Function at 0x1400ba020
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x498
mov qword [rsp + 0x88], r8
mov eax, dword [0x141dd1758]
imul eax, dword [0x141dd175c]
mov qword [rsp + 0x40], rcx
imul rax, rax, 0x4e3a6cad
shr rax, 0x3e
cmp eax, 0xeeb46f49
je 0x1400ba092
mov eax, dword [0x141dd1760]
or eax, dword [0x141dd1764]
mov ecx, 0xe2dd2c95
imul rcx, rax
shr rcx, 0x3f
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 2
cmp ecx, 0xd51da3b4
jbe 0x1400ba0a6
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 2
jmp 0x1400ba05f
mov esi, 0xffffffff
mov qword [rsp + 0x68], 0
mov ebx, 0x200
mov eax, 2
mov qword [rsp + 0x50], rax
xor r12d, r12d
xor eax, eax
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x30], rax
xor edi, edi
mov qword [rsp + 0x48], rdx
nop dword [rax + rax]
cmp rbx, 0x201
jae 0x1400ba110
mov eax, 0x200
mov qword [rsp + 0x90], rax
lea r14, [rsp + 0x98]
mov qword [rsp + 0x38], r14
mov rbp, rbx
jmp 0x1400ba210
mov eax, dword [0x141dd1768]
and eax, dword [0x141dd176c]
imul rax, rax, 0x4943e5ab
shr rax, 0x3e
cmp eax, 0x9d859109
je 0x1400ba110
sub rbx, rdi
mov rdx, qword [rsp + 0x30]
sub rdx, rdi
nop dword [rax]
mov eax, dword [0x141dd1770]
add eax, dword [0x141dd1774]
imul eax, eax, 0x1afdd108
add eax, 0x1183e658
cmp eax, 0xd5020d99
ja 0x1400ba140
nop
mov eax, dword [0x141dd1778]
mov ecx, dword [0x141dd177c]
add eax, ecx
add eax, 0xbb469fd5
or eax, 0xc9c5c439
cmp eax, 0xda9e866e
jb 0x1400ba160
cmp rbx, rdx
ja 0x1400ba1ac
mov eax, dword [0x141dd1780]
xor eax, dword [0x141dd1784]
add eax, 0xd022a5d3
cmp eax, 0x98373a17
mov rcx, qword [rsp + 0x28]
mov dl, 1
jae 0x1400ba3c0
jmp 0x1400ba400
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rsp + 0x58]
mov rdx, rdi
mov r8, rbx
call fcn.1400faca0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x50], rax
nop
mov eax, dword [0x141dd1788]
imul eax, dword [0x141dd178c]
imul eax, eax, 0x4e78277d
add eax, 0x97d45c4f
and eax, 0xe4323536
cmp eax, 0x71ac7b53
jbe 0x1400ba1e0
jmp 0x1400ba184
mov eax, dword [0x141dd1790]
xor edx, edx
div dword [0x141dd1794]
and eax, 0x1f4ba05e
add eax, 0x48050a2c
xor eax, 0x86467f88
cmp eax, 0x769e845
mov r15, qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov r14, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
jb 0x1400ba28c
nop word cs:[rax + rax]
mov eax, dword [0x141dd1798]
imul eax, dword [0x141dd179c]
imul eax, eax, 0xcbac9b4e
or eax, 0x1b94867b
imul ebx, eax, 0xb02f2db6
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
mov edx, ebp
mov r8, r13
xor r9d, r9d
call r15
cmp ebx, 0x73318b7a
jae 0x1400ba2b0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
mov edx, ebp
mov r8, r13
xor r9d, r9d
call r15
jmp 0x1400ba250
mov r8d, eax
test eax, eax
jne 0x1400ba2f1
mov ebx, r8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x141dd17a0]
imul ecx, dword [0x141dd17a4]
imul rcx, rcx, 0x1775eb67
shr rcx, 0x3b
add ecx, 0x1ae89317
cmp ecx, 0x954c761a
ja 0x1400ba2c0
test eax, eax
mov r8d, ebx
jne 0x1400ba6f8
mov ebx, r8d
cmp rbp, rbx
jne 0x1400ba3a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov eax, dword [0x141dd17d0]
xor edx, edx
div dword [0x141dd17d4]
or eax, 0x9a21ba0a
xor eax, 0x1375b7c2
add eax, 0x7192b168
cmp eax, 0x926ed4e2
jb 0x1400ba305
cmp ecx, 0x7a
jne 0x1400ba931
mov eax, dword [0x141dd17d8]
xor eax, dword [0x141dd17dc]
cmp eax, 0x25dc59b0
je 0x1400ba332
lea rcx, [rbp*2]
mov eax, dword [0x141dd17e0]
xor edx, edx
div dword [0x141dd17e4]
nop dword [rax + rax]
mov eax, dword [0x141dd17e8]
and eax, dword [0x141dd17ec]
xor eax, 0x703cef48
imul eax, eax, 0xbd5f09ce
add eax, 0xf6c81bea
cmp rbp, 0x7fffffff
mov rbx, rcx
cmova rbx, rsi
cmp eax, 0x2c412a2b
jb 0x1400ba360
jmp 0x1400ba3b0
jae 0x1400ba413
nop word cs:[rax + rax]
test r12b, r12b
jne 0x1400ba3b0
jmp 0x1400ba0e0
cmp rcx, rsi
mov edi, 0xffffffff
cmovb rdi, rcx
mov qword [rsp + 0x68], rdi
test dl, dl
je 0x1400ba400
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x90], rdi
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov rbp, rdi
jmp 0x1400ba210
cmp rcx, rsi
mov eax, 0xffffffff
cmovb rax, rcx
mov qword [rsp + 0x68], rax
jmp 0x1400ba3c0
mov rsi, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x88]
mov eax, dword [0x141dd1800]
sub eax, dword [0x141dd1804]
add eax, 0xfb1c5b94
or eax, 0x98816588
and eax, 0x9ca56ddc
cmp eax, 0xc53ed9b1
ja 0x1400ba420
cmp qword [rsp + 0x90], rbx
jb 0x1400ba986
mov eax, dword [0x141dd1808]
xor edx, edx
div dword [0x141dd180c]
nop
mov eax, dword [0x141dd1810]
and eax, dword [0x141dd1814]
add eax, 0xec288ad8
and eax, 0xaa12e6f5
imul rax, rax, 0x7da17159
shr rax, 0x3e
cmp eax, 0xc29bebc2
je 0x1400ba460
mov r9, qword [rcx]
nop dword [rax + rax]
mov eax, dword [0x141dd1818]
xor edx, edx
div dword [0x141dd181c]
add eax, 0xd5829e02
xor eax, 0x96aeb62f
add eax, 0x7364bcfb
cmp eax, 0xaaf54ea4
jb 0x1400ba490
mov r12, qword [rcx + 0x10]
lea rax, [r12 - 1]
cmp rax, 4
jb 0x1400baa27
mov rdi, qword [rcx + 8]
nop dword [rax + rax]
mov eax, dword [0x141dd1820]
xor eax, dword [0x141dd1824]
xor eax, 0x2e4391e6
imul eax, eax, 0x1434044c
or eax, 0x4251a19e
cmp eax, 0xf9a2fb43
ja 0x1400ba4d0
test r12, r12
je 0x1400baa27
lea rax, [r12 - 5]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd1828]
add ecx, dword [0x141dd182c]
and ecx, 0x1300040
add ecx, 0xdcf08a04
cmp ecx, 0xbac01ce5
jb 0x1400ba510
cmp rax, rbx
jne 0x1400ba7e3
mov qword [rsp + 0x48], r9
mov r13d, r8d
mov qword [rsp + 0x30], rdi
lea rbp, [rdi + 8]
mov eax, dword [0x141dd1830]
add eax, dword [0x141dd1834]
lea r15, [rbx + rbx]
imul eax, eax, 0xa781b794
add eax, 0xfa0fdba8
cmp eax, 0xed1ea2e2
jbe 0x1400ba57c
mov rcx, qword [rsp + 0x38]
mov rdx, rbp
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
mov r14, qword [rsp + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd1838]
sub eax, dword [0x141dd183c]
imul rax, rax, 0xfc53ebb
shr rax, 0x3b
or eax, 0x9a481ed4
imul edi, eax, 0x91aaf855
mov rcx, r14
mov rdx, rbp
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
cmp edi, 0x22ccc5b1
jb 0x1400ba590
nop dword [rax + rax]
mov ecx, dword [0x141dd1840]
imul ecx, dword [0x141dd1844]
or ecx, 0xebeca812
cmp ecx, 0x383d88b3
je 0x1400ba5d0
test eax, eax
je 0x1400ba600
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x30]
jmp 0x1400ba7e6
mov eax, dword [0x141dd1848]
xor edx, edx
div dword [0x141dd184c]
add eax, 0xe9addd3c
and eax, 0x183ef81
cmp eax, 0xa16f6064
ja 0x1400ba600
mov r14, qword [rsp + 0x38]
nop word cs:[rax + rax]
mov eax, dword [0x141dd1850]
or eax, dword [0x141dd1854]
or eax, 0x470e4f83
imul eax, eax, 0xd030b2b6
and eax, 0x893fb2a8
cmp eax, 0xcba1ec1d
je 0x1400ba630
test r13d, r13d
je 0x1400ba7f5
movzx eax, byte [0x141dd7ff8]
xor ecx, ecx
mov rdx, r15
call fcn.1400beea0
mov rbp, rax
mov eax, dword [0x141dd1858]
mov ecx, dword [0x141dd185c]
add eax, ecx
add eax, 0xfee5405c
or eax, 0x7683bcd2
add eax, 0xb88a6041
cmp eax, 0xb0008822
jb 0x1400ba670
nop word cs:[rax + rax]
mov eax, dword [0x141dd1860]
sub eax, dword [0x141dd1864]
xor eax, 0x4800034
or eax, 0xeb397f48
imul eax, eax, 0xf0dacfdb
cmp eax, 0xaed01a45
jb 0x1400ba6a0
test rbp, rbp
jne 0x1400ba7fa
ud2
call qword [sym.imp.KERNEL32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x40]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
cmp qword [rsp + 0x28], 0
je 0x1400ba762
mov rcx, qword [0x141dd7fe0]
xor edx, edx
mov r8, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [0x141dd17a8]
sub eax, dword [0x141dd17ac]
and eax, 0x2ecd5226
add eax, 0x73d21879
and eax, 0x3a1678ec
cmp eax, 0x56e9b9e6
ja 0x1400ba740
mov r9, qword [rsp + 0x88]
nop word [rax + rax]
mov eax, dword [0x141dd17b0]
xor edx, edx
div dword [str.oQp]
or eax, 0x13191b19
xor eax, 0xca953a6a
imul rcx, rax, 0x1b368847
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x9830f349
je 0x1400ba770
mov rax, qword [r9]
xor ecx, ecx
nop dword [rax + rax]
test cl, cl
jne 0x1400ba7b0
test rax, rax
je 0x1400ba9f0
mov eax, dword [0x141dd17b8]
sub eax, dword [0x141dd17bc]
xor eax, 0x2120
or eax, 0xdfffd6d3
cmp eax, 0x313d4024
jae 0x1400ba9b3
jmp 0x1400ba9de
mov rbx, r9
xor eax, eax
test al, al
je 0x1400baa29
jmp 0x1400baa61
mov ebp, 2
mov eax, dword [0x141dd1870]
imul eax, dword [0x141dd1874]
xor eax, 0x80203ec0
shr eax, 6
imul rax, rax, 0x2585c7
shr rax, 0x2f
or eax, 0x8f5077d8
cmp eax, 0xecdaa635
jbe 0x1400ba85b
mov rcx, rbp
mov rdx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], rbx
lea rcx, [rsp + 0x70]
call fcn.1400d9420
mov rax, qword [rsp + 0x78]
mov word [rax + rbx*2], 0
lea r13, [rsp + 0x70]
lea r12, [rbx + 1]
nop word cs:[rax + rax]
mov esi, dword [0x141dd1878]
and esi, dword [0x141dd187c]
or esi, 0x450d7cc0
add esi, 0xb33646ad
mov rcx, rbp
mov rdx, r14
