Function at 0x1400071c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Packed with generic packer
Parse pe header
Read file on windows

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x78
xor eax, eax
test eax, eax
je 0x1400073e0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
insd dword [rdi], dx
push rbx
jns 0x140007259
push rbp
je 0x140007252
insb byte [rdi], dx
jae 0x1400071ec
add byte [rax], al
add byte [rdx], al
add byte [rcx], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], 0
add byte [rax], al
invalid
invalid
add byte [rdi], ch
outsb dx, byte [rsi]
add byte [rax + rax + 2], dh
add byte [rax], al
pushfq
adc byte [rax], al
add dword [rax], eax
add eax, 0x65646e49
js 0x140007272
push rbp
mov ebp, esp
in al, dx
push 0
push rbx
push rsi
push rdi
mov esi, edx
mov edi, eax
xor eax, eax
push rbp
push 0x2000000
invalid
xor eax, eax
test eax, eax
je 0x1400075f7
nop
nop
nop
nop
nop
nop
add al, byte [rax]
adc dl, byte [rax + riz*8 + 0x10045]
add al, 0x49
je 0x140007462
insd dword [rdi], dx
add al, byte [rax]
or byte [rcx], cl
push rsp
je 0x14000744a
insb byte [rdi], dx
invalid
invalid
add byte [rax], 0
add byte [rax + 0x500b0081], al
jb 0x1400074dc
jb 0x1400074d5
ret
add byte [rax], al
push rdx
add byte [rax], al
add byte [rbx], cl
jne 0x14000751d
jb 0x14000750e
imul edi, dword [rdx + 0x65], 0x85000002
invalid
insb byte [rdi], dx
invalid
outsd dx, dword [rsi]
outsb dx, byte [rsi]
jae 0x140007554
dec dword [rax]
add bh, bh
add dword [rax], eax
add byte [rax], al
add byte [rax], al
add byte [rax + 0x78000000], al
je 0x1400074ab
adc al, byte [rax]
cmp byte [rbx], al
add bh, bh
xchg esp, eax
cmp byte [rbx], dl
add dword [rax], eax
int1
mov ebx, edx
mov edi, eax
xor edx, edx
mov eax, edi
call 0x13ff95094
mov dword [rdi + 0x61], esi
je 0x14000757c
outsd dx, dword [rsi]
outsb dx, byte [rsi]
insb byte [rdi], dx
imul esp, dword [rbx + 0x6b], 0x96606465
xchg esi, eax
push rsp
add byte [rax], cl
movabs byte [0x49], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov eax, esp
mov ecx, esi
clc
mov eax, dword [rbp - 0xc]
mov dword [rbp - 4], eax
jmp 0x140007592
sbb dword [rax], eax
add edx, dword [rsi]
movzx eax, bl
imul esi, eax, 0xb
lea eax, [rsi + 0x6d788c]
cmp byte [rax + rdi], 0
sbb al, 0
add byte [rax], al
movsb byte [rdi], byte [rsi]
mov edx, 0x850c0041
add byte [rax*4 + 0x10040], dl
add eax, 0x65646e49
js 0x1400075ab
add byte [rdx], dl
invalid
xor eax, eax
test eax, eax
je 0x14000780e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add al, ch
cmpsb byte [rsi], byte [rdi]
sal ecx, 1
dec dword [rbx + 0xfdb85d8]
test byte [rcx + rax - 0x14bb0000], bl
add dword [rbx], esi
fstp xword [rbx]
pop rbp
invalid
xor eax, eax
test eax, eax
je 0x140007a25
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rax], ah
add byte [0x16000dc29], ah
add byte [rdx], ah
mov dword [rsp + 0x44], 0
xor eax, eax
test eax, eax
je 0x140007c44
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dl, ch
insb byte [rdi], dx
add byte [rbx + 0x708b1440], cl
or byte [rsi - 0x7b], cl
idiv byte [rsi + rax*2 + 0x46]
jge 0x140007a42
add byte [rbp + rcx - 0x75], dh
in al, dx
mov edx, dword [rbp - 0x10]
call 0x13ff9d7d0
ret
xor eax, eax
test eax, eax
je 0x140007e5b
nop
nop
in al, dx
cmp dword [rbp - 0x14], 0
je 0x140007c5e
mov eax, edx
call 0x13fef3d34
mov eax, dword [rbp + 0x74]
jae 0x140007c63
adc byte [rax], al
adc al, 2
add bh, bh
xor byte [rsi - 0x49abffaf], dh
adc al, byte [rax + 0x19]
push rsp
add byte [rax + rax], dl
add al, 0x63
push 0x26772
and byte [rbx + rdx*2 - 0x18], bl
sbb cl, byte [rbp + 0x1e3bffe6]
jne 0x140007c9a
call 0x13fe6feb8
cmp ebp, dword [rsi + 0x3c]
push rbx
jns 0x140007d08
je 0x140007cfc
insd dword [rdi], dx
outsb dx, byte gs:[rsi]
outsb dx, byte gs:[rsi]
jb 0x140007d08
invalid
add byte [0x16b89d048], al
cli
invalid
mov edx, dword [rax - 4]
test dl, 7
mov ecx, eax
pop rsi
add byte [rdx*4 - 0x6ad5ffa2], bl
pop rsi
add byte [rbp - 0x72ffa16b], cl
xchg ebp, eax
push rsp
pop rbp
add dword [rax], eax
jmp 0x140007d36
push rdx
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add cl, byte [rbx + 0x7051ff08]
mov eax, dword [rbp - 0x3c]
mov dword [rbp - 0x14], eax
mov eax, dword [rbp - 0x38]
mov dword [rbp + 0x53], eax
sbb al, 0x33
rcr byte [rdx + 0x59], 0x59
mov dword fs:[rax], edx
push 0x649f55
lea ebp, [rsp + rbp*2 + 0x65]
invalid
xor eax, eax
test eax, eax
je 0x140008072
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
shr ebx, 0x35
nop
mov ecx, dword [0x1406d896e]
sub ecx, ebx
jb 0x140007e98
movabs eax, dword [0x65766542460d00f0]
insb byte [rdi], dx
invalid
add byte [rbx - 0x473f7cf9], cl
mov eax, dword [rax]
add byte [rcx], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], 0
add byte [rax + 0x6107ffff], al
je 0x140007f1c
outsd dx, dword [rsi]
outsb dx, byte [rsi]
add byte [rax - 0x33ffbfe1], ah
add byte gs:[r8 - 0x52], cl
add byte [rax], al
add byte [rax], al
add byte [r15], bpl
push rbx
add byte [rbp], dh
jae 0x140007ece
jo 0x140007ed0
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], cl
push rdx
invalid
hlt
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x58], rax