Function at 0x140052cd0
Capabilities:
Encode data using base64

Disassembly:
push rsi
push r12
push r13
sub rsp, 0x30
mov r10, qword [rcx]
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x20], r15
mov r15d, dword [rsp + 0x70]
mov r11, r8
movzx r8d, byte [r10 + 1]
mov edi, r15d
xor esi, esi
shr edi, 0xb
add r10, 2
mov ebp, r9d
mov r13, rdx
mov r12, rcx
and edi, 1
je 0x140052dfe
cmp r8d, 0xc0
jb 0x140052dfe
test r8b, 0x20
jne 0x140052d44
movzx eax, byte [r10]
and r8d, 0x1f
and eax, 0x3f
shl r8d, 6
or r8d, eax
inc r10
jmp 0x140052dfe
test r8b, 0x10
jne 0x140052d77
movzx ecx, byte [r10]
movzx eax, byte [r10 + 1]
and r8d, 0xf
and eax, 0x3f
and ecx, 0x3f
shl ecx, 6
or ecx, eax
mov eax, r8d
shl eax, 0xc
mov r8d, ecx
or r8d, eax
add r10, 2
jmp 0x140052dfe
movzx eax, byte [r10]
movzx ecx, byte [r10 + 1]
and eax, 0x3f
and ecx, 0x3f
shl eax, 6
or ecx, eax
movzx eax, byte [r10 + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
test r8b, 8
jne 0x140052db4
and r8d, 7
mov eax, r8d
mov r8d, ecx
shl eax, 0x12
or r8d, eax
add r10, 3
jmp 0x140052dfe
movzx eax, byte [r10 + 3]
shl ecx, 6
and eax, 0x3f
or ecx, eax
test r8b, 4
jne 0x140052ddd
and r8d, 3
mov eax, r8d
mov r8d, ecx
shl eax, 0x18
or r8d, eax
add r10, 4
jmp 0x140052dfe
movzx eax, byte [r10 + 4]
and r8d, 1
shl ecx, 6
and eax, 0x3f
or ecx, eax
mov eax, r8d
shl eax, 0x1e
mov r8d, ecx
or r8d, eax
add r10, 5
dec r10
test r8d, r8d
jne 0x140052e14
mov r9d, 1
mov dword [r11], r9d
jmp 0x1400534cd
lea ecx, [r8 - 0x30]
cmp ecx, 0x4a
ja 0x1400534cd
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x28], r14
lea r14, [0x140000000]
movsx edx, word [r14 + rcx*2 + 0x225b80]
test edx, edx
je 0x140052e50
jle 0x140052e49
mov r8d, edx
jmp 0x1400534c3
mov esi, edx
jmp 0x1400530b1
cmp ecx, 0x48
ja case.0x140052e6d.9
movzx eax, byte [r14 + rcx + 0x5352c]
mov ecx, dword [r14 + rax*4 + 0x53504]
add rcx, r14
jmp rcx
bt r15d, 0x19
jae case.0x140052e6d.2
movzx eax, byte [r10 + 1]
test byte [rax + r14 + 0x226ba0], 8
je 0x1400534c3
movzx ecx, byte [r10 + 2]
test byte [rcx + r14 + 0x226ba0], 8
je 0x1400534c3
movzx edx, byte [r10 + 3]
test byte [rdx + r14 + 0x226ba0], 8
je 0x1400534c3
movzx ebp, byte [r10 + 4]
lea r9, [0x140000000]
test byte [r9 + rbp + 0x226ba0], 8
je 0x1400534c3
mov r8d, eax
cmp eax, 0x61
jb 0x140052edd
add r8d, 0xffffffe0
cmp r8d, 0x41
mov r9d, gethostname
mov ebx, gethostbyaddr
mov eax, r9d
cmovb eax, ebx
sub r8d, eax
cmp ecx, 0x61
jb 0x140052efd
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
add r8d, ecx
mov ecx, edx
cmp edx, 0x61
jb 0x140052f1a
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
mov eax, ebp
add r8d, ecx
cmp ebp, 0x61
jb 0x140052f37
add eax, 0xffffffe0
cmp eax, 0x41
mov edx, 0xff
mov ebp, 0x10ffff
cmovb r9d, ebx
shl r8d, 4
add r10, 4
sub r8d, r9d
add r8d, eax
test edi, edi
cmovne edx, ebp
cmp r8d, edx
jbe 0x1400533cb
mov dword [r11], 0x4c
jmp 0x1400534c3
bt r15d, 0x19
jb 0x1400534c3
mov dword [r11], 0x25
jmp 0x1400534c3
cmp dword [rsp + 0x78], esi
jne 0x1400534c3
movzx eax, byte [r10 + 1]
cmp al, 0x3c
je 0x1400530e4
cmp al, 0x27
je 0x1400530e4
mov r9d, 1
cmp al, 0x7b
jne 0x140052ff2
movzx eax, byte [r10 + 2]
lea rcx, [r10 + 2]
test al, al
je 0x140052fd5
nop dword [rax]
cmp al, 0x2d
je 0x140052fca
sub al, 0x30
cmp al, 9
ja 0x140052fdd
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140052fc0
mov ebx, r9d
inc r10
jmp 0x140052ff4
movzx eax, byte [rcx]
test al, al
je 0x140052fd5
cmp al, 0x7d
je 0x140052fd5
mov esi, 0x1c
jmp 0x1400534c3
mov ebx, esi
cmp byte [r10 + 1], 0x2d
jne 0x140053000
inc r10
jmp 0x140053003
mov r9d, esi
movzx ecx, byte [r10 + 1]
lea rdx, [r10 + 1]
mov eax, esi
cmp cl, 0x30
jb 0x140053039
cmp cl, 0x39
ja 0x140053039
cmp eax, 0xccccccb
jg 0x140053052
lea ecx, [rax + rax*4]
movzx eax, byte [rdx]
mov r10, rdx
inc rdx
lea eax, [rax + rcx*2]
movzx ecx, byte [rdx]
add eax, 0xffffffd0
cmp cl, 0x30
jae 0x140053013
test ebx, ebx
je 0x140053085
inc r10
cmp byte [r10], 0x7d
je 0x140053085
mov dword [r11], reloc.WS2_32.dll_gethostname
jmp 0x1400534c3
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x30
jb 0x1400531d5
cmp al, 0x39
ja 0x1400531d5
movzx eax, byte [rcx + 1]
mov r10, rcx
inc rcx
cmp al, 0x30
jae 0x140053063
mov dword [r11], IsNetDrive
jmp 0x1400534c3
test eax, eax
jne 0x140053095
mov dword [r11], 0x3a
jmp 0x1400534c3
test r9d, r9d
je 0x1400530af
cmp eax, ebp
jle 0x1400530aa
mov dword [r11], SafeArrayGetLBound
jmp 0x1400534c3
sub ebp, eax
lea eax, [rbp + 1]
mov esi, eax
neg esi
cmp esi, 0xc
jne 0x1400534c3
cmp byte [r10 + 1], 0x7b
jne 0x1400534c3
lea rcx, [r10 + 2]
call fcn.14005af60
test eax, eax
jne 0x1400534c3
mov dword [r11], 0x25
jmp 0x1400534c3
mov esi, 0x1b
jmp 0x1400534c3
cmp dword [rsp + 0x78], esi
jne 0x140053150
movzx ecx, byte [r10 + 1]
lea r9, [r10 + 1]
mov rbx, r10
lea eax, [r8 - 0x30]
cmp cl, 0x30
jb 0x14005313c
nop dword [rax]
cmp cl, 0x39
ja 0x14005313c
cmp eax, 0xccccccb
jg 0x1400531b6
lea ecx, [rax + rax*4]
movzx eax, byte [r9]
mov r10, r9
inc r9
lea eax, [rax + rcx*2]
movzx ecx, byte [r9]
add eax, 0xffffffd0
cmp cl, 0x30
jae 0x140053110
cmp eax, 8
jl 0x1400530af
cmp eax, ebp
jle 0x1400530af
mov r10, rbx
movzx r8d, byte [r10]
cmp r8d, 0x38
jae 0x1400534c3
add r8d, 0xffffffd0
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
inc edx
sub al, 0x30
cmp al, 7
ja 0x140053194
movzx eax, byte [rcx]
add r8d, 0xfffffffa
mov r10, rcx
lea r8d, [rax + r8*8]
cmp edx, 2
jl 0x140053170
test edi, edi
jne 0x1400534c3
mov edx, 0xff
cmp r8d, edx
jbe 0x1400534c3
mov dword [r11], reloc.WS2_32.dll_gethostbyaddr
jmp 0x1400534c3
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x30
jb 0x1400531d5
cmp al, 0x39
ja 0x1400531d5
movzx eax, byte [rcx + 1]
mov r10, rcx
inc rcx
cmp al, 0x30
jae 0x1400531c3
mov dword [r11], IsNetDrive
jmp 0x1400534c3
cmp byte [r10 + 1], 0x7b
je 0x1400531f4
mov dword [r11], 0x51
jmp 0x1400534c3
cmp byte [r10 + 2], 0x7d
lea rax, [r10 + 2]
jne 0x14005320b
mov dword [r11], 0x56
jmp 0x1400534c3
mov r10, rax
movzx eax, byte [rax]
mov r8d, esi
cmp al, 0x30
jb 0x140053252
mov edx, 0xff
mov ebp, 0x10ffff
cmp al, 0x37
ja 0x140053252
inc r10
movzx ecx, al
test r8d, r8d
jne 0x140053236
cmp ecx, 0x30
je 0x14005324a
add r8d, 0xfffffffa
test edi, edi
mov eax, edx
lea r8d, [rcx + r8*8]
cmovne eax, ebp
cmp r8d, eax
ja 0x14005327e
movzx eax, byte [r10]
cmp al, 0x30
jae 0x140053222
cmp byte [r10], 0x7d
jne 0x1400532b0
test edi, edi
je 0x1400534c3
lea eax, [r8 - 0xd800]
cmp eax, 0x7ff
ja 0x1400534c3
mov dword [r11], 0x49
jmp 0x1400534c3
movzx eax, byte [r10]
cmp al, 0x30
jb 0x140053413
nop word [rax + rax]
cmp al, 0x37
ja 0x140053413
movzx eax, byte [r10 + 1]
inc r10
cmp al, 0x30
jae 0x140053290
mov dword [r11], 0x22
jmp 0x1400534c3
mov dword [r11], 0x50
jmp 0x1400534c3
bt r15d, 0x19
jae 0x140053333
movzx eax, byte [r10 + 1]
test byte [rax + r14 + 0x226ba0], 8
je 0x1400534c3
movzx ecx, byte [r10 + 2]
test byte [rcx + r14 + 0x226ba0], 8
je 0x1400534c3
mov r8d, eax
cmp eax, 0x61
jb 0x1400532f7
add r8d, 0xffffffe0
cmp r8d, 0x41
mov r9d, gethostname
mov ebx, gethostbyaddr
mov eax, r9d
cmovb eax, ebx
sub r8d, eax
mov eax, ecx
cmp ecx, 0x61
jb 0x140053319
add eax, 0xffffffe0
cmp eax, 0x41
cmovb r9d, ebx
shl r8d, 4
sub r8d, r9d
add r8d, eax
add r10, 2
jmp 0x1400534c3
cmp byte [r10 + 1], 0x7b
jne 0x14005342b
movzx ecx, byte [r10 + 2]
add r10, 2
cmp cl, 0x7d
jne 0x140053358
mov dword [r11], 0x56
jmp 0x1400534c3
movzx eax, cl
mov r8d, esi
test byte [rax + r14 + 0x226ba0], 8
je 0x1400533c5
mov ebx, gethostbyaddr
mov edx, 0xff
mov ebp, 0x10ffff
lea r9d, [rbx + 7]
nop dword [rax]
inc r10
movzx ecx, cl
test r8d, r8d
jne 0x14005338f
cmp ecx, ebx
je 0x1400533b6
cmp ecx, 0x61
jb 0x140053397
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
mov eax, edx
add r8d, ecx
test edi, edi
cmovne eax, ebp
cmp r8d, eax
ja 0x1400533f1
movzx ecx, byte [r10]
test byte [rcx + r14 + 0x226ba0], 8
jne 0x140053380
cmp byte [r10], 0x7d
jne 0x14005341f
test edi, edi
je 0x1400534c3
lea eax, [r8 - 0xd800]
cmp eax, 0x7ff
ja 0x1400534c3
mov dword [r11], 0x49
jmp 0x1400534c3
movzx eax, byte [r10]
test byte [rax + r14 + 0x226ba0], 8
je 0x140053413
movzx eax, byte [r10 + 1]
inc r10
test byte [rax + r14 + 0x226ba0], 8
jne 0x140053400
mov dword [r11], 0x22
jmp 0x1400534c3
mov dword [r11], 0x4f
jmp 0x1400534c3
mov ebx, gethostbyaddr
mov r8d, esi
lea r9d, [rbx + 7]
nop word [rax + rax]
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
inc edx
test byte [rax + r14 + 0x226ba0], 8
je 0x1400534c3
mov r10, rcx
movzx ecx, byte [rcx]
cmp ecx, 0x61
jb 0x140053464
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
add r8d, ecx
cmp edx, 2
jl 0x140053440
jmp 0x1400534c3
movzx r8d, byte [r10 + 1]
inc r10
test r8d, r8d
jne 0x140053494
mov dword [r11], 2
jmp 0x1400534c3
cmp r8d, 0x7f
jbe 0x1400534a3
mov dword [r11], MsiGetPropertyW
jmp 0x1400534c3
lea eax, [r8 - 0x61]
cmp eax, 0x19
ja 0x1400534b0
add r8d, 0xffffffe0
xor r8d, 0x40
jmp 0x1400534c3
test r15b, 0x40
je 0x1400534c3
mov dword [r11], 3
mov rbx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
bt r15d, 0x1d
mov r15, qword [rsp + 0x20]
jae 0x1400534ee
lea ecx, [rsi - 6]
cmp ecx, 5
ja 0x1400534ee
add esi, 0x17
mov qword [r12], r10
mov eax, esi
mov dword [r13], r8d
add rsp, 0x30
pop r13
pop r12
pop rsi
ret