Function at 0x14013162c
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rcx + rcx*4 + 0x4c], cl
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
xchg rdx, rdi
mov qword [rsp + 0x10], rdi
xchg rdi, rdx
jmp 0x140130111
mov qword [rsp - 8], rbx
sub rsp, 8
nop
push 0x16984ab5
mov qword [rsp], rdi
nop
mov qword [rsp - 8], r13
jne 0x140130044
je 0x140130044
ror r14d, 0x2d
pushfq
add edi, 0x269a1a70
movabs r10, 0x7bfc26820e482deb
syscall
jmp rax
jmp 0x140130073
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x140130265
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
je 0x140130094
jne 0x140130094
ror r9d, 9
rcl r10d, 0x20
movabs r10, 0x6ea8f5000001e8e9
test edi, 0x13368d4a
jmp rax
jmp 0x140130281
xchg r10, rcx
xchg rdi, rax
mov rdi, qword [r10 + 0x10]
xchg rdi, rax
xchg edi, eax
xchg r10, r14
mov r14, qword [rax]
xchg r10, r14
je 0x1401300eb
jne 0x1401300eb
jne 0x140130745
call rax
xor r11d, 0x2963789a
xor esi, 0x502b479d
rol r15d, 0x95
call rcx
lea r10d, [rdi - 0x7dc3]
jmp rax
jmp 0x14013017a
xchg r11, rcx
mov qword [rsp + 8], r11
xchg r11, rcx
nop
sub rsp, 8
mov qword [rsp], rbp
nop
jne 0x140130164
je 0x140130164
add r12d, 0x57ed19d5
jmp rcx
jmp 0x14013001a
xchg r13, r11
mov r13, qword [r10 + 0x30]
xchg r11, r13
movsxd rax, dword [r11 + 0x3c]
mov ebx, dword [rax + r11 + 0x88]
mov r10d, dword [rbx + r11 + 0x20]
nop dword [rax + rax]
jne 0x1401301e5
je 0x1401301e5
ror ebp, 0xe6
lea r12d, [rbx + 0x2a48]
lea r11d, [rbp + 0x1ddf]
rcl r12d, 0xdf
pushf
syscall
lea r12d, [rcx + 0x7da4]
ror r14d, 0x28
test ebx, 0x41c8fda7
ret
jmp 0x140130247
xor r13d, r13d
mov r8d, r13d
xchg rcx, r10
mov rcx, qword [rax + 0x18]
jne 0x140130224
je 0x140130224
sub ebx, 0xe358a70e
call rcx
pop rsi
jmp rax
jmp 0x1401300ad
mov r9d, r8d
mov edx, 0x55eab7d1
lea rax, [r10 + r9*4]
mov ecx, dword [rax + r11]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
jmp 0x1401302a2
test al, al
jne 0x1401302ad
cmp edx, 0xd985a5e4
je 0x1401302b5
inc r8d
jmp 0x140130247
sub rsp, 8
lea rbp, [rsp - 0x2b8]
sub rsp, 0x3b8
mov eax, 0x65000003
mov rax, qword [0x60]
jmp 0x140130202
test al, al
je 0x140130279
nop dword [rax]
movsx eax, al
jmp 0x14013005e
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r11 + 0x24]
add rcx, r11
jmp 0x140130341
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
mov r10d, r8d
je 0x140130306
jne 0x140130306
call rax
jmp rcx
jmp 0x140130353
inc r8d
jmp 0x1401302d8
mov edi, dword [rcx + rdx*4]
mov rcx, qword [rax + 0x18]
add rdi, r11
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
jmp 0x1401303af
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + r11 + 0x1c]
add rcx, r11
jmp 0x14013032b
mov edx, 0xdcedcaed
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
jmp 0x140130395
test al, al
jne 0x1401303a3
cmp edx, 0x967ff6ef
je 0x140130418
jmp 0x140130323
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x14013036b
inc rcx
test al, al
je 0x140130323
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x140130384
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
jne 0x1401303fa
je 0x1401303fa
dec rdx
rcl r9d, 0xa2
jl 0x140130491
cmp r15, rdx
inc r12
jmp rcx
jmp 0x1401302ce
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
jmp 0x140130565
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
jmp 0x1401305be
invalid
adc byte [rax], al
mov rax, qword [rcx + 0x10]
xchg rbp, rcx
mov rbp, qword [rax]
xchg rcx, rbp
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
je 0x140130524
jne 0x140130524
dec rdx
movabs r8, 0x66ff2ed222a376eb
cmp r11d, 0xfc28b18
lea ebx, [rcx - 0x7daf]
jmp rcx
jmp 0x14013059c
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax]
mov r10d, r8d
mov edx, 0xc3efe229
lea rax, [r11 + r10*4]
jmp 0x140130436
retf
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140130a27
nop dword [rax]
jmp 0x140130a4d
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
mov r10d, r8d
jne 0x14013099c
je 0x14013099c
mul rcx
test r11, rcx
popfq
jb 0x140131156
cmp r8d, 0xb8fd29e7
movabs r8, 0x538656000000d5e9
lea r14d, [rdx + 0x6b77]
div r10
sub edx, 0xa8ea71ff
inc r10
int3
jmp 0x140130a76
movzx eax, byte [rcx - 1]
test al, al
jne 0x140130a4d
cmp edx, 0xec7954e5
je 0x140130acf
jne 0x140130a1b
je 0x140130a1b
mul rbx
jmp rax
jmp 0x140130a27
inc r8d
jmp 0x14013097f
mov rax, qword [rcx + 0x10]
xchg rcx, r14
jmp 0x140130a61
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
jmp 0x1401309ce
mov r14, qword [rax]
xchg rcx, r14
xchg r12, r9
mov r12, qword [rcx + 0x30]
xchg r12, r9
jmp 0x140130969
mov edx, 0x5c0a2425
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
je 0x140130ab0
jne 0x140130ab0
jmp rcx
jmp 0x140130950
mov ecx, dword [rbx + r9 + 0x24]
xorps xmm0, xmm0
add rcx, r9
mov qword [rsp + 0x20], r13
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
jmp 0x140130b8e
cmp r10, rcx
jae 0x140130dff
movabs r11, 0x47ae147ae147ae15
nop word [rax + rax]
add rcx, r9
mov edi, dword [rcx + rdx*4]
lea rdx, [rbp + 0xe8]
add rdi, r9
mov qword [rbp + 0xe8], 0x30
mov r9d, 0x64
jmp 0x140130c97
mov qword [rbp + 0x100], r13
mov r8d, r9d
xchg r8, r13
mov qword [rbp + 0xf0], r8
xchg r13, r8
lea rcx, [rsp + 0x30]
jmp 0x140130d02
call rsi
test eax, eax
jne 0x1401335e0
mov rax, qword [rsp + 0x30]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1401335e0
jmp 0x140130ec9
mov qword [rbp + 0xf8], r13
xchg rbp, r15
movdqu xmmword [r15 + 0x108], xmm0
xchg r15, rbp
mov qword [rsp + 0x30], r13
je 0x140130d58
jne 0x140130d58
rcl r11d, 0x3a
jae 0x14012fe9d
pause
jmp rcx
neg eax
lea ebp, [rdi - 0x7880]
mul rdx
movabs rcx, 0x5acd53ffffff5be9
lea r12d, [rdx - 0x4b3]
dec rdi
or r9d, 0x9bd00594
bswap r10
call 0x1401316a7
jmp 0x140130cb8
std
add byte [rax], al
add byte [rax - 0x2f], cl
jmp 0x1a4dc78f4
mov r10, qword [rsp + 0x48]
xchg r11, r13
mov rbx, r11
xchg r11, r13
mov rcx, qword [rbp + 0xd0]
add rcx, r10
jmp 0x140130b4d
mov r10d, r8d
mov edx, 0xe58ca837
lea rax, [r9 + r10*4]
jmp 0x140131179
inc rax
cmp rax, 0x43
jb 0x1401312c9
xchg r13, rax
mov r13, rax
xchg r13, rax
mov byte [rsp + rax + 0x68], r13b
jmp 0x140131188
jmp 0x1401310ae
mov rcx, qword [rax]
xchg rdx, r9
mov rdx, qword [rcx + 0x30]
xchg r9, rdx
movsxd rax, dword [r9 + 0x3c]
jmp 0x1401314ab
inc rcx
test al, al
je 0x1401314a3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
jmp 0x1401313b8
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
jmp 0x14013115f
inc rax
cmp rax, 0xf
jb 0x14013111d
mov rax, qword gs:[0x60]
lea rdi, [0x140000000]
movsxd r15, dword [0x14000003c]
jmp 0x1401314c1
add cl, al
mov byte [rbp + rdx - 0x44], cl
mov byte [rsp + rdx + 0x78], r13b
je 0x14013126c
jne 0x14013126c
rcl edi, 0xb7
pop rcx
pause
xor r9d, 0x345a0450
test rdi, rbp
call rax
jae 0x1401321e3
lea r9d, [rbp + 0xd3e8]
cpuid
mul r11
rcl ecx, 0x76
movabs r15, 0xb8251000001cfe9
popf
or esi, 0x8c6f2c64
int3
jmp 0x140131440
mov dword [rbp - 0x5c], 0xf6f6f6f6
mov dword [rbp - 0x18], 0x13141478
mov dword [rbp - 0x58], 0xf6f6f6f6
mov dword [rbp - 0x14], 0x38818181
mov dword [rbp - 0x54], 0xf6f6f6f6
mov dword [rbp - 0x10], 0x7371786f
jmp 0x140131463
call r10
xchg r11, rax
mov r11, r13
xchg r11, rax
nop word [rax + rax]
mov byte [rbp + rax - 0x44], r13b
jmp 0x140131109
add eax, 0xfe36e9bc
invalid
div dh
mov dword [rbp - 0x24], 0x6b806b2a
mov dword [rbp - 0x64], 0xf6f6f6f6
mov dword [rbp - 0x20], 0x6c6b7673
mov dword [rbp - 0x60], 0xf6f6f6f6
mov dword [rbp - 0x1c], 0x792a6f76
jmp 0x140131285
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jmp 0x140131491
inc rdx
cmp rdx, 0x43
jb 0x1401314ea
mov r9d, 0x40
lea r8, [rsp + 0x68]
lea rdx, [rbp - 0x44]
xor ecx, ecx
jmp 0x1401312b4
mov dword [rbp - 0x50], 0xf6f6f6f6
mov dword [rbp - 0xc], 0x81796f78
mov dword [rbp - 0x4c], 0xf6f6f6f6
mov dword [rbp - 8], 0x71787378
mov word [rbp - 0x48], 0xf6f6
mov dword [rbp - 4], 0x7f7d38
jmp 0x1401314da
jne 0x14013116d
cmp edx, 0xee9bd3e0
je 0x1401314f9
inc r8d
jmp 0x140131144
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
or esp, dword [rax]
nop dword [rax]
jmp 0x1401310ae
mov r8d, r13d
add r15, rdi
xchg rcx, r12
mov r12, qword [rax + 0x18]
xchg r12, rcx
mov rax, qword [rcx + 0x10]
jmp 0x140131149
mov byte [rbp - 0x46], 0xf6
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp + rdx - 0x44]
movzx ecx, byte [rsp + rdx + 0x78]
jmp 0x140131234
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
jmp 0x140131a3b
mov dil, 1
jmp 0x140131d09
xor dil, dil
cmp byte [rbx], 0x2e
jne 0x140131d09
jne 0x140131589
je 0x140131589
rol ebx, 0x89
lea esi, [rdx + 0xabf1]
je 0x140130da1
ret
jmp 0x140131ab6
movzx eax, word [r15 + 6]
lea rbx, [r15 + 0x108]
lea rax, [rax + rax*4]
lea rax, [rax + 0x21]
jmp 0x140131ae3
jmp rcx
lea rdx, [rbp + 0xe0]
xchg rbx, rax
mov qword [rbp + 0xd8], rbx
xchg rbx, rax
add byte [rax], al
add byte [rax - 0x6d], cl
mov r9d, 4
je 0x140131676
jne 0x140131676
cmp rsi, rbx
lea r8d, [rdi - 0x742d]
jmp rcx
jmp 0x140131690
invalid
test rsi, rbx
rcr r11d, 0x34
call 0x14013162c
lea rax, [rbp + 0xcc]
mov dword [rbp + 0xcc], r13d
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], rax
call r12
je 0x1401316c7
jne 0x1401316c7
rcl ebp, 0x4c
rcr esi, 0xd4
ror ebx, 0xa5
ror edx, 0x77
jns 0x14013094a
call rcx
movabs r14, 0x4ab47dffffff4ce9
ret 0x20
jmp 0x140131618
mov dword [rbp + 0x120], eax
mov ecx, dword [r15 + 0xa0]
mov qword [rbp + 0x1a8], rcx
mov eax, dword [r15 + 0xa4]
mov dword [rbp + 0x124], eax
cmp rdx, rdi
jae 0x140131b0b
je 0x140131702
jne 0x140131702
movabs r8, 0x2c2564ec2b4164eb
lea r10d, [rdx - 0xff36]
popf
pause
lea esi, [rdi - 0xca5d]
call fcn.140131faa
cmp edi, 0x9f16daec
ret
jmp 0x140131768
lea rax, [rdx + rdi]
xchg rbx, rax
mov qword [rbp + 0x1a0], rbx
je 0x14013179f
jne 0x14013179f
dec r15
rcl r8d, 0xff
je 0x14013202e
push r10
dec r8
call rcx
dec r8
lea r9d, [rdi - 0x5bac]
mov r10d, 0x3e6b268d
movabs r15, 0x71274000000365e9
test rbp, rbp
popfq
neg r14
jmp rax
jmp 0x140131b09
lea eax, [rdx - 0x864b]
add r9d, 0xf3e0cd3a
jns 0x140131832
invalid
inc dword [rcx - 0x7f]
sar dword [rdx], 0xcd
loopne 0x14013182e
ror r14d, 0xe0
ror r8d, 0x75
call 0x140130be6
je 0x14013264a
cmp byte [rbx], 0x2e
jne 0x140131864
cmp dword [rbx + 1], 0x63727372
je 0x14013264a
cmp dword [rbx], 0x54494e49
je 0x14013264a
jmp 0x140131bf5
jne 0x140131abd
and r15d, 0xfb8d96ac
lea edi, [rbx + 0xc68b]
call rcx
sub ebp, 0x6ba24de0
lea ebp, [rdi + 0x917]
jmp 0x140131919
test r10, rcx
test ecx, 0x5dd4bf28
pause
rol esi, 0x6d
dec rbx
jmp 0x1401318ec
pause
js 0x140130504
neg r12
rol r12d, 0x1e
jmp 0x140131936
int3
nop
js 0x140131f03
call rax
jns 0x1401312cc
lea r14d, [rdx + 0x298e]
jge 0x1401312df
jne 0x140131996
je 0x140131996
call rax
rol r11d, 0x70
and ecx, 0x337b6135
popfq
jns 0x140131682
cmp esi, 0xc73808ee
mov ecx, 0xdfe7c105
ror r14d, 0xe4
lea r11d, [rbp - 0x2581]
ret
jmp 0x140131631
mul r14
mul r15
or r8d, 0x7aaf11ae
lea r13d, [rbp - 0xef4a]
cmp rbx, rdx
ja 0x140130b76
jne 0x140131831
jmp 0x14013188a
mov r12d, dword [rcx + rdx*4]
mov edx, dword [r15 + 0xd8]
add r12, r9
mov qword [rbp + 0x1a0], rdx
mov eax, dword [r15 + 0xdc]
jne 0x140131a8c
je 0x140131a8c
syscall
int3
jmp 0x1401316d2
cmp r14, rdi
rol edx, 0
neg r10
rol esi, 0xd0
je 0x140131aa9
invalid
jne 0x140131aa9
movabs rcx, 0x3f0925fffffe02e9
jmp 0x14013297e
jmp 0x1401318b0
mov eax, dword [rbx + 1]
cmp eax, 0x74616469
jne 0x140131cf4
je 0x140131ace
test dword [rax], esi
add al, byte [rax]
add byte [rax + 0xf61057b], al
test dword [rbx], edi
add al, byte [rax]
add cl, ch
cli
invalid
cmp byte [rbx + 5], 0x61
jne 0x140131d09
jmp 0x140131513
lea rax, [r15 + rax*8]
cmp rbx, rax
jae 0x1401326c8
nop word [rax + rax]
cmp dword [rbx + 0x10], r13d
je 0x14013264a
cmp dword [rbx + 0x14], r13d
jmp 0x140131848
xchg rbx, rax
cmp rcx, rdi
jae 0x140131cb8
lea rax, [rcx + rdi]
xchg r9, rax
mov qword [rbp + 0x1a8], r9
jmp 0x140131cb6
cpuid
dec r9
lea ebp, [rbp + 0x693]
jmp 0x140131a13
cmp dword [rbx + 0xc], 0xfffffffe
jne 0x14013153e
nop
js 0x140130d4b
je 0x140131c16
jne 0x140131c16
rcr r10d, 0xb1
cmp r15, rdx
test r11, rbp
invalid
invalid
invalid
invalid