Function at 0x140007470
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rdi, r9
mov r12, r8
mov r13, rdx
mov qword [rsp + 0x38], rcx
mov eax, dword [0x141dbfb88]
and eax, dword [0x141dbfb8c]
xor eax, 0xc21a3f2
imul eax, eax, 0xcc3b864b
or eax, 0xd3864737
cmp eax, 0xac7dd9e6
jae 0x1400074d9
lea rcx, [0x140102e44]
mov edx, 3
call fcn.1400dc8c0
mov rcx, r12
mov rdx, rdi
call fcn.1400dc8c0
mov qword [rsp + 0x40], 0
lea rbp, [0x140102e44]
xor esi, esi
nop word cs:[rax + rax]
mov edx, 3
mov rcx, rbp
call fcn.1400dc8c0
mov rbx, rax
mov rcx, r12
mov rdx, rdi
call fcn.1400dc8c0
mov r15, qword [r13]
mov qword [rsp + 0x40], 0
test sil, sil
jne 0x1400074f0
mov r14, rax
mov r12, qword [r15]
mov eax, dword [0x141dbfb90]
or eax, dword [0x141dbfb94]
imul eax, eax, 0x2cd36878
xor eax, 0x20488484
and eax, 0x204c9fc4
lea r13, [rsp + 0x40]
cmp eax, 0x72934837
jbe 0x140007570
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], 0
mov rcx, r15
mov rdx, rbx
mov r8, r14
mov r9d, 0x30
call qword [r12 + 0xa0]
mov eax, dword [0x141dbfb98]
imul eax, dword [0x141dbfb9c]
imul esi, eax, 0x6777ca3a
add esi, 0xb41adcd2
and esi, 0x67ba5e28
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], 0
mov rcx, r15
mov rdx, rbx
mov r8, r14
mov r9d, 0x30
call qword [r12 + 0xa0]
cmp esi, 0xd391e115
je 0x140007570
mov edi, eax
test eax, eax
js 0x140007a58
mov rdi, qword [rsp + 0x40]
test rdi, rdi
mov r15, qword [rsp + 0x38]
je 0x140007bbd
nop dword [rax]
mov eax, dword [0x141dbfba0]
and eax, dword [0x141dbfba4]
imul eax, eax, 0x3c8f0dde
and eax, 0xfac42988
imul eax, eax, 0x2a95bb3d
cmp eax, 0x3e768c0d
jb 0x1400075e0
test r14, r14
je 0x140007620
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
nop word cs:[rax + rax]
mov eax, dword [0x141dbfba8]
imul eax, dword [0x141dbfbac]
and eax, 0xbf03f6c6
add eax, 0x88e7c8fc
or eax, 0x6fa428f2
cmp eax, 0x395350e9
je 0x140007620
test rbx, rbx
je 0x1400076e2
mov eax, dword [0x141dbfbb0]
and eax, dword [0x141dbfbb4]
add eax, 0xbef2f45b
and eax, 0xd4ec34b2
cmp eax, 0xeb3a1ad1
jbe 0x140007672
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysFreeString]
mov rsi, qword [sym.imp.oleaut32.dll_SysFreeString]
nop dword [rax]
mov eax, dword [0x141dbfbb8]
or eax, dword [0x141dbfbbc]
or eax, 0x5bc0e12e
imul ebp, eax, 0x43877eb4
or ebp, 0xcdce6c2
mov rcx, rbx
call rsi
cmp ebp, 0xdf0a8587
ja 0x140007680
nop word [rax + rax]
mov eax, dword [0x141dbfbc0]
imul eax, dword [0x141dbfbc4]
add eax, 0x7a2a4b6d
or eax, 0x7a1ccfe5
imul rcx, rax, 0x218e22db
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x4914635d
ja 0x1400076b0
mov byte [rsp + 0x40], 0x12
mov eax, dword [0x141dbfc00]
and eax, dword [0x141dbfc04]
cmp eax, 0xb147d281
jne 0x14000770c
lea rcx, [rsp + 0x78]
lea r8, [rsp + 0x40]
mov rdx, rdi
call section..text
lea rbx, [rsp + 0x78]
lea r14, [rsp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dbfc08]
xor edx, edx
div dword [0x141dbfc0c]
xor eax, 0x9192c2ff
imul rax, rax, 0x37e4ee5b
shr rax, 0x3d
imul esi, eax, 0x60a14520
mov rcx, rbx
mov rdx, rdi
mov r8, r14
call section..text
cmp esi, 0x349fb122
je 0x140007720
cmp qword [rsp + 0x78], 0
je 0x140007c5f
movzx eax, byte [0x141ddb9b8]
mov edx, 0xc0
xor ecx, ecx
call fcn.1400bf820
test rax, rax
je 0x140007ef0
mov rbx, rax
mov eax, dword [0x141dbfc28]
or eax, dword [0x141dbfc2c]
mov ecx, 0x95fea743
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x20640022
cmp ecx, 0x1e057046
jne 0x1400077f0
movups xmm0, xmmword [rsp + 0x78]
movups xmm1, xmmword [rsp + 0x88]
movups xmm2, xmmword [rsp + 0x98]
movups xmmword [rbx + 0x20], xmm2
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov qword [rsp + 0x60], 4
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 1
nop word cs:[rax + rax]
mov eax, dword [0x141dbfc30]
add eax, dword [0x141dbfc34]
imul eax, eax, 0xa0568587
movups xmm0, xmmword [rsp + 0x78]
movups xmm1, xmmword [rsp + 0x88]
movups xmm2, xmmword [rsp + 0x98]
movups xmmword [rbx + 0x20], xmm2
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx], xmm0
mov qword [rsp + 0x60], 4
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 1
cmp eax, 0xa0346953
je 0x1400077f0
mov eax, dword [0x141dbfc38]
add eax, dword [0x141dbfc3c]
imul eax, eax, 0x547d4931
and eax, 0x5a314dc0
imul eax, eax, 0x6d1e3a68
cmp eax, 0x7a28eac
jb 0x140007840
mov r14d, 1
lea r15, [rsp + 0x78]
lea r12, [rsp + 0x40]
lea r13, [rsp + 0x60]
mov ebp, 0x8f2b4915
jmp 0x1400078b3
lea rax, [r14 + r14*2]
shl rax, 4
movups xmm0, xmmword [rsp + 0x78]
movups xmm1, xmmword [rsp + 0x88]
movups xmm2, xmmword [rsp + 0x98]
movups xmmword [rbx + rax + 0x20], xmm2
movups xmmword [rbx + rax + 0x10], xmm1
movups xmmword [rbx + rax], xmm0
inc r14
mov qword [rsp + 0x70], r14
mov eax, dword [0x141dbfc40]
imul eax, dword [0x141dbfc44]
imul eax, eax, 0x648fafe2
or eax, 0x37ab96b0
imul eax, eax, 0xebabdc66
cmp eax, 0x6efa9d81
je 0x140007a20
nop dword [rax]
mov esi, dword [0x141dbfc48]
sub esi, dword [0x141dbfc4c]
add esi, 0x51f6bae4
and esi, 0x43d1e1c2
add esi, 0x2e60d0f1
mov rcx, r15
mov rdx, rdi
mov r8, r12
call section..text
cmp esi, 0xa2b3009b
ja 0x140007a20
cmp qword [rsp + 0x78], 0
je 0x140007b90
nop word cs:[rax + rax]
mov eax, dword [0x141dbfc50]
xor edx, edx
div dword [0x141dbfc54]
imul eax, eax, 0x1410b929
and eax, 0x8d438879
imul eax, eax, 0x791ec088
