Function at 0x140028e50
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rax, qword [0x14007c040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
xor r13d, r13d
mov eax, dword [rcx + rax]
cmp dword [sym.Stunner.exe_int__bool___cdecl_system_check_void_::_2::_TSS0], eax
jle 0x140029332
lea rcx, [sym.Stunner.exe_int__bool___cdecl_system_check_void_::_2::_TSS0]
call fcn.14006fa34
cmp dword [sym.Stunner.exe_int__bool___cdecl_system_check_void_::_2::_TSS0], 0xffffffff
jne 0x140029332
mov dword [rbp - 0x29], 0x60c321c4
mov dword [rbp - 0x25], 0xba675f51
mov dword [rbp - 0x21], 0x58585861
mov dword [rbp - 0x1d], 0x5d52be51
mov dword [rbp - 0x19], 0x5c575357
mov dword [rbp - 0x15], 0x4d49464e
mov byte [rbp - 0x11], 0xfe
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
mov dword [rbp], eax
mov qword [rbp - 0x39], r13
mov rax, qword [rbp - 0x39]
movabs r9, 0x3d1609fec65dbebd
nop word [rax + rax]
mov rcx, qword [rbp - 0x39]
mov rax, qword [rbp - 0x39]
movzx edx, byte [rbp + rax - 0x29]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x2b
mov rax, qword [rbp - 0x39]
mov byte [rbp + rax - 0x29], r8b
mov rax, qword [rbp - 0x39]
inc rax
mov qword [rbp - 0x39], rax
mov rax, qword [rbp - 0x39]
cmp rax, 0x2d
jb 0x140028f10
mov dword [rbp + 7], 0x671c6d58
mov dword [rbp + 0xb], 0x63182366
mov word [rbp + 0xf], 0xf162
xor eax, eax
mov qword [rbp + 0x11], rax
mov dword [rbp + 0x19], eax
mov word [rbp + 0x1d], ax
mov byte [rbp + 0x1f], al
mov qword [rbp - 0x39], r13
mov rax, qword [rbp - 0x39]
movabs r9, 0xc703f59f4490a49f
nop dword [rax + rax]
mov rcx, qword [rbp - 0x39]
mov rax, qword [rbp - 0x39]
movzx edx, byte [rbp + rax + 7]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x59
mov rax, qword [rbp - 0x39]
mov byte [rbp + rax + 7], r8b
mov rax, qword [rbp - 0x39]
inc rax
mov qword [rbp - 0x39], rax
mov rax, qword [rbp - 0x39]
cmp rax, 0x19
jb 0x140028f90
mov r8, qword [0x14007d128]
test r8, r8
jne 0x140029180
mov r11d, r13d
mov r10d, 0x66415e56
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x14002905d
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0xf6aa52f3
cmp rcx, r8
je 0x140029054
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140029040
cmp edx, r11d
jne 0x140029160
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
shr r15, 0x20
mov edi, ecx
add rdi, r9
cmp rdi, r9
je 0x140029160
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x140029160
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r9
mov edx, 0xf6aa52f3
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400290d6
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1400290c0
cmp edx, r10d
je 0x1400290e2
test r8d, r8d
jne 0x1400290a0
jmp 0x140029160
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
cmp r8, rdi
jbe 0x140029179
lea rax, [rdi + r15]
cmp r8, rax
jae 0x140029179
mov r11d, 0xf6aa52f3
mov r10d, r11d
movzx eax, byte [r8]
cmp al, 0x2e
je 0x140029138
nop dword [rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
inc r8
movzx eax, byte [r8]
cmp al, 0x2e
jne 0x140029120
inc r8
movzx eax, byte [r8]
test al, al
je 0x14002915c
movsx eax, al
xor eax, r10d
imul r10d, eax, 0x1000193
lea r8, [r8 + 1]
movzx eax, byte [r8]
test al, al
jne 0x140029143
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140029176
cmp qword [rax + 0x30], 0
jne 0x140029010
mov r8, r13
mov qword [0x14007d128], r8
mov rbx, qword [0x14007d0a0]
test rbx, rbx
jne 0x14002930f
mov edi, r13d
mov r11d, 0x552b69cc
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r13, qword [rax]
mov r14, r13
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x1400291fc
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r9, [rcx + rax*2]
mov edx, 0xf5aa5160
cmp rcx, r9
je 0x1400291f4
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400291e0
cmp edx, edi
jne 0x1400292ec
mov r10, qword [r14 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r12, rcx
shr r12, 0x20
mov esi, ecx
add rsi, r10
cmp rsi, r10
je 0x1400292ec
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x1400292ec
mov r15d, dword [rsi + 0x20]
dec r9d
lea rax, [r10 + r9*4]
mov ecx, dword [rax + r15]
add rcx, r10
mov edx, 0xf5aa5160
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140029266
nop
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140029250
cmp edx, r11d
je 0x140029272
test r9d, r9d
jne 0x140029232
jmp 0x1400292ec
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, r10
cmp rbx, rsi
jbe 0x140029483
lea rax, [rsi + r12]
cmp rbx, rax
jae 0x140029483
mov edi, 0xf5aa5160
mov r11d, edi
movzx eax, byte [rbx]
cmp al, 0x2e
je 0x1400292c5
nop
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rbx
movzx eax, byte [rbx]
cmp al, 0x2e
jne 0x1400292b0
inc rbx
movzx eax, byte [rbx]
test al, al
je 0x1400292e8
nop
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
lea rbx, [rbx + 1]
movzx eax, byte [rbx]
test al, al
jne 0x1400292d0
mov r14, qword [r13]
mov rax, qword [r14]
mov r14, rax
cmp rax, r13
je 0x140029302
cmp qword [rax + 0x30], 0
jne 0x1400291b0
xor r13d, r13d
mov ebx, r13d
mov qword [0x14007d0a0], rbx
lea rcx, [rbp + 7]
call r8
mov rcx, rax
lea rdx, [rbp - 0x29]
call rbx
mov qword [sym.Stunner.exe_long_int____cdecl___unsigned_long_int__void____ptr64__unsigned_long_int__unsigned_long_int____ptr64____ptr64__bool___cdecl_system_check_void_::_2::NtQuerySystemInformation], rax
lea rcx, [sym.Stunner.exe_int__bool___cdecl_system_check_void_::_2::_TSS0]
call fcn.14006f9c8
mov qword [rbp + 0x27], 8
xor r9d, r9d
lea r8d, [r9 + 8]
lea rdx, [rbp + 0x27]
lea ecx, [r9 + 0x67]
call qword [sym.Stunner.exe_long_int____cdecl___unsigned_long_int__void____ptr64__unsigned_long_int__unsigned_long_int____ptr64____ptr64__bool___cdecl_system_check_void_::_2::NtQuerySystemInformation]
mov r11d, eax
call fcn.140003760
movsx r9d, al
call fcn.140003750
movsx ecx, al
imul r9d, ecx
call fcn.140003790
movsx r10d, al
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add eax, r10d
lea eax, [rax + r9*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [0x14007c0da]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [0x14007c0dc]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x39], xmm1
lea ecx, [r9 + r10]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rcx + r9*2]
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140029424
call fcn.140003770
movsx edx, al
movsx eax, byte [0x14007d2e0]
imul edx, eax
shl edx, 3
call fcn.1400037a0
movsx ecx, al
sub edx, ecx
call fcn.140003780
movsx ecx, al
add edx, ecx
movsx ecx, byte [0x14007c0dc]
add ecx, edx
jne 0x140029493
lea ecx, [r9 + r10]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rcx + r9*4]
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x14002948b
lea ecx, [r9 + r10]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rcx + r9*8]
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x39]
cvttsd2si eax, xmm0
jmp 0x14002948e
xor r13d, r13d
jmp 0x140029308
mov eax, dword [rbp - 0x39]
cmp r13d, eax
jge 0x1400294a4
test r11d, r11d
je 0x1400294a2
test byte [rbp + 0x2b], 1
je 0x1400294a2
mov al, 1
jmp 0x1400294a4
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14006f780
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret