Function at 0x140006280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x1400a7020]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor r14d, r14d
xorps xmm0, xmm0
xor eax, eax
mov dword [rsp + 0x54], r14d
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x40], r14d
movups xmmword [rbp - 0x60], xmm0
mov qword [rsp + 0x68], r14
movups xmmword [rbp - 0x50], xmm0
mov qword [rsp + 0x48], r14
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x68], rax
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x60], r14
movups xmmword [rbp - 0x78], xmm0
call fcn.14000af50
mov rdi, rax
test rax, rax
je 0x140006314
mov rdx, qword [0x1400ae608]
mov rcx, rax
call fcn.14000b020
mov rsi, rax
test rax, rax
jne 0x14000631b
mov rcx, rdi
call fcn.14000b100
xor eax, eax
jmp 0x140006668
lea rax, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, rsi
call fcn.140084310
test eax, eax
jne 0x140006314
call fcn.140084410
cmp eax, 0x7a
jne 0x1400066b6
mov qword [rsp + 0x350], rbx
mov ebx, dword [rsp + 0x40]
call fcn.140083d90
mov rcx, rax
mov r8d, ebx
call fcn.140016ce0
mov rbx, rax
test rax, rax
jne 0x140006380
mov rcx, rdi
call fcn.14000b100
mov rcx, rsi
call fcn.14000b100
xor eax, eax
jmp 0x140006660
mov r9d, dword [rsp + 0x40]
lea rax, [rsp + 0x40]
mov r8, rbx
mov qword [rsp + 0x20], rax
mov rcx, rsi
call fcn.140084310
test eax, eax
jne 0x1400063c5
mov rcx, rdi
call fcn.14000b100
mov rcx, rsi
call fcn.14000b100
call fcn.140083d90
mov rcx, rax
mov r8, rbx
call fcn.14000aea0
xor eax, eax
jmp 0x140006660
mov qword [rsp + 0x358], r12
lea rcx, [rbp - 0x30]
mov r12d, r14d
mov qword [rsp + 0x360], r15
mov byte [rbp - 0x24], r12b
mov dword [rbp - 0x28], 0x6c6c642e
mov word [rbp - 0x2c], 0x6970
mov word [rbp - 0x2f], 0x7664
mov word [rbp - 0x2a], 0x3233
mov byte [rbp - 0x30], 0x41
mov byte [rbp - 0x2d], 0x61
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, rax
test rax, rax
je 0x140006692
lea rdx, [rbp - 0x20]
mov word [rbp - 0x11], 0x6972
mov rcx, rax
mov dword [rbp - 0xb], 0x6c636144
mov dword [rbp - 0x16], 0x73654479
mov word [rbp - 0xe], 0x6f74
mov dword [rbp - 0x1d], 0x75636553
mov byte [rbp - 0x12], 0x63
mov byte [rbp - 7], r12b
mov word [rbp - 0x19], 0x6972
mov byte [rbp - 0xf], 0x70
mov word [rbp - 0x20], 0x6547
mov byte [rbp - 0xc], 0x72
mov byte [rbp - 0x17], 0x74
mov byte [rbp - 0x1e], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140006481
lea r9, [rsp + 0x50]
mov rcx, rbx
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x54]
call rax
mov r12d, eax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r12d, r12d
je 0x140006692
xor edx, edx
lea rcx, [rbp]
mov r8d, 0x104
call fcn.14001ef80
xor edx, edx
mov dword [rsp + 0x5c], 0x104
mov r8d, 0x104
lea rcx, [rbp + 0x110]
call fcn.14001ef80
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x58], 0x104
call fcn.14000aca0
test eax, eax
je 0x140006692
mov r12, qword [rsp + 0x60]
lea rcx, [rbp - 0x30]
mov dword [rbp - 0x28], 0x6c6c642e
mov word [rbp - 0x2c], 0x6970
mov word [rbp - 0x2f], 0x7664
mov byte [rbp - 0x24], r14b
mov word [rbp - 0x2a], 0x3233
mov byte [rbp - 0x30], 0x41
mov byte [rbp - 0x2d], 0x61
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, rax
test rax, rax
je 0x140006692
lea rdx, [rbp - 0x20]
mov word [rbp - 0x11], 0x4164
mov rcx, rax
mov byte [rbp - 0xf], r14b
mov dword [rbp - 0x16], 0x53746e75
mov dword [rbp - 0x1a], 0x6f636341
mov dword [rbp - 0x20], 0x6b6f6f4c
mov word [rbp - 0x1c], 0x7075
mov byte [rbp - 0x12], 0x69
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140006588
lea rcx, [rsp + 0x70]
mov rdx, r12
mov qword [rsp + 0x30], rcx
lea r9, [rsp + 0x5c]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
lea r8, [rbp]
lea rcx, [rbp + 0x110]
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call rax
mov r14d, eax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r14d, r14d
je 0x140006692
mov r9d, 3
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
lea r8d, [r9 + 0x1f]
call fcn.140083e30
mov r8, qword [rsp + 0x68]
lea r9, [rsp + 0x48]
lea rdx, [rbp - 0x60]
call fcn.140083f30
test eax, eax
jne 0x140006692
lea rcx, [rsp + 0x78]
call fcn.140084020
test eax, eax
je 0x1400065fe
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x78]
call fcn.140084120
test eax, eax
je 0x1400065fe
lea r8, [rsp + 0x78]
mov rcx, rsi
call fcn.140016e80
test eax, eax
jne 0x14000661d
mov rcx, rdi
call fcn.14000b100
mov rcx, rsi
call fcn.14000b100
mov rcx, qword [rsp + 0x48]
call fcn.14000ab00
jmp 0x1400066a2
mov rcx, rsi
call fcn.14000b100
mov rcx, rdi
test eax, eax
jne 0x14000668b
call fcn.14000b100
mov rcx, qword [rsp + 0x48]
call fcn.14000ab00
call fcn.140083d90
mov rcx, rax
mov r8, rbx
call fcn.14000aea0
mov eax, 1
mov r12, qword [rsp + 0x358]
mov r15, qword [rsp + 0x360]
mov rbx, qword [rsp + 0x350]
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14001c9b0
mov rsi, qword [rsp + 0x368]
add rsp, 0x330
pop r14
pop rdi
pop rbp
ret
call fcn.14000b100
jmp 0x140006631
mov rcx, rdi
call fcn.14000b100
mov rcx, rsi
call fcn.14000b100
call fcn.140083d90
mov rcx, rax
mov r8, rbx
call fcn.14000aea0
xor eax, eax
jmp 0x140006650
mov rcx, rdi
call fcn.14000b100
mov rcx, rsi
call fcn.14000b100
call fcn.140083d90
mov rcx, rax
xor r8d, r8d
call fcn.14000aea0
xor eax, eax
jmp 0x140006668