Function at 0x140006020
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push rdi
lea rbp, [r11 - 0x57]
sub rsp, 0xa8
mov rax, qword [0x140176280]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rdi, r8
mov rsi, rdx
mov rbx, rcx
mov word [rbp - 0x26], 0x7974
mov word [rbp - 0x29], 0x6d45
mov byte [rbp - 0x27], 0x70
mov dword [rbp - 0x24], 0x79656b20
mov byte [rbp - 0x20], 0
mov dword [rbp - 0xe], 0x6c207965
mov dword [rbp - 0x17], 0x72726f63
mov word [rbp - 7], 0x6874
mov word [rbp - 0x19], 0x6e49
mov dword [rbp - 0x13], 0x20746365
mov byte [rbp - 0xf], 0x6b
mov word [rbp - 0xa], 0x6e65
mov byte [rbp - 5], 0
mov byte [rbp - 8], 0x67
mov word [rbp + 0xb], 0x636f
mov word [rbp + 8], 0x6220
mov word [rbp], 0x636e
mov dword [rbp + 0x12], 0x687467
mov byte [rbp - 1], 0x49
mov dword [rbp + 3], 0x63657272
mov word [rbp + 0x10], 0x6e65
mov word [rbp + 0xd], 0x206b
mov byte [rbp + 7], 0x74
mov byte [rbp + 0xf], 0x6c
mov byte [rbp + 0xa], 0x6c
mov byte [rbp + 2], 0x6f
test rdx, rdx
je 0x140006571
lea eax, [r9 - 0x10]
test eax, 0xffffffe7
jne 0x1400065bd
cmp r9d, 0x28
je 0x1400065bd
movsxd rcx, dword [rbp + 0x7f]
lea eax, [rcx - 0x10]
test eax, 0xffffffe7
jne 0x140006597
cmp ecx, 0x28
je 0x140006597
mov qword [r11 + 0x10], r12
mov qword [r11 - 0x28], r13
mov dword [rbx + 0x3d0], ecx
mov r8, rcx
mov qword [r11 - 0x30], r14
lea rcx, [rbx + 0x3d8]
mov rdx, rdi
mov qword [r11 - 0x38], r15
mov dword [rbx + 0x3cc], r9d
call fcn.140057730
movsxd r8, dword [rbx + 0x3d0]
lea rcx, [rbx + 0x3f8]
mov rdx, rdi
call fcn.140057730
mov eax, dword [rbx + 0x3cc]
cmp eax, 0x10
je 0x14000617f
cmp eax, 0x18
mov eax, 0xe
jne 0x14000619f
cmp dword [rbx + 0x3d0], 0x20
mov ecx, 0xc
cmovne eax, ecx
jmp 0x14000619f
mov edx, dword [rbx + 0x3d0]
cmp edx, 0x10
jne 0x14000618f
lea eax, [rdx - 6]
jmp 0x14000619f
mov eax, 0xe
mov ecx, 0xc
cmp edx, 0x18
cmove eax, ecx
mov dword [rbx + 0x3d4], eax
mov eax, dword [rbx + 0x3d0]
cdq
and edx, 3
add eax, edx
xor edx, edx
sar eax, 2
movsxd r12, eax
mov r15, r12
cmp dword [rbx + 0x3d4], edx
jl 0x1400061e5
lea r8, [rbx + 0xc]
test r12d, r12d
jle 0x1400061d7
mov rdi, r8
xor eax, eax
mov rcx, r12
rep stosd dword [rdi], eax
inc edx
add r8, 0x20
cmp edx, dword [rbx + 0x3d4]
jle 0x1400061c8
xor edx, edx
cmp dword [rbx + 0x3d4], edx
jl 0x140006213
lea r8, [rbx + 0x1ec]
test r12d, r12d
jle 0x140006205
mov rdi, r8
xor eax, eax
mov rcx, r12
rep stosd dword [rdi], eax
inc edx
add r8, 0x20
cmp edx, dword [rbx + 0x3d4]
jle 0x1400061f6
mov eax, dword [rbx + 0x3cc]
mov r14d, dword [rbx + 0x3d4]
cdq
inc r14d
and edx, 3
add eax, edx
lea rdx, [rbx + 0x418]
imul r14d, r12d
sar eax, 2
movsxd r10, eax
test eax, eax
jle 0x140006272
mov edi, r10d
movzx ecx, byte [rsi]
lea rsi, [rsi + 4]
lea rdx, [rdx + 4]
shl ecx, 0x18
mov dword [rdx - 4], ecx
movzx eax, byte [rsi - 3]
shl eax, 0x10
or dword [rdx - 4], eax
movzx eax, byte [rsi - 2]
shl eax, 8
or dword [rdx - 4], eax
movzx eax, byte [rsi - 1]
or dword [rdx - 4], eax
dec rdi
jne 0x140006241
xor r9d, r9d
xor r11d, r11d
mov rsi, r10
test r10d, r10d
jle 0x1400062d4
lea r10, [rbx + 0x418]
cmp r9d, r14d
jge 0x1400064a5
mov eax, r9d
inc r11
add r10, 4
cdq
inc r9d
idiv r12d
movsxd rdi, eax
mov eax, dword [r10 - 4]
movsxd r8, edx
lea rcx, [r8 + rdi*8]
mov dword [rbx + rcx*4 + 0xc], eax
movsxd rax, dword [rbx + 0x3d4]
sub rax, rdi
lea rcx, [r8 + rax*8]
mov eax, dword [r10 - 4]
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, rsi
jl 0x140006287
