Function at 0x140002ef0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], 0
mov byte [rbp - 0x1f], 0x69
mov byte [rbp - 0x1e], 0x16
mov byte [rbp - 0x1d], 0
mov byte [rbp - 0x1c], 0x16
mov byte [rbp - 0x1b], 0xb
mov byte [rbp - 0x1a], 0x16
mov byte [rbp - 0x19], 0x4c
mov byte [rbp - 0x18], 0x16
mov byte [rbp - 0x17], 0
mov byte [rbp - 0x16], 0x16
mov byte [rbp - 0x15], 0x2d
mov byte [rbp - 0x14], 0x16
mov byte [rbp - 0x13], 0x72
mov byte [rbp - 0x12], 0x16
mov byte [rbp - 0x11], 0x23
mov byte [rbp - 0x10], 0x16
mov byte [rbp - 0xf], 0x64
mov byte [rbp - 0xe], 0x16
mov byte [rbp - 0xd], 0x30
mov byte [rbp - 0xc], 0x16
mov byte [rbp - 0xb], 0x2d
mov byte [rbp - 0xa], 0x16
mov byte [rbp - 9], 0x2d
mov byte [rbp - 8], 0x16
mov byte [rbp - 7], 0x16
mov byte [rbp - 6], 0x16
movzx eax, byte [rbp - 0x1f]
movzx eax, byte [rbp - 0x20]
test al, al
jne 0x140002fe1
xor r8d, r8d
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x1f]
mov eax, 0x16
sub eax, ecx
imul ecx, eax, 0x2d
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x1f], cl
inc r8
cmp r8, 0x1a
jb 0x140002f90
mov rax, qword gs:[0x60]
mov esi, 2
mov r8, qword [rax + 0x18]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x1d88b2
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x14000305f
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x14000302e
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x1400030cb
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003059
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003040
jmp 0x1400030cb
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp + 0x10]
lea eax, [r8 + 3]
add ecx, esi
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003085
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1400030cb
nop dword [rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x1400030b1
dec eax
jmp 0x1400030b3
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x1400030c7
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x140003090
mov rdi, qword [r8 + 0x18]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x1d88b2
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x14000313f
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, edi
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003109
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x1400031ab
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003139
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003120
jmp 0x1400031ab
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp + 0x10]
lea eax, [rdi + 3]
add ecx, esi
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003164
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1400031ab
nop dword [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003191
dec eax
jmp 0x140003193
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x1400031a7
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x140003170
mov r8, qword [rdi + 0x10]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x1d88b2
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x14000321f
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400031ea
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x14000328b
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x140003219
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140003200
jmp 0x14000328b
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp + 0x10]
lea eax, [r8 + 3]
add ecx, esi
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003245
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14000328b
nop dword [rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003271
dec eax
jmp 0x140003273
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003287
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x140003250
mov rbx, rdi
nop
mov rbx, qword [rbx]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x1d88b2
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400032ff
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, ebx
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400032cd
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x14000336b
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400032f9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1400032e0
jmp 0x14000336b
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp + 0x10]
lea eax, [rbx + 3]
add ecx, esi
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003324
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14000336b
nop dword [rax + rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003351
dec eax
jmp 0x140003353
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003367
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x140003330
mov r8, qword [rbx + 0x30]
test r8, r8
je 0x14000345a
mov dword [rbp + 0x10], 0x1d88b2
mov eax, 0x55555556
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400033df
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r8d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400033b3
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x14000344b
nop dword [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400033d9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1400033c0
jmp 0x14000344b
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp + 0x10]
lea eax, [r8 + 3]
add ecx, esi
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003405
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14000344b
nop dword [rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003431
dec eax
jmp 0x140003433
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003447
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x140003410
mov rcx, rbx
call fcn.140002c90
cmp eax, 0xb26771d8
je 0x140003463
cmp rdi, rbx
jne 0x140003290
mov r9, qword [rbx + 0x30]
mov eax, 0x55555556
mov dword [rbp + 0x10], 0x1d88b2
mov ecx, dword [rbp + 0x10]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400034cf
mov ecx, dword [rbp + 0x10]
add ecx, esi
add ecx, r9d
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400034a2
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x14000353b
nop word [rax + rax]
mov eax, dword [rbp + 0x10]
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000003
jge 0x1400034c9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1400034b0
jmp 0x14000353b
mov eax, dword [rbp + 0x10]
mov eax, dword [rbp + 0x10]
mov ecx, dword [rbp + 0x10]
lea eax, [r9 + 3]
add ecx, esi
imul ecx, eax
mov dword [rbp + 0x10], ecx
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x1400034f5
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14000353b
nop dword [rax]
mov ecx, dword [rbp + 0x10]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rbp + 0x10]
je 0x140003521
dec eax
jmp 0x140003523
inc eax
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x10]
and eax, 0x80000001
jge 0x140003537
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x140003500
mov rbx, qword [rsp + 0x58]
mov rax, r9
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret