Function at 0x14005a7a0
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x1400c9008]
xor rax, rsp
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x18], rdx
xor r13d, r13d
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], 7
lea r8d, [r13 + 0x14]
lea rdx, str.HPSysInfoRpcEndpoint
lea rcx, [rbp + 0x48]
call fcn.140005a60
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x28]
call qword [sym.imp.RpcClient.Native.dll_public:_static_class_std::shared_ptr_class_Hp::Bridge::Client::Native::RpcClient____cdecl_Hp::Bridge::Client::Native::RpcClient::GetClientForEndpoint_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___]
nop
lea rcx, [rbp + 0xb8]
call qword [sym.imp.RpcClient.Native.dll_public:_void___cdecl_Hp::Bridge::Client::Core::ServerInfo::constructor_void____ptr64]
mov ebx, r13d
mov rdi, qword [rbp - 0x28]
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], 7
xor r8d, r8d
lea rdx, [0x140077fa0]
lea rcx, [rbp + 0x68]
call fcn.140005a60
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0xb8]
mov rcx, rdi
call qword [sym.imp.RpcClient.Native.dll_public:_int___cdecl_Hp::Bridge::Client::Core::RpcClient::OpenConnection_class_Hp::Bridge::Client::Core::ServerInfo____ptr64__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64]
mov esi, eax
mov r14d, 0xffffffff
test eax, eax
je 0x14005a885
lea ecx, [r14 + 0xb]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x1f4
jl 0x14005a822
jmp 0x14005b073
lea rcx, [rsp + 0x50]
call fcn.1400249d0
nop
movsd xmm0, qword [0x1400a9118]
movsd qword [rbp - 0x60], xmm0
lea rax, [rbp - 0x60]
mov qword [rbp + 8], rax
lea rax, [0x1400cdfc8]
mov qword [rbp + 0xa8], rax
lock inc qword [0x1400cdfc8]
mov rcx, qword [0x1400cdfc0]
test rcx, rcx
je 0x14005a8f5
mov qword [rbp - 0x58], r13
mov rax, qword [rcx]
lea r8, [rbp - 0x58]
movsd xmm1, qword [rbp - 0x60]
call qword [rax + 0x48]
test eax, eax
js 0x14005b0e3
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x68], rax
lock dec qword [0x1400cdfc8]
jmp 0x14005a90c
lock dec qword [0x1400cdfc8]
lea r8, [rbp + 8]
lea rdx, [rsp + 0x68]
call fcn.140045a80
nop
lea r9, [rbp + 0x168]
lea r8, [rbp + 0x170]
mov edx, 4
lea rcx, str.type
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
mov rdi, qword [rsp + 0x68]
mov r8, rdi
mov rdx, qword [rbp + 0x168]
call qword [rax + 0x38]
test eax, eax
js 0x14005b0ee
test rdi, rdi
je 0x14005a95c
lea rcx, [rsp + 0x68]
call fcn.140013100
mov qword [rbp - 0x40], r13
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x14005a96f
mov rcx, r13
jmp 0x14005a987
mov qword [rbp - 0x50], r13
mov rax, qword [rcx]
lea r8, [rbp - 0x50]
lea rdx, [0x140088ce8]
call qword [rax]
mov rcx, qword [rbp - 0x50]
mov qword [rbp - 0x48], rcx
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x38]
test eax, eax
js 0x14005b0f9
lea rcx, [rbp - 0x48]
call fcn.140013100
mov rdi, qword [rbp - 0x40]
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], r13w
lea rdx, [rsp + 0x58]
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8d, dword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.140005a60
nop
test rdi, rdi
je 0x14005aa02
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rbp + 0x10], r13
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], r13w
mov r12, qword [rbp - 0x28]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x60], rax
mov qword [rbp - 0x18], r13
mov qword [rbp - 8], r13
mov qword [rbp], r13
lea r14, [rbp + 0xe8]
mov rdi, qword [rbp + 0xe8]
mov rbx, qword [rbp + 0x100]
cmp rbx, 8
cmovae r14, rdi
mov r15, qword [rbp + 0xf8]
cmp r15, 8
jae 0x14005aa75
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x18], xmm0
mov esi, 7
jmp 0x14005aaad
mov rsi, r15
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
