Function at 0x140133834
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov ebx, 0xf1d08e0f
invalid
movabs byte [0xc141fffff05d880f], al
xlatb
or ah, byte [rsi - 0x63]
cpuid
lea ecx, [rbp + 0xbd42]
movabs r10, 0xd6e91d93f59a9eb
lea r15d, [rbp - 0xb5d4]
ror r11d, 0xf9
call rax
test r13, rdi
jmp rcx
xchg r8, r15
mov rdx, r8
xchg r8, r15
mov dword [rbp + 0x136], 0xff56ff66
mov dword [rbp + 0x13a], 0xff6dff79
mov dword [rbp + 0x12c], 0xf6f6f6f6
mov dword [rbp + 0x13e], 0xff76ff6b
jne 0x140131522
je 0x140131522
lea esi, [rbp + 0x8792]
jbe 0x14013102b
lea r11d, [rbp + 0xa6c7]
ror r12d, 0xfa
or edx, 0x39eef4eb
lea ecx, [rcx - 0xe4db]
jmp fcn.140131559
jmp 0x140131736
test r10d, r10d
je 0x140131a7c
xor eax, eax
mov dword [rbp + 0x128], 0xf6f6f6f6
mov word [rbp + 0x14e], ax
jmp 0x1401314b8
mov r11d, r10d
mov r9d, r15d
sub r11, 0x10
je 0x140131a62
lea rax, [rbp + 0x136]
sub r8, rax
jmp 0x140131a26
mov dword [rbp - 0x57], 0x7a738478
mov dword [rbp - 0x7a], 0xf6f6f6f6
mov dword [rbp - 0x53], 0x76766b2a
mov dword [rbp - 0x76], 0xf6f6f6f6
jne 0x140131603
je 0x140131603
pushf
movabs r10, 0x60f4f300000106e9
call rax
lea edi, [rcx - 0xa9a7]
jmp rcx
jmp 0x14013170e
cmp edx, 0xc
jb 0x1401318eb
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg r15, rdx
mov r15, rdx
xchg r15, rdx
mov dword [rsp + 0x36], 0x797c7c4f
je 0x140131669
jne 0x140131669
jns 0x14013195d
bswap rsi
call rax
cmp ebp, 0xe5e190dc
ret
jmp 0x140131961
mov dword [rsp + 0x76], 0xf6f6f6f6
mov dword [rbp - 0x63], 0x6f2a6f7d
mov dword [rsp + 0x7a], 0xf6f6f6f6
mov dword [rbp - 0x5f], 0x6b7c7e82
mov dword [rsp + 0x7e], 0xf6f6f6f6
mov dword [rbp - 0x5b], 0x7f397e6d
mov dword [rbp - 0x7e], 0xf6f6f6f6
jmp 0x1401315df
mov r10, qword [rax + 0x50]
xchg r10, r8
mov rax, qword gs:[0x60]
xchg rcx, r11
jmp 0x1401316e7
mov r11, qword [rax + 0x18]
xchg r11, rcx
xchg rdi, rax
mov rdi, qword [rcx + 0x10]
jmp 0x140131759
xchg r9, r15
mov rdx, r9
xchg r15, r9
mov dword [rbp - 0x67], 0x6b6f765a
jmp 0x140131676
mov dword [rbp - 0x4f], 0x73764d2a
mov dword [rbp - 0x72], 0xf6f6f6f6
mov dword [rbp - 0x4b], 0x2a7e786f
mov dword [rbp - 0x6e], 0xf6f6f6f6
mov dword [rbp - 0x47], 0x6f767370
mov dword [rbp + 0x142], 0xff5eff66
mov dword [rbp + 0x130], 0xf6f6f6f6
mov dword [rbp + 0x146], 0xff77ff6f
jmp 0x140131925
xchg rdi, rax
movzx r10d, word [rax + 0x48]
shr r10d, 1
test r8, r8
je 0x140131a7c
jmp 0x14013159f
inc rdx
cmp rdx, 0xc
jb 0x140131939
jmp 0x1401315c0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
xchg r10, r8
jmp 0x1401316cf
add ecx, ecx
mov ebx, dword [rcx + rdx*4]
add rbx, r9
mov byte [rsp + rax + 0x4b], r15b
inc rax
cmp rax, 0xa
jb 0x14013183b
jmp 0x140131819
add cl, al
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r15b
inc rdx
jmp 0x140131865
cmp rdx, 5
jb 0x140131975
xor eax, eax
mov dword [rsp + 0x72], 0xf6f6f6f6
mov byte [rbp - 0x41], al
jmp 0x1401316f9
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jmp 0x140131914
jne 0x140131a3f
inc edx
add rcx, 2
jmp 0x140131621
mov dword [rbp + 0x14a], 0xff66ff7a
nop word [rax + rax]
movzx eax, word [rbp + rdx*2 + 0x136]
movzx ecx, byte [rbp + rdx + 0x128]
add cx, ax
mov word [rbp + rdx*2 + 0x136], cx
mov byte [rbp + rdx + 0x128], r15b
jmp 0x140131783
and bh, dh
invalid
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x30]
movzx ecx, byte [rsp + rdx + 0x36]
je 0x140131985
jne 0x140131985
movabs r12, 0x591828fffffec8e9
mov ebp, 0xd1f12246
lea r12d, [rdi + 0xab75]
cmp rbx, rdi
jmp 0x140131740
jmp 0x140131852
invalid
nop word [rax + rax]
mov edx, r15d
lea rcx, [rbp + 0x136]
jmp 0x1401318e5
inc r9d
nop
sub r8, 0x598ddead
add r8, 0x598ddeaf
movsxd rax, r9d
cmp rax, r11
jb 0x140131a30
jmp 0x140131a62
mov rax, r15
nop
mov byte [rbp + rax + 0x136], r15b
inc rax
cmp rax, 0x18
jb 0x140131a67
mov rax, qword gs:[0x60]
jmp 0x140131bb9
xchg rdi, r8
lea r8, [rbp + 0x150]
mov eax, dword [r13 + 0x54]
lea rdx, [rbp + 0x158]
je 0x140131db5
jne 0x140131db5
dec r13
dec r9
lea r15d, [rcx - 0x6146]
popfq
xor r9d, 0x2d9b400d
rcr r9d, 0x1d
rcr ecx, 0x1d
lea esi, [rdi - 0xe66b]
mul rbx
call rax
cmp r8d, 0x2b23b524
rcr r10d, 0xd4
push r14
lea edx, [rbx + 0x4c94]
movabs rbx, 0x13274d000004c5e9
test r13, rcx
jmp 0x140131a0e
jmp 0x14013227f
mov eax, dword [rbp + 0xdc]
mov dword [rbp + 0x1b0], eax
jne 0x140131ea8
je 0x140131ea8
inc r12
cpuid
jo 0x140131307
lea r10d, [rbx + 0xe99f]
popfq
popfq
and edi, 0xe0900e7b
popfq
jnp 0x1401320a1
test ebp, 0xe075bd5f
rol ecx, 0x8f
movabs rdi, 0x5353a1000003f9e9
jmp 0x1401322a6
pause
lea edi, [rbp - 0xa8b5]
lea ebx, [rbx + 0xe9b3]
js 0x140132c0d
ror ecx, 0xdf
ret
xchg r13, rax
mov qword [rsp + 0x20], r13
xchg r13, rax
call r12
movzx eax, word [r13 + 6]
lea rbx, [r13 + 0x108]
lea rcx, [rax + rax*4]
jmp 0x1401323e4
jmp fcn.140131f2e
mov eax, dword [r13 + 0xa4]
mov dword [rbp + 0x1b4], eax
cmp rdx, rdi
jae 0x1401321f3
lea rax, [rdx + rdi]
mov qword [rbp + 0x230], rax
jmp 0x1401321f3
cmp rcx, rdi
jae 0x14013241c
lea rax, [rcx + rdi]
jmp 0x140132411
mov qword [rbp + 0x150], rax
mov r9d, 4
lea rax, [rbp + 0x110]
mov dword [rbp + 0x110], r15d
mov rcx, 0xffffffffffffffff
jmp 0x140132025
mov ecx, dword [r13 + 0xa0]
xchg r14, rcx
mov qword [rbp + 0x238], r14
xchg r14, rcx
je 0x1401322c3
jne 0x1401322c3
mul r14
movabs rbp, 0x79cbf1ffffff05e9
je 0x1401328d6
jmp 0x1401321cd
jno 0x140131833
popfq
test r9, rbx
ret 0x10
jae 0x140132d71
nop dword [rax]
cmp dword [rbx + 0x10], r15d
jmp fcn.14013237d
lea rax, [r13 + 0x108]
lea rax, [rax + rcx*8]
cmp rbx, rax
jmp 0x1401322de
xchg r8, rax
mov qword [rbp + 0x238], r8
xchg r8, rax
xchg r8, rdi
mov qword [rbp + 0x158], r8
jmp 0x140131d63
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
call fcn.140134050
test dil, dil
jmp 0x140132927
invalid
cmp eax, 0xc000008c
jne 0x1401327ee
nop
jmp rcx
lea r9, [rbp + 0x1b0]
mov dword [rsp + 0x20], 2
lea r8, [rbp + 0x230]
mov edx, r14d
jmp 0x1401325b9
ret
and edx, 0xc779227e
rol r8d, 0x96
bswap r12
jmp 0x14013285f
add rsi, rax
mov dword [rsp + 0x58], r15d
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], r14
call r12
jmp 0x140132743
cmovae eax, dword [rbx + 0x10]
mov rcx, 0xffffffffffffffff
mov r14d, eax
lea rax, [0x140000000]
jmp 0x1401328ac
test al, 0x40
je 0x140132a58
and eax, 0xffffffbf
mov r9d, 0x20
or eax, 0x20000020
jmp 0x1401329c9
jne 0x140132fa0
mov eax, dword [rbx + 0x24]
test eax, eax
js 0x140132a58
jmp 0x14013290c
mov dword [rsp + 0x58], r9d
mov dword [rbx + 0x24], eax
jmp 0x140132a5d
mov r9d, dword [rsp + 0x58]
lea rax, [rsp + 0x58]
mov rcx, 0xffffffffffffffff
lea r8, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x40]
call r12
jmp 0x140133130
je 0x140132d2f
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0xff427f00
jmp 0x140133061
test dl, dl
je 0x140132d26
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
jmp 0x140133049
je 0x140133c13
cmp dword [rax + 4], r15d
je 0x140133c13
mov rax, qword gs:[0x60]
lea r14, [rdi + rcx]
mov rax, qword [rax + 0x18]
jmp 0x1401331f0
neg r9
div r8
rcr r9d, 0x3e
jnp 0x140131e6c
call rax
pushf
jne 0x140132bd2
je 0x140132bd2
or r13d, 0xd84ab098
movabs r9, 0x16dd7d00000311e9
lea r9d, [rdx + 0x1db3]
call rax
lea r15d, [rbp + 0x1bc7]
lea r14d, [rbx - 0x2eef]
jmp rcx
jmp 0x140132ee8
mov qword [rsp + 0x20], r9
xchg r9, rax
lea rdx, [rbp + 0x158]
add byte [rax], al
jmp 0x140132ffb
test esp, ebx
test r10, rdi
jmp 0x140132bb1
cmp r8d, 0xc51cd0c1
je 0x14013322b
test r9d, r9d
jne 0x140132a95
mov rax, qword [rax]
jmp 0x1401331f8
jb 0x1401322e7
lea rdi, [0x140000000]
mov r9d, dword [rbp + 0x110]
lea rax, [rbp + 0x110]
lea r8, [rbp + 0x150]
test dword [rax + 1], edx
add byte [rax], al
xchg r9, rax
jne 0x140132dc7
je 0x140132dc7
cmp edx, 0x45a39ef7
int3
jmp 0x140132c01
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140132d2f
mov r9d, dword [rbx + 0x18]
test r9d, r9d
jmp 0x140132a80
rcr edi, 0x8e
call rcx
jmp 0x140132659
movzx eax, word [r13 + 6]
add rbx, 0x28
lea rdx, [rax + rax*4]
jne 0x140132fe1
je 0x140132fe1
lea ebx, [rbx + 0x90dc]
ret
jmp 0x140133201
mov rcx, 0xffffffffffffffff
call r12
lea rax, [0x140134300]
mov ecx, dword [rax]
test ecx, ecx
jmp 0x140132ace
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x140132abf
jmp 0x140132d19
lea rdx, [r11 + r9*4]
mov ecx, dword [rdx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
jmp 0x140132ab5
cmp eax, 0xc0000096
jne 0x140132fa0
nop
rcl esi, 0xe7
neg r12
jmp 0x1401331d3
div rdx
jmp rax
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
jmp 0x140132e40
lea rax, [r13 + 0x108]
lea rax, [rax + rdx*8]
cmp rbx, rax
jmp 0x140132d64
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
jmp 0x140133290
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0xf71d6de4
jmp 0x1401332d8
mov qword [rsp + 0x30], rdi
mov rax, qword [rax + 0x10]
nop dword [rax]
xchg r10, r12
jmp 0x140133266
mov r12, qword [rax + 0x30]
xchg r12, r10
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
jmp 0x1401332f4
mov edi, dword [rcx + rdx*4]
mov rax, qword [rax + 0x18]
add rdi, r10
jmp 0x14013324e
add rcx, r10
movzx edx, word [rax + r9*2]
mov rax, qword gs:[0x60]
jmp 0x140133281
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x1401332ec
jmp 0x1401332c4
cmp edx, 0x7e3857a8
je 0x14013332c
test r9d, r9d
jmp 0x14013331e
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1401332d0
nop
movsx ecx, cl
jmp 0x1401332a6
cmp rbx, r10
je 0x140133324
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140133324
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
jmp 0x140133239
jne 0x140133239
mov rax, qword [rax]
jmp 0x14013325e
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
mov dword [rsp + 0x5c], 0xf6f6f6f6
jmp 0x140133364
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140133479
cmp edx, 0xe52cbd63
jmp 0x140133468
mov dword [rsp + 0x67], 0x7c6f7d7f
mov dword [rsp + 0x60], 0xf6f6f6f6
movzx edx, word [rax + r9*2]
mov dword [rsp + 0x6b], 0x6e383c3d
mov word [rsp + 0x64], 0xf6f6
mov word [rsp + 0x6f], 0x7676
mov r12d, dword [rcx + rdx*4]
jmp 0x1401333ce
inc rdx
cmp rdx, 0xa
jb 0x140133424
xor edx, edx
lea rcx, [rsp + 0x67]
jmp 0x140133454
mov r8d, r15d
movsxd rcx, dword [rax + 0x3c]
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
nop dword [rax]
jmp 0x140133485
xchg rdx, r13
mov r13, r15
xchg rdx, r13
add r12, r10
xor eax, eax
mov byte [rsp + 0x71], al
jne 0x140133408
je 0x140133408
xor ebx, 0xa207a811
mul rsi
jnp 0x14013289a
jmp rcx
jmp 0x14013341d
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x67]
movzx ecx, byte [rsp + rdx + 0x5c]
add cl, al
mov byte [rsp + rdx + 0x67], cl
mov byte [rsp + rdx + 0x5c], r15b
jmp 0x140133398
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14013346e
jmp 0x140133476
mov r8d, 0x800
call rdi
xchg r9, rax
mov rax, r9
xchg r9, rax
jmp 0x1401333b1
je 0x1401334a2
inc r8d
jmp 0x14013348d
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x140133345
nop dword [rax + rax]
mov ecx, r8d
lea rdx, [r9 + rcx*4]
mov ecx, dword [rdx + r11]
mov edx, 0x38b5fb8
jmp 0x14013343e
mov eax, dword [r10 + r9 + 0x24]
add rax, r9
mov ecx, r8d
movzx edx, word [rax + rcx*2]
xchg r15, rax
jne 0x1401334f3
je 0x1401334f3
lea ebp, [rdx + 0xcaef]
ret
jmp 0x140133767
je 0x1401338a0
mov eax, dword [r14 + 0x10]
test eax, eax
je 0x1401337ce
mov edx, edi
jmp 0x14013356b
mov r11, rax
xchg r11, rsi
test rax, rax
jmp 0x140133649
xor edx, edx
call rdi
xchg r11, rsi
je 0x14013355a
jne 0x14013355a
test r13d, 0x5ee5ab91
mov edx, 0xe82c6d7f
cmp r9, rdi
pushfq
movabs r9, 0x483e005c6388d3eb
call fcn.1401341be
popfq
ret 0x18
jmp 0x14013352f
add rdx, rax
lea rax, [0x140000000]
mov qword [rdx + rax], r8
jmp 0x140133821
add rax, rdx
movzx edx, dx
test rcx, rcx
xchg r9, rcx
je 0x140133591
jne 0x140133591
ret
jmp 0x140133618
mov ecx, dword [r14 + 0xc]
xor r8d, r8d
add rcx, rax
jne 0x1401335c3
je 0x1401335c3
pushfq
inc r10
div r15
lea ebp, [rdx - 0xb638]
mov ebx, 0xe2d55b6d
div r10
movabs rsi, 0x4eb929ffffff75e9
lea ebp, [rcx - 0x761b]
lea edx, [rdi + 0x6f3a]
jmp 0x14013451c
jmp 0x14013353d
xchg r15, rax
mov r8, r15
xchg r15, rax
test rax, rax
jmp 0x140133516
add rbx, rax
mov edi, r15d
mov rcx, qword [rbx]
test rcx, rcx
jmp 0x140133716
mov r13d, dword [rcx + rdx*4]
add r13, r9
nop word [rax + rax]
mov byte [rsp + rax + 0x67], r15b
jmp 0x14013369e
mov r9, rsi
xchg r9, rcx
cmovns rdx, rax
call r12
jne 0x140133633
je 0x140133633
pause
pushfq
popfq
call rcx
syscall
movabs r8, 0x3e24efba6abba7eb
or r13d, 0xc771f42b
cpuid
call fcn.1401329d6
jmp 0x1401335dc
je 0x140133ca5
mov ecx, dword [r14]
test ecx, ecx
jne 0x14013365e
mov ecx, dword [r14 + 0x10]
mov ebx, ecx
lea rax, [0x140000000]
je 0x140133684
jne 0x140133684
inc rbp
ror r11d, 0x79
pushf
rcr r10d, 0x96
pushfq
bswap r11
jbe 0x140134254
movabs rsi, 0x81d1bffffff62e9
neg rsi
div rbp
lea r15d, [rbx - 0xd5c5]
jmp 0x1401335e6
jmp 0x1401335eb
inc rax
cmp rax, 0xa
jb 0x14013360e
cmp dword [r14 + 0xc], r15d
jmp 0x1401336b4
je 0x140133fc1
lea rax, [0x140000000]
nop
jmp 0x14013359e
xchg rcx, rdx
nop
neg rax
add rax, 0xfffffffffffffffe
neg rax
jne 0x1401336f4
je 0x1401336f4
bswap rbx
jb 0x140132cbf
pushf
call rax
cmp rsi, rbx
pop r15
lea r8d, [rdi - 0xa88a]
movabs r15, 0x72f961fffffe85e9
mov esi, 0x243f1d80
bswap r11
jnp 0x140133e2d
jmp 0x14013357e
inc r10
jl 0x140134555
ret 0x28
je 0x14013388c
xchg rdx, rcx
mov rcx, rdx
je 0x14013375a
jne 0x14013375a
pushf
rcr r10d, 0x4d
inc r12
cpuid
jmp rax
jmp 0x1401336c7
mov r15, rax
xchg r15, rax
mov ecx, dword [r10 + r9 + 0x1c]
add rcx, r9
jne 0x1401337a3
je 0x1401337a3
jmp rax
jmp 0x1401335fc
mov rax, qword [rbx]
lea rcx, [0x140000000]
xchg r8, r10
jne 0x1401337e1
je 0x1401337e1
movabs rcx, 0x34be699626d130eb
call fcn.140134433
js 0x14013416b
jmp 0x140133813
lea r8d, [rdi - 0x7e21]
and r13d, 0xd196109f
jmp rax
mov qword [rcx + rax], r10
xchg r8, r10
lea rax, [0x140000000]
mov rcx, qword [rbx + 8]
sub rbx, 0xfffffffffffffff8
neg edi
jmp 0x140133844
cmp dword [r14 + 0xc], r15d
je 0x140133fc1
mov rdi, qword [rsp + 0x30]
jmp 0x14013359e
add edi, 0xfffffff8
neg edi
xchg rcx, rdx
je 0x14013386e
jne 0x14013386e
xor r13d, 0x52625f2a
jbe 0x140134581
rol r8d, 0xe0
lea ebx, [rdx - 0x869c]
pop rsi
rol r11d, 0xb9
movabs r11, 0x65959a83b280deb
test rcx, rdi
pushfq
ret 8
jmp 0x14013387d
mov rcx, rdx
xchg rcx, rdx
test rcx, rcx
jne 0x1401336cb
nop
add r14, 0x2a1c0302
sub r14, 0x2a1c02ee
jmp 0x140133830
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg rsi, rdx
mov rsi, r15
xchg rdx, rsi
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
jmp 0x140133b6c