Function at 0x1401344ba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
retf
cmp ecx, 0xfb55c381
je 0x140134546
inc r8d
jmp 0x14013448c
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x1401344b5
jmp 0x140134413
mov r10d, r8d
lea rcx, [rdi + r10*4]
mov edx, dword [rcx + r9]
mov ecx, 0x1901977e
jmp 0x1401344a1
add rdx, r9
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x14013441f
nop dword [rax]
movsx eax, al
jne 0x1401344ec
je 0x1401344ec
add r8d, 0x233e46ef
ror edi, 0xb6
lea ebx, [rdx - 0xddc2]
lea ebx, [rbp - 0xf40f]
dec rbx
lea r13d, [rcx + 0xdb08]
sub r12d, 0x3e254a8d
lea r9d, [rbx + 0x228c]
movabs r9, 0xe7333ffffff4fe9
xor edi, 0x5738491f
ja 0x14013485c
jmp 0x140134440
dec r11
rol r9d, 0x44
ror ebx, 0x8a
call 0x140134a40
mov ecx, dword [r11 + r9 + 0x24]
mov rax, rbx
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [r11 + r9 + 0x1c]
add rcx, r9
jmp 0x140134739
mov rax, qword [rcx + 0x10]
xchg rcx, rbx
mov rbx, qword [rax]
jmp 0x140134727
mov rax, rbx
mov byte [rbp + rax + 0x1d], bl
inc rax
cmp rax, 0x33
jb 0x140134575
jmp 0x1401345d6
cmp rdx, 0x33
jb 0x14013462a
mov r9d, 0x10
lea r8, [rbp - 0x33]
lea rdx, [rbp + 0x1d]
xor ecx, ecx
call r10
jmp 0x140134572
invalid
je 0x140134884
inc ebx
jmp 0x140134815
cmp rsi, 1
jne 0x1401345ea
mov dword [rbp - 0x39], 0xf6f6f6f6
xchg rdx, rcx
mov rcx, rbx
jmp 0x14013481d
mov rax, rbx
mov byte [rbp + rax - 0x33], bl
inc rax
cmp rax, 5
jb 0x1401345d9
mov rax, qword gs:[0x60]
jmp 0x140134718
mov dword [rbp + 0x45], 0x2a6f727e
mov dword [rbp + 0x15], 0xf6f6f6f6
mov dword [rbp + 0x49], 0x6f73764d
mov word [rbp + 0x19], 0xf6f6
mov dword [rbp + 0x4d], 0x387e78
mov byte [rbp + 0x1b], 0xf6
jmp 0x140134623
nop dword [rax]
movzx eax, byte [rbp + rdx + 0x1d]
movzx ecx, byte [rbp + rdx - 0x17]
add cl, al
mov byte [rbp + rdx + 0x1d], cl
mov byte [rbp + rdx - 0x17], bl
inc rdx
jmp 0x14013458b
mov dword [rbp + 0x39], 0x6e6f7c73
mov dword [rbp + 9], 0xf6f6f6f6
mov dword [rbp + 0x3d], 0x2a797e2a
mov dword [rbp + 0xd], 0xf6f6f6f6
mov dword [rbp + 0x41], 0x2a787f7c
mov dword [rbp + 0x11], 0xf6f6f6f6
jne 0x140134680
je 0x140134680
rcl ebx, 0xad
lea r15d, [rdi + 0xc527]
movabs r13, 0x4105f9ffffff73e9
test r15d, 0x3ab3898e
jmp rcx
jmp 0x1401345f8
mov rsi, rbx
xchg rdx, rsi
mov dword [rbp + 0x1d], 0x762a7e4b
mov dword [rbp - 0x13], 0xf6f6f6f6
mov dword [rbp + 0x21], 0x7e7d6b6f
jmp 0x140134855
mov byte [rbp + rdx - 0x33], cl
mov byte [rbp + rdx - 0x39], bl
inc rdx
cmp rdx, 5
jb 0x140134761
mov dword [rbp - 0x17], 0xf6f6f6f6
xchg rdx, rsi
jmp 0x1401346a2
mov edx, 0xac5c78f1
lea rax, [r11 + r9*4]
mov ecx, dword [rax + r8]
add rcx, r8
movzx eax, byte [rcx]
inc rcx
jmp 0x140134836
movzx eax, byte [rcx - 1]
test al, al
jne 0x140134841
cmp edx, 0xa85359d3
jmp 0x1401345ad
xchg r12, rcx
mov r12, qword [rax + 0x18]
xchg rcx, r12
jmp 0x140134563
xchg rbx, rcx
xchg r8, r10
mov r10, qword [rcx + 0x30]
xchg r10, r8
jmp 0x1401347fd
