Function at 0x140133ab0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
and al, 0x7a
ret 0x38
ror esi, 0x35
jne 0x1401338a9
movabs r12, 0x3fcfa3f46c7a7feb
jbe 0x140132cd8
rcl edi, 0x8d
cmp rsi, rdx
rol edx, 0x95
jae 0x140133507
ret
invalid
xor dh, dh
div dh
test byte [rax - 0x79], 0xfa
mov rdi, r13
xchg rdi, rdx
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
jl 0x14013316e
jmp 0x14013322b
mov dword [rbp - 0x78], 0xf6f6f6f6
mov dword [rbp - 0x24], 0x6f847376
mov dword [rbp - 0x74], 0xf6f6f6f6
mov dword [rbp - 0x20], 0x55572a44
mov dword [rbp - 0x70], 0xf6f6f6f6
jmp 0x14013344a
mov byte [rbp + rdx - 0x34], cl
mov byte [rsp + rdx + 0x78], r13b
inc rdx
cmp rdx, 0x53
jb 0x1401332bd
jmp 0x140133488
call r12
mov rax, r13
nop word [rax + rax]
mov byte [rbp + rax - 0x34], r13b
inc rax
cmp rax, 0x53
jmp 0x1401331e5
jb 0x1401331d4
nop
mov byte [rsp + r13 + 0x36], 0
inc r13
jmp 0x1401333c9
mov dword [rbp + 0x18], 0x76766b7e
mov word [rbp - 0x38], 0xf6f6
mov dword [rbp + 0x1c], 0x386e6f
mov byte [rbp - 0x36], 0xf6
nop dword [rax]
jmp 0x1401332bd
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r13b
je 0x14013326a
jne 0x14013326a
ret
jmp 0x14013336e
mov dword [rbp - 0x80], 0xf6f6f6f6
mov dword [rbp - 0x2c], 0x78732a79
mov dword [rbp - 0x7c], 0xf6f6f6f6
mov dword [rbp - 0x28], 0x6b737e73
jmp 0x140133173
xchg rdx, rdi
mov dword [rbp - 0x34], 0x76736b50
mov dword [rsp + 0x7c], 0xf6f6f6f6
mov dword [rbp - 0x30], 0x7e2a6e6f
jmp 0x14013327e
movzx eax, byte [rbp + rdx - 0x34]
movzx ecx, byte [rsp + rdx + 0x78]
add cl, al
je 0x140133311
jne 0x140133311
jae 0x14013314c
popf
sub r12d, 0xaf81a441
lea r11d, [rcx - 0x3f2d]
jmp rcx
jmp 0x14013319b
mov dword [rbp - 0x58], 0xf6f6f6f6
mov dword [rbp - 4], 0x2a35354d
mov dword [rbp - 0x54], 0xf6f6f6f6
mov dword [rbp], 0x736e6f5c
mov dword [rbp - 0x50], 0xf6f6f6f6
jmp 0x14013349e
inc rdx
cmp rdx, 5
jb 0x140133233
mov dword [rsp + 0x78], 0xf6f6f6f6
xchg rdi, rdx
mov rdi, r13
jmp 0x14013329f
mov dword [rbp - 0x10], 0x6f727e2a
mov dword [rbp - 0x60], 0xf6f6f6f6
mov dword [rbp - 0xc], 0x7d73602a
mov dword [rbp - 0x5c], 0xf6f6f6f6
mov dword [rbp - 8], 0x2a766b7f
jmp 0x140133346
cmp r13, 5
jb 0x1401331ed
mov dword [rbp + 0xc], 0x7d6f766c
mov dword [rbp - 0x44], 0xf6f6f6f6
mov dword [rbp + 0x10], 0x6f7c6b2a
mov dword [rbp - 0x40], 0xf6f6f6f6
mov dword [rbp + 0x14], 0x7d78732a
mov dword [rbp - 0x3c], 0xf6f6f6f6
jmp 0x1401331fb
mov dword [rbp - 0x1c], 0x57143c4c
mov dword [rbp - 0x6c], 0xf6f6f6f6
mov dword [rbp - 0x18], 0x2a6f756b
mov dword [rbp - 0x68], 0xf6f6f6f6
mov dword [rbp - 0x14], 0x6f7c7f7d
mov dword [rbp - 0x64], 0xf6f6f6f6
jmp 0x14013338e
mov r9d, 0x10
lea r8, [rsp + 0x36]
lea rdx, [rbp - 0x34]
xor ecx, ecx
jmp 0x1401331c3
mov dword [rbp + 4], 0x737c7e7d
mov dword [rbp - 0x4c], 0xf6f6f6f6
mov dword [rbp + 8], 0x6b7e7f6c
mov dword [rbp - 0x48], 0xf6f6f6f6
je 0x1401334e6
jne 0x1401334e6
popfq
xor ebp, 0xd15c97af
and r10d, 0x8bacf917
add r15d, 0xc71c5e5f
jmp 0x140132eab
jmp 0x14013341b
mov cl, 0xcc
invalid
mov dword [rbp + 0xb8], 0x7d6f766c
mov dword [rbp + 0x68], 0xf6f6f6f6
mov dword [rbp + 0xbc], 0x6f7c6b2a
mov dword [rbp + 0x6c], 0xf6f6f6f6
mov dword [rbp + 0xc0], 0x7d78732a
je 0x1401335e8
jne 0x1401335e8
neg rbx
push rsi
call rax
inc r10
inc edx
popfq
test ebp, 0x4343063b
mov r14d, 0x2e34c00
lea edx, [rdx - 0xa69a]
pause
bswap r8
div r15
jmp rax
jmp 0x140133988
jb 0x1401339f7
mov r9d, 0x10
lea r8, [rsp + 0x4e]
lea rdx, [rbp + 0x78]
xor ecx, ecx
call r12
jmp 0x140133915
jb 0x140133896
jmp 0x1401333d3
mov dword [rbp + 0x60], 0xf6f6f6f6
mov dword [rbp + 0xb4], 0x6b7e7f6c
mov dword [rbp + 0x64], 0xf6f6f6f6
jne 0x140133719
je 0x140133719
lea ebp, [rdi + 0xde19]
and edx, 0x7d71775a
call rax
rcl r10d, 0x67
mov ebx, 0x60f78fbc
pushf
neg r15
add r8d, 0x5fd5c7c
mov r11d, 0xf1502f41
inc r15
pop rsi
push r14
neg rdx
test r14d, 0x56b819bf
movabs r14, 0x6c8f5dfffffe62e9
lea r9d, [rdx + 0xf22]
lea ebx, [rcx - 0x934d]
popfq
neg r12
mov edx, 0x9b6f9b57
call rax
rcr r10d, 0x42
jmp 0x14013379c
jmp 0x140133580
inc dword [rcx - 0x7f]
invalid
mov byte [rbp + rax + 0x78], r13b
inc rax
cmp rax, 0x53
jb 0x14013387d
nop
jmp 0x140133896
mov byte [rsp + r13 + 0x4e], 0
inc r13
cmp r13, 5
jmp 0x1401336b7
push r12
div dh
div dh
mov dword [rbp + 0xa8], 0x2a35354d
mov dword [rbp + 0x58], 0xf6f6f6f6
mov dword [rbp + 0xac], 0x736e6f5c
mov dword [rbp + 0x5c], 0xf6f6f6f6
mov dword [rbp + 0xb0], 0x737c7e7d
jge 0x140133957
jl 0x14013394e
jmp 0x1401336c2
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x4c
adc eax, 0x88c80224
adc rax, 0x6c884478
adc eax, 0xc2ff4824
movzx ecx, byte [rbp + rdx + 0x24]
add cl, al
mov byte [rbp + rdx + 0x78], cl
mov byte [rbp + rdx + 0x24], r13b
inc rdx
cmp rdx, 0x53
jmp 0x140133698
xchg r13, rax
mov r13, rax
xchg r13, rax
nop word [rax + rax]
jne 0x14013394a
je 0x14013394a
je 0x1401335b7
jp 0x140133954
lea r15d, [rdx + 0x8fb6]
jl 0x14013316c
push rdx
test r15d, 0xda5628f7
movabs rsi, 0x66792affffff2ee9
rcl ebx, 0x7b
and ecx, 0xec9cff9e
lea ebx, [rbx + 0x1c3c]
jmp 0x14013387d
jmp [rdx]
jnp 0x1401338d7
loope 0x1401338f6
sahf
call [rsp + rbp*8 + 0x1c3c9b8d]
add byte [rax], al
cmp r15, rcx
pushfq
pause
neg r8
ret
mov dword [rbp + 0x70], 0xf6f6f6f6
mov dword [rbp + 0xc4], 0x76766b7e
