Function at 0x140075690
Capabilities:
Encode data using base64

Disassembly:
push rsi
push r12
push r13
sub rsp, 0x30
mov r10, qword [rcx]
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x20], r15
mov r15d, dword [rsp + 0x70]
mov r11, r8
movzx r8d, byte [r10 + 1]
mov edi, r15d
xor esi, esi
shr edi, 0xb
add r10, 2
mov ebp, r9d
mov r13, rdx
mov r12, rcx
and edi, 1
je 0x1400757be
cmp r8d, 0xc0
jb 0x1400757be
test r8b, 0x20
jne 0x140075704
movzx eax, byte [r10]
and r8d, 0x1f
and eax, 0x3f
shl r8d, 6
or r8d, eax
inc r10
jmp 0x1400757be
test r8b, 0x10
jne 0x140075737
movzx ecx, byte [r10]
movzx eax, byte [r10 + 1]
and r8d, 0xf
and eax, 0x3f
and ecx, 0x3f
shl ecx, 6
or ecx, eax
mov eax, r8d
shl eax, 0xc
mov r8d, ecx
or r8d, eax
add r10, 2
jmp 0x1400757be
movzx eax, byte [r10]
movzx ecx, byte [r10 + 1]
and eax, 0x3f
and ecx, 0x3f
shl eax, 6
or ecx, eax
movzx eax, byte [r10 + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
test r8b, 8
jne 0x140075774
and r8d, 7
mov eax, r8d
mov r8d, ecx
shl eax, 0x12
or r8d, eax
add r10, 3
jmp 0x1400757be
movzx eax, byte [r10 + 3]
shl ecx, 6
and eax, 0x3f
or ecx, eax
test r8b, 4
jne 0x14007579d
and r8d, 3
mov eax, r8d
mov r8d, ecx
shl eax, 0x18
or r8d, eax
add r10, 4
jmp 0x1400757be
movzx eax, byte [r10 + 4]
and r8d, 1
shl ecx, 6
and eax, 0x3f
or ecx, eax
mov eax, r8d
shl eax, 0x1e
mov r8d, ecx
or r8d, eax
add r10, 5
dec r10
test r8d, r8d
jne 0x1400757d4
mov r9d, 1
mov dword [r11], r9d
jmp 0x140075e8d
lea ecx, [r8 - 0x30]
cmp ecx, 0x4a
ja 0x140075e8d
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x28], r14
lea r14, [0x140000000]
movsx edx, word [r14 + rcx*2 + 0x191f10]
test edx, edx
je 0x140075810
jle 0x140075809
mov r8d, edx
jmp 0x140075e83
mov esi, edx
jmp 0x140075a71
cmp ecx, 0x48
ja case.0x14007582d.9
movzx eax, byte [r14 + rcx + 0x75eec]
mov ecx, dword [r14 + rax*4 + 0x75ec4]
add rcx, r14
jmp rcx
bt r15d, 0x19
jae case.0x14007582d.2
movzx eax, byte [r10 + 1]
test byte [rax + r14 + 0x192f30], 8
je 0x140075e83
movzx ecx, byte [r10 + 2]
test byte [rcx + r14 + 0x192f30], 8
je 0x140075e83
movzx edx, byte [r10 + 3]
test byte [rdx + r14 + 0x192f30], 8
je 0x140075e83
movzx ebp, byte [r10 + 4]
lea r9, [0x140000000]
test byte [r9 + rbp + 0x192f30], 8
je 0x140075e83
mov r8d, eax
cmp eax, 0x61
jb 0x14007589d
add r8d, 0xffffffe0
cmp r8d, 0x41
mov r9d, gethostname
mov ebx, gethostbyname
mov eax, r9d
cmovb eax, ebx
sub r8d, eax
cmp ecx, 0x61
jb 0x1400758bd
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
add r8d, ecx
mov ecx, edx
cmp edx, 0x61
jb 0x1400758da
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
mov eax, ebp
add r8d, ecx
cmp ebp, 0x61
jb 0x1400758f7
add eax, 0xffffffe0
cmp eax, 0x41
mov edx, 0xff
mov ebp, 0x10ffff
cmovb r9d, ebx
shl r8d, 4
add r10, 4
sub r8d, r9d
add r8d, eax
test edi, edi
cmovne edx, ebp
cmp r8d, edx
jbe 0x140075d8b
mov dword [r11], 0x4c
jmp 0x140075e83
bt r15d, 0x19
jb 0x140075e83
mov dword [r11], 0x25
jmp 0x140075e83
cmp dword [rsp + 0x78], esi
jne 0x140075e83
movzx eax, byte [r10 + 1]
cmp al, 0x3c
je 0x140075aa4
cmp al, 0x27
je 0x140075aa4
mov r9d, 1
cmp al, 0x7b
