Function at 0x140006920
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
movups xmmword [rsp + 0xb0], xmm6
mov rbx, qword [0x140207460]
xor ebp, ebp
mov rdi, qword [rsp + 0x130]
mov rax, qword [rbx]
mov qword [rsp + 0xa8], rax
xor eax, eax
mov r15, rcx
lea rbx, [rcx + 0x50]
mov qword [rsp + 0x38], rdx
lea r13, [r15 + 0x68]
mov edx, 0x400
movd xmm6, r9d
mov qword [rcx + 0x3c], 1
mov qword [rcx + 0x48], 0
mov rcx, rbx
lea r12, [rsp + 0x60]
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x80], 0
mov dword [rsp + 0x88], 0xffffffff
mov qword [rsp + 0x8c], 0
mov qword [rsp + 0x98], 0
call fcn.14007dae0
mov edx, 0x400
mov rcx, r13
call fcn.14007dae0
mov rsi, qword [r15 + 0x28]
mov rcx, rsi
call sub.msvcrt.dll_strlen
mov rcx, rsi
mov rdx, rax
call fcn.14001fda0
movd xmm0, dword [r15 + 0x20]
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x80], rax
mov eax, dword [r15 + 0x3c]
mov dword [rsp + 0x60], 4
punpckldq xmm0, xmm6
mov rdi, qword [str._________AA__A__________________]
mov dword [rsp + 0x88], eax
mov rax, qword [r15 + 0x30]
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x98], rax
mov rax, qword [0x140207de0]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
mov rsi, rax
movq qword [rsp + 0x8c], xmm0
mov rcx, r15
call fcn.140005840
mov r14d, eax
test rsi, rsi
je 0x140006a84
movzx edx, byte [rsi]
test dl, dl
je 0x140006a84
cmp edx, r14d
je 0x140006f78
mov rax, qword [rsp + 0x30]
cmp rsi, rax
jne 0x140006dc0
xor esi, esi
cmp r14d, 0xa
je 0x140006e00
test ebp, ebp
jne 0x140006f68
movzx eax, r14b
mov r8, r12
movzx eax, byte [rdi + rax]
test al, 1
jne 0x140006e0f
cmp r14d, 0x23
je 0x140006f50
cmp r14d, 0x3b
je 0x140006f50
cmp r14d, 0x5b
je 0x140006fc0
test al, 4
je 0x140006dc0
mov edx, 1
mov rcx, r15
call fcn.140005900
test eax, eax
js 0x140006e24
mov rax, qword [r15 + 0x68]
xor ecx, ecx
lea rdx, [rax - 1]
test rax, rax
cmove rdx, rcx
mov rcx, qword [rsp + 0x28]
cmp rdx, rcx
jb 0x140007440
mov rcx, qword [rsp + 0x28]
mov rdx, qword [r15 + 0x78]
cmp rdx, qword [0x140207c90]
mov qword [r15 + 0x70], rcx
je 0x140006fb0
mov byte [rdx + rcx], 0
mov rax, qword [r15 + 0x68]
mov r9d, r14d
and r9d, 0xdf
or r9d, 0x20
mov ebp, r9d
test rax, rax
je 0x140006f30
mov rdx, qword [r15 + 0x70]
sub rax, rdx
cmp rax, 1
je 0x140006f30
mov rax, qword [r15 + 0x78]
lea rcx, [rdx + 1]
mov qword [r15 + 0x70], rcx
mov byte [rax + rdx], bpl
mov rax, qword [r15 + 0x70]
mov rdx, qword [r15 + 0x78]
mov byte [rdx + rax], 0
lea rax, [rsp + 0x80]
mov qword [rsp + 0x58], rax
mov rcx, r15
call fcn.140005840
mov edx, dword [r15 + 0x40]
test edx, edx
jne 0x140006ba2
movzx edx, al
movzx edx, byte [rdi + rdx]
test dl, 6
jne 0x140006e90
cmp eax, 0x2d
je 0x140006f90
cmp eax, 9
je 0x140006bb0
cmp eax, 0x20
jne 0x140006bc2
nop dword [rax]
mov rcx, r15
call fcn.140005840
cmp eax, 0x20
je 0x140006bb0
cmp eax, 9
je 0x140006bb0
cmp eax, 0xa
je 0x140006fa0
cmp eax, 0x3d
jne 0x140006dc0
mov rax, qword [r15 + 0x60]
cmp rax, qword [0x140207c90]
mov qword [r15 + 0x58], 0
je 0x14000718c
mov byte [rax], 0
mov rcx, r15
call fcn.140005840
cmp eax, 0xa
je 0x140006c77
xor ebp, ebp
nop
movzx edx, al
test byte [rdi + rdx], 1
je 0x140006e80
test ebp, ebp
je 0x140006cd0
cmp eax, 0x5c
je 0x140006e41
nop
cmp eax, 0x22
je 0x140006f20
mov rcx, qword [r15 + 0x50]
test rcx, rcx
je 0x140006ef8
mov rdx, qword [r15 + 0x58]
sub rcx, rdx
cmp rcx, 1
je 0x140006ef8
mov rcx, qword [r15 + 0x60]
lea r8, [rdx + 1]
mov qword [r15 + 0x58], r8
mov byte [rcx + rdx], al
mov rdx, qword [r15 + 0x60]
mov rax, qword [r15 + 0x58]
mov byte [rdx + rax], 0
mov rcx, r15
call fcn.140005840
cmp eax, 0xa
jne 0x140006c00
test ebp, ebp
jne 0x140006dba
mov rdx, qword [r15 + 0x60]
test rdx, rdx
je 0x140006dc0
mov eax, dword [r15 + 0x3c]
mov rcx, qword [r15 + 0x78]
lea r8, [rsp + 0x58]
mov r9, qword [rsp + 0x40]
sub eax, 1
mov dword [r15 + 0x3c], eax
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x38]
call rax
test eax, eax
js 0x140006dc0
add dword [r15 + 0x3c], 1
nop dword [rax + rax]
xor ebp, ebp
jmp 0x140006a54
cmp qword [r15 + 0x58], 0
je 0x140006cda
add ebp, 1
mov rcx, r15
call fcn.140005840
cmp eax, 0xa
je 0x140006c77
movzx edx, al
test byte [rdi + rdx], 1
jne 0x140006cd0
cmp eax, 0x3b
je 0x140006d70
cmp eax, 0x23
je 0x140006d70
mov r14d, ebp
xor ebp, ebp
test r14d, r14d
je 0x140006c15
mov qword [rsp + 0x20], rsi
mov esi, r14d
mov r14d, eax
jmp 0x140006d4a
mov rax, qword [r15 + 0x58]
sub rdx, rax
cmp rdx, 1
je 0x140006d53
mov rdx, qword [r15 + 0x60]
lea rcx, [rax + 1]
add dword [rcx - 0x77], ecx
pop r8
mov byte [rdx + rax], 0x20
mov rdx, qword [r15 + 0x60]
mov rax, qword [r15 + 0x58]
mov byte [rdx + rax], 0
sub esi, 1
je 0x140006e30
mov rdx, qword [r15 + 0x50]
test rdx, rdx
jne 0x140006d18
mov edx, 1
mov rcx, rbx
call fcn.14007da40
mov rax, qword [r15 + 0x58]
jmp 0x140006d25
mov rcx, r15
call fcn.140005840
cmp eax, 0xa
je 0x140006c77
mov rcx, r15
call fcn.140005840
cmp eax, 0xa
jne 0x140006d70
jmp 0x140006c77
and byte [r15 + 0x80], 0xfe
jmp 0x140006db5
mov rcx, r15
call fcn.140005840
movzx edx, al
test byte [rdi + rdx], 1
je 0x140007369
cmp eax, 0xa
jne 0x140006da0
sub dword [r15 + 0x3c], 1
nop
mov r8, r12
mov edx, 5
mov rcx, r15
call fcn.140005900
test eax, eax
js 0x140006e24
mov rax, qword [0x1402078f0]
cmp dword [r15 + 0x20], 5
mov esi, dword [r15 + 0x3c]
mov ecx, dword [rax]
ja case.0x140006dfe.0
mov eax, dword [r15 + 0x20]
lea rdx, [0x1401ca254]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
mov ecx, dword [r15 + 0x40]
mov r8, r12
test ecx, ecx
jne 0x140007310
mov edx, 2
mov rcx, r15
call fcn.140005900
test eax, eax
jns 0x140006cc0
mov edi, 0xffffffff
jmp 0x14000722b
mov eax, r14d
mov rsi, qword [rsp + 0x20]
cmp eax, 0x5c
jne 0x140006c20
mov rcx, r15
call fcn.140005840
cmp eax, 0x62
je 0x1400071a8
jg 0x1400070a8
cmp eax, 0x22
je 0x140007115
cmp eax, 0x5c
je 0x140007115
cmp eax, 0xa
je 0x140006c62
jmp 0x140006dc0
test ebp, ebp
je 0x140006cf0
jmp 0x140006c15
mov ebp, eax
and ebp, 0xdf
or ebp, 0x20
and edx, 4
cmove ebp, eax
mov rdx, qword [r15 + 0x68]
test rdx, rdx
je 0x140006ee0
mov rax, qword [r15 + 0x70]
sub rdx, rax
cmp rdx, 1
je 0x140006ee0
mov rdx, qword [r15 + 0x78]
lea rcx, [rax + 1]
mov qword [r15 + 0x70], rcx
mov byte [rdx + rax], bpl
mov rdx, qword [r15 + 0x78]
mov rax, qword [r15 + 0x70]
mov byte [rdx + rax], 0
jmp 0x140006b79
mov edx, 1
mov rcx, r13
call fcn.14007da40
mov rax, qword [r15 + 0x70]
jmp 0x140006eb7
mov edx, 1
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.14007da40
mov rdx, qword [r15 + 0x58]
mov eax, dword [rsp + 0x20]
jmp 0x140006c47
xor ebp, 1
jmp 0x140006c62
mov edx, 1
mov rcx, r13
call fcn.14007da40
mov rdx, qword [r15 + 0x70]
jmp 0x140006b50
mov r8, r12
mov edx, 3
mov rcx, r15
call fcn.140005900
test eax, eax
js 0x140006e24
mov ebp, 1
jmp 0x140006a54
mov rcx, r15
add rsi, 1
call fcn.140005840
mov r14d, eax
jmp 0x140006a64
mov ebp, 0x2d
jmp 0x140006ea1
xor edx, edx
jmp 0x140006c84
cmp byte [rdx], 0
je 0x140006b25
call fcn.140005d50
nop
xor edx, edx
mov rcx, r15
call fcn.140005900
test eax, eax
js 0x140006e24
mov rax, qword [r15 + 0x78]
cmp rax, qword [0x140207c90]
mov qword [r15 + 0x70], 0
je 0x1400071b3
mov byte [rax], 0
or byte [r15 + 0x80], 1
jmp 0x140007049
cmp eax, 0x2d
je 0x140007120
cmp eax, 0x2e
jne 0x140006dc0
mov ebp, 0x2e
mov rdx, qword [r15 + 0x68]
test rdx, rdx
je 0x140007095
mov rax, qword [r15 + 0x70]
sub rdx, rax
cmp rdx, 1
je 0x140007095
mov rdx, qword [r15 + 0x78]
lea rcx, [rax + 1]
mov qword [r15 + 0x70], rcx
mov byte [rdx + rax], bpl
mov rdx, qword [r15 + 0x78]
mov rax, qword [r15 + 0x70]
mov byte [rdx + rax], 0
mov rcx, r15
call fcn.140005840
mov ebp, dword [r15 + 0x40]
test ebp, ebp
jne 0x140006dc0
cmp eax, 0x5d
je 0x14000713b
movzx edx, al
movzx edx, byte [rdi + rdx]
test dl, 1
jne 0x140006d93
test dl, 6
je 0x140007000
mov ebp, eax
and ebp, 0xdf
or ebp, 0x20
and edx, 4
mov rdx, qword [r15 + 0x68]
cmove ebp, eax
test rdx, rdx
jne 0x140007020
mov edx, 1
mov rcx, r13
call fcn.14007da40
mov rax, qword [r15 + 0x70]
jmp 0x14000702d
cmp eax, 0x6e
je 0x1400070f3
cmp eax, 0x74
jne 0x140006dc0
mov r14d, 9
mov rdx, qword [r15 + 0x50]
test rdx, rdx
je 0x140007102
mov rax, qword [r15 + 0x58]
sub rdx, rax
cmp rdx, 1
je 0x140007102
mov rdx, qword [r15 + 0x60]
lea rcx, [rax + 1]
mov qword [r15 + 0x58], rcx
mov byte [rdx + rax], r14b
mov rdx, qword [r15 + 0x60]
mov rax, qword [r15 + 0x58]
mov byte [rdx + rax], 0
jmp 0x140006c62
mov rdx, qword [r15 + 0x50]
mov r14d, 0xa
test rdx, rdx
jne 0x1400070c5
mov edx, 1
mov rcx, rbx
call fcn.14007da40
mov rax, qword [r15 + 0x58]
jmp 0x1400070d2
mov r14d, eax
jmp 0x1400070bc
mov ebp, 0x2d
jmp 0x140007017
mov rcx, r15
call fcn.140005840
cmp eax, 0x5d
jne 0x140006dc0
mov rax, qword [r15 + 0x70]
test rax, rax
je 0x140006dc0
mov rdx, qword [r15 + 0x68]
test rdx, rdx
je 0x140007327
sub rdx, rax
cmp rdx, 1
je 0x140007327
mov rdx, qword [r15 + 0x78]
lea rcx, [rax + 1]
mov qword [r15 + 0x70], rcx
mov byte [rdx + rax], 0x2e
mov rax, qword [r15 + 0x70]
mov rdx, qword [r15 + 0x78]
mov byte [rdx + rax], 0
mov rax, qword [r15 + 0x70]
mov qword [rsp + 0x28], rax
jmp 0x140006a54
mov rax, qword [0x140207c90]
cmp byte [rax], 0
je 0x140006bf0
jmp 0x140006fb9
mov r14d, 8
jmp 0x1400070bc
cmp byte [rax], 0
je 0x140006fee
jmp 0x140006fb9
mov rdi, qword [r15 + 0x28]
lea rax, str.bad_config_line__d_in_blob__s
test ecx, ecx
je 0x1400071df
mov rcx, rax
call sub.libintl_8.dll_libintl_gettext
mov edx, esi
mov r8, rdi
mov rcx, rax
call fcn.140080b50
mov rsi, rax
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x1400072b7
mov eax, dword [rax + 0x28]
test eax, eax
je 0x1400072b7
cmp eax, 2
je 0x14000733d
jbe 0x1400072ce
xor edi, edi
cmp eax, 3
jne 0x140007223
mov edi, 0xffffffff
mov rcx, rsi
call fcn.1400d2670
mov rcx, rbx
call fcn.14007d7e0
mov rcx, r13
call fcn.14007d7e0
mov rbx, qword [0x140207460]
mov rax, qword [rsp + 0xa8]
sub rax, qword [rbx]
jne 0x140007470
movups xmm6, xmmword [rsp + 0xb0]
mov eax, edi
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, qword [r15 + 0x28]
lea rax, str.bad_config_line__d_in_file__s
test ecx, ecx
je 0x1400071df
jmp 0x1400071d7
lea rax, str.bad_config_line__d_in_standard_input
test ecx, ecx
je 0x14000729c
mov rcx, rax
call sub.libintl_8.dll_libintl_gettext
mov edx, esi
mov rcx, rax
call fcn.140080b50
mov rsi, rax
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x1400071fd
mov eax, dword [r15 + 0x38]
cmp eax, 2
je 0x14000733d
ja 0x140007217
test eax, eax
je 0x140007458
mov rdx, rsi
lea rcx, [0x1401ca235]
call fcn.1400a08a0
nop dword [rax]
mov rdi, qword [r15 + 0x28]
lea rax, str.bad_config_line__d_in_submodule_blob__s
test ecx, ecx
je 0x1400071df
jmp 0x1400071d7
mov rdi, qword [r15 + 0x28]
lea rax, str.bad_config_line__d_in_command_line__s
test ecx, ecx
je 0x1400071df
jmp 0x1400071d7
mov edx, 4
mov rcx, r15
call fcn.140005900
sar eax, 0x1f
mov edi, eax
jmp 0x14000722b
mov edx, 1
mov rcx, r13
call fcn.14007da40
mov rax, qword [r15 + 0x70]
jmp 0x140007162
mov rdx, rsi
lea rcx, [0x1401ca235]
call fcn.1400a0b40
jmp 0x14000721e
mov rdi, qword [r15 + 0x28]
lea rax, str.bad_config_line__d_in__s
test ecx, ecx
je 0x1400071df
jmp 0x1400071d7
cmp eax, 0x22
jne 0x140006dc0
mov rdx, qword [r15 + 0x68]
test rdx, rdx
jne 0x14000742a
mov edx, 1
mov rcx, r13
call fcn.14007da40
mov rax, qword [r15 + 0x70]
mov rdx, qword [r15 + 0x78]
lea rcx, [rax + 1]
mov qword [r15 + 0x70], rcx
mov byte [rdx + rax], 0x2e
mov rdx, qword [r15 + 0x78]
mov rax, qword [r15 + 0x70]
mov byte [rdx + rax], 0
jmp 0x1400073d7
mov rax, qword [r15 + 0x70]
sub rdx, rax
cmp rdx, 1
je 0x140007402
mov rdx, qword [r15 + 0x78]
lea rcx, [rax + 1]
mov qword [r15 + 0x70], rcx
mov byte [rdx + rax], r14b
mov rdx, qword [r15 + 0x78]
mov rax, qword [r15 + 0x70]
mov byte [rdx + rax], 0
mov rcx, r15
call fcn.140005840
mov r14d, eax
cmp eax, 0xa
je 0x140006dba
cmp eax, 0x22
je 0x14000712a
cmp eax, 0x5c
je 0x140007415
mov rdx, qword [r15 + 0x68]
test rdx, rdx
jne 0x1400073ae
mov edx, 1
mov rcx, r13
call fcn.14007da40
mov rax, qword [r15 + 0x70]
jmp 0x1400073bb
mov rcx, r15
call fcn.140005840
mov r14d, eax
cmp eax, 0xa
jne 0x1400073f9
jmp 0x140006dba
mov rax, qword [r15 + 0x70]
sub rdx, rax
cmp rdx, 1
jne 0x140007390
jmp 0x14000737f
lea r8, [0x1401ca217]
mov edx, 0xa7
lea rcx, [0x1401ca096]
call fcn.1400a0ca0
lea r8, str.config_error_action_unset
mov edx, 0x489
lea rcx, str.config.c
call fcn.1400a0ca0
call fcn.1401be670
nop
nop word cs:[rax + rax]