Function at 0x2b3695d40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x108
movq xmm0, qword [str.GetFileSFH_CHA]
mov r12, rcx
mov rsi, rdx
mov dword [rsp + 0xd0], 0xc
mov edi, dword [rsp + 0xd0]
mov r10d, dword [rsp + 0xd0]
mov r11d, dword [rsp + 0xd0]
mov byte [rsp + 0x7b], 0
lea r14, [rsp + 0xd0]
mov ebx, dword [rsp + 0xd0]
mov ebp, dword [rsp + 0xd0]
mov r13d, dword [rsp + 0xd0]
add r11d, 2
add r10d, 1
mov r9d, dword [rsp + 0xd0]
add ebp, 4
add ebx, 3
movzx r11d, r11b
movzx r10d, r10b
mov eax, dword [rsp + 0xd0]
add r9d, 6
add r13d, 5
movzx ebx, bl
movzx r9d, r9b
mov r8d, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd0]
add eax, 7
mov edx, dword [rsp + 0xd0]
movzx eax, al
shl rax, 8
or rax, r9
movzx r9d, r13b
lea r13, [rsp + 0xe4]
shl rax, 8
or rax, r9
movzx r9d, bpl
shl rax, 8
or rax, r9
movzx r9d, dil
shl rax, 8
or rax, rbx
xor ebx, ebx
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
movq xmm1, rax
lea eax, [r8 + 8]
xor eax, 0x69
pxor xmm1, xmm0
mov bl, al
lea eax, [rcx + 9]
movq qword [rsp + 0xd4], xmm1
mov rcx, r13
xor eax, 0x7a
movq qword [rsp + 0x70], xmm1
mov bh, al
lea eax, [rdx + 0xa]
xor eax, 0x65
mov word [rsp + 0x78], bx
mov byte [rsp + 0x7a], al
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0xdc], eax
movzx eax, byte [rsp + 0xd4]
mov edx, dword [rsp + 0xd0]
xor eax, edx
mov byte [rsp + 0xd4], al
movzx edx, byte [rsp + 0xd5]
mov eax, dword [rsp + 0xd0]
add eax, 1
xor eax, edx
mov byte [rsp + 0xd5], al
movzx edx, byte [rsp + 0xd6]
mov eax, dword [rsp + 0xd0]
add eax, 2
xor eax, edx
mov byte [rsp + 0xd6], al
movzx edx, byte [rsp + 0xd7]
mov eax, dword [rsp + 0xd0]
add eax, 3
xor eax, edx
mov byte [rsp + 0xd7], al
movzx edx, byte [rsp + 0xd8]
mov eax, dword [rsp + 0xd0]
mov byte [rsp + 0xcc], 0
mov dword [rsp + 0xc8], 0x41414903
add eax, 4
xor eax, edx
mov byte [rsp + 0xd8], al
movzx edx, byte [rsp + 0xd9]
mov eax, dword [rsp + 0xd0]
add eax, 5
xor eax, edx
mov byte [rsp + 0xd9], al
movzx edx, byte [rsp + 0xda]
mov eax, dword [rsp + 0xd0]
add eax, 6
xor eax, edx
mov byte [rsp + 0xda], al
movzx edx, byte [rsp + 0xdb]
mov eax, dword [rsp + 0xd0]
add eax, 7
xor eax, edx
mov byte [rsp + 0xdb], al
movzx edx, byte [rsp + 0xdc]
mov eax, dword [rsp + 0xd0]
add eax, 8
xor eax, edx
mov byte [rsp + 0xdc], al
movzx edx, byte [rsp + 0xdd]
mov eax, dword [rsp + 0xd0]
add eax, 9
xor eax, edx
mov byte [rsp + 0xdd], al
movzx edx, byte [rsp + 0xde]
mov eax, dword [rsp + 0xd0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0xde], al
mov rax, qword [0x2b3759ac0]
mov byte [rsp + 0xdf], 0
mov qword [rsp + 0xc0], rax
movabs rax, 0x1f1e4148435f4846
mov dword [rsp + 0xe0], 0x2d
mov qword [rsp + 0xe4], rax
mov dword [rsp + 0xec], 0x41414903
mov byte [rsp + 0xf0], 0
movzx eax, byte [rsp + 0xe4]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe4], al
movzx eax, byte [rsp + 0xe5]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe5], al
movzx eax, byte [rsp + 0xe6]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe6], al
movzx eax, byte [rsp + 0xe7]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe7], al
movzx eax, byte [rsp + 0xe8]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe8], al
movzx eax, byte [rsp + 0xe9]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe9], al
movzx eax, byte [rsp + 0xea]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xea], al
movzx eax, byte [rsp + 0xeb]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xeb], al
movzx eax, byte [rsp + 0xec]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xec], al
movzx eax, byte [rsp + 0xed]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xed], al
movzx eax, byte [rsp + 0xee]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xee], al
movzx eax, byte [rsp + 0xef]
mov edx, dword [rsp + 0xe0]
xor eax, edx
lea rdx, [rsp + 0xd4]
mov byte [rsp + 0xef], al
mov byte [rsp + 0xf0], 0
call fcn.2b3657510
xor edx, edx
mov rcx, r12
call rax
mov byte [rsp + 0xbc], 0
mov dword [rsp + 0xb8], 0x67737070
mov ebx, eax
mov rax, qword [str.ZmvxyepEkernel32ReadFiletnwnu__GhkwaLejnhuqho65PathAppe]
mov qword [rsp + 0xb0], rax
movabs rax, 0x4570657978766d5a
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], 0x67737070
mov byte [rsp + 0xdc], 0
movzx eax, byte [rsp + 0xd0]
sub eax, 4
mov byte [rsp + 0xd0], al
movzx eax, byte [rsp + 0xd1]
sub eax, 4
mov byte [rsp + 0xd1], al
movzx eax, byte [rsp + 0xd2]
sub eax, 4
mov byte [rsp + 0xd2], al
movzx eax, byte [rsp + 0xd3]
sub eax, 4
mov byte [rsp + 0xd3], al
movzx eax, byte [rsp + 0xd4]
sub eax, 4
mov byte [rsp + 0xd4], al
movzx eax, byte [rsp + 0xd5]
sub eax, 4
mov byte [rsp + 0xd5], al
movzx eax, byte [rsp + 0xd6]
sub eax, 4
mov byte [rsp + 0xd6], al
movzx eax, byte [rsp + 0xd7]
sub eax, 4
mov byte [rsp + 0xd7], al
movzx eax, byte [rsp + 0xd8]
sub eax, 4
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0xd9]
sub eax, 4
mov byte [rsp + 0xd9], al
movzx eax, byte [rsp + 0xda]
sub eax, 4
mov byte [rsp + 0xda], al
movzx eax, byte [rsp + 0xdb]
sub eax, 4
mov byte [rsp + 0xdb], al
mov dword [rsp + 0xe0], 0x62
mov byte [rsp + 0xac], 0
mov r15d, dword [rsp + 0xe0]
mov r9d, dword [rsp + 0xe0]
mov r10d, dword [rsp + 0xe0]
mov r8d, dword [rsp + 0xe0]
movzx r15d, r15b
mov r11d, dword [rsp + 0xe0]
mov edi, dword [rsp + 0xe0]
mov ebp, dword [rsp + 0xe0]
add r10d, 2
add r9d, 1
add r11d, 4
add r8d, 3
movzx r10d, r10b
movzx r9d, r9b
add ebp, 6
add edi, 5
movzx r11d, r11b
movzx r8d, r8b
mov eax, dword [rsp + 0xe0]
movzx ebp, bpl
movzx edi, dil
mov ecx, dword [rsp + 0xe0]
movq xmm0, qword [0x2b3759ad0]
mov edx, dword [rsp + 0xe0]
add eax, 7
add ecx, 8
movzx eax, al
mov dword [rsp + 0x38], edx
mov edx, dword [rsp + 0xe0]
shl rax, 8
or rax, rbp
mov dword [rsp + 0x3c], edx
mov edx, dword [rsp + 0xe0]
shl rax, 8
or rax, rdi
movzx edi, byte [rsp + 0x38]
shl rax, 8
or rax, r11
shl rax, 8
or rax, r8
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r15
movq xmm2, rax
xor eax, eax
xor ecx, 0x2e
add edx, 0xb
mov al, cl
lea ecx, [rdi + 9]
movzx edi, byte [rsp + 0x3c]
xor edx, 0x6c
xor ecx, 0x64
shl edx, 0x18
pxor xmm2, xmm0
movq qword [rsp + 0xe4], xmm2
mov ah, cl
lea ecx, [rdi + 0xa]
movq qword [rsp + 0xa0], xmm2
xor ecx, 0x6c
movzx eax, ax
movzx ecx, cl
shl ecx, 0x10
or eax, ecx
mov rcx, r13
or eax, edx
mov dword [rsp + 0xec], eax
mov dword [rsp + 0xa8], eax
mov byte [rsp + 0xf0], 0
movzx eax, byte [rsp + 0xe4]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe4], al
movzx edx, byte [rsp + 0xe5]
mov eax, dword [rsp + 0xe0]
add eax, 1
xor eax, edx
mov byte [rsp + 0xe5], al
movzx edx, byte [rsp + 0xe6]
mov eax, dword [rsp + 0xe0]
add eax, 2
xor eax, edx
mov byte [rsp + 0xe6], al
movzx edx, byte [rsp + 0xe7]
mov eax, dword [rsp + 0xe0]
add eax, 3
xor eax, edx
mov byte [rsp + 0xe7], al
movzx edx, byte [rsp + 0xe8]
mov eax, dword [rsp + 0xe0]
add eax, 4
xor eax, edx
mov byte [rsp + 0xe8], al
movzx edx, byte [rsp + 0xe9]
mov eax, dword [rsp + 0xe0]
add eax, 5
xor eax, edx
mov byte [rsp + 0xe9], al
movzx edx, byte [rsp + 0xea]
mov eax, dword [rsp + 0xe0]
add eax, 6
xor eax, edx
mov byte [rsp + 0xea], al
movzx edx, byte [rsp + 0xeb]
mov eax, dword [rsp + 0xe0]
add eax, 7
xor eax, edx
mov byte [rsp + 0xeb], al
movzx edx, byte [rsp + 0xec]
mov eax, dword [rsp + 0xe0]
add eax, 8
xor eax, edx
mov byte [rsp + 0xec], al
movzx edx, byte [rsp + 0xed]
mov eax, dword [rsp + 0xe0]
add eax, 9
xor eax, edx
mov byte [rsp + 0xed], al
movzx edx, byte [rsp + 0xee]
mov eax, dword [rsp + 0xe0]
add eax, 0xa
xor eax, edx
mov byte [rsp + 0xee], al
movzx edx, byte [rsp + 0xef]
mov eax, dword [rsp + 0xe0]
add eax, 0xb
xor eax, edx
mov rdx, r14
mov byte [rsp + 0xef], al
mov byte [rsp + 0xf0], 0
call fcn.2b3657510
lea edx, [rbx + 1]
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x3000
call rax
mov byte [rsp + 0x58], 0
movq xmm0, qword [0x2b3759ad8]
mov dword [rsp + 0xe0], 0x44
mov r15, rax
mov edx, dword [rsp + 0xe0]
mov ecx, dword [rsp + 0xe0]
mov r8d, dword [rsp + 0xe0]
mov r9d, dword [rsp + 0xe0]
mov r10d, dword [rsp + 0xe0]
movzx edx, dl
mov r11d, dword [rsp + 0xe0]
add r8d, 2
add ecx, 1
mov edi, dword [rsp + 0xe0]
add r10d, 4
add r9d, 3
movzx r8d, r8b
movzx ecx, cl
add edi, 6
add r11d, 5
movzx r10d, r10b
movzx r9d, r9b
mov eax, dword [rsp + 0xe0]
movzx edi, dil
movzx r11d, r11b
add eax, 7
movzx eax, al
shl rax, 8
or rax, rdi
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rcx
mov rcx, r14
shl rax, 8
or rax, rdx
movq xmm3, rax
pxor xmm3, xmm0
movq qword [rsp + 0xe4], xmm3
mov byte [rsp + 0xec], 0
movzx eax, byte [rsp + 0xe4]
mov edx, dword [rsp + 0xe0]
movq qword [rsp + 0x50], xmm3
xor eax, edx
mov byte [rsp + 0xe4], al
movzx edx, byte [rsp + 0xe5]
mov eax, dword [rsp + 0xe0]
add eax, 1
xor eax, edx
mov byte [rsp + 0xe5], al
movzx edx, byte [rsp + 0xe6]
mov eax, dword [rsp + 0xe0]
add eax, 2
xor eax, edx
mov byte [rsp + 0xe6], al
movzx edx, byte [rsp + 0xe7]
mov eax, dword [rsp + 0xe0]
add eax, 3
xor eax, edx
mov byte [rsp + 0xe7], al
movzx edx, byte [rsp + 0xe8]
mov eax, dword [rsp + 0xe0]
add eax, 4
xor eax, edx
mov byte [rsp + 0xe8], al
movzx edx, byte [rsp + 0xe9]
mov eax, dword [rsp + 0xe0]
add eax, 5
xor eax, edx
mov byte [rsp + 0xe9], al
movzx edx, byte [rsp + 0xea]
mov eax, dword [rsp + 0xe0]
mov byte [rsp + 0x9c], 0
mov dword [rsp + 0x98], 0x75756d37
add eax, 6
xor eax, edx
mov byte [rsp + 0xea], al
movzx edx, byte [rsp + 0xeb]
mov eax, dword [rsp + 0xe0]
add eax, 7
xor eax, edx
mov rdx, r13
mov byte [rsp + 0xeb], al
mov rax, qword [0x2b3759ae0]
mov byte [rsp + 0xec], 0
mov qword [rsp + 0x90], rax
movabs rax, 0x3b3c756e777b6e74
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], 0x75756d37
mov byte [rsp + 0xdc], 0
movzx eax, byte [rsp + 0xd0]
sub eax, 9
mov byte [rsp + 0xd0], al
movzx eax, byte [rsp + 0xd1]
sub eax, 9
mov byte [rsp + 0xd1], al
movzx eax, byte [rsp + 0xd2]
sub eax, 9
mov byte [rsp + 0xd2], al
movzx eax, byte [rsp + 0xd3]
sub eax, 9
mov byte [rsp + 0xd3], al
movzx eax, byte [rsp + 0xd4]
sub eax, 9
mov byte [rsp + 0xd4], al
movzx eax, byte [rsp + 0xd5]
sub eax, 9
mov byte [rsp + 0xd5], al
movzx eax, byte [rsp + 0xd6]
sub eax, 9
mov byte [rsp + 0xd6], al
movzx eax, byte [rsp + 0xd7]
sub eax, 9
mov byte [rsp + 0xd7], al
movzx eax, byte [rsp + 0xd8]
sub eax, 9
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0xd9]
sub eax, 9
mov byte [rsp + 0xd9], al
movzx eax, byte [rsp + 0xda]
sub eax, 9
mov byte [rsp + 0xda], al
movzx eax, byte [rsp + 0xdb]
sub eax, 9
mov byte [rsp + 0xdb], al
call fcn.2b3657510
lea r9, [rsp + 0x4c]
mov r8d, ebx
mov rdx, r15
mov qword [rsp + 0x20], 0
mov rcx, r12
call rax
mov rax, qword [0x2b3759ae8]
mov dword [rsp + 0x68], 0x616860
mov rcx, r14
mov dword [rsp + 0xe0], 4
mov qword [rsp + 0x60], rax
movabs rax, 0x6a654c61776b6847
mov qword [rsp + 0xe4], rax
mov dword [rsp + 0xec], 0x616860
movzx eax, byte [rsp + 0xe4]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe4], al
movzx eax, byte [rsp + 0xe5]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe5], al
movzx eax, byte [rsp + 0xe6]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe6], al
movzx eax, byte [rsp + 0xe7]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe7], al
movzx eax, byte [rsp + 0xe8]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe8], al
movzx eax, byte [rsp + 0xe9]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xe9], al
movzx eax, byte [rsp + 0xea]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xea], al
movzx eax, byte [rsp + 0xeb]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xeb], al
movzx eax, byte [rsp + 0xec]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov byte [rsp + 0xec], al
movzx eax, byte [rsp + 0xed]
mov edx, dword [rsp + 0xe0]
mov byte [rsp + 0x8c], 0
mov dword [rsp + 0x88], 0x6f6f6731
xor eax, edx
mov byte [rsp + 0xed], al
movzx eax, byte [rsp + 0xee]
mov edx, dword [rsp + 0xe0]
xor eax, edx
mov rdx, r13
mov byte [rsp + 0xee], al
mov rax, qword [0x2b3759af0]
mov byte [rsp + 0xef], 0
mov qword [rsp + 0x80], rax
movabs rax, 0x35366f687175686e
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], 0x6f6f6731
mov byte [rsp + 0xdc], 0
movzx eax, byte [rsp + 0xd0]
sub eax, 3
mov byte [rsp + 0xd0], al
movzx eax, byte [rsp + 0xd1]
sub eax, 3
mov byte [rsp + 0xd1], al
movzx eax, byte [rsp + 0xd2]
sub eax, 3
mov byte [rsp + 0xd2], al
movzx eax, byte [rsp + 0xd3]
sub eax, 3
mov byte [rsp + 0xd3], al
movzx eax, byte [rsp + 0xd4]
sub eax, 3
mov byte [rsp + 0xd4], al
movzx eax, byte [rsp + 0xd5]
sub eax, 3
mov byte [rsp + 0xd5], al
movzx eax, byte [rsp + 0xd6]
sub eax, 3
mov byte [rsp + 0xd6], al
movzx eax, byte [rsp + 0xd7]
sub eax, 3
mov byte [rsp + 0xd7], al
movzx eax, byte [rsp + 0xd8]
sub eax, 3
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0xd9]
sub eax, 3
mov byte [rsp + 0xd9], al
movzx eax, byte [rsp + 0xda]
sub eax, 3
mov byte [rsp + 0xda], al
movzx eax, byte [rsp + 0xdb]
sub eax, 3
mov byte [rsp + 0xdb], al
call fcn.2b3657510
mov rcx, r12
call rax
mov eax, dword [rsp + 0x4c]
mov dword [rsi], eax
mov rax, r15
add rsp, 0x108
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret