Function at 0x372736360
Capabilities:
Encode data using base64
Parse pe header

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov rbx, rcx
cmp al, 0x4c
je 0x3727366b0
cmp al, 0x54
je 0x3727366c0
cmp al, 0x73
je 0x3727363e0
cmp al, 0x66
je 0x372736450
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x3727363ac
cmp al, 0x6f
jne 0x3727364b0
cmp byte [rdx + 1], 0x6e
jne 0x3727363f4
add rdx, 2
mov qword [rbx + 0x18], rdx
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.372734460
mov rsi, rax
test rax, rax
je 0x3727366a0
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
je 0x3727365e8
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
movzx eax, byte [rdx + 1]
cmp al, 0x72
je 0x372736560
cmp al, 0x70
je 0x372736830
mov rcx, rbx
call fcn.372733930
mov rsi, rax
test rax, rax
je 0x3727366a0
mov eax, dword [rax]
cmp eax, 0x33
je 0x372736510
cmp eax, 0x34
je 0x372736708
cmp eax, 0x35
jne 0x3727366a0
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x5f
je 0x3727367c6
mov rcx, rbx
call fcn.372736360
mov r9, rax
mov r8, rsi
mov edx, 0x38
jmp 0x372736603
cmp byte [rdx + 1], 0x70
jne 0x3727363f4
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
cmp byte [rdx + 2], 0x54
je 0x372736820
call fcn.372732310
lea edx, [rax + 1]
not eax
test eax, 0x7fffffff
je 0x3727366a0
mov eax, dword [rbx + 0x28]
cmp eax, dword [rbx + 0x2c]
jge 0x3727366a0
movsxd rsi, eax
add eax, 1
shl rsi, 5
add rsi, qword [rbx + 0x20]
mov qword [rsi + 4], 0
mov dword [rbx + 0x28], eax
mov dword [rsi], 6
mov dword [rsi + 0x10], edx
jmp 0x3727363d2
cmp al, 0x69
je 0x3727364bc
cmp al, 0x74
jne 0x3727366d0
cmp byte [rdx + 1], 0x6c
jne 0x3727363f4
add rdx, 2
xor esi, esi
mov qword [rbx + 0x18], rdx
cmp al, 0x74
je 0x3727368f0
cmp byte [rdx], 0
je 0x3727366a0
cmp byte [rdx + 1], 0
je 0x3727366a0
mov edx, 0x45
mov rcx, rbx
call fcn.372737000
mov r8, rsi
mov edx, 0x32
mov r9, rax
jmp 0x372736603
mov rdx, qword [rsi + 0x10]
mov rdi, qword [rdx]
mov eax, dword [rdx + 0x10]
sub eax, 2
add dword [rbx + 0x48], eax
movzx eax, byte [rdi]
cmp eax, 0x73
jne 0x372736618
cmp byte [rdi + 1], 0x74
jne 0x372736618
cmp byte [rdi + 2], 0
jne 0x372736618
mov rcx, rbx
call fcn.372732bf0
mov r8, rsi
mov edx, 0x38
mov r9, rax
jmp 0x372736603
lea rax, [rdx + 2]
mov qword [rcx + 0x18], rax
mov eax, dword [rcx + 0x54]
test eax, eax
je 0x372736855
movzx eax, byte [rdx + 2]
cmp al, 0x39
jle 0x37273684d
sub eax, 0x43
cmp al, 0x37
ja 0x372736855
movabs rdx, 0xffffffc0040201
bt rdx, rax
jae 0x372736855
mov dword [rbx + 0x54], 0xffffffff
xor edx, edx
mov rcx, rbx
call fcn.3727360e0
mov rdx, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x45
jne 0x3727365c8
add rax, 1
mov qword [rbx + 0x18], rax
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rbx
call fcn.372734460
mov rsi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x3727363d2
nop dword [rax + rax]
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.372735f20
mov r8, rsi
mov edx, 4
mov r9, rax
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.372731a80
mov ebp, dword [rdx + 0x14]
cmp ebp, 2
je 0x372736730
jg 0x372736868
test ebp, ebp
je 0x37273671d
cmp ebp, 1
jne 0x3727366a0
movzx edx, byte [rdi]
cmp dl, 0x6d
je 0x3727367e8
cmp dl, 0x70
je 0x3727367e8
xor ebp, ebp
cmp eax, 0x73
jne 0x372736810
cmp byte [rdi + 1], 0x50
jne 0x372736810
cmp byte [rdi + 2], 0
jne 0x372736810
mov rcx, rbx
call fcn.372735f20
mov r9, rax
test ebp, ebp
je 0x37273643d
mov r8, r9
mov edx, 0x3a
mov rcx, rbx
call fcn.372731a80
mov r9, rax
jmp 0x37273643d
xor esi, esi
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.372735d00
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.372732950
cmp al, 0x75
jne 0x3727363f4
add rdx, 1
mov rcx, rbx
mov qword [rbx + 0x18], rdx
call fcn.3727324a0
mov rcx, rbx
mov rsi, rax
call fcn.372735f20
mov r8, rsi
mov edx, 0x40
mov r9, rax
jmp 0x372736603
mov eax, dword [rsi + 0x10]
cmp eax, 1
je 0x372736432
cmp eax, 3
je 0x3727366a0
test eax, eax
jne 0x3727366a0
xor r9d, r9d
mov r8, rsi
mov edx, 0x37
jmp 0x372736603
cmp byte [rdi + 1], 0x63
movzx edx, byte [rdi]
je 0x372736a24
cmp dl, 0x66
je 0x372736a89
cmp eax, 0x64
jne 0x372736a6d
cmp byte [rdi + 1], 0x69
jne 0x372736a6d
cmp byte [rdi + 2], 0
jne 0x372736a6d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.372734460
mov rbp, rax
movzx eax, byte [rdi]
cmp eax, 0x63
jne 0x3727369a0
cmp byte [rdi + 1], 0x6c
jne 0x3727369a0
cmp byte [rdi + 2], 0
jne 0x3727369a0
mov edx, 0x45
mov rcx, rbx
call fcn.372737000
mov rdi, rax
mov r9, rdi
mov r8, rbp
mov edx, 0x3a
mov rcx, rbx
call fcn.372731a80
mov r8, rsi
mov edx, 0x39
mov r9, rax
jmp 0x372736603
add rax, 1
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.372737000
mov r9, rax
jmp 0x37273643d
cmp byte [rdi + 1], dl
jne 0x37273664c
mov rdx, qword [rbx + 0x18]
cmp byte [rdx], 0x5f
jne 0x37273664e
add rdx, 1
mov qword [rbx + 0x18], rdx
movzx eax, byte [rdi]
jmp 0x37273664c
mov rcx, rbx
call fcn.372736360
mov r9, rax
jmp 0x372736676
add rdx, 3
mov qword [rcx + 0x18], rdx
xor edx, edx
jmp 0x37273647d
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.372736360
xor r9d, r9d
mov edx, 0x4d
mov r8, rax
jmp 0x372736603
cmp al, 0x2f
jg 0x37273659e
mov rcx, rbx
call fcn.372732bf0
mov rdx, rax
jmp 0x3727365c8
cmp ebp, 3
jne 0x3727366a0
cmp eax, 0x71
jne 0x372736908
cmp byte [rdi + 1], 0x75
jne 0x372736908
cmp byte [rdi + 2], 0
jne 0x372736908
mov rcx, rbx
call fcn.372736360
mov rcx, rbx
mov rdi, rax
call fcn.372736360
mov rcx, rbx
mov rbp, rax
call fcn.372736360
mov r9, rax
test rax, rax
je 0x3727366a0
mov r8, rbp
mov edx, 0x3d
mov rcx, rbx
call fcn.372731a80
mov r8, rdi
mov edx, 0x3c
mov rcx, rbx
mov r9, rax
call fcn.372731a80
mov r8, rsi
mov edx, 0x3b
mov r9, rax
jmp 0x372736603
mov rcx, rbx
call fcn.372732bf0
mov rdx, qword [rbx + 0x18]
mov rsi, rax
jmp 0x3727364d8
cmp eax, 0x64
jne 0x37273691d
cmp byte [rdi + 1], 0x58
jne 0x37273691d
cmp byte [rdi + 2], 0
je 0x37273688a
movzx eax, byte [rdi]
cmp al, 0x66
je 0x372736a99
cmp al, 0x6e
jne 0x3727366a0
movzx eax, byte [rdi + 1]
cmp al, 0x77
je 0x372736940
cmp al, 0x61
jne 0x3727366a0
mov edx, 0x5f
mov rcx, rbx
call fcn.372737000
mov rcx, rbx
mov rdi, rax
call fcn.372732bf0
mov rbp, rax
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x45
je 0x372736acd
cmp dl, 0x70
je 0x372736aa6
cmp dl, 0x69
jne 0x3727366a0
cmp byte [rax + 1], 0x6c
jne 0x3727366a0
mov rcx, rbx
call fcn.372736360
mov r9, rax
jmp 0x3727368b4
cmp eax, 0x64
jne 0x372736a48
cmp byte [rdi + 1], 0x74
jne 0x372736a48
cmp byte [rdi + 2], 0
jne 0x372736a48
mov rax, qword [rbx + 0x18]
movzx edx, byte [rax]
cmp dl, 0x67
je 0x372736a7d
cmp dl, 0x73
jne 0x3727369dc
cmp byte [rax + 1], 0x72
je 0x372736a5d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.372734460
mov rdi, rax
mov rax, qword [rbx + 0x18]
cmp byte [rax], 0x49
jne 0x3727367a3
add rax, 1
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.372735f20
mov r8, rdi
mov edx, 4
mov rcx, rbx
mov r9, rax
call fcn.372731a80
mov rdi, rax
jmp 0x3727367a3
lea ecx, [rdx - 0x72]
cmp cl, 1
jbe 0x372736a38
lea ecx, [rdx - 0x63]
cmp cl, 1
ja 0x37273673d
mov rcx, rbx
call fcn.372732bf0
mov rbp, rax
jmp 0x372736773
cmp eax, 0x70
jne 0x372736a5d
cmp byte [rdi + 1], 0x74
jne 0x372736a5d
cmp byte [rdi + 2], 0
je 0x3727369bd
mov rcx, rbx
call fcn.372736360
mov rdi, rax
jmp 0x3727367a3
mov rcx, rbx
call fcn.372736360
mov rbp, rax
jmp 0x372736773
cmp byte [rax + 1], 0x73
jne 0x3727369dc
jmp 0x372736a5d
mov rcx, rbx
call fcn.372733930
mov rbp, rax
jmp 0x372736773
mov rcx, rbx
call fcn.372733930
jmp 0x372736892
cmp byte [rax + 1], 0x69
jne 0x3727366a0
add rax, 2
mov edx, 0x45
mov rcx, rbx
mov qword [rbx + 0x18], rax
call fcn.372737000
mov r9, rax
jmp 0x3727368b4
add rax, 1
xor r9d, r9d
mov qword [rbx + 0x18], rax
jmp 0x3727368b4