Function at 0x140134c30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
or byte [rax], al
add byte [rbp - 0x7b], al
leave
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14013400c
mov r9d, dword [rbx + 0x18]
jmp 0x140133b66
invalid
jmp 0x140134165
call 0x14013311c
test ecx, 0x55cebd5e
call fcn.1401349be
mov r9d, dword [rbp + 0x110]
lea rax, [rbp + 0x110]
lea r8, [rbp + 0x150]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x158]
mov rcx, 0xffffffffffffffff
call r12
jmp 0x140133bb4
adc al, 0
add cl, al
invalid
add byte [rax], al
rcl ebp, 0x76
jmp 0x140133efb
mov rax, qword [rax]
jmp 0x140133dc8
mov r10, qword [rax + 0x30]
jmp 0x140133da7
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140134281
mov r9d, dword [rbx + 0x18]
test r9d, r9d
jmp 0x140134200
mov edx, 0x383bc63e
add r8, r10
movzx ecx, byte [r8]
inc r8
jmp 0x1401341f1
test cl, cl
je 0x140134278
nop
jmp 0x140134225
je 0x140134281
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
jmp 0x1401341dd
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
je 0x140134259
jne 0x140134259
jmp rax
jmp 0x1401342f4
test r9d, r9d
jne 0x140134215
mov rax, qword [rax]
mov eax, dword [rax]
jmp 0x14013429f
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
jmp 0x1401341bd
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140134225
cmp edx, 0x789ef18e
je 0x140134312
jmp 0x140134278
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
je 0x140134338
jne 0x140134338
rcr r11d, 0x2a
rcr r12d, 0x77
lea r13d, [rdi + 0x9ee7]
pushfq
rcl r11d, 0x7d
movabs r15, 0x32fdd100000101e9
lea esi, [rbp + 0xb7ba]
add ebx, 0xea6f4a8c
ret
jmp 0x14013443e
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1401344cf
jne 0x140134361
je 0x140134361
movabs r13, 0x43138900000124e9
ret
jmp 0x14013448a
test al, al
jne 0x14013448d
cmp edx, 0xb391a615
je 0x1401344d7
jmp 0x1401344cf
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x14013436a
xchg rbp, rax
mov r8d, r15d
movsxd rcx, dword [rax + 0x3c]
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
nop dword [rax]
jmp 0x1401343b3
nop dword [rax + rax]
mov ecx, r8d
lea rdx, [r9 + rcx*4]
mov ecx, dword [rdx + r11]
mov edx, 0x44a9b812
add rcx, r9
jmp 0x14013434d
lea rcx, [rsp + 0x67]
mov r8d, 0x800
add bh, bh
xlatb
xchg rbp, rax
mov r9, rbp
je 0x14013440b
jne 0x14013440b
syscall
popfq
jae 0x140135313
call rcx
test r15d, 0x987d05c6
jmp rax
jmp 0x140134394
mov dword [rsp + 0x5c], 0xf6f6f6f6
mov dword [rsp + 0x67], 0x7c6f7d7f
mov dword [rsp + 0x60], 0xf6f6f6f6
movzx edx, word [rax + r9*2]
mov dword [rsp + 0x6b], 0x6e383c3d
mov word [rsp + 0x64], 0xf6f6
mov word [rsp + 0x6f], 0x7676
jmp 0x1401344b3
inc rdx
cmp rdx, 0xa
jb 0x140134499
xor edx, edx
jmp 0x1401343d3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x140134383
movzx eax, byte [rsp + rdx + 0x67]
movzx ecx, byte [rsp + rdx + 0x5c]
add cl, al
mov byte [rsp + rdx + 0x67], cl
mov byte [rsp + rdx + 0x5c], r15b
jmp 0x140134476
mov r12d, dword [rcx + rdx*4]
mov rdx, r15
add r12, r10
xor eax, eax
mov byte [rsp + 0x71], al
nop dword [rax]
jmp 0x140134499
inc r8d
jmp 0x1401343bb
mov eax, dword [r10 + r9 + 0x24]
add rax, r9
mov ecx, r8d
movzx edx, word [rax + rcx*2]
je 0x140134515
jne 0x140134515
inc r10
lea r8d, [rcx + 0x9355]
pop r8
add ebp, 0x1c7c65fa
rcl edi, 0x8a
rol r8d, 0x38
jbe 0x14013370d
bswap rdx
test r12d, 0xa1f50856
movabs r8, 0x760ceb00000181e9
add esi, 0x34173d43
ror ecx, 0x5c
call fcn.140134025
jmp 0x14013469b
mov ecx, dword [r14 + 0x10]
mov ebx, ecx
lea rax, [0x140000000]
jne 0x14013455e
je 0x14013455e
cmp ecx, 0xfea7165d
call rcx
add ebp, 0xbe876eb1
pushfq
mov edi, 0xc6ac0e1a
inc r14
div r15
rcl r13d, 0x90
call rcx
movabs rdi, 0x3795fe8567c859eb
or ebx, 0xd60735e0
test r13, rdx
bswap rsi
lea ecx, [rbx - 0xc8ad]
pause
jo 0x140134fe5
jmp 0x1401345b9
call fcn.140134282
je 0x1401347ea
mov eax, dword [r14 + 0x10]
test eax, eax
je 0x14013472f
mov edx, edi
jmp 0x1401345cd
mov byte [rsp + rax + 0x67], r15b
inc rax
cmp rax, 0xa
jb 0x14013459e
cmp dword [r14 + 0xc], r15d
jmp 0x1401345fd
add rbx, rax
mov edi, r15d
xchg r12, rcx
mov r12, qword [rbx]
xchg r12, rcx
jmp 0x1401346bd
add rdx, rax
lea rax, [0x140000000]
xchg r11, r8
mov qword [rdx + rax], r11
xchg r11, r8
jmp 0x1401345f8
add rax, 2
add rax, rdx
movzx edx, dx
test rcx, rcx
jmp 0x14013466f
jmp 0x14013475c
je 0x140134e66
lea rax, [0x140000000]
nop
mov ecx, dword [r14 + 0xc]
xor r8d, r8d
jne 0x140134641
je 0x140134641
rcl edx, 0xbb
jae 0x140133fa8
test ecx, 0x8645cff5
rol edx, 0x7f
cmp r14d, 0x31343dec
and ebx, 0x6720d550
jbe 0x140134971
ror esi, 0xb
pop rbx
movabs rbx, 0x529448a821d347eb
pop r8
lea ecx, [rbp - 0x31b7]
jns 0x140133b63
jmp 0x14013468a
xor r11d, 0x41cef45d
cmp r11, rcx
mov edi, 0xfbb20e98
call rax
jmp rax
xchg rcx, rsi
mov rsi, rcx
xchg rcx, rsi
cmovns rdx, rax
call r12
mov r8, rax
test rax, rax
jmp 0x140134585
add rcx, rax
xor edx, edx
call rdi
xchg r10, rax
mov rsi, r10
jmp 0x1401346d5
mov rax, r15
mov ecx, dword [r10 + r9 + 0x1c]
add rcx, r9
mov r13d, dword [rcx + rdx*4]
add r13, r9
nop word [rax + rax]
jmp 0x14013459e
test rcx, rcx
je 0x1401347d4
xchg rdx, rcx
mov rcx, rdx
xchg rcx, rdx
nop
jmp 0x1401345e6
xchg r10, rax
test rax, rax
je 0x140134adc
mov ecx, dword [r14]
test ecx, ecx
jne 0x14013452f
je 0x14013470c
jne 0x14013470c
lea ebp, [rbp + 0x2729]
push r14
lea ebx, [rbx + 0x829a]
lea r15d, [rbp - 0xdd93]
popfq
mov esi, 0xd0d2827d
movabs r9, 0x241d09fffffe1ae9
or r8d, 0x434a547d
lea r13d, [rbp + 0x4fc3]
jmp 0x14013452b
add byte [rax], al
jmp rax
mov rax, qword [rbx]
lea rcx, [0x140000000]
xchg rdx, r8
mov qword [rcx + rax], rdx
xchg r8, rdx
jmp 0x140134755
mov rsi, qword [rsp + 0x30]
xchg rsi, rdi
jmp 0x14013460b
lea rax, [0x140000000]
xchg rcx, rdx
mov rdx, qword [rbx + 8]
je 0x140134785
jne 0x140134785
jae 0x140134d15
call rcx
call rax
jmp rax
jmp 0x1401347a3
xchg rdx, rcx
nop
sub rbx, 0x31d50178
add rbx, 0x31d50180
jmp 0x1401347ba
add edi, 8
xchg rbx, rcx
mov rdx, rbx
jmp 0x1401347c8
xchg rcx, rbx
test rcx, rcx
jne 0x1401345e6
add r14, 0x14
cmp dword [r14 + 0xc], r15d
je 0x140134e66
xchg rsi, rdi
jmp 0x140134748
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg rdx, r12
mov r12, r15
je 0x140134811
jne 0x140134811
ret
jmp 0x14013483d
xchg rdx, r12
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
jmp 0x140134967
cmp rdx, 5
jb 0x14013496f
mov dword [rbp - 0x40], 0xf6f6f6f6
mov rdx, r15
mov dword [rbp + 0x14], 0x76736b50
mov dword [rbp - 0x3c], 0xf6f6f6f6
jmp 0x1401349b4
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
adc al, 0x36
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r15b
inc rdx
jmp 0x14013491a
mov dword [rbp + 0x18], 0x7e2a6e6f
mov dword [rbp - 0x38], 0xf6f6f6f6
div dh
div dh
mov dword [rsp + 0x40], 0xf6f6f6f6
mov rdx, r15
mov dword [rsp + 0x46], 0x797c7c4f
mov byte [rsp + 0x44], 0xf6
mov word [rsp + 0x4a], 0x7c
jne 0x140134b23
je 0x140134b23
jmp rcx
jmp 0x140134d18
mov dword [rbp + 0xd0], 0x55572a44
mov dword [rbp + 0x80], 0xf6f6f6f6
mov dword [rbp + 0xd4], 0x57143b4c
mov dword [rbp + 0x84], 0xf6f6f6f6
mov dword [rbp + 0xd8], 0x2a6f756b
jmp 0x140134b83
mov dword [rbp + 0x88], 0xf6f6f6f6
mov dword [rbp + 0xdc], 0x6f7c7f7d
mov dword [rbp + 0x8c], 0xf6f6f6f6
jne 0x140134bbf
je 0x140134bbf
cmp r8, rbp
test ebp, 0x2089420d
call rcx
jns 0x14013582c
jmp rcx
jmp 0x140134d74
mov dword [rbp + 0xa4], 0xf6f6f6f6
mov dword [rbp + 0xf8], 0x6b7e7f6c
mov dword [rbp + 0xa8], 0xf6f6f6f6
mov dword [rbp + 0xfc], 0x7d6f766c
mov dword [rbp + 0xac], 0xf6f6f6f6
jmp 0x140134c38
mov dword [rbp + 0x9c], 0xf6f6f6f6
mov dword [rbp + 0xf0], 0x736e6f5c
mov dword [rbp + 0xa0], 0xf6f6f6f6
mov dword [rbp + 0xf4], 0x737c7e7d
jmp 0x140134bd4
mov dword [rbp + 0x100], 0x6f7c6b2a
mov dword [rbp + 0xb0], 0xf6f6f6f6
mov dword [rbp + 0x104], 0x7d78732a
mov dword [rbp + 0xb4], 0xf6f6f6f6
mov dword [rbp + 0x108], 0x76766b7e
jmp 0x140134cb6
mov dword [rbp + 0xbc], 0x76736b50
mov dword [rbp + 0x6c], 0xf6f6f6f6
mov dword [rbp + 0xc0], 0x7e2a6e6f
jmp 0x140134d35
movzx eax, byte [rbp + rdx + 0xbc]
movzx ecx, byte [rbp + rdx + 0x68]
add cl, al
mov byte [rbp + rdx + 0xbc], cl
mov byte [rbp + rdx + 0x68], r15b
inc rdx
cmp rdx, 0x53
jmp 0x140134e08
mov word [rbp + 0xb8], 0xf6f6
mov dword [rbp + 0x10c], 0x386e6f
mov byte [rbp + 0xba], 0xf6
nop dword [rax]
jmp 0x140134c8f
mov byte [rsp + rdx + 0x40], r15b
inc rdx
cmp rdx, 5
jb 0x140134d20
jmp 0x140134de9
inc rax
cmp rax, 0x53
jb 0x140134e2f
mov byte [rsp + r15 + 0x46], 0
inc r15
cmp r15, 5
jb 0x140134d00
jmp 0x140134dfe
add byte [rax], al
add byte [rdi], cl
invalid
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x46]
movzx ecx, byte [rsp + rdx + 0x40]
add cl, al
mov byte [rsp + rdx + 0x46], cl
jmp 0x140134cdc
mov dword [rbp + 0x70], 0xf6f6f6f6
mov dword [rbp + 0xc4], 0x78732a79
mov dword [rbp + 0x74], 0xf6f6f6f6
mov dword [rbp + 0xc8], 0x6b737e73
mov dword [rbp + 0x78], 0xf6f6f6f6
mov dword [rbp + 0xcc], 0x6f847376
mov dword [rbp + 0x7c], 0xf6f6f6f6
jmp 0x140134b4c
mov dword [rbp + 0xe0], 0x6f727e2a
mov dword [rbp + 0x90], 0xf6f6f6f6
mov dword [rbp + 0xe4], 0x7d73602a
mov dword [rbp + 0x94], 0xf6f6f6f6
mov dword [rbp + 0xe8], 0x2a766b7f
mov dword [rbp + 0x98], 0xf6f6f6f6
mov dword [rbp + 0xec], 0x2a35354d
jne 0x140134dd4
je 0x140134dd4
mov r15d, 0xd5c458cf
rol r15d, 0xa5
and r14d, 0x528f58d2
ret
jmp 0x140134c0b
mov dword [rbp + 0x68], 0xf6f6f6f6
xchg rcx, rdx
mov rcx, r15
xchg rdx, rcx
jmp 0x140134c6f
mov eax, 0xfffffffe
jmp 0x140132865
jb 0x140134c8f
mov r9d, 0x10
lea r8, [rsp + 0x46]
lea rdx, [rbp + 0xbc]
xor ecx, ecx
jmp 0x140134e27
call r13
mov rax, r15
nop
mov byte [rbp + rax + 0xbc], r15b
jne 0x140134e43
je 0x140134e43
pushfq
call rcx
cmp rbp, rcx
movabs r14, 0x213f04fffffeabe9
jmp 0x140133fa7
jmp 0x140134cf3
xchg r12, r9
mov r12, qword [rbp + 0x398]
xchg r12, r9
lea rcx, [0x1401351f0]
xchg r14, r8
mov r14, qword [rbp + 0x390]
mov esi, dword [rbp + 0x390]
jmp 0x140134e9a
mov rcx, qword [rbp + 0x388]
xchg rcx, rdx
call rax
jmp 0x140132865
xchg r14, r8
lea rax, [0x1401351c0]
mov rax, qword [rax]
xor rax, qword [rcx]
xchg rcx, r12
jmp 0x140134eb2
mov r12, qword [rbp + 0x380]
xchg r12, rcx
xchg rdx, rcx
jmp 0x140134e89
and al, 0
test r12d, 0x97531b57
dec r14
add r9d, 0x9c63a884
test rcx, rbx
add edi, 0xd61e3d44
and r12d, 0x30c024d6
test ebx, 0x34043b9d
popfq
popf
add ecx, 0x5f9783fa
jnp 0x140135f59
call 0x140134c30
test ebx, 0x42e43981
pause
movabs rsi, 0x6a5b16ffffff32e9
lea ebp, [rbx - 0xc691]
pop r10
or ecx, 0xbdc0fcd6
rcl ebx, 0xa8
mul r12
ret 0x18
sar edi, cl
sar edi, 1
ror dword [rdi], 1
mov word [rdx - 0xb], ds
invalid
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jmp 0x14013525e
xchg r10, r11
mov r11, qword [rax + 0x30]
xchg r11, r10
jmp 0x1401352c4
jne 0x140135280
cmp r8d, 0xcc600559
je 0x140135357
jmp 0x140135331
test dl, dl
je 0x140135331
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
je 0x1401352ac
jne 0x1401352ac
inc r13
test r10d, 0x19e68308
or ecx, 0x16e91c4a
test r15, rcx
rol r9d, 0xe3
jmp rcx
jmp 0x140135229
movsxd rdx, dword [r10 + 0x3c]
mov ebx, dword [rdx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14013533a
mov r9d, dword [rbx + 0x18]
test r9d, r9d
jmp 0x1401352fe
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
jmp 0x140135276
je 0x14013533a
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x509981b8
jne 0x140135324
je 0x140135324
call rcx
movabs r12, 0x25d085c47b0ac2eb
call rcx
ret 0x18
jmp 0x1401352e8
test r9d, r9d
jne 0x140135313
mov rax, qword [rax]
jmp 0x14013524f
mov ecx, dword [rbx + 0x24]
xor eax, eax
add rcx, r10
mov dword [rbp - 0x2d], 0xf6f6f6f6
jne 0x14013537f
je 0x14013537f
int3
jmp 0x140135418
mov edx, dword [rcx + r9]
mov ecx, 0xc2942500
add rdx, r9
jmp 0x1401353b4
inc r8d
jmp 0x1401353fb
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x1401353ac
jmp 0x1401354b9
mov word [rbp - 0x1a], 0x7676
mov byte [rbp - 0x18], al
mov r9d, dword [rcx + rdx*4]
add r9, r10
xor ebx, ebx
jmp 0x1401354e1
nop dword [rax]
nop word [rax + rax]
mov r10d, r8d
lea rcx, [rdi + r10*4]
jmp 0x14013539b
imul ecx, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jmp 0x1401354ca
mov dword [rbp - 0x22], 0x7c6f7d7f
mov dword [rbp - 0x29], 0xf6f6f6f6
mov dword [rbp - 0x1e], 0x6e383c3d
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov word [rbp - 0x25], 0xf6f6
je 0x140135463
jne 0x140135463
lea r15d, [rbx - 0x211b]
lea r10d, [rbx - 0xbb91]
rcl r13d, 3
cmp r8d, 0xfb4d4f9b
sub edi, 0x26c4786f
invalid
mov esi, 0xffff5fe9
invalid
invalid
invalid
jmp 0x1401353c7