Function at 0x140131b84
Capabilities:
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push 0x2437d3a2
pop rdx
stc
movabs byte [0x869d2cdef76ab29c], al
lahf
iretd
mov al, 0xad
cmp al, 0x87
invalid
lea esi, [rbx]
push rbp
invalid
mov cl, 0x36
ret 0xc85c
add dl, byte [rax - 0x4176ffdf]
pop rdx
mov al, 0x56
ret 0x9695
jnp 0x140130af9
invalid
or esp, 0xfffffff4
cmp dh, byte [rax]
pushfq
mov eax, 0x15ec85a9
jne 0x140130b0e
invalid
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rcx + rcx*4 + 0x4c], cl
mov qword [rsp + 0x20], r9
xchg r10, r8
mov qword [rsp + 0x18], r10
xchg r8, r10
xchg rdx, rbp
mov qword [rsp + 0x10], rbp
jmp 0x1401310bd
je 0x1401311c4
inc r8d
jmp 0x140131044
nop
push 0x401b90ff
mov qword [rsp], rdi
nop
sub rsp, 8
jmp 0x140131098
nop dword [rax + rax]
mov r9d, r8d
mov edx, 0xaf710d4c
lea rax, [r10 + r9*4]
mov ecx, dword [rax + r11]
add rcx, r11
movzx eax, byte [rcx]
je 0x140131067
jne 0x140131067
xor r9d, 0x19fded0f
movabs r13, 0x23cca400000142e9
push r12
cmp ecx, 0x68b52a80
cmp ecx, 0x368ccb82
popfq
ret 0x30
jmp 0x1401311ae
xor r13d, r13d
mov r8d, r13d
mov r10, qword [rax + 0x18]
xchg rsi, rax
mov rsi, qword [r10 + 0x10]
xchg rsi, rax
jmp 0x140131143
mov qword [rsp], r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
sub rsp, 0x3b8
mov rax, qword gs:[0x60]
jmp 0x140131081
xchg rdx, rbp
xchg rcx, r10
mov qword [rsp + 8], r10
xchg rcx, r10
nop
push r13
jne 0x1401310f4
je 0x1401310f4
ror r13d, 0xd5
jae 0x140130617
popfq
cmp r12d, 0x43df49a7
bswap r12
rcr r13d, 0xb5
lea r9d, [rcx - 0xdb62]
movabs rcx, 0x13dcb5f9502517eb
lea r10d, [rbx - 0x45e1]
lea r9d, [rcx - 0xb6f3]
ret 0x10
jmp 0x14013110d
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rbx
sub rsp, 8
jmp 0x14013102b
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401311bc
cmp edx, 0xeb8fbdbf
jmp 0x14013101d
xchg rbp, r10
mov rbp, qword [rax]
xchg r10, rbp
mov r11, qword [r10 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov ebx, dword [rax + r11 + 0x88]
mov r10d, dword [rbx + r11 + 0x20]
jne 0x140131191
je 0x140131191
dec rdx
jg 0x140131091
int3
jmp 0x14013103f
inc rcx
test al, al
je 0x140131023
ror byte [rdi], 0x84
push 0xfffffffffffffffe
invalid
nop dword [rax]
movsx eax, al
jmp 0x140131120
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + r11 + 0x1c]
jne 0x14013121b
je 0x14013121b
jle 0x14013085a
call [rbp - 0x5c7572bc]
cwde
add byte [rax], al
popfq
lea r9d, [rdx + 0x98a3]
popf
cmp r9, rcx
test esi, 0xf880b656
ror r12d, 0xd6
lea r8d, [rdi + 0xad8c]
and r12d, 0x46bf1933
pushf
lea edi, [rdi + 0x8eb4]
movabs r11, 0x613fa65101d12ceb
popfq
xor r12d, 0x887f8228
sub edi, 0xe9351e29
xor r8d, 0x55ad7c99
jne 0x140130369
jmp 0x140131249
test edx, 0xfc92c462
jmp 0x1401309ca
add rcx, r11
mov edi, dword [rcx + rdx*4]
mov rcx, qword [rax + 0x18]
add rdi, r11
mov rax, qword [rcx + 0x10]
jmp 0x14013134a
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
mov r10d, r8d
mov edx, 0x4078ad54
lea rax, [r9 + r10*4]
je 0x1401312a1
jne 0x1401312a1
pushfq
cmp r12d, 0xf23d7edd
rol ecx, 0xfb
test r10d, 0xe42896a0
lea edi, [rcx - 0x6f87]
test ebx, 0x35de6627
movabs r11, 0x1317f0000000cde9
rcl r11d, 0x22
rol r15d, 0xe5
call rax
xor r8d, 0xfa0d7fd8
call 0x140131b84
jmp 0x140131373
inc rcx
test al, al
je 0x140131342
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
je 0x1401312ff
jne 0x1401312ff
lea r15d, [rbx - 0xc61a]
add ebx, 0xb3c9ec18
pop rcx
jmp rcx
jmp 0x140131360
jne 0x1401312cd
cmp edx, 0xb6ef69d8
je 0x1401313b2
inc r8d
jmp 0x140131271
mov rcx, qword [rax]
xchg rdx, r9
mov rdx, qword [rcx + 0x30]
xchg r9, rdx
movsxd rax, dword [r9 + 0x3c]
jmp 0x14013125f
retf 0x8b48
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x140131330
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
jne 0x140131390
je 0x140131390
lea r14d, [rcx - 0x1f21]
rcl r15d, 0xa8
jmp rcx
jmp 0x1401312bf
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
je 0x140131410
jne 0x140131410
call rcx
sub ecx, 0x7b81cc72
cmp r9, rbp
sub r11d, 0x83282c24
lea r14d, [rbx + 0xc634]
cmp r8d, 0x8ac1daa2
test r15, rbx
jp 0x140130e61
rcl r12d, 0xe
div rbx
cmp rbx, rdx
jns 0x140131e2b
lea esi, [rbx + 0x575a]
movabs rcx, 0x4bddc06359b453eb
test rsi, rdi
sub r8d, 0x861f9e0c
or r15d, 0x3239b201
jno 0x140130604
jmp 0x140131465
iretd
cmp r11, rdi
test rcx, rbp
jmp 0x140131f67
test al, al
je 0x1401314b1
nop dword [rax]
movsx eax, al
jmp 0x1401314f8
xchg rcx, r15
add r15, r9
mov rax, qword [rcx + 0x10]
xchg r12, rcx
mov r12, qword [rax]
xchg rcx, r12
jmp 0x1401314b9
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
xchg rcx, r15
mov r15, qword [rax + 0x18]
je 0x14013148f
jne 0x14013148f
rcr r14d, 0xfe
jae 0x140131044
cmp rdi, rbx
int3
jmp 0x14013144d
invalid
cmp edx, 0x221100a3
je 0x140131530
inc r8d
jmp 0x1401314f3
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax]
mov r10d, r8d
je 0x1401314e6
jne 0x1401314e6
neg rdx
call rcx
inc r10
neg r10
movabs r14, 0x7bdc6aa455232deb
jmp 0x140130d9c
jmp 0x140131515
jmp 0x1401314d2
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140131445
jmp 0x1401314a5
mov edx, 0x397663b8
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
jmp 0x14013143a
mov ecx, dword [rbx + r9 + 0x24]
xor r8d, r8d
add rcx, r9
mov dword [rsp + 0x28], 4
xchg rsi, r11
mov qword [rsp + 0x3b0], r11
jmp 0x140131553
xchg rsi, r11
mov dword [rsp + 0x20], 0x3000
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov r14d, dword [rcx + rdx*4]
jmp 0x14013159f
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop word [rax + rax]
mov r10d, r8d
mov edx, 0x96fe8b66
lea rax, [r11 + r10*4]
jmp 0x1401316b1
lea rdx, [rsp + 0x48]
add r14, r9
xchg r14, r13
mov qword [rsp + 0x48], r14
xchg r14, r13
lea r9, [rbp + 0xd0]
je 0x1401315fc
jne 0x1401315fc
call rax
cmp r11d, 0x117d6ea2
ror esi, 0x30
cmp r10d, 0xadddff61
lea ebp, [rbx - 0x9cef]
rcr ecx, 0xa6
xor r8d, 0xfa249bfc
dec r8
int3
jmp 0x140131684
xchg rdx, rax
mov rcx, qword [rax]
mov r9, qword [rcx + 0x30]
jmp 0x140131574
inc rcx
test al, al
je 0x140131647
jmp 0x140131667
jne 0x14013166a
cmp edx, 0x2db7b98b
je 0x1401316c0
inc r8d
jmp 0x14013158e
mov r8d, r13d
xchg rdi, rcx
mov rdi, qword [rax + 0x18]
xchg rdi, rcx
xchg rdx, rax
mov rdx, qword [rcx + 0x10]
jmp 0x140131617
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x140131635
dec dword [rax - 0x39]
test eax, edx
add byte [rax], al
add byte [rax], al
add byte [rax + 0x1f], al
mov qword [rbp + 0xd0], 0x1f400000
mov rcx, 0xffffffffffffffff
call rdi
cmp qword [rsp + 0x48], r13
je 0x140134b14
mov rax, qword gs:[0x60]
jmp 0x14013164f
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
jmp 0x140131625
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
jne 0x1401316fd
je 0x1401316fd
jl 0x140131683
lea ebx, [rcx + 0x58cb]
rol r8d, 0x45
rcl ebx, 7
jp 0x140131980
ret
jmp 0x14013171c
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov esi, dword [rcx + rdx*4]
jmp 0x1401317de
je 0x140131812
inc r8d
jmp 0x1401317f7
inc rcx
test al, al
je 0x140131732
nop dword [rax]
je 0x140131774
jne 0x140131774
rcr r13d, 0x4e
cmp ecx, 0x833e54d2
rol r11d, 0x42
rol ebx, 0x42
jne 0x1401314a2
or ecx, 0xa7caea35
pushfq
and r11d, 0xea5fc6bc
rcl r10d, 0x16
movabs rbx, 0x11ca173332b05aeb
test rcx, rbp
rol r13d, 0x60
bswap rbx
inc r12
jae 0x14013137d
jmp 0x1401317d0
call 0x140130c8c
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401317d0
cmp edx, 0xe55c37ce
jmp 0x14013172c
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
jmp 0x1401317f7
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
jmp 0x140131794
mov rcx, qword [rax + 0x18]
add rsi, r9
mov rax, qword [rcx + 0x10]
xchg r13, rcx
mov r13, qword [rax]
xchg r13, rcx
jmp 0x1401317b1
mov r10d, r8d
mov edx, 0xa7ed5d08
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
jmp 0x14013173a
mov ecx, dword [rbx + r9 + 0x24]
xorps xmm0, xmm0
add rcx, r9
xchg rcx, r13
mov qword [rsp + 0x20], rcx
xchg rcx, r13
jmp 0x140131bfe
lea rcx, [rsp + 0x30]
xchg rcx, r13
mov qword [rbp + 0xf8], rcx
xchg r13, rcx
xchg ebp, ecx
xchg rbp, rcx
movdqu xmmword [rcx + 0x108], xmm0
xchg rcx, rbp
jmp 0x140131864
xor edx, edx
xor ecx, ecx
call rbx
mov rcx, qword [rsp + 0x30]
call rdi
jmp 0x140131a0f
mov qword [rsp + 0x30], r13
call rsi
test eax, eax
jne 0x140134b14
xor al, byte [rax]
add byte [rax - 0x69], cl
xchg rdi, rax
mov rdi, qword [rsp + 0x30]
jmp 0x140131aba
jne 0x140131af5
cmp r8d, 0xd9ff9899
cmp eax, 0xd9ff9899
je 0x140131cea
test r9d, r9d
jne 0x140131c71
jmp 0x140131caa
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
mov edi, dword [rcx + rdx + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140131caa
mov r9d, dword [rdi + 0x18]
jmp 0x140131b27
lea rdx, [rsp + 0x48]
mov rcx, 0xffffffffffffffff
call r15
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
jmp 0x140131cd0
cmp r10, rcx
jb 0x14013191b
lea rax, [rbp + 0x20]
mov dword [rbp + 0x20], r13d
mov r9d, 0x20
jmp 0x140131bd8
cmp r10, rcx
jae 0x1401318eb
movabs r11, 0x47ae147ae147ae15
nop word [rax + rax]
rdtsc
shl rdx, 0x1d
shl rdx, 1
jmp 0x140131b16
shr rcx, 1
add rcx, rdx
shr rcx, 2
jne 0x140131973
je 0x140131973
rol r14d, 0x2d
jae 0x140131b0f
xor esi, 0x605fb23b
jo 0x140130b59
lea r12d, [rdx + 0xf736]
jb 0x140132500
rcl r12d, 0xa6