jne 0x1400759b2
movzx eax, byte [r10 + 2]
lea rcx, [r10 + 2]
test al, al
je 0x140075995
nop dword [rax]
cmp al, 0x2d
je 0x14007598a
sub al, 0x30
cmp al, 9
ja 0x14007599d
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140075980
mov ebx, r9d
inc r10
jmp 0x1400759b4
movzx eax, byte [rcx]
test al, al
je 0x140075995
cmp al, 0x7d
je 0x140075995
mov esi, 0x1c
jmp 0x140075e83
mov ebx, esi
cmp byte [r10 + 1], 0x2d
jne 0x1400759c0
inc r10
jmp 0x1400759c3
mov r9d, esi
movzx ecx, byte [r10 + 1]
lea rdx, [r10 + 1]
mov eax, esi
cmp cl, 0x30
jb 0x1400759f9
cmp cl, 0x39
ja 0x1400759f9
cmp eax, 0xccccccb
jg 0x140075a12
lea ecx, [rax + rax*4]
movzx eax, byte [rdx]
mov r10, rdx
inc rdx
lea eax, [rax + rcx*2]
movzx ecx, byte [rdx]
add eax, 0xffffffd0
cmp cl, 0x30
jae 0x1400759d3
test ebx, ebx
je 0x140075a45
inc r10
cmp byte [r10], 0x7d
je 0x140075a45
mov dword [r11], reloc.WS2_32.dll_gethostname
jmp 0x140075e83
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x30
jb 0x140075b95
cmp al, 0x39
ja 0x140075b95
movzx eax, byte [rcx + 1]
mov r10, rcx
inc rcx
cmp al, 0x30
jae 0x140075a23
mov dword [r11], IsNetDrive
jmp 0x140075e83
test eax, eax
jne 0x140075a55
mov dword [r11], 0x3a
jmp 0x140075e83
test r9d, r9d
je 0x140075a6f
cmp eax, ebp
jle 0x140075a6a
mov dword [r11], reloc.WS2_32.dll_ntohs
jmp 0x140075e83
sub ebp, eax
lea eax, [rbp + 1]
mov esi, eax
neg esi
cmp esi, 0xc
jne 0x140075e83
cmp byte [r10 + 1], 0x7b
jne 0x140075e83
lea rcx, [r10 + 2]
call fcn.14007d920
test eax, eax
jne 0x140075e83
mov dword [r11], 0x25
jmp 0x140075e83
mov esi, 0x1b
jmp 0x140075e83
cmp dword [rsp + 0x78], esi
jne 0x140075b10
movzx ecx, byte [r10 + 1]
lea r9, [r10 + 1]
mov rbx, r10
lea eax, [r8 - 0x30]
cmp cl, 0x30
jb 0x140075afc
nop dword [rax]
cmp cl, 0x39
ja 0x140075afc
cmp eax, 0xccccccb
jg 0x140075b76
lea ecx, [rax + rax*4]
movzx eax, byte [r9]
mov r10, r9
inc r9
lea eax, [rax + rcx*2]
movzx ecx, byte [r9]
add eax, 0xffffffd0
cmp cl, 0x30
jae 0x140075ad0
cmp eax, 8
jl 0x140075a6f
cmp eax, ebp
jle 0x140075a6f
mov r10, rbx
movzx r8d, byte [r10]
cmp r8d, 0x38
jae 0x140075e83
add r8d, 0xffffffd0
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
inc edx
sub al, 0x30
cmp al, 7
ja 0x140075b54
movzx eax, byte [rcx]
add r8d, 0xfffffffa
mov r10, rcx
lea r8d, [rax + r8*8]
cmp edx, 2
jl 0x140075b30
test edi, edi
jne 0x140075e83
mov edx, 0xff
cmp r8d, edx
jbe 0x140075e83
mov dword [r11], reloc.WS2_32.dll_gethostbyaddr
jmp 0x140075e83
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
cmp al, 0x30
jb 0x140075b95
cmp al, 0x39
ja 0x140075b95
movzx eax, byte [rcx + 1]
mov r10, rcx
inc rcx
cmp al, 0x30
jae 0x140075b83
mov dword [r11], IsNetDrive
jmp 0x140075e83
cmp byte [r10 + 1], 0x7b
je 0x140075bb4
mov dword [r11], 0x51
jmp 0x140075e83
cmp byte [r10 + 2], 0x7d
lea rax, [r10 + 2]
jne 0x140075bcb
mov dword [r11], 0x56
jmp 0x140075e83
mov r10, rax
movzx eax, byte [rax]
mov r8d, esi
cmp al, 0x30
jb 0x140075c12
mov edx, 0xff
mov ebp, 0x10ffff
cmp al, 0x37
ja 0x140075c12
inc r10
movzx ecx, al
test r8d, r8d
jne 0x140075bf6
cmp ecx, 0x30
je 0x140075c0a
add r8d, 0xfffffffa
