Function at 0x140130c8e
Capabilities:
Access peb ldr_data

Disassembly:
jne 0x1401319c8
xchg rdx, rax
mov rdx, qword [rsp + 0x30]
xchg rdx, rax
dec rax
jmp 0x140130eb4
xchg rbp, rsi
xchg r11, r15
mov qword [rsp + 0x30], r11
xchg r15, r11
call rdi
test eax, eax
jmp 0x140130b76
inc r8d
jmp 0x140130e9f
mov qword [rbp + 0x180], r10
xchg r10, r15
lea rcx, [rsp + 0x30]
mov qword [rbp + 0x188], r15
xchg rbp, rsi
movdqu xmmword [rsi + 0x198], xmm0
jmp 0x140130bb5
call rsi
mov rax, qword gs:[0x60]
mov r8d, r15d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
xchg rcx, rdi
jmp 0x140130d8a
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 6
imul rcx, rcx, 0x64
sub r8, rcx
jmp 0x140130c51
add byte [rax], al
invalid
xchg r10, r8
mov rcx, qword [rbp + 0x118]
add rcx, r10
xchg rdi, r15
mov qword [rsp + 0x40], rdi
xchg r15, rdi
cmp r10, rcx
jmp 0x140130cfc
cmp r8, 0x4b
jb 0x140130dfd
lea rax, [rsp + 0x58]
jmp 0x140130d36
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x140130e82
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140130bcc
nop dword [rax]
movsx eax, al
jmp 0x140130c98
jae fcn.140130c8e
movabs r11, 0x47ae147ae147ae15
nop
add cl, byte [rax - 0x3f]
loop 0x140130d40
shl rdx, 1
shl rdx, 3
shl rdx, 1
jmp 0x140130f18
mov dword [rsp + 0x58], r15d
mov r9d, 0x20
xchg r8, rax
add byte [rcx - 0x70], cl
jmp 0x140130d9c
xchg rsi, r9
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
je 0x140130d79
jne 0x140130d79
jae 0x14012fed9
call rcx
add ebx, 0x1ae775ef
test esi, 0xe033856f
rol ebx, 0x17
movabs rcx, 0x40c4b60000011de9
or esi, 0x262b55ea
call rcx
ret
jmp 0x140130e9b
mov rdi, qword [rax]
xchg rdi, rcx
xchg rsi, r9
mov rsi, qword [rcx + 0x30]
jmp 0x140130d48
mov qword [rsp + 0x20], r8
xchg r8, rax
lea r8, [rbp + 0x118]
mov rcx, 0xffffffffffffffff
lea rdx, [rbp + 0x120]
jne 0x140130dcf
je 0x140130dcf
jmp rax
jmp 0x140130bfa
xchg r8, r11
mov rcx, r11
xchg r8, r11
jmp 0x140130c18
nop
add dword [rax], eax
add byte [rbp - 0x79], cl
out dx, eax
mov r8d, r9d
xchg r10, r15
jmp 0x140130bd4
test al, al
jne 0x140130cdd
cmp edx, 0x5f030b49
je 0x140130f93
jmp 0x140130bcc
nop dword [rax]
mov r10d, r8d
mov edx, 0xe15685c1
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
jmp 0x140130cc9
cmp rax, 0xfffffffffffffffd
ja 0x1401319c8
xchg r10, r8
mov r8, qword [rbp + 0x120]
je 0x140130ece
jne 0x140130ece
movabs r8, 0x25cf96fffffd5ee9
cmp r11d, 0xca564c7e
sub r10d, 0xb32bd738
cmp r11d, 0xf748873f
lea r10d, [rbp + 0xc0b2]
je 0x14013128b
jmp 0x140130c31
test r15d, 0x506ffc30
call 0x140130886
or rax, rdx
xchg r8, r11
mov r11, rax
xchg r11, r8
mov rax, r11
mul r8
je 0x140130f62
jne 0x140130f62
jmp rax
jmp 0x140130de8
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
je 0x140130fd1
jne 0x140130fd1
test rcx, rcx
lea edx, [rdx + 0xc3eb]
lea r14d, [rdi - 0xa7c1]
or r11d, 0x15a8406
jmp rcx
jmp 0x140131028
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
xchg rdi, r15
jmp 0x140130ff5
mov r15, rax
xchg rdi, r15
call r10
mov rcx, qword gs:[0x60]
mov r8d, r15d
xchg rdx, rbx
jmp 0x1401310b7
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
jmp 0x14013110a
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
lea rdx, [0x140134930]
jmp 0x1401310d3
xchg r15, rdx
xchg r11, r9
mov r11, qword [rdx + 0x30]
xchg r11, r9
jmp 0x140131051
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop
mov r10d, r8d
mov edx, 0x1a8c70d1
je 0x140131089
jne 0x140131089
mul r15
neg rdx
call rcx
jno 0x140130d22
pop r13
and r11d, 0x9848d8c1
movabs rdx, 0x19df7f8b7eb587eb
lea r12d, [rdi + 0x17e1]
jns 0x14013181e
jmp 0x140131012
js 0x140131e73
je 0x140131123
inc r8d
jmp 0x140131064
mov rbx, qword [rcx + 0x18]
xchg rdx, rbx
xchg rcx, rbp
mov rbp, qword [rdx + 0x10]
xchg rbp, rcx
xchg rdx, r15
mov r15, qword [rcx]
jmp 0x14013103f
add rax, r9
mov ecx, 1
call rax
xchg r10, r13
mov r13, qword [rsp + 0x40]
xchg r13, r10
jmp 0x140130fe3
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140131115
cmp edx, 0x5a280ad4
jmp 0x1401310a9
test al, al
je 0x1401310af
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
jmp 0x1401310ed
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
or r12, qword [rcx + rcx*2]
add ecx, ecx
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
mov rcx, rdi
jmp 0x1401311dc
test r9d, r9d
je 0x14013122c
mov ebx, dword [rdi + 0x20]
nop dword [rax]
jne 0x140131180
je 0x140131180
cmp r8, rcx
div r12
syscall
div r10
add ebx, 0x3d46c4d4
bswap r8
ror r11d, 0x91
inc r14
popf
call rcx
lea r15d, [rbx - 0x3825]
int3
jmp 0x140131290
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
jmp 0x14013124d
test eax, eax
jne 0x1401319c8
mov r9d, 0x8000
jmp 0x14013125f
jne 0x140131207
cmp r8d, 0x98a4afa2
je 0x140131304
jmp 0x140131223
add rax, r9
call rax
mov rcx, qword [rsp + 0x30]
call r14
jmp 0x1401311b1
call r12
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
jmp 0x140131193
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jmp 0x1401311c4
test r9d, r9d
jne 0x140131298
mov rax, qword [rax]
jmp 0x14013128b
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140131223
nop dword [rax]
jmp 0x140131207
cmp rdi, r10
je 0x14013122c
mov r9d, dword [rdi + 0x18]
jmp 0x140131143
xchg r15, r10
mov qword [rbp + 0x118], r10
xchg r10, r15
jmp 0x140131271
lea r8, [rbp + 0x118]
mov rcx, 0xffffffffffffffff
lea rdx, [rbp + 0x120]
jmp 0x1401311ee
jmp 0x140131199
nop dword [rax + rax]
dec r9d
mov r8d, 0xbdcbfd7
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
jne 0x1401312e5
je 0x1401312e5
lea r8d, [rdi - 0x2a0]
jmp rax
jmp 0x140131234
mov ecx, dword [rdi + 0x24]
add rcx, r10
mov dword [rsp + 0x40], 0xf6f6f6f6
mov dword [rsp + 0x4b], 0x7c6f7d7f
mov dword [rsp + 0x44], 0xf6f6f6f6
mov dword [rsp + 0x4f], 0x6e383c3d
movzx edx, word [rcx + r9*2]
jmp 0x140131462
mov word [rsp + 0x53], 0x7676
mov r9d, dword [rcx + rdx*4]
xchg r15, r8
mov rdx, r8
jmp 0x140131352
xchg r8, r15
add r9, r10
xor eax, eax
mov byte [rsp + 0x55], al
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x4b]
movzx ecx, byte [rsp + rdx + 0x40]
jmp 0x140131391
add cl, al
mov byte [rsp + rdx + 0x4b], cl
mov byte [rsp + rdx + 0x40], r15b
inc rdx
cmp rdx, 0xa
jb 0x140131363
jne 0x1401313c3
je 0x1401313c3
syscall
ror r14d, 0x19
test rsi, rdx
rcl r14d, 0xcc
push r10
syscall
bswap rcx
movabs rbx, 0x74348ff61c226eb
lea ebx, [rcx - 0xff6a]
ja 0x140131125
jmp 0x1401313eb
mul rbx
test rsi, rdi
and r14d, 0xf6e90338
pop rsi
cmp rdx, rcx
jbe 0x140131427
ret
xor edx, edx
lea rcx, [rsp + 0x4b]
mov r8d, 0x800
call r9
mov r9, rax
mov r8d, r15d
movsxd rcx, dword [rax + 0x3c]
jmp 0x14013140a
mov r11d, dword [rcx + rax + 0x88]
mov ebx, dword [r11 + rax + 0x20]
nop word [rax + rax]
or al, 0x91
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov word [rsp + 0x48], 0xf6f6
je 0x140131495
jne 0x140131495
test r14, rdx
jge 0x140130f1b
jbe 0x1401318e9
sub r9d, 0x69642afe
pushf
call rax
xor ebx, 0x47a9e658
movabs r9, 0x518d13fffffe9ae9
lea r10d, [rbx + 0x8941]
add r13d, 0xd854ad59
pushfq
or r12d, 0x88d9fdf5
ror ecx, 0x38
div r8
ror ebp, 0x1d
ret
jmp 0x140131334
int 0
add cl, ch
or eax, 0x8c0f0000
add byte [rdi], cl
mov word [rdi + 0xd], es
add byte [rax], al
invalid
invalid
add byte [rax], al