Function at 0x140134b6c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jle 0x1401343be
xor r15d, 0x1af9b7cb
rcr r12d, 0x19
div rsi
pushf
movabs r10, 0x45157bfffffc00e9
rcl r11d, 0x69
mul r9
jl 0x140134261
invalid
lea ebx, [rbp + 0xfa97]
call fcn.140133822
mov r8d, 0x800
call rdi
xchg rbp, r9
mov rbp, rax
xchg r9, rbp
mov r8d, r13d
je 0x140134297
jne 0x140134297
test rbx, rdi
ror r10d, 0x61
test r11d, 0xfbb7d08f
neg rcx
movabs r13, 0x671df0000000dce9
test rcx, rbp
test r11, rbp
lea r14d, [rcx + 0xf25c]
call fcn.140133d0c
jmp 0x140134378
mov ecx, r8d
lea rdx, [r9 + rcx*4]
mov ecx, dword [rdx + r11]
mov edx, 0x4f22e70e
jmp 0x14013434e
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140134362
cmp edx, 0xa029da11
jmp 0x14013436a
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140134370
nop dword [rax]
movsx eax, al
jmp 0x14013432b
je 0x1401343c0
inc r8d
jmp 0x1401342b1
movsxd rcx, dword [rax + 0x3c]
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
nop dword [rax]
nop dword [rax + rax]
jmp 0x1401342b1
invalid
mov ecx, dword [r10 + r9 + 0x24]
xchg r13, rax
mov r13, rax
jmp 0x140134572
lea rax, [0x140000000]
add rbx, rax
mov edi, r13d
mov rcx, qword [rbx]
jmp 0x1401345ca
test ecx, ecx
jne 0x1401343f0
mov ecx, dword [r14 + 0x10]
mov ebx, ecx
jmp 0x1401343cf
add rax, rdx
movzx edx, dx
test rcx, rcx
xchg r14, rsi
mov rcx, r14
jne 0x14013443e
je 0x14013443e
cmp r15, rdx
lea r11d, [rbp - 0x39c8]
call rcx
sub ecx, 0x87376bec
call rax
jg 0x140134aea
push r13
ret
jmp 0x140134534
neg rax
add rax, 0xfffffffffffffffe
neg rax
jmp 0x1401343f7
mov ecx, dword [r14 + 0xc]
xor r8d, r8d
add rcx, rax
xor edx, edx
jmp 0x1401344a8
mov r12d, dword [rcx + r8*4]
add r12, r9
nop word [rax + rax]
mov byte [rsp + rax + 0x63], r13b
inc rax
cmp rax, 0xa
jmp 0x1401345dc
call rdi
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
test rax, rax
ror byte [rdi], 0x84
xor al, byte [rsi]
add byte [rax], al
mov ecx, dword [r14]
jmp 0x1401343e4
mov r10, rax
xchg r10, r8
test rax, rax
je 0x1401346dd
jne 0x14013451c
je 0x14013451c
rol r14d, 0xc7
jnp 0x140133d35
cmp r9d, 0xe5421111
rcr edx, 0xf2
jg 0x1401345c2
add r15d, 0x82a094e6
int3
jmp 0x140134546
xchg r14, rsi
cmovns rdx, rax
call r15
xchg r10, r8
jmp 0x1401344c2
mov eax, dword [r14 + 0x10]
test eax, eax
je 0x1401345f9
jmp 0x140134557
mov edx, edi
add rdx, rax
lea rax, [0x140000000]
xchg r8, rcx
mov qword [rdx + rax], rcx
xchg rcx, r8
jmp 0x1401345c5
xchg r13, rax
add rcx, r9
mov edx, r8d
movzx r8d, word [rcx + rdx*2]
mov ecx, dword [r10 + r9 + 0x1c]
add rcx, r9
jne 0x1401345a9
je 0x1401345a9
cmp r8d, 0x20ce1f9b
rcl r14d, 0xc0
jo 0x140134913
int3
jmp 0x140134486
invalid
jmp 0x140134614
test rcx, rcx
