Function at 0x140132ca3
Capabilities:
Contain obfuscated stackstrings
Execute syscall
Resolve function by parsing pe exports

Disassembly:
movabs byte [0x48fe9e0f749], al
int3
int1
invalid
test r9d, r9d
je 0x140132e97
mov r11d, dword [rbx + 0x20]
jmp 0x140132e0b
xchg r10, r15
jmp 0x140132f37
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x140132ea7
jmp 0x140132f1c
xchg ebx, ecx
xchg ebx, eax
invalid
nop word [rax + rax]
dec r9d
mov r8d, 0x31d4d9c8
lea rdx, [r11 + r9*4]
mov ecx, dword [rdx + r10]
jmp 0x140132ebd
mov rax, qword [rax]
jmp 0x140132bec
je 0x140132f29
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
jmp 0x140132c93
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
jmp 0x140132e9f
cmp r8d, 0x118e6a9
cmp eax, 0x118e6a9
je 0x140133055
test r9d, r9d
jne 0x140132e16
jmp 0x140132e97
mov r15, qword [rax + 0x30]
xchg r15, r10
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
jmp 0x140132fd8
add rbx, r10
cmp rbx, r10
je 0x140132e97
mov r9d, dword [rbx + 0x18]
jmp 0x140132b8f
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov rax, qword gs:[0x60]
mov edi, dword [rcx + rdx*4]
jne 0x140133092
je 0x140133092
mul rdi
jae 0x140133521
call rax
inc rbp
lea esi, [rdi + 0x45d7]
mov r10d, 0xa3c467
movabs rdx, 0x28548b000000e6e9
jnp 0x140133ef9
jmp 0x14013317d
or esi, 0x5a91d33b
jmp 0x140133b6c
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jmp 0x1401330e7
xchg r10, r13
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
jmp 0x1401331e8
jne 0x14013320f
mov rax, qword [rax]
jmp 0x140133108
jne 0x1401331a2
cmp edx, 0x7f3819e0
je 0x140133224
test r9d, r9d
jmp 0x1401330d9
nop dword [rax]
xchg r10, r13
mov r13, qword [rax + 0x30]
jne 0x140133158
je 0x140133158
lea r8d, [rbx + 0x4f54]
ror r12d, 0x96
jge 0x14013381f
neg rbp
jmp rcx
jmp 0x1401330bf
add r8, r10
movzx ecx, byte [r8]
inc r8
jmp 0x140133198
mov rax, qword [rax + 0x18]
add rdi, r10
xchg rdi, rbx
mov qword [rsp + 0x30], rbx
xchg rbx, rdi
mov rax, qword [rax + 0x10]
jmp 0x140133101
test cl, cl
je 0x1401330f9
nop
movsx ecx, cl
lea r8, [r8 + 1]
je 0x1401331d3
jne 0x1401331d3
popf
cmp r10, rdi
lea r14d, [rbp - 0x279e]
lea r11d, [rbx - 0xa501]
lea ebp, [rdx + 0x9c55]
bswap rsi
pause
ror r14d, 0xee
call rcx
movabs rcx, 0x4df227fffffed3e9
ret
jmp 0x1401330ab
je 0x1401330df
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1401330df
jmp 0x140133200
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0xaeccacc
jmp 0x14013316e
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
jmp 0x1401332b3
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1401333e0
nop dword [rax]
jne 0x14013327c
je 0x14013327c
jle 0x1401324f8
lea r12d, [rbp + 0x2d82]
call rcx
rol ecx, 0xbd
jmp rax
jmp 0x140133314
mov r8d, r15d
movsxd rcx, dword [rax + 0x3c]
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
nop dword [rax]
nop dword [rax + rax]
jmp 0x1401333e8
mov dword [rsp + 0x5c], 0xf6f6f6f6
mov dword [rsp + 0x67], 0x7c6f7d7f
mov dword [rsp + 0x60], 0xf6f6f6f6
movzx edx, word [rax + r9*2]
jmp 0x140133382
lea rcx, [rsp + 0x67]
mov r8d, 0x800
call rdi
xchg r9, rax
mov rax, r9
xchg r9, rax
je 0x1401332fc
jne 0x1401332fc
rcr edx, 0xc0
test r8d, 0x3ddb424a
inc r13
movabs rdx, 0x67c9f2084b8390eb
nop
or dword [rbx + 8], 0xfffffff2
leave
or ebx, 0xcc58b907
jmp 0x14013328e
add r13d, 0x404de21d
ret 8
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x1401333ce
inc rdx
cmp rdx, 0xa
jb 0x1401333b4
xor edx, edx
je 0x14013336b
jne 0x14013336b
add esi, 0x43b14949
int3
jmp 0x1401332d5
mov dword [rsp + 0x6b], 0x6e383c3d
mov word [rsp + 0x64], 0xf6f6
mov word [rsp + 0x6f], 0x7676
mov r12d, dword [rcx + rdx*4]
mov rdx, r15
add r12, r10
xor eax, eax
jmp 0x1401333a9
mov byte [rsp + 0x71], al
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x67]
movzx ecx, byte [rsp + rdx + 0x5c]
add cl, al
mov byte [rsp + rdx + 0x67], cl
mov byte [rsp + rdx + 0x5c], r15b
jmp 0x14013332e
jne 0x140133314
cmp edx, 0x958e292b
je 0x140133400
inc r8d
jmp 0x1401333e8
mov ecx, r8d
lea rdx, [r9 + rcx*4]
mov ecx, dword [rdx + r11]
mov edx, 0x161d8820
add rcx, r9
jmp 0x140133235
mov eax, dword [r10 + r9 + 0x24]
add rax, r9
mov ecx, r8d
movzx edx, word [rax + rcx*2]
je 0x140133415
jne 0x140133415
jmp 0x140133525
ret
je 0x140133a60
mov ecx, dword [r14]
test ecx, ecx
jne 0x1401334b3
mov ecx, dword [r14 + 0x10]
mov ebx, ecx
jmp 0x140133540
mov ecx, dword [r14 + 0xc]
xor r8d, r8d
add rcx, rax
xor edx, edx
call rdi
mov rsi, rax
test rax, rax
jmp 0x14013349e
mov rdx, r8
xchg rcx, r8
nop
nop
sub rax, 0x1bc35eb3
jmp 0x140133585
xchg rcx, rsi
cmovns rdx, rax
call r12
mov r8, rax
test rax, rax
je 0x1401336a6
stosb byte [rdi], al
add dword [rax], eax
invalid
mov eax, dword [r14 + 0x10]
jmp 0x140133505
test eax, eax
je 0x140133602
mov edx, edi
add rdx, rax
lea rax, [0x140000000]
xchg r9, r8
mov qword [rdx + rax], r9
jmp 0x1401335fa
invalid
lea rax, [0x140000000]
add rbx, rax
mov edi, r15d
je 0x140133553
jne 0x140133553
movabs rbp, 0x4e31d4f608da70eb
or ebp, 0xa64e831f
lea r12d, [rbx + 0xf215]
or r8d, 0xdf813fbc
lea r11d, [rcx + 0x5b10]
rcl r9d, 0x5b
and ecx, 0xccc3910f
jmp 0x1401328b6
jmp fcn.1401335c5
add rax, 0x1bc35eb5
add rax, rdx
movzx edx, dx
test rcx, rcx
xchg rcx, rsi
mov rsi, rcx
jmp 0x1401334e6
xchg rcx, rsi
mov rsi, qword [rbx]
xchg rsi, rcx
test rcx, rcx
je 0x140133699
xchg r8, rcx
je 0x1401335e0
jne 0x1401335e0
movabs r15, 0x8a93ffffffeeee9
test rbx, rdx
bswap rsi
test rbx, rdx
lea ebp, [rcx - 0xdda]
ret 0x30
jmp 0x1401334d3
xchg r9, r8
jmp 0x140133617
mov rax, qword [rbx]
lea rcx, [0x140000000]
mov qword [rcx + rax], r8
lea rax, [0x140000000]
