Function at 0x140036be0
Capabilities:
Encode data using base64

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r14
mov r11, qword [rcx]
mov r13d, 1
mov esi, r9d
add r11, r13
shr esi, 0xb
mov ebp, r9d
movzx r10d, byte [r11]
add r11, r13
and esi, r13d
mov edi, r8d
mov r12, rcx
je 0x140036d59
cmp r10d, 0xc0
jl 0x140036d59
movzx ecx, byte [r11]
and ecx, 0x3f
test r10b, 0x20
jne 0x140036c56
and r10d, 0x1f
mov eax, r10d
mov r10d, ecx
shl eax, 6
or r10d, eax
add r11, r13
jmp 0x140036d59
test r10b, 0x10
jne 0x140036c84
and r10d, 0xf
mov eax, r10d
mov r10d, ecx
shl eax, 6
or r10d, eax
movzx eax, byte [r11 + 1]
and eax, 0x3f
shl r10d, 6
or r10d, eax
add r11, 2
jmp 0x140036d59
test r10b, 8
jne 0x140036cc1
and r10d, 7
mov eax, r10d
mov r10d, ecx
shl eax, 6
or r10d, eax
movzx eax, byte [r11 + 1]
and eax, 0x3f
shl r10d, 6
or r10d, eax
movzx eax, byte [r11 + 2]
and eax, 0x3f
shl r10d, 6
or r10d, eax
add r11, 3
jmp 0x140036d59
test r10b, 4
jne 0x140036d0a
and r10d, 3
mov eax, r10d
mov r10d, ecx
shl eax, 6
or r10d, eax
movzx eax, byte [r11 + 1]
and eax, 0x3f
shl r10d, 6
or r10d, eax
movzx eax, byte [r11 + 2]
and eax, 0x3f
shl r10d, 6
or r10d, eax
movzx eax, byte [r11 + 3]
and eax, 0x3f
shl r10d, 6
or r10d, eax
add r11, 4
jmp 0x140036d59
and r10d, r13d
mov eax, r10d
mov r10d, ecx
shl eax, 6
or r10d, eax
movzx eax, byte [r11 + 1]
and eax, 0x3f
shl r10d, 6
or r10d, eax
movzx eax, byte [r11 + 2]
and eax, 0x3f
shl r10d, 6
or r10d, eax
movzx eax, byte [r11 + 3]
and eax, 0x3f
shl r10d, 6
or r10d, eax
movzx eax, byte [r11 + 4]
and eax, 0x3f
shl r10d, 6
or r10d, eax
add r11, 5
sub r11, r13
test r10d, r10d
jne 0x140036d69
mov dword [rdx], r13d
jmp 0x1400370de
lea ecx, [r10 - 0x30]
cmp ecx, 0x4a
ja 0x1400370cb
lea r14, [0x140000000]
movsxd rax, r10d
movsx ebx, word [r14 + rax*2 + 0x9b480]
test ebx, ebx
je 0x140036d95
mov r10d, ebx
jmp 0x1400370cb
cmp r10d, 0x63
jg 0x140036ec2
je 0x140036e84
mov r9d, gethostbyname
cmp r10d, r9d
je 0x140036e40
jle 0x140036ee6
cmp r10d, 0x39
jle 0x140036ddb
cmp r10d, 0x4c
je 0x140036dd0
cmp r10d, 0x55
jne 0x140036ee6
mov dword [rdx], reloc.OLEAUT32.dll_SafeArrayDestroyDescriptor
jmp 0x1400370cb
cmp dword [rsp + 0x40], 0
jne 0x140036e2b
mov r8, r11
mov r10d, ecx
jmp 0x140036dfa
mov r11, rcx
lea ecx, [r10 + r10*4]
movzx eax, byte [r11]
lea r10d, [rax + rcx*2 - 0x30]
lea rcx, [r11 + 1]
movzx eax, byte [rcx]
test byte [rax + r14 + 0x9c150], 4
jne 0x140036dea
test r10d, r10d
js 0x140037073
cmp r10d, 0xa
jl 0x1400370b8
cmp r10d, edi
jle 0x1400370b8
mov r11, r8
movzx r10d, byte [r11]
cmp r10d, 0x38
jl 0x140036e40
sub r11, r13
xor r10d, r10d
jmp 0x1400370de
sub r10d, r9d
lea rax, [r11 + 1]
add ebx, r13d
cmp byte [rax], r9b
jb 0x140036e64
cmp byte [rax], 0x37
ja 0x140036e64
mov r11, rax
movzx eax, byte [rax]
lea r10d, [rax + r10*8 - 0x30]
cmp ebx, 2
jl 0x140036e43
test esi, esi
jne 0x1400370cb
cmp r10d, 0xff
jle 0x1400370cb
mov dword [rdx], gethostbyname
jmp 0x1400370cb
add r11, r13
movzx r10d, byte [r11]
test r10d, r10d
jne 0x140036e9b
mov dword [rdx], 2
jmp 0x1400370de
cmp r10d, 0x7f
jle 0x140036eac
mov dword [rdx], 0x44
jmp 0x1400370cb
lea eax, [r10 - 0x61]
cmp eax, 0x19
ja 0x140036eb9
sub r10d, 0x20
xor r10d, 0x40
jmp 0x1400370cb
cmp r10d, 0x67
je 0x140036fc4
cmp r10d, 0x6c
je 0x140036dd0
cmp r10d, 0x75
je 0x140036dd0
cmp r10d, 0x78
je 0x140036efb
test bpl, 0x40
je 0x1400370cb
mov dword [rdx], 3
jmp 0x1400370cb
cmp byte [r11 + 1], 0x7b
mov r9d, gethostbyname
jne 0x140036f7a
xor edi, edi
lea r8, [r11 + 2]
xor r10d, r10d
jmp 0x140036f44
add r8, r13
movzx ecx, al
test r10d, r10d
jne 0x140036f23
cmp ecx, r9d
je 0x140036f44
add edi, r13d
cmp ecx, 0x61
jl 0x140036f2e
sub ecx, 0x20
cmp ecx, 0x41
mov eax, gethostname
cmovl eax, r9d
shl r10d, 4
sub r10d, eax
add r10d, ecx
movzx eax, byte [r8]
test byte [rax + r14 + 0x9c150], 8
jne 0x140036f13
cmp byte [r8], 0x7d
jne 0x140036f7a
test r10d, r10d
js 0x140036f6c
neg esi
sbb eax, eax
and eax, 6
add eax, 2
cmp edi, eax
jle 0x140036f72
mov dword [rdx], SafeArrayDestroyData
mov r11, r8
jmp 0x1400370cb
xor r10d, r10d
lea rcx, [r11 + 1]
add ebx, r13d
movzx eax, byte [rcx]
test byte [rax + r14 + 0x9c150], 8
je 0x1400370cb
mov r11, rcx
movzx ecx, byte [rcx]
cmp ecx, 0x61
jl 0x140036fa4
sub ecx, 0x20
cmp ecx, 0x41
mov eax, gethostname
cmovl eax, r9d
shl r10d, 4
sub r10d, eax
add r10d, ecx
cmp ebx, 2
jl 0x140036f7d
jmp 0x1400370cb
mov al, byte [r11 + 1]
cmp al, 0x3c
je 0x1400370c5
cmp al, 0x27
je 0x1400370c5
cmp al, 0x7b
jne 0x140037022
lea rcx, [r11 + 2]
mov al, byte [rcx]
test al, al
je 0x14003701a
cmp al, 0x7d
je 0x140037005
cmp al, 0x2d
je 0x140036ffc
movzx eax, al
test byte [rax + r14 + 0x9c150], 4
je 0x140037005
add rcx, r13
mov al, byte [rcx]
test al, al
jne 0x140036fe6
mov al, byte [rcx]
test al, al
je 0x14003701a
cmp al, 0x7d
je 0x14003701a
mov r10d, 0xffffffe4
jmp 0x1400370de
mov r9d, r13d
inc r11
jmp 0x140037025
xor r9d, r9d
cmp byte [r11 + 1], 0x2d
jne 0x140037034
mov r8d, r13d
inc r11
jmp 0x140037037
xor r8d, r8d
lea rcx, [r11 + 1]
xor r10d, r10d
movzx eax, byte [rcx]
test byte [rax + r14 + 0x9c150], 4
je 0x14003707b
mov r11, rcx
lea ecx, [r10 + r10*4]
movzx eax, byte [r11]
lea r10d, [rax + rcx*2 - 0x30]
lea rcx, [r11 + 1]
movzx eax, byte [rcx]
test byte [rax + r14 + 0x9c150], 4
jne 0x14003704c
test r10d, r10d
jns 0x14003707b
mov dword [rdx], 0x3d
jmp 0x1400370cb
test r9d, r9d
je 0x140037091
add r11, r13
cmp byte [r11], 0x7d
je 0x140037091
mov dword [rdx], reloc.WSOCK32.dll_gethostname
jmp 0x1400370cb
test r10d, r10d
jne 0x14003709e
mov dword [rdx], 0x3a
jmp 0x1400370de
test r8d, r8d
je 0x1400370b8
cmp r10d, edi
jle 0x1400370b0
mov dword [rdx], reloc.WSOCK32.dll_ntohs
jmp 0x1400370cb
sub edi, r10d
lea r10d, [r13 + rdi]
mov eax, 0xffffffdd
sub eax, r10d
mov r10d, eax
jmp 0x1400370cb
mov r10d, 0xffffffe5
cmp r10d, 0xfffffff4
jne 0x1400370de
cmp byte [r11 + 1], 0x7b
jne 0x1400370de
mov dword [rdx], reloc.OLEAUT32.dll_SafeArrayDestroyDescriptor
bt ebp, 0x1d
jae 0x1400370f1
lea ecx, [r10 + 0xb]
cmp ecx, 5
ja 0x1400370f1
sub r10d, 0x17
mov rbx, qword [rsp + 0x20]
mov rbp, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov qword [r12], r11
mov eax, r10d
pop r14
pop r13
pop r12
ret