mov r10d, esi
cmp r9d, r14d
jge 0x1400064a5
lea r15, [0x1401486f0]
nop dword [rax]
nop dword [rax + rax]
mov edi, dword [rbx + rsi*4 + 0x414]
lea r11, [0x140000000]
lea r15, [r15 + 1]
movsxd rdx, edi
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx eax, byte [r15 - 1]
movsx r8d, byte [rcx + r11 + 0x148f70]
xor r8d, eax
mov rax, rdx
sar rax, 8
shl r8d, 8
movzx ecx, al
movzx eax, byte [rcx + r11 + 0x148f70]
xor r8d, eax
movzx eax, dl
movzx eax, byte [rax + r11 + 0x148f70]
shl r8d, 8
xor r8d, eax
mov eax, edi
shr rax, 0x18
shl r8d, 8
movzx eax, byte [rax + r11 + 0x148f70]
xor r8d, eax
xor dword [rbx + 0x418], r8d
cmp r10d, 8
je 0x1400063a4
cmp rsi, 1
jle 0x14000643f
lea rcx, [rbx + 0x41c]
lea rdx, [rsi - 1]
nop word [rax + rax]
mov eax, dword [rcx - 4]
lea rcx, [rcx + 4]
xor dword [rcx - 4], eax
dec rdx
jne 0x140006390
jmp 0x14000643f
lea rcx, [rbx + 0x41c]
mov edx, 3
mov eax, dword [rcx - 4]
lea rcx, [rcx + 4]
xor dword [rcx - 4], eax
dec rdx
jne 0x1400063b0
mov eax, dword [rbx + 0x424]
mov ecx, eax
movsxd rdx, eax
shr rcx, 0x18
mov rax, rdx
movsx edi, byte [rcx + r11 + 0x148f70]
sar rax, 0x10
movzx ecx, al
shl edi, 8
movzx eax, byte [rcx + r11 + 0x148f70]
xor edi, eax
mov rax, rdx
sar rax, 8
shl edi, 8
movzx ecx, al
movzx eax, byte [rcx + r11 + 0x148f70]
xor edi, eax
movzx eax, dl
movzx eax, byte [rax + r11 + 0x148f70]
shl edi, 8
xor edi, eax
xor dword [rbx + 0x428], edi
cmp rsi, 5
jle 0x14000643f
lea rax, [rbx + 0x42c]
lea rdx, [rsi - 5]
nop
mov ecx, dword [rax - 4]
lea rax, [rax + 4]
xor dword [rax - 4], ecx
dec rdx
jne 0x140006430
xor r11d, r11d
test rsi, rsi
jle 0x140006499
lea r10, [rbx + 0x418]
nop
cmp r9d, r14d
jge 0x1400064a2
mov eax, r9d
inc r11
add r10, 4
cdq
inc r9d
idiv r12d
movsxd rdi, eax
mov eax, dword [r10 - 4]
movsxd r8, edx
lea rcx, [r8 + rdi*8]
mov dword [rbx + rcx*4 + 0xc], eax
movsxd rax, dword [rbx + 0x3d4]
sub rax, rdi
lea rcx, [r8 + rax*8]
mov eax, dword [r10 - 4]
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp r11, rsi
jl 0x140006450
mov r10d, esi
cmp r9d, r14d
jl 0x1400062f0
mov r15, r12
mov r14, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xd8]
mov r10d, 1
cmp dword [rbx + 0x3d4], r10d
jle 0x14000654d
lea r11, [rbx + 0x20c]
test r15, r15
jle 0x14000653d
mov r8, r11
mov r9, r15
lea rsi, [0x140000000]
nop dword [rax]
mov eax, dword [r8]
lea r8, [r8 + 4]
mov edx, eax
movsxd rdi, eax
shr rdx, 0x18
mov rax, rdi
mov edx, dword [rsi + rdx*4 + 0x1476f0]
sar rax, 0x10
movzx ecx, al
mov rax, rdi
xor edx, dword [rsi + rcx*4 + 0x147af0]
sar rax, 8
movzx ecx, al
movzx eax, dil
xor edx, dword [rsi + rcx*4 + 0x147ef0]
xor edx, dword [rsi + rax*4 + 0x1482f0]
mov dword [r8 - 4], edx
dec r9
jne 0x1400064f0
inc r10d
add r11, 0x20
cmp r10d, dword [rbx + 0x3d4]
jl 0x1400064d7
mov byte [rbx + 8], 1
mov r15, qword [rsp + 0x90]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140057700
add rsp, 0xa8
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rax, [rbp - 0x29]
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x49], rax
call fcn.14005930c
lea rdx, [0x1401741c8]
lea rcx, [rbp - 0x41]
call fcn.1400595a8
int3
lea rax, [rbp - 1]
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x51], rax
call fcn.14005930c
lea rdx, [0x1401741c8]
lea rcx, [rbp - 0x41]
call fcn.1400595a8
int3
lea rax, [rbp - 0x19]
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x51], rax
call fcn.14005930c
lea rdx, [0x1401741c8]
lea rcx, [rbp - 0x41]
call fcn.1400595a8
int3