
cmp byte [eax + 0x19], 2
jb 0x10024c3d
push 0x80041006
push dword [eax + 0x14]
mov edx, 0x10004358
mov ecx, 0x3c
push dword [eax + 0x10]
call fcn.100162e6
mov ebx, 0x80041006
jmp 0x1000e1a4
push 0x8004100a
call dword [sym.imp.wbemcomn.dll_GetMemLogObject]
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CMemoryLog::Write_long_int_]
mov eax, dword [0x1005300c]
cmp eax, 0x1005300c
je 0x10024bd1
test byte [eax + 0x1c], 2
je 0x10024bd1
cmp byte [eax + 0x19], 2
jb 0x10024bd1
push 0x8004100a
push dword [eax + 0x14]
mov edx, 0x10004358
mov ecx, 0x3d
push dword [eax + 0x10]
call fcn.100162e6
mov ebx, 0x8004100a
jmp 0x1000e1a4
push 3
lea ecx, [ebp - 0x28]
call fcn.100153d3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.1001542f
xor eax, eax
jmp 0x1000e342
push 3
lea ecx, [ebp - 0x24]
call fcn.100153d3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.1001542f
mov edx, dword [ebp - 0x20]
jmp 0x1000e363
xor esi, esi
jmp 0x1000e377
push 0x8004100a
call dword [sym.imp.wbemcomn.dll_GetMemLogObject]
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CMemoryLog::Write_long_int_]
mov eax, dword [0x1005300c]
cmp eax, 0x1005300c
je 0x10024bd1
test byte [eax + 0x1c], 2
je 0x10024bd1
cmp byte [eax + 0x19], 2
jb 0x10024bd1
push 0x8004100a
push dword [eax + 0x14]
mov edx, 0x10004358
mov ecx, 0x3e
push dword [eax + 0x10]
call fcn.100162e6
mov ebx, 0x8004100a
jmp 0x1000e1a4
xor ecx, ecx
jmp 0x1000e457
test esi, esi
je 0x10024bf8
mov ecx, esi
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_QL_LEVEL_1_RPN_EXPRESSION::destructor_void_]
push esi
call dword [sym.imp.wbemcomn.dll_public:_static_int___cdecl_CWin32DefaultArena::WbemMemFree_void__]
add esp, 4
push 0x80041006
call dword [sym.imp.wbemcomn.dll_GetMemLogObject]
mov ecx, eax
call dword [sym.imp.wbemcomn.dll_public:_void___thiscall_CMemoryLog::Write_long_int_]
mov eax, dword [0x1005300c]
cmp eax, 0x1005300c
je 0x10024c3d
test byte [eax + 0x1c], 2
je 0x10024c3d
cmp byte [eax + 0x19], 2
jb 0x10024c3d
push 0x80041006
push dword [eax + 0x14]
mov edx, 0x10004358
mov ecx, 0x3f
push dword [eax + 0x10]
call fcn.100162e6
mov ebx, 0x80041006
jmp 0x1000e1a4