Function at 0x14009f270
Capabilities:
Create directory
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rsi, rdx
mov rdi, rcx
mov eax, dword [0x141f3e298]
xor edx, edx
div dword [0x141f3e29c]
and eax, 0x87418440
imul eax, eax, 0x471d7fbc
cmp eax, 0xcc7a3d6
je 0x14009f2f6
mov ecx, dword [0x141f3e2a0]
xor ecx, dword [0x141f3e2a4]
add ecx, 0xadeb85ef
or ecx, 0xa7fdf6ae
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r14, rsp
cmp ecx, 0xc393f5ca
jbe 0x14009f320
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
jmp 0x14009f2a6
mov eax, dword [0x141f3e2a8]
xor edx, edx
div dword [0x141f3e2ac]
and eax, 0x5a500dc8
imul eax, eax, 0x4d3f05e7
cmp eax, 0xf0e03eda
je 0x14009f320
movabs r12, 0x8000000000000000
xor eax, eax
test al, al
jne 0x14009f391
mov eax, dword [0x141f3e2b0]
imul eax, dword [0x141f3e2b4]
imul r13d, eax, 0xa2104d1c
add r13d, 0xed412f90
or r13d, 0xa3201476
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call fcn.1400965b0
add rsp, 0x20
cmp r13d, 0xd44acf65
jae 0x14009f3a9
sub rsp, 0x20
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call fcn.1400965b0
add rsp, 0x20
jmp 0x14009f350
mov rax, qword [r15]
mov rsi, qword [r15 + 8]
cmp rax, r12
jne 0x14009f411
nop word cs:[rax + rax]
mov eax, dword [0x141f3e2b8]
or eax, dword [0x141f3e2bc]
imul eax, eax, 0x3c8d3aba
or eax, 0x146a688b
add eax, 0x6023a03a
cmp eax, 0x65c667ad
jb 0x14009f3c0
nop word cs:[rax + rax]
mov eax, dword [0x141f3e2c0]
xor edx, edx
div dword [0x141f3e2c4]
add eax, 0x8b49f76f
and eax, 0x1914d331
cmp eax, 0x6e5acf8e
je 0x14009f3f0
jmp 0x14009f439
mov ecx, dword [0x141f3e2c8]
xor ecx, dword [0x141f3e2cc]
add ecx, 0xd27a1e00
or ecx, 0xb7e5347e
imul ecx, ecx, 0xb4664ec2
cmp ecx, 0x591ad5d4
jae 0x14009f450
jmp 0x14009f47c
mov rdi, rsi
mov rax, rdi
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ecx, dword [0x141f3e2d0]
or ecx, dword [0x141f3e2d4]
imul rdx, rcx, 0xe5c69c7
shr rdx, 0x3b
or edx, 0x20099150
mov rcx, qword [r15 + 0x10]
mov qword [rbx], rax
cmp edx, 0x646533cf
jne 0x14009f481
mov qword [rbx], rax
jmp 0x14009f450
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rcx
sub rsp, 0x20
mov rcx, r14
mov rdx, rbx
mov r8b, 1
call fcn.14009a1f0
add rsp, 0x20
mov rbx, qword [r14]
mov rsi, qword [r14 + 8]
cmp rbx, r12
je 0x14009f439
xor eax, eax
nop dword [rax]
test al, al
jne 0x14009f4b0
mov eax, dword [0x141f3e2d8]
or eax, dword [0x141f3e2dc]
xor eax, 0x28004c40
and eax, 0x29036c40
imul eax, eax, 0xfe0c7d41
cmp eax, 0x8bb6130e
ja 0x14009f50a
mov edi, dword [0x141f3e2e0]
xor edi, dword [0x141f3e2e4]
add edi, 0x322ddc9f
or edi, 0x135f95f
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
add rsp, 0x20
cmp edi, 0x7ca7e0cc
jne 0x14009f51f
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
add rsp, 0x20
jmp 0x14009f4d7
test eax, eax
je 0x14009f5ef
mov eax, dword [0x141f3e2e8]
xor edx, edx
div dword [0x141f3e2ec]
nop word cs:[rax + rax]
mov eax, dword [0x141f3e2f0]
or eax, dword [0x141f3e2f4]
imul rax, rax, 0x4820325f
shr rax, 0x3d
imul eax, eax, 0xdd09651c
add eax, 0x2a3c656d
cmp eax, 0xafd506c3
jb 0x14009f540
nop dword [rax]
mov eax, dword [0x141f3e2f8]
xor eax, dword [0x141f3e2fc]
imul eax, eax, 0xd5a51f05
add eax, 0x2e15a4db
or eax, 0x4223dad9
cmp eax, 0x202db49c
je 0x14009f570
test rbx, rbx
je 0x14009f6e8
mov rcx, qword [0x141f49060]
sub rsp, 0x20
xor edi, edi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, 0xd0034ad5
nop dword [rax]
mov ecx, dword [0x141f3e300]
mov edx, dword [0x141f3e304]
add ecx, edx
add ecx, 0xe377b13d
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0xc8378a67
cmp ecx, 0x117e617a
jae 0x14009f5c0
jmp 0x14009f43c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov edi, eax
shl rdi, 0x20
or rdi, 2
nop word [rax + rax]
mov eax, dword [0x141f3e308]
and eax, dword [0x141f3e30c]
or eax, 0xeebede9a
imul eax, eax, 0x529392e
add eax, 0x19c59594
cmp eax, 0xf1e46e1e
ja 0x14009f610
mov eax, 0x9d445c2f
nop dword [rax + rax]
mov ecx, dword [0x141f3e310]
and ecx, dword [0x141f3e314]
add ecx, 0xec040a29
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x56b62b84
ja 0x14009f640
test rbx, rbx
je 0x14009f43c
mov eax, dword [0x141f3e318]
and eax, dword [0x141f3e31c]
mov ecx, 0x970e9c99
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x6dadf585
cmp ecx, 0x2a315f76
jae 0x14009f6a0
mov rax, qword [0x141f49060]
nop dword [rax]
mov eax, dword [0x141f3e320]
imul eax, dword [0x141f3e324]
imul rax, rax, 0x70078545
shr rax, 0x3c
xor eax, 0xa8080486
or eax, 0x57f62159
mov rcx, qword [0x141f49060]
cmp eax, 0x2d0789c1
je 0x14009f6a0
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14009f43c
xor edi, edi
jmp 0x14009f43c