Function at 0x1400924b0
Capabilities:
Encode data using base64
Encode data using xor
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4a8
mov rdi, r8
mov rbx, rdx
mov r12, rcx
nop dword [rax]
mov eax, dword [0x141dd2b00]
xor edx, edx
div dword [0x141dd2b04]
and eax, 0x20023c23
xor eax, 0x44c04a95
cmp eax, 0xf49dc0df
ja 0x1400924d0
mov eax, dword [0x141dd2b08]
and eax, dword [0x141dd2b0c]
movabs r13, 0x8000000000000000
imul eax, eax, 0xa8c96ff0
or eax, 0xa24535cf
cmp eax, 0xe06fc3c0
je 0x14009253f
mov esi, dword [0x141dd2b10]
imul esi, dword [0x141dd2b14]
lea rcx, [rsp + 0xa8]
mov rdx, rbx
mov r8, rdi
call fcn.140093550
cmp esi, 0x99e43b7a
jne 0x140092554
lea rcx, [rsp + 0xa8]
mov rdx, rbx
mov r8, rdi
call fcn.140093550
jmp 0x140092517
mov rax, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb0]
cmp rax, r13
jne 0x140092808
nop dword [rax]
mov eax, dword [0x141dd2bf8]
imul eax, dword [0x141dd2bfc]
imul eax, eax, 0xb216da76
or eax, 0xce566134
imul eax, eax, 0x96f2b8f3
cmp eax, 0x64999198
je 0x140092570
mov eax, r8d
and eax, 3
cmp rax, 3
ja case.default.0x1400925b3
lea rcx, [0x141dbc960]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rbx, [r8 - 1]
nop dword [rax]
mov eax, dword [0x141dd2c18]
xor eax, dword [0x141dd2c1c]
xor eax, 0xb65ead87
add eax, 0x162eb52b
xor eax, 0xe02b7d14
cmp eax, 0x3c504c0e
jb 0x1400925c0
mov r14, qword [r8 - 1]
mov eax, dword [str.__tElh]
xor edx, edx
div dword [0x141dd2c24]
nop word cs:[rax + rax]
mov eax, dword [0x141dd2c28]
xor eax, dword [0x141dd2c2c]
add eax, 0x8f8af95c
imul rcx, rax, 0x12678bd7
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x303d2b23
je 0x140092600
mov rsi, qword [r8 + 7]
mov rdi, qword [rsi]
test rdi, rdi
je 0x140092690
mov eax, dword [0x141dd2c30]
xor eax, dword [0x141dd2c34]
imul rax, rax, 0x2e071e51
shr rax, 0x3d
or eax, 0x8081c47a
cmp eax, 0x926787ce
jbe 0x140092660
mov rcx, r14
call rdi
mov eax, dword [0x141dd2c38]
sub eax, dword [0x141dd2c3c]
add eax, 0x5bcc20ff
imul r15, rax, 0x4de5bcb
shr r15, 0x37
mov rcx, r14
call rdi
cmp r15d, 0xe55536d6
je 0x140092660
nop word [rax + rax]
mov eax, dword [0x141dd2c40]
xor eax, dword [0x141dd2c44]
add eax, 0x47d951c7
xor eax, 0x1b4808f9
cmp eax, 0x28e73d38
jb 0x140092690
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
nop word cs:[rax + rax]
mov edx, dword [0x141dd2c48]
imul edx, dword [0x141dd2c4c]
or edx, 0x32008184
xor edx, 0x210400
and edx, 0xb6a38585
cmp edx, 0x6c0394c1
ja 0x1400926c0
test rax, rax
je 0x140093314
mov eax, dword [0x141dd2c50]
xor edx, edx
div dword [0x141dd2c54]
or eax, 0x53145a0e
cmp eax, 0x609d56f2
je 0x1400926f0
nop word [rax + rax]
mov eax, dword [0x141dd2c58]
and eax, dword [0x141dd2c5c]
imul eax, eax, 0x42425388
add eax, 0x542fbb18
and eax, 0x1153a4b0
cmp eax, 0x2aba5a70
ja 0x140092710
cmp rcx, 0x11
jb 0x14009277d
mov eax, dword [0x141dd2c60]
xor edx, edx
div dword [0x141dd2c64]
nop word [rax + rax]
mov eax, dword [0x141dd2c68]
or eax, dword [0x141dd2c6c]
imul eax, eax, 0x950a3fa4
imul rax, rax, 0x1a316fef
shr rax, 0x3c
or eax, 0xcb4f9c42
cmp eax, 0x5571f6e7
je 0x140092750
mov r14, qword [r14 - 8]
xor eax, eax
test al, al
je 0x1400932bb
jmp 0x140093300
mov eax, dword [0x141dd2c08]
or eax, dword [0x141dd2c0c]
imul eax, eax, 0xb6830789
and eax, 0xcbb8842e
imul eax, eax, 0x4409afb1
cmp eax, 0x7712a0e8
ja case.0x1400925b3.3
nop word cs:[rax + rax]
mov eax, dword [str.xA_m]
and eax, dword [0x141dd2c14]
and eax, 0xb2018508
cmp eax, 0x34cdb2dc
je 0x1400927c0
jmp case.0x1400925b3.0
mov eax, dword [0x141dd2c00]
imul eax, dword [0x141dd2c04]
add eax, 0x70772227
and eax, 0xf4c7028
add eax, 0x40c2623e
cmp eax, 0x2401f7d6
jb case.default.0x1400925b3
jmp 0x140093263
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], 2
mov qword [rsp + 0x98], 0
nop
mov eax, dword [0x141dd2b18]
xor eax, dword [0x141dd2b1c]
imul eax, eax, 0xc96ba53c
or eax, 0x1412461e
cmp eax, 0xc820ef92
je 0x140092840
mov r13d, 0x200
mov eax, 2
mov qword [rsp + 0x38], rax
mov esi, 0xffffffff
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x60], rax
nop
cmp r13, 0x201
jae 0x1400928b0
mov eax, 0x200
mov qword [rsp + 0x50], rax
lea rbp, [rsp + 0xa8]
mov r12, r13
jmp 0x14009291a
xor eax, eax
test al, al
jne 0x1400928b2
mov r15, qword [rsp + 0x60]
sub r13, r15
mov eax, dword [0x141dd2b20]
imul eax, dword [0x141dd2b24]
xor eax, 0x173271de
add eax, 0x1ef6b0cb
cmp eax, 0x98fb80f8
ja 0x1400928be
mov rax, qword [rsp + 0x58]
sub rax, r15
cmp r13, rax
ja 0x140092959
mov rax, qword [rsp + 0x30]
cmp rax, rsi
mov r12d, 0xffffffff
cmovb r12, rax
mov qword [rsp + 0x98], r12
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], r12
mov rbp, qword [rsp + 0x38]
mov rax, r12
mov qword [rsp + 0x60], r12
mov eax, dword [0x141dd2b48]
mov ecx, dword [0x141dd2b4c]
add eax, ecx
add eax, 0xb1b1d860
or eax, 0x604b727e
imul rax, rax, 0x36529081
shr rax, 0x3d
cmp eax, 0x24a8bd19
mov rbx, qword [rsp + 0x40]
mov r15, qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jbe 0x140092a60
jmp 0x140092a94
mov eax, dword [0x141dd2b28]
imul eax, dword [0x141dd2b2c]
xor eax, 0x927b9082
and eax, 0x9e7f90b6
xor eax, 0x14783e20
cmp eax, 0xf659a4f8
lea rbx, [rsp + 0x88]
jbe 0x1400929a1
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rbx
mov rdx, r15
mov r8, r13
call fcn.1400f2140
mov edi, dword [0x141dd2b30]
imul edi, dword [0x141dd2b34]
xor edi, 0x22546c22
