Function at 0x1400d81b0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
mov ecx, 0x18
nop dword [rax + rax]
mov eax, dword [0x141dd8280]
sub eax, dword [0x141dd8284]
or eax, 0xfc5ff9ed
imul r8d, eax, 0x6603b94b
mov rax, rdi
mul rcx
mov r14, rax
seto al
cmp r8d, 0xa29d6549
je 0x1400d81d0
test al, al
jne 0x1400d8369
movabs rax, 0x7ffffffffffffffd
cmp r14, rax
jae 0x1400d8369
nop dword [rax + rax]
mov eax, dword [0x141dd82a0]
or eax, dword [0x141dd82a4]
or eax, 0x7bb64fab
and eax, 0x7bbf6fab
cmp eax, 0xca09d35d
je 0x1400d8220
test r14, r14
je 0x1400d8335
mov eax, dword [0x141dd82a8]
add eax, dword [0x141dd82ac]
xor eax, 0x8408288
and eax, 0x8c408fe9
cmp eax, 0xb92d7935
jne 0x1400d8270
movzx eax, byte [0x141ddb278]
nop word [rax + rax]
mov eax, dword [0x141dd82b0]
xor eax, dword [0x141dd82b4]
xor eax, 0x1321
and eax, 0xa19b13bb
movzx ecx, byte [0x141ddb278]
cmp eax, 0x6e97dd3d
je 0x1400d8270
xor ecx, ecx
mov rdx, r14
call fcn.1400c0180
mov rbx, rax
mov eax, dword [0x141dd82b8]
xor edx, edx
div dword [0x141dd82bc]
nop
mov eax, dword [0x141dd82c0]
imul eax, dword [0x141dd82c4]
add eax, 0x6c9da33f
xor eax, 0x5921f54e
cmp eax, 0xbdd39384
ja 0x1400d82b0
mov r13, rdi
test rbx, rbx
jne 0x1400d833d
mov eax, dword [0x141dd82c8]
mov ecx, dword [0x141dd82cc]
add eax, ecx
add eax, 0xcb120bfa
or eax, 0x21a61665
mov ecx, 0xf666d397
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x4de5d789
jne 0x1400d8310
ud2
mov eax, dword [0x141dd82d0]
add eax, dword [0x141dd82d4]
imul eax, eax, 0x1db962b0
and eax, 0xd72e5aa0
ud2
mov ebx, 4
xor r13d, r13d
mov eax, dword [0x141dd82d8]
xor eax, dword [0x141dd82dc]
imul eax, eax, 0x75f1c0a9
or eax, 0xee27c31e
and eax, 0xef2fcb1e
cmp eax, 0x2364f168
jne 0x1400d83e4
jmp 0x1400d843a
mov eax, dword [0x141dd8288]
xor edx, edx
div dword [0x141dd828c]
xor eax, 0x224f3bc1
imul rax, rax, 0x1a9b6e8f
shr rax, 0x3c
add eax, 0x5fa29e63
cmp eax, 0xf374f861
ja 0x1400d83b7
mov eax, dword [0x141dd8290]
sub eax, dword [0x141dd8294]
xor eax, 0xcb66eb29
add eax, 0x19ddae6a
xor eax, 0x1ab19c04
ud2
ud2
ud2
mov eax, dword [0x141dd82e0]
sub eax, dword [0x141dd82e4]
imul rax, rax, 0x228c4b17
shr rax, 0x3d
add eax, 0xaf6b4f91
shr eax, 1
mov r15d, 0x910abd37
imul r15, rax
shr r15, 0x3d
lea eax, [rdi*8]
lea eax, [rax + rax*2]
mov dword [rsp + 0x20], eax
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
mov r9, rbx
call qword [sym.imp.powrprof.dll_CallNtPowerInformation]
cmp r15d, 0xf4676dd9
jne 0x1400d845d
lea eax, [rdi*8]
lea eax, [rax + rax*2]
mov dword [rsp + 0x20], eax
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
mov r9, rbx
call qword [sym.imp.powrprof.dll_CallNtPowerInformation]
jmp 0x1400d83e4
test eax, eax
js 0x1400d84e0
test rdi, rdi
je 0x1400d854f
mov eax, dword [0x141dd8320]
xor edx, edx
div dword [0x141dd8324]
lea r12, [rdi*8]
mov eax, dword [0x141dd8328]
imul eax, dword [0x141dd832c]