xor r14d, 0xd07edbbf
je 0x1401312a1
cmp rsi, rcx
rcr esi, 0xb3
movabs rsi, 0x307fd550529b22eb
lea r15d, [rbp + 0x56c9]
jmp 0x140131997
add byte [rax], al
call rcx
pause
add ebp, 0xf97081bc
call rcx
rcr r8d, 0x72
call 0x1401311cf
shr rcx, 2
shr rcx, 1
shr rcx, 1
imul rcx, rcx, 0x64
sub r8, rcx
cmp r8, 0x4b
jb 0x1401319dc
jmp 0x140131a01
mov r14, r11
xchg r14, rax
mul r8
xchg r8, r14
mov rcx, r14
xchg r8, r14
sub rcx, rdx
jmp 0x140131929
mov r8, rdx
xchg rdx, rax
xchg r14, rax
jmp 0x1401319b7
xchg rcx, rbx
mov rbx, qword [rsp + 0x48]
xchg rbx, rcx
add r10, 0x767dabdd
sub r10, 0x767d9bdd
add rcx, qword [rbp + 0xd0]
jmp 0x1401318e2
xchg r9, r13
mov rbx, r13
xchg r9, r13
jmp 0x1401319dc
test eax, eax
jne 0x140134b14
mov r9d, 0x8000
mov qword [rsp + 0x3a8], r12
lea r8, [rbp + 0xd0]
mov qword [rbp + 0xd0], r13
jmp 0x1401318c1
xchg r13, r11
mov qword [rbp + 0xf0], r11
xchg r13, r11
jne 0x140131a9c
je 0x140131a9c
jmp rax
jmp 0x14013182d
xchg rdi, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140134b14
xchg r14, r10
mov r14, qword [rsp + 0x48]
xchg r14, r10
jmp 0x140131cb2
add dword [rax], eax
add byte [rdx - 0x75], al
adc al, 0x11
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140131892
jmp 0x140131af3
nop
movsx ecx, cl
lea rdx, [rdx + 1]
jmp 0x140131b01
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jmp 0x14013187f
shl rdx, 1
shl rdx, 1
or rax, rdx
xchg rsi, r9
jmp 0x140131bb6
test r9d, r9d
je 0x140131caa
mov ebx, dword [rdi + 0x20]
nop dword [rax]
jmp 0x140131c69
pop rdi
and byte [rdi], cl
invalid
mov qword [rbp + 0x100], r15
xchg r15, r13
mov r8d, r9d
jne 0x140131b95
je 0x140131b95
test r15, rdi
mov ebx, 0x7f6dc4c0
rcl r14d, 0x47
pause
cmp ebx, 0xc7410574
or r12d, 0xfb6de7c1
lea r13d, [rbp + 0xe205]
jne 0x140132a73
add byte [rdi], cl
test esi, edi
invalid
test esi, 0x4d669a78
je 0x140131b01
rcr r13d, 0xb1
call rax
and r13d, 0x407d0496
cpuid
lea r12d, [rbp + 0x7309]
movabs rdi, 0x2c229dfffffe9ee9
lea r15d, [rdi + 0x2a83]
test r14, rbx
lea r12d, [rbp + 0x413]
rcr edx, 0x9a
call 0x140130e83
jmp 0x140131a38
mov rsi, rax
xchg rsi, r9
and r9d, 0xfff
add r9, r10
mov byte [r9], 0xc3
test rbx, rbx
je 0x140131a01
jmp 0x140131c1d
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xd0]
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x48]
call r14
xor r9d, r9d
xor r8d, r8d
jmp 0x140131852
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov edi, dword [rcx + rdx*4]
lea rdx, [rbp + 0xe8]
add rdi, r9
jmp 0x140131c50
rdtsc
shl rdx, 0x1e
shl rdx, 1
shl rdx, 1
or rax, rdx
xchg rdx, rax
je 0x140131c38
jne 0x140131c38
syscall
syscall
movabs r9, 0x5100fbfffffd93e9
jno 0x140132196
jmp 0x1401319d0
cmp r8d, 0xf97f2fb9
ret 0x28
mov qword [rbp + 0xe8], 0x30
mov r9d, 0x64
xchg r13, r15
xchg ebp, edi
jmp 0x140131b3c
nop dword [rax + rax]
dec r9d
mov r8d, 0xec9b28f8
lea rcx, [rbx + r9*4]
jne 0x140131c99
je 0x140131c99
call rcx
test rsi, rcx
xor r9d, 0xd6920d31
lea edi, [rbp - 0xa7f0]
rol ecx, 0xc6
movabs r15, 0x7b7c68fffffe3be9
add edx, 0x3029e720
ret 0x18
jmp 0x140131ad9
mov rax, qword [rax]
