Function at 0x140001740
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov rax, qword [0x14000a010]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rbx, rdx
mov r12, rcx
mov qword [rbp - 0x41], rcx
xor r13d, r13d
mov dword [rbp - 0x41], r13d
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x140001788
mov rcx, qword [rdx]
lea r15, [rdx + 0x10]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, dword [r15]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
xorps xmm0, xmm0
mov esi, dword [rbp - 0x41]
movdqu xmmword [rbp - 0x19], xmm0
mov r14, r13
mov qword [rbp - 9], r13
test rsi, rsi
je 0x140001825
cmp rsi, 0x1000
jb 0x1400017f8
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x140001b2a
call fcn.140004720
test rax, rax
je 0x140001ae8
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001803
mov rcx, rsi
call fcn.140004720
mov rdi, rax
mov qword [rbp - 0x19], rdi
lea r14, [rdi + rsi]
mov qword [rbp - 9], r14
mov r8, rsi
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
mov rsi, r14
mov qword [rbp - 0x11], r14
jmp 0x14000182d
mov rsi, qword [rbp - 0x11]
mov rdi, qword [rbp - 0x19]
cmp qword [rbx + 0x18], 8
jb 0x140001837
mov rbx, qword [rbx]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8d, 1
mov edx, dword [r15]
mov rcx, rbx
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp - 0x39]
call fcn.140003bd0
nop
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x61]
call fcn.140001570
mov rbx, rax
lea rax, [rbp - 0x39]
cmp rax, rbx
je 0x1400018f5
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400018c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000192c
call fcn.14000475c
movdqa xmm0, xmmword [0x140006a80]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r13w
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x29], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 7
mov word [rbx], r13w
mov rdx, qword [rbp - 0x49]
cmp rdx, 8
jb 0x140001938
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001933
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001933
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000475c
mov dword [rbp - 0x41], r13d
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8d, [r9 + 1]
mov edx, dword [rbp - 0x29]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
xorps xmm0, xmm0
mov r15d, dword [rbp - 0x41]
movdqu xmmword [rbp - 1], xmm0
mov rsi, r13
mov qword [rbp + 0xf], r13
test r15, r15
je 0x1400019e4
cmp r15, 0x1000
jb 0x1400019b7
lea rcx, [r15 + 0x27]
cmp rcx, r15
jbe 0x140001b24
call fcn.140004720
test rax, rax
je 0x140001a57
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400019c2
mov rcx, r15
call fcn.140004720
mov rbx, rax
mov qword [rbp - 1], rbx
lea rsi, [rbx + r15]
mov qword [rbp + 0xf], rsi
mov r8, r15
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov r15, rsi
mov qword [rbp + 7], rsi
jmp 0x1400019ec
mov r15, qword [rbp + 7]
mov rbx, qword [rbp - 1]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov r8d, 1
mov edx, dword [rbp - 0x29]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
mov r8, r15
mov rdx, rbx
mov rcx, r12
call fcn.140003bd0
nop
test rbx, rbx
je 0x140001a6a
sub rsi, rbx
mov rax, rbx
cmp rsi, 0x1000
jb 0x140001a5e
add rsi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rsi
mov rcx, rbx
call fcn.14000475c
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x140001aad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001aa8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001aa8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000475c
movdqa xmm0, xmmword [0x140006a80]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r13w
test rdi, rdi
je 0x140001afa
sub r14, rdi
mov rax, rdi
cmp r14, 0x1000
jb 0x140001aef
add r14, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001aef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r14
mov rcx, rdi
call fcn.14000475c
mov rax, r12
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140004700
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001110
nop
call fcn.140001110
int3