Function at 0x14013346c
Capabilities:
Access peb ldr_data

Disassembly:
or dword [rax], eax
add byte [rax], al
cmp dword [rbx + 0x10], r13d
je 0x140133940
cmp dword [rbx + 0x14], r13d
je 0x140133940
cmp byte [rbx], 0x2e
jne 0x1401327d7
cmp dword [rbx + 1], 0x63727372
jmp fcn.1401327d1
lea r9, [rbp + 0x120]
mov dword [rsp + 0x20], 2
jmp 0x1401333df
lea r11d, [rdx + 0x36b3]
div r11
mov rdi, rsi
xchg rdi, rcx
call fcn.140134c90
jmp 0x140133571
mov qword [rsp + 0x30], rsi
xchg r14, rsi
call r12
cmp eax, 0xc000008c
jne 0x140132f07
nop
jmp 0x14013300f
add ebx, 0xe7bb214e
popf
lea r13d, [rbx + 0xf95a]
cpuid
rol r11d, 0xd4
jne 0x140133378
je 0x140133378
dec rdi
syscall
jmp rcx
jmp 0x14013350d
jmp rax
lea r8, [rbp + 0x1a0]
mov edx, r14d
xchg rdi, rcx
jmp 0x140133231
mov dword [rbx + 0x24], eax
jmp 0x14013365b
xchg esp, eax
mov qword [rsp + 0x20], r12
xchg r12, rax
xchg r14, rsi
jmp 0x140133241
je 0x140133657
and eax, 0xffffffbf
mov r9d, 0x20
or eax, 0x20000020
mov dword [rbp + 0x20], r9d
jmp 0x1401333f1
popfq
jmp 0x1401333b2
js 0x140131b9f
jg 0x1401320d0
call rax
pause
sub r10d, 0x6557a2ff
jg 0x140131aa4
jmp rax
jmp 0x14013333a
test dil, dil
jne 0x140133940
mov eax, dword [rbx + 0x24]
test eax, eax
js 0x140133657
test al, 0x40
jmp 0x140133492
retf
mov r9d, dword [rbp + 0x20]
lea rax, [rbp + 0x20]
mov rcx, 0xffffffffffffffff
je 0x140133675
jne 0x140133675
call rcx
test r12d, 0x8d30b314
movabs r8, 0x1301fb00000169e9
jmp 0x1401337e3
add byte [rax], al
sti
add dword [rbx], edx
cmp r11, rdi
lea r12d, [rbp - 0x90d2]
call rax
inc r10
test ebp, 0xb3eea9ca
jb 0x140133678
rol ebp, 0xaa
cmp edx, 0x36417ece
ret 0x18
jge 0x14013270e
cmp rcx, rbx
lea ebp, [rbp - 0xd3eb]
xor r15d, 0x75ebf991
jmp rax
mov rax, qword [rax]
jmp 0x140133b74
lea r8, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x48]
call r12
cmp eax, 0xc0000096
jmp 0x140133972
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
jmp 0x1401338bf
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x14013387b
cmp r8d, 0x587a76eb
je 0x140133d72
test r9d, r9d
jne 0x1401339ed
jne 0x1401338f7
je 0x1401338f7
rcr r14d, 0xc1
pause
jmp rcx
jmp 0x1401337db
movzx eax, word [r15 + 6]
add rbx, 0x28
lea rax, [rax + rax*4]
jne 0x14013395e
je 0x14013395e
jmp rax
jmp 0x140133a57
jne 0x140133940
nop
jmp rcx
inc rcx
inc ecx
test dl, dl
je 0x1401338d8
je 0x1401339b0
jne 0x1401339b0
rcr r12d, 0x5f
bswap r9
ret
movabs rdi, 0x244dd2fffffec4e9
rol esi, 0x50
cmp r11d, 0x736ad570
test rdx, rdx
lea edx, [rcx - 0xac60]
test r13d, 0x115d77dd
div r15
ret 0x18
jmp 0x140133879
je 0x1401337db
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x5113dfaa
je 0x140133a05
jne 0x140133a05
jbe 0x140132d34
div rdi
movabs r15, 0x70f0490000030ee9
mov r15d, 0xf3f8a43b
bswap r11
test r10, rdi
ret
jmp 0x140133d18
ja 0x1401334ef
test r15d, 0x3a144836
nop
call rax
jne 0x140133abc
jmp 0x140133d2b
lea rax, [rax + 0x21]
lea rax, [r15 + rax*8]
cmp rbx, rax
jb 0x140132dd7
lea rdi, [0x140000000]
mov r9d, dword [rbp + 0xcc]
jmp 0x140133d42
add byte [rax], al
mov ecx, dword [rax]
test ecx, ecx
je 0x140134774
cmp dword [rax + 4], r13d
je 0x140134774
jmp 0x140133ba8
rcr r15d, 0x16
jbe 0x140133cc9
rcl r14d, 0x55
add r12d, 0xa49a972
jb 0x1401341d3
and ebp, 0x18f6839f
neg r13
push rdx
pushfq
popfq
neg r15
call rax
movabs r15, 0x2d4ab6000001d5e9
popfq
jmp rax
movabs r10, 0x1080fffffffd39e9
lea r15d, [rdx + 0x9648]
xchg esi, eax
add byte [rax], al
pop rsi
cmp r9d, 0xfbf60c53
call rcx
call fcn.140132dc4
xor eax, 0x49000000
cmp ebx, edx
cmp rbx, r10
je 0x1401337db
mov r9d, dword [rbx + 0x18]
test r9d, r9d
jmp 0x1401339d8
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
jmp 0x140133b57
loopne 0x140133b53
invalid
mov rax, qword gs:[0x60]
lea r14, [rdi + rcx]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
jne 0x140133bf3
je 0x140133bf3
ror r13d, 0x1b
rol r8d, 0xa5
movsd dword [rdi], dword [rsi]
lea esi, [rdi - 0x7bc0]
test rcx, rdx
ror r12d, 0x3b
test r8, rbx
pop rbp
lea r9d, [rbx + 0xb02b]
div r10
lea r12d, [rbx + 0x81de]
call rcx
movabs r14, 0x695b62ffffff74e9
rcr ebp, 0x59
and ebx, 0xc82abca0
jb 0x140134290
jmp 0x140133b6c
rcr esi, 0xd3
popfq
ror r10d, 0xa7
lea ebx, [rbp - 0x9ec3]
call fcn.140133b99
and ecx, 0xecdf219b
ror r15d, 0x9a
inc rbx
and r8d, 0x5730ace4
sub ebp, 0xdb612992
rcr edi, 0xbc
jne 0x140133c67
je 0x140133c67
cmp r11, rcx
lea r8d, [rcx - 0xb90]
test r12, rbx
jno 0x1401349c7
je 0x14013356c
rol r15d, 0xbf
push r14
syscall
sub ecx, 0x40c32a4e
movabs rsi, 0x1e24cafffffdd4e9
popf
bswap r11
jmp 0x140133a40
add ah, cl
jns 0x140133997
push r13
jmp 0x1401337be
ror ecx, 0x71
rol r8d, 4
and r8d, 0xae7d31cd
ret
lea r15d, [rcx + 0x490a]
or ebx, 0x89207a12
lea r13d, [rbp - 0x1403]
lea edi, [rbp - 0x15c4]
jle 0x140133b20
jmp 0x140133cd8
lea rdx, [r10 + r9*4]
mov ecx, dword [rdx + r11]
add rcx, r10
movzx edx, byte [rcx]
jmp 0x140133996
lea ecx, [rdx - 0xb34c]
ror r14d, 0x53
cmp rdx, rcx
test r10, rdx
popf
jmp 0x140133cf3
lea rax, [rbp + 0xcc]
lea r8, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0xe0]
mov rcx, 0xffffffffffffffff
call r12
lea rax, [0x140134f30]
jmp 0x140133a90
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
jne 0x140133d9e
invalid
je 0x140133d9e
jl 0x140133bcc
jg 0x140133d0d
test edi, 0x568364ba
rcr esi, 0xd3
push r8
and r9d, 0x497057d7
movabs r12, 0x7c81270000018de9
neg rsi
div r13
ret 0x10
jmp 0x140133f30
add rdi, r10
xchg r15, rdi
mov qword [rsp + 0x30], r15
xchg rdi, r15
mov rax, qword [rax + 0x10]
nop dword [rax]
jmp 0x140133e5b
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140133e4a
je 0x140133e0c
jne 0x140133e0c
or edx, 0xc5d7a42c
jle 0x140134cfa
mul rdi
mov edx, 0x37facea9
jl 0x140134a33
cli
invalid
test rsi, rdi
sub r12d, 0xc744a788
test rcx, rdi
movabs r9, 0x4078897c18da6eeb
mov edx, 0x9e8e38af
lea r11d, [rbx - 0x475b]
pushfq
jmp 0x140134014
jmp 0x140133e7c
je 0x140133e53
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140133e53
jmp 0x140133e92
cmp edx, 0xe50e0eb2
je 0x140133f4a
test r9d, r9d
jne 0x140133ea1
mov rax, qword [rax]
jmp 0x140133f2b
xchg rsi, r10
mov rsi, qword [rax + 0x30]
xchg rsi, r10
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
jmp 0x140133e26
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
jmp 0x140133f19
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x4e119c5a
jne 0x140133efa
je 0x140133efa
lea ebp, [rbp + 0xabc5]
sub r15d, 0x7fcb5335
dec rbx
rcr edi, 0x1b
lea esi, [rdx - 0x1409]
sub edi, 0x6594b6fb
mul r9
call rax
call 0x140134296
lea r8d, [rdx + 0x92d3]
lea r11d, [rdx + 0x190b]
add byte [rax], al
syscall
test r15, rbx
lea r15d, [rdi - 0xe04]
movabs r13, 0x7af5f9fffffecee9
pause
lea r9d, [rdx + 0x3d7e]
lea edi, [rcx - 0x56a1]
mul r8
call 0x140133b5c
jmp 0x140133dcd
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140133e7e
jmp 0x140133e3e
jmp 0x140133e5b
movzx edx, word [rax + r9*2]
mov rax, qword gs:[0x60]
mov edi, dword [rcx + rdx*4]
mov rax, qword [rax + 0x18]
jmp 0x140133daf
mov ecx, dword [rbx + 0x24]
mov rdx, r13
add rcx, r10
mov dword [rsp + 0x58], 0xf6f6f6f6
jmp 0x14013407d
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov ecx, r8d
lea rdx, [r9 + rcx*4]
mov ecx, dword [rdx + r11]
je 0x140133fc2
jne 0x140133fc2
jp 0x140133b90
popf
call rcx
or r10d, 0xd9e0bed3
jmp rcx
jmp 0x14013419b
mov rcx, rax
xchg rcx, r9
mov r8d, r13d
movsxd rcx, dword [rax + 0x3c]
je 0x14013402c
jne 0x14013402c
call rax
jg 0x1401339ae
test r11d, 0x625422ca
jmp rax
add byte [rcx + 0x2f395ac7], al
cmp cl, byte [rbp - 0xc2ed4d]
dec dword [rax + 0x39]
out dx, al
jmp rax
jmp 0x140133f60
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x58]
movzx ecx, byte [rsp + rdx + 0x63]
add cl, al
mov byte [rsp + rdx + 0x63], cl
mov byte [rsp + rdx + 0x58], r13b
inc rdx
jmp 0x140134161
mov dword [rsp + 0x63], 0x7c6f7d7f
mov dword [rsp + 0x5c], 0xf6f6f6f6
mov dword [rsp + 0x67], 0x6e383c3d
je 0x1401340d9
jne 0x1401340d9
jns 0x1401349dd
or edx, 0xc0255521
call rcx
bswap r15
lea ecx, [rdi - 0xf12e]
test r13d, 0xd37e9dd7
call rcx
call rax
jnp 0x1401346b2
pushf
sub ebx, 0xd3d13df9
sub r13d, 0xff6495fe
xor r8d, 0x33376c41
movabs rdi, 0x33d02e6e547524eb
jmp rcx
jmp 0x1401340ff
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov word [rsp + 0x60], 0xf6f6
je 0x140134151
jne 0x140134151
jmp rax
invalid
jmp 0x140134182
cmp rdx, 0xa
jb 0x140134060
xor edx, edx
lea rcx, [rsp + 0x63]
mov r8d, 0x800
call rdi
xchg r9, rcx
jmp 0x140133fd6
mov word [rsp + 0x6b], 0x7676
mov r15d, dword [rcx + r8*4]
add r15, r10
xor eax, eax
mov byte [rsp + 0x6d], al
jmp 0x140134059
mov edx, 0x4f22e70e
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
jmp 0x1401341d3
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401341dc
cmp edx, 0xa029da11
je 0x140134221
jmp 0x140134219
je 0x140134219
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
jne 0x140134207
je 0x140134207
int3
jmp 0x1401341b0
inc r8d
jmp 0x140133f79
mov ecx, dword [r10 + r9 + 0x24]
mov rax, r13
add rcx, r9
mov edx, r8d
jmp 0x140134285
inc rax
cmp rax, 0xa
jb 0x1401342a3
cmp dword [r14 + 0xc], r13d
je 0x140134c1a
jmp 0x1401343b4
add rax, 0x545db543
add rax, rdx
movzx edx, dx
test rcx, rcx
xchg rdi, rsi
mov rcx, rdi
xchg rsi, rdi
jmp 0x140134358
xchg r8, r13
jmp 0x140134424
xchg rbp, rcx
nop
nop
sub rax, 0x545db541
jmp 0x140134250
movzx r8d, word [rcx + rdx*2]
mov ecx, dword [r10 + r9 + 0x1c]
add rcx, r9
add ecx, ecx
mov r12d, dword [rcx + r8*4]
add r12, r9
nop word [rax + rax]
mov byte [rsp + rax + 0x63], r13b
jne 0x1401342c1
je 0x1401342c1
call rax
sub r12d, 0x26ab6ef3
call rcx
jmp rcx
jmp 0x140134234
mov rcx, qword [rbx]
test rcx, rcx
je 0x140134455
xchg rcx, rbp
mov rdx, rbp
je 0x140134333
jne 0x140134333
rcl r11d, 0x12
call rax
rol r10d, 0x27
test edi, 0xea26dc8f
pushfq
jns 0x140133608
cmp r8d, 0xdf499773
add r13d, 0x69ce472d
cmp r14d, 0x2d139bac
rcl r9d, 0xbf
cmp r11, rbx
lea r9d, [rbp - 0x146a]
movabs rbx, 0x709635ffffff3de9
rcl ecx, 0x75
jo 0x140133df5
jmp 0x140134275
xor ecx, 0x720f7d72
call rax
lea r10d, [rbx + 0x7815]
jmp 0x140133d7f
cmovns rdx, rax
call r15
xchg r10, rax
mov r8, r10
xchg r10, rax
jmp 0x1401343fb
test rax, rax
je 0x140134837
mov ecx, dword [r14]
test ecx, ecx
jne 0x1401343a0
mov ecx, dword [r14 + 0x10]
je 0x14013438d
jne 0x14013438d
call rax
int3
jmp 0x1401343a0
mov ebx, ecx
lea rax, [0x140000000]
add rbx, rax
mov edi, r13d
jmp 0x1401342e1
lea rax, [0x140000000]
nop
mov ecx, dword [r14 + 0xc]
xor r8d, r8d
add rcx, rax
jmp 0x1401343e9
je 0x14013440f
mov edx, edi
add rdx, rax
lea rax, [0x140000000]
xchg r8, r13
mov qword [rdx + rax], r13
jmp 0x14013426d
xor edx, edx
call rdi
xchg rsi, rdi
mov rdi, rax
xchg rsi, rdi
jmp 0x14013436b
test rax, rax
je 0x14013447d
mov eax, dword [r14 + 0x10]
test eax, eax
jmp 0x1401343cb
mov rax, qword [rbx]
lea rcx, [0x140000000]
mov qword [rcx + rax], r8
lea rax, [0x140000000]
xchg rcx, r15
jmp 0x14013442c
mov r15, qword [rbx + 8]
xchg r15, rcx
sub rbx, 0xfffffffffffffff8
nop
add edi, 0x6e3159cb
sub edi, 0x6e3159c3
mov rdx, rcx
jmp 0x14013444c
test rcx, rcx
jne 0x140134279
nop
sub r14, 0x617f18c5
jmp 0x140134462
add r14, 0x617f18d9
cmp dword [r14 + 0xc], r13d
je 0x140134c1a
mov rdi, qword [rsp + 0x30]
jmp 0x1401343bc
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg rsi, rdx
mov rsi, r13
xchg rdx, rsi
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
jmp 0x1401345da
inc rdx
cmp rdx, 0x53
jb 0x140134796
mov r9d, 0x10
lea r8, [rsp + 0x36]
jmp 0x1401347b0
mov dword [rbp - 0x14], 0x6f7c7f7d
mov dword [rbp - 0x64], 0xf6f6f6f6
mov dword [rbp - 0x10], 0x6f727e2a
mov dword [rbp - 0x60], 0xf6f6f6f6
mov dword [rbp - 0xc], 0x7d73602a
jne 0x140134514
je 0x140134514
sub r13d, 0x89c4a77c
and r15d, 0xe42410e4
rol r12d, 0x7b
lea ebp, [rcx - 0x8dbe]
rcl ebp, 0x14
div rbx
lea edi, [rdi - 0x9fa]
jmp rcx
jmp 0x140134583
mov dword [rbp], 0x736e6f5c
mov dword [rbp - 0x50], 0xf6f6f6f6
mov dword [rbp + 4], 0x737c7e7d
jmp 0x140134738
mov dword [rbp - 0x2c], 0x78732a79
mov dword [rbp - 0x7c], 0xf6f6f6f6
mov dword [rbp - 0x28], 0x6b737e73
mov dword [rbp - 0x78], 0xf6f6f6f6
mov dword [rbp - 0x24], 0x6f847376
mov dword [rbp - 0x74], 0xf6f6f6f6
jmp 0x1401345ab
mov dword [rbp - 0x5c], 0xf6f6f6f6
mov dword [rbp - 8], 0x2a766b7f
mov dword [rbp - 0x58], 0xf6f6f6f6
mov dword [rbp - 4], 0x2a35354d
mov dword [rbp - 0x54], 0xf6f6f6f6
jmp 0x14013453a
mov dword [rbp - 0x20], 0x55572a44
mov dword [rbp - 0x70], 0xf6f6f6f6
mov dword [rbp - 0x1c], 0x57143c4c
mov dword [rbp - 0x6c], 0xf6f6f6f6
mov dword [rbp - 0x18], 0x2a6f756b
mov dword [rbp - 0x68], 0xf6f6f6f6
jmp 0x1401344bd
mov word [rsp + 0x3a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
jmp 0x1401345f3
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
mov byte [rsp + rdx + 0x36], cl
invalid
invalid
insb byte [rdi], dx
invalid