Function at 0x14000bf00
Capabilities:
Terminate process

Disassembly:
push rdi
sub rsp, 0x2b0
xor eax, eax
test eax, eax
je 0x14000c120
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
outsd dx, dword [rsi]
outsb dx, byte [rsi]
jb 0x14000bf97
invalid
invalid
xor eax, eax
test eax, eax
je 0x14000c337
nop
nop
nop
nop
nop
nop
outsb dx, byte [rsi]
jae 0x14000c133
add byte [rax], al
add byte [rdx], al
add byte [rax], al
add byte [rax], al
add byte [rax], ah
add byte [r8], r8b
add byte [rax], al
or byte [rax], al
add cl, byte [rax]
nop
fistp dword [rax]
add byte [rax], al
add al, 0x53
ja 0x14000c152
push 0x74006900
add byte [rbp], ah
add byte [rax], al
mov al, 4
add al, byte [rax]
push qword [rdx]
movsd dword [rdi], dword [rsi]
invalid
xor eax, eax
test eax, eax
je 0x14000c54e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rsi
invalid
call fcn.14000ad70
test eax, eax
jne 0x14000ce5a
xor eax, eax
test eax, eax
je 0x14000c772
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rax], ah
add byte [rbx], al
or byte [rsp + rax + 0x80060], ch
add al, 0x53
insb byte [rdi], dx
add byte [rax], al
add al, byte [rax]
or byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rsi], al
invalid
mov r8d, 0x208
lea rdx, [rsp + 0xa0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
test eax, eax
je 0x14000c99f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jae 0x14000c816
insd dword [rdi], dx
outsb dx, byte gs:[rsi]
jb 0x14000c814
invalid
add byte [rax], al
add byte [rax], 0
add byte [rax + 0x5403ffff], al
outsd dx, dword [rsi]
jne 0x14000c844
mov eax, dword [rbp - 4]
mov edx, dword [rax + 0x24]
mov eax, dword [rax + 0x20]
mov ecx, dword [rbp - 4]
sub eax, dword [rcx - 0x2b]
invalid
imul esi, dword [rbx + 0x74], 0x9c000002
adc byte [rax], al
or byte [rax], al
jae 0x14000c855
add byte [rdx], al
add byte [rsi], cl
sub byte [rsp + rbp*2], ch
mov dword [rsp + 0x30], 0x70
lea rax, [rsp + 0x34]
mov rdi, rax
xor eax, eax
mov ecx, 0x6c
rep stosb byte [rdi], al
mov eax, 0x72
mov word [rsp + 0x20], ax
mov eax, 0x75
mov word [rsp + 0x22], ax
mov eax, 0x6e
mov word [rsp + 0x24], ax
mov eax, 0x61
mov word [rsp + 0x26], ax
mov eax, 0x73
mov word [rsp + 0x28], ax
xor eax, eax
mov word [rsp + 0x2a], ax
lea rax, [rsp + 0x20]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x60], 1
xor eax, eax
test eax, eax
je 0x14000cc30
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rax], al
add byte [rax], al
lodsb al, byte [rsi]
fmul qword [rax + rax]
add byte [rax], al
add byte [rdx + 0x4cdc], bh
add byte [rcx], cl
outsd dx, dword [rsi]
insd dword [rdi], dx
jo 0x14000caaa
jb 0x14000cab0
jb 0x14000ca4f
add byte [rax], al
or byte [rax + rax + 0xf], ch
scasd eax, dword [rdi]
and al, 4
lea edx, [rsp + 0x2c]
mov eax, edi
call 0x1347e146c
movsd dword [rdi], dword [rsi]
movsd dword [rdi], dword [rsi]
movsd dword [rdi], dword [rsi]
mov ecx, dword [rbp + 0x14]
push rcx
movzx ecx, byte [rbp + 0x10]
push rcx
mov ecx, dword [rbp]
add al, byte [rax]
push r12
imul r12d, dword [rbx + 0x74], 0x616e6f69
jb 0x14000caf8
cmp al, 0xd6
mov eax, dword [rbp - 8]
call fcn.14000d5d8
mov eax, dword [rbp - 0x14]
mov edx, dword [rax]
call qword [rdx + 0x73]
je 0x14000caf8
insd dword [rdi], dx
outsb dx, byte gs:[rsi]
jb 0x14000cb04
invalid
add al, byte [rax]
invalid
pop rsp
mov ah, 0x67
add byte [rcx], al
add byte [rcx], cl
outsd dx, dword [rsi]
insd dword [rdi], dx
jo 0x14000cb1e
jb 0x14000cb24
jb 0x14000cac1
call 0x13fe3f3c0
mov edx, dword [rbp - 0x20]
mov eax, ebx
mov ecx, 0
add al, ch
invalid
shl byte [rsi - 0x7d], 1
invalid
mov eax, dword [rsi]
mov word [rax + 0xa], bx
mov eax, dword [rsi]
cmp byte [rax + 0x1f], 0
push rbp
mov ebp, esp
add esp, 0xfffffff8
push rbx
push rsi
mov dword [rbp - 4], edx
mov ebx, eax
mov eax, dword [rbp - 4]
cld
add byte [rdx + 0x6b8b2c], bh
call 0x13fff8624
pop qword fs:[0x16effcb32]
imul eax, dword [rax], 0xffffffe8
stc
mov edx, 0x8f64fffe
add eax, 0x2eff0000
in al, 0x43
add byte [rdx], al
hlt
lea rcx, [rsp + 0x30]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
add rsp, 0x2b0
pop rdi
ret