Function at 0x1400f8de0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov rdi, rdx
mov rsi, rcx
mov eax, dword [0x141f373b8]
or eax, dword [0x141f373bc]
imul eax, eax, 0xc5392fd1
add eax, 0xef4d0c50
and eax, 0xd567a321
cmp eax, 0x4bd183d3
ja 0x1400f8e96
mov eax, dword [0x141f373c0]
sub eax, dword [0x141f373c4]
add eax, 0xa37c9cfd
imul r15, rax, 0x50895f5f
shr r15, 0x3d
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r12, rsp
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov r14, rsp
mov eax, 0x810
call fcn.1400f4d10
sub rsp, rax
mov rbx, rsp
mov eax, 0x810
call fcn.1400f4d10
sub rsp, rax
mov r13, rsp
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.1400f9590
add rsp, 0x20
cmp r15d, 0xb2e6f370
jne 0x1400f8ee2
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x20
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x810
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x810
call fcn.1400f4d10
sub rsp, rax
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.1400f9590
add rsp, 0x20
jmp 0x1400f8e1e
mov r9, rax
mov qword [rbp - 0x30], r14
mov rcx, qword [rdi]
mov rax, rbx
add rax, 8
mov qword [rbp - 0x38], rax
mov r11, r12
add r11, 8
xor eax, eax
mov qword [rbp], rax
mov eax, dword [0x141f373c8]
or eax, dword [0x141f373cc]
add eax, 0x32b7e4fc
shr eax, 1
mov edx, 0xc6eaa9a5
imul rax, rdx
shr rax, 0x3d
cmp eax, 0x26b46c3c
jne 0x1400f8f40
mov rax, qword [rsi]
and rax, 0xfffffffffffffff8
mov rax, qword [rax + 0x810]
nop dword [rax]
mov eax, dword [0x141f373d0]
xor edx, edx
div dword [0x141f373d4]
imul eax, eax, 0x6dbb6c38
add eax, 0xb692a4a0
mov r10, qword [rsi]
mov rdi, r10
and rdi, 0xfffffffffffffff8
mov rdx, qword [rdi + 0x810]
cmp eax, 0x7ea38213
jb 0x1400f8f40
mov r15, rdx
and r15, 0xfffffffffffffff8
je 0x1400f9540
inc qword [rbp]
nop word cs:[rax + rax]
mov eax, dword [0x141f373d8]
sub eax, dword [0x141f373dc]
or eax, 0xf732bdfe
and eax, 0xf7fefdfe
cmp eax, 0x9f5a7970
jb 0x1400f8f90
mov rax, qword [r15 + 0x808]
and rax, 0xfffffffffffffffe
mov r8, r9
sub r8, rax
cmp r8, 4
jl 0x1400f9540
mov rax, r10
lock cmpxchg qword [rsi], rdx
je 0x1400f90b0
mov eax, dword [0x141f37430]
sub eax, dword [0x141f37434]
or eax, 0x5c5b3b80
imul rax, rax, 0x55db92b1
shr rax, 0x3d
or eax, 0x6959aec0
cmp eax, 0x3ade60eb
jb 0x1400f90a4
mov eax, dword [0x141f37438]
and eax, dword [0x141f3743c]
or eax, 0x650d80c4
mov r10, qword [rsi]
cmp eax, 0x55871c1b
je 0x1400f90a4
mov rdi, r10
and rdi, 0xfffffffffffffff8
mov eax, dword [0x141f37440]
xor edx, edx
div dword [0x141f37444]
and eax, 0x920007b0
imul rax, rax, 0x5658b04d
shr rax, 0x3d
imul eax, eax, 0x99bee63e
cmp eax, 0x808f4642
jbe 0x1400f9060
mov rax, qword [rdi + 0x810]
nop word [rax + rax]
mov eax, dword [0x141f37448]
xor edx, edx
div dword [0x141f3744c]
imul rax, rax, 0xe6d48b1
shr rax, 0x3b
imul eax, eax, 0xd93821b
and eax, 0xf1140a5
mov rdx, qword [rdi + 0x810]
cmp eax, 0x62355068
ja 0x1400f9060
mov r15, rdx
and r15, 0xfffffffffffffff8
jne 0x1400f8f90
jmp 0x1400f9540
mov rax, qword [rsi]
jmp 0x1400f9002
mov eax, dword [0x141f373e0]
and eax, dword [0x141f373e4]
xor eax, 0x4c32cb8e
add eax, 0x2acb2d36
cmp eax, 0xb0f2dbf3
jb 0x1400f9103
nop dword [rax]
mov eax, dword [0x141f373e8]
or eax, dword [0x141f373ec]
xor eax, 0x51a59368
imul r8, rax, 0xa5603
shr r8, 0x2f
or r8d, 0xc7de14c
mov rax, qword [rsi + 0x80]
cmp r8d, 0xbaf2603
jne 0x1400f9110
mov rax, qword [rsi + 0x80]
jmp 0x1400f90d0
cmp r10, rax
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jne 0x1400f9190
mov eax, dword [0x141f37420]
or eax, dword [0x141f37424]
and eax, 0xb497a3d3
imul eax, eax, 0x59884d51
add eax, 0x26befc2c
cmp eax, 0x693693a8
jbe 0x1400f9150
mov rax, r10
lock cmpxchg qword [rsi + 0x80], rdx
nop dword [rax + rax]
mov r8d, dword [0x141f37428]
xor r8d, dword [0x141f3742c]
mov rax, r10
lock cmpxchg qword [rsi + 0x80], rdx
xor r8d, 0x80000108
or r8d, 0x1faf7ef4
cmp r8d, 0x22dedbc3
ja 0x1400f9150
nop word cs:[rax + rax]
mov eax, dword [0x141f373f0]
or eax, dword [0x141f373f4]
add eax, 0xcdbf199a
or eax, 0xb3b30060
and eax, 0xbbffc77e
cmp eax, 0x657f7ebb
je 0x1400f9190
test rcx, rcx
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x28], r11
je 0x1400f91e7
mov rdx, qword [rbp - 0x30]
lea rax, [0x1400685a0]
mov qword [rdx], rax
mov qword [rdx + 8], r10
sub rsp, 0x20
call fcn.140068660
add rsp, 0x20
jmp 0x1400f9303
mov qword [rbp - 0x10], r13
mov eax, dword [0x141f373f8]
and eax, dword [0x141f373fc]
imul rax, rax, 0x108df201
shr rax, 0x3c
imul eax, eax, 0x6fb823c0
add eax, 0x1374b2a8
cmp eax, 0xbfdc321e
jbe 0x1400f9220
mov rax, qword [0x141f49060]
nop dword [rax + rax]
mov eax, dword [0x141f37400]
xor edx, edx
div dword [0x141f37404]
and eax, 0x45f2769e
imul rax, rax, 0x5fcd6fd
shr rax, 0x32
or eax, 0x73fb3771
mov r13, qword [0x141f49060]
cmp eax, 0x3d651a43
je 0x1400f9220
mov qword [rbp - 8], r12
mov eax, dword [0x141f37408]
xor eax, dword [0x141f3740c]
imul eax, eax, 0xf7140f0b
xor eax, 0xc1b05afb
cmp eax, 0xf8bc1def
jbe 0x1400f9286
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rdi
call r14
add rsp, 0x20
mov r12, r14
nop dword [rax]
mov r14d, dword [0x141f37410]
xor r14d, dword [0x141f37414]
or r14d, 0xc070400
and r14d, 0x6d3f8604
xor r14d, 0xf887595c
sub rsp, 0x20
mov rcx, r13
xor edx, edx
mov r8, rdi
call r12
add rsp, 0x20
cmp r14d, 0x24785ee7
jb 0x1400f9290
mov r13, qword [rbp - 0x10]
mov r12, qword [rbp - 8]
nop word [rax + rax]
mov eax, dword [0x141f37418]
and eax, dword [0x141f3741c]
imul eax, eax, 0xae64ff9a
add eax, 0xbbdf78f0
xor eax, 0xfab30c3e
cmp eax, 0x18ce68e0
jb 0x1400f92e0
mov r14, qword [rbp - 0x28]
mov eax, dword [0x141f37450]
xor edx, edx
div dword [0x141f37454]
imul eax, eax, 0x2448247e
and eax, 0x6c783c34
cmp eax, 0x35086fe4
je 0x1400f9307
mov rdi, qword [r15]
nop word [rax + rax]
mov eax, dword [0x141f37458]
or eax, dword [0x141f3745c]
add eax, 0x2836827e
or eax, 0xf7ab4e45
add eax, 0xbf11d40e
cmp eax, 0xbf2f668b
ja 0x1400f9330
test rdi, rdi
je 0x1400f9540
add r15, 8
sub rsp, 0x20
mov r8d, 0x808
mov rcx, r13
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rbx], rdi
mov eax, dword [0x141f37460]
imul eax, dword [0x141f37464]
or eax, 0x5bab9e4e
cmp eax, 0xd39a25ba
mov r15, qword [rbp - 0x38]
jne 0x1400f93c0
sub rsp, 0x20
mov r8d, 0x808
mov rcx, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141f37468]
xor edx, edx
div dword [0x141f3746c]
imul edi, eax, 0x9cb7cf0a
sub rsp, 0x20
mov r8d, 0x808
mov rcx, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
cmp edi, 0xb4f0ad61
je 0x1400f93c0
mov rdi, qword [rbx + 0x800]
cmp rdi, 0x40
ja 0x1400f9551
xor eax, eax
test al, al
jne 0x1400f9406
mov eax, dword [0x141f37470]
xor edx, edx
div dword [0x141f37474]
mov ecx, 0xc192bced
mov r11, r14
nop word cs:[rax + rax]
mov eax, dword [0x141f37478]
and eax, dword [0x141f3747c]
xor eax, 0x5081821
or eax, 0x7a73c6dc
imul eax, eax, 0xc11607a5
cmp eax, 0xa5bab193
je 0x1400f9430
nop word cs:[rax + rax]
mov eax, dword [0x141f37480]
add eax, dword [0x141f37484]
and eax, 0xec305625
imul rax, rcx
shr rax, 0x3f
or eax, 0x9cd5db12
cmp eax, 0xf8eb9661
ja 0x1400f9460
test rdi, rdi
je 0x1400f94ea
shl rdi, 5
xor r15d, r15d
nop word cs:[rax + rax]
movups xmm0, xmmword [rbx + r15]
movups xmm1, xmmword [rbx + r15 + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmmword [r12], xmm0
movups xmm0, xmmword [0x141f25518]
movups xmmword [rbx + r15], xmm0
movups xmm0, xmmword [0x141f25528]
movups xmmword [rbx + r15 + 0x10], xmm0
sub rsp, 0x20
mov rcx, r11
call qword [r12]
mov r11, r14
add rsp, 0x20
add r15, 0x20
cmp rdi, r15
jne 0x1400f94a0
mov eax, dword [0x141f37490]
xor edx, edx
div dword [0x141f37494]
mov r9, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x18]
mov edx, 0xfc7d2ecf
nop word cs:[rax + rax]
mov eax, dword [0x141f37498]
add eax, dword [0x141f3749c]
or eax, 0x25ccd90a
imul rax, rdx
shr rax, 0x3e
add eax, 0x5911db59
cmp eax, 0x7f65f667
ja 0x1400f9510
cmp qword [rbp], 8
jne 0x1400f8f04
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2