Function at 0x1400028f0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], 0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x1f], 0x4d
mov byte [rbp - 0x1e], 0x63
mov byte [rbp - 0x1d], 0x58
mov byte [rbp - 0x1c], 0x63
mov byte [rbp - 0x1b], 0x1e
mov byte [rbp - 0x1a], 0x63
mov byte [rbp - 0x19], 0x7e
mov byte [rbp - 0x18], 0x63
mov byte [rbp - 0x17], 0x58
mov byte [rbp - 0x16], 0x63
mov byte [rbp - 0x15], 0x2f
mov byte [rbp - 0x14], 0x63
mov byte [rbp - 0x13], 0x12
mov byte [rbp - 0x12], 0x63
mov byte [rbp - 0x11], 0x2a
mov byte [rbp - 0x10], 0x63
mov byte [rbp - 0xf], 0xb
mov byte [rbp - 0xe], 0x63
mov byte [rbp - 0xd], 0x70
mov byte [rbp - 0xc], 0x63
mov byte [rbp - 0xb], 0x2f
mov byte [rbp - 0xa], 0x63
mov byte [rbp - 9], 0x2f
mov byte [rbp - 8], 0x63
mov byte [rbp - 7], 0x63
mov byte [rbp - 6], 0x63
movzx eax, byte [rbp - 0x1f]
call fcn.140003c80
mov rax, qword gs:[0x60]
mov esi, 2
mov r8, qword [rax + 0x18]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x23a747
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400029ff
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400029cd
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140002a50
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400029f9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1400029e0
jmp 0x140002a50
mov eax, dword [rbp + 0x10]
mov ecx, esi
mov eax, dword [rbp + 0x10]
sub ecx, r8d
add ecx, eax
mov eax, 0x55555556
mov dword [rbp + 0x10], ecx
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140002a50
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002a30
mov rdi, qword [r8 + 0x18]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x23a747
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002abf
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, edi
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002a8e
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140002b10
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002ab9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140002aa0
jmp 0x140002b10
mov eax, dword [rbp + 0x10]
mov ecx, esi
mov eax, dword [rbp + 0x10]
sub ecx, edi
add ecx, eax
mov eax, 0x55555556
mov dword [rbp + 0x10], ecx
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140002b10
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002af0
mov r8, qword [rdi + 0x10]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x23a747
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002b7f
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002b4f
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140002bd0
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002b79
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140002b60
jmp 0x140002bd0
mov eax, dword [rbp + 0x10]
mov ecx, esi
mov eax, dword [rbp + 0x10]
sub ecx, r8d
add ecx, eax
mov eax, 0x55555556
mov dword [rbp + 0x10], ecx
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140002bd0
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002bb0
mov rbx, rdi
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rbx]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x23a747
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002c4f
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, ebx
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002c1d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140002ca0
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002c49
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140002c30
jmp 0x140002ca0
mov eax, dword [rbp + 0x10]
mov ecx, esi
mov eax, dword [rbp + 0x10]
sub ecx, ebx
add ecx, eax
mov eax, 0x55555556
mov dword [rbp + 0x10], ecx
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140002ca0
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002c80
mov r8, qword [rbx + 0x30]
test r8, r8
je 0x140002d6f
mov dword [rbp + 0x10], 0x23a747
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002d0f
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002ce8
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140002d60
nop dword [rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002d09
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140002cf0
jmp 0x140002d60
mov eax, dword [rbp + 0x10]
mov ecx, esi
mov eax, dword [rbp + 0x10]
sub ecx, r8d
add ecx, eax
mov eax, 0x55555556
mov dword [rbp + 0x10], ecx
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140002d60
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002d40
mov rcx, rbx
call fcn.1400026b0
cmp eax, 0xb26771d8
je 0x140002d78
cmp rdi, rbx
jne 0x140002be0
mov r9, qword [rbx + 0x30]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x23a747
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002ddf
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r9d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002db7
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140002e30
nop dword [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140002dd9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140002dc0
jmp 0x140002e30
mov eax, dword [rbp + 0x10]
sub esi, r9d
mov eax, dword [rbp + 0x10]
add esi, eax
mov dword [rbp + 0x10], esi
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140002e30
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140002e10
mov rbx, qword [rsp + 0x58]
mov rax, r9
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret