Function at 0x140130000
Capabilities:
Access peb ldr_data
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
jle 0x14012f69a
stc
rol byte cs:[rcx - 0xa], 0x84
mov r13b, 0xb1
xor al, 0xc9
cli
sub eax, 0xd748d8aa
jb 0x14012f6a5
stc
invalid
ret
fidiv dword [rdi]
std
mov eax, 0x1ce73bc0
mov ecx, 0xaf610436
push rcx
adc al, 0x19
jle 0x14012f695
invalid
push rsp
lea ebx, [rbx + 0x4f01332d]
add dh, dl
retf
xchg r13, r9
mov qword [rsp + 0x20], r13
xchg r13, r9
xchg r8, rbp
jmp 0x14013010c
xchg r10, r12
xchg r11, rbp
mov rbp, qword [r10 + 0x30]
xchg rbp, r11
movsxd rax, dword [r11 + 0x3c]
mov ebx, dword [rax + r11 + 0x88]
jmp 0x140130031
mov r10d, dword [rbx + r11 + 0x20]
nop dword [rax + rax]
mov r9d, r8d
mov edx, 0x55eab7d1
jmp 0x140130123
mov rax, qword [r10 + 0x10]
xchg r12, r10
mov r12, qword [rax]
jmp 0x140130013
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
push 0x308ec65
mov qword [rsp], r15
lea rbp, [rsp - 0x2b8]
jmp 0x1401300a6
push 0x167a1fcc
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r13
jmp 0x140130057
test al, al
je 0x1401300d1
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x1401300f3
sub rsp, 0x3b8
mov rax, qword gs:[0x60]
xor r13d, r13d
mov r8d, r13d
mov r10, qword [rax + 0x18]
jmp 0x140130048
cmp edx, 0xd985a5e4
je 0x140130139
inc r8d
jmp 0x14013003b
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
push 0x3d2412b1
mov qword [rsp], rbx
nop
jmp 0x140130078
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14013009a
jmp 0x1401300c5
mov qword [rsp + 0x18], rbp
xchg rbp, r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
jmp 0x1401300d9
lea rax, [r10 + r9*4]
mov ecx, dword [rax + r11]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
jmp 0x14013008f
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + r11 + 0x1c]
jmp 0x14013025d
mov r8, qword [rcx + 0x10]
xchg r8, rax
xchg rcx, r10
mov r10, qword [rax]
xchg r10, rcx
xchg r9, rdx
mov rdx, qword [rcx + 0x30]
jmp 0x140130192
mov r10d, r8d
mov edx, 0xdcedcaed
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
jmp 0x1401301ef
xchg rdx, r9
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
je 0x1401301de
jne 0x1401301de
lea r8d, [rdx - 0x933e]
pause
rcr r14d, 0xd2
jle 0x140130847
lea ebp, [rdx - 0xd4b3]
rol r14d, 0xdb
call rcx
sub r8d, 0xccd3a671
rcr r9d, 0x47
pushfq
pushf
movabs r12, 0x6adc194e1dc397eb
test esi, 0x2279defe
ret 0x10
jmp 0x140130177
inc rcx
test al, al
je 0x1401302a3
nop dword [rax]
jne 0x14013022b
je 0x14013022b
jmp rax
jmp 0x140130277
add rcx, r11
mov edi, dword [rcx + rdx*4]
xchg r15, rcx
mov r15, qword [rax + 0x18]
xchg rcx, r15
add rdi, r11
xchg r8, rax
jmp 0x14013015c
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x140130291
jne 0x140130277
cmp edx, 0x967ff6ef
je 0x1401302ab
inc r8d
jmp 0x140130177
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
jmp 0x140130336
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax]
mov r10d, r8d
mov edx, 0xc3efe229
jmp 0x1401303cb
je 0x1401303db
inc r8d
jmp 0x1401302da
je 0x1401302ed
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x14013030a
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401302fe
cmp edx, 0x3174ef3a
jmp 0x1401302e7
movzx eax, byte [rcx]
inc rcx
test al, al
jmp 0x1401302f5
mov r15d, dword [rcx + rdx*4]
xchg r15, rcx
mov r15, qword [rax + 0x18]
xchg r15, rcx
add r15, r9
mov rax, qword [rcx + 0x10]
xchg rcx, r13
jmp 0x140130353
mov r13, qword [rax]
xchg rcx, r13
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
je 0x1401303a5
jne 0x1401303a5
lea ebp, [rdi - 0x9146]
push r13
je 0x14012f649
call rax
jmp rax
jmp 0x1401302d1
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
jmp 0x140130329
mov ecx, dword [rbx + r9 + 0x24]
xor r8d, r8d
add rcx, r9
mov dword [rsp + 0x28], 4
xchg r8, rsi
jmp 0x140130431
mov r11d, dword [rbx + r9 + 0x20]
nop word [rax + rax]
mov r10d, r8d
mov edx, 0x652a85fb
jmp 0x140130472
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
jmp 0x1401303f6
mov qword [rsp + 0x3b0], r8
xchg r8, rsi
mov dword [rsp + 0x20], 0x3000
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
jmp 0x14013048a
test al, al
jne 0x140130548
cmp edx, 0x44465f52
je 0x140130554
inc r8d
jmp 0x140130404
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
jmp 0x14013053f
mov r14d, dword [rcx + rdx*4]
lea rdx, [rsp + 0x48]
add r14, r9
jmp 0x140130514
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x140130456
cmp qword [rsp + 0x48], r13
je 0x14013383a
mov rax, qword gs:[0x60]
mov r8d, r13d
jne 0x1401304f6
je 0x1401304f6
dec r15
mul r9
call rcx
jmp rcx
jmp 0x140130411
xchg r13, rcx
mov qword [rsp + 0x48], rcx
xchg r13, rcx
lea r9, [rbp + 0xd0]
mov qword [rbp + 0xd0], 0x1f400000
mov rcx, 0xffffffffffffffff
call rdi
jmp 0x1401304ac
je 0x14013046a
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x14013049b
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
jmp 0x140130591
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x140130697
mov r11, qword [rcx + 0x10]
xchg r11, rax
xchg rdx, rcx
jmp 0x14013067e
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov esi, dword [rcx + rdx*4]
mov rcx, qword [rax + 0x18]
add rsi, r9
xchg r11, rax
jne 0x1401305ad
je 0x1401305ad
cpuid
movabs r13, 0xbfded1346ddd4eb
lea r10d, [rbx - 0x6081]
jmp rax
jmp 0x140130583
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
jne 0x140130604
je 0x140130604
dec r12
lea ebx, [rcx + 0x3035]
pushfq
mul rcx
test r13, rcx
mul rbp
or r14d, 0xa82398c
test r10d, 0x2ab56a62
lea edx, [rbp - 0x66ad]
mov r11d, 0x84e5985b
jmp rax
jmp 0x140130572
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
mov r10d, r8d
mov edx, 0x5c0a2425
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
jne 0x140130657
je 0x140130657
lea r15d, [rbp + 0x8e25]
jg 0x140130cd2
inc r8
add ecx, 0xf88ad818
rcl edi, 0xe9
pop rdi
movabs rsi, 0x64e9c27a670a0feb
jmp rcx
jmp 0x140130668
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1401306a9
jmp 0x1401305c3
mov rdx, qword [rax]
xchg rdx, rcx
xchg r10, r9
mov r10, qword [rcx + 0x30]
xchg r10, r9
movsxd rax, dword [r9 + 0x3c]
jmp 0x140130615
jne 0x1401305c6
cmp edx, 0xec7954e5
je 0x1401306b1
inc r8d
jmp 0x140130627
mov ecx, dword [rbx + r9 + 0x24]
xorps xmm0, xmm0
add rcx, r9
xchg r9, r13
mov qword [rsp + 0x20], r9
jne 0x1401306f9
je 0x1401306f9
or edx, 0x366a2b7d
lea r10d, [rbp - 0x5fb9]
ja 0x1401314cb
jmp rcx
jmp 0x140130932
add rdi, r9
mov qword [rbp + 0xe8], 0x30
add byte [rax], al
mov r9d, 0x64
xchg r13, r15
mov qword [rbp + 0x100], r15
xchg r15, r13
mov r8d, r9d
jne 0x140130866
je 0x140130866
ret
jmp 0x140130894
mov qword [rbp + 0xf0], r13
lea rcx, [rsp + 0x30]
mov qword [rbp + 0xf8], r13
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rsp + 0x30], r13
add byte [rcx + rcx*4 + 0x6c], cl
and al, 0x30
xchg r9, r13
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov edi, dword [rcx + rdx*4]
lea rdx, [rbp + 0xe8]
jmp 0x14013083b
invalid
add byte [rsi - 0x70], ah
dec dword [rdi]
mov esi, 0x528d48c9
add dword [rcx + 0x33], eax
enter 0x6944, 0xffffffffffffffc1
xchg ebx, eax
add dword [rax], eax
add ecx, ebp
mov edi, 0x8bfffffe
and al, 0x49
add ecx, edx
invalid
xchg r13, r8
mov byte [rsp + rax + 0x68], r13b
inc rax
cmp rax, 0xf
invalid
xchg ebp, eax
add al, byte [rax]