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], rbx
mov rcx, r13
call fcn.1400d9420
mov rdi, qword [rsp + 0x78]
mov word [rdi + rbx*2], 0
cmp esi, 0xc5d395db
jb 0x1400ba870
mov rbx, qword [rsp + 0x70]
cmp qword [rsp + 0x48], 0
je 0x1400ba927
mov rcx, qword [0x141dd7fe0]
xor edx, edx
mov r8, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x40]
nop dword [rax]
mov eax, dword [0x141dd1880]
or eax, dword [0x141dd1884]
and eax, 0x4033ebe1
imul rax, rax, 0x2eafc44b
shr rax, 0x36
add eax, 0x3dfda4af
cmp eax, 0x99972585
ja 0x1400ba8f0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
jmp 0x1400ba7e6
mov rsi, qword [rsp + 0x40]
jmp 0x1400ba7e6
mov eax, dword [0x141dd17f0]
xor edx, edx
div dword [0x141dd17f4]
shr eax, 1
imul rax, rax, 0x2252da5d
shr rax, 0x38
imul eax, eax, 0x5224c883
add eax, 0x513ab315
cmp eax, 0x8d131cb
jae 0x1400ba960
ud2
mov eax, dword [0x141dd17f8]
xor edx, edx
div dword [0x141dd17fc]
and eax, 0x31c66000
add eax, 0x3f492d43
ud2
mov eax, dword [0x141dd18a8]
or eax, dword [0x141dd18ac]
imul eax, eax, 0x295a3ba0
or eax, 0xc0cbb012
imul eax, eax, 0x8dd9f6c2
cmp eax, 0xed53bdbc
jne 0x1400bab29
jmp 0x1400bab55
mov eax, dword [0x141dd17c0]
xor eax, dword [0x141dd17c4]
xor eax, 4
or eax, 0x5cf5db9a
and eax, 0xdefdffff
mov r8, qword [r9 + 8]
mov rcx, qword [0x141dd7fe0]
cmp eax, 0x34a368bd
jae 0x1400ba9e7
mov rax, qword [0x141dd7fe0]
jmp 0x1400ba9b3
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dd17c8]
xor eax, dword [0x141dd17cc]
imul eax, eax, 0xbb88bef0
add eax, 0x48076af0
or eax, 0x55d6baa6
cmp eax, 0x169a8a59
jb 0x1400ba9f0
add rsp, 0x498
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
mov eax, dword [0x141dd1888]
xor eax, dword [0x141dd188c]
imul rcx, rax, 0xcab4a1d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul eax, eax, 0x524fa4c
mov qword [rsi], rbx
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], r12
cmp eax, 0x85380e65
jne 0x1400baa6e
mov qword [rsi], rbx
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], r12
jmp 0x1400baa29
cmp qword [rsp + 0x28], 0
je 0x1400bab12
mov rsi, qword [rsp + 0x60]
mov eax, dword [0x141dd1890]
imul eax, dword [0x141dd1894]
add eax, 0x3806ecf2
xor eax, 0xa092011
or eax, 0x4584dce6
cmp eax, 0x99c815c8
ja 0x1400baace
mov eax, dword [0x141dd1898]
xor eax, dword [0x141dd189c]
imul edi, eax, 0x343200b3
mov rcx, qword [0x141dd7fe0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, 0x60e9147b
jae 0x1400baaf0
mov rcx, qword [0x141dd7fe0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400baaa2
mov eax, dword [0x141dd18a0]
and eax, dword [0x141dd18a4]
add eax, 0xc90f9652
xor eax, 0x90401a61
or eax, 0x4fa7a596
cmp eax, 0xdcafa7fb
ja 0x1400baaf0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400bab20
jmp 0x1400ba9f0
mov eax, dword [0x141dd18b0]
xor edx, edx
div dword [0x141dd18b4]
add eax, 0xfdf5e0bc
imul rax, rax, 0x31f478cb
shr rax, 0x3d
add eax, 0xbc147e53
ud2
ud2