Function at 0x140132dca
Capabilities:
Contain obfuscated stackstrings
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
inc rcx
test dl, dl
je 0x140132a33
nop
jmp 0x140132a5d
je 0x140132a3c
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
jmp 0x1401329bb
mov ecx, dword [rdx + r11]
add rcx, r10
movzx edx, byte [rcx]
jmp 0x140132643
dec r9d
mov r8d, 0x1c50c293
lea rdx, [r10 + r9*4]
jmp 0x1401327f0
test dl, dl
jne 0x140132a5d
cmp r8d, 0x3a692056
je 0x140132ba3
test r9d, r9d
jne 0x1401329bb
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
jmp 0x140132a1e
invalid
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov rax, qword gs:[0x60]
je 0x140132bff
jne 0x140132bff
cpuid
rol edi, 0x7d
lea r13d, [rcx + 0x799e]
rcr r12d, 0x9b
cmp rdi, rcx
lea r15d, [rbp - 0x9c8e]
dec r9
ror r11d, 0xa8
lea edx, [rcx - 0x3db4]
bswap r13
rol esi, 0x22
jmp rcx
jmp 0x140132d93
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x9f53cf63
add r8, r10
jne 0x140132c5c
je 0x140132c5c
lea esi, [rbx + 0x6c88]
lea ebp, [rdi - 0xba81]
push rdx
test r12d, 0xa28a5345
cmp edx, 0x1bf0cd1
add edx, 0x14ad7e7e
jp 0x140133315
pop rcx
movabs r13, 0x2cef4a00000115e9
test rbx, rbp
call rax
jmp rax
jmp 0x140132d76
xchg rbp, rdi
mov qword [rsp + 0x30], rbp
xchg rdi, rbp
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
jne 0x140132ca0
je 0x140132ca0
rcl r14d, 0x97
inc rsi
pushfq
rol r13d, 0xf3
dec r13
rcr ecx, 0xfc
movabs r15, 0x21b8a7000000ace9
jne 0x140132b87
jmp 0x140132d51
jmp rcx
test cl, cl
jne 0x140132d87
cmp edx, 0xbe0817a7
je 0x140132de5
test r9d, r9d
jmp 0x140132d68
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
jmp 0x140132cb5
je 0x140132d6e
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140132d6e
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
je 0x140132d3f
jne 0x140132d3f
mul r8
popf
test r13d, 0xd362c548
bswap r14
dec r14
rcr ebp, 0x22
rcl r9d, 0x9d
cpuid
inc rdx
lea r15d, [rbx - 0x99f4]
jns 0x1401337f9
popf
rcr r12d, 0xd7
movabs r14, 0x75960afffffedbe9
dec r11
jo 0x1401332fd
jmp 0x140132c1f
ret
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
jmp 0x140132ce3
jne 0x140132d05
mov rax, qword [rax]
jmp 0x140132c84
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140132cc9
nop
movsx ecx, cl
lea r8, [r8 + 1]
jmp 0x140132cd1
mov edi, dword [rcx + rdx*4]
mov rax, qword [rax + 0x18]
add rdi, r10
jne 0x140132dbf
je 0x140132dbf
pause
or esi, 0xbb066f1a
rol r12d, 0x54
lea esi, [rbx - 0xb509]
lea r11d, [rcx - 0x71a4]
mul rdx
movabs r8, 0x4d3707fffffeaae9
rcl r14d, 0x8d
call rax
rcl r8d, 0xaa
jle 0x140133127
jmp 0x140132c6e
cmp r12, rdx
syscall
rcl r8d, 0x24
call 0x140132dca
mov ecx, dword [rbx + 0x24]
xchg rdx, r13
mov r13, rdx
xchg rdx, r13
add rcx, r10
mov dword [rsp + 0x58], 0xf6f6f6f6
jmp 0x140132fd7
nop dword [rax + rax]
xchg r8, rax
mov r8d, r13d
movsxd rcx, dword [rax + 0x3c]
jmp 0x140132f80
mov byte [rsp + rdx + 0x58], r13b
inc rdx
cmp rdx, 0xa
jb 0x140132ebb
jne 0x140132ea1
je 0x140132ea1
call rax
rol r10d, 0x46
lea ebp, [rbp + 0x6ce8]
xor r15d, 0x53dafda4
mov r10d, 0x7a47061a
lea r15d, [rdx - 0x2355]
cmp rdi, rcx
pushf
jmp rax
jmp 0x140133006
xor eax, eax
mov byte [rsp + 0x6d], al
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x58]
movzx ecx, byte [rsp + rdx + 0x63]
add cl, al
mov byte [rsp + rdx + 0x63], cl
jne 0x140132f15
je 0x140132f15
or ecx, 0xd6401cde
lea edx, [rbx + 0x2726]
lea r9d, [rcx - 0x43cc]
int3
jmp 0x140132e45
mov r10d, dword [rcx + rax + 0x88]
mov r11d, dword [r10 + rax + 0x20]
nop dword [rax]
jne 0x140132fc6
je 0x140132fc6
test r9d, 0x386104da
popfq
jp 0x140133d6c
jmp rcx
jmp 0x140132e1f
mov dword [rsp + 0x63], 0x7c6f7d7f
mov dword [rsp + 0x5c], 0xf6f6f6f6
mov dword [rsp + 0x67], 0x6e383c3d
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov word [rsp + 0x60], 0xf6f6
jmp 0x1401330aa
xor edx, edx
lea rcx, [rsp + 0x63]
mov r8d, 0x800
call rdi
xchg r8, rax
mov r9, r8
je 0x14013303f
jne 0x14013303f
cmp r12, rbp
ret
jmp 0x140132e37
mov word [rsp + 0x6b], 0x7676
mov r15d, dword [rcx + r8*4]
add r15, r10
jmp 0x140132eae
cmp byte [rdx], ch
mov ecx, dword [rdx + rcx + 0x1c]
dec esp
in al, dx
invalid
sub al, bh
test al, 0xf6
div dh
imul cl
mov eax, 0x90000000
mov rax, qword [rsp + 0x10]
inc rax
mov qword [rsp + 0x10], rax
jmp 0x140133d14
adc cl, ch
add eax, 0xe9000000
add byte ds:[rax], al
add byte [rbx + 0x48382444], cl
mov ecx, dword [rsp + 0x30]
jmp 0x140133d52
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
add rcx, rax
xchg r13, rax
mov r13, rcx
xchg r13, rax
cmp qword [rsp + 0x10], rax
jmp 0x140133d31
jae 0x140133f45
mov byte [rsp], 0
mov dword [rsp + 4], 0
jmp 0x140133d0f
mov eax, dword [rsp + 4]
inc eax
mov dword [rsp + 4], eax
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 4], eax
jae 0x140133e3b
jmp 0x140133d96
mov rdx, qword [rsp + 0x48]
mov ecx, dword [rdx + rcx*4]
mov rdx, qword [rsp + 0x40]
mov cl, byte [rax - 0x75]
push rsp
and al, 0x40
add rcx, qword [rdx + rax*8]
jmp 0x140133d7b
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp qword [rsp + 0x10], rax
jae 0x140133e36
mov byte [rsp], 1
jmp 0x140133e3b
mov eax, dword [rsp + 4]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx + rax*8]
cmp qword [rsp + 0x10], rax
jb 0x140133e36
mov eax, dword [rsp + 4]
mov ecx, dword [rsp + 4]
jne 0x140133dfb
je 0x140133dfb
lea r14d, [rcx + 0x45b4]
jno 0x14013342b
jp 0x140133d09
test rbp, rdx
mul r14
int3
jmp 0x140133d65
jmp 0x140133d48
movzx eax, byte [rsp]
test eax, eax
je 0x140133e78
je 0x140133e63
jne 0x140133e63
test r13, rbp
add edx, 0xc40fc0a0
neg rbp
rcr edx, 0xcf
or r10d, 0x795ae79f
movabs rsi, 0x78420fb071010eeb
pushf
popfq
jmp 0x1401331af
jmp 0x140133e73
jmp 0x140133cfd
xor edx, edx
mov eax, dword [rsp + 8]
mov ecx, 0x20
jmp 0x140133ec8
mov eax, ecx
mov rcx, qword [rsp + 0x10]
mov byte [rcx], al
jne 0x140133eac
je 0x140133eac
ror edi, 0x7d
rol ecx, 0x78
rcr r12d, 0xb6
rol r8d, 0xa5
lea r11d, [rbx - 0xe142]
movabs r14, 0x747ef06a4f2f0beb
call rax
ret 0x18
jmp 0x140133eb9
mov eax, dword [rsp + 8]
inc eax
mov dword [rsp + 8], eax
jmp 0x140133cfd
div ecx
mov eax, edx
mov eax, eax
jne 0x140133f12
je 0x140133f12
lea r12d, [rdx + 0x704e]
call rcx
jne 0x140134b93
int3
jmp 0x140133f2d
mov rcx, qword [rsp + 0x18]
movzx eax, byte [rcx + rax]
mov rcx, qword [rsp + 0x10]
movzx ecx, byte [rcx]
xor ecx, eax
jmp 0x140133e88
add rsp, 0x28
ret
push rbp
invalid