Function at 0x426800
Capabilities:
Encode data using base64
Hash data using murmur3
Run powershell expression

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x18]
jbe 0x427016
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
mov byte [rsp + 0xa8], cl
mov byte [rsp + 0xa9], dil
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rbx
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0xa0]
mov qword [rsp + 0x80], rdx
nop dword [rax + rax]
test rdx, rdx
je 0x426942
cmp rbx, 0x10
jae 0x426942
cmp qword [rdx + 0x50], 0
jne 0x4268cc
test byte [rax], al
nop
nop dword [rax]
call fcn.0040ae00
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 0x10]
mov rax, rcx
call fcn.0042ba60
mov rdx, qword [rsp + 0x80]
mov qword [rdx + 0x48], rax
mov qword [rdx + 0x50], rbx
mov qword [rdx + 0x58], rcx
nop
nop
mov rax, qword [rsp + 0x98]
call fcn.0040b020
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0xa0]
lea rax, [rdx + 0x48]
call fcn.0042b660
test rax, rax
je 0x42692c
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0xa0]
test rdx, rdx
je 0x42691e
mov rsi, qword [rdx + 0xdc8]
test rsi, rsi
je 0x42691e
lea rdi, [rsi - 1]
nop word [rax + rax]
cmp rdi, 0x80
jae 0x427008
mov rsi, qword [rdx + rsi*8 + 0xdc8]
mov qword [rdx + 0xdc8], rdi
jmp 0x426920
xor esi, esi
test rsi, rsi
je 0x42692e
xor ecx, ecx
jmp 0x426a5f
xor esi, esi
mov r8, rsi
mov r9, rbx
mov rsi, rax
mov rax, qword [rsp + 0x98]
nop
jmp 0x42694a
xor esi, esi
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x50], rsi
test byte [rax], al
nop
nop dword [rax]
call fcn.0040ae00
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x42697e
mov rax, rcx
xor ecx, ecx
mov rbx, qword [rsp + 0x38]
jmp 0x426a0e
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 0x10]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rsp + 0xa0]
mov rax, rcx
call fcn.0042a400
nop
test rax, rax
je 0x4269a9
xor ecx, ecx
jmp 0x426a0e
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa0]
call fcn.00427060
nop
test bl, bl
jne 0x4269e5
nop
nop
mov rax, qword [rsp + 0x98]
call fcn.0040b020
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0xa0]
call fcn.0042a400
nop dword [rax]
test rax, rax
je 0x426ff7
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0x68]
test rdx, rdx
jne 0x426a37
mov rax, qword [rsp + 0x98]
call fcn.004266e0
mov rdx, rax
mov qword [rsp + 0x68], rdx
nop
nop
mov rax, qword [rsp + 0x98]
call fcn.0040b020
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
movups xmmword [rsi], xmm15
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], rax
mov rdx, qword [rsp + 0xa0]
mov qword [rsi + 0x20], rdx
mov word [rsi + 0x60], 0
mov byte [rsi + 0x62], 0
mov qword [rsi + 0x68], 0
movups xmmword [rsi + 0x78], xmm15
mov byte [rsi + 0x64], 0
mov qword [rsi + 0x30], 0
movups xmmword [rsi + 0x48], xmm15
nop
lea rdi, [rsi + 0x63]
mov qword [rsp + 0x70], rdi
xor r8d, r8d
xchg byte [rdi], r8b
mov r8, rax
mov rax, qword [rsp + 0x98]
mov rbx, r8
mov rcx, rdx
call fcn.00426580
nop dword [rax]
test al, al
je 0x426aef
mov rdx, qword [rsp + 0x30]
mov byte [rdx + 0x64], 1
jmp 0x426af4
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0xa0]
mov rbx, rax
shl rbx, 0xd
mov qword [rsp + 0x60], rbx
movzx esi, byte [rsp + 0xa8]
test sil, sil
je 0x426b48
mov qword [rdx + 0x28], 0
mov qword [rdx + 0x38], 0
mov rdi, qword [rdx + 0x20]
shl rdi, 0xd
add rdi, qword [rdx + 0x18]
mov qword [rdx + 0x70], rdi
nop
mov edi, 2
mov r8, qword [rsp + 0x70]
xchg byte [r8], dil
jmp 0x426c32
movzx edi, byte [rsp + 0xa9]
mov byte [rdx + 0x62], dil
shr dil, 1
test dil, dil
jne 0x426b74
mov qword [rdx + 0x68], rbx
mov qword [rdx + 0x38], 1
mov dword [rdx + 0x5c], 0
mov r9, rdx
jmp 0x426bc6
movsx rdi, dil
nop dword [rax + rax]
cmp rdi, 0x44
jae 0x426fea
lea rcx, [0x005ade00]
movzx ecx, word [rcx + rdi*2]
mov qword [rdx + 0x68], rcx
nop dword [rax]
test rcx, rcx
je 0x426fe5
mov rax, rbx
mov r9, rdx
xor edx, edx
div rcx
mov qword [r9 + 0x38], rax
lea rcx, [0x005af460]
mov ecx, dword [rcx + rdi*4]
mov dword [r9 + 0x5c], ecx
mov qword [r9 + 0x30], 0
mov qword [r9 + 0x40], 0xffffffffffffffff
mov rax, qword [r9 + 0x38]
call fcn.004283c0
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x50], rax
mov rax, qword [rcx + 0x38]
call fcn.004286e0
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x48], rax
mov rdx, qword [rsp + 0x98]
