Function at 0x1401339dc
Capabilities:
Contain obfuscated stackstrings
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
in al, 0x32
cdq
wait
int1
ror edi, 3
rcr edx, 0xbb
jmp rcx
cli
add eax, 0x366820f
add byte [rax], al
jmp 0x1401315e1
mov dword [rbp - 0x5b], 0x7f397e6d
mov dword [rbp - 0x7e], 0xf6f6f6f6
mov dword [rbp - 0x57], 0x7a738478
mov dword [rbp - 0x7a], 0xf6f6f6f6
mov dword [rbp - 0x53], 0x76766b2a
jmp 0x1401314a3
mov dword [rbp - 0x76], 0xf6f6f6f6
mov dword [rbp - 0x4f], 0x73764d2a
xor eax, eax
mov dword [rsp + 0x72], 0xf6f6f6f6
mov byte [rbp - 0x41], al
jmp 0x140131801
mov rdx, r15
mov dword [rbp - 0x67], 0x6b6f765a
mov dword [rsp + 0x76], 0xf6f6f6f6
mov dword [rbp - 0x63], 0x6f2a6f7d
mov dword [rsp + 0x7a], 0xf6f6f6f6
mov dword [rbp - 0x5f], 0x6b7c7e82
mov dword [rsp + 0x7e], 0xf6f6f6f6
jmp 0x14013147b
div rsi
ret
sbb cl, byte [rax + 0xf]
leave
ret
div r14
nop
js 0x140132c54
jo 0x140131371
rcr r8d, 1
call rcx
rcr ebp, 0x3f
jmp 0x140133048
pushf
jmp 0x140132951
lea r9d, [rcx + 0xd5c3]
bswap rdi
popfq
cmp r8, rbp
jmp 0x1401331de
jbe 0x140132e61
xchg dword [rcx + 0xc], edi
add byte [rax], al
js 0x140131ff9
ret
inc esp
movabs rsi, 0x358ec2000003a8e9
inc r13
pause
call rcx
ror r12d, 0x7f
xor r10d, 0x1df1d98c
pause
jmp 0x140133b54
and r15d, 0x647b5ac0
cmp rdx, rcx
pop rsi
ja 0x140131448
jmp 0x140132d14
mul rsi
lea ecx, [rdx - 0x3745]
rol r10d, 0x3b
bswap rbp
cmp r9, rbx
je 0x14013307b
jne 0x14013307b
neg rdx
jmp 0x140132f7e
or dword [rcx - 0x7f], eax
cmc
test eax, 0x4854480f
mov ecx, 0xfffb54e9
push qword [rcx + rsi*2]
push rax
jp 0x1401337e8
test r10d, 0x83ca56f8
inc r15
popf
jno 0x140132aac
xor r14d, 0xb74d3bee
jmp 0x140133962
jmp rcx
nop dword [rax]
nop dword [rax + rax]
mov ecx, r8d
lea rdx, [r9 + rcx*4]
mov ecx, dword [rdx + r11]
mov edx, 0x161d8820
add rcx, r9
jmp 0x1401334bd
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140133630
test byte [rbp + 1], ah
add byte [rax], al
nop dword [rax]
movsx eax, al
jne 0x1401334f9
je 0x1401334f9
test r11, rdi
xor esi, 0x56002ffe
cmp r15d, 0x7dcc50d3
js 0x140132b9b
inc r9
test rdi, rcx
jne 0x140133562
jmp rcx
jmp 0x140133582
lodsd eax, dword [rsi]
invalid
mov byte [rsp + rdx + 0x67], cl
mov byte [rsp + rdx + 0x5c], r15b
inc rdx
cmp rdx, 0xa
jb 0x1401335b0
xor edx, edx
lea rcx, [rsp + 0x67]
jmp 0x140133555
mov word [rsp + 0x6f], 0x7676
mov r12d, dword [rcx + rdx*4]
xchg r10, r15
mov rdx, r10
xchg r15, r10
add r12, r10
xor eax, eax
jmp 0x1401335a5
mov r8d, 0x800
call rdi
xchg r9, rax
mov rax, r9
jmp 0x140133567
xchg r9, rax
mov r8d, r15d
movsxd rcx, dword [rax + 0x3c]
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
jmp 0x140133499
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401334ce
cmp edx, 0x958e292b
jmp 0x14013362a
mov byte [rsp + 0x71], al
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x67]
movzx ecx, byte [rsp + rdx + 0x5c]
add cl, al
jmp 0x140133515
invalid
add rcx, r10
mov dword [rsp + 0x5c], 0xf6f6f6f6
mov dword [rsp + 0x67], 0x7c6f7d7f
mov dword [rsp + 0x60], 0xf6f6f6f6
movzx edx, word [rax + r9*2]
mov dword [rsp + 0x6b], 0x6e383c3d
mov word [rsp + 0x64], 0xf6f6
div dh
je 0x140133614
jne 0x140133614
cmp r13d, 0xac854b73
lea r14d, [rdx - 0x4684]
and r8d, 0xe51545e1
call rcx
lea r9d, [rdx + 0x5fb5]
movabs r14, 0x2ee867ffffff1ee9
cmp r15, rbx
xor edx, 0xc4da98b4
jmp 0x1401338ad
jmp 0x140133537
je 0x140133638
inc r8d
jmp 0x1401334a5
mov eax, dword [r10 + r9 + 0x24]
add rax, r9
mov ecx, r8d
jmp 0x140133736
mov ecx, dword [r14 + 0x10]
mov ebx, ecx
lea rax, [0x140000000]
add rbx, rax
mov edi, r15d
jmp 0x140133660
mov rcx, qword [rbx]
test rcx, rcx
je 0x14013392b
xchg rsi, rdx
mov rsi, rcx
xchg rdx, rsi
nop
je 0x14013368f
jne 0x14013368f
call rcx
cmp rdx, rdx
bswap r11
or edi, 0x506ae9f0
cmp r10, rbx
push r8
movabs rcx, 0x635e69000000c0e9
jns 0x140133cbf
jmp 0x140133754
div r12
test r11d, 0x11267be7
syscall
push rbx
ret 0x10
xor r8d, r8d
add rcx, rax
xor edx, edx
call rdi
xchg rsi, rcx
mov rcx, rax
jmp 0x1401337ad
jb 0x1401338a0
cmp dword [r14 + 0xc], r15d
je 0x1401340a4
lea rax, [0x140000000]
nop
mov ecx, dword [r14 + 0xc]
jne 0x140133724
je 0x140133724
dec rdi
test r8d, 0x888522ed
bswap rcx
test r10d, 0xc67b702a
bswap r12
test r9d, 0x90e98591
ror edx, 0x68
bswap rbp
lea r9d, [rbp + 0x8155]
add r9d, 0xef4d20ca
pushfq
cmp rdi, rbx
cmp edx, 0x39d3110
jmp rax
jmp 0x1401336ad
movzx edx, word [rax + rcx*2]
xchg r15, rdi
mov rax, rdi
xchg rdi, r15
mov ecx, dword [r10 + r9 + 0x1c]
add rcx, r9
mov r13d, dword [rcx + rdx*4]
jmp 0x140133892
nop
sub rax, 0x4aff295f
add rax, 0x4aff2961
add rax, rdx
je 0x14013378f
jne 0x14013378f
rol r8d, 0xaf
mul r11
ror r13d, 0xff
test r11, rcx
and r15d, 0x520b62b6
ret
jmp 0x140133819
xchg rcx, rsi
test rax, rax
je 0x140133cb5
je 0x1401337c1
jne 0x1401337c1
jmp rax
jmp 0x1401337e8
mov ecx, dword [r14]
test ecx, ecx
jne 0x14013364c
jmp 0x140133648
xchg r8, rax
mov rax, r8
xchg r8, rax
test rax, rax
je 0x140133959
mov eax, dword [r14 + 0x10]
jmp 0x140133872
xchg r13, r8
jmp 0x1401338c6
movzx edx, dx
test rcx, rcx
xchg rcx, rsi
mov rsi, rcx
xchg rcx, rsi
cmovns rdx, rax
call r12
je 0x140133851
jne 0x140133851
rcl edx, 0x82
or r13d, 0x831070e5
mul r10
jle 0x140133bab
jmp rax
jmp 0x1401337f8
test eax, eax
je 0x1401338b1
invalid
mov edx, edi
add rdx, rax
lea rax, [0x140000000]
xchg r13, r8
mov qword [rdx + rax], r13
jmp 0x140133811
add r13, r9
nop word [rax + rax]
mov byte [rsp + rax + 0x67], r15b
inc rax
cmp rax, 0xa
jmp 0x1401336c2
adc esi, edi
invalid
mov rax, qword [rbx]
lea rcx, [0x140000000]
mov qword [rcx + rax], r8
lea rax, [0x140000000]
mov rcx, qword [rbx + 8]
jne 0x1401338d5
je 0x1401338d5
mov edi, 0x89e6a830
movabs r14, 0x2be2433b07d10feb
test edx, 0xb8d6df0d
ret 0x38
jmp 0x1401338e6
add rbx, 8
sub edi, 0xfffffff8
xchg rdx, r12
jmp 0x14013391c
sub r14, 0x433e26b9
add r14, 0x433e26cd
cmp dword [r14 + 0xc], r15d
jmp 0x14013390c
je 0x1401340a4
mov rdi, qword [rsp + 0x30]
jmp 0x1401336da
mov r12, rcx
xchg r12, rdx
test rcx, rcx
jne 0x140133754
nop
je 0x140133941
jne 0x140133941
jno 0x1401347a2
xor r12d, 0xab0e0197
call rax
movabs r11, 0xe06e09f03a8b2eb
xor r8d, 0xe9b9a635
rcr r11d, 0x28
jmp 0x14013468f
jmp 0x1401338f5
mov dword [rsp + 0x30], 0xf6f6f6f6
xchg r15, rsi
xchg edi, esi
mov rdx, rsi
xchg r15, rsi
jmp 0x140133bf3
mov dword [rbp + 0x28], 0x55572a44
mov dword [rbp - 0x28], 0xf6f6f6f6
mov dword [rbp + 0x2c], 0x57143c4c
mov dword [rbp - 0x24], 0xf6f6f6f6
mov dword [rbp + 0x30], 0x2a6f756b
mov dword [rbp - 0x20], 0xf6f6f6f6
jmp 0x140133b92
xchg r15, r8
mov dword [rbp + 0x14], 0x76736b50
mov dword [rbp - 0x3c], 0xf6f6f6f6
mov dword [rbp + 0x18], 0x7e2a6e6f
mov dword [rbp - 0x38], 0xf6f6f6f6
mov dword [rbp + 0x1c], 0x78732a79
jmp 0x140133c1e
mov dword [rbp + 0x50], 0x6b7e7f6c
mov dword [rbp], 0xf6f6f6f6
cmp rdx, 5
jb 0x140133c0f
mov dword [rbp - 0x40], 0xf6f6f6f6
xchg r8, r15
mov rdx, r8
jne 0x140133a5d
je 0x140133a5d
call rax
lea r9d, [rbp - 0x2289]
jmp rax
jmp 0x1401339af
mov dword [rbp - 0x10], 0xf6f6f6f6
mov dword [rbp + 0x44], 0x2a35354d
mov dword [rbp - 0xc], 0xf6f6f6f6
mov dword [rbp + 0x48], 0x736e6f5c
mov dword [rbp - 8], 0xf6f6f6f6
clc
div dh
div dh
mov dword [rbp + 0x4c], 0x737c7e7d
mov dword [rbp - 4], 0xf6f6f6f6
div dh
div dh
jmp 0x1401339da
mov dword [rbp + 0x34], 0x6f7c7f7d
mov dword [rbp - 0x1c], 0xf6f6f6f6
mov dword [rbp + 0x38], 0x6f727e2a
mov dword [rbp - 0x18], 0xf6f6f6f6
mov dword [rbp + 0x3c], 0x7d73602a
mov dword [rbp - 0x14], 0xf6f6f6f6
mov dword [rbp + 0x40], 0x2a766b7f
jne 0x140133bda
div dh
test bh, 0x45
cmp al, 0x2a
invalid
je 0x140133bda
test edx, 0xe3197808
div r11
call rax
js 0x14013317b
movabs r12, 0x3eadd5ffffff57e9
ror r13d, 0x55
pushf
pushfq
inc rdx
call rcx
call 0x140134374
jmp 0x140133b36
mov dword [rsp + 0x36], 0x797c7c4f
mov byte [rsp + 0x34], 0xf6
mov word [rsp + 0x3a], 0x7c
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x36]
movzx ecx, byte [rsp + rdx + 0x30]
jmp 0x140133c8d
mov dword [rbp - 0x34], 0xf6f6f6f6
mov dword [rbp + 0x20], 0x6b737e73
mov dword [rbp - 0x30], 0xf6f6f6f6
mov dword [rbp + 0x24], 0x6f847376
mov dword [rbp - 0x2c], 0xf6f6f6f6
jne 0x140133c70
je 0x140133c70
test r13d, 0xf396f5ef
lea r9d, [rbx + 0xd93e]
js 0x140133876
popfq
test r8d, 0x6c42e595
jle 0x140132e4f
xor r10d, 0xf08ed994
movabs r12, 0x22b7c5fffffd0be9
lea r10d, [rbx + 0x762]
call rcx
sub r15d, 0x9900f3cc
call 0x140133b62
jmp 0x140133980
add cl, al
mov byte [rsp + rdx + 0x36], cl
mov byte [rsp + rdx + 0x30], r15b
inc rdx
jmp 0x140133a02
mov dword [rsp + 0x40], 0xf6f6f6f6
xchg rdx, r15
cli
mov r15, rdx
xchg rdx, r15
mov dword [rsp + 0x46], 0x797c7c4f
jne 0x140133cd7
je 0x140133cd7
test r12, rbx
movabs r11, 0xe86fc000003a5e9
bswap rsi
pushfq
lea edx, [rdi - 0x7873]
rcr ebx, 0xa4
pause
ror r10d, 0xee
cpuid
call 0x140134c82
jmp 0x140134081
mov byte [rsp + r15 + 0x46], 0
inc r15
cmp r15, 5
jb 0x140133cf9
mov eax, 0xfffffffe
jmp 0x1401316ad
add cl, al
mov byte [rbp + rdx + 0xbc], cl
mov byte [rbp + rdx + 0x68], r15b
inc rdx
cmp rdx, 0x53
jb 0x140133dcb
mov r9d, 0x10
jmp 0x140133e98
mov dword [rbp + 0x9c], 0xf6f6f6f6
mov dword [rbp + 0xf0], 0x736e6f5c
mov dword [rbp + 0xa0], 0xf6f6f6f6
mov dword [rbp + 0xf4], 0x737c7e7d
jmp 0x140133e2a
mov dword [rbp + 0x90], 0xf6f6f6f6
mov dword [rbp + 0xe4], 0x7d73602a
mov dword [rbp + 0x94], 0xf6f6f6f6
mov dword [rbp + 0xe8], 0x2a766b7f
mov dword [rbp + 0x98], 0xf6f6f6f6
invalid
test esp, ebp
invalid