cmp eax, 0x37ead992
je 0x140007930
mov rax, qword [rsp + 0x60]
nop dword [rax + rax]
mov ecx, dword [0x141dbfc58]
and ecx, dword [0x141dbfc5c]
add ecx, 0x474e6341
or ecx, 0xef85b6db
cmp ecx, 0xae63e8fd
je 0x140007960
cmp r14, rax
jne 0x140007880
mov eax, dword [0x141dbfc60]
sub eax, dword [0x141dbfc64]
or eax, 0xeb84009e
add eax, 0xff60e6e2
cmp eax, 0x19b590c8
jb 0x140007a33
mov esi, dword [0x141dbfc68]
sub esi, dword [0x141dbfc6c]
xor esi, 0x23dde15
add esi, 0x36de59f3
mov qword [rsp + 0x20], 0x30
mov r8d, 1
mov r9d, 8
mov rcx, r13
mov rdx, r14
call fcn.1400fd630
cmp esi, 0x6305e383
jb 0x1400079aa
nop word [rax + rax]
mov eax, dword [0x141dbfc70]
or eax, dword [0x141dbfc74]
or eax, 0xfb7fdebf
imul rax, rbp
shr rax, 0x3c
cmp eax, 0x43165c9e
ja 0x1400079f0
mov rbx, qword [rsp + 0x68]
jmp 0x140007880
mov rcx, r15
mov rdx, rdi
mov r8, r12
call section..text
jmp 0x1400078e0
mov qword [rsp + 0x20], 0x30
mov r8d, 1
mov r9d, 8
mov rcx, r13
mov rdx, r14
call fcn.1400fd630
jmp 0x1400079aa
mov qword [rsp + 0x78], 0
mov eax, dword [0x141dbfbc8]
imul eax, dword [0x141dbfbcc]
or eax, 0xd8e2a84d
xor eax, 0x989b47ba
imul rax, rax, 0x3d72ed69
shr rax, 0x37
cmp eax, 0x445e8390
jbe 0x140007a97
lea rdx, [rsp + 0x78]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
lea r15, [rsp + 0x78]
mov rsi, qword [sym.imp.oleaut32.dll_GetErrorInfo]
nop word cs:[rax + rax]
mov eax, dword [0x141dbfbd0]
xor edx, edx
div dword [0x141dbfbd4]
xor eax, 0x7c65d3ae
imul ebp, eax, 0xa065527
add ebp, 0x34409bc9
xor ecx, ecx
mov rdx, r15
call rsi
cmp ebp, 0xde75a508
ja 0x140007ab0
mov r15, qword [rsp + 0x78]
nop word cs:[rax + rax]
mov eax, dword [0x141dbfbd8]
xor edx, edx
div dword [0x141dbfbdc]
cmp eax, 0xba3d55e4
je 0x140007af0
test r15, r15
je 0x140007b89
xor eax, eax
nop dword [rax]
test al, al
jne 0x140007b10
mov rax, qword [r15]
mov r12, qword [rax + 0x10]
xor eax, eax
test al, al
je 0x140007b30
mov rcx, r15
call r12
nop word [rax + rax]
mov eax, dword [0x141dbfbe0]
imul eax, dword [0x141dbfbe4]
imul esi, eax, 0xf24cdd50
or esi, 0x4d4f77cf
mov rcx, r15
call r12
cmp esi, 0xd265cc56
jb 0x140007b30
nop word [rax + rax]
mov eax, dword [0x141dbfbe8]
sub eax, dword [0x141dbfbec]
imul rax, rax, 0x672520b
shr rax, 0x3a
imul eax, eax, 0xec140148
add eax, 0xe72e2538
cmp eax, 0x3a836379
jb 0x140007b60
mov r15, qword [rsp + 0x38]
jmp 0x140007bbf
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
mov rdi, qword [rsp + 0x60]
cmp byte [rsp + 0x40], 0x12
jne 0x140007cd3
mov r15, qword [rsp + 0x38]
xor eax, eax
test al, al
je 0x140007ca0
jmp 0x140007c83
xor edi, edi
mov eax, 0xe1bbd189
nop word cs:[rax + rax]
mov ecx, dword [0x141dbfbf0]
xor ecx, dword [0x141dbfbf4]
add ecx, 0xa196ce69
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xc9451783
je 0x140007bd0
test r14, r14
je 0x140007c00
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [0x141dbfbf8]
imul eax, dword [0x141dbfbfc]
imul eax, eax, 0xeb8d6826
add eax, 0x5e504fcb
cmp eax, 0x3a25f52
jb 0x140007c00
test rbx, rbx
je 0x140007c2d
mov rcx, rbx
call qword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [0x141dbfcf0]
imul eax, dword [0x141dbfcf4]
or eax, 0x47d96991
imul rax, rax, 0x2a842bd3
shr rax, 0x3c
or eax, 0xb684aea4
cmp eax, 0x2b461d6
jae 0x140007f60
jmp 0x140007f87
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
cmp byte [rsp + 0x40], 0x12
jne 0x140007eb8
mov ebx, 8
xor edi, edi
xor r14d, r14d
xor eax, eax
test al, al
je 0x140007ca0
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], r14
mov byte [r15], 0x12
nop word cs:[rax + rax]
mov eax, dword [0x141dbfc90]
sub eax, dword [0x141dbfc94]
imul eax, eax, 0x53731f57
add eax, 0xe4e76d7d
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], r14
mov byte [r15], 0x12
cmp eax, 0x7f9f71f1
ja 0x140007ca0
jmp 0x14000804f
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov rax, qword [rsp + 0x38]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov eax, dword [0x141dbfc98]
xor edx, edx
div dword [0x141dbfc9c]
mov eax, 0x9dfb1ab5
nop dword [rax]
mov ecx, dword [0x141dbfca0]
sub ecx, dword [0x141dbfca4]
imul ecx, ecx, 0x72dc9255
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x311c3e9a
cmp ecx, 0x9eef246e
ja 0x140007d00
nop dword [rax + rax]
mov eax, dword [0x141dbfca8]
sub eax, dword [0x141dbfcac]
imul eax, eax, 0x8d2eaad2
and eax, 0x6f5a104c
imul eax, eax, 0x85f724d4
cmp eax, 0x6c228c7a
ja 0x140007d30
test r14, r14
je 0x140007df0
xor esi, esi
mov r15d, 0xcbfe3779
nop word cs:[rax + rax]
mov eax, dword [0x141dbfcb0]
xor edx, edx
div dword [0x141dbfcb4]
add eax, 0xc9ec8ff7
imul rax, r15
shr rax, 0x3f
cmp eax, 0x5eca4098
jne 0x140007db0
lea rcx, [rsi + rsi*2]
shl rcx, 4
add rcx, rbx
call fcn.14000d8d0
nop word cs:[rax + rax]
mov eax, dword [0x141dbfcb8]
xor eax, dword [0x141dbfcbc]
and eax, 0xe5bf666a
imul ebp, eax, 0x3bfba453
lea rcx, [rsi + rsi*2]
shl rcx, 4
add rcx, rbx
call fcn.14000d8d0
cmp ebp, 0xb0ce4fae
je 0x140007db0
inc rsi
cmp rsi, r14
jne 0x140007d70
nop word [rax + rax]
mov eax, dword [0x141dbfcc0]
imul eax, dword [0x141dbfcc4]
imul eax, eax, 0x8a0338c0
and eax, 0x9b2db480
imul rax, rax, 0x440e294f
shr rax, 0x36
cmp eax, 0x7e053da1
ja 0x140007df0
test rdi, rdi
je 0x14000804f
mov eax, dword [0x141dbfcc8]
and eax, dword [0x141dbfccc]
imul eax, eax, 0x361506f8
cmp eax, 0x1e9ebc3
jne 0x140007e50
mov rax, qword [0x141ddb9a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dbfcd0]
and eax, dword [0x141dbfcd4]
shr eax, 3
imul rax, rax, 0x2021d8f7
shr rax, 0x3a
or eax, 0x6d58b5bc
imul eax, eax, 0x6dc495b2
mov rcx, qword [0x141ddb9a0]
cmp eax, 0x92589210
jb 0x140007e50
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dbfcd8]
add eax, dword [0x141dbfcdc]
imul eax, eax, 0x44913ac9
add eax, 0x6c16fa6a
or eax, 0x4d7eff40
cmp eax, 0xa343a483
je 0x140007e90
jmp 0x14000804f
mov eax, dword [0x141dbfc78]
xor edx, edx
div dword [0x141dbfc7c]
or eax, 0x9b2b0aa
shr eax, 1
mov ecx, 0x8a6dc30d
imul rcx, rax
shr rcx, 0x3d
imul eax, ecx, 0x215e198a
cmp eax, 0x28e0ac01
jbe 0x140007fd7
jmp 0x140008010
mov eax, dword [0x141dbfc10]
imul eax, dword [0x141dbfc14]
and eax, 0xbb3b50cd
add eax, 0xc0bd08a4
cmp eax, 0x58ca4bf2
jae 0x140007f10
ud2
mov eax, dword [0x141dbfc18]
xor edx, edx
div dword [0x141dbfc1c]
shr eax, 2
imul rax, rax, 0x4b9730c3
shr rax, 0x3c
xor eax, 0xd17b5be1
add eax, 0xdeafb588
ud2
mov eax, dword [0x141dbfcf8]
or eax, dword [0x141dbfcfc]
imul eax, eax, 0x2ee811e6
add eax, 0x831b7cee
xor eax, 0x89d3cd0e
mov dword [r15 + 4], edi
cmp eax, 0x66c3a02e
jbe 0x140007f8d
mov dword [r15 + 4], edi
jmp 0x140007f60
mov eax, dword [0x141dbfd00]
sub eax, dword [0x141dbfd04]
and eax, 0x104c0859
add eax, 0xc8571ae2
cmp eax, 0x30976273
jae 0x140007fb0
mov byte [r15], 0
nop
mov eax, dword [0x141dbfd08]
imul eax, dword [0x141dbfd0c]
or eax, 0x48419686
and eax, 0xc9c1be86
mov byte [r15], 0
cmp eax, 0x441f9b97
jb 0x140007fb0
jmp 0x1400080c0
mov eax, dword [0x141dbfc80]
or eax, dword [0x141dbfc84]
or eax, 0x6c568fbc
mov ecx, 0xb46a5125
imul rcx, rax
shr rcx, 0x3d
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
cmp ecx, 0xc92aef26
jne 0x140008030
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15], xmm0
jmp 0x140007fd7
mov eax, dword [0x141dbfc88]
imul eax, dword [0x141dbfc8c]
xor eax, 0x91b3ebee
imul eax, eax, 0x5e489059
cmp eax, 0x3db6e349
je 0x140008030
mov eax, 0xa786e6ef
nop word cs:[rax + rax]
mov ecx, dword [0x141dbfce0]
and ecx, dword [0x141dbfce4]
add ecx, 0x6995bae4
and ecx, 0x724d4a6b
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xcf7aeb67
ja 0x140008060
nop dword [rax + rax]
mov eax, dword [0x141dbfce8]
imul eax, dword [0x141dbfcec]
add eax, 0x526c9d82
imul rax, rax, 0x5d777d5d
shr rax, 0x3c
or eax, 0x3f7f512a
cmp eax, 0xa77a001f
je 0x140008090
nop dword [rax]
mov eax, dword [0x141dbfd10]
and eax, dword [0x141dbfd14]
imul eax, eax, 0x29c95d14
cmp eax, 0x8b1a7841
je 0x1400080c0
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret