Function at 0x1400bb7b0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x18], rdx
mov eax, dword [0x141dd4f90]
and eax, dword [0x141dd4f94]
imul eax, eax, 0x7456b7f5
add eax, 0xa0b98f5f
imul rax, rax, 0x7f5fcb01
shr rax, 0x37
cmp eax, 0x7ef20782
ja 0x1400bb83c
mov edx, dword [0x141dd4f98]
and edx, dword [0x141dd4f9c]
add edx, 0xc3bb873d
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r9, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x400
call fcn.1400ef3b0
sub rsp, rax
mov rax, rsp
cmp edx, 0x7cd8fc49
jae 0x1400bb865
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x400
call fcn.1400ef3b0
sub rsp, rax
jmp 0x1400bb7f2
mov qword [rbp - 0x50], rax
mov eax, dword [0x141dd4fa0]
add eax, dword [0x141dd4fa4]
or eax, 0x224622b2
imul eax, eax, 0x68f102d7
add eax, 0xef3c0ccd
cmp eax, 0xc7f2eeb6
jb 0x1400bb8a1
mov qword [rdi], 0
mov qword [rdi + 8], 2
xor eax, eax
test al, al
je 0x1400bb8b2
mov qword [rdi], 0
mov qword [rdi + 8], 2
jmp 0x1400bb88c
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x30], rcx
mov eax, dword [0x141dd4fa8]
imul eax, dword [0x141dd4fac]
and eax, 0x105368f5
cmp eax, 0xf66c64bb
je 0x1400bb910
mov eax, dword [0x141dd4fb0]
xor eax, dword [str.d0_P]
or eax, 0x21ff53b4
imul rcx, rax, 0x29d74d85
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
or eax, 0xcf6903ae
mov qword [rdi + 0x10], 0
cmp eax, 0x1775a490
jne 0x1400bb91a
mov qword [rdi + 0x10], 0
jmp 0x1400bb8d7
mov r14d, 0x200
mov eax, 2
mov qword [rbp - 0x20], rax
mov r13d, 0xffffffff
xor ebx, ebx
mov r15, qword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov qword [rbp - 0x10], rax
xor r8d, r8d
xor esi, esi
nop word cs:[rax + rax]
cmp r14, 0x201
jae 0x1400bb970
mov qword [rbp - 8], r8
mov eax, 0x200
mov qword [rbp - 0x40], rax
mov r12, qword [rbp - 0x50]
jmp 0x1400bbac0
mov eax, dword [0x141dd4fb8]
xor eax, dword [0x141dd4fbc]
imul eax, eax, 0x40d96d98
add eax, 0xb9518b0
mov ecx, 0xb7c377e1
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xfb91357b
ja 0x1400bb970
sub r14, rsi
sub r8, rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dd4fc0]
imul eax, dword [0x141dd4fc4]
add eax, 0xa10bb86
xor eax, 0x9f118f6d
add eax, 0x98a308dd
cmp eax, 0x57401b5e
jb 0x1400bb9b0
cmp r14, r8
jbe 0x1400bba84
test bl, bl
jne 0x1400bba95
mov eax, dword [0x141dd4fd0]
mov ecx, dword [0x141dd4fd4]
add eax, ecx
add eax, 0x39f30256
imul r12, rax, 0x18a825ed
shr r12, 0x3c
or r12d, 0x275abe42
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, rsi
mov r8, r14
call fcn.1400fd630
add rsp, 0x30
cmp r12d, 0x9bd1f980
ja 0x1400bb9e4
nop word [rax + rax]
mov eax, dword [0x141dd4fd8]
imul eax, dword [0x141dd4fdc]
and eax, 0x1b5e0a53
add eax, 0x9346a2ca
and eax, 0x9a0a805c
cmp eax, 0x3d62fc05
jb 0x1400bba40
mov rax, qword [rdi]
mov qword [rbp - 0x10], rax
mov rax, qword [rdi + 8]
mov qword [rbp - 0x20], rax
nop word cs:[rax + rax]
test bl, bl
jne 0x1400bba80
test bl, bl
mov rcx, qword [rbp - 0x10]
je 0x1400bbe10
jmp 0x1400bbe39
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rdi
mov rdx, rsi
mov r8, r14
call fcn.1400fd630
add rsp, 0x30
jmp 0x1400bb9e4
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rbp - 0x18]
mov edx, r14d
mov r8, r12
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
add rsp, 0x20
mov r8d, eax
test eax, eax
jne 0x1400bbb8f
mov dword [rbp + 4], r8d
mov rbx, r12
mov eax, dword [str._vL:]
and eax, dword [0x141dd4fe4]
add eax, 0xa7b16d24
mov ecx, 0x817efe6f
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0x10d92e86
cmp eax, 0xa713861
ja 0x1400bbb42
mov r12d, dword [0x141dd4fe8]
or r12d, dword [0x141dd4fec]
sub rsp, 0x20
call r15
add rsp, 0x20
cmp r12d, 0xadd6f296
jne 0x1400bbb50
sub rsp, 0x20
call r15
add rsp, 0x20
jmp 0x1400bbb20
mov ecx, dword [0x141dd4ff0]
xor ecx, dword [0x141dd4ff4]
add ecx, 0xabe167a6
xor ecx, 0xfd6cc392
imul rcx, rcx, 0x521d155d
shr rcx, 0x3e
cmp ecx, 0xb98a28a6
ja 0x1400bbb50
test eax, eax
mov r12, rbx
mov ebx, 0
mov r8d, dword [rbp + 4]
jne 0x1400bbff3
mov qword [rbp - 0x28], r12
nop word cs:[rax + rax]
mov eax, dword [str._zel]
and eax, dword [0x141dd503c]
imul eax, eax, 0x774c17dd
add eax, 0x57768e17
cmp eax, 0x577c0099
jb 0x1400bbba0
mov r12d, r8d
mov eax, dword [0x141dd5040]
sub eax, dword [0x141dd5044]
xor eax, 0x62905949
imul eax, eax, 0x4965f43e
add eax, 0x74202c14
cmp eax, 0x3d5f8e68
jb 0x1400bbbc1
nop word cs:[rax + rax]
mov eax, dword [0x141dd5048]
xor eax, dword [0x141dd504c]
add eax, 0x87789e3c
and eax, 0x2800b34d
add eax, 0xf8846a8e
cmp eax, 0xaec15900
jb 0x1400bbbf0
cmp r14, r12
jne 0x1400bbda0
mov eax, dword [0x141dd5050]
or eax, dword [0x141dd5054]
xor eax, 0xe8ee99de
add eax, 0xfd2891fb
or eax, 0x718aca84
cmp eax, 0x8eae0202
jne 0x1400bbc50
sub rsp, 0x20
call r15
add rsp, 0x20
nop dword [rax + rax]
mov r12d, dword [0x141dd5058]
xor r12d, dword [0x141dd505c]
xor r12d, 0x31521e7b
add r12d, 0x9dd9d22d
or r12d, 0xdc3513ce
sub rsp, 0x20
call r15
add rsp, 0x20
cmp r12d, 0x83f33f48
jb 0x1400bbc50
mov ecx, eax
mov eax, dword [0x141dd5060]
xor eax, dword [0x141dd5064]
or eax, 0xc7a9499a
imul rax, rax, 0x7506d1e9
shr rax, 0x3e
imul eax, eax, 0x81fbb775
cmp eax, 0x6a77fcbd
jb 0x1400bbc89
mov r8, qword [rbp - 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5068]
xor edx, edx
div dword [0x141dd506c]
or eax, 0x2929a1
add eax, 0x6f021150
and eax, 0x7798976
cmp eax, 0x67dedf4e
je 0x1400bbcc0
cmp ecx, 0x7a
jne 0x1400bc14a
mov eax, dword [0x141dd5078]
and eax, dword [0x141dd507c]
xor eax, 0x10082250
and eax, 0x73c9ead2
imul eax, eax, 0xc0bdb122
cmp eax, 0x32f63d5e
jb 0x1400bbced
lea rcx, [r14 + r14]
mov eax, dword [0x141dd5080]
xor edx, edx
div dword [0x141dd5084]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5088]
xor eax, dword [0x141dd508c]
imul edx, eax, 0xa4814476
or edx, 0xcb1b3e0f
and edx, 0xcfdfbfff
cmp r14, 0x7fffffff
mov rax, rcx
cmova rax, r13
cmp edx, 0x8a7aa693
jb 0x1400bbd30
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5090]
xor ecx, dword [str.O_n2b]
xor ecx, 0x5bada611
add ecx, 0xd74f07ad
cmp ecx, 0x297bf1e
ja 0x1400bbd70
mov r14, rax
jmp 0x1400bbde0
mov eax, dword [0x141dd5070]
imul eax, dword [0x141dd5074]
imul eax, eax, 0xe2b4f6b3
add eax, 0x33e6f17
xor eax, 0xa28e2921
cmp eax, 0x6f2c8f2d
jb 0x1400bbda0
cmp r14, r12
jae 0x1400bbe64
mov r14, r12
mov r8, qword [rbp - 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5098]
xor eax, dword [0x141dd509c]
imul eax, eax, 0xf8c00a7b
add eax, 0xfdbe4337
imul rax, rax, 0x556f3361
shr rax, 0x3e
cmp eax, 0x1546281d
ja 0x1400bbde0
jmp 0x1400bb950
mov eax, dword [0x141dd4fc8]
sub eax, dword [0x141dd4fcc]
imul eax, eax, 0x3f995e9a
cmp rcx, r13
mov esi, 0xffffffff
cmovb rsi, rcx
mov qword [rdi + 0x10], rsi
cmp eax, 0xf5a34b3e
jne 0x1400bbe50
cmp rcx, r13
mov eax, 0xffffffff
cmovb rax, rcx
mov qword [rdi + 0x10], rax
jmp 0x1400bbe10
mov qword [rbp - 8], rcx
mov qword [rbp - 0x40], rsi
mov r12, qword [rbp - 0x20]
mov r14, rsi
jmp 0x1400bbac0
cmp qword [rbp - 0x40], r12
jb 0x1400bc178
mov rcx, qword [rbp - 0x38]
mov r10, qword [rcx]
mov r9, qword [rcx + 8]
mov eax, dword [0x141dd50a8]
xor edx, edx
div dword [0x141dd50ac]
nop word [rax + rax]
mov eax, dword [0x141dd50b0]
add eax, dword [0x141dd50b4]
imul rax, rax, 0x2032e7d3
shr rax, 0x37
cmp eax, 0x9fa5ea40
je 0x1400bbe90
mov r13, qword [rcx + 0x10]
lea rax, [r13 - 1]
cmp rax, 6
jb 0x1400bc219
mov eax, dword [0x141dd50b8]
xor edx, edx
div dword [0x141dd50bc]
nop
mov eax, dword [0x141dd50c0]
or eax, dword [0x141dd50c4]
and eax, 0x19010312
add eax, 0xef0f3a5d
cmp eax, 0x48a36571
ja 0x1400bbed0
nop dword [rax]
mov eax, dword [0x141dd50c8]
xor edx, edx
div dword [0x141dd50cc]
add eax, 0x4f2f403b
xor eax, 0x2ed26448
cmp eax, 0x53b165b5
jb 0x1400bbef0
test r13, r13
je 0x1400bc219
lea rax, [r13 - 7]
nop dword [rax]
mov ecx, dword [0x141dd50d0]
imul ecx, dword [0x141dd50d4]
add ecx, 0x330439d9
imul rcx, rcx, 0x75320f81
shr rcx, 0x3e
cmp ecx, 0xc99c74fb
ja 0x1400bbf20
nop word cs:[rax + rax]
mov ecx, dword [0x141dd50d8]
add ecx, dword [0x141dd50dc]
and ecx, 0x31737d5b
xor ecx, 0x867a62e7
imul rcx, rcx, 0x6e280459
shr rcx, 0x3e
cmp ecx, 0x68ae0b43
ja 0x1400bbf50
cmp rax, r12
jne 0x1400bc295
mov qword [rbp - 8], r10
mov dword [rbp + 4], r8d
mov qword [rbp - 0x18], r9
lea r15, [r9 + 0xc]
nop word cs:[rax + rax]
mov eax, dword [0x141dd50e0]
imul eax, dword [0x141dd50e4]
xor eax, 0xd6427a9f
imul eax, eax, 0x9e05ca4a
or eax, 0x23f875fe
cmp eax, 0xa0502e7c
ja 0x1400bbfa0
mov eax, dword [0x141dd50e8]
sub eax, dword [0x141dd50ec]
add eax, 0x6f42f965
xor eax, 0x3105c0ac
add eax, 0xf421317c
cmp eax, 0x15e789f
mov rsi, qword [rbp - 0x28]