mov rcx, qword [rbx + 8]
neg rbx
jmp 0x14013363e
add r14, 0x9a43cf3
cmp dword [r14 + 0xc], r15d
je 0x140133e69
mov rdi, qword [rsp + 0x30]
jmp 0x1401334ba
add rbx, 0xfffffffffffffff8
neg rbx
nop
je 0x14013365e
jne 0x14013365e
div r10
rcl ecx, 0xd4
cmp r8, rbp
push r13
or r10d, 0x9585a729
movabs rdi, 0x9b6e9523d0e16eb
cpuid
or r12d, 0x1eb4307c
call rax
call fcn.140132fda
jmp 0x140133676
sub edi, 0x6928a45b
add edi, 0x6928a463
xchg rcx, rdx
mov rcx, rdx
xchg rdx, rcx
test rcx, rcx
jmp 0x140133693
jne 0x1401334da
nop
sub r14, 0x9a43cdf
jmp 0x140133623
mov dword [rsp + 0x30], 0xf6f6f6f6
mov rdx, r15
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
jmp 0x1401338ea
mov r9d, 0x10
lea r8, [rsp + 0x36]
lea rdx, [rbp + 0x14]
xor ecx, ecx
call r13
xchg r15, rax
jmp 0x140133a2e
mov dword [rbp - 0xc], 0xf6f6f6f6
mov dword [rbp + 0x48], 0x736e6f5c
mov dword [rbp - 8], 0xf6f6f6f6
mov dword [rbp + 0x4c], 0x737c7e7d
mov dword [rbp - 4], 0xf6f6f6f6
mov dword [rbp + 0x50], 0x6b7e7f6c
mov dword [rbp], 0xf6f6f6f6
jmp 0x1401339c9
mov dword [rbp - 0x14], 0xf6f6f6f6
mov dword [rbp + 0x40], 0x2a766b7f
mov dword [rbp - 0x10], 0xf6f6f6f6
mov dword [rbp + 0x44], 0x2a35354d
jmp 0x1401336e5
mov dword [rbp + 0x2c], 0x57143c4c
mov dword [rbp - 0x24], 0xf6f6f6f6
mov dword [rbp + 0x30], 0x2a6f756b
mov dword [rbp - 0x20], 0xf6f6f6f6
je 0x14013379b
jne 0x14013379b
pushf
ja 0x1401345b3
jp 0x140133d2d
lea r14d, [rbp - 0xb900]
ror r11d, 0xac
popf
test ebp, 0x46ad43ac
pushf
and esi, 0xb65d8ef0
test r12, rbx
lea esi, [rcx + 0xee9a]
rcr r11d, 0x67
xor r13d, 0xa3c61b14
movabs rsi, 0xd66a000000122e9
jne 0x140133c03
jmp 0x1401338c2
div r12
add r10d, 0x5c5fed5
cmp rcx, rbx
ret 0x18
jmp fcn.14013190c
inc rdx
cmp rdx, 0x53
jb 0x140133881
jne 0x1401337f2
je 0x1401337f2
syscall
js 0x1401337e6
pop r13
cpuid
lea r11d, [rbx + 0x9aa8]
lea edx, [rbx + 0x1f58]
rcr edx, 0x73
rcr edi, 0xad
cpuid
rcr r9d, 0xe7
movabs rbx, 0x2197e9fffffed3e9
jmp 0x140134453
jae 0x1401337a9
fild qword [rbp - 0x3ebe5df1]
invalid
jmp 0x1401336ca
xchg r12, rdx
mov r12, r15
xchg rdx, r12
mov dword [rbp + 0x14], 0x76736b50
mov dword [rbp - 0x3c], 0xf6f6f6f6
mov dword [rbp + 0x18], 0x7e2a6e6f
je 0x140133831
jle 0x140133895
pcmpeqw mm1, qword [0x12d0ab969]
invalid
jne 0x140133831
xor r15d, 0x4c3f44ec
rcl r13d, 0x23
movabs rdx, 0x50b1608033a819eb
cmp r14, rdi
call rax
jl 0x140132f1d
jmp 0x14013384c
cmp rbx, rdx
jmp 0x1401339f7
mov dword [rbp - 0x38], 0xf6f6f6f6
mov dword [rbp + 0x1c], 0x78732a79
mov dword [rbp - 0x34], 0xf6f6f6f6
mov dword [rbp + 0x20], 0x6b737e73
mov dword [rbp - 0x30], 0xf6f6f6f6
mov dword [rbp + 0x24], 0x6f847376
jmp 0x140133903
nop word [rax + rax]
movzx eax, byte [rbp + rdx + 0x14]
movzx ecx, byte [rbp + rdx - 0x40]
add cl, al
mov byte [rbp + rdx + 0x14], cl
mov byte [rbp + rdx - 0x40], r15b
je 0x1401338a0
sal byte [rax + rcx + 0x75], 6
jne 0x1401338a0
popf
call rcx
movabs r12, 0x591a9fffffff19e9
ror r13d, 0x8a
inc rdi
lea r10d, [rdx - 0xe140]
lea r8d, [rdx + 0x5b74]
call 0x140132ca3
jmp 0x1401337be
mov dword [rbp + 0x34], 0x6f7c7f7d
mov dword [rbp - 0x1c], 0xf6f6f6f6
mov dword [rbp + 0x38], 0x6f727e2a
mov dword [rbp - 0x18], 0xf6f6f6f6
mov dword [rbp + 0x3c], 0x7d73602a
jmp 0x14013371b
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
movzx ecx, byte [rsp + rdx + 0x30]
add cl, al
jmp 0x1401339b8
mov dword [rbp - 0x2c], 0xf6f6f6f6
mov dword [rbp + 0x28], 0x55572a44
mov dword [rbp - 0x28], 0xf6f6f6f6
jne 0x140133953
je 0x140133953
mul rdi
jmp rax
jmp 0x14013373c
cmp rdx, 5
jb 0x1401338f2
mov dword [rbp - 0x40], 0xf6f6f6f6
jne 0x1401339a4
je 0x1401339a4
popf
div rdx
pushfq
test r9, rcx
jns 0x140133a72
xor r10d, 0xc7a78089
jmp rax
jmp 0x140133802
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r15b
inc rdx
jmp 0x140133966
mov dword [rbp + 0x54], 0x7d6f766c
mov dword [rbp + 4], 0xf6f6f6f6
mov dword [rbp + 0x58], 0x6f7c6b2a
mov dword [rbp + 8], 0xf6f6f6f6
mov dword [rbp + 0x5c], 0x7d78732a
mov dword [rbp + 0xc], 0xf6f6f6f6
jmp 0x140133a43
add byte [rax + rcx*4 + 0x7c], al
add eax, 0xc0ff4814
mov byte [rbp + rax + 0x14], r15b
inc rax
cmp rax, 0x53
jb 0x1401339f8
nop
mov byte [rsp + r15 + 0x36], 0
inc r15
jmp 0x140133a1a
cmp r15, 5
jb 0x140133a0c
mov eax, 0xfffffffe
jmp 0x1401337b9
mov r15, rax
xchg r15, rax
nop word [rax + rax]
jmp 0x1401339f8
invalid
mov dword [rbp + 0x60], 0x76766b7e
mov word [rbp + 0x10], 0xf6f6
mov dword [rbp + 0x64], 0x386e6f
cmp byte [rax], al
mov byte [rbp + 0x12], 0xf6
jmp 0x14013387b
mov dword [rsp + 0x40], 0xf6f6f6f6
xchg rdx, rdi
mov rdi, r15
xchg rdi, rdx
mov dword [rsp + 0x46], 0x797c7c4f
mov byte [rsp + 0x44], 0xf6
jmp 0x140133dec
and al, 0x46
jl 0x140133af4
jns 0x140133a40
and al, 0x44
imul cl
imul eax, dword [rbx], 0x85c70000
cld
add byte [rax], al
add byte [rsi + rsi*2 + 0x6f], ch
jge 0x140133a55
mov dword [rbp + 0xfc], 0x7d6f766c
mov dword [rbp + 0xac], 0xf6f6f6f6
test dword [rax + rax - 0x90a0000], ebp
div dh
mov dword [rbp + 0x100], 0x6f7c6b2a
jmp 0x140133c38
mov dword [rbp + 0xd0], 0x55572a44
mov dword [rbp + 0x80], 0xf6f6f6f6
mov dword [rbp + 0xd4], 0x57143b4c
mov dword [rbp + 0x84], 0xf6f6f6f6
mov dword [rbp + 0xd8], 0x2a6f756b
mov dword [rbp + 0x88], 0xf6f6f6f6
mov dword [rbp + 0xdc], 0x6f7c7f7d
jmp 0x140133af1
mov dword [rbp + 0x8c], 0xf6f6f6f6
mov dword [rbp + 0xe0], 0x6f727e2a
add byte [rax], al
add dh, dh
div dh
test bh, 0x85
loopne 0x140133aff
add byte [rax], al
sub bh, byte [rsi + 0x72]
outsd dx, dword [rsi]
mov dword [rbp + 0x90], 0xf6f6f6f6
jne 0x140133b32
je 0x140133b32
sub edi, 0x8a735813
mov r8d, 0x2c9c69fe
jg 0x140134909
cpuid
inc rbp
invalid
invalid