Function at 0x140133c5d
Capabilities:
Contain obfuscated stackstrings
Execute syscall
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [r14 + 0xc]
xor r8d, r8d
add rcx, rax
xor edx, edx
jmp 0x140133c27
mov qword [rdx + rax], r8
jmp 0x140133c51
xchg r9, r8
test rax, rax
je 0x140133d01
mov eax, dword [r14 + 0x10]
test eax, eax
jmp 0x140133bbb
xchg rsi, rax
test rax, rax
je 0x140134064
jmp 0x140133b75
xchg rsi, r15
mov rcx, r15
xchg rsi, r15
cmovns rdx, rax
call r12
xchg r9, r8
mov r9, rax
jmp 0x140133aff
sub rax, 0x59fe896e
add rax, 0x59fe8970
add rax, rdx
movzx edx, dx
test rcx, rcx
jmp 0x140133b26
mov edi, r15d
mov rcx, qword [rbx]
test rcx, rcx
je 0x140133cde
xchg rcx, rdi
mov rdx, rdi
jmp 0x140133bd2
mov ecx, dword [r14]
test ecx, ecx
jne 0x140133b84
mov ecx, dword [r14 + 0x10]
mov ebx, ecx
lea rax, [0x140000000]
add rbx, rax
jmp 0x140133b5b
je 0x140133c33
mov edx, edi
add rdx, rax
lea rax, [0x140000000]
jmp 0x140133af6
xchg rcx, rdi
nop
nop
jne 0x140133bff
je 0x140133bff
ror ebx, 0x4b
div r15
rol r15d, 0xe7
jmp 0x140133b41
call rdi
xchg rsi, rax
mov rax, rsi
jmp 0x140133b16
xchg r8, rax
mov r8, qword [rbx]
xchg r8, rax
lea rcx, [0x140000000]
mov qword [rcx + rax], r8
lea rax, [0x140000000]
jmp 0x140133c51
mov rcx, qword [rbx + 8]
nop
add rbx, 0x40c1b70a
ret
invalid
mov bh, 0xc1
invalid
sub rbx, 0x40c1b702
sub edi, 0xfffffff8
xchg rdx, r15
mov r15, rcx
je 0x140133ca6
jne 0x140133ca6
jmp rax
jmp 0x140133cd2
xchg rdx, r15
test rcx, rcx
jne 0x140133bd6
sub r14, 0xffffffffffffffec
cmp dword [r14 + 0xc], r15d
je 0x1401344e9
jmp 0x140133cf1
xchg rdi, rcx
mov rcx, qword [rsp + 0x30]
xchg rdi, rcx
jmp 0x140133abd
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg rdi, rdx
mov rdi, r15
xchg rdi, rdx
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
jmp 0x140133d3e
mov word [rsp + 0x3a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
jmp 0x140133dc9
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r15b
inc rdx
cmp rdx, 5
jb 0x140133d4d
mov dword [rbp - 0x40], 0xf6f6f6f6
jmp 0x140133eac
xchg rdx, r15
mov r15, rdx
xchg r15, rdx
jmp 0x140133e2f
mov dword [rsp + 0x40], 0xf6f6f6f6
xchg r10, r15
mov rdx, r10
xchg r15, r10
mov dword [rsp + 0x46], 0x797c7c4f
mov byte [rsp + 0x44], 0xf6
je 0x1401340b3
jne 0x1401340b3
cpuid
rcr esi, 0x3b
cmp r10d, 0x1ea082fe
ror r15d, 0xcf
test r12, rcx
jmp rcx
jmp 0x14013412f
mov word [rsp + 0x4a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x46]
movzx ecx, byte [rsp + rdx + 0x40]
jne 0x140134174
je 0x140134174
test r9, rbx
jmp rcx
jmp 0x140134286
add cl, al
mov byte [rsp + rdx + 0x46], cl
mov byte [rsp + rdx + 0x40], r15b
inc rdx
cmp rdx, 5
jb 0x14013413e
mov dword [rbp + 0x68], 0xf6f6f6f6
je 0x1401342e4
jne 0x1401342e4
jge 0x140134703
jmp rax
out dx, al
mul dword [rsi - 0x3b]
lea r14d, [rdi + 0x6df0]
jge 0x1401345de
jg 0x140134f2a
call 0x1401348f3
cmp r8, rbx
call rcx
jmp rcx
jmp 0x1401344b5
mov dword [rbp + 0x74], 0xf6f6f6f6
mov dword [rbp + 0xc8], 0x6b737e73
mov rdx, r15
mov dword [rbp + 0xbc], 0x76736b50
mov dword [rbp + 0x6c], 0xf6f6f6f6
mov dword [rbp + 0xc0], 0x7e2a6e6f
mov dword [rbp + 0x70], 0xf6f6f6f6
mov dword [rbp + 0xc4], 0x78732a79
jmp 0x14013440f
mov r9, qword [rbp + 0x398]
lea rcx, [0x1401347e0]
xchg r13, r8
mov r13, qword [rbp + 0x390]
xchg r13, r8
je 0x140134536
jne 0x140134536
sub esi, 0xb63f07f2
jl 0x1401350ab
lea ecx, [rbx + 0xb263]
jno 0x1401342bb
call rcx
pushf
inc rsi
xor esi, 0xd991011c
xor r10d, 0x34a82847
movabs r14, 0x2915963454d82beb
xor r10d, 0xa3c3a088
rcr edi, 0xd9
jmp rcx
jmp 0x140134563
call rax
jmp 0x140131ace
lea rax, [0x1401347b0]
mov rax, qword [rax]
xor rax, qword [rcx]
mov rcx, qword [rbp + 0x380]
mov rdx, qword [rbp + 0x388]
jmp 0x14013455c
and r12d, 0xcb8b5a32
lea esi, [rdi + 0xb973]
dec rcx
ret
add al, 0x24
adc eax, 0xfffff8d1
mov qword [rax + 0xf8], rdx
mov rax, qword [rcx + 8]
mov qword [rax + 0x80], 1
jmp 0x140134f4a
mov rax, qword [rcx + 8]
xchg rcx, r11
mov r11, qword [rax + 0x98]
xchg rcx, r11
mov eax, 0xffffffff
mov qword [rcx], 0
jmp 0x140134f6c
ret
iretd