test edi, edi
mov eax, edx
lea r8d, [rcx + r8*8]
cmovne eax, ebp
cmp r8d, eax
ja 0x140075c3e
movzx eax, byte [r10]
cmp al, 0x30
jae 0x140075be2
cmp byte [r10], 0x7d
jne 0x140075c70
test edi, edi
je 0x140075e83
lea eax, [r8 - 0xd800]
cmp eax, 0x7ff
ja 0x140075e83
mov dword [r11], 0x49
jmp 0x140075e83
movzx eax, byte [r10]
cmp al, 0x30
jb 0x140075dd3
nop word [rax + rax]
cmp al, 0x37
ja 0x140075dd3
movzx eax, byte [r10 + 1]
inc r10
cmp al, 0x30
jae 0x140075c50
mov dword [r11], 0x22
jmp 0x140075e83
mov dword [r11], 0x50
jmp 0x140075e83
bt r15d, 0x19
jae 0x140075cf3
movzx eax, byte [r10 + 1]
test byte [rax + r14 + 0x192f30], 8
je 0x140075e83
movzx ecx, byte [r10 + 2]
test byte [rcx + r14 + 0x192f30], 8
je 0x140075e83
mov r8d, eax
cmp eax, 0x61
jb 0x140075cb7
add r8d, 0xffffffe0
cmp r8d, 0x41
mov r9d, gethostname
mov ebx, gethostbyname
mov eax, r9d
cmovb eax, ebx
sub r8d, eax
mov eax, ecx
cmp ecx, 0x61
jb 0x140075cd9
add eax, 0xffffffe0
cmp eax, 0x41
cmovb r9d, ebx
shl r8d, 4
sub r8d, r9d
add r8d, eax
add r10, 2
jmp 0x140075e83
cmp byte [r10 + 1], 0x7b
jne 0x140075deb
movzx ecx, byte [r10 + 2]
add r10, 2
cmp cl, 0x7d
jne 0x140075d18
mov dword [r11], 0x56
jmp 0x140075e83
movzx eax, cl
mov r8d, esi
test byte [rax + r14 + 0x192f30], 8
je 0x140075d85
mov ebx, gethostbyname
mov edx, 0xff
mov ebp, 0x10ffff
lea r9d, [rbx + 7]
nop dword [rax]
inc r10
movzx ecx, cl
test r8d, r8d
jne 0x140075d4f
cmp ecx, ebx
je 0x140075d76
cmp ecx, 0x61
jb 0x140075d57
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
mov eax, edx
add r8d, ecx
test edi, edi
cmovne eax, ebp
cmp r8d, eax
ja 0x140075db1
movzx ecx, byte [r10]
test byte [rcx + r14 + 0x192f30], 8
jne 0x140075d40
cmp byte [r10], 0x7d
jne 0x140075ddf
test edi, edi
je 0x140075e83
lea eax, [r8 - 0xd800]
cmp eax, 0x7ff
ja 0x140075e83
mov dword [r11], 0x49
jmp 0x140075e83
movzx eax, byte [r10]
test byte [rax + r14 + 0x192f30], 8
je 0x140075dd3
movzx eax, byte [r10 + 1]
inc r10
test byte [rax + r14 + 0x192f30], 8
jne 0x140075dc0
mov dword [r11], 0x22
jmp 0x140075e83
mov dword [r11], 0x4f
jmp 0x140075e83
mov ebx, gethostbyname
mov r8d, esi
lea r9d, [rbx + 7]
nop word [rax + rax]
movzx eax, byte [r10 + 1]
lea rcx, [r10 + 1]
inc edx
test byte [rax + r14 + 0x192f30], 8
je 0x140075e83
mov r10, rcx
movzx ecx, byte [rcx]
cmp ecx, 0x61
jb 0x140075e24
add ecx, 0xffffffe0
cmp ecx, 0x41
mov eax, r9d
cmovb eax, ebx
shl r8d, 4
sub r8d, eax
add r8d, ecx
cmp edx, 2
jl 0x140075e00
jmp 0x140075e83
movzx r8d, byte [r10 + 1]
inc r10
test r8d, r8d
jne 0x140075e54
mov dword [r11], 2
jmp 0x140075e83
cmp r8d, 0x7f
jbe 0x140075e63
mov dword [r11], MsiGetPropertyW
jmp 0x140075e83
lea eax, [r8 - 0x61]
cmp eax, 0x19
ja 0x140075e70
add r8d, 0xffffffe0
xor r8d, 0x40
jmp 0x140075e83
test r15b, 0x40
je 0x140075e83
mov dword [r11], 3
mov rbx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
bt r15d, 0x1d
mov r15, qword [rsp + 0x20]
jae 0x140075eae
lea ecx, [rsi - 6]
cmp ecx, 5
ja 0x140075eae
add esi, 0x17
mov qword [r12], r10
mov eax, esi
mov dword [r13], r8d
add rsp, 0x30
pop r13
pop r12
pop rsi
ret
mov al, 0x2e
or eax, 0xc7423870