Function at 0x5e6f20
Capabilities:
Encode data using base64

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x5e7473
push rbp
mov rbp, rsp
sub rsp, 0x98
mov word [rsp + 0xa8], ax
mov qword [rsp + 0xb0], rbx
mov rdx, qword [rbx + 0x18]
mov rsi, qword [rbx + 0x20]
test rdx, rdx
je 0x5e6f6a
mov rdi, qword [0x00972660]
mov r8, qword [rdi]
mov r9d, dword [rdx + 0x10]
jmp 0x5e7415
test rdx, rdx
je GetProcAddress
mov rcx, qword [rdx + 0x18]
mov rax, rsi
call rcx
nop dword [rax]
test rax, rax
je 0x5e7276
mov edx, dword [rax + 0x10]
cmp edx, 0x4bcec15d
jne WaitForSingleObject
lea rdx, [0x006c5200]
nop
cmp rax, rdx
jne 0x5e7276
mov rdx, qword [rbx]
mov rsi, qword [rdx + 0x10]
lea rdi, [rsi - 1]
nop
test rdi, rdi
jl 0x5e701b
mov rdx, qword [rdx + 8]
mov rdx, qword [rdx + rsi*8 - 8]
mov rsi, rdx
shr rdx, 1
or rdx, rsi
mov rsi, rdx
shr rdx, 2
or rdx, rsi
mov rsi, rdx
shr rdx, 4
or rdx, rsi
mov rsi, rdx
shr rdx, 8
or rdx, rsi
mov rsi, rdx
shr rdx, 0x10
or rdx, rsi
mov rsi, rdx
shr rdx, 0x20
or rdx, rsi
shl rdi, 6
bsr rdx, rdx
mov rsi, 0xffffffffffffffff
cmove rdx, rsi
lea rdx, [rdx + rdi]
lea rdx, [rdx + 1]
jmp 0x5e701d
xor edx, edx
mov qword [rsp + 0x48], rdx
mov rcx, qword [0x009724a8]
mov qword [rsp + 0x60], rcx
lea rax, [0x006b7380]
xor ebx, ebx
call fcn.0046c600
mov rdx, qword [0x009724a0]
mov rsi, qword [rsp + 0x48]
lea rdi, [rsi + 7]
sar rdi, 0x3f
shr rdi, 0x3d
lea rsi, [rdi + rsi]
lea rsi, [rsi + 7]
mov rdi, qword [0x009724a8]
sar rsi, 3
mov qword [rsp + 0x50], rsi
movzx r8d, word [rsp + 0xa8]
mov r9, qword [rsp + 0x60]
xor ecx, ecx
nop dword [rax]
jmp 0x5e7380
cmp edx, 0x8c7bd38d
jne GetStdHandle
lea rdx, [0x006eca40]
nop dword [rax + rax]
cmp rax, rdx
jne 0x5e7276
movzx edx, word [rsp + 0xa8]
cmp dx, 0x304
jne GetSystemInfo
mov rax, qword [rbx]
mov qword [rsp + 0x70], rax
mov rbx, qword [rbx + 8]
mov qword [rsp + 0x90], rbx
nop
mov edx, dword [0x009cef40]
test edx, edx
jne 0x5e70fb
lea rax, [0x009cef40]
lea rbx, [0x00743850]
call fcn.0047e9e0
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x90]
lea rdx, [0x00799008]
cmp rax, rdx
jne reloc.kernel32.dll_SetEvent
mov rcx, qword [0x0096fff8]
call fcn.00404fe0
test al, al
jne 0x5e71fa
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x90]
nop
mov edx, dword [0x009cef40]
test edx, edx
jne 0x5e7153
lea rax, [0x009cef40]
lea rbx, [0x00743850]
call fcn.0047e9e0
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x90]
lea rdx, [0x00799050]
cmp rax, rdx
jne 0x5e717c
mov rcx, qword [0x00970000]
call fcn.00404fe0
test al, al
jne 0x5e71e7
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x90]
nop
mov edx, dword [0x009cef40]
test edx, edx
jne 0x5e71a7
lea rax, [0x009cef40]
lea rbx, [0x00743850]
call fcn.0047e9e0
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x90]
lea rdx, [0x00799098]
cmp rax, rdx
jne 0x5e71d7
mov rcx, qword [0x00970008]
call fcn.00404fe0
nop
test al, al
je 0x5e71d7
lea rax, [0x006b5140]
call fcn.0040da40
mov word [rax], 0x603
jmp 0x5e720b
xor eax, eax
xor ebx, ebx
mov rcx, rbx
add rsp, 0x98
pop rbp
ret
lea rax, [0x006b5140]
call fcn.0040da40
mov word [rax], 0x503
jmp 0x5e720b
lea rax, [0x006b5140]
call fcn.0040da40
mov word [rax], 0x403
mov ecx, 1
mov edx, 1
jmp 0x5e7296
lea rax, [0x006b53e0]
nop
call fcn.0040da40
movabs rcx, 0x203060305030403
mov qword [rax], rcx
mov ecx, 4
mov edx, 4
jmp 0x5e7296
cmp edx, 0xc0d9e4a4
jne 0x5e7276
lea rdx, [0x006bbea0]
cmp rax, rdx
jne GetQueuedCompletionStatusEx
lea rax, [0x006b5140]
nop dword [rax + rax]
call fcn.0040da40
mov word [rax], 0x807
mov ecx, 1
mov edx, 1
jmp 0x5e7296
xor eax, eax
xor ebx, ebx
mov rcx, rbx
add rsp, 0x98
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
add rsp, 0x98
pop rbp
ret
mov r8, qword [rsp + 0xb0]
cmp qword [r8 + 0x28], 0
je 0x5e72b9
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x58], rcx
xor edx, edx
xor ebx, ebx
xor esi, esi
xor edi, edi
jmp 0x5e72ce
mov rbx, rcx
mov rcx, rdx
add rsp, 0x98
pop rbp
ret
inc rdx
mov rdi, r10
cmp rcx, rdx
jle 0x5e7347
movzx r9d, word [rax + rdx*2]
mov r10, qword [r8 + 0x28]
mov r11, qword [r8 + 0x30]
xor r12d, r12d
jmp 0x5e7360
lea r10, [rdi + 1]
cmp rbx, r10
jae 0x5e7339
mov qword [rsp + 0x68], rdx
mov word [rsp + 0x44], r9w
mov rax, rsi
mov rcx, rbx
mov edi, 1
lea rsi, [0x006b7380]
mov rbx, r10
call fcn.0046c6e0
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0xb0]
movzx r9d, word [rsp + 0x44]
mov r10, rbx
mov rsi, rax
mov rbx, rcx
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
mov word [rsi + r10*2 - 2], r9w
nop
jmp 0x5e72c8
mov r10, rdi
jmp 0x5e72c8
mov rax, rsi
mov rcx, rbx
mov rbx, rdi
add rsp, 0x98
pop rbp
ret
inc r12
nop dword [rax]
cmp r12, r11
jge reloc.kernel32.dll_CreateThread
movzx r13d, word [r10 + r12*2]
cmp r13w, r9w
jne 0x5e7359
jmp 0x5e72e5
add rdx, 0x18
dec rdi
mov rcx, rbx
nop
test rdi, rdi
jle 0x5e740d
movzx r10d, word [rdx]
cmp qword [rdx + 8], rsi
jg 0x5e7405
movzx r11d, word [rdx + 0x10]
cmp r8w, r11w
ja 0x5e73fd
lea rbx, [rcx + 1]
cmp r9, rbx
jae 0x5e73f2
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x88], rdx
mov word [rsp + 0x46], r10w
mov rcx, r9
mov edi, 1
lea rsi, [0x006b7380]
call fcn.0046c6e0
mov rdx, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x68]
movzx r8d, word [rsp + 0xa8]
movzx r10d, word [rsp + 0x46]
mov r9, rcx
mov word [rax + rbx*2 - 2], r10w
jmp 0x5e7375
mov rbx, rcx
jmp 0x5e7375
mov rbx, rcx
jmp 0x5e7375
mov rdx, r9
jmp 0x5e7296
mov r10, r9
and r9, r8
shl r9, 4
mov r11, qword [r9 + rdi + 8]
cmp rdx, r11
je 0x5e7469
lea r9, [r10 + 1]
test r11, r11
jne 0x5e7415
mov qword [rsp + 0x80], rsi
lea rax, [0x00972660]
mov rbx, rdx
call fcn.0040b580
mov rbx, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0x80]
mov rdx, rax
movzx eax, word [rsp + 0xa8]
jmp 0x5e6f6a
mov rdx, qword [r9 + rdi + 0x10]
jmp 0x5e6f6a
mov word [rsp + 8], ax
mov qword [rsp + 0x10], rbx
nop dword [rax]
call fcn.004710c0
movzx eax, word [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.005e6f20