Function at 0x141682cd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
lock add byte [rax], cl
add dword [rax], eax
add bh, ah
add byte [rdx], cl
add dword [rax], eax
add ah, bl
or dword [rax], eax
add byte [rsi + rcx + 0x480c], dh
pop rax
invalid
mov qword [rsp + 8], rcx
sub rsp, 0x78
xor eax, eax
test eax, eax
je 0x141682f81
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
int3
xor eax, eax
test eax, eax
je 0x141683229
nop
nop
nop
nop
nop
add eax, dword ds:[rax]
add byte [rbp - 0x7b], cl
div byte [rbp + 9]
lea eax, [r14 + 6]
jmp 0x1416732d2
xor eax, eax
test eax, eax
je 0x1416834d1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
and al, 0x40
cmp dword [rax - 0x10], 0
jne 0x14168324e
lea rdx, [rax - 0x18]
jmp 0x141683281
lea rbp, [rax + 0x48000002]
mov eax, dword [0x1416b4760]
xor rax, rsp
mov qword [rbx], rax
mov byte [rbp + 0xf0c7fc0], 0xae
call 0x18972bdb5
mov eax, dword [rcx]
call [rax + rdx*4 - 3]
dec dword [rax - 0x75]
enter 0xffffffffffff8548, 0xffffffffffffffc0
je 0x1416833f5
lea edx, [rsp + 0x48]
push rsp
and al, 0x48
lea rcx, [rbp - 0x80]
call fcn.141688cb0
mov rbx, qword [rdi + rdi*8 + 0x48]
lea edx, [0x1416a5d00]
mov rcx, rdi
call fcn.14165a9a4
setne byte [rbp + 0x67]
lea r12, [r13 + 0xb8]
mov rcx, qword [r12]
test rdx, rdx
je 0x1416832e9
mov rcx, qword [rdi + 0x20]
call qword [fcn.141699e20]
test eax, eax
mov dword [rbp - 0xc], ebp
mov dword [rbp - 0x10], r13d
mov dword [rbp - 0x14], r13d
mov dword [rbp - 0x18], r13d
cmp rcx, rax
jbe 0x1416832e6
mov qword [rsp + 0x20], r8
mov rcx, 0xfffff0
add byte [rax - 0x77], cl
adc eax, 0x72347
and eax, dword [rdi]
add byte [rax - 0x75], cl
ret 0x8548
mov rax, rdx
test rdx, rdx
je 0x141683321
mov rcx, rbp
call fcn.141643de0
nop
or eax, 0xffffffff
lock xadd dword [rax], ecx
xor eax, eax
add rsp, 0x28
ret
test rax, rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + rcx*2 + 0x24]
and byte [rdi], cl
mov bh, 0xf8
or edi, 0x80070000
test eax, eax
cmovle ecx, dword [rcx - 0x72b7e883]
push rbp
invalid
mov qword [rbp - 0x30], r8
lea r9, [rbp - 0x20]
lea rdx, [rbp - 2]
dec dword [rax - 0x73]
adc eax, 0x5f267
mov rcx, qword [rax]
call 0x14267f390
mov rcx, rbx
call qword [0x1416da350]
mov rsi, rax
test rax, rax
shr r8b, 0xd9
sar esp, cl
call qword [rax - 0x17ac72b8]
or eax, 0xffffffff
invalid
add dword [0x15ef17c95], eax
or byte [rax], r8b
lea rcx, [0x141707af0]
int1
test rcx, rcx
jne 0x1416834c9
mov rcx, rdx
call fcn.141666290
xor eax, eax
add byte [rbp - 0x7b1f040], 0x85
invalid
add byte [rax], al
add byte [rdi], cl
invalid
xor eax, eax
test eax, eax
je 0x141683779
nop
nop
nop
nop
nop
and al, 0x60
and qword [rsp + 0x50], 0
xor r9d, r9d
and qword [rsp + 0x48], 0
add byte [rax], al
sub ecx, dword [rax - 8]
mov eax, dword [rax - 0xc]
sub eax, ebx
or ecx, eax
jge 0x14168350c
jl 0x151682f9b
push rdi
ror byte [rdi], 0x11
and al, 0x28
lea rdx, [rsp - 0x6f]
cld
call qword [rax - 0x173274b8]
mov eax, 0x48fffff5
mov eax, dword [rbx]
pop r8
pop rax
mov r8, rbx
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x50]
call 0xcab0e9b8
pop rsp
and al, 0x10
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
or qword [rbp + 0x48282444], 0xffffffffffffff8d
push rsp
and al, 0x48
lea rcx, [0x1416b8230]
mov dword [rsp + 0x50], edx
call fcn.14162a5b0
mov rcx, rax
test rax, rax
je 0x141683521
je 0x141683665
mov rax, qword [rdi]
sub rbx, rax
sar rbx, 1
ror byte [rdi], 0x85
movabs dword [0xab12158d48000000], eax
add al, 0
lea rax, [rcx + 0x30]
mov rdi, rcx
cmp qword [rcx], 0
je 0x1416835b6
xor ebx, ebx
cmp dword [rcx + 0x10], ebx
mov edx, ebp
jmp 0x14168348f
mov ecx, eax
mov rax, qword [rbx]
mov rbx, qword [rsp + 0x30]
push rbx
add dword [rax - 0x75], ecx
iretd
ret