Function at 0x140211a3e
Capabilities:
Encode data using base64
Set environment variable

Disassembly:
jmp 0x1404dc0d0
mov qword [rsp + 8], rbx
stc
cmp r9, rbx
cmp bp, 0x58c9
mov qword [rsp + 0x10], rbp
shr bpl, 0x3f
mov qword [rsp + 0x18], rsi
or bp, r8w
push rdi
add bpl, 0xc1
shl bpl, 0xb9
push r12
movzx ebp, r15w
push r13
not bpl
sal ebp, cl
or bpl, 0x3b
push r14
push r15
bts r15d, edx
btr bp, r11w
sub rsp, 0x30
and r15d, 0x30ae1e0c
dec r15w
sub esi, esi
xchg bp, r15w
cmc
mov bpl, 0x11
mov ebp, edx
xadd r15b, r15b
sbb r15d, 0x64052d11
btc r15, r14
mov r15, rcx
test rcx, rcx
jmp 0x1404dc14c
jne 0x1404dc173
call fcn.1404b83a5
mov dword [rax], 0x16
test r10d, 0x3e461a2
clc
or rax, 0xffffffffffffffff
jmp 0x1404dc16e
jmp 0x1404dc69c
mov edx, 0x3d
jmp 0x1404dc184
mov rdi, r15
jmp 0x1404dc18c
call fcn.14028b24d
mov r13, rax
jmp 0x1404dc19f
test rax, rax
je 0x1404dc658
cmp rax, r15
jmp 0x1404dc1b0
je 0x1404dc658
mov r14, qword [0x1400ba2e8]
inc r12b
xor r12d, 0x64db14ad
shr r12b, cl
cmp r14, qword [0x1400ba2f0]
jmp 0x1404dc1e1
movzx r12d, word [rax + 2]
jmp 0x1404dc1eb
jne 0x1404dc218
mov rcx, r14
jmp 0x1404dc1f9
call fcn.1404dc70f
mov r14, rax
dec bl
not bx
and bx, r14w
mov qword [0x1400ba2e8], rax
rcl bx, cl
xchg bl, bl
shl bh, cl
mov ebx, 1
cmp ax, r14w
test r14, r14
jne 0x1404dc354
mov rax, qword [0x1400ba2e0]
test ebp, ebp
jmp 0x1404dc238
je 0x1404dc29e
test rax, rax
jmp 0x1404dc246
je 0x1404dc29e
call fcn.1404b859d
test rax, rax
jmp 0x1404dc259
je 0x1404dc658
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404dc272
jne 0x1404dc34b
mov rcx, r14
jmp 0x1404dc280
call fcn.1404dc70f
mov r14, rax
jmp 0x1404dc28d
mov qword [0x1400ba2e8], rax
jmp 0x1404dc299
jmp 0x1404dc34b
test r12w, r12w
je 0x1404dc671
test rax, rax
jmp 0x1404dc2b0
jne 0x1404dc319
lea edx, [rax + 8]
movsx ecx, r9w
mov ecx, r8d
mov rcx, rbx
jmp 0x1404dc2c8
call fcn.1404d03c6
xor ecx, ecx
jmp 0x1404dc2d4
mov qword [0x1400ba2e0], rax
jmp 0x1404dc2e0
call fcn.1404cc356
cmp qword [0x1400ba2e0], rsi
jmp 0x1404dc2f1
jne 0x1404dc300
or rbp, 0xffffffffffffffff
jmp 0x1404dc681
mov r14, qword [0x1400ba2e8]
cmc
cmp dl, 0x40
test r14, r14
jmp 0x1404dc313
jne 0x1404dc354
mov edx, 8
xchg cx, cx
mov rcx, rbx
call fcn.1404d03c6
sub ecx, ecx
jmp 0x1404dc330
mov qword [0x1400ba2e8], rax
call fcn.1404cc356
mov r14, qword [0x1400ba2e8]
cmc
test r9w, 0x5f86
stc
test r14, r14
je 0x1404dc2f7
mov rax, qword [r14]
xor rbx, 0x4daf0b09
sar ebx, 0x4a
and bx, si
sub r13, r15
jmp 0x1404dc36c
sar r13, 1
mov rbx, r14
test rax, rax
jmp 0x1404dc37a
je 0x1404dc406
mov r8, r13
movzx rdx, dx
not ch
cqo
mov rdx, rax
bswap rcx
seto cl
mov rcx, r15
jmp 0x1404dc39c
call fcn.1404e8682
test eax, eax
jmp 0x1404dc3a8
jne 0x1404dc3d8
mov rax, qword [rbx]
xor ch, 0x7d
mov ecx, 0x3d
clc
test r12b, bl
cmp word [rax + r13*2], cx
jmp 0x1404dc3c7
je 0x1404dc3f1
cmp word [rax + r13*2], si
je 0x1404dc3f1
add rbx, 8
cwde
movsxd rax, r11d
movzx rax, r15w
mov rax, qword [rbx]
jmp 0x1404dc3ec
jmp 0x1404dc372
sub rbx, r14
cmp dl, 0x3a
stc
sar rbx, 3
jmp 0x1404dc401
jmp 0x1404dc41d
sub rbx, r14
cmp r15d, 0x5a8f0f35
sar rbx, 3
neg rbx
clc
jmp 0x1404dc41d
test rbx, rbx
jmp 0x1404dc425
js 0x1404dc4c7
cmp qword [r14], rsi
je 0x1404dc4c7
mov rcx, qword [r14 + rbx*8]
call fcn.1404cc356
test r12w, r12w
je 0x1404dc467
mov qword [r14 + rbx*8], r15
jmp 0x1404dc56c
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404dc45a
mov qword [r14 + rbx*8], rax
jmp 0x1404dc463
inc rbx
stc
cmp qword [r14 + rbx*8], rsi
jmp 0x1404dc470
jne 0x1404dc450
mov r8d, 8
cdq
movsx rdx, r15w
mov rdx, rbx
movzx ecx, r12w
movzx cx, bpl
movzx rcx, r12w
mov rcx, r14
call fcn.1404dbac0
xor ecx, ecx
mov rbx, rax
jmp 0x1404dc4a3
call fcn.1404cc356
test rbx, rbx
jmp 0x1404dc4b0
je 0x1404dc56f
mov qword [0x1400ba2e8], rbx
jmp 0x1404dc4c2
jmp 0x1404dc56f
test r12w, r12w
jmp 0x1404dc4d0
je 0x1404dc683
neg rbx
lea rdx, [rbx + 2]
clc
jmp 0x1404dc4e3
cmp rdx, rbx
jae 0x1404dc4fa
or rbp, 0xffffffffffffffff
jmp 0x1404dc4f5
jmp 0x1404dc685
movabs rax, 0x1fffffffffffffff
stc
cmp rdx, rax
jmp 0x1404dc50d
jae 0x1404dc4ec
mov r8d, 8
movsx cx, sil
cmovle cx, bx
mov rcx, r14
jmp 0x1404dc52a
call fcn.1404dbac0
sub ecx, ecx
movsx r14, bx
mov r14, rax
jmp 0x1404dc53d
call fcn.1404cc356
test r14, r14
jmp 0x1404dc54a
je 0x1404dc4ec
mov qword [r14 + rbx*8], r15
movzx edi, bx
mov qword [r14 + rbx*8 + 8], rsi
mov qword [0x1400ba2e8], r14
add dil, 0x99
btr di, 0xa1
mov rdi, rsi
test ebp, ebp
je 0x1404dc68d
or rbp, 0xffffffffffffffff
mov r14, rbp
jmp 0x1404dc583
inc r14
cmp word [r15 + r14*2], si
jmp 0x1404dc590
jne 0x1404dc583
mov edx, 2
clc
add r14, rdx
xchg cl, ch
mov rcx, r14
jmp 0x1404dc5a9
call fcn.1404d03c6
mov rbx, rax
cmp cx, 0x318
test r8b, r13b
test si, 0x1c8c
test rax, rax
jmp 0x1404dc5c6
je 0x1404dc64b
mov r8, r15
movzx rdx, r8w
mov rdx, r14
xchg ch, cl
mov rcx, rax
jmp 0x1404dc5e0
call fcn.1404cd04e
test eax, eax
jne 0x1404dc6e3
neg r12w
inc al
cbw
lea rax, [r13 + 1]
setb cl
mov cl, 0xaf
lea rax, [rbx + rax*2]
inc rcx
mov rcx, rbx
jmp 0x1404dc60d
sbb rdx, rdx
cmp r12b, 0xb5
jmp 0x1404dc619
mov word [rax - 2], si
and rdx, rax
jmp 0x1404dc625
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404dc64b
call fcn.1404b83a5
mov esi, ebp
movzx ecx, bx
movsx rcx, r10w
movsx ecx, r8w
mov dword [rax], 0x2a
mov rcx, rbx
call fcn.1404cc356
jmp 0x1404dc68d
call fcn.1404b83a5
or rsi, 0xffffffffffffffff
movsx bp, bpl
mov dword [rax], 0x16
movsxd rcx, r15d
mov cl, 0xa
mov ebp, esi
jmp 0x1404dc681
mov esi, ebp
mov ebp, esi
mov esi, ebp
movsx rcx, cx
not cl
mov rcx, rdi
jmp 0x1404dc695
call fcn.1404cc356
mov eax, esi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
rcl si, cl
cmp r13b, 0xfa
mov rsi, qword [rsp + 0x70]
jmp 0x1404dc6bb
add rsp, 0x30
movzx r15w, r10b
bswap r12
pop r15
pop r14
not r12b
mov r12b, r15b
bswap r13d
pop r13
movzx r12d, cx
pop r12
pop rdi
jmp 0x1404dc6e2
ret
xor r9d, r9d
cmp r13b, 0x99
clc
mov qword [rsp + 0x20], rsi
test dil, 0x4a
cmp rcx, r14
sub r8d, r8d
xor edx, edx
stc
sub ecx, ecx
jmp 0x1404dc704
call fcn.1404b90c8
int3