Function at 0x140131954
Capabilities:
Access peb ldr_data
Execute syscall
Resolve function by parsing pe exports

Disassembly:
adc ecx, dword [rdi]
test byte [rbp + 6], dl
add byte [rax], al
jmp rcx
cmp edx, edi
cmp byte [rbx + 5], 0x61
jne 0x140132406
mov dil, 1
jmp 0x140132406
add byte [rax], al
add byte [rcx - 0x79], cl
dec byte [rbp + rcx*4 - 0x7b]
fadd dword [rax]
add byte [rax], al
jne 0x14013164e
je 0x14013164e
cmp edx, 0xdb6790ed
add r10d, 0x6cae9995
rcr ebx, 0x10
cmp r11d, 0x31da62b4
call rcx
bswap r10
lea r12d, [rcx + 0x16cb]
jbe 0x14013142c
lea r14d, [rdx + 0x858b]
int3
jmp 0x140131e17
lea rax, [r15 + rax*8]
cmp rbx, rax
jae 0x140132962
nop word [rax + rax]
cmp dword [rbx + 0x10], r13d
jmp 0x140131d18
lea esi, [rdi + 0xc0cf]
jmp rcx
cmp byte [rbx], 0x2e
jne 0x14013192c
cmp dword [rbx + 1], 0x63727372
je 0x140132abf
cmp dword [rbx], 0x54494e49
jmp 0x14013194e
je 0x140132abf
cmp dword [rbx + 0xc], 0xfffffffe
jne 0x140131e81
nop
je 0x14013196e
jne 0x14013196e
inc r10
jne 0x140131a19
movabs rbp, 0x3d31dd9f5ae72beb
jmp rax
jmp 0x14013199b
call rcx
rcr ebp, 0xfe
ror r11d, 0xb8
cmp rcx, rbx
push rcx
je 0x1401319cd
jne 0x1401319cd
call rcx
or r9d, 0xeb3c104b
jg 0x140132330
mul rcx
jmp 0x140131da0
pop rcx
add byte [rax], al
jmp rcx
mov qword [rbp + 0xd8], rsi
xchg rsi, rax
mov r9d, 4
lea rax, [rbp + 0xcc]
mov dword [rbp + 0xcc], r13d
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], rax
jmp 0x140131d6b
je 0x140132abf
cmp dword [rbx + 0x14], r13d
je 0x140132abf
jmp 0x140131916
jne 0x140132406
mov eax, dword [rbx + 1]
cmp eax, 0x74616469
jne 0x140131efa
jmp 0x140131574
call r12
movzx eax, word [r15 + 6]
lea rbx, [r15 + 0x108]
lea rax, [rax + rax*4]
lea rax, [rax + 0x21]
jne 0x140131d8a
je 0x140131d8a
jmp rcx
jmp 0x1401317b3
jno 0x1401312af
popfq
lea ebp, [rcx + 0x5694]
je 0x140131dd4
jne 0x140131dd4
rcl r8d, 0x17
jmp rax
jmp 0x140131902
mov eax, dword [r15 + 0x54]
lea rdx, [rbp + 0xe0]
xchg rsi, rax
jmp 0x140131c21
xor dil, dil
cmp byte [rbx], 0x2e
jmp 0x140131d52
cmp eax, 0x74616470
jne 0x140132406
cmp byte [rbx + 5], 0x61
jmp fcn.140132400
mov dword [rbp + 0x20], r13d
lea rax, [rbp + 0x20]
xchg r8, rsi
mov qword [rsp + 0x48], r8
xchg r8, rsi
xchg rdi, rax
mov qword [rsp + 0x20], rdi
jmp fcn.140131f0e
mov r9d, 0x40
cmovae eax, dword [rbx + 0x10]
mov rcx, 0xffffffffffffffff
mov r14d, eax
lea rax, [0x140000000]
add rsi, rax
jmp 0x140132268
ror byte [rax + 0x39], 1
out dx, al
lea r12d, [rdi - 0x2c6c]
rcl ebp, 0xb
jmp 0x1401323d2
rol r14d, 0xdb
test edx, 0xf3a5ff3a
call rax
int3
mov eax, dword [rbx + 8]
lea r8, [rsp + 0x30]
lea eax, [rsp + 0x30]
cmp eax, dword [rbx + 0x10]
lea rdx, [rsp + 0x48]
mov esi, dword [rbx + 0xc]
jmp 0x140132287
mov qword [rsp + 0x20], r11
xchg r11, rax
lea rdx, [rbp + 0xe0]
mov rcx, 0xffffffffffffffff
call r12
lea rax, [0x140133c40]
mov ecx, dword [rax]
jmp 0x1401327ad
test ecx, ecx
je 0x140133366
cmp dword [rax + 4], r13d
je 0x140133366
jmp 0x140132b90
mov rax, qword [rax]
jmp 0x140132bb1
lea rax, [rbp + 0xcc]
lea r8, [rbp + 0xd8]
xchg r11, rax
jmp 0x1401326cb
jb 0x1401317c6
lea rdi, [0x140000000]
mov r9d, dword [rbp + 0xcc]
jmp 0x14013282b
add rcx, r10
movzx edx, byte [rcx]
inc rcx
jmp fcn.140132b66
nop word [rax + rax]
dec r9d
mov r8d, 0x5113dfaa
lea rdx, [r10 + r9*4]
mov ecx, dword [rdx + r11]
jmp 0x140132a12
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1401327ca
mov r9d, dword [rbx + 0x18]
jmp 0x140132b54
movzx eax, word [r15 + 6]
nop
sub rbx, 0xa92592b
jmp 0x140132b29
add rbx, 0xa925953
lea rax, [rax + rax*4]
lea rax, [rax + 0x21]
lea rax, [r15 + rax*8]
cmp rbx, rax
jmp 0x140132955
test r9d, r9d
je 0x1401327ca
mov r11d, dword [rbx + 0x20]
jmp 0x140132a20
mov rax, qword gs:[0x60]
lea r14, [rdi + rcx]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
jmp 0x140132a85
pop rbx
pop rax
pop rdx
add rsp, 8
jmp 0x140133235
push rdx
push rax
xchg qword [rsp + 0x10], rdi
pop rax
add rsp, 8
mov r14, qword [rsp - 8]
push rdx
jmp 0x14013344d
mov eax, 0xfffffffe
jmp 0x1401333d8
mov r12, qword [rsp + 0x3a8]
xchg rsi, r10
mov r10, qword [rsp + 0x3b0]
xchg rsi, r10
jmp 0x1401334f1
push rax
push rbx
push rdx
push rcx
xchg qword [rsp + 0x28], r13
pop rcx
pop rdx
jmp 0x1401331e0
add rsp, 0x3b8
nop
xchg qword [rsp], r15
add rsp, 8
nop
je 0x14013353b
jne 0x14013353b
pause
cmp esi, 0xdb8eb72
rcr ebx, 0xf1
lea r11d, [rdi - 0xfb05]
jmp rcx
jmp 0x140133294