jmp 0x140131cdb
xchg r8, rbx
mov r8, r13
xchg rbx, r8
xchg r13, rcx
mov r13, qword [rbp + 0xd0]
xchg rcx, r13
add rcx, r10
jmp 0x1401318fe
mov rax, qword [rax + 0x10]
nop dword [rax]
xchg r10, rcx
mov rcx, qword [rax + 0x30]
xchg r10, rcx
jmp 0x1401318a0
mov ecx, dword [rdi + 0x24]
add rcx, r10
mov dword [rsp + 0x30], 0xf6f6f6f6
mov dword [rsp + 0x3b], 0x7c6f7d7f
mov dword [rsp + 0x34], 0xf6f6f6f6
mov dword [rsp + 0x3f], 0x6e383c3d
movzx edx, word [rcx + r9*2]
je 0x140131d42
jne 0x140131d42
test rbx, rcx
call rax
lea r8d, [rdi - 0x22af]
rol edi, 0x5b
cmp r13d, 0x9b6d1413
call fcn.14013254b
call 0x1401313e0
test r14d, 0x5907d7b3
movabs r15, 0x5150c600000116e9
call rcx
lea ecx, [rbp + 0xecfe]
lea r15d, [rbx - 0x9b51]
rol r10d, 0xf
jmp rax
jmp 0x140131e5d
mov word [rsp + 0x43], 0x7676
mov r9d, dword [rcx + rdx*4]
xchg rdx, r15
mov r15, r13
xchg r15, rdx
add r9, r10
xor eax, eax
jmp 0x140131d82
mov byte [rsp + 0x45], al
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x3b]
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
jmp 0x140131def
lea rcx, [rsp + 0x3b]
mov r8d, 0x800
call r9
jmp 0x140131dcd
mov edx, dword [rcx + r9]
mov ecx, 0x935f3d6f
add rdx, r9
jmp 0x140131dc0
movzx eax, byte [rdx]
inc rdx
test al, al
jmp 0x140131e3c
xchg r9, r11
mov r11, rax
xchg r9, r11
mov r8d, r13d
movsxd rcx, dword [rax + 0x3c]
mov r11d, dword [rcx + rax + 0x88]
mov ebx, dword [r11 + rax + 0x20]
jmp 0x140131e6f
mov byte [rsp + rdx + 0x3b], cl
mov byte [rsp + rdx + 0x30], r13b
inc rdx
cmp rdx, 0xa
jb 0x140131d8b
xor edx, edx
je 0x140131e10
jne 0x140131e10
div r13
movabs r14, 0x47829a495dce8aeb
inc rbx
call 0x14013291c
jmp 0x140131d9c
test al, al
jne 0x140131e45
cmp ecx, 0x5ba90b5e
or ebp, dword [rcx + 0x52840f5b]
add byte [rax], al
add byte [rcx - 1], al
shr cl, 0x3e
add byte [rax], al
add byte [rdi], cl
test dl, dh
invalid
je 0x140131e86
inc r8d
jmp 0x140131e7a
je 0x140131e34
nop dword [rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx - 1]
jmp 0x140131e20
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov word [rsp + 0x38], 0xf6f6
jmp 0x140131d64
nop word [rax + rax]
mov r10d, r8d
lea rcx, [rbx + r10*4]
jmp 0x140131daf
mov ecx, dword [r11 + r9 + 0x24]
xchg r9, rax
mov r9, r13
xchg r9, rax
jne 0x140131e98
je 0x140131e98
movabs r10, 0x41f2b2000004aae9
dec r13
lea r14d, [rcx - 0x7993]
jmp 0x140132c37
jmp 0x140132347
mov r10d, r8d
mov edx, 0x2bf209fc
jmp 0x14013210e
xor dword [rdx], eax
add byte [rax], al
nop
sub r8d, 0x922f2740
jmp 0x14013246d
or ecx, 0x3c0134ff
call rax
cmp r9, rdi
neg r10
ret 0x20
inc r8d
jmp 0x140131ed0
jb 0x14013209f
mov dword [rsp + 0x58], 0xf6f6f6f6
xchg rdx, r13
xchg edx, ebp
mov r13, rdx
je 0x140132006
jne 0x140132006
popf
pause
add r8d, 0x14fc9fa6
or r11d, 0xcab54a9e
lea r8d, [rbx + 0x524]
jmp rax
jmp 0x14013238f
jne 0x14013207c
cmp edx, 0x8edc47
je 0x1401323dd
jmp 0x140131f78
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x140132022
nop word [rax + rax]
mov byte [rsp + rax + 0x3b], r13b
inc rax
cmp rax, 0xa
jmp 0x140131fc2
cmp byte [rbp - 8], bh
syscall
or ebp, 0x677eab90
jmp 0x1401328ea
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140131f78
jmp 0x140132079
js 0x140131757
jmp rcx
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [r11 + r9 + 0x1c]
add rcx, r9
mov r10d, dword [rcx + rdx*4]
add r10, r9
nop dword [rax]
jmp 0x140132096
xchg rdx, r13
mov dword [rsp + 0x68], 0x7371784f
mov dword [rsp + 0x5c], 0xf6f6f6f6
jmp fcn.14013232a
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
jne 0x14013242f
je 0x14013242f
add edx, 0xf5e17c60
lea r9d, [rbx - 0x407]
ror esi, 0xed
popf
lea r9d, [rdx + 0x476]
push rbp
jb 0x140133329
je 0x140131886
call rax
int3
jmp 0x1401329d9
cmp r11d, 0xd75720b7
jmp 0x1401311eb
jne 0x140132490
je 0x140132490
jne 0x140132dc6
cmp r8, rbp
rol r10d, 0x25
jmp rcx
jmp 0x140132570
lea r10d, [rbx - 0x94eb]
popf
pushfq
mov edi, 0x463dd652
int3
jne 0x140133251
mov eax, dword [rbx + 1]
cmp eax, 0x74616469
jne 0x140132d2e
cmp byte [rbx + 5], 0x61
jmp 0x140132929
add eax, 0x422e961
add byte [rax], al
jp 0x140131fd1
xor r12d, 0x9ef0c1a0
sub ebx, 0x9b99976e
pause
jge 0x1401317cb
jne 0x14013252a
je 0x14013252a
call rcx
movabs rdx, 0x3a12d60000018ae9
rcl r10d, 0xde
ret 8
jmp 0x1401326b9
mov qword [rbp + 0x1a0], r13
xchg rdx, r13
mov eax, dword [r15 + 0xdc]
mov dword [rbp + 0x120], eax
test dword [rax], esp
add dword [rax], eax
add byte [rcx - 0x75], al
invalid
movabs al, byte [0x69ae9000000]
cmp r13, rdx
jg 0x140132758
lea ecx, [rdx + 0xf950]
jmp 0x14013297b
xor r10d, 0x5c4bedb8
rcl r14d, 0xdf
pushf
neg rbx
add edx, 0xba9e651a
jmp 0x14013255c
and edx, 0x2a34324
test ecx, 0x867de179
lea r9d, [rcx - 0x267]
lea r12d, [rcx + 0x7765]
lea r10d, [rcx - 0x2d65]
and r15d, 0x54d9c1bb
bswap rsi
jne 0x1401325cd
je 0x1401325cd
ror ecx, 0x69
neg rbp
mul rdx
test esi, 0x7a466ec4
cpuid
movabs r8, 0x5a6585fffffed9e9
test r12d, 0xde0d6fed
jmp 0x1401324ab
lea r15d, [rcx + 0x60b1]
jne 0x140131424
inc r12
lea r14d, [rdx + 0x73f2]
lea r10d, [rbp + 0xb15c]
jle 0x140131c62
jmp 0x14013281f
lea r8, [rbp + 0xd8]
mov eax, dword [r15 + 0x54]
lea rdx, [rbp + 0xe0]
xchg r11, rax
add byte [rcx - 0x6d], cl
jmp 0x1401327cc
pop rbx
mov r14d, 0xb68d9960
lea ebx, [rcx + 0xda8b]
test ebp, 0x22cae4a
jbe 0x140131870
je 0x140132715
jne 0x140132715
rcl r8d, 0x2d
xor edx, 0x6ac0a034
jmp rax
jmp 0x140132677
jl 0x140132c64
add byte [rax], al
xor ebx, 0x4683c8f1
test r9, rdx
rcr r9d, 0x59
test r8d, 0xc0df35d4
je 0x1401327a9
jne 0x1401327a9
cmp r13, rbp
lea edx, [rdi - 0x53d3]
rcr edx, 0xa1
cmp ecx, 0xf67c2987
add r8d, 0x950a4e68
call rax
test r14, rdi
cmp rdx, rdi
rcr r10d, 2
jmp rax
jmp 0x140132a65
mov qword [rbp + 0xd8], r11
xchg r11, rax
mov r9d, 4
lea rax, [rbp + 0xcc]
mov dword [rbp + 0xcc], r13d
jmp 0x140132b4a
popf
call rcx
call rax
cmp r15d, 0x957b8d58
popfq
pushfq
jmp 0x140132c6d
jne 0x1401328fc
nop
js 0x140132940
syscall
test ecx, 0xa98920bc
inc r8
jmp 0x14013244c
popf
cpuid
cmp r14, rbx
rcl r12d, 0x94
je 0x14013283e
jne 0x14013283e
mov r11d, 0x5e5e9cc9
dec r8
ror edi, 0xa7
call rax
movabs rcx, 0x6c60d90000032fe9
xor edx, 0x11ec6f5b
ret
jmp 0x140132b72
popf
jle 0x1401311b2
jmp rcx
add byte [rax], al
xor ecx, 0x4f4b2edd
jns 0x14013324e
lea ebp, [rbp - 0x4702]
lea ebp, [rcx - 0x1b2c]
lea r10d, [rbx - 0xcb25]
lea ebx, [rbp + 0x69f1]
call rax
rol r11d, 0xbe
pop rbp
rcl ebx, 0x83
lea r8d, [rbx + 0x4078]
and ebx, 0x272dcb33
lea ecx, [rbp + 0x3640]
movabs r9, 0x20be4fbc44a324eb
call rax
call rax
pushfq
je 0x140131f72
test byte [rbx + 0xffffff6], cl
mov al, ch
jp 0x1401329b2
add byte [rax], al
add cl, ch
jl 0x1401328e2
jmp 0x140131b6e
invalid
xor dil, dil
cmp byte [rbx], 0x2e
jmp 0x1401324ea
cmp dword [rbx + 1], 0x63727372
je 0x14013355b
cmp dword [rbx], 0x54494e49
je 0x14013355b
cmp dword [rbx + 0xc], 0xfffffffe
jmp 0x140132802
jne 0x140133251
mov dil, 1
jmp 0x140133251
call qword [rax + 0x41c4ff49]
cmp ebp, 0x5d4f46ae
jne 0x140132965
je 0x140132965
jno 0x140132bb1
popfq
sub ebx, 0x4a22b03e
syscall
ror r8d, 0x62
movabs r8, 0x77f400fffffe84e9
bswap r11
jp 0x1401331a4
jmp 0x1401327ee
jmp 0x140133042
lea ebx, [rdi + 0xa1cc]
test r9d, 0x3238e57e
jle 0x14013183d
push rbx
jmp 0x14013258b
add al, byte [rax]
add bl, al
add r9d, 0xcf333e92
jb 0x140131daf
stc
invalid
pushfq
rcl r11d, 0x49
test r15d, 0xe17aaf3b
jmp 0x140132507
lea rax, [r15 + rax*8]
cmp rbx, rax
jae 0x1401336b4
jmp 0x140132afb
add rcx, r9
mov r12d, dword [rcx + rdx*4]
mov edx, dword [r15 + 0xd8]
add r12, r9
xchg r13, rdx
jne 0x140132a25
je 0x140132a25
call rax
rcl edi, 0x29
cmp r9d, 0xd508fba3
rol r12d, 0x3c
lea edx, [rdx - 0xcb04]
test ecx, 0xb83c7ca6
call rax
test r9d, 0xdcc41193
bswap r11
xor ebx, 0x2efd613f
rcr r12d, 0x84
movabs r10, 0x58a850fffffb0fe9
jle 0x1401326b1
jmp 0x140132539
mul rdi
pushfq
ret 0x38
lea rax, [rdx + rdi]
mov qword [rbp + 0x1a0], rax
cmp rcx, rdi
jae 0x140132a59
lea rax, [rcx + rdi]
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0xe0], rdi
jmp 0x1401326a0
call rax
or edi, 0x98a1836
pause
ror ebx, 0xb5
lea r15d, [rdi - 0xd04c]
lea edi, [rdi - 0xd04c]
rcr r13d, 0x2d
jne 0x140132abf
je 0x140132abf
cmp esi, 0x7127d15a
jo 0x14013396c
ja 0x1401320d3
call rcx
pop r8
test edx, 0x9f53bf8a
mul r12
bswap rdi
cmp rsi, rdx
pushfq
call rcx
xor edx, 0xc204ea4f
add al, 0xc2
mov esi, 0x395dcc43
jmp 0x140132e63
jmp 0x14013286e
nop word [rax + rax]
cmp dword [rbx + 0x10], r13d
je 0x14013355b
cmp dword [rbx + 0x14], r13d
je 0x14013355b
cmp byte [rbx], 0x2e
jne 0x140132914
jmp 0x140132907
jae 0x140131ad6
int3
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], rax
call r12
movzx eax, word [r15 + 6]
lea rbx, [r15 + 0x108]
lea rax, [rax + rax*4]
lea rax, [rax + 0x21]
jmp 0x1401329c7
call rax
syscall
bswap rbx
nop
test r13d, 0xf71cd5a0
je 0x140132b92
jne 0x140132b92
jmp 0x14013379e
jmp 0x140132ce8
inc edi
cmp esi, 0xcfbe86ab
lea r12d, [rbp - 0x69d3]
je 0x140132bd1
jne 0x140132bd1
test r15, rdx
popfq
push rbp
js 0x1401332d7
jmp 0x140132754
mov qword [rbp + 0x1a8], rcx
mov eax, dword [r15 + 0xa4]
mov dword [rbp + 0x124], eax
cmp rdx, rdi
jae 0x140132a45
jne 0x140132c48
je 0x140132c48
lea r10d, [rbx + 0x79ed]
ja 0x140131f41
test rdx, rdx
cpuid
lea r14d, [rdi - 0xe5d]
mov r10d, 0x64f4874a
and r12d, 0x6f8e44c2
and esp, 0x6f8e44c2
xor r9d, 0xf72ab11d
pushf
movabs r9, 0x53e82ffffffdede9
call fcn.14013313d
lea ebx, [rbx - 0x2d09]
nop
mul rdx
test rsi, rcx
lea edi, [rbx - 0xda37]
jmp 0x140132c8d
jmp 0x140132a3a
test rbx, rbx
test ebx, 0xb1b2ef47
lea edi, [rcx - 0x5b94]
ja 0x14013134f
jmp rax
rol r14d, 0x3d
jmp rcx
jbe 0x140132b51
inc r15
lea r14d, [rdx - 0xbce2]
lea ebx, [rdx + 0x40b5]
popfq
je 0x140132d18
jne 0x140132d18
add r8d, 0x974f32b0
lea ebp, [rdx + 0xef67]
test edi, 0x2633fe1b
movabs r8, 0x377db3fffffe06e9
ror r15d, 0x6f
and r12d, 0x86ded1f5
jmp rax
jmp 0x140132b23
cmp eax, 0x74616470
jne 0x140133251
cmp byte [rbx + 5], 0x61
je 0x14013355b
jmp 0x140133251
mov fs, word [0x111122dcc]
lea edx, [rdx - 0x2991]
jmp rcx
mov r14d, eax
lea rax, [0x140000000]
add rsi, rax
mov dword [rbp + 0x20], r13d
jmp 0x140133269
or ecx, 0x49fffffd
mov eax, 0x1f0e9
add byte [rbx + 0x5e416ca9], dh
lea r13d, [rbp - 0x772a]
jmp rcx
lea rdx, [rsp + 0x48]
mov esi, dword [rbx + 0xc]
mov r9d, 0x40
cmovae eax, dword [rbx + 0x10]
mov rcx, 0xffffffffffffffff
je 0x140132ef8
jne 0x140132ef8
sub esi, 0xbd83cfef
rol ebp, 0xb0
add r8d, 0x9be5f900
call rcx
lea edi, [rbx + 0xd98d]
jmp rcx
jmp 0x140132e18
rcr r13d, 0xa1
syscall
jmp fcn.140133237
lea r8d, [rdi - 0x32c6]
lea r8d, [rbx - 0x76a0]
rcr esi, 0xd6
inc r10
lea r8d, [rdx + 0x1243]
rcr r12d, 0x89
jmp 0x140133156
test r15, rdx
sub edi, 0xc612f406
cmp esi, 0x7f06406e
invalid
lea edi, [rbx + 0xe962]
cmp rdx, rdi
ja 0x140131b31
xor r12d, 0x45916ff
jmp 0x1401330a6
std
invalid
mov eax, dword [rbx + 8]
lea r8, [rsp + 0x30]
cmp eax, dword [rbx + 0x10]
jmp 0x140132ebf
lea rax, [rbp + 0x20]
xchg rsi, r10
mov qword [rsp + 0x48], r10
xchg rsi, r10
mov qword [rsp + 0x20], rax
jmp loc.140133000
inc dword [rcx - 9]
sar byte [rsi - 0x70], 0x83
push rcx
jmp 0x14013321c
sbb r14b, al
invalid
in al, dx
lea edx, [rbx + 0x969e]
ror r14d, 0xd1
cpuid
ror r12d, 0x20
rcr ebx, 0x91
lea esi, [rcx + 0xb33]
movabs r15, 0x6aa4e02d7ee583eb
test r11d, 0xa299a3ea
sub r8d, 0x904bdff9
rol ebx, 0xe1
ret 0x38
jmp rax
pop r11
lea r8d, [rdx + 0x8eb3]
cmp r15, rbp
jp 0x14013347b
jmp 0x1401334c7
movzx eax, word [r15 + 6]
add rbx, 0x28
jne 0x1401335a4
je 0x1401335a4
jmp rax
jmp 0x1401336f4
lea esi, [rdi - 0xbfbb]
inc rsi
lea esi, [rbp - 0xfa09]
js 0x140133479
pushf
lea r12d, [rbp - 0x90f3]
jne 0x140133638
je 0x140133638
pause
popf
add ebx, 0xfe288ce2
lea r15d, [rcx + 0xd4df]
rcr ecx, 0x7e
div rcx
jno 0x1401329a5
jmp rcx
jmp 0x140133541
cmp rbx, rax
jb 0x140132b01
lea rdi, [0x140000000]
mov r9d, dword [rbp + 0xcc]
lea rax, [rbp + 0xcc]
lea r8, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
lea rax, [rax + rax*4]
lea rax, [rax + 0x21]
lea rax, [r15 + rax*8]
jmp 0x1401336a4
movsd dword [rdi], dword [rsi]
xchg byte [rbx], ch
neg rbx
sub ecx, 0x9f7edf5d
xor ecx, 0x679a260c
test r13, rbx
jbe 0x14013288e
syscall
lea r13d, [rbx - 0x6cb3]
lea r13d, [rdi - 0xc056]
movabs r13, 0x137a46fffffd40e9
jmp rax
cmp r11, rdx
test rsi, rdx
bswap rbp
cmp rbp, rbp
jmp 0x1401335da
mov eax, 0xffffffff
jmp fcn.1401345e5