Function at 0x2b36855c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rbx
sub rsp, 0xf8
movaps xmmword [rsp + 0xe0], xmm6
xor eax, eax
mov al, dl
mov edx, r8d
mov rbx, rcx
mov r8d, 8
mov ah, dl
lea rdx, [rcx + 0x10]
lea rcx, [rsp + 0x28]
mov word [rsp + 0x26], ax
lea r14, [rsp + 0xc0]
lea r12, [rsp + 0x26]
call fcn.2b3660140
movdqa xmm6, xmmword [0x2b374e4b0]
movabs rax, 0x4f646b6845736452
movabs rdx, 0x77447164736d686e
mov qword [rsp + 0xc0], rax
mov r13, qword [rbx + 8]
lea r15, [rsp + 0xa0]
mov qword [rsp + 0xc8], rdx
mov rcx, r15
mov rdx, r14
mov byte [rsp + 0xd0], 0
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x90], 0
add eax, 1
movaps xmmword [rsp + 0x80], xmm6
mov byte [rsp + 0xc0], al
movzx eax, byte [rsp + 0xc1]
add eax, 1
mov byte [rsp + 0xc1], al
movzx eax, byte [rsp + 0xc2]
add eax, 1
mov byte [rsp + 0xc2], al
movzx eax, byte [rsp + 0xc3]
add eax, 1
mov byte [rsp + 0xc3], al
movzx eax, byte [rsp + 0xc4]
add eax, 1
mov byte [rsp + 0xc4], al
movzx eax, byte [rsp + 0xc5]
add eax, 1
mov byte [rsp + 0xc5], al
movzx eax, byte [rsp + 0xc6]
add eax, 1
mov byte [rsp + 0xc6], al
movzx eax, byte [rsp + 0xc7]
add eax, 1
mov byte [rsp + 0xc7], al
movzx eax, byte [rsp + 0xc8]
add eax, 1
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc9]
add eax, 1
mov byte [rsp + 0xc9], al
movzx eax, byte [rsp + 0xca]
add eax, 1
mov byte [rsp + 0xca], al
movzx eax, byte [rsp + 0xcb]
add eax, 1
mov byte [rsp + 0xcb], al
movzx eax, byte [rsp + 0xcc]
add eax, 1
mov byte [rsp + 0xcc], al
movzx eax, byte [rsp + 0xcd]
mov rsi, qword [0x2b374e4c0]
mov dword [rsp + 0x38], 0x6c6c642e
add eax, 1
mov byte [rsp + 0x3c], 0
mov byte [rsp + 0xcd], al
movzx eax, byte [rsp + 0xce]
mov qword [rsp + 0x30], rsi
add eax, 1
mov byte [rsp + 0xce], al
movzx eax, byte [rsp + 0xcf]
add eax, 1
mov byte [rsp + 0xcf], al
movabs rax, 0x32336c656e72656b
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x6c6c642e
mov byte [rsp + 0xac], 0
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0xa1]
mov byte [rsp + 0xa1], al
movzx eax, byte [rsp + 0xa2]
mov byte [rsp + 0xa2], al
movzx eax, byte [rsp + 0xa3]
mov byte [rsp + 0xa3], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0xa5]
mov byte [rsp + 0xa5], al
movzx eax, byte [rsp + 0xa6]
mov byte [rsp + 0xa6], al
movzx eax, byte [rsp + 0xa7]
mov byte [rsp + 0xa7], al
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0xa9], al
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xab]
mov byte [rsp + 0xab], al
call fcn.2b3656120
xor r8d, r8d
xor edx, edx
mov r9d, 2
mov rcx, r13
call rax
test eax, eax
jne 0x2b36858b0
xor eax, eax
movaps xmm6, xmmword [rsp + 0xe0]
add rsp, 0xf8
pop rbx
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rbx + 8]
lea rdx, [rbx + 0x3c]
mov r8d, 0x20
call fcn.2b3685250
test al, al
je 0x2b368588c
mov rcx, qword [rbx + 8]
lea rdx, [rbx + 0x14]
mov r8d, 8
call fcn.2b3685250
test al, al
je 0x2b368588c
mov rcx, qword [rbx + 8]
mov r8d, 0xa
mov rdx, r12
call fcn.2b3685250
test al, al
je 0x2b368588c
mov r12, qword [rbx + 8]
mov byte [rsp + 0x4c], 0
mov rdx, r14
mov rcx, r15
mov rax, qword [0x2b374e4c8]
mov dword [rsp + 0x48], 0x656c6946
mov qword [rsp + 0x40], rax
movabs rax, 0x664f646e45746553
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0xc8], 0x656c6946
mov byte [rsp + 0xcc], 0
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0xc0], al
movzx eax, byte [rsp + 0xc1]
mov byte [rsp + 0xc1], al
movzx eax, byte [rsp + 0xc2]
mov byte [rsp + 0xc2], al
movzx eax, byte [rsp + 0xc3]
mov byte [rsp + 0xc3], al
movzx eax, byte [rsp + 0xc4]
mov byte [rsp + 0xc4], al
movzx eax, byte [rsp + 0xc5]
mov byte [rsp + 0xc5], al
movzx eax, byte [rsp + 0xc6]
mov byte [rsp + 0xc6], al
movzx eax, byte [rsp + 0xc7]
mov byte [rsp + 0xc7], al
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc9]
mov byte [rsp + 0xc9], al
movzx eax, byte [rsp + 0xca]
mov byte [rsp + 0xca], al
movzx eax, byte [rsp + 0xcb]
mov byte [rsp + 0xcb], al
mov rax, qword [0x2b374e4d0]
mov dword [rsp + 0x58], 0x66665e28
mov qword [rsp + 0x50], rax
movabs rax, 0x2c2d665f686c5f65
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x66665e28
mov byte [rsp + 0xac], 0
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x5c], 0
add eax, 6
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0xa1]
add eax, 6
mov byte [rsp + 0xa1], al
movzx eax, byte [rsp + 0xa2]
add eax, 6
mov byte [rsp + 0xa2], al
movzx eax, byte [rsp + 0xa3]
add eax, 6
mov byte [rsp + 0xa3], al
movzx eax, byte [rsp + 0xa4]
add eax, 6
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0xa5]
add eax, 6
mov byte [rsp + 0xa5], al
movzx eax, byte [rsp + 0xa6]
add eax, 6
mov byte [rsp + 0xa6], al
movzx eax, byte [rsp + 0xa7]
add eax, 6
mov byte [rsp + 0xa7], al
movzx eax, byte [rsp + 0xa8]
add eax, 6
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0xa9]
add eax, 6
mov byte [rsp + 0xa9], al
movzx eax, byte [rsp + 0xaa]
add eax, 6
mov byte [rsp + 0xaa], al
movzx eax, byte [rsp + 0xab]
add eax, 6
mov byte [rsp + 0xab], al
call fcn.2b3656120
mov rcx, r12
call rax
mov r12, qword [rbx + 8]
lea rcx, [rsp + 0x73]
mov rdx, r14
movaps xmmword [rsp + 0xc0], xmm6
mov byte [rsp + 0xd0], 0
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0xb0], 0
add eax, 1
movaps xmmword [rsp + 0xa0], xmm6
mov byte [rsp + 0xc0], al
movzx eax, byte [rsp + 0xc1]
add eax, 1
mov byte [rsp + 0xc1], al
movzx eax, byte [rsp + 0xc2]
add eax, 1
mov byte [rsp + 0xc2], al
movzx eax, byte [rsp + 0xc3]
add eax, 1
mov byte [rsp + 0xc3], al
movzx eax, byte [rsp + 0xc4]
add eax, 1
mov byte [rsp + 0xc4], al
movzx eax, byte [rsp + 0xc5]
add eax, 1
mov byte [rsp + 0xc5], al
movzx eax, byte [rsp + 0xc6]
add eax, 1
mov byte [rsp + 0xc6], al
movzx eax, byte [rsp + 0xc7]
add eax, 1
mov byte [rsp + 0xc7], al
movzx eax, byte [rsp + 0xc8]
add eax, 1
mov byte [rsp + 0xc8], al
movzx eax, byte [rsp + 0xc9]
add eax, 1
mov byte [rsp + 0xc9], al
movzx eax, byte [rsp + 0xca]
add eax, 1
mov byte [rsp + 0xca], al
movzx eax, byte [rsp + 0xcb]
add eax, 1
mov byte [rsp + 0xcb], al
movzx eax, byte [rsp + 0xcc]
add eax, 1
mov byte [rsp + 0xcc], al
movzx eax, byte [rsp + 0xcd]
add eax, 1
mov byte [rsp + 0xcd], al
movzx eax, byte [rsp + 0xce]
mov qword [rsp + 0x60], rsi
add eax, 1
mov dword [rsp + 0x68], 0x6c6c642e
mov byte [rsp + 0xce], al
movzx eax, byte [rsp + 0xcf]
mov byte [rsp + 0x6c], 0
add eax, 1
mov byte [rsp + 0xcf], al
mov qword [rsp + 0x73], rsi
mov dword [rsp + 0x7b], 0x6c6c642e
mov byte [rsp + 0x7f], 0
movzx eax, byte [rsp + 0x73]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x79]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x7a]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7b]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7c]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x7d]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x7e]
mov byte [rsp + 0x7e], al
call fcn.2b3656120
xor r9d, r9d
mov rcx, r12
xor r8d, r8d
xor edx, edx
call rax
test eax, eax
setne al
jmp 0x2b368588e