Function at 0x1401316e6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add byte [rax], al
inc eax
add dword [rax], eax
add bh, al
test r14b, r14b
div dh
test bh, 0x45
enter 0x4f2a, 0x78
jno 0x140130f94
mov r14b, r14b
div dh
test bh, 0x45
int3
mov dl, 0xff
dec dword [rdi]
movabs byte [0x49ffff91bcad8d44], al
dec eax
ret
ror ebp, 0xa9
neg r11
movabs rdi, 0xc45bd000005bde9
ret
jne 0x1401316d6
cmp dword [rbx + 1], 0x63727372
je 0x1401323a1
cmp dword [rbx], 0x54494e49
je 0x1401323a1
cmp dword [rbx + 0xc], 0xfffffffe
jne 0x140131a08
jmp 0x140131ac5
mov eax, dword [rbx + 1]
cmp eax, 0x74616469
jne 0x140131b8a
cmp byte [rbx + 5], 0x61
jne 0x140131b9f
mov dil, 1
jmp 0x140131b9f
add byte [rax], al
push r11
jmp rcx
xor dil, dil
cmp byte [rbx], 0x2e
jne 0x140131b9f
jne 0x140131a55
je 0x140131a55
rol r15d, 0x80
ret
jmp 0x140131930
nop
cmp r10, rbp
ror r13d, 0xbd
call rcx
pushfq
test r12d, 0x957d5885
jmp rax
cmp dword [rbx + 0x10], r13d
je 0x1401323a1
cmp dword [rbx + 0x14], r13d
je 0x1401323a1
cmp byte [rbx], 0x2e
jmp 0x1401316c3
ret
cmp eax, 0x74616470
jne 0x140131b9f
cmp byte [rbx + 5], 0x61
je 0x1401323a1
mov eax, dword [rbx + 8]
lea r8, [rsp + 0x30]
jmp 0x140131ed6
lea edx, [rdi + 0xd516]
jmp 0x140130305
call rax
lea edx, [rdx - 0xf5c8]
jmp rax
xchg r14, rsi
call r12
cmp eax, 0xc000008c
jne 0x140131e06
nop
jmp 0x140131c1e
mov r9d, 0x20
mov ecx, 0x20
or eax, 0x20000020
mov dword [rbp + 0x20], r9d
mov dword [rbx + 0x24], eax
jmp 0x1401320f1
test rdx, rcx
jl 0x14013203f
add byte [rax], al
lea r15d, [rbx - 0xaa7]
jne 0x140131d92
je 0x140131d92
or ecx, 0x851f841b
sub edx, 0x29b25f0f
int3
jmp 0x140131cae
xchg ebp, eax
call rcx
call rcx
call fcn.140132291
rol r13d, 0xa1
dec r11
cmp ebx, 0xb744c5f6
pushf
ret
lea r8, [rbp + 0x1a0]
mov edx, r14d
mov rcx, rsi
call fcn.1401338a0
test dil, dil
jmp 0x140131f16
lea r9, [rbp + 0x120]
mov dword [rsp + 0x20], 2
jmp 0x140131de8
mov qword [rsp + 0x20], r15
xchg r15, rax
xchg r14, rsi
mov qword [rsp + 0x30], rsi
jne 0x140131e46
je 0x140131e46
jle 0x140131014
rcr r14d, 0x15
jge 0x140132b83
lea r10d, [rcx + 0x8b04]
movabs r12, 0x52829dfffffeeae9
bswap r15
pushfq
ror esi, 0x8d
rcl r9d, 0x88
call fcn.140131828
lea ebp, [rbx + 0x81c6]
pop rcx
test r14, rbp
jmp rcx
jmp 0x140131d35
mov r14d, eax
lea rax, [0x140000000]
add rsi, rax
mov dword [rbp + 0x20], r13d
lea rax, [rbp + 0x20]
mov qword [rsp + 0x48], rsi
xchg r15, rax
jmp 0x140131e1a
cmp eax, dword [rbx + 0x10]
lea rdx, [rsp + 0x48]
mov esi, dword [rbx + 0xc]
mov r9d, 0x40
cmovae eax, dword [rbx + 0x10]
mov rcx, 0xffffffffffffffff
jmp 0x140131e93
jne 0x1401323a1
mov eax, dword [rbx + 0x24]
test eax, eax
js 0x1401320ed
test al, 0x40
je 0x1401320ed
and eax, 0xffffffbf
jmp 0x140131d4c
test r12, rbp
test esp, ebp
cmp r9, rcx
js 0x1401329ce
jns 0x140131d4d
mul r11
jle 0x1401324b8
or r10d, 0xdc1f25e5
jmp 0x140130fbb
invalid
invalid
mov r9d, dword [rbp + 0x20]
lea rax, [rbp + 0x20]
mov rcx, 0xffffffffffffffff
lea r8, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x48]
je 0x14013211d
jne 0x14013211d
jmp rax
jmp 0x1401321eb
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140132749
add eax, 0x8b440000
sbb r9b, bpl
xchg ebx, eax
add al, byte [rax]
add bh, bh
loopne 0x1401320e5
mov r9d, dword [rbx + 0x18]
jmp 0x1401323e8
jmp rax
lodsd eax, dword [rsi]
add al, 0x9b
add byte [rax], al
lea r15d, [rdx + 0xb63d]
add r9d, 0xc83cada0
jne 0x1401321a8
je 0x1401321a8
ret
jmp 0x140132816
call r12
cmp eax, 0xc0000096
jne 0x1401323a1
nop
jne 0x14013106a
jmp 0x140132477
xchg r8, rax
mov qword [rsp + 0x20], r8
xchg r8, rax
lea rdx, [rbp + 0xe0]
mov rcx, 0xffffffffffffffff
jmp 0x140132751
test ecx, ecx
je 0x140133013
cmp dword [rax + 4], r13d
jmp 0x1401322e2
ret 8
xor r12d, 0x7f0a8923
lea ebx, [rdi + 0x505b]
pushf
and edx, 0x8e939de5
jmp 0x140132155
je 0x140133013
mov rax, qword gs:[0x60]
lea r14, [rdi + rcx]
mov rax, qword [rax + 0x18]
jmp 0x140132628
mov ecx, dword [rdx + r11]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140132740
nop
jmp 0x140132378
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
jmp 0x140132486
movzx eax, word [r15 + 6]
jne 0x1401323cb
je 0x1401323cb
jge 0x140132563
lea r12d, [rdi + 0xb8b3]
cmp rdx, rdi
cli
div r14
pop r8
jp 0x1401332d6
invalid
invalid