Function at 0x140002040
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x14004d020]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rsi, rdx
mov rbx, rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdx
xor r12d, r12d
mov dword [rsp + 0x48], r12d
mov rcx, rdx
cmp qword [rdx + 0x18], 0x10
jb 0x14000208d
mov rcx, qword [rdx]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
jne 0x14000214f
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r12b
xor r8d, r8d
lea rdx, [0x14004693b]
mov rcx, rbx
call fcn.1400024f0
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140002114
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000210f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140002323
mov rcx, r8
call fcn.14000dde4
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rax, rbx
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.14000ddc0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
xorps xmm0, xmm0
mov r14d, dword [rsp + 0x48]
movdqu xmmword [rsp + 0x58], xmm0
mov rbp, r12
mov qword [rsp + 0x68], r12
mov rdi, r12
test r14, r14
je 0x1400021d2
cmp r14, 0x1000
jb 0x14000219f
lea rcx, [r14 + 0x27]
cmp rcx, r14
jbe 0x140002329
call fcn.14000ddec
test rax, rax
je 0x14000231d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400021aa
mov rcx, r14
call fcn.14000ddec
mov rdi, rax
mov r15, rdi
mov qword [rsp + 0x58], rdi
lea rbp, [rdi + r14]
mov qword [rsp + 0x68], rbp
mov r8, r14
xor edx, edx
mov rcx, rdi
call fcn.140010570
mov r14, rbp
mov qword [rsp + 0x60], rbp
jmp 0x1400021dc
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
mov rcx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1400021e9
mov rcx, qword [rsi]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, r15
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
test eax, eax
jne 0x140002273
xor r8d, r8d
lea rdx, [0x14004693b]
mov rcx, rbx
call fcn.1400024f0
nop
test rdi, rdi
je 0x1400020da
sub rbp, rdi
cmp rbp, 0x1000
jb 0x140002263
add rbp, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x14000231d
mov rdi, rcx
mov rcx, rdi
mov rdx, rbp
call fcn.14000dde4
jmp 0x1400020da
mov rdx, r14
sub rdx, r15
cmp rdx, 0xf
jbe 0x14000228b
mov rcx, rbx
call fcn.140003100
mov qword [rbx + 0x10], r12
mov rdi, r15
mov qword [rsp + 0x40], rbx
cmp r15, r14
je 0x1400022e0
nop dword [rax + rax]
movzx r9d, byte [rdi]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x1400022d0
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x1400022c5
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400022d8
mov rcx, rbx
call fcn.1400032c0
inc rdi
cmp rdi, r14
jne 0x1400022a0
test r15, r15
je 0x1400020da
sub rbp, r15
mov rax, r15
cmp rbp, 0x1000
jb 0x14000230d
add rbp, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000231d
mov rcx, r15
mov rdx, rbp
call fcn.14000dde4
jmp 0x1400020da
call fcn.140014558
nop
call fcn.140014558
nop
call fcn.140001440
int3