cmova rsi, rax
lea rdx, [rsi + 1]
call fcn.140005b90
mov qword [rbp - 0x18], rax
lea r8, [r15*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 8], r15
mov qword [rbp], rsi
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], 7
mov r8d, 0xd
lea rdx, str.SMBiosService
lea rcx, [rbp + 0x88]
call fcn.140005a60
nop
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x18]
mov r8d, 2
lea rdx, [rbp + 0x88]
mov rcx, r12
call qword [sym.imp.RpcClient.Native.dll_public:_int___cdecl_Hp::Bridge::Client::Core::RpcClient::ExecuteCommand_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____unsigned_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64____ptr64]
mov esi, eax
mov dword [rbp - 0x68], eax
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.RpcClient.Native.dll_public:_int___cdecl_Hp::Bridge::Client::Core::RpcClient::CloseConnection_void____ptr64]
test esi, esi
jne 0x14005afb9
lea rcx, [rsp + 0x48]
call fcn.1400249d0
nop
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae rcx, qword [rbp + 0xc8]
mov edx, dword [rbp + 0xd8]
test edx, edx
jne 0x14005ab5a
mov qword [rbp + 0x128], r13
jmp 0x14005ab6d
lea r9, [rbp + 0x128]
lea r8, [rbp + 0x130]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea rax, [rbp + 0x128]
mov qword [rbp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rbp + 0x30], rax
lea rax, [0x1400cdfe8]
mov qword [rbp + 0xb0], rax
lock inc qword [0x1400cdfe8]
cmp qword [0x1400cdfe0], 0
je 0x14005abbc
lea rdx, [0x1400cdfe0]
lea rcx, [rbp + 0x28]
call fcn.140059060
nop
lock dec qword [0x1400cdfe8]
jmp 0x14005abcd
lock dec qword [0x1400cdfe8]
lea rdx, [rbp + 0x28]
call fcn.1400590d0
test al, al
je 0x14005af99
lea r9, [rbp + 0x188]
lea r8, [rbp + 0x190]
mov edx, 6
lea rcx, str.result
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x70]
mov rdx, qword [rbp + 0x188]
call qword [rax + 0x40]
test eax, eax
js 0x14005b104
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rbx
lea rcx, [0x1400a8420]
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::SetProvider_char_const____ptr64_]
mov qword [rsp + 0x60], rax
lea rdx, [0x1400cde60]
lea rcx, [0x1400c9f18]
call qword [sym.imp.VCRUNTIME140.dll___std_type_info_name]
lea r9, [rbp + 0x1a8]
lea r8, [rbp + 0x1b0]
mov edx, 8
lea rcx, str.instance
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rcx, qword [rbx]
mov rdi, qword [rcx + 0x58]
lea r8, [rbp - 0x30]
mov rdx, qword [rbp + 0x1a8]
mov rcx, rbx
call rdi
test eax, eax
js 0x14005b10f
cvttsd2si eax, qword [rbp - 0x30]
mov r13d, 1
cmp eax, r13d
jl 0x14005af8c
nop word [rax + rax]
mov edx, r13d
lea rcx, [rbp + 0x108]
call fcn.14001a0c0
nop
lea rcx, [rbp + 0x108]
cmp qword [rbp + 0x120], 8
cmovae rcx, qword [rbp + 0x108]
mov edx, dword [rbp + 0x118]
test edx, edx
jne 0x14005acde
xor edi, edi
mov edx, edi
mov qword [rbp + 0x148], rdx
jmp 0x14005acfa
lea r9, [rbp + 0x148]
lea r8, [rbp + 0x150]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rdx, qword [rbp + 0x148]
xor edi, edi
mov qword [rbp - 0x38], rdi
mov rax, qword [rbx]
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
js 0x14005b0d8
mov r15, qword [rbp - 0x38]
mov qword [rbp + 0x20], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov rsi, rdi
mov qword [rbp - 0x70], rdi
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov r12d, eax
xor edx, edx
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov dword [rbp + 0x3c], edi
mov dword [rsp + 0x40], edi
test rax, rax
je 0x14005af2b
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, r12d
mov rcx, r14
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x14005af19
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov ecx, dword [rsp + 0x40]
mov rdi, rax
xor eax, eax
rep stosb byte [rdi], al
mov edx, dword [rsp + 0x40]
mov dword [rsp + 0x44], edx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov r8d, 1
mov edx, r12d
mov rcx, r14
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x14005aefc
mov eax, dword [rsp + 0x44]
mov dword [rbp + 0x38], eax
mov qword [rbp + 0x40], rbx
mov edi, eax
test eax, eax
je 0x14005ae17
mov rdx, qword [rbp - 0x78]
cmp rdx, rsi
je 0x14005adfa
movzx eax, byte [rbx]
mov byte [rdx], al
inc rdx
mov qword [rbp - 0x78], rdx
jmp 0x14005ae0e
mov r8, rbx
lea rcx, [rbp - 0x80]
call fcn.14005cac0
mov rsi, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x78]
inc rbx
sub rdi, 1
jne 0x14005ade7
mov rdi, qword [rbp + 0x18]
mov rax, qword [rdi + 8]
cmp rax, qword [rdi + 0x10]
je 0x14005ae38
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.140019f60
add qword [rdi + 8], 0x18
jmp 0x14005ae48
lea r8, [rbp - 0x80]
mov rdx, rax
mov rcx, rdi
call fcn.14005c790
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14005ae7f
mov rdx, qword [rbp - 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ae79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005aef5
call fcn.140061bc0
nop
test r15, r15
je 0x14005ae94
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rbp + 0x20], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x14005aeda
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005aed5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005af7b
call fcn.140061bc0
inc r13d
cvttsd2si eax, qword [rbp - 0x30]
cmp r13d, eax
jg 0x14005af89
mov rbx, qword [rsp + 0x70]
jmp 0x14005aca0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.Problem_while_decoding_from_base64.__i
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
jmp 0x14005af2b
lea rdx, str.Problem_while_finding_the_count_of_bytes_to_decode_from_base64.
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
mov esi, 0xffffffff
test r15, r15
je 0x14005af3e
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x14005af8c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005af82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005af82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061bc0
jmp 0x14005af8c
mov esi, dword [rbp - 0x68]
lea rcx, [rsp + 0x78]
call fcn.140013100
xor r13d, r13d
cmp qword [rsp + 0x48], 0
je 0x14005afab
lea rcx, [rsp + 0x48]
call fcn.140013100
mov rdi, qword [rbp + 0xe8]
mov rbx, qword [rbp + 0x100]
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x14005b002
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005affd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005affd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061bc0
mov qword [rbp + 0xd8], r13
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], r13w
cmp rbx, 8
jb 0x14005b05b
lea rdx, [rbx*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14005b052
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b052
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140061bc0
nop
cmp qword [rsp + 0x50], 0
je 0x14005b06d
lea rcx, [rsp + 0x50]
call fcn.140013100
mov r14d, 0xffffffff
mov rdi, qword [rbp - 0x20]
test rdi, rdi
je 0x14005b0a6
mov eax, r14d
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14005b0a6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], r14d
cmp r14d, 1
jne 0x14005b0a6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov eax, esi
mov rcx, qword [rbp + 0x1c8]
xor rcx, rsp
call fcn.140061ba0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lfence
mov ecx, eax
call fcn.140006260
nop
lfence
mov ecx, eax
call fcn.140006260
nop
lfence
mov ecx, eax
call fcn.140006260
nop
lfence
mov ecx, eax
call fcn.140006260
nop
lfence
mov ecx, eax
call fcn.140006260
nop
lfence
mov ecx, eax
call fcn.140006260
int3