Function at 0x1400a0320
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c8
mov ebp, r9d
mov rdi, r8
mov r14, rdx
mov rsi, rcx
movabs rax, 0x700000000
mov qword [rsp + 0x34], rax
mov word [rsp + 0x44], 0
mov qword [rsp + 0x3c], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
mov eax, r9d
or eax, 0x2000000
mov dword [rsp + 0x30], eax
lea r8, [rsp + 0x20]
mov rcx, rdx
mov rdx, rdi
call fcn.140095270
mov rbx, rdx
mov ecx, 0xb63bd5cb
mov edx, 0x9cefac37
nop dword [rax]
mov r8d, dword [0x141dd4758]
xor r8d, dword [0x141dd475c]
imul r8, rcx
shr r8, 0x3f
imul r8d, r8d, 0xecaab56b
imul r8, rdx
shr r8, 0x3f
cmp r8d, 0x10ca57dc
ja 0x1400a03a0
test rax, rax
je 0x1400a0598
nop word [rax + rax]
mov eax, dword [0x141dd4780]
xor eax, dword [0x141dd4784]
imul eax, eax, 0x3bd03b6
shr eax, 4
imul rax, rax, 0x14050d35
shr rax, 0x38
imul eax, eax, 0x7e788241
cmp eax, 0x6806f562
je 0x1400a03e0
xor eax, eax
nop
test al, al
jne 0x1400a0410
nop word cs:[rax + rax]
mov eax, dword [0x141dd4788]
xor edx, edx
div dword [0x141dd478c]
and eax, 0x14e74d39
imul eax, eax, 0xd9772aec
add eax, 0x46a1dcb4
cmp eax, 0xa8033393
ja 0x1400a0420
mov eax, ebx
and eax, 3
cmp eax, 2
jb 0x1400a05d4
cmp eax, 2
jne 0x1400a05a7
mov rcx, rbx
shr rcx, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd47a0]
xor edx, edx
div dword [0x141dd47a4]
and eax, 0x8f9e0490
imul eax, eax, 0xd1a09d6d
cmp eax, 0x93432ef0
je 0x1400a0470
mov eax, dword [0x141dd47a8]
and eax, dword [0x141dd47ac]
xor eax, 0xd7bd9383
add eax, 0xd0140ef
cmp eax, 0x834185ac
jb 0x1400a0490
nop dword [rax]
mov eax, dword [0x141dd47b0]
add eax, dword [0x141dd47b4]
imul rax, rax, 0x55c28f97
shr rax, 0x3d
add eax, 0xe0ea0c65
cmp eax, 0xa041bd33
jb 0x1400a04b0
cmp ecx, 5
je 0x1400a04e1
cmp ecx, 0x20
jne 0x1400a05d4
movabs r12, 0x8000000000000000
lea rcx, [rsp + 0x48]
mov rdx, r14
mov r8, rdi
call fcn.140093550
mov rcx, qword [rsp + 0x48]
mov eax, dword [0x141dd47c0]
xor edx, edx
div dword [0x141dd47c4]
add eax, 0xc56100eb
and eax, 0xe3f903b2
imul eax, eax, 0xae46409e
cmp eax, 0xf40467a0
ja 0x1400a0500
mov rdi, qword [rsp + 0x50]
nop word [rax + rax]
mov eax, dword [0x141dd47c8]
and eax, dword [0x141dd47cc]
xor eax, 0x1d9f2b0
shr eax, 3
imul rax, rax, 0xd22f46b
shr rax, 0x35
xor eax, 0x620193a
cmp eax, 0xe5fdf7c9
ja 0x1400a0530
cmp rcx, r12
jne 0x1400a061e
nop word cs:[rax + rax]
mov eax, dword [0x141dd47d0]
sub eax, dword [0x141dd47d4]
imul eax, eax, 0x357862f1
xor eax, 0x81804330
or eax, 0x747d9841
cmp eax, 0x59252326
je 0x1400a0570
jmp 0x1400a0659
xor eax, eax
test al, al
je 0x1400a0ad7
jmp 0x1400a0b0b
cmp eax, 3
jne 0x1400a05fe
nop dword [rax]
mov eax, dword [0x141dd4798]
or eax, dword [0x141dd479c]
or eax, 0x10609818
and eax, 0x306d991a
cmp eax, 0x15129776
jb 0x1400a05b0
xor eax, eax
nop
test al, al
jne 0x1400a05d0
mov eax, dword [0x141dd47b8]
xor eax, dword [0x141dd47bc]
mov qword [rsi + 8], rbx
xor eax, 0xc0000841
or eax, 0x3bdbf79c
cmp eax, 0x1fc06223
jae 0x1400a0b9e
jmp 0x1400a0baf
mov eax, dword [0x141dd4790]
or eax, dword [0x141dd4794]
imul eax, eax, 0x9ab86541
add eax, 0x51d573fc
cmp eax, 0xd97be923
ja 0x1400a05fe
ud2
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], rax
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x78]
mov r8b, 1
call fcn.140096720
mov r15, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
cmp r15, r12
jne 0x1400a06d0
mov eax, dword [0x141dd47f8]
add eax, dword [0x141dd47fc]
imul eax, eax, 0x9e9f7640
add eax, 0x45842701
cmp eax, 0x92e02b9e
jae 0x1400a0690
mov qword [rsi + 8], rdi
mov qword [rsi], 2
nop word cs:[rax + rax]
mov eax, dword [0x141dd4800]
imul eax, dword [0x141dd4804]
or eax, 0xa9d640a7
imul eax, eax, 0xbc9b4c49
add eax, 0x2a5f992f
mov qword [rsi + 8], rdi
mov qword [rsi], 2
cmp eax, 0x246d274b
jbe 0x1400a0690
jmp 0x1400a0cb0
mov eax, dword [0x141dd47d8]
add eax, dword [0x141dd47dc]
xor eax, 0x82220400
and eax, 0xce620c54
cmp eax, 0x2e519b80
jb 0x1400a06d0
mov eax, dword [0x141dd47e0]
xor eax, dword [0x141dd47e4]
add eax, 0xbd18e5eb
cmp eax, 0x3f69b8ad
jae 0x1400a0717
lea rcx, [rsp + 0x78]
mov r8d, 0x250
xor edx, edx
call sub.VCRUNTIME140.dll_memset
xor r12d, r12d
lea r14, [rsp + 0x78]
nop
mov r8d, 0x250
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
test r12b, r12b
jne 0x1400a0720
mov eax, dword [0x141dd47e8]
imul eax, dword [0x141dd47ec]
and eax, 0x4212d441
add eax, 0xba259620
cmp eax, 0x36468724
jae 0x1400a0761
lea rdx, [rsp + 0x78]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea r14, [rsp + 0x78]
mov r12, qword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop dword [rax]
mov eax, dword [0x141dd47f0]
and eax, dword [0x141dd47f4]
add eax, 0xcd7de6de
and eax, 0xa1dd8cc0
imul r13, rax, 0x7512a61f
shr r13, 0x3e
mov rcx, rdi
mov rdx, r14
call r12
cmp r13d, 0x8b9c6f6c
ja 0x1400a0770
cmp rax, 0xffffffffffffffff
je 0x1400a0aac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [rsp + 0x78]
movups xmm0, xmmword [rsp + 0x7c]
movsd xmm1, qword [rsp + 0x8c]
nop dword [rax + rax]
mov ecx, dword [0x141dd4808]
sub ecx, dword [0x141dd480c]
and ecx, 0x50000580
xor ecx, 0x83d2e909
cmp ecx, 0x6aa3c782
jb 0x1400a07d0
mov edx, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x98]
mov ecx, eax
shl ecx, 0x15
sar ecx, 0x1f