test byte [rdx], al
mov ebx, dword [rdx + 0x10138]
xchg dword [rcx + 0x58], ebx
nop
mov ebx, 1
mov rsi, qword [rsp + 0x70]
xchg byte [rsi], bl
mov rax, qword [rsp + 0xa0]
mov rdx, rcx
mov rbx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0xa8]
mov rdi, qword [0x0061c848]
nop
mov r8b, byte [0x0061c404]
test r8b, r8b
je 0x426c4f
mov rcx, qword [rsp + 0x38]
xor edi, edi
jmp 0x426c71
nop
mov r8, qword [0x0061c998]
mov rcx, qword [rsp + 0x38]
add r8, rcx
mov r9, r8
sub r8, rdi
cmp rdi, r9
mov edi, 0
cmovb rdi, r8
mov r8, qword [0x0061c160]
cmp r8, 0xffffffffffffffff
je 0x426cdd
mov r9, qword [rsp + 0x40]
test r9, r9
jbe 0x426cd0
mov r10, qword [0x0061c970]
mov r11, qword [0x0061c980]
add r10, r11
add r10, r9
nop dword [rax]
cmp r8, r10
jae 0x426cc3
sub r10, r8
cmp r9, r10
cmova r9, r10
cmp rdi, r9
cmovb rdi, r9
mov r8, qword [rsp + 0x80]
test r8, r8
jmp 0x426ce8
mov r8, qword [rsp + 0x80]
test r8, r8
jmp 0x426ce8
mov r8, qword [rsp + 0x80]
test r8, r8
jmp 0x426ce8
mov r8, qword [rsp + 0x80]
test r8, r8
je 0x426e06
test rdi, rdi
jbe 0x426e06
mov qword [rsp + 0x48], rdi
nop
nop dword [rax]
call fcn.00463620
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rcx + 0x1228]
shr rdx, 0x3d
mov qword [rsp + 0x58], rdx
test dl, dl
jne 0x426d61
nop
nop
movabs rsi, 0x1fffffffffffffff
and rsi, rax
movabs rdi, 0x6000000000000000
or rdi, rsi
xchg qword [rcx + 0x1228], rdi
mov rax, qword [rsp + 0x98]
test byte [rax], al
lea rdx, [rax + 0x10]
mov rbx, qword [rsp + 0x48]
lea rcx, [0x00501f18]
mov rax, rdx
nop
call fcn.00421a20
nop
call fcn.00463620
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rcx, qword [rsp]
mov rdx, qword [rsp + 0x58]
test dl, dl
jne 0x426dce
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x80]
add rax, 0x1228
mov ebx, 3
call fcn.0041b880
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
sub rcx, rdx
mov rdx, qword [rsp + 0x98]
lock xadd qword [rdx + 0x10110], rcx
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0xa8]
test rcx, rcx
je 0x426e33
mov rax, qword [rsp + 0x50]
call fcn.00416580
mov rbx, qword [rsp + 0x38]
neg rbx
lea rax, [0x0061c978]
call fcn.0042ec40
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x60]
sub rcx, rbx
lea rax, [0x0061c980]
mov rbx, rcx
call fcn.0042ec40
movzx ecx, byte [rsp + 0xa8]
test cl, cl
jne 0x426e65
lea rax, [0x0061c970]
mov rbx, qword [rsp + 0x60]
nop dword [rax]
call fcn.0042ec40
lea rax, [0x0061dc40]
call fcn.0042ed00
mov rcx, qword [rsp + 0x38]
mov rdx, rcx
lock xadd qword [rax], rcx
neg rdx
lock xadd qword [rax + 8], rdx
movzx ecx, byte [rsp + 0xa8]
cmp cl, 1
ja 0x426eb2
test cl, cl
jne 0x426ea5
mov rdx, qword [rsp + 0x60]
lock xadd qword [rax + 0x10], rdx
jmp 0x426ed4
mov rdx, qword [rsp + 0x60]
lock xadd qword [rax + 0x18], rdx
jmp 0x426ed4
cmp cl, 2
jne 0x426ec4
mov rdx, qword [rsp + 0x60]
lock xadd qword [rax + 0x28], rdx
jmp 0x426ed4
cmp cl, 3
jne 0x426ed4
mov rdx, qword [rsp + 0x60]
lock xadd qword [rax + 0x20], rdx
lea rax, [0x0061dc40]
nop dword [rax + rax]
call fcn.0042ede0
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rdi + 0x18]
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
nop
call fcn.00426480
movzx ecx, byte [rsp + 0xa8]
test cl, cl
jne 0x426fab
nop
nop
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rdx + 0x18]
nop
movabs rbx, 0x800000000000
lea rax, [rbx + rcx]
mov rbx, rax
shr rax, 0x2a
nop word [rax + rax]
nop
cmp rax, 0x40
jae 0x426fd9
lea rsi, [0x005ee330]
mov rax, qword [rsi + rax*8]
shr rbx, 0x16
and ebx, 0xfffff
mov rbx, qword [rax + rbx*8]
test byte [rbx], al
test byte [rax], al
mov rax, rcx
shr rcx, 0x10
and ecx, 0x3f
lea rbx, [rbx + rcx]
lea rbx, [rbx + 0x21000]
shr rax, 0xd
and eax, 7
mov rcx, rax
mov eax, 1
shl eax, cl
lock or byte [rbx], al
mov rax, qword [rsp + 0x98]
test byte [rax], al
mov rbx, qword [rsp + 0xa0]
lock xadd qword [rax + 0x10158], rbx
call fcn.00461400
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov ecx, 0x40
nop
call fcn.00461d00
call fcn.00434200
mov rax, rdi
mov ecx, 0x44
call fcn.00461ce0
lea rax, [0x004ff952]
mov ebx, 0x2b
call fcn.00435d80
mov rax, rdi
mov ecx, pe_nt_image_headers64
call fcn.00461ce0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
mov byte [rsp + 0x19], dil
call fcn.00463d60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
movzx edi, byte [rsp + 0x19]
jmp fcn.00426800