mov r10d, dword [rcx + rdx*4]
add r10, r9
mov byte [rbp + rax - 0x22], bl
inc rax
cmp rax, 0xa
jb 0x140134740
jmp 0x1401345ba
nop word [rax + rax]
movzx eax, byte [rbp + rdx - 0x33]
movzx ecx, byte [rbp + rdx - 0x39]
add cl, al
jne 0x1401347b5
je 0x1401347b5
ja 0x140134672
cmp r13d, 0x21577076
lea r14d, [rcx + 0x1acd]
test r13, rcx
cpuid
lea r11d, [rdx - 0x6894]
or r8d, 0xad5b36d3
test r10d, 0xfd58e1ad
pushfq
ror r8d, 0xa0
call rax
neg r9
bswap rbp
xor r10d, 0x8a3fece3
movabs r12, 0xa863cffffff08e9
je 0x140133f81
jmp 0x1401346c2
cmp r14d, 0x505cd5e1
mov r10d, 0x915d0c2f
call fcn.1401344ba
mov dword [rbp - 3], 0xf6f6f6f6
mov dword [rbp + 0x31], 0x2a6f7c6b
mov dword [rbp + 1], 0xf6f6f6f6
mov dword [rbp + 0x35], 0x7f7b6f7c
mov dword [rbp + 5], 0xf6f6f6f6
jmp 0x140134646
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
mov r11d, dword [r10 + r8 + 0x20]
nop dword [rax]
mov r9d, ebx
jmp 0x1401346e6
xchg rcx, rdx
mov dword [rbp - 0x33], 0x797c7c4f
mov byte [rbp - 0x35], 0xf6
mov word [rbp - 0x2f], 0x7c
jmp 0x140134756
test al, al
je 0x1401345b3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
jmp 0x140134701
mov dword [rbp - 0xf], 0xf6f6f6f6
mov dword [rbp + 0x25], 0x4c51422a
mov dword [rbp - 0xb], 0xf6f6f6f6
mov dword [rbp + 0x29], 0x2a70792a
mov dword [rbp - 7], 0xf6f6f6f6
mov dword [rbp + 0x2d], 0x2a574b5c
jmp 0x1401347d5
mov ecx, dword [r10 + r8 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + r8 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
mov edx, 0xc000009a
jmp 0x1401348b8
xchg rdi, r13
mov r13, qword [r11 + 0x20]
xchg rdi, r13
mov rsp, r11
jmp 0x14013493a
add rax, r8
mov rcx, 0xffffffffffffffff
lea r11, [rsp + 0xb0]
jne 0x140134908
je 0x140134908
popf
push r9
cmp edx, 0x4b86cec9
jns 0x14013515a
xor r14d, 0x548a37e9
rol edx, 0x1d
cmp rcx, rbp
add ecx, 0x260bb7e9
lea edi, [rbp - 0xee64]
je 0x140135748
rcr ebx, 0x4f
and ecx, 0xa2201fa
movabs r12, 0x49cd137307bf1aeb
and r8d, 0xd86a745a
jmp rax
jmp 0x140134924
xchg r15, rbx
mov r15, qword [r11 + 0x10]
xchg rbx, r15
mov rsi, qword [r11 + 0x18]
jmp 0x1401348a6
jmp rax
nop
add rsp, 8
mov rbp, qword [rsp - 8]
jmp 0x140134937
lodsb al, byte [rsi]
adc dl, byte [rdx]
jge 0x14013519b
add esi, dword [rcx]
mov dh, ah
fist dword [rsi - 0x72]
sbb byte [rsi], ch
stosb byte [rdi], al
or dword [rbp + 0x50], eax
or cl, al
out dx, al
cmpsb byte [rsi], byte [rdi]
pop rbp
movabs eax, dword fs:[0x20044e32fc01db47]
ror dword [rbx + 0x74], 1
mov eax, 0x9cfb1c4a
push rax
cdq
invalid
mov ch, 0x82
cmpsb byte [rsi], byte [rdi]
call 0x1bd25644a
cmp al, 3
cmp dword [rbx - 0x4f], esp
invalid
adc dl, byte [rdx]
jge 0x1401351db
add edi, dword [rcx]
invalid
int1
adc bh, byte [rbp + 0x3c]
add esi, dword [rcx]
sub byte [rax + 0x56], ah
rol dword [rsi], cl
lodsb al, byte [rsi]
clc
sahf
movabs al, byte [0x1036252d2f886532]
push rdi
imul edi, dword [rdi + 0x61], 0xc166705b
loopne 0x140135196
cli
int1
pop rsp
invalid
xchg ebx, eax
invalid