and ecx, dword [rsp + 0x9c]
test ebp, ebp
jne 0x1400a09b0
mov r9d, 0xbe0e0c51
mov r10d, dword [0x141dd4838]
and r10d, dword [0x141dd483c]
or r10d, 0x1c612877
imul r10, r9
shr r10, 0x3f
cmp r10d, 0xeb0b9fa0
je 0x1400a081c
mov r10d, ecx
shr r10d, 0x1d
mov r9d, eax
shr r9d, 0xa
and r9d, r10d
and r9d, 1
mov r10d, dword [0x141dd4840]
add r10d, dword [0x141dd4844]
imul r10d, r10d, 0x4147c0b4
cmp r10d, 0x72f3b57
je 0x1400a0857
test r9b, r9b
je 0x1400a09b0
mov eax, dword [0x141dd4860]
or eax, dword [0x141dd4864]
imul eax, eax, 0x10fb5e66
or eax, 0xd25175de
xor eax, 0x837d56f2
cmp eax, 0xc0d78380
jbe 0x1400a08ac
mov qword [rsi + 8], rbx
mov qword [rsi], 2
mov eax, dword [0x141dd4868]
imul eax, dword [0x141dd486c]
or eax, 0x6b001408
xor eax, 0x2b085f28
or eax, 0x90b3a096
mov qword [rsi + 8], rbx
mov qword [rsi], 2
cmp eax, 0xc4d1e043
jb 0x1400a08ac
mov eax, dword [0x141dd4870]
imul eax, dword [0x141dd4874]
or eax, 0x513949fb
xor eax, 0xb23ae648
imul rcx, rax, 0x1469ee2d
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
cmp eax, 0x6d40e7ae
ja 0x1400a08da
mov eax, dword [0x141dd4878]
xor edx, edx
div dword [0x141dd487c]
and eax, 0xc4e5595b
imul eax, eax, 0x66bb8c00
cmp eax, 0xb75680c6
je 0x1400a090c
test r15, r15
je 0x1400a0cb0
mov eax, dword [0x141dd4880]
sub eax, dword [0x141dd4884]
xor eax, 0x1040202
and eax, 0x89062202
cmp eax, 0x4ca7214c
jbe 0x1400a0959
mov rax, qword [0x141dde6e0]
mov eax, dword [0x141dd4888]
add eax, dword [0x141dd488c]
imul eax, eax, 0xc4c883e9
or eax, 0x4a2c83d5
xor eax, 0x4f0be9d4
mov rsi, qword [0x141dde6e0]
cmp eax, 0x28eef82b
jb 0x1400a0959
mov eax, dword [0x141dd4890]
imul eax, dword [0x141dd4894]
imul rax, rax, 0xec8e55f
shr rax, 0x3b
or eax, 0x95dc3602
cmp eax, 0x3b7fac1d
jae 0x1400a0c7b
jmp 0x1400a0c9d
shl rdx, 0x20
or rdx, r8
mov qword [rsi], 0
mov dword [rsi + 0x10], 0
mov dword [rsi + 0x18], 0
movups xmmword [rsi + 0x20], xmm0
movlps qword [rsi + 0x30], xmm1
mov qword [rsi + 0x38], rdx
mov dword [rsi + 0x40], 0
mov dword [rsi + 0x4c], eax
mov dword [rsi + 0x50], ecx
test r15, r15
je 0x1400a0cb0
xor eax, eax
test al, al
je 0x1400a0a00
mov rax, qword [0x141dde6e0]
nop dword [rax + rax]
mov eax, dword [0x141dd4848]
add eax, dword [0x141dd484c]
xor eax, 0xbf3e03f2
add eax, 0x4974c26c
mov rsi, qword [0x141dde6e0]
cmp eax, 0x2107b25f
jb 0x1400a0a00
mov eax, dword [0x141dd4850]
xor edx, edx
div dword [0x141dd4854]
and eax, 0x30c00582
xor eax, 0x30006180
or eax, 0x833f8279
cmp eax, 0x17057c5e
jae 0x1400a0a56
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd4858]
xor edx, edx
div dword [0x141dd485c]
imul r14d, eax, 0xec7c509e
add r14d, 0x1e919cca
imul rax, r14, 0x2c48e56b
shr rax, 0x20
sub r14d, eax
shr r14d, 1
add r14d, eax
shr r14d, 0x1e
mov rcx, rsi
xor edx, edx
mov r8, rdi
call rbx
cmp r14d, 0x71bd1d96
ja 0x1400a0a60
jmp 0x1400a0cb0
mov eax, dword [0x141dd4810]
xor eax, dword [0x141dd4814]
or eax, 0xedea7a37
add eax, 0x9289d028
xor eax, 0x6c3b3521
cmp eax, 0xd0692499
jae 0x1400a0bb8
jmp 0x1400a0be0
mov eax, dword [0x141dd4760]
or eax, dword [0x141dd4764]
and eax, 0x3e768edc
add eax, 0x1df93d38
imul rdi, rax, 0x5de0c45
shr rdi, 0x37
mov rcx, rsi
mov rdx, rbx
call fcn.140095e70
cmp edi, 0x4d38580c
jbe 0x1400a0b18
mov rcx, rsi
mov rdx, rbx
call fcn.140095e70
jmp 0x1400a0ad7
mov eax, dword [0x141dd4768]
imul eax, dword [0x141dd476c]
xor eax, 0x1450206
or eax, 0x5c90f5d9
imul eax, eax, 0x859b0369
cmp eax, 0xafa8f97d
je 0x1400a0b65
mov esi, dword [0x141dd4770]
or esi, dword [0x141dd4774]
and esi, 0xb498f771
add esi, 0xea2a6cd2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0xb2c7f168
jbe 0x1400a0b70
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400a0b3c
mov eax, dword [0x141dd4778]
sub eax, dword [0x141dd477c]
imul eax, eax, 0xd410ff72
add eax, 0x60dc28d7
imul rax, rax, 0x6fb84ed
shr rax, 0x38
cmp eax, 0x38417c5a
ja 0x1400a0b70
jmp 0x1400a0cb0
mov qword [rsi], 2
mov al, 1
test al, al
jne 0x1400a0cb0
mov qword [rsi], 2
jmp 0x1400a0b9e
mov eax, dword [0x141dd4818]
mov ecx, dword [0x141dd481c]
add eax, ecx
add eax, 0x7fc18c97
xor eax, 0x2e81632e
add eax, 0xec31e0cd
mov qword [rsi + 8], rbx
cmp eax, 0xb25404a4
jae 0x1400a0be6
mov qword [rsi + 8], rbx
jmp 0x1400a0bb8
mov qword [rsi], 2
test r15, r15
je 0x1400a0cb0
mov eax, dword [0x141dd4820]
and eax, dword [0x141dd4824]
or eax, 0xc5b227b0
shr eax, 2
imul rax, rax, 0x433702a3
shr rax, 0x38
add eax, 0xd43247fb
cmp eax, 0x3436c08
jae 0x1400a0c28
mov rax, qword [0x141dde6e0]
mov eax, dword [0x141dd4828]
and eax, dword [0x141dd482c]
add eax, 0x6c6cb5cf
xor eax, 0x38895f2b
mov rcx, qword [0x141dde6e0]
cmp eax, 0x2bad76d1
jb 0x1400a0c28
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd4830]
or eax, dword [0x141dd4834]
xor eax, 0xa0844044
or eax, 0x5f7915b8
add eax, 0x6c65d0c7
cmp eax, 0x3e498cbf
jb 0x1400a0c57
jmp 0x1400a0cb0
mov ebx, dword [0x141dd4898]
add ebx, dword [0x141dd489c]
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0x96042952
jne 0x1400a0cb0
mov rcx, rsi
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400a0c7b
mov eax, dword [0x141dd48a0]
and eax, dword [0x141dd48a4]
imul eax, eax, 0xc7e446c9
or eax, 0xb2e4fe7e
cmp eax, 0x9d9cafa3
je 0x1400a0cb0
add rsp, 0x2c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret