Function at 0x1400b8110
Capabilities:
Create thread
Encode data using base64
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rbx, r8
mov r14, rdx
mov rdi, rcx
mov eax, dword [0x141dd47d8]
and eax, dword [0x141dd47dc]
imul eax, eax, 0x8bf99b2f
cmp eax, 0x471727a7
jne 0x1400b8150
movzx eax, byte [0x141ddb9b8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd47e0]
and eax, dword [0x141dd47e4]
imul eax, eax, 0x4d2f7c74
movzx ecx, byte [0x141ddb9b8]
cmp eax, 0xbde1b326
je 0x1400b8150
mov edx, 0x10
xor ecx, ecx
call fcn.1400bf820
mov rsi, rax
nop
mov eax, dword [0x141dd47e8]
sub eax, dword [0x141dd47ec]
imul eax, eax, 0xe63b7341
add eax, 0x9d8675e0
and eax, 0x97550821
cmp eax, 0xe22316bc
ja 0x1400b8180
test rsi, rsi
je 0x1400b82da
mov qword [rsi], r14
mov qword [rsi + 8], rbx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
lea r8, [0x1400b8f40]
xor ecx, ecx
mov rdx, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
nop dword [rax]
mov eax, dword [0x141dd47f0]
and eax, dword [0x141dd47f4]
imul eax, eax, 0x1f3f82f1
xor eax, 0xbd224934
imul eax, eax, 0xcdd5906a
cmp eax, 0x31146d4b
je 0x1400b81e0
test rcx, rcx
je 0x1400b8211
xor r8d, r8d
jmp 0x1400b84a6
mov eax, 0x9a22839d
nop word cs:[rax + rax]
mov ecx, dword [0x141dd47f8]
xor ecx, dword [0x141dd47fc]
add ecx, 0x7a665fb6
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xab5ff94
ja 0x1400b8220
mov rdi, qword [rsi]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4800]
and eax, dword [0x141dd4804]
and eax, 0x24a8058a
add eax, 0x8b140664
cmp eax, 0x4f4edda8
jb 0x1400b8250
mov rbx, qword [rsi + 8]
mov r14, qword [rbx]
mov eax, 0x8eea895b
nop dword [rax]
mov ecx, dword [0x141dd4808]
and ecx, dword [0x141dd480c]
imul rcx, rax
shr rcx, 0x3d
add ecx, 0x5ddb486b
imul rcx, rcx, 0xab88e3
shr rcx, 0x35
cmp ecx, 0xd96fe2cb
ja 0x1400b8280
test r14, r14
je 0x1400b8336
mov eax, dword [0x141dd4810]
add eax, dword [str.2U_rt]
and eax, 0x6d5102d5
add eax, 0xdfd399b6
or eax, 0x42cb52e4
cmp eax, 0x4dc77d3
jne 0x1400b82dc
jmp 0x1400b8308
ud2
mov ebp, dword [0x141dd4818]
and ebp, dword [0x141dd481c]
add ebp, 0x85ef843c
xor ebp, 0x5db931ed
add ebp, 0xc865034
mov rcx, rdi
call r14
cmp ebp, 0x66649cf6
jae 0x1400b8310
mov rcx, rdi
call r14
jmp 0x1400b82dc
mov eax, dword [0x141dd4820]
xor edx, edx
div dword [0x141dd4824]
imul eax, eax, 0xa9d04f6a
xor eax, 0xb9aa9359
imul eax, eax, 0x769ab06c
cmp eax, 0x228e0c00
jb 0x1400b8310
cmp qword [rbx + 8], 0
je 0x1400b83fe
mov rcx, qword [rbx + 0x10]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4828]
xor edx, edx
div dword [0x141dd482c]
shr eax, 2
imul rax, rax, 0x23372d8d
shr rax, 0x38
or eax, 0x5f17ddc8
add eax, 0x8acc9619
cmp eax, 0xfc78b975
ja 0x1400b8350
cmp rcx, 0x11
jb 0x1400b8387
mov rdi, qword [rdi - 8]
mov eax, dword [0x141dd4830]
xor eax, dword [0x141dd4834]
or eax, 0x4ca5ffd7
imul rax, rax, 0xbbf66c1
shr rax, 0x39
or eax, 0x78630678
cmp eax, 0xa8774fcd
je 0x1400b83ea
mov eax, dword [0x141dd4838]
or eax, dword [0x141dd483c]
or eax, 0x2cb06b7a
add eax, 0x7f7fa722
imul rbx, rax, 0x7b5bf173
shr rbx, 0x3e
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0xe921e30d
jne 0x1400b83fe
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400b83af
mov eax, dword [0x141dd4840]
or eax, dword [0x141dd4844]
imul eax, eax, 0x75d8af6a
or eax, 0x54ac28e0
cmp eax, 0x733b4d1
jne 0x1400b8430
mov rax, qword [0x141ddb9a0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4848]
and eax, dword [0x141dd484c]
and eax, 0x78a0a66b
xor eax, 0x1b512686
imul rax, rax, 0x590259e9
shr rax, 0x3b
mov rcx, qword [0x141ddb9a0]
cmp eax, 0xec5abe75
je 0x1400b8430
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
shl rcx, 0x20
or rcx, 2
nop word [rax + rax]
mov eax, dword [0x141dd4850]
xor edx, edx
div dword [0x141dd4854]
imul eax, eax, 0xd28363ff
xor eax, 0x9ed743c3
cmp eax, 0x94c6cf7
jb 0x1400b8480
mov r8d, 1
mov eax, dword [0x141dd4858]
xor edx, edx
div dword [0x141dd485c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4860]
or eax, dword [0x141dd4864]
and eax, 0x54592b64
imul rax, rax, 0x23004611
shr rax, 0x38
xor eax, 0x78121d69
cmp eax, 0xa31a1d32
ja 0x1400b84c0
mov rax, r8
mov rdx, rcx
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret