Function at 0x1401307cb
Capabilities:
Access peb ldr_data

Disassembly:
invalid
xor al, 0x47
or byte [rdi - 0x68], dl
lahf
pushfq
jo 0x14012fbcd
invalid
sub eax, 0x48ffffec
mov ebx, 0xffff5ce9
push rbx
add byte [rcx], bl
call rcx
jmp 0x1401304af
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x140130373
test al, al
jne 0x14013035b
cmp edx, 0x221100a3
je 0x1401304e9
inc r8d
jmp 0x1401303a7
xchg r9, r15
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax]
mov r10d, r8d
mov edx, 0x397663b8
je 0x1401303e4
jne 0x1401303e4
call rax
cpuid
call rax
jns 0x140130e37
jae 0x140130b0b
and r9d, 0x31a32d7b
and ecx, 0x6b57d64a
js 0x14012fbc8
test r10, rbx
rol ebp, 0xd6
jmp rax
jmp 0x14013044f
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140130387
jmp 0x140130358
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
je 0x14013049d
jne 0x14013049d
int3
jmp 0x1401303fd
lodsd eax, dword [rsi]
push 0xffffffffffffffe8
jnp 0x1401304c1
add byte [rax], al
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
xchg r9, r15
mov r15, qword [rcx + 0x30]
je 0x1401304d1
jne 0x1401304d1
jbe 0x14012f7b9
movabs rcx, 0x48f22bfffffeb9e9
call 0x1401307cb
lea ecx, [rbp + 0xc163]
jmp 0x140130bc4
jmp 0x14013038f
mov ecx, dword [rbx + r9 + 0x24]
xor r8d, r8d
add rcx, r9
mov dword [rsp + 0x28], 4
xchg rsi, r9
mov qword [rsp + 0x3b0], r9
jmp 0x140130519
movzx eax, byte [rcx]
inc rcx
test al, al
jmp 0x1401305ab
xchg rsi, r9
mov dword [rsp + 0x20], 0x3000
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
jmp 0x140130536
mov r14d, dword [rcx + rdx*4]
lea rdx, [rsp + 0x48]
add r14, r9
xchg rsi, r13
je 0x14013054b
jne 0x14013054b
movabs r9, 0x4e3793f3797e7feb
ror esi, 0x2e
cmp rsi, rbx
or r8d, 0x384935b8
lea r10d, [rbp - 0xbd7b]
lea ecx, [rdi - 0xbf83]
rol r14d, 0xe
ret
jmp 0x1401305cc
test al, al
jne 0x1401305b4
cmp edx, 0x2db7b98b
je 0x140130665
inc r8d
jmp 0x1401305a6
xchg r14, rax
mov r14, qword [rcx + 0x10]
xchg r14, rax
mov rcx, qword [rax]
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
jmp 0x140130642
jmp 0x140130658
je 0x140130586
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x140130572
mov qword [rsp + 0x48], rsi
xchg r13, rsi
lea r9, [rbp + 0xd0]
mov qword [rbp + 0xd0], 0x1f400000
mov rcx, 0xffffffffffffffff
jmp 0x1401305f2
call rdi
cmp qword [rsp + 0x48], r13
je 0x14013334a
mov rax, qword gs:[0x60]
mov r8d, r13d
mov rcx, qword [rax + 0x18]
jmp 0x14013058e
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
je 0x14013062f
jne 0x14013062f
lea ebp, [rcx + 0x2de]
rcr r10d, 0x5d
movabs rdi, 0x753316fffffed8e9
add edi, 0x636622c0
shl byte [rdx], 0x66
invalid
ror r14d, 0x17
ret
jmp 0x14013050c
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop word [rax + rax]
mov r10d, r8d
mov edx, 0x96fe8b66
jmp 0x140130614
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
je 0x14013067f
jne 0x14013067f
movabs r9, 0x194f43723fd1deb
test rdx, rbx
test ebp, 0x294a26b0
jmp rcx
jmp 0x14013069e
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov esi, dword [rcx + rdx*4]
mov rcx, qword [rax + 0x18]
add rsi, r9
jmp 0x140130708
nop dword [rax + rax]
mov r10d, r8d
mov edx, 0xa7ed5d08
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
jmp 0x1401306d1
shr cl, 0x9f
invalid
shr rcx, 1
shr rcx, 4
shr rcx, 1
imul rcx, rcx, 0x64
sub r8, rcx
cmp r8, 0x4b
jb 0x140130ab7
jmp 0x140130ab4
shl rdx, 8
shl rdx, 3
shl rdx, 1
shl rdx, 1
or rax, rdx
jmp 0x140130c7a
je 0x140130ace
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140130ace
mov ebx, dword [rdi + 0x20]
nop dword [rax]
jmp 0x1401307b1
nop dword [rax + rax]
dec r9d
mov r8d, 0xec9b28f8
lea rcx, [rbx + r9*4]
je 0x140130811
jne 0x140130811
lea ebx, [rbp - 0x2711]
cmp r8, rbx
pop r9
popfq
test rbx, rdi
xor r11d, 0xbb9e34fb
jae 0x140130b17
ja 0x140130c9d
xor r9d, 0xca381c5c
popfq
rcr r10d, 0xad
test r14d, 0x57743424
div r14
add ebx, 0xe9ea2d9b
lea r13d, [rdi - 0x5ea8]
movabs rdi, 0x58ce9400000376e9
or r9d, 0x1916d11
call 0x140130620
jmp 0x140130b8c
xchg r11, rax
mov r11, rax
xchg r11, rax
mul r8
jmp 0x1401308ab
mov qword [rbp + 0xe8], 0x30
mov r9d, 0x64
xchg r13, r14
mov qword [rbp + 0x100], r14
xchg r14, r13
mov r8d, r9d
mov qword [rbp + 0xf0], r13
jmp 0x140130c99
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rcx, qword [rsp + 0x30]
je 0x140130897
jne 0x140130897
cmp rsi, rdx
rol ebx, 0xbc
sub esi, 0x442f658d
ror r12d, 0xfa
pushfq
jmp 0x14012f948
jmp 0x140130a09
xchg rcx, r8
mov r8, rcx
xchg rcx, r8
jmp 0x140130c6c
xchg rcx, rax
mov qword [rsp + 0x20], rcx
xchg rcx, rax
lea r8, [rbp + 0xd0]
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x48]
call r14
jmp 0x140130861
mov r9, qword [rsp + 0x48]
xchg r10, r9
xchg r12, rbx
mov r12, r13
xchg rbx, r12
jne 0x14013090c
je 0x14013090c
lea r13d, [rdi - 0xb31d]
pushf
rcl edi, 0x74
jge 0x140131244
test ecx, 0x398eab2e
movabs rdx, 0x1ce96500000115e9
int3
jmp 0x140130a26
shl rdx, 9
shl rdx, 0xb
shl rdx, 2
jne 0x140130959
je 0x140130959
sub r11d, 0xa0315b9d
and ebp, 0xb967f22f
rcr r8d, 0x54
pushfq
jmp rcx
jmp 0x140130ad6
je 0x140130ab4
rdtsc
shl rdx, 7
jne 0x1401309bd
je 0x1401309bd
rcl r8d, 0xa8
jmp rax
add byte [rcx - 0x25d4631], al
invalid
jmp 0x14013091d
add rcx, qword [rbp + 0xd0]
cmp r10, rcx
jb 0x140130a58
lea rax, [rbp + 0x20]
mov dword [rbp + 0x20], r13d
mov r9d, 0x20
jmp 0x1401308b9
call rdi
test eax, eax
jne 0x14013334a
mov r9d, 0x8000
mov qword [rsp + 0x3a8], r12
jmp 0x140130b9e
xchg r8, rcx
mov r8, qword [rbp + 0xd0]
xchg r8, rcx
add rcx, r10
jmp 0x140130a3b
cmp r10, rcx
jae 0x1401309f6
movabs r11, 0x47ae147ae147ae15
nop word [rax + rax]
rdtsc
shl rdx, 0x13
jne 0x140130a78
je 0x140130a78
ror esi, 0x6f
cpuid
lea ebp, [rcx - 0x8d38]
and r9d, 0xe61ac82c
popf
movabs rdx, 0x6e8231fffffcffe9
popfq
ror ebx, 0xa
test r12, rdi
jmp 0x1401313be
jmp 0x14013077c
mov qword [rsp + 0x30], r13
call rsi
test eax, eax
jne 0x14013334a
add byte [rax], al
jne 0x140130aa7
je 0x140130aa7
test r9, rcx
cmp rdi, rbp
movabs r13, 0x2338a4000001b2e9
call fcn.140131a4f
jmp 0x140130c5e
mov rbx, r9
xchg rsi, rcx
mov rsi, qword [rsp + 0x48]
xchg rsi, rcx
add r10, 0x1000
jmp 0x1401309e6
mov rax, qword [rax]
jmp 0x140130c2a
shl rdx, 3
or rax, rdx
xchg r8, rax
mov rax, r8
xchg r8, rax
je 0x140130b08
jne 0x140130b08
pushfq
cpuid
ret
jmp 0x140130825
invalid
js 0x140130b26
add byte [rax], al
jne 0x140130c1b
cmp r8d, 0xd9ff9899
je 0x140130cb9
invalid
test r9d, r9d
jne 0x1401307b9
jmp 0x140130ace
mov rcx, 0xffffffffffffffff
call r15
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
je 0x140130b69
jne 0x140130b69
cmp edx, 0xf6924b21
test rdx, rdi
test rsi, rdx
movabs r14, 0x6ef4ae000000b5e9
popfq
jmp rcx
jmp 0x140130c23
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14013334a
xchg r9, r10
jmp 0x1401308dd
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
jmp 0x140130c11
lea r8, [rbp + 0xd0]
mov qword [rbp + 0xd0], r13
lea rdx, [rsp + 0x48]
jmp 0x140130b3c
cmp al, 0x91
lea rdx, [rbp + 0xe8]
add rdi, r9
je 0x140130be9
jne 0x140130be9
call rcx
ror esi, 0xf7
call rcx
lea ebp, [rdx - 0xbcc0]
rol ebx, 0x41
ror edi, 0xb5
movabs r11, 0x33e470fffffc46e9
rcr r12d, 0xbd
jno 0x140130a99
jmp 0x140130834
inc r15
test r9, rbx
lea r9d, [rbp + 0x4369]
rol r8d, 0xb6
call fcn.140131520
test cl, cl
je 0x140130b2e
nop
movsx ecx, cl
jmp 0x140130c45
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
jmp 0x140130792
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jmp 0x140130b1b
xchg rsi, rax
mov rsi, qword [rsp + 0x30]
xchg rsi, rax
jmp 0x140130b77
sub rcx, rdx
shr rcx, 1
add rcx, rdx
jmp 0x14013075c
xchg rdi, r9
mov rdi, rax
xchg r9, rdi
and r9d, 0xfff
add r9, r10
mov byte [r9], 0xc3
test rbx, rbx
jmp 0x140130976
lea rcx, [rsp + 0x30]
mov qword [rbp + 0xf8], r13
xchg r13, rbp
xor byte [rcx + rcx*4 - 0x53], cl
clc
add byte [rax], al
add byte [rcx - 0x79], cl
in eax, dx
movdqu xmmword [r13 + 0x108], xmm0
xchg r13, rbp
jmp 0x140130a8c
mov ecx, dword [rdi + 0x24]
add rcx, r10
mov dword [rsp + 0x30], 0xf6f6f6f6
mov dword [rsp + 0x3b], 0x7c6f7d7f
mov dword [rsp + 0x34], 0xf6f6f6f6
mov dword [rsp + 0x3f], 0x6e383c3d
movzx edx, word [rcx + r9*2]
jmp 0x140130dbd
xchg rsi, rdx
mov rsi, r13
xchg rsi, rdx
add r9, r10
jmp 0x140130cfa
xor eax, eax
mov byte [rsp + 0x45], al
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x3b]
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
jmp 0x140130d8d
inc r8d
jmp 0x140130da8
xor edx, edx
lea rcx, [rsp + 0x3b]
mov r8d, 0x800
jne 0x140130e32
cmp ecx, 0x5ba90b5e
je 0x140130e75
jmp 0x140130d16
mov byte [rsp + rdx + 0x3b], cl
mov byte [rsp + rdx + 0x30], r13b
inc rdx
cmp rdx, 0xa
jb 0x140130d05
jmp 0x140130d1e
mov r10d, r8d
lea rcx, [rbx + r10*4]
mov edx, dword [rcx + r9]
mov ecx, 0x935f3d6f
jmp 0x140130e03
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov word [rsp + 0x38], 0xf6f6
mov word [rsp + 0x43], 0x7676
mov r9d, dword [rcx + rdx*4]
je 0x140130de8
jne 0x140130de8
je 0x140130731
test r9d, 0x72bbf05
movabs r13, 0x6f302efffffefce9
cmp r12d, 0xa413bc7e
inc r9
int3
jmp 0x140130ce9
add rdx, r9
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140130d16
nop dword [rax]
jne 0x140130e27
je 0x140130e27
rol r8d, 0xac
mov r14d, 0x6c546b8c
movabs r9, 0x1fab297a6edf09eb
call rcx
ret
jmp 0x140130e32
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jmp 0x140130d76
push rdx
add dword [rbx], esi
shr dword [rcx - 0x38], 0x93
add dword [rax], eax
add dword [rdi], ecx
mov dh, 0x42
inc dword [rax + rax*8 - 0xd517]
dec dword [rbp - 0x77]
ror dword [rcx - 0x70], 0x45
mov eax, ebp
movsxd rcx, dword [rax + 0x3c]
mov r11d, dword [rcx + rax + 0x88]
mov ebx, dword [r11 + rax + 0x20]
nop word [rax + rax]
jmp 0x140130da8
mov ecx, dword [r11 + r9 + 0x24]
mov rax, r13
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [r11 + r9 + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
je 0x140130eb5
jne 0x140130eb5
jmp rax
jmp 0x140131302
cmp rax, 0xa
jb 0x140131312
pop rax
invalid
add r10, r9
nop dword [rax]
nop word [rax + rax]
mov byte [rsp + rax + 0x3b], r13b
inc rax
jmp 0x140130ed4
xchg rdx, rdi
mov qword [rbp + 0xe0], rdx
xchg rdx, rdi
lea r8, [rbp + 0xd8]
mov eax, dword [r15 + 0x54]
jne 0x1401313ce
je 0x1401313ce
rol ebx, 0x7a
mul rdx
jmp rax
test rax, 0xffffffffe08141ba
mov bh, 0x97
and al, 0xe1
rcr r12d, 0x59
movabs r9, 0x72860a000003fce9
rol edx, 0x68
syscall
call rax
pause
lea r10d, [rdx - 0x23ab]
jmp 0x14013184c
jmp 0x1401317cf
jle 0x140130199
lea r13d, [rdi + 0xc404]
call rax
lea r11d, [rdx - 0x92a1]
pushf
div r11
test r12, rbp
jmp 0x140131a38
jae 0x1401322c7
nop word [rax + rax]
cmp dword [rbx + 0x10], r13d
je 0x140131ff4
cmp dword [rbx + 0x14], r13d
je 0x140131ff4
jmp 0x1401317ec
je 0x140131ff4
cmp dword [rbx + 0xc], 0xfffffffe
jne 0x1401318e3
nop
pop r14
jl 0x1401309a1
jmp 0x140131459
jmp rcx
cmp byte [rbx], 0x2e
jne 0x140131a6f
mov eax, dword [rbx + 1]
cmp eax, 0x74616469
jne 0x140131a5a
cmp byte [rbx + 5], 0x61
jmp 0x140131a4c
jae 0x140131396
lea rax, [rcx + rdi]
mov qword [rbp + 0x1a8], rax
jmp 0x140131396
lea rax, [rbp + 0xcc]
mov dword [rbp + 0xcc], r13d
mov rcx, 0xffffffffffffffff
jmp 0x14013180d
lea rax, [rdx + rdi]
mov qword [rbp + 0x1a0], rax
cmp rcx, rdi
jmp 0x1401316f3
mov dword [rbp + 0x124], eax
cmp rdx, rdi
jae 0x140131746
jne 0x14013179c
je 0x14013179c
rol r11d, 0xcb
rcr r15d, 0x36
movabs r13, 0x23d03a814fd59deb
jno 0x140132372
jmp 0x14013173b
and ebx, 0xc14223ab
pushfq
neg rdi
jmp rcx
lea rdx, [rbp + 0xe0]
xchg rbx, rax
mov qword [rbp + 0xd8], rbx
xchg rbx, rax
mov r9d, 4
jmp 0x140131721
cmp byte [rbx], 0x2e
jne 0x140131802
cmp dword [rbx + 1], 0x63727372
je 0x140131ff4
cmp dword [rbx], 0x54494e49
jmp 0x1401314cc
xchg r14, rax
mov qword [rsp + 0x20], r14
xchg r14, rax
call r12
movzx eax, word [r15 + 6]
jne 0x140131860
je 0x140131860
rcr edx, 0xc7
rcr esi, 0x79
ror r8d, 0x37
sub r9d, 0xc1f95437
lea r10d, [rdx - 0x3bd4]
call rax
or r11d, 0xcb7e850
call fcn.140130995
xor r14d, 0x8163bc27
ror ebx, 0x9c
mov esp, 0xcbc18163
pushfq
lea r14d, [rdi - 0x5f81]
rol ecx, 0xa3
pop r15
movabs r11, 0x35fad800000112e9
int3
jmp 0x140131977
xor dil, dil
jmp 0x1401315d3
lea rbx, [r15 + 0x108]
lea rax, [rax + rax*4]
lea rax, [rax + 0x21]
lea rax, [r15 + rax*8]
cmp rbx, rax
jmp 0x14013148c
push r8
lea r10d, [rdi + 0x820b]
cmp ebx, 0x40ec6e24
jmp 0x1401314ea
invalid
invalid
invalid
mov eax, 0xffffffff
jmp 0x140132f66