Function at 0x140002060
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x140049040]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rbx, rdx
mov rsi, rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdx
xor r13d, r13d
mov dword [rsp + 0x48], r13d
mov rcx, rdx
cmp qword [rdx + 0x18], 0xf
jbe 0x1400020ab
mov rcx, qword [rdx]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
xorps xmm0, xmm0
test eax, eax
jne 0x14000216b
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r13
xor r8d, r8d
lea rdx, [0x140042700]
mov rcx, rsi
call fcn.140002ae0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140002131
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000212c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000239f
mov rcx, r8
call fcn.14000e100
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], r13
mov rax, rsi
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.14000e0e0
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r14d, dword [rsp + 0x48]
movdqu xmmword [rsp + 0x58], xmm0
mov rbp, r13
mov qword [rsp + 0x68], r13
test r14, r14
je 0x1400021e5
cmp r14, 0x1000
jb 0x1400021b5
lea rcx, [r14 + 0x27]
cmp rcx, r14
jbe 0x1400023a5
call fcn.14000e108
test rax, rax
je 0x140002399
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400021c0
mov rcx, r14
call fcn.14000e108
mov rdi, rax
mov qword [rsp + 0x58], rdi
lea rbp, [rdi + r14]
mov qword [rsp + 0x68], rbp
mov r8, r14
xor edx, edx
mov rcx, rdi
call fcn.140035500
mov r15, rbp
mov qword [rsp + 0x60], rbp
jmp 0x1400021ef
mov r15, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400021fc
mov rcx, qword [rbx]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, rdi
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r13
test eax, eax
jne 0x140002285
mov qword [rsi + 0x18], r13
xor r8d, r8d
lea rdx, [0x140042700]
mov rcx, rsi
call fcn.140002ae0
nop
test rdi, rdi
je 0x1400020f7
sub rbp, rdi
mov rax, rdi
cmp rbp, 0x1000
jb 0x140002275
add rbp, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002399
mov rdx, rbp
mov rcx, rdi
call fcn.14000e100
jmp 0x1400020f7
mov qword [rsi + 0x18], 0xf
cmp rdi, r15
jne 0x14000229a
mov byte [rsi], 0
jmp 0x140002357
sub r15, rdi
movabs rax, 0x7fffffffffffffff
cmp r15, rax
ja 0x1400023ab
mov r14d, 0xf
cmp r15, r14
jbe 0x140002334
mov r14, r15
or r14, 0xf
cmp r14, rax
jbe 0x1400022fa
mov r14, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000e108
mov rcx, rax
test rax, rax
je 0x14000238d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000232d
mov eax, 0x16
cmp r14, rax
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x14000231e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002393
jmp 0x1400022d8
test rcx, rcx
je 0x14000232a
call fcn.14000e108
jmp 0x14000232d
mov rax, r13
mov qword [rsi], rax
mov qword [rsi + 0x18], r14
mov r12, rsi
cmp r14, 0xf
jbe 0x140002340
mov r12, qword [rsi]
mov r8, r15
mov rdx, rdi
mov rcx, r12
call fcn.140034e60
mov qword [rsi + 0x10], r15
mov byte [r12 + r15], 0
test rdi, rdi
je 0x1400020f7
sub rbp, rdi
mov rax, rdi
cmp rbp, 0x1000
jb 0x140002275
add rbp, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002399
jmp 0x140002275
call fcn.140014fe0
int3
call fcn.1400014c0
nop
call fcn.140014fe0
nop
call fcn.140014fe0
nop
call fcn.1400014c0
nop
call fcn.140001560
int3