Function at 0x1400902b0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov eax, dword [0x141dcc8e8]
or eax, dword [0x141dcc8ec]
imul eax, eax, 0x2f6198b1
add eax, 0xfdb874a9
cmp eax, 0xdd63faad
jae 0x140090307
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rdx, rsp
mov eax, 0x400
call fcn.1400ed360
sub rsp, rax
mov qword [rdx], 0
xor edx, edx
nop dword [rax]
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r8, rsp
mov eax, 0x400
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
mov qword [r8], 0
test dl, dl
jne 0x140090310
mov qword [rbp - 0x30], rax
mov eax, dword [0x141dcc8f0]
xor eax, dword [0x141dcc8f4]
add eax, 0x769a2751
or eax, 0x812091
and eax, 0x60936d97
cmp eax, 0xc439bf2b
jbe 0x140090369
mov qword [r8 + 8], 2
mov qword [rbp - 0x20], rcx
xor eax, eax
nop
mov qword [r8 + 8], 2
test al, al
jne 0x140090370
mov ebx, 0xffffffff
mov qword [rbp - 0x18], r8
mov qword [r8 + 0x10], 0
mov r15d, 0x200
mov eax, 2
mov qword [rbp], rax
xor eax, eax
mov qword [rbp - 8], rax
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, 0x8f1b60b1
xor r14d, r14d
xor eax, eax
mov qword [rbp - 0x10], rax
nop dword [rax + rax]
mov eax, dword [0x141dcc8f8]
xor edx, edx
div dword [0x141dcc8fc]
xor eax, 0x7f9ea4e6
imul eax, eax, 0x52c2f9cd
cmp eax, 0xe696b82d
je 0x1400903c0
cmp r15, 0x201
jae 0x140090400
mov eax, 0x200
mov qword [rbp - 0x28], rax
mov rdi, qword [rbp - 0x30]
mov r12, r15
jmp 0x1400904b3
mov eax, dword [0x141dcc900]
xor edx, edx
div dword [0x141dcc904]
or eax, 0xf5020001
and eax, 0xff2b04ad
add eax, 0xc7d99e7b
cmp eax, 0xb4dfcd60
jb 0x140090400
sub r15, qword [rbp - 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dcc908]
and eax, dword [0x141dcc90c]
and eax, 0xf00263fc
imul eax, eax, 0xf2834786
imul rax, r13
shr rax, 0x3c
cmp eax, 0xc36ce365
ja 0x140090430
sub r14, qword [rbp - 0x10]
nop word [rax + rax]
mov eax, dword [0x141dcc910]
or eax, dword [0x141dcc914]
and eax, 0x6da454
add eax, 0xa4373ac0
and eax, 0x402ec4
cmp eax, 0x51601596
ja 0x140090460
cmp r15, r14
ja 0x1400906e2
mov r14, qword [rbp - 8]
cmp r14, rbx
mov r12d, 0xffffffff
cmovb r12, r14
mov rcx, qword [rbp - 0x18]
mov qword [rcx + 0x10], r12
mov qword [rbp - 0x28], r12
mov rdi, qword [rbp]
mov rax, r12
mov qword [rbp - 0x10], r12
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rbp - 0x40], rdi
mov rdx, rdi
mov r8d, r12d
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
add rsp, 0x20
mov r15d, eax
test eax, eax
jne 0x140090590
mov qword [rbp - 0x38], r14
mov eax, dword [0x141dcc928]
sub eax, dword [0x141dcc92c]
or eax, 0x53aa821e
imul eax, eax, 0xce5de425
or eax, 0x9e75848c
cmp eax, 0xb6783cdc
jne 0x140090520
sub rsp, 0x20
call rsi
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dcc930]
xor edx, edx
div dword [0x141dcc934]
mov edi, eax
and edi, 0x284c39ba
add edi, 0xdcd88552
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x740ee22c
jb 0x140090520
mov r14, qword [rbp - 0x38]
nop word cs:[rax + rax]
mov ecx, dword [0x141dcc938]
or ecx, dword [0x141dcc93c]
add ecx, 0xbc665dd6
or ecx, 0xb9bb7fff
cmp ecx, 0x969a43fa
jb 0x140090560
test eax, eax
jne 0x1400907b5
nop dword [rax + rax]
mov eax, dword [0x141dcc978]
imul eax, dword [0x141dcc97c]
imul eax, eax, 0xd9a68209
imul rax, rax, 0x330a5db7
shr rax, 0x3d
imul eax, eax, 0x81100231
cmp eax, 0x9cf57022
je 0x140090590
mov r15d, r15d
cmp r12, r15
jne 0x1400906b0
mov eax, dword [0x141dcc980]
add eax, dword [0x141dcc984]
imul eax, eax, 0xbbf4765d
add eax, 0xfe278fbf
or eax, 0x6ad7f747
cmp eax, 0x9f945fd1
jne 0x140090600
sub rsp, 0x20
call rsi
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dcc988]
mov ecx, dword [0x141dcc98c]
add eax, ecx
add eax, 0xa7882431
imul rax, rax, 0x2a727bc1
shr rax, 0x3b
imul edi, eax, 0xaa478406
sub rsp, 0x20
call rsi
add rsp, 0x20
cmp edi, 0x942621e8
je 0x140090600
mov ecx, eax
nop dword [rax + rax]
mov eax, dword [0x141dcc990]
xor edx, edx
div dword [0x141dcc994]
imul eax, eax, 0xe7b9acb0
cmp eax, 0x238b8f56
je 0x140090640
cmp ecx, 0x7a
jne 0x140090876
lea rax, [r12 + r12]
mov edx, 0x9a3ad0ab
nop dword [rax]
mov ecx, dword [0x141dcc9a0]
sub ecx, dword [0x141dcc9a4]
imul rcx, rdx
shr rcx, 0x3f
imul ecx, ecx, 0xfddef432
imul rcx, rcx, 0x2aaa56c7
shr rcx, 0x3b
cmp r12, 0x7fffffff
mov r15, rax
cmova r15, rbx
cmp ecx, 0x5bec0c1d
je 0x140090670
jmp 0x1400903c0
mov eax, dword [0x141dcc998]
imul eax, dword [0x141dcc99c]
or eax, 0xf3ba058b
imul eax, eax, 0xee8ff90c
add eax, 0x5c9f437b
cmp eax, 0x83b934ce
jb 0x1400906b0
cmp r12, r15
jb 0x1400903c0
jmp 0x140090769
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov r8, r15
call fcn.1400faca0
add rsp, 0x30
mov eax, dword [0x141dcc918]
xor eax, dword [0x141dcc91c]
imul eax, eax, 0x47ec3584
cmp eax, 0x88dbd710
je 0x140090709
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
mov qword [rbp - 8], rax
mov rax, qword [rcx + 8]
mov qword [rbp], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dcc920]
xor edx, edx
div dword [0x141dcc924]
add eax, 0xcc7f6af6
and eax, 0x4a9849ba
add eax, 0xf455b4c8
cmp eax, 0xc7143a22
ja 0x140090740
jmp 0x14009048b
cmp qword [rbp - 0x28], r15
jb 0x1400908c5
mov eax, dword [0x141dcc9b8]
and eax, dword [0x141dcc9bc]
or eax, 0x92c6f4dc
imul rcx, rax, 0x464925cd
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x759cc356
cmp eax, 0x1f4666ac
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x40]
jne 0x1400909e7
jmp 0x140090a26
movabs rdi, 0x8000000000000000
mov eax, dword [0x141dcc940]
xor edx, edx
div dword [0x141dcc944]
add eax, 0x54fac630
and eax, 0xb2ce592b
xor eax, 0x178208d1
cmp eax, 0xf27ea735
mov r14, qword [rbp - 0x20]
jbe 0x140090804
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [r14 + 8], rax
mov qword [r14], rdi