xor eax, 0xd871d8a2
imul eax, eax, 0xba4f7be
add eax, 0xb74ec4bc
cmp eax, 0xc9cf7387
ja 0x1400d8480
mov eax, dword [0x141dd8330]
sub eax, dword [0x141dd8334]
or eax, 0x2242631e
add eax, 0x3dae5edf
imul rax, rax, 0x2260b619
shr rax, 0x3d
cmp eax, 0x2a31644e
jne 0x1400d8646
jmp 0x1400d8666
mov eax, dword [0x141dd82e8]
or eax, dword [0x141dd82ec]
and eax, 0xe645aafc
add eax, 0x3890aee4
imul rax, rax, 0x6c8443d7
shr rax, 0x3e
cmp eax, 0xa74f0ff1
je 0x1400d84e0
nop dword [rax + rax]
mov eax, dword [0x141dd82f0]
xor edx, edx
div dword [0x141dd82f4]
add eax, 0x6dc879b5
cmp eax, 0x30d187a6
jb 0x1400d8510
test rdi, rdi
je 0x1400d855d
lea rdx, [rdi*8]
mov ecx, 8
call fcn.1400c0180
test rax, rax
je 0x1400d85fe
mov rcx, rdi
jmp 0x1400d8564
mov r15d, 8
xor r12d, r12d
jmp 0x1400d8810
mov eax, 8
xor ecx, ecx
mov edx, dword [0x141dd8308]
and edx, dword [0x141dd830c]
add edx, 0x576d4e7b
imul rdx, rdx, 0x20ff11a9
shr rdx, 0x3d
or edx, 0xa4885ffe
cmp edx, 0x9a4bab45
jae 0x1400d85a0
mov qword [rsi], rcx
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
nop word [rax + rax]
mov edx, dword [0x141dd8310]
sub edx, dword [0x141dd8314]
imul edx, edx, 0x81afeae8
mov qword [rsi], rcx
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
cmp edx, 0x6c7dc7e3
jb 0x1400d85a0
test r13, r13
je 0x1400d89a0
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd8318]
imul eax, dword [0x141dd831c]
and eax, 0x2311540
cmp eax, 0x5143c51c
je 0x1400d85e0
jmp 0x1400d89a0
mov eax, dword [0x141dd82f8]
imul eax, dword [0x141dd82fc]
imul eax, eax, 0xd372decf
add eax, 0xd42b01de
cmp eax, 0xe484a749
jbe 0x1400d8620
ud2
mov eax, dword [0x141dd8300]
xor edx, edx
div dword [0x141dd8304]
and eax, 0x40862310
add eax, 0xb34bae1b
ud2
mov eax, dword [0x141dd8338]
add eax, dword [0x141dd833c]
imul eax, eax, 0x78362052
movzx ecx, byte [0x141ddb278]
cmp eax, 0xf2869d0f
jbe 0x1400d866f
movzx eax, byte [0x141ddb278]
jmp 0x1400d8646
mov eax, dword [0x141dd8340]
and eax, dword [0x141dd8344]
and eax, 0x35e07b42
add eax, 0x94a016af
cmp eax, 0xc121d948
jbe 0x1400d8696
xor ecx, ecx
mov rdx, r12
call fcn.1400c0180
xor ebp, ebp
nop dword [rax + rax]
xor ecx, ecx
mov rdx, r12
call fcn.1400c0180
test bpl, bpl
jne 0x1400d86a0
mov r15, rax
test rax, rax
je 0x1400d83e2
add r14, 0xffffffffffffffe8
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, r14
mul rcx
mov rcx, rdx
shr rcx, 4
inc rcx
mov r8d, ecx
and r8d, 3
mov eax, 0xbc0a2449
nop word cs:[rax + rax]
mov edx, dword [0x141dd8348]
or edx, dword [0x141dd834c]
imul edx, edx, 0xc27d56bb
imul rdx, rax
shr rdx, 0x3f
add edx, 0x94edd03b
cmp edx, 0x5fe4a128
jb 0x1400d86f0
cmp r14, 0x48
jae 0x1400d8730
xor r12d, r12d
mov rax, rbx
jmp 0x1400d87b0
mov eax, dword [0x141dd8350]
or eax, dword [0x141dd8354]
add eax, 0x569845c7
and eax, 0xa1524465
cmp eax, 0xe8ffc508
ja 0x1400d8730
nop dword [rax]
mov eax, dword [0x141dd8358]
xor edx, edx
div dword [0x141dd835c]
add eax, 0xfc6d5c20
and eax, 0x8c202c00
cmp eax, 0x719caf67
jb 0x1400d8750
and rcx, 0xfffffffffffffffc
xor r12d, r12d
mov rax, rbx
nop dword [rax]
mov edx, dword [rax + 8]
mov qword [r15 + r12*8], rdx
mov edx, dword [rax + 0x20]
mov qword [r15 + r12*8 + 8], rdx
mov edx, dword [rax + 0x38]
mov qword [r15 + r12*8 + 0x10], rdx
mov edx, dword [rax + 0x50]
add rax, 0x60
mov qword [r15 + r12*8 + 0x18], rdx
add r12, 4
cmp rcx, r12
jne 0x1400d8780
nop dword [rax]
mov ecx, dword [0x141dd8360]
add ecx, dword [0x141dd8364]
or ecx, 0x24d7d344
imul rcx, rcx, 0x6cfdaffb
shr rcx, 0x3e
imul ecx, ecx, 0x74165e64
cmp ecx, 0x3a3b6bba
jb 0x1400d87b0
test r8, r8
je 0x1400d8810
shl r8, 3
lea rcx, [r8 + r8*2]
xor edx, edx
nop word [rax + rax]
mov r8d, dword [rax + rdx + 8]
mov qword [r15 + r12*8], r8
inc r12
add rdx, 0x18
cmp rcx, rdx
jne 0x1400d87f0
nop word cs:[rax + rax]
mov eax, dword [0x141dd8368]
and eax, dword [0x141dd836c]
add eax, 0xd30f429c
xor eax, 0xa0280349
or eax, 0x4e940026
cmp eax, 0x3bb7100d
jb 0x1400d8810
test r13, r13
je 0x1400d88d2
mov r14, qword [0x141ddb260]
mov eax, dword [0x141dd8370]
sub eax, dword [0x141dd8374]
add eax, 0x75f90bd4
imul rax, rax, 0x4cb91e25
shr rax, 0x3e
cmp eax, 0x5f0edf8d
je 0x1400d8898
mov eax, dword [0x141dd8378]
add eax, dword [0x141dd837c]
or eax, 0xa2eda81c
imul ebp, eax, 0x4e7cc55e
add ebp, 0x7172deb0
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebp, 0x8ae10275
jae 0x1400d88a8
mov rcx, r14
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d8865
mov eax, 0xb3d1e967
nop dword [rax]
mov ecx, dword [0x141dd8380]
sub ecx, dword [0x141dd8384]
add ecx, 0x546882e8
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xa34d6f0b
je 0x1400d88b0
mov qword [rsi], rdi
mov eax, dword [0x141dd8388]
imul eax, dword [0x141dd838c]
add eax, 0x20e8dee6
mov ecx, 0xc50e508f
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xdafb9577
jbe 0x1400d8900
mov qword [rsi + 8], r15
mov eax, 0xd6183f21
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8390]
sub ecx, dword [0x141dd8394]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x1b94c582
mov qword [rsi + 8], r15
cmp ecx, 0xfb6ea50f
ja 0x1400d8910
mov eax, dword [0x141dd8398]
sub eax, dword [0x141dd839c]
and eax, 0x592024c
imul eax, eax, 0xf0413d9
cmp eax, 0x44f23772
jne 0x1400d8960
mov qword [rsi + 0x10], r12
nop dword [rax + rax]
mov eax, dword [0x141dd83a0]
xor edx, edx
div dword [0x141dd83a4]
imul rcx, rax, 0x19c99ca3
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
xor eax, 0x4002c007
or eax, 0xbe5523e8
mov qword [rsi + 0x10], r12
cmp eax, 0x58cf4379
je 0x1400d8960
nop word [rax + rax]
mov eax, dword [0x141dd83a8]
and eax, dword [0x141dd83ac]
add eax, 0x9df9be78
and eax, 0x2831ec4e
add eax, 0xd1de1ac4
cmp eax, 0xaf9f60a6
jb 0x1400d89a0
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret