Function at 0x1800023a8
Capabilities:
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov dword [rbp - 0x20], 0x6e
mov edi, 2
mov byte [rbp - 0x1c], 0x25
xor eax, eax
mov byte [rbp - 0x1b], 0x6e
xor r8d, r8d
mov byte [rbp - 0x1a], 0xb
mov byte [rbp - 0x19], 0x6e
lea r14d, [rdi - 1]
mov byte [rbp - 0x18], 0x1c
mov byte [rbp - 0x17], 0x6e
mov byte [rbp - 0x16], 0
mov byte [rbp - 0x15], 0x6e
mov byte [rbp - 0x14], 0xb
mov byte [rbp - 0x13], 0x6e
mov byte [rbp - 0x12], dil
mov byte [rbp - 0x11], 0x6e
mov byte [rbp - 0x10], 0x5d
mov byte [rbp - 0xf], 0x6e
mov byte [rbp - 0xe], 0x5c
mov byte [rbp - 0xd], 0x6e
mov byte [rbp - 0xc], 0x40
mov byte [rbp - 0xb], 0x6e
mov byte [rbp - 0xa], 0xa
mov byte [rbp - 9], 0x6e
mov byte [rbp - 8], dil
mov byte [rbp - 7], 0x6e
mov byte [rbp - 6], dil
mov byte [rbp - 5], 0x6e
mov byte [rbp - 4], 0x6e
mov byte [rbp - 3], al
mov al, byte [rbp - 0x1c]
movsx edx, byte [rbp + r8 - 0x1c]
mov eax, dword [rbp - 0x20]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 - 0x1c], al
add r8, r14
cmp r8, 0x19
jb 0x180002446
mov byte [rbp - 3], 0
mov ebx, 0x5dc98b
mov rax, qword gs:[0x60]
mov r15d, 0x55555556
mov r9d, 0x80000003
mov r12d, 0xfffffffc
mov r11d, 0x66666667
mov r8, qword [rax + 0x18]
mov eax, r15d
mov dword [rbp + 0x30], ebx
lea r10d, [r9 - 2]
mov ecx, dword [rbp + 0x30]
lea r13d, [r12 + 2]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800024e1
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x1800024ca
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x1800024db
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x1800024c1
jmp 0x180002512
mov eax, dword [rbp + 0x30]
mov ecx, edi
mov eax, dword [rbp + 0x30]
sub ecx, r8d
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x1800024fc
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800024f3
mov rsi, qword [r8 + 0x18]
mov eax, r15d
mov dword [rbp + 0x30], ebx
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x18000255b
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, esi
mov dword [rbp + 0x30], ecx
jmp 0x180002544
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x180002555
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x18000253b
jmp 0x18000258b
mov eax, dword [rbp + 0x30]
mov ecx, edi
mov eax, dword [rbp + 0x30]
sub ecx, esi
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180002575
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x18000256c
mov r8, qword [rsi + 0x10]
mov eax, r15d
mov dword [rbp + 0x30], ebx
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800025d5
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x1800025be
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x1800025cf
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x1800025b5
jmp 0x180002606
mov eax, dword [rbp + 0x30]
mov ecx, edi
mov eax, dword [rbp + 0x30]
sub ecx, r8d
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x1800025f0
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800025e7
mov rbx, rsi
mov rbx, qword [rbx]
mov eax, r15d
mov dword [rbp + 0x30], 0x5dc98b
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002658
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, ebx
mov dword [rbp + 0x30], ecx
jmp 0x18000263e
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x18000264f
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180002635
jmp 0x18000275d
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180002669
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
mov eax, dword [rbp + 0x30]
je 0x18000269f
mov ecx, edi
sub ecx, ebx
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180002684
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x18000267b
jmp 0x18000275d
and eax, r9d
jge 0x1800026ad
sub eax, r14d
or eax, r12d
add eax, r14d
mov ecx, dword [rbp + 0x30]
test eax, eax
je 0x1800026fe
add ecx, edi
lea eax, [rbx + 3]
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x1800026e7
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x1800026e1
sub eax, r14d
jmp 0x1800026e4
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x1800026f8
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x1800026c1
jmp 0x18000275d
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x18000275d
mov eax, dword [rbp + 0x30]
lea ecx, [rbx + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x180002744
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180002741
add eax, r14d
jmp 0x180002744
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002721
mov r8, qword [rbx + 0x30]
test r8, r8
je 0x1800028de
mov dword [rbp + 0x30], 0x5dc98b
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800027b7
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r8d
mov dword [rbp + 0x30], ecx
jmp 0x18000279d
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r9d
jge 0x1800027ae
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x180002794
jmp 0x1800028bf
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x1800027c8
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
mov eax, dword [rbp + 0x30]
je 0x1800027ff
mov ecx, edi
sub ecx, r8d
add ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x1800027e4
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1800027db
jmp 0x1800028bf
and eax, r9d
jge 0x18000280d
sub eax, r14d
or eax, r12d
add eax, r14d
mov ecx, dword [rbp + 0x30]
test eax, eax
je 0x18000285f
add ecx, edi
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rbp + 0x30], ecx
jmp 0x180002848
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x180002842
sub eax, r14d
jmp 0x180002845
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, r10d
jge 0x180002859
sub eax, r14d
or eax, r13d
add eax, r14d
test eax, eax
je 0x180002822
jmp 0x1800028bf
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x1800028bf
mov eax, dword [rbp + 0x30]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
jmp 0x1800028a6
mov ecx, dword [rbp + 0x30]
mov eax, r11d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x30]
je 0x1800028a3
add eax, r14d
jmp 0x1800028a6
sub eax, r14d
mov dword [rbp + 0x30], eax
mov eax, r15d
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002883
mov rcx, rbx
call fcn.1800021cc
cmp eax, 0x92d650a2
je 0x1800028e7
mov r9d, 0x80000003
mov r11d, 0x66666667
lea r10d, [r9 - 2]
cmp rsi, rbx
jne 0x180002609
mov r9, qword [rbx + 0x30]
mov eax, r15d
mov dword [rbp + 0x30], 0x5dc98b
mov ecx, dword [rbp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002939
mov ecx, dword [rbp + 0x30]
add ecx, edi
add ecx, r9d
mov dword [rbp + 0x30], ecx
mov ecx, 0x80000003
jmp 0x180002923
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0x30]
and eax, ecx
jge 0x180002933
sub eax, r14d
or eax, r12d
add eax, r14d
test eax, eax
je 0x18000291a
jmp 0x180002968
mov eax, dword [rbp + 0x30]
sub edi, r9d
mov eax, dword [rbp + 0x30]
add edi, eax
mov dword [rbp + 0x30], edi
jmp 0x180002952
mov eax, dword [rbp + 0x30]
add eax, r14d
mov dword [rbp + 0x30], eax
mov ecx, dword [rbp + 0x30]
mov eax, r15d
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x180002949
lea r11, [rsp + 0x40]
mov rax, r9
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret