Function at 0x14006ed08
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rdi
mov eax, 0x1780
call fcn.140130f00
sub rsp, rax
mov qword [rsp + 0x118], 0xfffffffffffffffe
mov qword [rsp + 0x1798], rbx
mov qword [rsp + 0x17a0], rbp
mov qword [rsp + 0x17a8], rsi
mov rax, qword [0x1401aeec0]
xor rax, rsp
mov qword [rsp + 0x1770], rax
movzx ebx, r8w
mov rsi, rcx
lea rdx, [0x14015723e]
lea rcx, [rsp + 0x30]
call fcn.140003880
nop
mov eax, 0xe140
or ebp, 0xffffffff
mov edi, 0x465
cmp bx, ax
jne 0x14006ee2a
lea edx, [rbp + 0x3b]
lea rcx, [rsp + 0xe8]
call fcn.1400adda0
nop
mov rdx, qword [rax]
mov qword [rsp + 0x120], rdx
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0xc50]
call fcn.1400bbd58
nop
mov rcx, qword [rsp + 0xe8]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006edde
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006edde
mov rcx, qword [rsp + 0xe8]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
mov rcx, qword [rsp + 0xc58]
test rcx, rcx
jne 0x14006edf8
mov dword [rsp + 0xcc8], 7
jmp 0x14006ee07
xor r9d, r9d
lea r8d, [r9 + 7]
mov edx, edi
call qword [0x140155a48]
call qword [0x140155e10]
mov rdx, rax
lea rcx, [rsp + 0xc50]
call fcn.14005fb1c
lea rcx, [rsp + 0xc50]
call fcn.1400b12ec
mov eax, 0xb253
cmp bx, ax
jne 0x14006eeed
mov edx, 0x3a
lea rcx, [rsp + 0x88]
call fcn.1400adda0
nop
mov rdx, qword [rax]
mov qword [rsp + 0x138], rdx
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x170]
call fcn.1400bbd58
nop
mov rcx, qword [rsp + 0x88]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006ee9c
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006ee9c
mov rcx, qword [rsp + 0x88]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
mov rcx, qword [rsp + 0x178]
test rcx, rcx
jne 0x14006eeb6
mov dword [rsp + 0x1e8], 4
jmp 0x14006eec5
xor r9d, r9d
lea r8d, [r9 + 4]
mov edx, edi
call qword [0x140155a48]
call qword [0x140155e10]
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14005fb1c
lea rcx, [rsp + 0x170]
call fcn.1400b12ec
jmp 0x14006f3dc
mov eax, 0x800e
cmp bx, ax
jne 0x14006f0d9
mov byte [rsp + 0x1730], 0x68
mov byte [rsp + 0x1731], 0x74
mov byte [rsp + 0x1732], 0x74
mov byte [rsp + 0x1733], 0x70
mov byte [rsp + 0x1734], 0x3a
mov byte [rsp + 0x1735], 0x2f
mov byte [rsp + 0x1736], 0x2f
mov byte [rsp + 0x1737], 0x77
mov byte [rsp + 0x1738], 0x77
mov byte [rsp + 0x1739], 0x77
mov byte [rsp + 0x173a], 0x2e
mov byte [rsp + 0x173b], 0x73
mov byte [rsp + 0x173c], 0x6f
mov byte [rsp + 0x173d], 0x66
mov byte [rsp + 0x173e], 0x74
mov byte [rsp + 0x173f], 0x77
mov byte [rsp + 0x1740], 0x61
mov byte [rsp + 0x1741], 0x72
mov byte [rsp + 0x1742], 0x65
mov byte [rsp + 0x1743], 0x6f
mov byte [rsp + 0x1744], 0x6b
mov byte [rsp + 0x1745], 0x2e
mov byte [rsp + 0x1746], 0x64
mov byte [rsp + 0x1747], 0x65
mov byte [rsp + 0x1748], 0x2f
mov byte [rsp + 0x1749], 0
mov byte [rsp + 0x1750], 0x68
mov byte [rsp + 0x1751], 0x74
mov byte [rsp + 0x1752], 0x74
mov byte [rsp + 0x1753], 0x70
mov byte [rsp + 0x1754], 0x3a
mov byte [rsp + 0x1755], 0x2f
mov byte [rsp + 0x1756], 0x2f
mov byte [rsp + 0x1757], 0x77
mov byte [rsp + 0x1758], 0x77
mov byte [rsp + 0x1759], 0x77
mov byte [rsp + 0x175a], 0x2e
mov byte [rsp + 0x175b], 0x73
mov byte [rsp + 0x175c], 0x6f
mov byte [rsp + 0x175d], 0x66
mov byte [rsp + 0x175e], 0x74
mov byte [rsp + 0x175f], 0x77
mov byte [rsp + 0x1760], 0x61
mov byte [rsp + 0x1761], 0x72
mov byte [rsp + 0x1762], 0x65
mov byte [rsp + 0x1763], 0x6f
mov byte [rsp + 0x1764], 0x6b
mov byte [rsp + 0x1765], 0x2e
mov byte [rsp + 0x1766], 0x63
mov byte [rsp + 0x1767], 0x6f
mov byte [rsp + 0x1768], 0x6d
mov byte [rsp + 0x1769], 0x2f
mov byte [rsp + 0x176a], 0
xor edx, edx
lea rcx, [0x1401bb3a8]
call fcn.140002cfc
mov rdx, rax
lea rcx, [rsp + 0x1730]
lea rax, [rsp + 0x1750]
cmp dword [0x1401ab75c], 0
cmove rcx, rax
call fcn.14003cc0c
jmp 0x14006f3dc
mov eax, 0x800d
cmp bx, ax
jne 0x14006f108
lea rcx, str._Kontakt
call qword [0x140155830]
lea r8, str._Kontakt
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.1400035cc
jmp 0x14006f3dc
mov eax, 0xb3ae
cmp bx, ax
jne 0x14006f11f
mov rcx, rsi
call fcn.140068c80
jmp 0x14006f3dc
mov eax, 0x808f
cmp bx, ax
jne 0x14006f1f6
mov rdi, qword [0x1401bb1c8]
cmp dword [rdi - 0xc], 0
jl 0x14006f146
mov qword [rsp + 0x38], rdi
lock add dword [rdi - 0xc], 1
jmp 0x14006f16b
mov rax, qword [0x1401a8058]
mov qword [rsp + 0x38], rax
mov rcx, rdi
call qword [0x140155830]
mov r8, rdi
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.1400035cc
nop
lea r8, [rsp + 0x38]
lea rdx, str._seitepaypalProgram
lea rcx, [rsp + 0xe0]
call fcn.14000aaf8
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140003940
nop
mov rcx, qword [rsp + 0xe0]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f1c6
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f1c6
mov rcx, qword [rsp + 0xe0]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f3dc
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f3dc
call fcn.14011be18
jmp 0x14006f3dc
mov eax, 0x800c
cmp bx, ax
jne 0x14006f225
lea rcx, str._Freeware
call qword [0x140155830]
lea r8, str._Freeware
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.1400035cc
jmp 0x14006f3dc
mov eax, 0x800f
cmp bx, ax
jne 0x14006f2de
mov edx, 0xd
lea rcx, [rsp + 0xf0]
call fcn.1400adda0
nop
mov r8, rax
lea rdx, str._KontaktBetreff
lea rcx, [rsp + 0x98]
call fcn.14000aaf8
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140003940
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f29f
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f29f
mov rcx, qword [rsp + 0x98]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0xf0]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f3dc
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f3dc
mov rcx, qword [rsp + 0xf0]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
jmp 0x14006f3dc
mov eax, 0x852c
cmp bx, ax
jne 0x14006f30d
lea rcx, str._seitefaq_Q_DIRfaq0
call qword [0x140155830]
lea r8, str._seitefaq_Q_DIRfaq0
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.1400035cc
jmp 0x14006f3dc
mov eax, 0x8593
cmp bx, ax
jne 0x14006f3b6
lea rdx, str._pageWindows_Info_
lea rcx, [rsp + 0x100]
call fcn.140003880
nop
lea r8, [0x1401bb1c8]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0xa8]
call fcn.140004610
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140003940
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f38e
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f38e
mov rcx, qword [rsp + 0xa8]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0x100]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f3dc
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f3dc
call fcn.14011be18
jmp 0x14006f3dc
mov eax, 0xe146
cmp bx, ax
jne 0x14006f3dc
lea rdx, [0x14015723e]
lea rcx, [rsp + 0x130]
call fcn.140003880
mov rcx, rax
call fcn.1400a9b2c
mov rax, qword [rsp + 0x30]
cmp dword [rax - 8], 3
jle 0x14006f4a6
lea rcx, [rsp + 0xf8]
call fcn.1400a926c
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rsp + 0xb8]
call fcn.140004610
mov dword [rsp + 0x28], 5
and qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rax]
lea rdx, str.open
mov rcx, qword [rsi + 8]
call qword [0x1401559b0]
mov r11, qword [rsp + 0xb8]
add r11, 0xfffffffffffffff4
cmp r11, qword [0x1401a8050]
je 0x14006f467
mov eax, ebp
lock xadd dword [r11], eax
add eax, ebp
test eax, eax
jg 0x14006f467
mov rcx, qword [rsp + 0xb8]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0xf8]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f95c
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f95c
mov rcx, qword [rsp + 0xf8]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
jmp 0x14006f95c
mov eax, 0x802f
cmp bx, ax
jne 0x14006f4be
mov rcx, qword [rsi + 8]
call fcn.14005c3a0
jmp 0x14006f95c
mov eax, 0x8030
cmp bx, ax
jne 0x14006f537
and qword [rsp + 0xc8], 0
lea rdx, [rsp + 0xc8]
mov rcx, rsi
call fcn.14005c5e0
test eax, eax
je 0x14006f95c
lea rcx, [rsp + 0x140]
call fcn.140055548
nop
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x148], rax
lea rcx, [rsp + 0x128]
call fcn.1400a9c38
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.140057fe0
nop
lea rcx, [rsp + 0x140]
call fcn.1400546f0
jmp 0x14006f95c
mov eax, 0x8031
cmp bx, ax
jne 0x14006f746
lea rcx, [rsp + 0xc0]
call fcn.1400f48a0
nop
lea rdx, [0x14015723e]
lea rcx, [rsp + 0x108]
call fcn.140003880
nop
lea rcx, [rsp + 0xb0]
call fcn.1400a9c38
mov rbx, rax
mov edx, 0xe
lea rcx, [rsp + 0xd8]
call fcn.1400adda0
nop
lea r8, [0x14015c86c]
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14000aa7c
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140004610
nop
mov rcx, qword [rsp + 0x78]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f5de
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f5de
mov rcx, qword [rsp + 0x78]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0xd8]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f611
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f611
mov rcx, qword [rsp + 0xd8]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f643
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f643
mov rcx, qword [rsp + 0xb0]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
lea rax, [rsp + 0x40]
mov qword [rsp + 0x110], rax
mov rbx, qword [rsp + 0x68]
cmp dword [rbx - 0xc], 0
jl 0x14006f667
mov qword [rsp + 0x40], rbx
lock add dword [rbx - 0xc], 1
jmp 0x14006f68c
mov rax, qword [0x1401a8058]
mov qword [rsp + 0x40], rax
mov rcx, rbx
call qword [0x140155830]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.1400035cc
nop
mov rbx, qword [rsp + 0x108]
lea rdi, [rbx - 0xc]
cmp dword [rdi], 0
jl 0x14006f6a8
mov qword [rsp + 0x50], rbx
lock add dword [rdi], 1
jmp 0x14006f6cd
mov rax, qword [0x1401a8058]
mov qword [rsp + 0x50], rax
mov rcx, rbx
call qword [0x140155830]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400035cc
nop
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
mov rdx, qword [rsi + 8]
lea rcx, [rsp + 0xc0]
call fcn.1400f6870
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f716
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f716
mov rcx, qword [rsp + 0x68]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
cmp rdi, qword [0x1401a8050]
je 0x14006f734
mov eax, ebp
lock xadd dword [rdi], eax
add eax, ebp
test eax, eax
jg 0x14006f734
mov rcx, rdi
call fcn.14011be18
nop
lea rcx, [rsp + 0xc0]
call fcn.1400f48b0
jmp 0x14006f95c
mov eax, 0x8032
cmp bx, ax
jne 0x14006f95c
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.1400a98c0
nop
lea rcx, [rsp + 0xa0]
call fcn.1400f48a0
nop
lea rcx, [rsp + 0x90]
call fcn.1400a9c38
mov rbx, rax
mov edx, 0xe
lea rcx, [rsp + 0x80]
call fcn.1400adda0
nop
lea r8, [0x14015c86c]
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.14000aa7c
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140004610
nop
mov rcx, qword [rsp + 0xd0]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f7ee
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f7ee
mov rcx, qword [rsp + 0xd0]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0x80]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f821
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f821
mov rcx, qword [rsp + 0x80]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0x90]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f853
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f853
mov rcx, qword [rsp + 0x90]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
lea rax, [rsp + 0x48]
mov qword [rsp + 0x110], rax
mov rbx, qword [rsp + 0x60]
cmp dword [rbx - 0xc], 0
jl 0x14006f877
mov qword [rsp + 0x48], rbx
lock add dword [rbx - 0xc], 1
jmp 0x14006f89c
mov rax, qword [0x1401a8058]
mov qword [rsp + 0x48], rax
mov rcx, rbx
call qword [0x140155830]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.1400035cc
nop
mov rbx, qword [rsp + 0x70]
cmp dword [rbx - 0xc], 0
jl 0x14006f8b3
mov qword [rsp + 0x58], rbx
lock add dword [rbx - 0xc], 1
jmp 0x14006f8d8
mov rax, qword [0x1401a8058]
mov qword [rsp + 0x58], rax
mov rcx, rbx
call qword [0x140155830]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0x58]
call fcn.1400035cc
nop
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x58]
mov rdx, qword [rsi + 8]
lea rcx, [rsp + 0xa0]
call fcn.1400f6870
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f921
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f921
mov rcx, qword [rsp + 0x60]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
lea rcx, [rsp + 0xa0]
call fcn.1400f48b0
nop
mov rcx, qword [rsp + 0x70]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f95c
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f95c
mov rcx, qword [rsp + 0x70]
add rcx, 0xfffffffffffffff4
call fcn.14011be18
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, qword [0x1401a8050]
je 0x14006f97f
mov eax, ebp
lock xadd dword [rcx], eax
add eax, ebp
test eax, eax
jg 0x14006f97f
call fcn.14011be18
xor eax, eax
mov rcx, qword [rsp + 0x1770]
xor rcx, rsp
call fcn.14011b6f0
lea r11, [rsp + 0x1780]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret