Function at 0x140006e44
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
lea rdx, [0x140014434]
jmp fcn.140001970
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov esi, SafeArrayUnaccessData
mov dword [rbp - 0x30], 0x640031
mov rdi, rcx
mov dword [rbp - 0x2c], 0x7a007e
mov dword [rbp - 0x28], 0x290031
mov word [rbp - 0x24], si
lea ecx, [rsi - 5]
call fcn.14000257c
lea r8, [rbp - 0x30]
mov rdx, rax
sub r8, rax
lea r9d, [rsi - 0xc]
movzx ecx, word [r8 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, 1
jne 0x140006e96
mov rdx, rax
mov rcx, rdi
call fcn.140001970
mov rcx, rdi
call fcn.140001ab8
lea rcx, [rbp + 0x28]
call fcn.140004f88
mov rdx, rax
mov r8d, 0x40
mov rcx, rdi
call fcn.140001a50
mov ecx, SafeArrayGetElement
mov dword [rbp - 0x30], 0x440031
mov dword [rbp - 0x2c], 0x64007c
mov dword [rbp - 0x28], 0x270025
mov dword [rbp - 0x24], 0x290031
mov dword [rbp - 0x20], 0x130031
call fcn.14000257c
lea r8, [rbp - 0x30]
mov rdx, rax
sub r8, rax
mov r9d, 0xa
movzx ecx, word [r8 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, 1
jne 0x140006f15
mov rdx, rax
mov rcx, rdi
call fcn.140001a50
call fcn.14000744c
test al, al
lea rcx, str.True__
lea rdx, str.False__
cmovne rdx, rcx
mov rcx, rdi
call fcn.140001970
lea rcx, [rbp + 0x28]
call fcn.140004898
mov rdx, rax
mov rcx, rdi
call fcn.140001a50
call fcn.140007538
test al, al
lea rcx, [0x1400147d8]
lea rdx, [0x1400147e0]
cmovne rdx, rcx
mov rcx, rdi
call fcn.140001970
lea rcx, [rbp - 0x30]
call fcn.140006b80
lea rcx, [rbp + 0x28]
call fcn.140003214
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140006a04
test eax, eax
je 0x140007062
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140004600
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140003da0
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x14000515c]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.1400033bc
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004998
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x14000515c]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003b64
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004574
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x14000509c]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov ecx, SafeArrayGetElement
mov dword [rbp - 0x18], 0x5c0041
mov dword [rbp - 0x14], 0x47005c
mov dword [rbp - 0x10], 0x50004f
mov dword [rbp - 0xc], 0x5e005a
mov dword [rbp - 8], 0x210045
mov word [rbp - 4], si
call fcn.14000257c
lea r8, [rbp - 0x18]
mov rdx, rax
sub r8, rax
mov r9d, 0xb
movzx ecx, word [r8 + rdx]
xor cx, si
mov word [rdx], cx
lea rdx, [rdx + 2]
sub r9, 1
jne 0x1400070a3
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140006a04
test eax, eax
je 0x140007390
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003614
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140003110
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140006160]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003568
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.1400038e4
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140006288]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003fc8
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004240
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005618]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.1400042d4
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004d7c
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400062f4]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.1400047cc
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.1400032a8
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x14000583c]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140004194
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140003ea4
mov r8, rax
mov r9, rbx
lea rax, [0x140005fa8]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003f20
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004c7c
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x14000672c]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.14000439c
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004cf4
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140006470]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003c24
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004e90
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400053e4]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140003cd8
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.1400044e0
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x1400051ac]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140004a18
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004918
mov r8, rax
lea rdx, [rbp - 0x30]
lea rax, [0x140005d8c]
mov r9, rbx
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400073bc
mov rcx, rdi
call fcn.140001ac4
lea rcx, [rbp + 0x28]
call fcn.140004bb8
lea rcx, [rbp + 0x28]
mov rbx, rax
call fcn.140004744
mov r8, rax
lea rax, [0x14000545c]
mov r9, rbx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1400073bc
lea rcx, [rbp - 0x30]
call fcn.140006b4c
mov rcx, rdi
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
jmp 0x140001ad0