Function at 0x2b368d210
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rbx
sub rsp, 0x190
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, 1
call fcn.2b36558c0
mov edx, 0x5161
movabs rax, 0x6a6a622c67716b
mov dword [rsp + 0xe8], 0x68636c6e
mov qword [rsp + 0x5c], rax
movzx eax, byte [rsp + 0x5c]
lea r12, [rsp + 0x170]
lea r15, [rsp + 0x150]
mov byte [rsp + 0xee], 0
mov rcx, r15
add eax, 2
mov byte [rsp + 0x5c], al
movzx eax, byte [rsp + 0x5d]
add eax, 2
mov byte [rsp + 0x5d], al
movzx eax, byte [rsp + 0x5e]
add eax, 2
mov byte [rsp + 0x5e], al
movzx eax, byte [rsp + 0x5f]
add eax, 2
mov byte [rsp + 0x5f], al
movzx eax, byte [rsp + 0x60]
add eax, 2
mov byte [rsp + 0x60], al
movzx eax, byte [rsp + 0x61]
add eax, 2
mov byte [rsp + 0x61], al
movzx eax, byte [rsp + 0x62]
add eax, 2
mov byte [rsp + 0x62], al
mov rax, qword [str.GmcFi_M]
mov qword [rsp + 0xe0], rax
mov eax, 0x5161
mov word [rsp + 0xec], ax
movabs rax, 0x4d5e5b6946636d47
mov qword [rsp + 0x101], rax
mov dword [rsp + 0x109], 0x68636c6e
mov word [rsp + 0x10d], dx
mov rdx, r12
mov byte [rsp + 0x10f], 0
movzx eax, byte [rsp + 0x101]
add eax, 6
mov byte [rsp + 0x101], al
movzx eax, byte [rsp + 0x102]
add eax, 6
mov byte [rsp + 0x102], al
movzx eax, byte [rsp + 0x103]
add eax, 6
mov byte [rsp + 0x103], al
movzx eax, byte [rsp + 0x104]
add eax, 6
mov byte [rsp + 0x104], al
movzx eax, byte [rsp + 0x105]
mov dword [rsp + 0x78], 0xbf878c9f
add eax, 6
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x105], al
movzx eax, byte [rsp + 0x106]
add eax, 6
mov byte [rsp + 0x106], al
movzx eax, byte [rsp + 0x107]
add eax, 6
mov byte [rsp + 0x107], al
movzx eax, byte [rsp + 0x108]
add eax, 6
mov byte [rsp + 0x108], al
movzx eax, byte [rsp + 0x109]
add eax, 6
mov byte [rsp + 0x109], al
movzx eax, byte [rsp + 0x10a]
add eax, 6
mov byte [rsp + 0x10a], al
movzx eax, byte [rsp + 0x10b]
add eax, 6
mov byte [rsp + 0x10b], al
movzx eax, byte [rsp + 0x10c]
add eax, 6
mov byte [rsp + 0x10c], al
movzx eax, byte [rsp + 0x10d]
add eax, 6
mov byte [rsp + 0x10d], al
movzx eax, byte [rsp + 0x10e]
add eax, 6
mov byte [rsp + 0x10e], al
mov rax, qword [0x2b374ea88]
mov qword [rsp + 0x70], rax
movabs rax, 0x8c9c97b29a9f91b2
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x178], 0xbf878c9f
mov byte [rsp + 0x17c], 0
movzx eax, byte [rsp + 0x170]
xor eax, 0xfffffffe
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0x171]
xor eax, 0xfffffffe
mov byte [rsp + 0x171], al
movzx eax, byte [rsp + 0x172]
xor eax, 0xfffffffe
mov byte [rsp + 0x172], al
movzx eax, byte [rsp + 0x173]
mov dword [rsp + 0x88], 0x919199d3
xor eax, 0xfffffffe
mov byte [rsp + 0x8c], 0
mov byte [rsp + 0x173], al
movzx eax, byte [rsp + 0x174]
xor eax, 0xfffffffe
mov byte [rsp + 0x174], al
movzx eax, byte [rsp + 0x175]
xor eax, 0xfffffffe
mov byte [rsp + 0x175], al
movzx eax, byte [rsp + 0x176]
xor eax, 0xfffffffe
mov byte [rsp + 0x176], al
movzx eax, byte [rsp + 0x177]
xor eax, 0xfffffffe
mov byte [rsp + 0x177], al
movzx eax, byte [rsp + 0x178]
xor eax, 0xfffffffe
mov byte [rsp + 0x178], al
movzx eax, byte [rsp + 0x179]
xor eax, 0xfffffffe
mov byte [rsp + 0x179], al
movzx eax, byte [rsp + 0x17a]
xor eax, 0xfffffffe
mov byte [rsp + 0x17a], al
movzx eax, byte [rsp + 0x17b]
xor eax, 0xfffffffe
mov byte [rsp + 0x17b], al
mov rax, qword [0x2b374ea90]
mov qword [rsp + 0x80], rax
movabs rax, 0xcfce9198938f9896
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x158], 0x919199d3
mov byte [rsp + 0x15c], 0
movzx eax, byte [rsp + 0x150]
xor eax, 0xfffffffd
mov byte [rsp + 0x150], al
movzx eax, byte [rsp + 0x151]
xor eax, 0xfffffffd
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x152]
xor eax, 0xfffffffd
mov byte [rsp + 0x152], al
movzx eax, byte [rsp + 0x153]
xor eax, 0xfffffffd
mov byte [rsp + 0x153], al
movzx eax, byte [rsp + 0x154]
xor eax, 0xfffffffd
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x155]
xor eax, 0xfffffffd
mov byte [rsp + 0x155], al
movzx eax, byte [rsp + 0x156]
xor eax, 0xfffffffd
mov byte [rsp + 0x156], al
movzx eax, byte [rsp + 0x157]
xor eax, 0xfffffffd
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x158]
xor eax, 0xfffffffd
mov byte [rsp + 0x158], al
movzx eax, byte [rsp + 0x159]
xor eax, 0xfffffffd
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0x15a]
xor eax, 0xfffffffd
mov byte [rsp + 0x15a], al
movzx eax, byte [rsp + 0x15b]
xor eax, 0xfffffffd
mov byte [rsp + 0x15b], al
call fcn.2b3656120
lea rcx, [rsp + 0x5c]
call rax
mov r8d, 0x6e
movdqa xmm0, xmmword [str.B_o_pmm_ioKmj_nkernel32GetProcA]
movabs rdx, 0x6e605e6a6d4b6f69
mov r14, rax
mov ecx, 0x6e
movabs rax, 0x606d6d703e6f6042
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], rdx
mov rdx, r12
mov word [rsp + 0x180], r8w
movzx eax, byte [rsp + 0x170]
movaps xmmword [rsp + 0x110], xmm0
add eax, 5
mov word [rsp + 0x120], cx
mov rcx, r15
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0x171]
add eax, 5
mov byte [rsp + 0x171], al
movzx eax, byte [rsp + 0x172]
add eax, 5
mov byte [rsp + 0x172], al
movzx eax, byte [rsp + 0x173]
add eax, 5
mov byte [rsp + 0x173], al
movzx eax, byte [rsp + 0x174]
add eax, 5
mov byte [rsp + 0x174], al
movzx eax, byte [rsp + 0x175]
add eax, 5
mov byte [rsp + 0x175], al
movzx eax, byte [rsp + 0x176]
add eax, 5
mov byte [rsp + 0x176], al
movzx eax, byte [rsp + 0x177]
add eax, 5
mov byte [rsp + 0x177], al
movzx eax, byte [rsp + 0x178]
add eax, 5
mov byte [rsp + 0x178], al
movzx eax, byte [rsp + 0x179]
add eax, 5
mov byte [rsp + 0x179], al
movzx eax, byte [rsp + 0x17a]
add eax, 5
mov byte [rsp + 0x17a], al
movzx eax, byte [rsp + 0x17b]
add eax, 5
mov byte [rsp + 0x17b], al
movzx eax, byte [rsp + 0x17c]
add eax, 5
mov byte [rsp + 0x17c], al
movzx eax, byte [rsp + 0x17d]
mov dword [rsp + 0x98], 0x6c6c642e
add eax, 5
mov byte [rsp + 0x9c], 0
mov byte [rsp + 0x17d], al
movzx eax, byte [rsp + 0x17e]
add eax, 5
mov byte [rsp + 0x17e], al
movzx eax, byte [rsp + 0x17f]
add eax, 5
mov byte [rsp + 0x17f], al
movzx eax, byte [rsp + 0x180]
add eax, 5
mov byte [rsp + 0x180], al
mov rax, qword [0x2b374eab0]
mov qword [rsp + 0x90], rax
movabs rax, 0x32336c656e72656b
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x158], 0x6c6c642e
mov byte [rsp + 0x15c], 0
movzx eax, byte [rsp + 0x150]
mov byte [rsp + 0x150], al
movzx eax, byte [rsp + 0x151]
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x152]
mov byte [rsp + 0x152], al
movzx eax, byte [rsp + 0x153]
mov byte [rsp + 0x153], al
movzx eax, byte [rsp + 0x154]
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x155]
mov byte [rsp + 0x155], al
movzx eax, byte [rsp + 0x156]
mov byte [rsp + 0x156], al
movzx eax, byte [rsp + 0x157]
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x158], al
movzx eax, byte [rsp + 0x159]
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0x15a]
mov byte [rsp + 0x15a], al
movzx eax, byte [rsp + 0x15b]
mov byte [rsp + 0x15b], al
call fcn.2b3656120
call rax
mov r10d, 0x7373
mov rcx, r15
mov rdx, r12
mov r13, rax
mov rax, qword [0x2b374eab8]
mov r9d, 0x7373
mov qword [rsp + 0x40], 0
mov word [rsp + 0xfc], r9w
mov qword [rsp + 0xf0], rax
movabs rax, 0x41636f7250746547
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x178], 0x65726464
mov word [rsp + 0x17c], r10w
mov byte [rsp + 0x17e], 0
movzx eax, byte [rsp + 0x170]
mov qword [rsp + 0x48], 0
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0x171]
mov dword [rsp + 0xf8], 0x65726464
mov byte [rsp + 0x171], al
movzx eax, byte [rsp + 0x172]
mov byte [rsp + 0xfe], 0
mov byte [rsp + 0x172], al
movzx eax, byte [rsp + 0x173]
mov byte [rsp + 0x173], al
movzx eax, byte [rsp + 0x174]
mov byte [rsp + 0x174], al
movzx eax, byte [rsp + 0x175]
mov byte [rsp + 0x175], al
movzx eax, byte [rsp + 0x176]
mov byte [rsp + 0x176], al
movzx eax, byte [rsp + 0x177]
mov byte [rsp + 0x177], al
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x178], al
movzx eax, byte [rsp + 0x179]
mov byte [rsp + 0x179], al
movzx eax, byte [rsp + 0x17a]
mov byte [rsp + 0x17a], al
movzx eax, byte [rsp + 0x17b]
mov rbx, qword [0x2b374ea38]
mov byte [rsp + 0xac], 0
mov byte [rsp + 0x17b], al
movzx eax, byte [rsp + 0x17c]
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0x17c], al
movzx eax, byte [rsp + 0x17d]
mov dword [rsp + 0xa8], 0x6a6a622c
mov byte [rsp + 0x17d], al
movabs rax, 0x30316a636c706369
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x158], 0x6a6a622c
mov byte [rsp + 0x15c], 0
movzx eax, byte [rsp + 0x150]
add eax, 2
mov byte [rsp + 0x150], al
movzx eax, byte [rsp + 0x151]
add eax, 2
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x152]
add eax, 2
mov byte [rsp + 0x152], al
movzx eax, byte [rsp + 0x153]
add eax, 2
mov byte [rsp + 0x153], al
movzx eax, byte [rsp + 0x154]
add eax, 2
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x155]
add eax, 2
mov byte [rsp + 0x155], al
movzx eax, byte [rsp + 0x156]
add eax, 2
mov byte [rsp + 0x156], al
movzx eax, byte [rsp + 0x157]
add eax, 2
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x158]
add eax, 2
mov byte [rsp + 0x158], al
movzx eax, byte [rsp + 0x159]
add eax, 2
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0x15a]
add eax, 2
mov byte [rsp + 0x15a], al
movzx eax, byte [rsp + 0x15b]
add eax, 2
mov byte [rsp + 0x15b], al
call fcn.2b3656120
mov rcx, r14
lea rdx, [rsp + 0x101]
call rax
movdqa xmm0, xmmword [0x2b374eac0]
mov r11d, 0x81
mov rcx, r15
mov r14, rax
mov qword [0x2b377e170], rax
movabs rax, 0x9b978aa89c999daa
movabs rdx, 0x8a97959db58b8b9d
mov qword [rsp + 0x170], rax
mov eax, 0x81
mov qword [rsp + 0x178], rdx
mov rdx, r12
mov word [rsp + 0x180], ax
movzx eax, byte [rsp + 0x170]
movaps xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], r11w
xor eax, 0xfffffff8
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0x171]
xor eax, 0xfffffff8
mov byte [rsp + 0x171], al
movzx eax, byte [rsp + 0x172]
xor eax, 0xfffffff8
mov byte [rsp + 0x172], al
movzx eax, byte [rsp + 0x173]
xor eax, 0xfffffff8
mov byte [rsp + 0x173], al
movzx eax, byte [rsp + 0x174]
xor eax, 0xfffffff8
mov byte [rsp + 0x174], al
movzx eax, byte [rsp + 0x175]
xor eax, 0xfffffff8
mov byte [rsp + 0x175], al
movzx eax, byte [rsp + 0x176]
xor eax, 0xfffffff8
mov byte [rsp + 0x176], al
movzx eax, byte [rsp + 0x177]
xor eax, 0xfffffff8
mov byte [rsp + 0x177], al
movzx eax, byte [rsp + 0x178]
xor eax, 0xfffffff8
mov byte [rsp + 0x178], al
movzx eax, byte [rsp + 0x179]
xor eax, 0xfffffff8
mov byte [rsp + 0x179], al
movzx eax, byte [rsp + 0x17a]
xor eax, 0xfffffff8
mov byte [rsp + 0x17a], al
movzx eax, byte [rsp + 0x17b]
xor eax, 0xfffffff8
mov byte [rsp + 0x17b], al
movzx eax, byte [rsp + 0x17c]
xor eax, 0xfffffff8
mov byte [rsp + 0x17c], al
movzx eax, byte [rsp + 0x17d]
mov dword [rsp + 0xb8], 0x6969612b
xor eax, 0xfffffff8
mov byte [rsp + 0xbc], 0
mov byte [rsp + 0x17d], al
movzx eax, byte [rsp + 0x17e]
xor eax, 0xfffffff8
mov byte [rsp + 0x17e], al
movzx eax, byte [rsp + 0x17f]
xor eax, 0xfffffff8
mov byte [rsp + 0x17f], al
movzx eax, byte [rsp + 0x180]
xor eax, 0xfffffff8
mov byte [rsp + 0x180], al
mov rax, qword [str.hbokbi0_]
mov qword [rsp + 0xb0], rax
movabs rax, 0x2f3069626b6f6268
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x158], 0x6969612b
mov byte [rsp + 0x15c], 0
movzx eax, byte [rsp + 0x150]
add eax, 3
mov byte [rsp + 0x150], al
movzx eax, byte [rsp + 0x151]
add eax, 3
mov byte [rsp + 0x151], al
movzx eax, byte [rsp + 0x152]
add eax, 3
mov byte [rsp + 0x152], al
movzx eax, byte [rsp + 0x153]
add eax, 3
mov byte [rsp + 0x153], al
movzx eax, byte [rsp + 0x154]
add eax, 3
mov byte [rsp + 0x154], al
movzx eax, byte [rsp + 0x155]
add eax, 3
mov byte [rsp + 0x155], al
movzx eax, byte [rsp + 0x156]
add eax, 3
mov byte [rsp + 0x156], al
movzx eax, byte [rsp + 0x157]
add eax, 3
mov byte [rsp + 0x157], al
movzx eax, byte [rsp + 0x158]
add eax, 3
mov byte [rsp + 0x158], al
movzx eax, byte [rsp + 0x159]
add eax, 3
mov byte [rsp + 0x159], al
movzx eax, byte [rsp + 0x15a]
add eax, 3
mov byte [rsp + 0x15a], al
movzx eax, byte [rsp + 0x15b]
add eax, 3
mov byte [rsp + 0x15b], al
call fcn.2b3656120
lea rdx, [rsp + 0x40]
mov r9d, 0xc
mov rcx, r13
mov qword [rsp + 0x20], rdx
lea r8, [0x2b377e160]
mov rdx, r14
lea r14, [rsp + 0x64]
call rax
lea rax, [0x2b368e2b0]
mov rdx, r12
mov rcx, r14
mov qword [rsp + 0x50], rax
mov eax, 0xffffb242
mov r8d, 2
mov word [rsp + 0x3c], ax
mov eax, 0xffffb242
mov word [rsp + 0x170], ax
mov byte [rsp + 0x172], 0
movzx eax, byte [rsp + 0x170]
mov qword [rsp + 0x64], 0
add eax, 6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x170], al
movzx eax, byte [rsp + 0x171]
mov byte [rsp + 0x3e], 0
add eax, 6
mov byte [rsp + 0x171], al
call fcn.2b3660140
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x66]
mov r8d, 8
call fcn.2b3660140
mov eax, 0x4f
lea rcx, [rsp + 0x6e]
mov rdx, r12
mov word [rsp + 0x170], ax
movzx eax, byte [rsp + 0x170]
mov r8d, 1
add eax, 1
mov byte [rsp + 0x170], al
call fcn.2b3660140
mov eax, 0x39
lea rcx, [rsp + 0x6f]
mov rdx, r12
mov word [rsp + 0x170], ax
movzx eax, byte [rsp + 0x170]
mov r8d, 1
xor eax, 0xfffffffa
mov byte [rsp + 0x170], al
call fcn.2b3660140
mov edx, 0x7770
movabs rax, 0x6d704e6372677055
mov ecx, 0x7770
mov word [rsp + 0x160], dx
movdqa xmm0, xmmword [str.UpgrcNpmacqqKckm]
movabs rdx, 0x6d6b634b71716361
mov qword [rsp + 0x170], rax
mov r15, qword [0x2b377e170]
xor eax, eax
mov qword [rsp + 0x178], rdx
mov byte [rsp + 0x162], 0
mov word [rsp + 0x180], cx
mov byte [rsp + 0x182], 0
movaps xmmword [rsp + 0x150], xmm0
nop dword [rax]
movzx edx, byte [rsp + rax + 0x170]
add edx, 2
mov byte [rsp + rax + 0x170], dl
add rax, 1
cmp rax, 0x12
jne 0x2b368df90
mov qword [rsp + 0xd3], rbx
lea rcx, [rsp + 0xd3]
mov rdx, r12
mov dword [rsp + 0xdb], 0x6a6a622c
mov byte [rsp + 0xdf], 0
movzx eax, byte [rsp + 0xd3]
mov qword [rsp + 0xc0], rbx
add eax, 2
mov byte [rsp + 0xcc], 0
mov byte [rsp + 0xd3], al
movzx eax, byte [rsp + 0xd4]
mov dword [rsp + 0xc8], 0x6a6a622c
add eax, 2
mov byte [rsp + 0xd4], al
movzx eax, byte [rsp + 0xd5]
add eax, 2
mov byte [rsp + 0xd5], al
movzx eax, byte [rsp + 0xd6]
add eax, 2
mov byte [rsp + 0xd6], al
movzx eax, byte [rsp + 0xd7]
add eax, 2
mov byte [rsp + 0xd7], al
movzx eax, byte [rsp + 0xd8]
add eax, 2
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0xd9]
add eax, 2
mov byte [rsp + 0xd9], al
movzx eax, byte [rsp + 0xda]
add eax, 2
mov byte [rsp + 0xda], al
movzx eax, byte [rsp + 0xdb]
add eax, 2
mov byte [rsp + 0xdb], al
movzx eax, byte [rsp + 0xdc]
add eax, 2
mov byte [rsp + 0xdc], al
movzx eax, byte [rsp + 0xdd]
add eax, 2
mov byte [rsp + 0xdd], al
movzx eax, byte [rsp + 0xde]
add eax, 2
mov byte [rsp + 0xde], al
call fcn.2b3656120
lea rdx, [rsp + 0x48]
mov r8, r14
mov rcx, r13
mov qword [rsp + 0x20], rdx
mov r9d, 0xc
mov rdx, r15
call rax
call fcn.2b3655760
xor eax, eax
add rsp, 0x190
pop rbx
pop r12
pop r13
pop r14
pop r15
ret