Function at 0x140006fe0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x70
lea rcx, str.EXE_Detect_Function
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
cmp byte [0x1407ef7f4], 1
jne 0x140007530
movdqa xmm0, xmmword [0x14008c4c0]
lea rcx, [rbp - 0x50]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x3f], 0x65
mov byte [rbp - 0x40], 0x78
mov byte [rbp - 0x3d], 0
call fcn.1400079d0
test eax, eax
jne 0x14000756a
movdqa xmm0, xmmword [0x14008c3f0]
lea rcx, [rbp - 0x50]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x1004e52
call fcn.1400051e0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x14000759c
movdqa xmm0, xmmword [0x14008c340]
lea rcx, [rbp - 0x50]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x49534f
mov byte [rbp - 0x3c], 1
call fcn.140005240
mov rcx, rax
call fcn.1400079d0
lea rcx, [rbp - 0x50]
test eax, eax
jne 0x1400075d9
movdqa xmm0, xmmword [0x14008c4e0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x3e], 0x657865
mov word [rbp - 0x40], 0x2e77
mov byte [rbp - 0x3a], al
call fcn.1400079d0
mov byte [rbp - 0x3e], 1
lea rcx, [rbp - 0x50]
test eax, eax
jne 0x140007609
movdqa xmm0, xmmword [0x14008c450]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_79
call fcn.140005180
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x14000762e
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x7e73696a
mov dword [rbp - 0x4c], 0xf4e7073
mov dword [rbp - 0x48], 0x415b47
mov byte [rbp - 0x44], 1
call fcn.1400053a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007660
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x6c7d7f73
mov dword [rbp - 0x4c], 0x44587a30
mov word [rbp - 0x48], 0x100
call fcn.140005070
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007687
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x337d7f73
mov dword [rbp - 0x4c], 0x45677b
mov byte [rbp - 0x48], 1
call fcn.140005040
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x1400076a8
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x6c7d7f73
mov dword [rbp - 0x4c], 0x440e2b28
mov dword [rbp - 0x48], 0x100465a
call fcn.140005360
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x1400076c9
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x786e724d
mov dword [rbp - 0x4c], 0x5341776d
mov dword [rbp - 0x48], 0x5d410d49
mov word [rbp - 0x44], 0x43
mov byte [rbp - 0x42], 1
call fcn.140005420
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x1400076ea
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x7978725c
mov dword [rbp - 0x4c], 0xf527a72
mov dword [rbp - 0x48], 0x415b47
mov byte [rbp - 0x44], 1
call fcn.1400053a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007720
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x72727e42
mov dword [rbp - 0x4c], 0xf14296d
mov dword [rbp - 0x48], 0x415b47
mov byte [rbp - 0x44], 1
call fcn.1400053a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007750
movdqa xmm0, xmmword [0x14008c420]
lea rcx, [rbp - 0x50]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
call fcn.140005130
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007780
movdqa xmm0, xmmword [0x14008c530]
lea rcx, [rbp - 0x38]
movdqa xmm1, xmmword [str.ndows_Service__35555555555555555ROHMZzBTEDAWsn]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0xf], 0x65
movdqu xmmword [rbp - 0x28], xmm1
mov dword [rbp - 0x18], 0x69622032
mov dword [rbp - 0x14], 0x652e2974
mov byte [rbp - 0x10], 0x78
mov byte [rbp - 0xd], al
call fcn.1400079d0
test eax, eax
jne 0x1400077af
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x68586851
mov dword [rbp - 0x4c], 0x53456f73
mov dword [rbp - 0x48], 0x405c460c
mov word [rbp - 0x44], 0x100
call fcn.1400053e0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x1400077e4
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x79282d62
mov dword [rbp - 0x4c], 0x440e787c
mov dword [rbp - 0x48], 0x100465a
call fcn.140005360
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x14000780e
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x79282d62
mov dword [rbp - 0x4c], 0x440e787c
mov dword [rbp - 0x48], 0x100465a
call fcn.140005360
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007832
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x792e2862
mov dword [rbp - 0x4c], 0x440e787c
mov dword [rbp - 0x48], 0x100465a
call fcn.140005360
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007856
movdqa xmm0, xmmword [0x14008c4d0]
lea rcx, [rbp - 0x50]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x3b], 0x65
mov dword [rbp - 0x40], 0x652e6572
mov byte [rbp - 0x3c], 0x78
mov byte [rbp - 0x39], al
call fcn.1400079d0
test eax, eax
jne 0x14000787a
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x3379727e
mov dword [rbp - 0x4c], 0x45677b
mov byte [rbp - 0x48], 1
call fcn.140005040
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x1400078a7
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x6f796d5f
mov dword [rbp - 0x4c], 0x48486b67
mov dword [rbp - 0x48], 0x400a444c
mov dword [rbp - 0x44], 0x100425e
call fcn.140006f90
lea rcx, [rbp - 0x50]
call fcn.1400079d0
test eax, eax
jne 0x1400078d8
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x44505755
mov dword [rbp - 0x4c], 0xf675d5a
mov dword [rbp - 0x48], 0x415b47
mov byte [rbp - 0x44], 1
call fcn.1400053a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x14000790a
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x2b586352
mov dword [rbp - 0x4c], 0x5945312a
mov word [rbp - 0x48], 0x47
mov byte [rbp - 0x46], 1
call fcn.1400050a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007932
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x2e586352
mov dword [rbp - 0x4c], 0x5945312c
mov word [rbp - 0x48], 0x47
mov byte [rbp - 0x46], 1
call fcn.1400050a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007959
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x6a737569
mov dword [rbp - 0x4c], 0xf4e7e73
mov dword [rbp - 0x48], 0x415b47
mov byte [rbp - 0x44], 1
call fcn.1400053a0
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x140007980
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x7f7d695d
mov dword [rbp - 0x4c], 0x444c7658
mov dword [rbp - 0x48], 0x405c460c
mov word [rbp - 0x44], 0x100
call fcn.1400053e0
mov rcx, rax
call fcn.1400079d0
mov dword [rbp - 0x50], 0x7f7d695d
test eax, eax
jne 0x1400079a8
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x4d49593e
mov dword [rbp - 0x48], 0x5d410d47
mov word [rbp - 0x44], 0x43
mov byte [rbp - 0x42], 1
call fcn.140005420
mov rcx, rax
call fcn.1400079d0
test eax, eax
jne 0x14000753c
add rsp, 0x70
pop rbp
jmp qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x7f7d695d
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x4d49593e
mov word [rbp - 0x48], 0x47
mov byte [rbp - 0x46], 1
call fcn.140004410
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x68586851
mov dword [rbp - 0x4c], 0x53456f73
mov word [rbp - 0x48], 0x100
call fcn.140005070
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x4d484f52
mov dword [rbp - 0x4c], 0x43455b3e
mov dword [rbp - 0x48], 0x40434457
mov word [rbp - 0x44], 0x54
mov byte [rbp - 0x42], 1
call fcn.140005420
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
movdqa xmm0, xmmword [0x14008c430]
lea rdx, [rbp - 0x38]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x4e455d58
mov word [rbp - 0x3c], Ordinal_79
mov byte [rbp - 0x3a], 1
call fcn.140004560
mov rcx, rax
call fcn.140006a50
int3
movdqa xmm0, xmmword [0x14008c410]
lea rdx, [rbp - 0x38]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x5d
call fcn.1400044e0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x7e73694a
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x1536c7b
mov dword [rbp - 0x48], 0x4e47426a
mov dword [rbp - 0x44], 0x1005543
call fcn.140004780
mov rcx, rax
call fcn.140006a50
int3
movdqa xmm0, xmmword [str.JislS]
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x50]
mov byte [rbp - 0x40], 1
movdqu xmmword [rbp - 0x50], xmm0
call fcn.140004470
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x5d5f53
lea rcx, [rbp + 0x10]
mov byte [rbp + 0x14], 1
call fcn.140004290
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x5d5f53
lea rcx, [rbp + 0x10]
mov byte [rbp + 0x14], 1
call fcn.140004290
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x5d5f53
lea rcx, [rbp + 0x10]
mov byte [rbp + 0x14], 1
call fcn.140004290
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x786e724d
mov dword [rbp - 0x4c], 0x5341774d
mov word [rbp - 0x48], 0x49
mov byte [rbp - 0x46], 1
call fcn.1400050a0
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x7978725c
mov dword [rbp - 0x4c], 0x527a72
mov byte [rbp - 0x48], 1
call fcn.140005040
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x72727e42
mov dword [rbp - 0x4c], 0x14296d
mov byte [rbp - 0x48], 1
call fcn.140005040
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140003260
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x7c797359
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x464e5a6a
mov dword [rbp - 0x48], 0x414d4b
mov byte [rbp - 0x44], 1
call fcn.140004650
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x4d484f52
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x43455b3e
mov dword [rbp - 0x48], 0x40434457
mov word [rbp - 0x44], 0x54
mov byte [rbp - 0x42], 1
call fcn.140004710
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x68586851
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x53456f73
mov word [rbp - 0x48], 0x100
call fcn.1400043c0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x59282d62
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x14], 0x100585c
call fcn.140004320
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x59282d62
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x14], 0x100585c
call fcn.140004320
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x592e2862
lea rcx, [rbp + 0x10]
mov dword [rbp + 0x14], 0x100585c
call fcn.140004320
mov rcx, rax
call fcn.140006a50
int3
movdqa xmm0, xmmword [0x14008c460]
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x50]
mov word [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_79
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x3e], 1
call fcn.1400044e0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x78687e5e
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x55696b7d
mov dword [rbp - 0x48], 0x5c574267
mov word [rbp - 0x44], 0x100
call fcn.1400046b0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x6f796d5f
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x48486b67
mov dword [rbp - 0x48], 0x400a444c
mov dword [rbp - 0x44], 0x100425e
call fcn.140004780
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x44505755
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x675d5a
mov byte [rbp - 0x48], 1
call fcn.140004370
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x2b586352
lea rcx, [rbp + 0x10]
mov word [rbp + 0x14], Ordinal_46
mov byte [rbp + 0x16], 1
call fcn.1400042d0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp + 0x10], 0x2b586352
lea rcx, [rbp + 0x10]
mov word [rbp + 0x14], Ordinal_46
mov byte [rbp + 0x16], 1
call fcn.1400042d0
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x50], 0x6a737549
lea rcx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x4e7e73
mov byte [rbp - 0x48], 1
call fcn.140004370
mov rcx, rax
call fcn.140006a50
int3
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x4c], 0x444c7658
lea rcx, [rbp - 0x50]
mov word [rbp - 0x48], 0x100
call fcn.1400043c0
mov rcx, rax
call fcn.140006a50
int3
jae 0x1401324c9
insb byte [rdi], dx
outsd dx, dword [rsi]
adc dl, ah
adc al, 0xcc
movabs byte [0xadf26f95efea01ef], al
ret 0x6f93
mov bh, 0xe8
cdq
invalid