je 0x140134633
mov rdx, rcx
nop
jmp 0x140134466
jb 0x140134497
cmp dword [r14 + 0xc], r13d
je 0x140134e68
lea rax, [0x140000000]
nop
jmp 0x140134475
mov rax, qword [rbx]
lea rcx, [0x140000000]
xchg rbx, r8
mov qword [rcx + rax], rbx
xchg r8, rbx
lea rax, [0x140000000]
xchg r8, rcx
jmp 0x140134640
jmp 0x140134475
add edi, 0x2f7b3e79
mov rdx, rcx
test rcx, rcx
jne 0x140134466
nop
sub r14, 0x4cf74190
jmp 0x14013465d
mov r8, qword [rbx + 8]
xchg rcx, r8
neg rbx
add rbx, 0xfffffffffffffff8
neg rbx
nop
sub edi, 0x2f7b3e71
jmp 0x140134621
add r14, 0x4cf741a4
cmp dword [r14 + 0xc], r13d
je 0x140134e68
xchg r13, rdi
mov r13, qword [rsp + 0x30]
xchg rdi, r13
jne 0x1401346c9
je 0x1401346c9
test r8, rcx
neg r9
call rcx
je 0x140134bc8
jmp rax
jmp 0x14013461c
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg r8, rdx
mov r8, r13
xchg rdx, r8
mov dword [rsp + 0x36], 0x797c7c4f
jl 0x140134771
jns 0x1401346e0
add byte [rax], al
add byte [rax], al
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
movzx ecx, byte [rsp + rdx + 0x30]
jne 0x140134747
je 0x140134747
rcr edx, 0x64
call rcx
xor r13d, 0xf9b53147
test ecx, 0x13cce691
call fcn.1401350c9
rol r8d, 0xd7
cmp ebp, 0x8c441f57
lea r13d, [rdi + 0xf179]
movabs r8, 0x5256a3000001e6e9
test r14d, 0xcffcb43d
rol r15d, 0x76
test r15, rcx
call rax
call rax
popf
call 0x1401342a5
jmp 0x140134932
jb 0x140134976
nop
mov byte [rsp + r13 + 0x36], 0
inc r13
cmp r13, 5
jmp 0x140134a64
mov dword [rsp + 0x78], 0xf6f6f6f6
xchg rdx, rcx
mov rcx, r13
jmp 0x140134a0c
nop dword [rax]
movzx eax, byte [rbp + rdx - 0x34]
movzx ecx, byte [rsp + rdx + 0x78]
add cl, al
mov byte [rbp + rdx - 0x34], cl
mov byte [rsp + rdx + 0x78], r13b
je 0x1401347e8
jne 0x1401347e8
push rsi
ror r13d, 0x76
ror r11d, 0x22
add r11d, 0x2259a7d8
pushfq
lea r11d, [rdi + 0x5d0a]
jmp rax
jmp 0x140134987
mov dword [rbp - 4], 0x2a35354d
mov dword [rbp - 0x54], 0xf6f6f6f6
mov dword [rbp], 0x736e6f5c
mov dword [rbp - 0x50], 0xf6f6f6f6
mov dword [rbp + 4], 0x737c7e7d
je 0x140134847
jne 0x140134847
jmp rax
jmp 0x1401348cd
mov dword [rbp - 0x80], 0xf6f6f6f6
mov dword [rbp - 0x2c], 0x78732a79
mov dword [rbp - 0x7c], 0xf6f6f6f6
mov dword [rbp - 0x28], 0x6b737e73
mov dword [rbp - 0x78], 0xf6f6f6f6
mov dword [rbp - 0x24], 0x6f847376
mov dword [rbp - 0x74], 0xf6f6f6f6
jmp 0x1401349f2
lea r8, [rsp + 0x36]
lea rdx, [rbp - 0x34]
xor ecx, ecx
call r12
mov rax, r13
nop word [rax + rax]
jmp 0x140134976
mov dword [rbp - 0x4c], 0xf6f6f6f6
mov dword [rbp + 8], 0x6b7e7f6c
mov dword [rbp - 0x48], 0xf6f6f6f6
mov dword [rbp + 0xc], 0x7d6f766c
mov dword [rbp - 0x44], 0xf6f6f6f6
mov dword [rbp + 0x10], 0x6f7c6b2a
jmp 0x140134a8f
mov dword [rbp - 0x64], 0xf6f6f6f6
mov dword [rbp - 0x10], 0x6f727e2a
mov dword [rbp - 0x60], 0xf6f6f6f6
mov dword [rbp - 0xc], 0x7d73602a
mov dword [rbp - 0x5c], 0xf6f6f6f6
mov dword [rbp - 8], 0x2a766b7f
mov dword [rbp - 0x58], 0xf6f6f6f6
jmp 0x1401347f9
hlt
add cl, al
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r13b
inc rdx
cmp rdx, 5
jb 0x14013470f
jmp 0x14013478a
mov byte [rbp + rax - 0x34], r13b
inc rax
cmp rax, 0x53
jmp 0x140134768
inc rdx
cmp rdx, 0x53
jb 0x1401347a1
mov r9d, 0x10
je 0x1401349dc
jne 0x1401349dc
pause
lea ebp, [rdi - 0x6010]
int3
jmp 0x14013489a
mov dword [rbp - 0x20], 0x55572a44
mov dword [rbp - 0x70], 0xf6f6f6f6
mov dword [rbp - 0x1c], 0x57143c4c
jmp 0x140134a39
xchg rcx, rdx
mov dword [rbp - 0x34], 0x76736b50
mov dword [rsp + 0x7c], 0xf6f6f6f6
mov dword [rbp - 0x30], 0x7e2a6e6f
jmp 0x140134864
mov dword [rbp - 0x6c], 0xf6f6f6f6
mov dword [rbp - 0x18], 0x2a6f756b
mov dword [rbp - 0x68], 0xf6f6f6f6
mov dword [rbp - 0x14], 0x6f7c7f7d
jmp 0x1401348fc
jb 0x140134770
mov dword [rbp - 0x40], 0xf6f6f6f6
mov dword [rbp + 0x14], 0x7d78732a
mov dword [rbp - 0x3c], 0xf6f6f6f6
mov dword [rbp + 0x18], 0x76766b7e
mov word [rbp - 0x38], 0xf6f6
mov dword [rbp + 0x1c], 0x386e6f
mov byte [rbp - 0x36], 0xf6
jmp 0x14013479d
invalid
mov dword [rsp + 0x48], 0xf6f6f6f6
mov rdx, r13
mov dword [rsp + 0x4e], 0x797c7c4f
je 0x140134b0c
jne 0x140134b0c
cmp r12d, 0x540fc44
movabs r15, 0x5844b70000024ee9
call fcn.140133bbc
sub ebp, 0x41b4e287
ret
jmp 0x140134d5f
mov byte [rsp + rdx + 0x4e], cl
mov byte [rsp + rdx + 0x48], r13b
inc rdx
jmp 0x140134e0a
mov dword [rbp + 0x90], 0x57143b4c
mov dword [rbp + 0x40], 0xf6f6f6f6
mov dword [rbp + 0x94], 0x2a6f756b
mov dword [rbp + 0x44], 0xf6f6f6f6
mov dword [rbp + 0x98], 0x6f7c7f7d
mov dword [rbp + 0x48], 0xf6f6f6f6
div dh
div dh
jmp 0x140134ccc
mov dword [rbp + 0x5c], 0xf6f6f6f6
mov dword [rbp + 0xb0], 0x737c7e7d
mov dword [rbp + 0x60], 0xf6f6f6f6
jmp 0x140134b92
mov dword [rbp + 0xb4], 0x6b7e7f6c
mov dword [rbp + 0x64], 0xf6f6f6f6
mov dword [rbp + 0xb8], 0x7d6f766c
mov dword [rbp + 0x68], 0xf6f6f6f6
mov dword [rbp + 0xbc], 0x6f7c6b2a
mov dword [rbp + 0x6c], 0xf6f6f6f6
add byte [rdx], ch
imul edi, dword [rdi + rbp*2 - 0x39], 0x45
insb byte [rdi], dx
div dh
div dh
mov dword [rbp + 0xc0], 0x7d78732a
jmp 0x140134d88
add byte [rax], al
add byte [rdx], ch
jae 0x140134c46
jge 0x140134bb9
mov ah, 1
add byte [rax], al
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbp + rdx + 0x78]
jmp 0x140134dcc
mov byte [rsp + r13 + 0x4e], 0
inc r13
cmp r13, 5
jb 0x140134beb
jmp 0x140134a6a
cmp rax, 0x53
jb 0x140134c26
nop
jmp 0x140134beb
xchg r13, rax
mov r13, rax
xchg r13, rax
nop word [rax + rax]
mov byte [rbp + rax + 0x78], r13b
inc rax
