Function at 0x14006ac30
Capabilities:
Encode data using base64

Disassembly:
push rsi
push r12
push r13
sub rsp, 0x30
mov r10, qword [rcx]
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x20], r15
mov r15d, dword [rsp + 0x70]
mov r11, r8
movzx r8d, byte [r10 + 1]
mov edi, r15d
xor esi, esi
shr edi, 0xb
add r10, 2
mov ebp, r9d
mov r13, rdx
mov r12, rcx
and edi, 1
je 0x14006ad5e
cmp r8d, 0xc0
jb 0x14006ad5e
test r8b, 0x20
jne 0x14006aca4
movzx eax, byte [r10]
and r8d, 0x1f
and eax, 0x3f
shl r8d, 6
or r8d, eax
inc r10
jmp 0x14006ad5e
test r8b, 0x10
jne 0x14006acd7
movzx ecx, byte [r10]
movzx eax, byte [r10 + 1]
and r8d, 0xf
and eax, 0x3f
and ecx, 0x3f
shl ecx, 6
or ecx, eax
mov eax, r8d
shl eax, 0xc
mov r8d, ecx
or r8d, eax
add r10, 2
jmp 0x14006ad5e
movzx eax, byte [r10]
movzx ecx, byte [r10 + 1]
and eax, 0x3f
and ecx, 0x3f
shl eax, 6
or ecx, eax
movzx eax, byte [r10 + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
test r8b, 8
jne 0x14006ad14
and r8d, 7
mov eax, r8d
mov r8d, ecx
shl eax, 0x12
or r8d, eax
add r10, 3
jmp 0x14006ad5e
movzx eax, byte [r10 + 3]
shl ecx, 6
and eax, 0x3f
or ecx, eax
test r8b, 4
jne 0x14006ad3d
and r8d, 3
mov eax, r8d
mov r8d, ecx
shl eax, 0x18
or r8d, eax
add r10, 4
jmp 0x14006ad5e
movzx eax, byte [r10 + 4]
and r8d, 1
shl ecx, 6
and eax, 0x3f
or ecx, eax
mov eax, r8d
shl eax, 0x1e
mov r8d, ecx
or r8d, eax
add r10, 5
dec r10
test r8d, r8d
jne 0x14006ad74
mov r9d, 1
mov dword [r11], r9d
jmp 0x14006b42d
lea ecx, [r8 - 0x30]
cmp ecx, 0x4a
ja 0x14006b42d
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x28], r14
lea r14, [0x140000000]
movsx edx, word [r14 + rcx*2 + 0x198570]
test edx, edx
je 0x14006adb0
jle 0x14006ada9
mov r8d, edx
jmp 0x14006b423
mov esi, edx
jmp 0x14006b011
cmp ecx, 0x48
ja case.0x14006adcd.9
movzx eax, byte [r14 + rcx + 0x6b48c]
mov ecx, dword [r14 + rax*4 + 0x6b464]
add rcx, r14
jmp rcx
bt r15d, 0x19
jae case.0x14006adcd.2
movzx eax, byte [r10 + 1]
test byte [rax + r14 + 0x199590], 8
je 0x14006b423
movzx ecx, byte [r10 + 2]
test byte [rcx + r14 + 0x199590], 8
je 0x14006b423
movzx edx, byte [r10 + 3]
test byte [rdx + r14 + 0x199590], 8
je 0x14006b423
movzx ebp, byte [r10 + 4]
lea r9, [0x140000000]
test byte [r9 + rbp + 0x199590], 8
je 0x14006b423
mov r8d, eax
cmp eax, 0x61
jb 0x14006ae3d
add r8d, 0xffffffe0
cmp r8d, 0x41
mov r9d, gethostname
mov ebx, gethostbyaddr
mov eax, r9d
cmovb eax, ebx
sub r8d, eax
cmp ecx, 0x61
jb 0x14006ae5d
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
add r8d, ecx
mov ecx, edx
cmp edx, 0x61
jb 0x14006ae7a
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
mov eax, ebp
add r8d, ecx
cmp ebp, 0x61
jb 0x14006ae97
add eax, 0xffffffe0
cmp eax, 0x41
mov edx, 0xff
mov ebp, 0x10ffff
cmovb r9d, ebx
shl r8d, 4
add r10, 4
sub r8d, r9d
add r8d, eax
test edi, edi
cmovne edx, ebp
cmp r8d, edx
jbe 0x14006b32b
mov dword [r11], 0x4c
jmp 0x14006b423
bt r15d, 0x19
jb 0x14006b423
mov dword [r11], 0x25
jmp 0x14006b423
cmp dword [rsp + 0x78], esi
jne 0x14006b423
movzx eax, byte [r10 + 1]
cmp al, 0x3c
je 0x14006b044
cmp al, 0x27
je 0x14006b044
mov r9d, 1
cmp al, 0x7b
jne 0x14006af52
movzx eax, byte [r10 + 2]
lea rcx, [r10 + 2]
test al, al
je 0x14006af35
nop dword [rax]
cmp al, 0x2d
je 0x14006af2a
sub al, 0x30
cmp al, 9
ja 0x14006af3d
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x14006af20
mov ebx, r9d
inc r10
jmp 0x14006af54
movzx eax, byte [rcx]
test al, al
je 0x14006af35
cmp al, 0x7d
je 0x14006af35
mov esi, 0x1c
jmp 0x14006b423
mov ebx, esi
cmp byte [r10 + 1], 0x2d
jne 0x14006af60
inc r10
jmp 0x14006af63
mov r9d, esi
movzx ecx, byte [r10 + 1]
lea rdx, [r10 + 1]
mov eax, esi
cmp cl, 0x30
jb 0x14006af99
cmp cl, 0x39
ja 0x14006af99
cmp eax, 0xccccccb
jg 0x14006afb2
lea ecx, [rax + rax*4]
movzx eax, byte [rdx]
mov r10, rdx
inc rdx
lea eax, [rax + rcx*2]
movzx ecx, byte [rdx]
add eax, 0xffffffd0
cmp cl, 0x30
jae 0x14006af73
test ebx, ebx
je 0x14006afe5
inc r10
cmp byte [r10], 0x7d
je 0x14006afe5
mov dword [r11], reloc.WS2_32.dll_gethostname
jmp 0x14006b423
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x30
jb 0x14006b135
cmp al, 0x39
ja 0x14006b135
movzx eax, byte [rcx + 1]
mov r10, rcx
inc rcx
cmp al, 0x30
jae 0x14006afc3
mov dword [r11], IsNetDrive
jmp 0x14006b423
test eax, eax
jne 0x14006aff5
mov dword [r11], 0x3a
jmp 0x14006b423
test r9d, r9d
je 0x14006b00f
cmp eax, ebp
jle 0x14006b00a
mov dword [r11], SafeArrayGetLBound
jmp 0x14006b423
sub ebp, eax
lea eax, [rbp + 1]
mov esi, eax
neg esi
cmp esi, 0xc
jne 0x14006b423
cmp byte [r10 + 1], 0x7b
jne 0x14006b423
lea rcx, [r10 + 2]
call fcn.140072ec0
test eax, eax
jne 0x14006b423
mov dword [r11], 0x25
jmp 0x14006b423
mov esi, 0x1b
jmp 0x14006b423
cmp dword [rsp + 0x78], esi
jne 0x14006b0b0
movzx ecx, byte [r10 + 1]
lea r9, [r10 + 1]
mov rbx, r10
lea eax, [r8 - 0x30]
cmp cl, 0x30
jb 0x14006b09c
nop dword [rax]
cmp cl, 0x39
ja 0x14006b09c
cmp eax, 0xccccccb
jg 0x14006b116
lea ecx, [rax + rax*4]
movzx eax, byte [r9]
mov r10, r9
inc r9
lea eax, [rax + rcx*2]
movzx ecx, byte [r9]
add eax, 0xffffffd0
cmp cl, 0x30
jae 0x14006b070
cmp eax, 8
jl 0x14006b00f
cmp eax, ebp
jle 0x14006b00f
mov r10, rbx
movzx r8d, byte [r10]
cmp r8d, 0x38
jae 0x14006b423
add r8d, 0xffffffd0
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
inc edx
sub al, 0x30
cmp al, 7
ja 0x14006b0f4
movzx eax, byte [rcx]
add r8d, 0xfffffffa
mov r10, rcx
lea r8d, [rax + r8*8]
cmp edx, 2
jl 0x14006b0d0
test edi, edi
jne 0x14006b423
mov edx, 0xff
cmp r8d, edx
jbe 0x14006b423
mov dword [r11], reloc.WS2_32.dll_gethostbyaddr
jmp 0x14006b423
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x30
jb 0x14006b135
cmp al, 0x39
ja 0x14006b135
movzx eax, byte [rcx + 1]
mov r10, rcx
inc rcx
cmp al, 0x30
jae 0x14006b123
mov dword [r11], IsNetDrive
jmp 0x14006b423
cmp byte [r10 + 1], 0x7b
je 0x14006b154
mov dword [r11], 0x51
jmp 0x14006b423
cmp byte [r10 + 2], 0x7d
lea rax, [r10 + 2]
jne 0x14006b16b
mov dword [r11], 0x56
jmp 0x14006b423
mov r10, rax
movzx eax, byte [rax]
mov r8d, esi
cmp al, 0x30
jb 0x14006b1b2
mov edx, 0xff
mov ebp, 0x10ffff
cmp al, 0x37
ja 0x14006b1b2
inc r10
movzx ecx, al
test r8d, r8d
jne 0x14006b196
cmp ecx, 0x30
je 0x14006b1aa
add r8d, 0xfffffffa
test edi, edi
mov eax, edx
lea r8d, [rcx + r8*8]
cmovne eax, ebp
cmp r8d, eax
ja 0x14006b1de
movzx eax, byte [r10]
cmp al, 0x30
jae 0x14006b182
cmp byte [r10], 0x7d
jne 0x14006b210
test edi, edi
je 0x14006b423
lea eax, [r8 - 0xd800]
cmp eax, 0x7ff
ja 0x14006b423
mov dword [r11], 0x49
jmp 0x14006b423
movzx eax, byte [r10]
cmp al, 0x30
jb 0x14006b373
nop word [rax + rax]
cmp al, 0x37
ja 0x14006b373
movzx eax, byte [r10 + 1]
inc r10
cmp al, 0x30
jae 0x14006b1f0
mov dword [r11], 0x22
jmp 0x14006b423
mov dword [r11], 0x50
jmp 0x14006b423
bt r15d, 0x19
jae 0x14006b293
movzx eax, byte [r10 + 1]
test byte [rax + r14 + 0x199590], 8
je 0x14006b423
movzx ecx, byte [r10 + 2]
test byte [rcx + r14 + 0x199590], 8
je 0x14006b423
mov r8d, eax
cmp eax, 0x61
jb 0x14006b257
add r8d, 0xffffffe0
cmp r8d, 0x41
mov r9d, gethostname
mov ebx, gethostbyaddr
mov eax, r9d
cmovb eax, ebx
sub r8d, eax
mov eax, ecx
cmp ecx, 0x61
jb 0x14006b279
add eax, 0xffffffe0
cmp eax, 0x41
cmovb r9d, ebx
shl r8d, 4
sub r8d, r9d
add r8d, eax
add r10, 2
jmp 0x14006b423
cmp byte [r10 + 1], 0x7b
jne 0x14006b38b
movzx ecx, byte [r10 + 2]
add r10, 2
cmp cl, 0x7d
jne 0x14006b2b8
mov dword [r11], 0x56
jmp 0x14006b423
movzx eax, cl
mov r8d, esi
test byte [rax + r14 + 0x199590], 8
je 0x14006b325
mov ebx, gethostbyaddr
mov edx, 0xff
mov ebp, 0x10ffff
lea r9d, [rbx + 7]
nop dword [rax]
inc r10
movzx ecx, cl
test r8d, r8d
jne 0x14006b2ef
cmp ecx, ebx
je 0x14006b316
cmp ecx, 0x61
jb 0x14006b2f7
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
mov eax, edx
add r8d, ecx
test edi, edi
cmovne eax, ebp
cmp r8d, eax
ja 0x14006b351
movzx ecx, byte [r10]
test byte [rcx + r14 + 0x199590], 8
jne 0x14006b2e0
cmp byte [r10], 0x7d
jne 0x14006b37f
test edi, edi
je 0x14006b423
lea eax, [r8 - 0xd800]
cmp eax, 0x7ff
ja 0x14006b423
mov dword [r11], 0x49
jmp 0x14006b423
movzx eax, byte [r10]
test byte [rax + r14 + 0x199590], 8
je 0x14006b373
movzx eax, byte [r10 + 1]
inc r10
test byte [rax + r14 + 0x199590], 8
jne 0x14006b360
mov dword [r11], 0x22
jmp 0x14006b423
mov dword [r11], 0x4f
jmp 0x14006b423
mov ebx, gethostbyaddr
mov r8d, esi
lea r9d, [rbx + 7]
nop word [rax + rax]
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
inc edx
test byte [rax + r14 + 0x199590], 8
je 0x14006b423
mov r10, rcx
movzx ecx, byte [rcx]
cmp ecx, 0x61
jb 0x14006b3c4
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
add r8d, ecx
cmp edx, 2
jl 0x14006b3a0
jmp 0x14006b423
movzx r8d, byte [r10 + 1]
inc r10
test r8d, r8d
jne 0x14006b3f4
mov dword [r11], 2
jmp 0x14006b423
cmp r8d, 0x7f
jbe 0x14006b403
mov dword [r11], MsiGetPropertyW
jmp 0x14006b423
lea eax, [r8 - 0x61]
cmp eax, 0x19
ja 0x14006b410
add r8d, 0xffffffe0
xor r8d, 0x40
jmp 0x14006b423
test r15b, 0x40
je 0x14006b423
mov dword [r11], 3
mov rbx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
bt r15d, 0x1d
mov r15, qword [rsp + 0x20]
jae 0x14006b44e
lea ecx, [rsi - 6]
cmp ecx, 5
ja 0x14006b44e
add esi, 0x17
mov qword [r12], r10
mov eax, esi
mov dword [r13], r8d
add rsp, 0x30
pop r13
pop r12
pop rsi
ret