Function at 0x1404d47ca
Capabilities:
Encode data using base64
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
inc al
shl rax, 0x5f
push rsi
sub bp, 0x18ed
cmp ebx, 0x64e44aa
push rdi
bts rbp, r8
push r12
xchg si, r12w
cmc
movsx eax, si
push r13
or r13b, 0x42
rcr r12, cl
push r14
sal ax, cl
xchg si, ax
bts bp, r12w
push r15
bsr bp, r9w
lea rbp, [rsp - 0x27]
btr r15w, r10w
sub rsp, 0x100
sar r12w, cl
mov rax, qword [0x1400b7288]
xor rax, rsp
cmp rax, r8
rcr r14d, cl
mov qword [rbp + 0x17], rax
movsxd rsi, edx
dec ah
and rax, rbp
bt r13, 0x12
mov r15, r8
cmp dil, 0x5f
movsx ax, r10b
shr r13b, 0x3f
mov rax, rsi
mov qword [rbp - 9], rcx
adc r14b, 0x6e
sar r13b, 0x8b
mov qword [rbp - 0x11], rax
and r14d, 0x69336b6
bts r13d, r11d
lea rcx, [0x140000000]
btc r13w, dx
adc r12b, r13b
movzx r14w, sil
and eax, 0x3f
mov r13d, r9d
movzx r12, cx
lea r13, [r13 + r8]
ror r14b, 0xd
dec r12b
mov qword [rbp - 0x21], r8
mov r12, rsi
mov qword [rbp - 0x51], r13
bt r14w, bp
jmp 0x1404d48b4
sar r12, 6
cmovnp r14d, edi
lea r14, [rax + rax*8]
movzx rax, r8w
cbw
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d48d3
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d48dd
mov qword [rbp - 0x49], rax
jmp 0x1404d48e6
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
not cx
lea rcx, [rsp + 0x50]
jmp 0x1404d48fb
mov dword [rbp - 0x59], eax
call fcn.14049d3ba
mov rcx, qword [rsp + 0x58]
shld rbx, r13, 0x83
cqo
inc edi
sub r11d, r11d
add bh, dh
shl di, 0xe5
mov dword [rbp - 0x69], r11d
btc ebx, 0x7b
stc
cmovo edx, ebp
mov ebx, r11d
sar edx, 0x77
mov dword [rbp - 0x65], ebx
rcl dil, 0xeb
mov rdi, r15
jmp 0x1404d493f
mov edx, dword [rcx + 0xc]
movzx ecx, ax
add ch, 0xc5
setae ch
mov ecx, r11d
test bpl, 0xe6
clc
mov dword [rsp + 0x40], ecx
clc
cmc
test ch, 0x3b
mov dword [rbp - 0x55], edx
cmp r14b, bl
test bp, 0x5255
cmp r15, r13
jmp 0x1404d496f
jae 0x1404d5129
mov rax, rsi
sar si, cl
ror cl, cl
mov rsi, r15
sar rax, 6
rcr r15b, 0x88
and r15d, r14d
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
sub r15b, 0x52
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
test r11b, bpl
cmc
cmp edx, 0xfde9
jne 0x1404d4cb5
lea r15, [0x140000000]
bt edx, r11d
mov edx, r11d
shrd si, bx, 0x1e
mov r9, qword [r15 + rax*8 + 0xba940]
or ah, 0x3d
btr ax, 0xa6
shr si, cl
mov rsi, r11
lea rax, [r9 + r14*8]
jmp 0x1404d49e8
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d49f2
je 0x1404d4a11
inc edx
jmp 0x1404d49ff
inc rsi
jmp 0x1404d4a07
cmp rsi, 5
jl 0x1404d49e8
test rsi, rsi
jmp 0x1404d4a19
jle 0x1404d4bf4
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
bt r13w, di
movzx r13d, r11w
and r13w, 0x64f0
sub r8, rdi
inc cl
movsx r10d, r9w
movsxd r13, edi
movzx ecx, byte [rax + r14*8 + 0x3e]
xchg r10, r10
cmovae r13d, ecx
movsx r15d, byte [rcx + r15 + 0xb7d00]
movzx r13w, r14b
inc r15d
mov r13d, r15d
movsxd r10, r11d
sub r13d, edx
movsxd r10, r13d
cmc
cmp r10, r8
jmp 0x1404d4a79
jg 0x1404d4f71
lea rax, [rbp - 1]
btc rdx, r8
bt r8w, 0x1d
mov rdx, r11
cmc
sub cl, r10b
sub r9, rax
sbb al, 0x81
sub cx, 0x21b6
shrd r8w, bp, 0xf8
lea r8, [r9 + r14*8]
setae al
sar al, cl
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
add al, spl
mov al, byte [rcx + r8 + 0x3e]
jmp 0x1404d4aca
mov byte [rcx], al
test r9d, 0x26f02c02
cmp rdx, rsi
jmp 0x1404d4adb
jl 0x1404d4aad
test r13d, r13d
jmp 0x1404d4ae9
jle 0x1404d4b1b
lea rcx, [rbp - 1]
and r8, rsp
movsx rdx, sp
mov r8, r10
ror dh, cl
bts dx, r11w
add rcx, rsi
movsx edx, bx
mov dh, 0x33
mov rdx, rdi
call fcn.14049c447
sub r11d, r11d
adc r8d, esi
mov rdx, r11
bt cx, 0x9e
movsx r8w, r13b
lea r8, [0x140000000]
bt ecx, 0x8c
btc cx, r12w
cmc
mov rcx, qword [r8 + r12*8 + 0xba940]
cmp bl, 0x28
add rcx, rdx
jmp 0x1404d4b4c
inc rdx
stc
test bl, 0xf6
clc
mov byte [rcx + r14*8 + 0x3e], r11b
stc
clc
cmp rdx, rsi
jl 0x1404d4b39
lea rax, [rbp - 1]
sbb r8w, 0x5f73
test spl, r15b
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
shr r8b, cl
lea r9, [rbp - 0x41]
mov eax, r11d
lea rdx, [rbp - 0x39]
add cl, bpl
cmp r15d, 4
movzx r15w, al
lea rcx, [rsp + 0x48]
movsxd r15, esi
sete al
movsx r15d, r9w
bswap r15w
inc eax
mov r8d, eax
movsx r15w, al
bswap r15w
mov r15d, eax
jmp 0x1404d4bbc
call fcn.1404da365
cmp rax, 0xffffffffffffffff
jmp 0x1404d4bca
je 0x1404d4d79
lea eax, [r13 - 1]
add sil, r14b
neg r13b
test r10b, bl
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
test r11b, dl
add rsi, rdi
jmp 0x1404d4bef
jmp 0x1404d4db1
movzx eax, byte [rdi]
mov rdx, r13
btr cx, 0x69
xor cl, r14b
sub rdx, rdi
shr rcx, 0xc2
shrd rsi, rsp, 0x8a
xchg cl, ch
movsx rsi, byte [rax + r15 + 0xb7d00]
lea ecx, [rsi + 1]
stc
mov al, r11b
sal ah, cl
movsxd rax, ecx
cmp cl, bpl
clc
cmp rax, rdx
jmp 0x1404d4c31
jg 0x1404d4fea
cmp ecx, 4
mov r9b, 0x62
movsx rbx, r11w
movzx rdx, bp
mov qword [rbp - 0x31], r11
cdq
movzx rdx, r15w
mov eax, r11d
setae al
mov qword [rbp - 0x29], rdi
movzx ebx, r12w
movzx r8w, r9b
sete al
movsxd rcx, r14d
xchg dh, bl
lea r9, [rbp - 0x31]
inc eax
movsx r8d, r13w
xchg dx, r8w
lea rdx, [rbp - 0x29]
xchg bl, bl
movsx r8, r8w
not r8b
mov r8d, eax
lea rcx, [rsp + 0x48]
mov ebx, eax
call fcn.1404da365
cmp rax, 0xffffffffffffffff
je 0x1404d4d79
add rsi, rdi
movzx r15d, bx
bswap r15w
mov r15d, ebx
jmp 0x1404d4cb0
jmp 0x1404d4db1
lea rax, [0x140000000]
cmovp rdx, r10
sbb dl, r14b
mov rdx, qword [rax + r12*8 + 0xba940]
test r13b, r11b
mov cl, byte [rdx + r14*8 + 0x3d]
clc
cmp r13w, 0x254
test cl, 4
jmp 0x1404d4ce2
je 0x1404d4d1b
mov al, byte [rdx + r14*8 + 0x3e]
and cl, 0xfb
jmp 0x1404d4cf5
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
movsx rdx, r10w
cwd
lea rdx, [rbp + 7]
jmp 0x1404d4d0e
mov byte [rbp + 8], al
jmp 0x1404d4d16
jmp 0x1404d4d56
call fcn.1404a3996
movzx ecx, byte [rdi]
sub edx, edx
cmp word [rax + rcx*2], dx
jmp 0x1404d4d2e
jge 0x1404d4d82
inc rsi
clc
cmc
test r13b, r15b
cmp rsi, r13
jmp 0x1404d4d44
jae 0x1404d509e
mov rdx, rdi
movsx cx, r12b
movsx r8, r13w
mov r8d, 2
lea rcx, [rsp + 0x48]
jmp 0x1404d4d66
call fcn.1401dc761
cmp eax, 0xffffffff
jmp 0x1404d4d73
jne 0x1404d4db1
cmp byte [rbp - 0x71], 0
jmp 0x1404d5090
mov r8, r15
movsx dx, bpl
setnp cl
movsx edx, r14w
lea rcx, [rsp + 0x48]
jmp 0x1404d4d9b
mov rdx, rdi
call fcn.1401dc761
cmp eax, 0xffffffff
jmp 0x1404d4dab
je 0x1404d5100
mov ecx, dword [rbp - 0x59]
test rsp, 0x2f464c79
lea rax, [rbp + 0xf]
xadd r8w, r9w
sub ebx, ebx
movzx r9, r13w
sal r9w, cl
bswap di
lea r8, [rsp + 0x48]
ror dil, 0x77
bts di, r9w
movzx r9w, sil
mov qword [rsp + 0x38], rbx
shl dil, cl
movsx rdi, r13w
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
bts r9d, edi
mov r9d, r15d
cmc
stc
cmp r15w, ax
mov dword [rsp + 0x28], 5
sub edx, edx
jmp 0x1404d4e15
mov qword [rsp + 0x20], rax
jmp 0x1404d4e1f
call fcn.1404c2479
mov esi, eax
test r8d, r14d
test eax, eax
jmp 0x1404d4e30
je 0x1404d51d7
mov rcx, qword [rbp - 0x49]
cdq
mov r9b, 0x5b
lea r9, [rsp + 0x4c]
mov rdx, rbp
not dl
mov r8d, eax
mov qword [rsp + 0x20], rbx
movzx edx, r9w
movsx edx, r10w
xchg dh, dh
lea rdx, [rbp + 0xf]
jmp 0x1404d4e63
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
clc
test eax, eax
je 0x1404d51cb
mov r15d, dword [rsp + 0x40]
or bx, r8w
xor ebx, 0x1db57485
mov ebx, edi
stc
test ax, r8w
cmc
sub ebx, dword [rbp - 0x21]
test r12b, sil
add ebx, r15d
test rbx, rbx
mov dword [rbp - 0x65], ebx
jmp 0x1404d4ea3
cmp dword [rsp + 0x4c], esi
jmp 0x1404d4eac
jb 0x1404d508c
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d4ebc
jne 0x1404d4f4f
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
movzx r8d, r10w
lea r9, [rsp + 0x4c]
movsx dx, sil
movsxd r8, edx
movsx r8d, si
mov word [rsp + 0x44], ax
cdq
lea r8d, [r11 + 1]
mov rdx, 0x157e657f
bswap dx
movzx edx, r10w
mov qword [rsp + 0x20], r11
movsx rdx, sp
movzx dx, al
not dh
lea rdx, [rsp + 0x44]
jmp 0x1404d4f10
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
clc
test eax, eax
jmp 0x1404d4f21
je 0x1404d50f7
cmp dword [rsp + 0x4c], 1
jmp 0x1404d4f31
jb 0x1404d508c
inc r15d
bswap esi
mov si, sp
inc ebx
xchg esi, esi
or sil, 0x8a
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
mov rsi, rdi
cmp rdi, r13
jmp 0x1404d4f5a
jae 0x1404d511a
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404d4f6c
jmp 0x1404d498f
mov edx, r11d
test r8, r8
jle 0x1404d4fdd
sub rdi, rsi
lea rbx, [0x140000000]
jmp 0x1404d4f8c
mov al, byte [rdi + rsi]
dec rcx
setle ch
inc rcx
inc edx
rol cl, 0x92
xor ecx, eax
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
cmc
jmp 0x1404d4fae
add rcx, rsi
jmp 0x1404d4fb6
inc rsi
jmp 0x1404d4fbe
mov byte [rcx + r14*8 + 0x3e], al
shrd ax, cx, 0x46
movsxd rax, edx
cmp rax, r8
jmp 0x1404d4fd3
jl 0x1404d4f8c
mov ebx, dword [rbp - 0x65]
clc
add ebx, r8d
jmp 0x1404d4fe5
jmp 0x1404d5089
mov r9d, r11d
cmp sp, si
test rdx, rdx
jle 0x1404d507e
mov r13, qword [rbp - 0x11]
bt r10w, ax
mov r8, r11
mov al, cl
mov r10, r13
shl cx, cl
and r13d, 0x3f
shl ch, cl
sar r10, 6
sal cl, cl
lea r11, [r13*8]
add r11, r13
movsxd rcx, r9d
mov al, byte [r8 + rdi]
bswap cx
inc r9d
movzx rcx, r10w
sar ch, cl
mov rcx, qword [r15 + r10*8 + 0xba940]
jmp 0x1404d5044
add rcx, r8
jmp 0x1404d504c
inc r8
test dil, 0xbb
mov byte [rcx + r11*8 + 0x3e], al
shld rax, r12, 0xae
movsxd rax, r9d
jmp 0x1404d5065
cmp rax, rdx
jmp 0x1404d506d
jl 0x1404d5027
xor r11d, r11d
ror cl, cl
cmovs ecx, r14d
dec ch
add ebx, edx
adc cx, r10w
shld cx, bp, 0xa0
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404d5099
jmp 0x1404d512d
mov al, byte [rdi]
dec r8w
movzx cx, dh
cmovbe cx, sp
lea r8, [0x140000000]
bswap rcx
mov cx, 0x3c7d
mov rcx, qword [r8 + r12*8 + 0xba940]
inc ebx
stc
clc
test r15, 0x1fb7050f
mov dword [rbp - 0x65], ebx
stc
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
test r11w, ax
cmc
or byte [rax + r14*8 + 0x3d], 4
test r10w, 0x73e
cmp byte [rbp - 0x71], dl
jmp 0x1404d5090
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp dx, 0x7aaf
test ax, di
cmp byte [rbp - 0x71], 0
jmp 0x1404d5115
jmp 0x1404d512d
mov ecx, dword [rsp + 0x40]
test r9b, 0x59
test dl, dl
jmp 0x1404d5129
cmp byte [rbp - 0x71], r11b
je 0x1404d5146
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
sets al
and ax, 0x447e
mov rax, qword [rbp - 9]
test cl, r14b
clc
movsd xmm0, qword [rbp - 0x69]
clc
movsd qword [rax], xmm0
cmp ecx, 0x4b3931e6
cmp sil, dil
cmc
mov dword [rax + 8], ecx
and cl, ah
mov rcx, qword [rbp + 0x17]
clc
stc
xor rcx, rsp
jmp 0x1404d5175
call fcn.1404988af
mov rbx, qword [rsp + 0x140]
movsx edi, sp
add rsp, 0x100
cmovg rsi, r8
pop r15
mov dil, 0xed
pop r14
jmp 0x1404d51a0
pop r13
movzx di, r14b
pop r12
movsx ebp, di
pop rdi
movzx bp, r10b
pop rsi
mov rbp, 0x73e221e6
movsx bp, r14b
jmp 0x1404d51c4
pop rbp
jmp 0x1404d51ca
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
and cl, r11b
mov ecx, dword [rsp + 0x40]
cmp r13b, 2
test r8w, r8w
stc
cmp byte [rbp - 0x71], bl
jmp 0x1404d51ec
jmp 0x1404d512d