mov r15, qword [rbp]
nop dword [rax + rax]
mov ebx, dword [0x141dcc948]
sub ebx, dword [0x141dcc94c]
or ebx, 0x4a8c3ba6
sub rsp, 0x20
call rsi
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov qword [r14 + 8], rax
mov qword [r14], rdi
cmp ebx, 0x5b5d6306
je 0x140090810
cmp qword [rbp - 8], 0
je 0x140090971
mov eax, dword [0x141dcc950]
add eax, dword [0x141dcc954]
and eax, 0x52cecb5e
imul eax, eax, 0x5b4c5c27
add eax, 0x308977a
cmp eax, 0x6a9fc291
jbe 0x1400908eb
jmp 0x140090910
mov eax, dword [0x141dcc9a8]
sub eax, dword [0x141dcc9ac]
and eax, 0x8e2dfbd8
add eax, 0xb93d4487
xor eax, 0x15949930
cmp eax, 0xf6bdc4c3
jbe 0x1400908a0
ud2
mov eax, dword [0x141dcc9b0]
add eax, dword [0x141dcc9b4]
and eax, 0x4eefcd45
imul eax, eax, 0x17172f10
ud2
mov eax, dword [0x141dcc9d8]
xor eax, dword [0x141dcc9dc]
and eax, 0x1001062
add eax, 0x1a12fe2e
cmp eax, 0x7a8dc9f
jae 0x140090ab4
jmp 0x140090ad9
mov eax, dword [0x141dcc958]
and eax, dword [0x141dcc95c]
xor eax, 0xf06e4836
imul eax, eax, 0xc3c480e3
mov rsi, qword [0x141dd7fe0]
cmp eax, 0x141c2302
jne 0x140090919
mov rax, qword [0x141dd7fe0]
jmp 0x1400908eb
mov eax, dword [0x141dcc960]
or eax, dword [0x141dcc964]
imul eax, eax, 0x2b510b72
xor eax, 0x46631a3d
add eax, 0xb5f49715
cmp eax, 0x8e520570
ja 0x140090959
sub rsp, 0x20
xor edi, edi
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
test dil, dil
je 0x140090971
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14009093c
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140090980
nop word cs:[rax + rax]
mov eax, dword [0x141dcc968]
and eax, dword [0x141dcc96c]
xor eax, 0xa571427f
add eax, 0x618bbfd
cmp eax, 0x91a04454
ja 0x140090990
nop dword [rax]
mov eax, dword [0x141dcc970]
add eax, dword [0x141dcc974]
imul rax, rax, 0x1dfcd865
shr rax, 0x3a
and eax, 0xfffffffd
add eax, 0x8c3788a1
cmp eax, 0x4c21283d
jbe 0x1400909b0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dcc9c0]
and eax, dword [0x141dcc9c4]
add eax, 0xcf2ed6b3
xor eax, 0xb272863b
imul rsi, rax, 0x5d56db65
shr rsi, 0x3e
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r15
call fcn.14008a680
add rsp, 0x20
cmp esi, 0x5f40d282
jne 0x140090a3e
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r15
call fcn.14008a680
add rsp, 0x20
jmp 0x1400909e7
cmp qword [rbp - 8], 0
je 0x140090a90
mov rcx, qword [0x141dd7fe0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov eax, dword [str.ef3E]
or eax, dword [0x141dcc9cc]
xor eax, 0x3ebf4819
imul rax, rax, 0x17e9e527
shr rax, 0x3b
cmp eax, 0xfe302f38
ja 0x140090a60
nop word cs:[rax + rax]
mov eax, dword [0x141dcc9d0]
xor eax, dword [0x141dcc9d4]
add eax, 0x2875c7b2
or eax, 0x68d4d95d
cmp eax, 0x9333283d
jbe 0x140090a90
jmp 0x1400909d6
mov eax, dword [0x141dcc9e0]
sub eax, dword [0x141dcc9e4]
or eax, 0x9cf50a6f
imul eax, eax, 0x58bf182
and eax, 0x9f7394b0
ud2
ud2