Function at 0x1400ba3f0
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
mov r12, rdx
mov qword [rbp], rcx
mov eax, dword [0x141dd3a58]
add eax, dword [0x141dd3a5c]
or eax, 0x4a68d20
xor eax, 0x850440a0
or eax, 0x7859124d
cmp eax, 0x3e14dbd0
je 0x1400ba45e
mov eax, dword [0x141dd3a60]
add eax, dword [0x141dd3a64]
imul ecx, eax, 0xdc47fe1d
add ecx, 0x8bad2aa4
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
cmp ecx, 0x1cc8dad5
jae 0x1400ba46d
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
jmp 0x1400ba42e
mov eax, dword [0x141dd3a68]
imul eax, dword [0x141dd3a6c]
imul eax, eax, 0x6b3c41b1
xor eax, 0x5e0736a0
cmp eax, 0x44ab3012
jbe 0x1400ba4a6
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov eax, 0x400
call fcn.1400eeec0
sub rsp, rax
mov qword [rbp - 0x30], r8
mov qword [rbp - 0x40], rdx
nop
mov eax, dword [0x141dd3a70]
xor edx, edx
div dword [0x141dd3a74]
imul rax, rax, 0x716ff80f
shr rax, 0x3e
imul ecx, eax, 0x4a1bd712
add ecx, 0x767fe780
mov eax, 0x20
call fcn.1400eeec0
sub rsp, rax
mov rdx, rsp
mov eax, 0x400
call fcn.1400eeec0
sub rsp, rax
mov rax, rsp
cmp ecx, 0x9788b77b
ja 0x1400ba4b0
mov qword [rbp - 0x48], rax
mov qword [rdx], 0
mov qword [rdx + 8], 2
mov qword [rbp - 8], rdx
mov qword [rdx + 0x10], 0
mov r15d, 0x200
mov eax, 2
mov qword [rbp - 0x28], rax
xor eax, eax
mov qword [rbp - 0x10], rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
mov rbx, qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
xor eax, eax
mov qword [rbp - 0x18], rax
xor eax, eax
mov qword [rbp - 0x20], rax
nop dword [rax + rax]
mov eax, dword [0x141dd3a78]
or eax, dword [0x141dd3a7c]
or eax, 0x432ce162
add eax, 0x2025e67b
xor eax, 0x6104ac35
cmp eax, 0x1cc8a6ab
jb 0x1400ba550
cmp r15, 0x201
jae 0x1400ba590
mov eax, 0x200
mov qword [rbp - 0x38], rax
mov r13, qword [rbp - 0x48]
mov r14, r15
jmp 0x1400ba686
mov r13, qword [rbp - 0x20]
sub r15, r13
mov rax, qword [rbp - 0x18]
sub rax, r13
cmp r15, rax
mov r14, qword [rbp - 8]
jbe 0x1400ba65c
mov eax, dword [0x141dd3a80]
add eax, dword [0x141dd3a84]
imul eax, eax, 0x238c9f78
add eax, 0x697a94c0
imul rcx, rax, 0x163322bf
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0xce300dbd
je 0x1400ba745
mov esi, dword [0x141dd3a88]
and esi, dword [0x141dd3a8c]
or esi, 0x3d574def
and esi, 0x7df76dff
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r14
mov rdx, r13
mov r8, r15
call fcn.1400fce40
add rsp, 0x30
cmp esi, 0x33ff6635
je 0x1400ba5e1
nop word cs:[rax + rax]
mov eax, dword [0x141dd3a90]
xor eax, dword [0x141dd3a94]
xor eax, 0xe638a2a0
add eax, 0xafbeca0a
cmp eax, 0x5f1accd0
jbe 0x1400ba630
mov rax, qword [r14]
mov qword [rbp - 0x10], rax
mov rax, qword [r14 + 8]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x10]
mov ecx, 0xffffffff
cmp rax, rcx
cmovb rcx, rax
mov qword [r14 + 0x10], rcx
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x38], rcx
mov r13, qword [rbp - 0x28]
mov rax, rcx
mov qword [rbp - 0x20], rcx
mov r14, rcx
mov eax, dword [0x141dd3a98]
sub eax, dword [0x141dd3a9c]
or eax, 0x9d71a68f
imul rax, rax, 0x53633c83
shr rax, 0x3e
imul eax, eax, 0x62f40c4d
cmp eax, 0x35c49179
jae 0x1400ba6d0
sub rsp, 0x20
xor ecx, ecx
call rdi
mov rcx, r12
mov edx, r14d
mov r8, r13
xor r9d, r9d
call rbx
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dd3aa0]
xor edx, edx
div dword [0x141dd3aa4]
imul r15d, eax, 0xbc6e0c2
add r15d, 0x4752c97c
and r15d, 0x4921e710
sub rsp, 0x20
xor ecx, ecx
call rdi
mov rcx, r12
mov edx, r14d
mov r8, r13
xor r9d, r9d
call rbx
add rsp, 0x20
cmp r15d, 0x47e3c76c
ja 0x1400ba6d0
mov esi, eax
test eax, eax
jne 0x1400ba7ea
mov eax, dword [0x141dd3aa8]
and eax, dword [0x141dd3aac]
imul eax, eax, 0xd1e6d641
or eax, 0x525c6ff9
and eax, 0x73ff6ffb
cmp eax, 0xbee2127e
jbe 0x1400ba76f
jmp 0x1400ba799
sub rsp, 0x30
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, r14
mov rdx, r13
mov r8, r15
call fcn.1400fce40
add rsp, 0x30
jmp 0x1400ba5e1
mov eax, dword [0x141dd3ab0]
sub eax, dword [0x141dd3ab4]
imul r15d, eax, 0xf9337e62
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp r15d, 0xa506518c
jne 0x1400ba7a9
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
jmp 0x1400ba76f
mov ecx, eax
mov eax, dword [0x141dd3ab8]
xor edx, edx
div dword [0x141dd3abc]
nop dword [rax]
mov eax, dword [0x141dd3ac0]
xor eax, dword [0x141dd3ac4]
or eax, 0x829c567
add eax, 0x30eaa9d0
or eax, 0xe5658c76
cmp eax, 0x11996a54
je 0x1400ba7c0
test ecx, ecx
jne 0x1400baad6
mov r15d, esi
cmp r14, r15
jne 0x1400ba870
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, dword [0x141dd3b00]
or ecx, dword [0x141dd3b04]
or ecx, 0x8e84a643
add ecx, 0xc004faef
cmp ecx, 0xc6a2c875
ja 0x1400ba800
cmp eax, 0x7a
jne 0x1400baf57
lea rax, [r14 + r14]
mov ecx, dword [0x141dd3b10]
xor ecx, dword [0x141dd3b14]
add ecx, 0xea91ce1d
and ecx, 0x756f1cf4
cmp r14, 0x7fffffff
mov r15, rax
mov edx, 0xffffffff
cmova r15, rdx
cmp ecx, 0xd408c9a5
jae 0x1400ba82d
jmp 0x1400ba550
mov eax, dword [0x141dd3b08]
xor edx, edx
div dword [0x141dd3b0c]
cmp eax, 0xc3bba616
je 0x1400ba870
cmp r14, r15
jb 0x1400ba550
cmp qword [rbp - 0x38], r15
jb 0x1400bab4e
mov rax, qword [rbp - 0x30]
mov r14, qword [rax]
mov rdi, qword [rax + 8]
mov r12, qword [rax + 0x10]
lea rax, [r12 - 1]
nop dword [rax]
mov ecx, dword [0x141dd3b18]
sub ecx, dword [0x141dd3b1c]
add ecx, 0x4580667b
and ecx, 0x8ca906c0
cmp ecx, 0xb68469af
je 0x1400ba8b0
mov ecx, dword [0x141dd3b20]
xor ecx, dword [0x141dd3b24]
add ecx, 0x4a191cf0
xor ecx, 0x8fc29290
cmp ecx, 0xa6830601
ja 0x1400ba8d0
cmp rax, 4
jb 0x1400bab72
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400ba900
test r12, r12
je 0x1400baf57
lea rax, [r12 - 5]
mov ecx, 0x83a47943
nop word [rax + rax]
mov edx, dword [0x141dd3b40]
sub edx, dword [0x141dd3b44]
xor edx, 0x72fd61d9
add edx, 0x3c4073f9
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0x11004323
ja 0x1400ba920
nop dword [rax + rax]
mov ecx, dword [0x141dd3b48]
imul ecx, dword [0x141dd3b4c]
xor ecx, 0x410401
or ecx, 0x7fbc6ae6
cmp ecx, 0xb34a1781
ja 0x1400ba950
cmp rax, r15
jne 0x1400ba9a8
lea rdx, [rdi + 8]
lea rbx, [r15 + r15]
sub rsp, 0x20
mov rcx, r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
add rsp, 0x20
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400ba9a0
test eax, eax
je 0x1400baa20
mov rax, qword [rbp]
mov rdx, qword [rbp - 8]
mov qword [rax], r14
mov qword [rax + 8], rdi
mov qword [rax + 0x10], r12
cmp qword [rbp - 0x10], 0
je 0x1400ba9e0
mov r8, qword [rdx + 8]
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop dword [rax]
mov eax, dword [str.Wh_7]
imul eax, dword [0x141dd3bac]
cmp eax, 0xacd9e18d
je 0x1400ba9e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd3bb0]
or eax, dword [0x141dd3bb4]
imul eax, eax, 0x5d949915
cmp eax, 0xd5e857f4
je 0x1400baa00
jmp 0x1400bad1f
mov eax, dword [0x141dd3b50]
imul eax, dword [0x141dd3b54]
imul eax, eax, 0xcd94f975
add eax, 0xc0082330
imul rax, rax, 0x1cca4147
shr rax, 0x38
cmp eax, 0x9dd6fc42
ja 0x1400baa20
nop word [rax + rax]
mov eax, dword [0x141dd3b58]
xor edx, edx
div dword [0x141dd3b5c]
or eax, 0x6b9ea2f5
and eax, 0x6b9fa6ff
cmp eax, 0x9a9beed1
ja 0x1400baa50
nop
mov eax, dword [0x141dd3b60]
xor eax, dword [0x141dd3b64]
and eax, 0xf1026e73
imul eax, eax, 0x6a971f8e
add eax, 0x91cab2f5
cmp eax, 0xb307de2
jb 0x1400baa70
test esi, esi
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x20], r14
je 0x1400bab44
movzx eax, byte [0x141dda6b8]
mov eax, dword [0x141dd3b68]
xor eax, dword [0x141dd3b6c]
imul rax, rax, 0x312c820f
shr rax, 0x3d
add eax, 0x6eaba53d
cmp eax, 0x67618553
jae 0x1400baea2
jmp 0x1400baed2
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
shl rax, 0x20
or rax, 2
mov rcx, qword [rbp]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
cmp qword [rbp - 0x10], 0
mov rsi, qword [rbp - 0x30]
je 0x1400bac30
mov eax, dword [0x141dd3ac8]
sub eax, dword [0x141dd3acc]
add eax, 0xc7cb3828
xor eax, 0x9382896e
mov ecx, 0x87cbcc1d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xe7476ac4
jbe 0x1400babe4
jmp 0x1400bac09
mov esi, 2
jmp 0x1400bad30
ud2
mov eax, dword [0x141dd3b28]
xor eax, dword [0x141dd3b2c]
add eax, 0x4bc0b92
mov ecx, 0xbd70c689
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x4c2b675e
jbe 0x1400baba0
ud2
mov eax, dword [0x141dd3b30]
add eax, dword [0x141dd3b34]
and eax, 0x2e281c05
xor eax, 0xec7aebd5
ud2
mov eax, dword [0x141dd3ad0]
xor eax, dword [0x141dd3ad4]
imul eax, eax, 0x7ae6c5fe
xor eax, 0x31f6f1e3
mov rcx, qword [0x141dda6a0]
cmp eax, 0xe89ef620
jbe 0x1400bac12
mov rax, qword [0x141dda6a0]
jmp 0x1400babe4
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd3ad8]
xor edx, edx
div dword [0x141dd3adc]
imul eax, eax, 0xd5ae3ee6
add eax, 0xb06ad83e
cmp eax, 0xec9d612d
ja 0x1400bac30
mov eax, dword [0x141dd3ae0]
xor edx, edx
div dword [0x141dd3ae4]
or eax, 0xa0802278
and eax, 0xa0812b78
cmp eax, 0x14b209c5
je 0x1400bac50
cmp qword [rsi], 0
je 0x1400bad1f
nop dword [rax]
mov eax, dword [0x141dd3ae8]
or eax, dword [0x141dd3aec]
or eax, 0x12001354
and eax, 0x131d375d
add eax, 0x5fa2693b
cmp eax, 0xa11944d1
ja 0x1400bac80
mov eax, dword [0x141dd3af0]
or eax, dword [0x141dd3af4]
mov rsi, qword [rsi + 8]
and eax, 0xe2d3824f
xor eax, 0xc685b3d0
cmp eax, 0xc3f37af6
jb 0x1400bad03
mov edi, dword [0x141dd3af8]
and edi, dword [0x141dd3afc]
or edi, 0x10b12a92
add edi, 0x70eb82f8
or edi, 0xe12f8840
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0xf702c35b
jne 0x1400bad1f
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x1400bacc3
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dd3b88]
and eax, dword [0x141dd3b8c]
and eax, 0x58c4ed60
add eax, 0xaba9dce2
xor eax, 0xf94b6a1e
cmp eax, 0x54aa047
mov r14, qword [rbp - 0x40]
jb 0x1400badb2
mov edi, dword [0x141dd3b90]
add edi, dword [0x141dd3b94]
and edi, 0x1091c800
xor edi, 0x10040894
sub rsp, 0x20
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r14], r15
mov qword [r14 + 8], rsi
mov qword [r14 + 0x10], r15
sub rsp, 0x20
mov rcx, r14
call fcn.1400da400
add rsp, 0x20
mov r12, qword [r14 + 8]
mov word [r12 + r15*2], 0
cmp edi, 0x56bb74b6
jbe 0x1400badf3
sub rsp, 0x20
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rsp, 0x20
mov qword [r14], r15
mov qword [r14 + 8], rsi
mov qword [r14 + 0x10], r15
sub rsp, 0x20
mov rcx, r14
call fcn.1400da400
add rsp, 0x20
mov rax, qword [r14 + 8]
mov word [rax + r15*2], 0
jmp 0x1400bad56
inc r15
mov rsi, qword [r14]
cmp qword [rbp - 0x20], 0
je 0x1400bae94
mov rcx, qword [0x141dda6a0]
sub rsp, 0x20
xor edx, edx
mov r8, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rdx, qword [rbp - 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd3b98]
add eax, dword [0x141dd3b9c]
and eax, 0x6280118
cmp eax, 0xa60bc86d
je 0x1400bae30
mov rax, qword [rdx]
mov qword [rbp - 0x10], rax
mov eax, 0xaf01cec3
nop word cs:[rax + rax]
mov ecx, dword [0x141dd3ba0]
xor ecx, dword [0x141dd3ba4]
or ecx, 0xf4f6e357
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x634619a
je 0x1400bae60
mov r14, rsi
mov rdi, r12
mov r12, r15
mov rax, qword [rbp]
jmp 0x1400ba9b0
mov r14, rsi
mov rdi, r12
mov r12, r15
jmp 0x1400ba9a8
mov r12d, dword [0x141dd3b70]
or r12d, dword [0x141dd3b74]
or r12d, 0xfd1eb107
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400bf230
add rsp, 0x20
cmp r12d, 0xb2df5d57
jne 0x1400baee6
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.1400bf230
add rsp, 0x20
jmp 0x1400baea2
mov rsi, rax
test rax, rax
jne 0x1400bad30
mov eax, dword [0x141dd3b78]
sub eax, dword [0x141dd3b7c]
and eax, 0xd0001e7a
imul rax, rax, 0x5c69156f
shr rax, 0x3d
xor eax, 0x3face232
cmp eax, 0x9dbec3b6
ja 0x1400baf53
mov eax, dword [0x141dd3b80]
xor eax, dword [0x141dd3b84]
imul rcx, rax, 0x3133c153
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
or eax, 0xade0052d
imul rax, rax, 0x2296402f
shr rax, 0x3a
ud2
ud2
ud2