Function at 0x14000a230
Capabilities:
Create process on windows
Terminate process

Disassembly:
push rdi
sub rsp, 0x2b0
xor eax, eax
test eax, eax
je 0x14000a450
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ah, 0x4d
std
invalid
xor eax, eax
test eax, eax
je 0x14000a667
nop
nop
nop
nop
nop
nop
invalid
add al, byte [rax]
invalid
xor eax, eax
test eax, eax
je 0x14000a87e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov si, 0xffc1
call 0x13feffbc0
jmp 0x14000a6ad
or eax, 0x633e4446
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
add al, byte [rax]
and al, 0
jo 0x14000a649
add byte [esi], cl
add byte [rax], al
add byte [rax], al
add byte [rcx], al
add byte [rax], al
add byte [rbx + riz*4], dh
add byte [rax], al
add byte [rax - 0x80000000], al
add byte [rdx], cl
push rdi
imul ebp, dword [rsi + 0x64], 0x5810ac
mov esp, 0x5810
add byte [rax], al
add byte [rax], al
add byte [rdx], al
add byte [rcx], cl
sub byte [rsp + rbp*2], ch
or eax, 0x4f646441
jb fcn.14000a750
je 0x14000a756
adc byte [rax], al
sbb al, 0
add bh, bh
sbb al, 0
add bh, bh
add dword [rax], eax
add byte [rax], al
add dh, bh
invalid
fidivr dword [rdi - 0xf140012]
pop rcx
pop rbp
ret
call fcn.1400090a0
test eax, eax
jne 0x14000b18a
xor eax, eax
test eax, eax
je 0x14000aaa2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jb 0x14000a915
outsd dx, dword [rsi]
jb 0x14000a8a9
add byte [rax], al
add byte [rax], al
add byte [rax], cl
add byte [rbx], al
add byte [rax], al
add al, 0x8b
invalid
add byte [rax], al
or byte [rax], al
add eax, dword [rax]
add byte [rbx + 4], al
mov edx, esi
call 0x13fe7c2ec
mov edx, esi
lea eax, [rbx + 4]
call 0x1ac621250
outsd dx, dword [rsi]
jae 0x14000a8c7
add byte [rax], al
add byte [rdx], al
add byte [rax], al
add byte [rbx + 0x4746c0], cl
add spl, sil
invalid
outsb dx, byte [rsi]
add al, byte fs:[rax]
adc byte [rdx], dl
add byte [rax], spl
add byte [rax], al
in al, 0x8b
adc byte [rcx - 0x173c74ff], dh
jrcxz 0x14000a941
add byte [rax], al
push 1
mov esi, dword [rsp - 0x7d]
shr ch, 0x66
sub eax, 4
jae 0x14000a96f
push 0
push 0x23740002
test byte [rbx + 0x1e], 8
jne 0x14000a965
and esi, esi
invalid
cmp byte [rbx + 0x2d], 1
je 0x14000a965
mov eax, ebx
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rdx + rax*2], cl
imul ebp, dword [rsi + 0x61], 0x65537972
invalid
push 0
mov eax, dword [rbx + 0x8c]
call fcn.1400149bc
ret
movabs al, byte [0x83ec8b5590c30000]
invalid
mov r8d, 0x208
lea rdx, [rsp + 0xa0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
test eax, eax
je 0x14000accf
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x14000ab3b
outsd dx, dword [rsi]
outsb dx, byte [rsi]
invalid
mov edx, 1
invalid
mov dword [rsp + 0x30], 0x70
lea rax, [rsp + 0x34]
mov rdi, rax
xor eax, eax
sar byte [rcx + 0x6c], 0xf3
stosb byte [rdi], al
mov eax, 0x72
mov word [rsp + 0x20], ax
mov eax, 0x75
mov word [rsp + 0x22], ax
mov dword [rsp + 0x22], eax
mov eax, 0x6e
mov word [rsp + 0x24], ax
mov eax, 0x61
mov word [rsp + 0x26], ax
mov eax, 0x73
mov word [rsp + 0x28], ax
xor eax, eax
mov word [rsp + 0x2a], ax
lea rax, [rsp + 0x20]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x60], 1
xor eax, eax
test eax, eax
je 0x14000af60
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
add rsp, 0x2b0
pop rdi
ret