Function at 0x140006df4
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
lea rdx, [0x14001b474]
jmp fcn.140001930
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov esi, 0x12
mov dword [rbp - 0x30], 0x650030
mov rdi, rcx
mov dword [rbp - 0x2c], 0x7b007f
mov dword [rbp - 0x28], 0x280030
mov word [rbp - 0x24], si
lea ecx, [rsi - 4]
call fcn.140002534
lea r8, [rbp - 0x30]
mov rdx, rax
sub r8, rax
lea r9d, [rsi - 0xb]
movzx ecx, word [r8 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, 1
jne 0x140006e44
mov rdx, rax
mov rcx, rdi
call fcn.140001930
mov rcx, rdi
call fcn.140001a78
lea rcx, [rbp + 0x38]
call fcn.140004f3c
mov rdx, rax
mov r8d, 0x40
mov rcx, rdi
call fcn.140001a10
mov ecx, SafeArrayGetElement
mov dword [rbp - 0x30], 0x450030
mov dword [rbp - 0x2c], 0x65007d
mov dword [rbp - 0x28], 0x260024
mov dword [rbp - 0x24], 0x280030
mov dword [rbp - 0x20], 0x120030
call fcn.140002534
lea r8, [rbp - 0x30]
mov rdx, rax
sub r8, rax
mov r9d, 0xa
movzx ecx, word [r8 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, 1
jne 0x140006ec3
mov rdx, rax
mov rcx, rdi
call fcn.140001a10
call fcn.1400073f8
test al, al
lea rcx, str.True__
lea rdx, str.False__
cmovne rdx, rcx
mov rcx, rdi
call fcn.140001930
lea rcx, [rbp + 0x38]
call fcn.140004850
mov rdx, rax
mov rcx, rdi
call fcn.140001a10
call fcn.1400074e4
test al, al
lea rcx, [0x14001b818]
lea rdx, [0x14001b820]
cmovne rdx, rcx
mov rcx, rdi
call fcn.140001930
lea rcx, [rbp - 0x30]
call fcn.140006b30
lea rcx, [rbp + 0x38]
call fcn.1400031cc
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400069b4
test eax, eax
je 0x140007010
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.1400045b8
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140003d58
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005110]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003374
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140004950
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005110]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003b1c
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.14000452c
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005050]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov ecx, SafeArrayGetElement
mov dword [rbp - 0x18], 0x5d0040
mov dword [rbp - 0x14], 0x46005d
mov dword [rbp - 0x10], 0x51004e
mov dword [rbp - 0xc], 0x5f005b
mov dword [rbp - 8], 0x200044
mov word [rbp - 4], si
call fcn.140002534
lea r8, [rbp - 0x18]
mov rdx, rax
sub r8, rax
mov r9d, 0xb
movzx ecx, word [r8 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, 1
jne 0x140007051
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400069b4
test eax, eax
je 0x14000733e
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.1400035cc
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.1400030c8
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140006114]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003520
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.14000389c
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140006238]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003f80
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.1400041f8
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400055cc]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.14000428c
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140004d30
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400062a4]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140004784
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140003260
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400057f0]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.14000414c
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140003e5c
mov r8, rax
mov r9, rbx
lea rax, [0x140005f5c]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003ed8
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140004c30
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400066dc]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140004354
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140004ca8
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140006420]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003bdc
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140004e44
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005398]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140003c90
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.140004498
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005160]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.1400049d0
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.1400048d0
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005d40]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.140007368
mov rcx, rdi
call fcn.140001a84
lea rcx, [rbp + 0x38]
call fcn.140004b6c
lea rcx, [rbp + 0x38]
mov rbx, rax
call fcn.1400046fc
mov r8, rax
lea rax, [0x140005410]
mov r9, rbx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.140007368
lea rcx, [rbp - 0x30]
call fcn.140006afc
mov rcx, rdi
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
jmp 0x140001a90