jae 0x1400bc21b
jmp 0x1400bc269
mov eax, dword [0x141dd4ff8]
xor edx, edx
div dword [0x141dd4ffc]
movabs rsi, 0x8000000000000000
add eax, 0xe796044f
cmp eax, 0xd0949259
mov rbx, qword [rbp - 0x30]
jae 0x1400bc038
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
mov r14, qword [rbp - 0x10]
nop dword [rax]
mov eax, dword [0x141dd5000]
add eax, dword [0x141dd5004]
xor eax, 0xe664e2f
imul rax, rax, 0x374c941b
shr rax, 0x3c
imul edi, eax, 0x3ea7324b
sub rsp, 0x20
call r15
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [rbx + 8], rax
mov qword [rbx], rsi
cmp edi, 0xb5469923
jb 0x1400bc040
test r14, r14
je 0x1400bc0a4
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdx, qword [rbp - 0x38]
nop dword [rax + rax]
mov eax, dword [0x141dd5008]
xor eax, dword [0x141dd500c]
imul eax, eax, 0xea8787a6
and eax, 0xb02c430
cmp eax, 0xcdb3b168
ja 0x1400bc0b0
nop
mov eax, dword [0x141dd5010]
imul eax, dword [0x141dd5014]
imul eax, eax, 0xb02b5bae
add eax, 0x4ea4852
cmp eax, 0x3497b612
jb 0x1400bc0d0
mov rax, qword [rdx]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5018]
or ecx, dword [0x141dd501c]
cmp ecx, 0x2290a04a
je 0x1400bc100
test rax, rax
je 0x1400bc208
mov rsi, qword [rdx + 8]
mov eax, dword [0x141dd5020]
mov ecx, dword [0x141dd5024]
add eax, ecx
add eax, 0x29878383
and eax, 0x9f84f324
add eax, 0x6c38fc74
cmp eax, 0x98cebcb0
jbe 0x1400bc1a4
jmp 0x1400bc1d2
ud2
mov eax, dword [0x141dd5150]
sub eax, dword [0x141dd5154]
and eax, 0xe5c949e6
imul eax, eax, 0xdb82ce3d
add eax, 0xa797165
cmp eax, 0xb1b4bd3a
jae 0x1400bc5b2
jmp 0x1400bc5d5
mov edi, dword [0x141dd5028]
xor edi, dword [0x141dd502c]
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xcf3efd0d
jne 0x1400bc1f0
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400bc1a4
mov eax, dword [0x141dd5030]
xor eax, dword [0x141dd5034]
or eax, 0x7e3f7dff
cmp eax, 0x1134e81b
jbe 0x1400bc1f0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
ud2
mov ebx, dword [0x141dd50f0]
and ebx, dword [0x141dd50f4]
add ebx, 0x16f6c9e8
imul rax, rbx, 0x78a7c07
shr rax, 0x20
sub ebx, eax
shr ebx, 1
add ebx, eax
shr ebx, 0x1e
xor ebx, 0x9a96d2cf
lea r14, [r12 + r12]
sub rsp, 0x20
mov rcx, rsi
mov rdx, r15
mov r8, r14
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
cmp ebx, 0xe7295193
jbe 0x1400bc282
lea r8, [r12 + r12]
sub rsp, 0x20
mov rcx, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
jmp 0x1400bc21b
test eax, eax
mov ecx, dword [rbp + 4]
mov r9, qword [rbp - 0x18]
mov r10, qword [rbp - 8]
je 0x1400bc3e0
mov word [r9 + 0xc], 0x43
mov rax, qword [rbp - 0x30]
mov qword [rax], r10
mov qword [rax + 8], r9
mov qword [rax + 0x10], r13
cmp qword [rbp - 0x10], 0
je 0x1400bc3a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5128]
or eax, dword [0x141dd512c]
xor eax, 0x6f89b193
add eax, 0x75f04f48
or eax, 0x83a86f51
cmp eax, 0x20c631ac
jb 0x1400bc2c0
mov rsi, qword [rdi + 8]
mov eax, dword [0x141dd5130]
imul eax, dword [0x141dd5134]
imul rax, rax, 0x2c3b91fb
shr rax, 0x3d
add eax, 0xd6969a4f
and eax, 0x10160050
cmp eax, 0x57c8c25d
jne 0x1400bc329
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd5138]
mov ecx, dword [0x141dd513c]
lea ebx, [rax + rcx]
add ebx, 0x3ff6382f
and ebx, 0x1382200
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call rdi
add rsp, 0x20
cmp ebx, 0x54504798
ja 0x1400bc330
mov eax, 0xc479ecbf
nop
mov ecx, dword [0x141dd5140]
and ecx, dword [0x141dd5144]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x68524640
cmp ecx, 0x15737d6c
jb 0x1400bc370
nop word cs:[rax + rax]
mov eax, dword [0x141dd5148]
imul eax, dword [0x141dd514c]
or eax, 0xdd7e2248
shr eax, 2
imul rax, rax, 0x43905a67
shr rax, 0x3b
or eax, 0xa1ca665e
cmp eax, 0x46307579
je 0x1400bc3a0
jmp 0x1400bc208
mov eax, dword [0x141dd50f8]
xor eax, dword [0x141dd50fc]
and eax, 0x42054004
add eax, 0xf558a061
cmp eax, 0xe172ea42
jb 0x1400bc3e0
nop dword [rax]
mov eax, dword [0x141dd5100]
xor eax, dword [0x141dd5104]
and eax, 0x88c9e52d
imul eax, eax, 0xb0cf7236
cmp eax, 0xfea1b0b8
je 0x1400bc400
test ecx, ecx
je 0x1400bc49f
movzx eax, byte [0x141ddb9b8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
call fcn.1400bf820
add rsp, 0x20
mov r15, rax
nop
mov eax, dword [0x141dd5108]
or eax, dword [0x141dd510c]
imul eax, eax, 0xa974d014
and eax, 0xc3b11980
cmp eax, 0xccd1248e
ja 0x1400bc440
test r15, r15
jne 0x1400bc4a5
ud2
mov r15d, 2
mov eax, dword [0x141dd5118]
sub eax, dword [0x141dd511c]
xor eax, 0x3fd94fb1
imul eax, eax, 0x7d60f553
or eax, 0x8e7e5a4d
cmp eax, 0xd60bdafc
mov rsi, qword [rbp - 0x48]
jb 0x1400bc52b
mov ebx, dword [0x141dd5120]
imul ebx, dword [0x141dd5124]
add ebx, 0xe4f761d1
and ebx, 0x32047098
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp - 0x28]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rsi], r12
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r12
sub rsp, 0x20
mov rcx, rsi
call fcn.1400da110
add rsp, 0x20
mov r13, qword [rsi + 8]
mov word [r13 + r12*2], 0
cmp ebx, 0x5e7333ae
jbe 0x1400bc56d
sub rsp, 0x20
mov rcx, r15
mov rdx, qword [rbp - 0x28]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [rsi], r12
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r12
sub rsp, 0x20
mov rcx, rsi
call fcn.1400da110
add rsp, 0x20
mov rax, qword [rsi + 8]
mov word [rax + r12*2], 0
jmp 0x1400bc4cc
inc r12
mov r14, qword [rsi]
cmp qword [rbp - 8], 0
je 0x1400bc5a4
mov rcx, qword [0x141ddb9a0]
sub rsp, 0x20
xor ebx, ebx
xor edx, edx
mov r8, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rdi]
mov qword [rbp - 0x10], rax
nop
test bl, bl
jne 0x1400bc5a0
mov r10, r14
mov r9, r13
mov r13, r12
jmp 0x1400bc29c
mov eax, dword [0x141dd5158]
and eax, dword [0x141dd515c]
add eax, 0x39b6697a
xor eax, 0xdb742f68
ud2
ud2