or edi, 0xc1a913c4
add edi, 0x27602193
mov qword [rsp + 0x20], 2
mov r9d, 2
mov rcx, rbx
mov rdx, r15
mov r8, r13
call fcn.1400f2140
cmp edi, 0x1796604a
ja 0x140092984
nop word cs:[rax + rax]
mov eax, dword [0x141dd2b38]
xor edx, edx
div dword [0x141dd2b3c]
add eax, 0x1e8eab47
or eax, 0xb656fe01
imul eax, eax, 0x55e61789
cmp eax, 0xba8ddbb3
jb 0x1400929f0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x30], rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd2b40]
sub eax, dword [0x141dd2b44]
add eax, 0xc55af94d
and eax, 0xe4d518f0
cmp eax, 0xced3b7c
je 0x140092a30
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x38], rax
jmp 0x1400928e9
mov eax, dword [0x141dd2b50]
xor eax, dword [0x141dd2b54]
imul edi, eax, 0x92c72664
and edi, 0xc17db520
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbx
mov rdx, rbp
mov r8d, r12d
call r15
cmp edi, 0x67e68de0
jne 0x140092ab0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbx
mov rdx, rbp
mov r8d, r12d
call r15
jmp 0x140092a60
mov r13d, eax
test eax, eax
jne 0x140092b00
mov eax, dword [0x141dd2b58]
sub eax, dword [0x141dd2b5c]
add eax, 0x265225d5
mov ecx, 0xa16d309b
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x6031af0e
jne 0x140092ae0
call r14
nop
mov edi, dword [0x141dd2b60]
imul edi, dword [0x141dd2b64]
call r14
cmp edi, 0xf0ab2ce6
je 0x140092ae0
test eax, eax
jne 0x140092c05
mov r13d, r13d
nop word cs:[rax + rax]
mov eax, dword [0x141dd2b88]
and eax, dword [0x141dd2b8c]
and eax, 0xcc41fb0d
add eax, 0x2aea3168
cmp eax, 0xbcf12b8e
ja 0x140092b10
cmp r12, r13
jne 0x140092ba0
call r14
cmp eax, 0x7a
jne 0x140092cf5
lea rax, [r12 + r12]
mov ecx, dword [0x141dd2b98]
xor ecx, dword [0x141dd2b9c]
cmp ecx, 0x196f1dbf
je 0x140092b42
nop word cs:[rax + rax]
mov ecx, dword [0x141dd2ba0]
and ecx, dword [0x141dd2ba4]
add ecx, 0x993325c1
or ecx, 0x4527e61e
imul ecx, ecx, 0x486c12e7
cmp r12, 0x7fffffff
mov r13, rax
cmova r13, rsi
cmp ecx, 0x26570b4e
je 0x140092b60
jmp 0x140092890
mov eax, dword [0x141dd2b90]
xor edx, edx
div dword [0x141dd2b94]
xor eax, 0x93202040
or eax, 0x24d54399
add eax, 0x4a7fb793
cmp eax, 0x6f19763
ja 0x140092ba0
cmp r12, r13
jb 0x140092890
cmp qword [rsp + 0x50], r13
jb 0x140092d23
mov eax, dword [0x141dd2bb0]
xor edx, edx
div dword [0x141dd2bb4]
add eax, 0xfdf249f6
or eax, 0x70a2736e
cmp eax, 0xe10fa7a1
mov r15, qword [rsp + 0x40]
jne 0x140092fce
jmp 0x140093003
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
shl r14, 0x20
or r14, 2
mov qword [rsp + 0x70], r14
movabs r12, 0x8000000000000000
mov qword [rsp + 0x68], r12
cmp qword [rsp + 0x30], 0
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
je 0x140092cb0
mov r15, qword [0x141dde6e0]
mov eax, dword [0x141dd2b68]
xor eax, dword [0x141dd2b6c]
imul eax, eax, 0x9a5879e0
cmp eax, 0xbc46d07
jne 0x140092c6a
mov rcx, r15
xor edx, edx
mov r8, r13
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov edi, dword [0x141dd2b70]
add edi, dword [0x141dd2b74]
xor edi, 0x42851e98
add edi, 0xd173ad67
and edi, 0x8c425661
mov rcx, r15
xor edx, edx
mov r8, r13
call rsi
cmp edi, 0xa4aff297
je 0x140092c80
mov eax, dword [0x141dd2b78]
add eax, dword [0x141dd2b7c]
and eax, 0xf940943
imul eax, eax, 0x6a86b03f
imul rax, rax, 0x2b35af35
shr rax, 0x3c
cmp eax, 0x9afd19c
ja 0x140092cb0
mov r15, qword [rsp + 0x40]
nop
mov eax, dword [0x141dd2b80]
add eax, dword [str.__rW]
cmp eax, 0xea0cf01e
je 0x140092ce0
jmp 0x140092d53
ud2
mov eax, dword [0x141dd2bd8]
and eax, dword [0x141dd2bdc]
mov ecx, 0x94bd8555
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0x6d765b91
cmp ecx, 0xe787a658
jbe 0x140093265
jmp 0x140093281
mov eax, dword [0x141dd2bb8]
or eax, dword [0x141dd2bbc]
imul rax, rax, 0x5f406dbd
shr rax, 0x3e
imul esi, eax, 0xca37ec89
lea rcx, [rsp + 0x68]
mov rdx, rbp
mov r8, r13
call fcn.14008ea20
cmp esi, 0x528308a0
jne 0x140093020
lea rcx, [rsp + 0x68]
mov rdx, rbp
mov r8, r13
call fcn.14008ea20
jmp 0x140092fce
mov eax, dword [0x141dd2bc0]
sub eax, dword [0x141dd2bc4]
add eax, 0x56f1eb29
cmp eax, 0xc62198f2
ja 0x140093020
cmp qword [rsp + 0x30], 0
mov rbx, qword [rsp + 0x48]
movabs r12, 0x8000000000000000
or byte [rax - 0x75], 0x74
and al, 0x38
ud2
mov eax, dword [0x141dd2be0]
xor edx, edx
div dword [0x141dd2be4]
and eax, 0x9669f2ca
ud2
ud2
mov eax, dword [0x141dd2c70]
sub eax, dword [0x141dd2c74]
xor eax, 0xaacf5eb3
imul rcx, rax, 0x431046ff
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1e
imul esi, eax, 0xbc21ecce
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0xed55762e
jbe 0x140093314
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400932bb
mov eax, dword [0x141dd2c78]
xor eax, dword [0x141dd2c7c]
or eax, 0xd85cba51
and eax, 0xdc7efb59
xor eax, 0xb033c456
cmp eax, 0xb9719391
jbe 0x140093340
mov rax, qword [0x141dde6e0]
nop dword [rax]
mov eax, dword [0x141dd2c80]
sub eax, dword [0x141dd2c84]
mov rdi, qword [0x141dde6e0]
cmp eax, 0x716e29a4
je 0x140093340
mov eax, dword [0x141dd2c88]
imul eax, dword [0x141dd2c8c]
imul rax, rax, 0x7d988d1
shr rax, 0x37
imul eax, eax, 0x779ee131
add eax, 0x247951a2
cmp eax, 0xca10388
jbe 0x140093392
mov rcx, rdi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov ebp, dword [0x141dd2c90]
imul ebp, dword [0x141dd2c94]
add ebp, 0x9e887eb7
mov rcx, rdi
xor edx, edx
mov r8, rbx
call rsi
cmp ebp, 0x3204e9dc
ja 0x1400933a0
nop word cs:[rax + rax]