jmp 0x140134c03
mov dword [rbp + 0x28], 0xf6f6f6f6
mov dword [rbp + 0x7c], 0x7e2a6e6f
mov dword [rbp + 0x2c], 0xf6f6f6f6
div dh
mov dword [rbp + 0x80], 0x78732a79
mov dword [rbp + 0x30], 0xf6f6f6f6
mov dword [rbp + 0x84], 0x6b737e73
je 0x140134c70
jne 0x140134c70
xor r9d, 0x172bdb0f
movabs rbx, 0x695269000000a7e9
push r8
call rcx
lea r10d, [rdi - 0x6c00]
test r12, rbp
sub r14d, 0xb381120d
call 0x140134896
call fcn.140134ace
jmp 0x140134d1c
lea rdx, [rbp + 0x78]
xor ecx, ecx
call r12
jmp 0x140134c14
mov dword [rbp + 0x54], 0xf6f6f6f6
mov dword [rbp + 0xa8], 0x2a35354d
mov dword [rbp + 0x58], 0xf6f6f6f6
mov dword [rbp + 0xac], 0x736e6f5c
jmp 0x140134b75
mov dword [rbp + 0x9c], 0x6f727e2a
mov dword [rbp + 0x4c], 0xf6f6f6f6
mov dword [rbp + 0xa0], 0x7d73602a
mov dword [rbp + 0x50], 0xf6f6f6f6
mov dword [rbp + 0xa4], 0x2a766b7f
jne 0x140134d00
je 0x140134d00
jmp rcx
jmp 0x140134ca5
mov dword [rbp + 0x34], 0xf6f6f6f6
mov dword [rbp + 0x88], 0x6f847376
mov dword [rbp + 0x38], 0xf6f6f6f6
mov dword [rbp + 0x8c], 0x55572a44
mov dword [rbp + 0x3c], 0xf6f6f6f6
jne 0x140134d4b
je 0x140134d4b
movabs r11, 0x581685fffffdede9
cmp r13d, 0x6623c71b
call 0x140134c86
jmp 0x140134b3d
mov byte [rsp + 0x4c], 0xf6
mov word [rsp + 0x52], 0x7c
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x4e]
movzx ecx, byte [rsp + rdx + 0x48]
add cl, al
jmp 0x140134b2c
mov dword [rbp + 0x70], 0xf6f6f6f6
mov dword [rbp + 0xc4], 0x76766b7e
mov word [rbp + 0x74], 0xf6f6
mov dword [rbp + 0xc8], 0x386e6f
mov byte [rbp + 0x76], 0xf6
jne 0x140134dba
je 0x140134dba
or r14d, 0xcc61337b
movabs rcx, 0x5a100afffffe15e9
popfq
call rcx
jmp rax
jmp 0x140134bd4
movzx ecx, byte [rbp + rdx + 0x24]
add cl, al
mov byte [rbp + rdx + 0x78], cl
mov byte [rbp + rdx + 0x24], r13b
jne 0x140134dec
je 0x140134dec
lea edi, [rcx - 0xe376]
rcr r8d, 0xcc
movabs rbx, 0x4a221fe35b005deb
syscall
pushfq
call fcn.140135103
or edx, 0x31bd11e2
rcr edx, 7
rcl r11d, 0xc4
ret
jmp 0x140134e4b
cmp rdx, 5
jb 0x140134d77
mov dword [rbp + 0x24], 0xf6f6f6f6
xchg r13, rdx
mov r13, rdx
xchg r13, rdx
mov dword [rbp + 0x78], 0x76736b50
je 0x140134e39
jne 0x140134e39
sub edi, 0xd5806821
pause
movabs rdx, 0x58ad60fffffdf5e9
jmp rcx
jmp 0x140134c33
inc rdx
cmp rdx, 0x53
jb 0x140134be1
mov r9d, 0x10
lea r8, [rsp + 0x4e]
jmp 0x140134c97
xchg rdi, r9
mov rdi, qword [rbp + 0x308]
xchg r9, rdi
lea rcx, [0x140135240]
mov r8, qword [rbp + 0x300]
lea rax, [0x140135210]
mov rax, qword [rax]
jmp 0x140134e92
xor rax, qword [rcx]
mov rcx, qword [rbp + 0x2f0]
xchg rcx, rdx
jmp 0x140134ea9
jmp 0x140134a6f
mov rcx, qword [rbp + 0x2f8]
xchg rcx, rdx
call rax
je 0x140134edf
jne 0x140134edf
ror r14d, 0x38
call rax
ret
jmp 0x140134ea4