Function at 0x140014150
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
add edx, dword [rdx - 0x5f]
invalid
popfq
mov edi, 0xc0800102
loopne 0x140013d5a
invalid
test eax, 0x13274e26
and rax, 0
cmp byte [rcx + rax], 0
je 0x140013dbd
jne 0x140013dc5
xchg edx, eax
hlt
jne 0x140013d90
je 0x140013e2b
mov ebp, 0x74000008
jp 0x140013e10
je 0x140013e41
inc rax
inc eax
je 0x140013db1
jne 0x140013e1b
je 0x140013e21
lea rax, [0x140013538]
sub rsp, 8
mov qword [rsp], rcx
mov rcx, 0xffffffffffff63f1
mov qword [rsp - 8], rcx
sub rsp, 8
mov rcx, 0xad91
inc rax
dec rcx
cmp rcx, 0xa4d0
jne 0x140013df6
mov rcx, qword [rsp]
add rsp, 8
mov rcx, qword [rsp]
add rsp, 8
and al, 0x48
add esp, 8
call rax
invalid
jne 0x140013db1
adc byte [rdx], dl
add byte [rdi], cl
test dword [rsi], esi
invalid
jne 0x140013d5d
imul eax, dword [rcx - 0x23], 0x73
ret
mov edi, esp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
mov qword [rbp - 8], rdx
mov qword [rbp - 0x10], rcx
sub rax, rax
add rax, rcx
mov qword [rsp - 8], rcx
sub rsp, 8
mov rcx, 0xfffffffffffecb98
push rcx
mov rcx, 0x134a8
rcr dword [rax + 0x51fffecb], 0x48
mov ecx, 0x134a8
inc rax
dec rcx
cmp rcx, 0x13488
je 0x140013e86
jne 0x140013e71
invalid
jne 0x140013e64
add rsp, 8
mov rcx, qword [rsp - 8]
add rsp, 8
mov rcx, qword [rsp - 8]
and rdx, 0
mov edx, dword [rax]
mov rax, qword [rbp - 8]
sub rax, 0x79c72
add rdx, rax
add rdx, 0x79c72
add rax, 0x79c72
mov qword [rbp - 0x18], rdx
mov rcx, qword [rbp - 0x10]
add rcx, 0x1c
xor rdx, rdx
mov edx, dword [rcx]
sub rax, 0x1c5e
add rdx, rax
add rdx, 0x1c5e
add rax, 0x1c5e
mov qword [rbp - 0x20], rdx
mov rcx, qword [rbp - 0x10]
push rax
mov rax, 0xfffffffffffe9979
add rax, 0x1669f
add rax, rcx
mov rcx, 0
add rcx, rax
add rsp, 8
mov rax, qword [rsp - 8]
mov rdx, 0
add byte [rax], al
mov edx, dword [rcx]
mov qword [rbp - 0x28], rdx
mov rcx, qword [rbp - 0x10]
add rcx, 0x24
xor rdx, rdx
mov edx, dword [rcx]
add rdx, rax
mov qword [rbp - 0x30], rdx
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x18]
xor r11, r11
and rax, 0
mov eax, dword [rdx]
push rdx
mov rdx, qword [rbp - 8]
add rdx, rax
mov qword [rsp - 8], rcx
sub rsp, 8
sub rsp, 8
mov qword [rsp], rdx
or byte [rax - 0x7d], cl
in al, dx
or byte [rax - 0x77], cl
adc al, 0x24
pop rcx
lea rax, [0x140013238]
mov qword [rsp - 8], rcx
sub rsp, 8
mov rcx, 0xffffffffffffafdb
push rcx
mov rcx, 0x670f
inc rax
dec rcx
cmp rcx, 0x5b9a
jne 0x140013f92
je 0x140013f98
call 0x140013fc6
invalid
jne 0x140013f78
adc dword gs:[rax], eax
add byte [rbp - 0x4b], dh
jne 0x140013f4f
add rsp, 8
mov rcx, qword [rsp - 8]
mov rcx, qword [rsp]
add rsp, 8
call rax
pop rcx
cmp rax, 0xe
je 0x140013fbe
jne 0x1400140d1
and eax, 0x850f0000
inc dword [rax]
add byte [rax], al
jne 0x1400140c3
cmp byte [rdx], 0x47
je 0x140013fd3
jne 0x1400140d1
enter 0x155, 0
jne 0x140014084
cmp byte [rdx + 1], 0x65
jne 0x140013fe5
je 0x140014000
mov bh, 9
add byte [rax], al
je 0x14001402e
jne 0x1400140d1
lea rax, [0x1400136f1]
add rax, 0x94d
call rax
stosd dword [rdi], eax
xchg ebx, eax
in eax, dx
invalid
cmp byte [rdx + 2], 0x74
jne 0x14001401b
je 0x140014025
lea rax, [0x140013d4c]
add rax, 0x2d8
call rax
and dx, word [rsi]
mov ecx, 0xb0850f
add byte [rax], al
jne 0x1400140d1
pop rdx
add dword [rax], 0x804d7500
jp 0x14001402d
jne 0x140014074
cmp byte [rdx + 3], 0x50
push rax
jne 0x140014033
je 0x14001403f
adc bl, dh
sbb dword [rcx], eax
sbb dword [rcx], eax
add byte [rax + rbp + 0xf], dh
test dword [rsi - 0x1b000000], edx
xor al, byte [rcx]
add byte [rdi], cl
test dword [rcx - 0x80000000], eax
jp 0x14001404f
je 0x14001405d
jne 0x1400140d1
in eax, 0x32
add dword [rax], eax
jne 0x1400140c6
cmp byte [rdx + 7], 0x41
jne 0x1400140d1
jne 0x1400140d1
cmp byte [rdx + 0xc], 0x73
jne 0x14001407d
je 0x140014083
lea rax, [0x140013693]
push rcx
mov rcx, 0xfffffffffffeac57
call qword [rcx + 0x48]
mov ecx, 0xfffeac57
add rax, rcx
add rax, 0x15dd0
pop rbp
add dword [rax], eax
mov rcx, qword [rsp]
add rsp, 8
add esp, 8
call rax
xchg ecx, eax
jne 0x1400140a1
rcl byte [rcx + 0x75d72575]
push rdx
xlatb
jne 0x1400140d1
add byte fs:[rax], al
jne 0x1400140af
sub al, byte [rax + 0x75730d7a]
adc eax, 0x8d481974
add eax, 0xfffffa81
cmp byte [rdx + 0xd], 0x73
jne 0x1400140a0
je 0x1400140a6
lea rax, [0x140013b15]
add rax, 0x58d
call rax
cmp dh, byte [rdx]
fisttp word [rsi + 0x75]
jne 0x1400140d1
invalid
jb 0x140014078
add byte [rax], al
jne 0x140014094
mov rax, qword [rbp - 0x30]
xor rcx, rcx
mov cx, word [rax + r11*2]
mov rax, qword [rbp - 0x20]
mov rdx, 0
mov edx, dword [rax + rcx*4]
mov rax, qword [rbp - 8]
mov eax, dword [rbp - 8]
add rax, rdx
sub rcx, rcx
inc rcx
jmp 0x1400140d1
add rsp, 8
mov rdx, qword [rsp - 8]
inc r11
sub rsp, 8
mov qword [rsp], rax
mov rax, 0xfffffffffffedda0
add rax, 0x12264
add rax, rdx
mov rdx, 0
add rdx, rax
add rsp, 8
mov rax, qword [rsp - 8]
dec rcx
test rcx, rcx
jne 0x140014116
je 0x140014122
mov eax, 0x74000006
pop rdi
je 0x140014177
jne 0x140013f39
invalid
jne 0x140013f12
mov rsp, r15
mov r15, qword [rsp]
add rsp, 8
leave
mov rsi, qword [rsp]
add rsp, 8
ret
dec rax
cmp word [rax], 0x5a4d
jne 0x14001415b
je 0x140014166
call 0x1400141b5
mov bl, 0xc7
lahf
pop rsi
jne 0x140014146
call 0x14001415e
mov ecx, edi
xor eax, 0x3c508b0b
mov edx, dword [rax + 0x3c]
cmp edx, 0x400
jae 0x140014146
sub rax, 0x48b5
add rdx, rax
add rdx, 0x48b5
add rax, 0x48b5
cmp word [rdx], 0x4550
jne 0x140014194
je 0x1400141d2
invalid
je 0x1400141e3
jne 0x140014146
lea rax, fcn.14001406c
sub rsp, 8
mov qword [rsp], rcx
mov rcx, 0xffffffffffff2810
add rcx, 0xd960
add rcx, rax
push rcx
xchg rcx, rax
add rsp, 8
mov rcx, qword [rsp - 8]
mov rcx, qword [rsp]
add rsp, 8
call rax
lodsd eax, dword [rsi]
push rbp
movabs byte [0x894808ec8348c391], al
sub al, 0x24
mov rbp, rsp
mov qword [rsp - 8], 0
ret
add byte [rax], al
add byte [rax], al
sub rsp, 8
pop rax
add rax, rcx
sub rsp, 0x1e0
sub rsp, 0x20
and spl, 0xf0
mov byte [rbp - 0xd], 0x56
mov byte [rbp - 0xc], 0x69
mov byte [rbp - 0xb], 0x72
mov byte [rbp - 0xa], 0x74
mov byte [rbp - 9], 0x75
mov byte [rbp - 8], 0x61
mov byte [rbp - 7], 0x6c
mov byte [rbp - 6], 0x41
mov byte [rbp - 5], 0x6c
mov byte [rbp - 4], 0x6c
mov byte [rbp - 3], 0x6f
mov byte [rbp - 2], 0x63
mov byte [rbp - 1], 0
mov qword [rsp - 8], rsi
sub rsp, 8
add rsp, 8
mov rcx, qword [rsp - 8]
lea rdx, [rbp - 0xd]
call rax
sub rsp, 8
mov qword [rsp], 0
add rsp, 8
mov rcx, qword [rsp - 8]
mov rdx, 0x61be
mov r8, 0x3000
mov r9, 0x40
call rax
mov rcx, 0x4615
lea r9, [0x14000fdcd]
dec rcx
mov dl, byte [r9 + rcx]
mov byte [rax + rcx], dl
test rcx, rcx
jne 0x140014284
mov rcx, 0x3fe0
mov r9d, 0x15c13
mov r10d, 0x92819200
dec rcx
mov dl, byte [rax + rcx]
xor dl, r9b
mov byte [rax + rcx], dl
sub r10d, 0x26fe2
add r9d, r10d
add r9d, 0x26fe2
add r10d, 0x26fe2
rol r9d, 1
test rcx, rcx
jne 0x1400142dd
je 0x1400142e3
call 0x1400142d4
fild qword [rdi - 0x7c]
jmp 0x174f50a56
jne 0x1400142a6
xor al, 1
add byte [rbp - 0x7f], dh
jne 0x140014266
add rax, 0x1ed4
mov rsp, rbp
pop rbp
ret