mov word [rbp + 0x74], 0xf6f6
mov dword [rbp + 0xc8], 0x386e6f
mov byte [rbp + 0x76], 0xf6
jne 0x1401339c2
je 0x1401339c2
int3
jmp 0x1401339ea
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbp + rdx + 0x78]
jmp 0x1401338f9
xchg rbp, r9
mov qword [rsp + 0x20], rbp
xchg r9, rbp
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
jmp 0x140133ac9
mov qword [rsp + 8], rcx
sub rsp, 0x28
lea rax, [0x140133d10]
xchg r12, rax
mov qword [rsp + 0x18], r12
xchg r12, rax
mov dword [rsp + 8], 0
jmp 0x140133aef
xchg rsi, rax
mov rsi, qword [rsp + 0x30]
xchg rsi, rax
mov qword [rsp + 0x10], rax
jmp 0x140133b88
mov rax, qword [rsp + 0x10]
inc rax
mov qword [rsp + 0x10], rax
jne 0x140133b42
je 0x140133b42
lea r14d, [rdi + 0x63ac]
call rcx
add edx, 0x4c4ffdc8
xor esi, 0x3124ea93
lea r8d, [rbp + 0xc36f]
xor edi, 0xe23f5689
test r10d, 0xae7ab439
rcr ebp, 0xef
int3
jmp 0x140133b88
jae 0x140133cfe
mov byte [rsp], 0
mov dword [rsp + 4], 0
jmp 0x140133ba5
mov rcx, rax
xchg rcx, rax
cmp qword [rsp + 0x10], rax
jmp 0x140133b62
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
add rcx, rax
xchg rcx, rax
jmp 0x140133b79
mov eax, dword [rsp + 4]
inc eax
mov dword [rsp + 4], eax
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 4], eax
jmp 0x140133bb2
jae 0x140133c6c
mov eax, dword [rsp + 4]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx + rax*8]
cmp qword [rsp + 0x10], rax
jb 0x140133c67
mov eax, dword [rsp + 4]
jne 0x140133c13
je 0x140133c13
sub edi, 0x5cb673d
pushfq
call 0x1401346b9
lea r10d, [rbx + 0xb03]
jmp rcx
jmp 0x140133c47
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp qword [rsp + 0x10], rax
jae 0x140133c67
jmp 0x140133c3e
mov byte [rsp], 1
jmp 0x140133c6c
mov ecx, dword [rsp + 4]
mov rdx, qword [rsp + 0x48]
mov ecx, dword [rdx + rcx*4]
xchg r14, rdx
mov r14, qword [rsp + 0x40]
xchg rdx, r14
add rcx, qword [rdx + rax*8]
jmp 0x140133c27
jmp 0x140133b9b
movzx eax, byte [rsp]
test eax, eax
je 0x140133c7d
jmp 0x140133b02
xor edx, edx
mov eax, dword [rsp + 8]
mov ecx, 0x20
div ecx
mov eax, edx
je 0x140133c92
jne 0x140133c92
movabs r14, 0x333c26eb5dec2deb
call rax
jo 0x140132dc0
jmp 0x140133cc1
push rdi
ret
jmp 0x140133b02
mov eax, ecx
mov rcx, qword [rsp + 0x10]
mov byte [rcx], al
mov eax, dword [rsp + 8]
inc eax
mov dword [rsp + 8], eax
jmp 0x140133ca4
mov eax, eax
mov rcx, qword [rsp + 0x18]
movzx eax, byte [rcx + rax]
mov rcx, qword [rsp + 0x10]
movzx ecx, byte [rcx]
xor ecx, eax
jne 0x140133ce4
je 0x140133ce4
inc r10
syscall
cmp r10, rbx
movabs r13, 0x4a02957b2a50c3eb
rcl r9d, 0x25
test ecx, 0xfdd1149b
jmp rcx
jmp 0x140133ca9
add rsp, 0x28
ret