Function at 0x140001620
Capabilities:
Delete file
Execute command

Disassembly:
sub rsp, 0x48
lea rcx, [0x140005554]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_Spoofing..._n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002f40
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov ecx, 0x20
call fcn.140003480
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140005a10]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [str.C:WindowsSystem32dr.sys]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140005578]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140005580]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], 0
mov r8d, 0x64d0
lea rdx, [0x140340320]
lea rcx, [rsp + 0x20]
call fcn.1400012b0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400016f0
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400034bc
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov ecx, 0x20
call fcn.140003480
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140005a10]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [str.C:WindowsSystem32mp.exe]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140005598]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1400055a0]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], 0
mov r8d, 0x84800
lea rdx, [0x140347010]
lea rcx, [rsp + 0x20]
call fcn.1400012b0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000179c
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001797
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001797
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400034bc
lea rcx, str.C:WindowsSystem32mp.exe_C:WindowsSystem32dr.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32dr.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsSystem32mp.exe
add rsp, 0x48
jmp qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
and al, byte [rbx + 0x3a]
pop rsp
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
pop rsp
imul ebp, dword [rsi + 0x74], 0x65706c65
jo 0x14000ce7d
push rax
and r13b, byte [r9 + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000ced8
pop rsp
pop rsp
outsb dx, byte [rsi]
imul esi, dword fs:[rbx + 0x76], 0x75747269
invalid
sub al, 0xd
or ah, byte [rbp + riz*2 + 0x6c]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000cf02
pop rsp
pop rsp
jb 0x14000cefa
jo 0x14000cefa
jne 0x14000cf0d
push rax
and r13b, byte [r9 + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000cf24
pop rsp
pop rsp
jne 0x14000cf2b
invalid
je 0x14000cf3f
insd dword [rdi], dx
xor esi, dword [rdx]
pop rsp
ja 0x14000cf42
insd dword [rdi], dx
pop rsp
jb 0x14000cf4a
jo 0x14000cf56
jae 0x14000cf52
je 0x14000cf5a
jb 0x14000cf66
pop rsp
push r8
push rax
xor dword [r14], r13d
push r8
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000cf80
and al, byte [rbx + 0x3a]
pop rsp
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
pop rsp
jo 0x14000cf82
je 0x14000cf78
push 0x494d575c
push rax
push rdx
push rsi
push rbx
pop r8
sub eax, 0x39463933
invalid
xor edi, dword [rcx]
cmp dword [rdi], r14d
xor al, byte [rsi + r13 + 0x70]
and ch, byte [rcx + 0x6c65640a]
jo 0x14000cf95
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
outsd dx, dword [rsi]
ja 0x14000cfb5
pop rsp
push rbx
jns 0x14000cfb9
je 0x14000cfad
insd dword [rdi], dx
xor esi, dword [rdx]
xor bl, byte [rdi + rsi*2 + 0x62]
pop rsp
ja 0x14000cfb0
insd dword [rdi], dx
pop rsp
jb 0x14000cfb8
jo 0x14000cfc4
jo 0x14000cfc4
jae 0x14000cfc0
imul esi, dword [rdi + rbp*2 + 0x72], 0x52575c79
je 0x14000cfc8
jb 0x14000cfd4
jns 0x14000cfb8
pop rsp
push rdi
push rdx
push r12
push rsp
push rbx
push rsp
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
outsd dx, dword [rsi]
ja 0x14000cfee
pop rsp
jo 0x14000cff0
je 0x14000cfe6
je 0x14000cfe6
invalid
push 0x4350495c
pop r8
sub eax, 0x31413031
xor eax, 0x2e344643
xor dword [0x16e3515de], esi
jo 0x14000d003
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
outsd dx, dword [rsi]
ja 0x14000d023
pop rsp
jo 0x14000d025
je 0x14000d01b
je 0x14000d01b
push 0x4e4f435c
push r11
pop rsp
push r11
push rsp
pop r8
sub eax, 0x34364330
xor eax, 0x2e424636
jo 0x14000d037
xor al, 0x35
jo 0x14000d037
and ch, byte [rcx + 0x6c65640a]
or ah, byte [rbp + riz*2 + 0x6c]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d057
pop rsp
jo 0x14000d059
jb 0x14000d04d
je 0x14000d04f
je 0x14000d04f
push 0x4356535c
push r11
push rbx
push rsi
push r11
push rsp
pop r8
sub eax, 0x43373131
xor al, 0x34
xor al, 0x31
jo 0x14000d06b
jo 0x14000d06b
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r13 + r10*2 + 0x73]
jb 0x14000d089
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
jb 0x14000d08b
invalid
jo 0x14000d095
invalid
je 0x14000d096
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
push rdi
invalid
xor dword [rsi], ebp
invalid
insb byte [rdi], dx
and byte [rdx], ah
cmp bl, byte [r13 + r10*2 + 0x73]
jb 0x14000d0d6
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
insd dword [rdi], dx
and eax, 0x7070415c
invalid
pop rsp
invalid
jo 0x14000d0fd
sub eax, 0x39313032
sub eax, 0x302d3231
cmp dword [rsi], ebp
outsb dx, byte [rsi]
sub eax, 0x6e2e3930
xor byte [rcx], bh
outsb dx, byte cs:[rsi]
ja 0x14000d108
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d122
pop rsp
jo 0x14000d124
je 0x14000d11a
push 0x4356535c
push r11
push rsp
pop r8
sub eax, 0x38364346
cmp dword [rax], edi
xor dword [rcx], esi
jo 0x14000d136
and ch, byte [rcx + 0x6c65640a]
insb byte [rdi], dx
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d156
pop rsp
jo 0x14000d158
je 0x14000d14e
push 0x4e55525c
xor r14, qword [rdx]
pop r8
sub eax, 0x33454141
xor al, byte [rbx + 0x37]
invalid
xor esi, dword [rdx]
invalid
or ah, byte [rbp + riz*2 + 0x6c]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d18b
pop rsp
jo 0x14000d18d
jb 0x14000d181
je 0x14000d183
je 0x14000d183
push 0x54454e5c
push r12
push rsp
push rbx
pop r8
sub eax, 0x34373138
xor ebp, dword ss:[rsi]
jo 0x14000d19d
and ch, byte [rcx + 0x6c65640a]
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r13 + r10*2 + 0x73]
jb 0x14000d1bb
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
jo 0x14000d19c
invalid
outsd dx, dword [rsi]
ja 0x14000d1f7
jae 0x14000d1e1
pop rsp
jo 0x14000d1f9
je 0x14000d1ef
invalid
push 0x5341545c
pop rsp
push rsp
push r11
pop r8
sub eax, 0x44434530
xor al, 0x31
xor al, 0x31
xor al, 0x31
jo 0x14000d20c
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r13 + r10*2 + 0x73]
jb 0x14000d22a
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
jb 0x14000d22c
invalid
jae 0x14000d23f
push rdi
invalid
jle 0x14000d225
and r13b, byte cs:[rcx + 0x6c65640a]
and r13b, byte [rcx + 0x6c65640a]
sub al, 0xd
or ah, byte [rbp + riz*2 + 0x6c]
and byte [rdx], ah
cmp bl, byte [r13 + r10*2 + 0x73]
jb 0x14000d27c
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
jae 0x14000d273
jb 0x14000d27e
invalid
invalid
je 0x14000d289
pop rsp
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
push rdi
invalid
jle 0x14000d277
push r12
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d2d0
pop rsp
pop rsp
outsb dx, byte [rsi]
je 0x14000d2d8
invalid
insb byte [rdi], dx
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
cmp bl, byte [rdi + rdx*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d2f3
pop rsp
jo 0x14000d2f5
je 0x14000d2eb
push 0x444d435c
pop r8
pop rsp
pop r8
sub eax, 0x32364436
cmp dword [rax], esi
xor eax, 0x2266702e
sub al, 0xd
or ah, byte [rbp + riz*2 + 0x6c]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d323
pop rsp
jo 0x14000d325
je 0x14000d31b
push 0x4e49465c
push rbx
push rsp
push rdx
pop r8
sub eax, 0x36383935
xor al, 0x32
xor ebp, dword [rsi]
jo 0x14000d337
and ch, byte [rcx + 0x6c65640a]
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d357
pop rsp
jo 0x14000d359
je 0x14000d34f
invalid
push 0x494d575c
pop r8
pop r8
sub eax, 0x42313133
xor eax, 0x2e344243
jo 0x14000d368
and ch, byte [rcx + 0x6c65640a]
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d388
pop rsp
jo 0x14000d38a
je 0x14000d380
je 0x14000d380
push 0x6765725c
pop r8
pop r8
sub eax, 0x39434130
cmp dword [rcx + 0x38], eax
invalid
insb byte [rdi], dx
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d3b8
pop rsp
jo 0x14000d3ba
je 0x14000d3b0
push 0x4356535c
push r11
push rbx
push rsi
push r11
push rsp
pop r8
pop r8
sub eax, 0x33383543
invalid
or eax, 0x6c65640a
and byte [rdx], ah
cmp bl, byte [r15 + r10*2 + 0x69]
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d3ec
pop rsp
jo 0x14000d3ee
je 0x14000d3e4
invalid
push 0x494d575c
push rax
push rdx
push rsi
push rbx
pop r8
sub eax, 0x38423845
xor r15b, byte [rcx]
jo 0x14000d401
and ch, byte [rcx + 0x6c65640a]
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d40e
jb 0x14000d41e
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
jb 0x14000d420
invalid
jo 0x14000d42a
invalid
jae 0x14000d448
jbe 0x14000d413
sub cl, byte cs:[0x1ac6637fa]
or ah, byte [rbp + riz*2 + 0x6c]
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d45c
jb 0x14000d46c
pop rsp
push rax
jne 0x14000d45f
insb byte [rdi], dx
imul esp, dword [rbx + 0x5c], 0x7262694c
invalid
imul r12, qword [rdx + 0x72], 0x65697261
jae 0x14000d467
invalid
insb byte [rdi], dx
invalid
outsd dx, dword [rsi]
outsb dx, byte [rsi]
invalid
insb byte [rdi], dx
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push r11
invalid
invalid
xor byte [rax], dh
xor byte [rax], dh
xor byte [rax], dh
xor byte [rbp + 0x5c], bh
push rbx
je 0x14000d4ca
jo 0x14000d485
invalid
sub cl, byte [0x1ac66386c]
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d4ce
jb 0x14000d4de
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
imul r12, qword [r11 + 0x72], 0x666f736f
je 0x14000d4eb
jae 0x14000d4cf
outsb dx, byte [rsi]
outsd dx, dword [rsi]
ja 0x14000d508
push rbx
outsd dx, dword [rsi]
jne 0x14000d510
invalid
cmp bl, byte [rbp + rdx*2 + 0x73]
jb 0x14000d544
jb 0x14000d544
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
jo 0x14000d550
invalid
pop r12
je 0x14000d536
outsd dx, dword [rsi]
outsd dx, dword [rsi]
imul ebp, dword [rcx + 0x65], 0x73
pop rsp
push r11
pop r12
invalid
invalid
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d57f
jb 0x14000d58f
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
push rax
invalid
outsb dx, byte [rsi]
jae 0x14000d5a4
jae 0x14000d5af
je 0x14000d5c0
imul ebp, dword [rsi + 0x67], 0x61642e73
je 0x14000d57f
invalid
sub cl, byte cs:[0x1ac663966]
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d5c8
jb 0x14000d5d8
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
outsd dx, dword [rsi]
jb 0x14000d5f7
outsb dx, byte [rsi]
imul esi, dword [rbp + riz*2 + 0x47], 0x5c656d61
push rbx
invalid
pop rsp
outsd dx, dword [rsi]
outsb dx, byte [rsi]
imul sp, word [rdi + 0x5c], 0x6957
outsb dx, byte [rsi]
outsd dx, dword fs:[rsi]
ja 0x14000d613
insb byte [rdi], dx
imul esp, dword [rbp + 0x6e], 0x61475c74
insd dword [rdi], dx
push rbp
jae 0x14000d613
outsb dx, byte [rsi]
je 0x14000d603
invalid
jb 0x14000d603
push rbx
je 0x14000d627
imul ebp, dword [rsi + 0x67], 0x6e692e73
imul ebp, dword [rdx], 0xa0d2a2e
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rax
jb 0x14000d639
jb 0x14000d62e
insd dword [rdi], dx
and byte [rsi + 0x69], al
insb byte [rdi], dx
jae 0x14000d631
jo 0x14000d641
invalid
jb 0x14000d66d
imul esi, dword [rbx + 0x74], 0x44746e65
outsd dx, dword [rsi]
ja 0x14000d672
outsb dx, byte [rsi]
insb byte [rdi], dx
outsd dx, dword [rsi]
invalid
push 0x63634165
jae 0x14000d68e
push 0x73
outsd dx, dword [rsi]
outsb dx, byte [rsi]
sub ch, byte [rsi]
sub cl, byte [0x1ac663a32]
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d694
jb 0x14000d6a4
jb 0x14000d6a4
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
insd dword [rdi], dx
and eax, 0x7070415c
invalid
invalid
imul esp, dword [rbx + 0x65], 0x6c616548
je 0x14000d6de
invalid
push rbx
jne 0x14000d6e6
insd dword [rdi], dx
invalid
sub ch, byte [rsi]
sub cl, byte [0x1ac663aa0]
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rax
jb 0x14000d70c
jb 0x14000d701
insd dword [rdi], dx
invalid
invalid
cmp bl, byte [rbp + rdx*2 + 0x73]
jb 0x14000d758
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
invalid
outsd dx, dword fs:[rsi]
ja 0x14000d783
pop rsp
push rbx
je 0x14000d789
imul ebp, dword [rsi + 0x67], 0x636e7953
pop rsp
insd dword [rdi], dx
je 0x14000d782
jae 0x14000d797
outsd dx, dword [rsi]
jb 0x14000d78b
pop rsp
invalid
pop rsp
imul r12, qword [r11 + 0x72], 0x666f736f
je 0x14000d7bf
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
push rbx
je 0x14000d7e3
imul ebp, dword [rsi + 0x67], 0x636e7953
pop rsp
jb 0x14000d7de
insd dword [rdi], dx
outsd dx, dword [rsi]
je 0x14000d7e2
insd dword [rdi], dx
je 0x14000d7e2
jae 0x14000d7f7
je 0x14000d7f3
outsd dx, dword [rsi]
jb 0x14000d7eb
pop rsp
jbe 0x14000d7ba
pop rsp
invalid
invalid
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d805
jb 0x14000d815
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
sub cl, byte [0x1ac663bca]
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbp
jae 0x14000d82c
jb 0x14000d83c
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
invalid
outsd dx, dword [rsi]
invalid
pop rsp
imul r12, qword [r11 + 0x72], 0x666f736f
je 0x14000d849
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
jae 0x14000d851
je 0x14000d83d
je 0x14000d83d
invalid
je 0x14000d868
imul ebp, dword [rsi + 0x65], 0x61642e72
je 0x14000d83a
sub cl, byte cs:[0x1ac663c21]
insb byte [rdi], dx
and byte [rbx + 0x3a], al
pop rsp
push rbx
jns 0x14000d891
je 0x14000d885
insd dword [rdi], dx
and byte [rsi + 0x6f], dl
insb byte [rdi], dx
jne 0x14000d894
and byte gs:[rcx + 0x6e], cl
outsw dx, word [rsi]
outsd dx, dword [rsi]
jb 0x14000d89c
invalid
imul ebp, dword [rsi + 0x67], 0x676f6c2e
sub ch, byte [rsi]
insb byte [edi], dx
insb byte [rdi], dx
outsd dx, dword [rsi]
sub ch, byte [esi]
sub cl, byte [0x1ac663c53]
and byte [rbx + 0x3a], al
pop rsp
push rbx
jns 0x14000d8c3
je 0x14000d8b7
insd dword [rdi], dx
insd dword [rdi], dx
and byte [rsi + 0x6f], dl
insb byte [rdi], dx
jne 0x14000d8c6
and byte gs:[rcx + 0x6e], cl
outsw dx, word [rsi]
jb 0x14000d8ce
invalid
push rax
push rbx
je 0x14000d8e1
imul ebp, dword [rsi + 0x67], 0x61642e73
je 0x14000d8a0
sub cl, byte cs:[0x1a40ae587]
insb byte [rdi], dx
and byte [rdi], ch
jae 0x14000d8a3
invalid
and byte [rdi], ch
invalid
jno 0x14000d8b3
and al, byte [rbx + 0x3a]
pop rsp
push rbp
jae 0x14000d8ff
cmp bl, byte [r13 + r10*2 + 0x73]
jb 0x14000d90f
jb 0x14000d90f
pop rsp
and eax, 0x72657375
outsb dx, byte [rsi]
jb 0x14000d911
invalid
insd dword [rdi], dx
imul ebp, dword [rsi + 0x67], 0x63694d5c
jb 0x14000d92c
pop rsp
imul r12, qword [r11 + 0x72], 0x666f736f
je 0x14000d91e
jae 0x14000d92e
je 0x14000d91e
push rdi
imul ebp, dword [rsi + 0x64], 0x5c73776f
outsd dx, dword [rsi]
ja 0x14000d93c
pop rsp
push rdx
invalid
outsb dx, byte [rsi]
je 0x14000d92d
sub ch, byte [rsi]
sub ah, byte [rdx]
or eax, 0x6c65640a
and byte [rdi], ch
jae 0x14000d8fe
invalid
invalid
invalid
insd dword [rdi], dx
and eax, 0x7070415c
invalid
insb byte [rdi], dx
pop rsp
outsd dx, dword [rsi]
outsd dx, dword [rsi]
insb byte [edi], dx
pop rsp
push 0x656d6f72
pop rsp
push rbp
jae 0x14000d987
jb 0x14000d944
invalid
imul esp, dword [rsi + 0x69], 0x6c
and cl, byte gs:[0x1ac663d41]
imul bp, word [rbp + riz*2 + 0x22], 0xa0d
insb byte [rdi], dx
imul ebp, dword [rbp + riz*2 + 0x22], 0x65640a0d
insb byte [rdi], dx
and byte [rdi], ch
jae 0x14000d95b
invalid
and byte [rdi], ch
invalid
invalid
invalid
jb 0x14000d9f8
ja 0x14000d9fe
jb 0x14000d9db
je 0x14000da03
imul esp, dword [rbx + 0x73], 0x2a2e2a5c
and cl, byte [0x1ac663da8]
and byte [rdi], ch
jae 0x14000d9c2
invalid
invalid
pop rsp
push 0x656d6f72
pop rsp
push rbp
jae 0x14000da4b
jb 0x14000da08
invalid
and cl, byte [0x1a40ae708]
insb byte [rdi], dx
and byte [rdi], ch
jae 0x14000da24
and byte [rdi], ch
and byte [rdi], ch
invalid
invalid
invalid
invalid