Function at 0x140007f70
Capabilities:
Encode data using xor
Get token membership
Packed with generic packer

Disassembly:
sub rsp, 0x88
xor eax, eax
test eax, eax
je 0x14000818e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [rbp - 0x10]
call 0x140000730
test al, al
je 0x140007fcb
mov eax, dword [rbp - 0x10]
mov dword [rsi + 0x54], esp
js 0x140008019
invalid
add byte [rax], al
add byte [rax + 0x74006d00], al
or byte [rcx + 0x6cef5c], ah
mov byte [rax], 1
xor eax, eax
pop rdx
pop rcx
invalid
add byte [rax], al
add byte [rbx - 0x3f3903bb], cl
mov dword [rdx], ecx
in al, 0x8b
add spl, al
mov word [rdx], cs
or byte [rax + 0x7474004a], cl
jb 0x14000809d
invalid
invalid
xor eax, eax
test eax, eax
je 0x1400083a5
nop
nop
nop
nop
nop
nop
nop
nop
je 0x14000820b
outsb dx, byte [rsi]
jne 0x14000820a
push rbx
je 0x14000820d
jo 0x1400081f9
jbe 0x140008211
jb 0x1400081b0
add byte [rax], al
fucomi st(3)
mov edx, 0x5a59c38b
pop rdi
insb byte [rdi], dx
je 0x14000826f
add byte [rax], al
add byte [rax], al
js 0x140008204
add byte [rax], al
add byte [rdx], al
add byte [rax + 0x44004f76], ch
add ah, dh
add byte [rax + rax - 0xc], al
add spl, r14b
hlt
invalid
pop rdx
pop rcx
pop rcx
mov dword fs:[rax], edx
push 0x62bd44
lea eax, [rbp + 0xfee0]
add byte [rax], al
push rax
invalid
invalid
xor eax, eax
test eax, eax
je 0x1400085bc
nop
dec dword [rbx - 0x3c746bab]
mov ecx, 0
call 0x13fe35518
add byte [rsi + rdx*2], cl
invalid
xor eax, eax
test eax, eax
je 0x1400087d3
add byte [rax], al
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rcx - 0x761603bb], cl
add byte [rax], al
add byte [rbx + 0x408bf845], cl
or byte [rbx + 0x65696c43], cl
outsb dx, byte [rsi]
je 0x140008615
clc
mov eax, dword [rax + 8]
mov eax, dword [rbx + 0x6c]
imul esp, dword [rbp + 0x6e], 0x48542e74
push rsp
push rsp
push rsp
push rsp
push rax
insb byte [rdi], dx
imul esp, dword [rbp + 0x6c], 0x4d04006c
outsd dx, dword [rsi]
jbe 0x14000865d
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
or byte [rax], al
add byte [rax], al
adc dword [rax], eax
add eax, 0x636f6c42
imul eax, dword [rdx], 0
add byte [rax], al
add bh, bh
jmp 0x1400085db
pop rbx
mov esp, ebp
pop rbp
ret
add byte [rax], cl
add byte [0x17d3dc3a2], bh
cmp eax, 0x3d3d3d3d
cmp eax, 0x3d3d3d3d
cmp eax, 4
pop rsp
add byte [rax + rax + 0x3f], bl
add byte [rax + rax], bl
add byte [rax], al
add byte [rax + rbp*2 + 0x48], dh
invalid
xor eax, eax
test eax, eax
je 0x1400089ea
nop
xor eax, eax
test eax, eax
je 0x140008c01
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add al, 0xb2
loope 0x140008a03
dec dword [rbp - 0x15f7b]
invalid
lea eax, [rbp - 0x160]
call 0x13fe23c2c
invalid
invalid
xor eax, eax
test eax, eax
je 0x140008e18
nop
nop
nop
nop
nop
test eax, eax
jl 0x140008c36
xor edx, edx
mov ecx, dword [rbp - 0x18]
mov ecx, dword [rcx + rdx*4]
cmp ecx, dword [0x140008c57]
add byte [rcx], al
or ah, byte [rax + 0x700401f]
invalid
jne 0x140008bdd
mov eax, dword [rbx + 0x2e8]
test eax, eax
lea edx, [rbp - 0x10]
xor ecx, ecx
mov eax, 0x6afb00
call 0x13ff6fb90
cmp edi, 0x53
push rsi
push rdi
xor ebx, ebx
mov dword [rbp - 4], ebx
mov esi, ecx
mov dword [rbp + 0x1fffcd4], edx
add al, 2
add byte [rax], al
add byte [rax], al
add al, al
add byte [rax], al
add byte [rax], al
add byte [rax], al
or byte [0x128008c77], r8b
test r8b, r14b
inc dword [rbx + 0xa7502f8]
add eax, dword [rax]
add byte [rax], dl
add byte [rax], cl
add byte [rcx], al
or byte [rax + rdx + 0x56], ch
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rbx + rdx*2], al
outsd dx, dword [rsi]
jb 0x140008d0e
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
mov bl, 0xd9
dec dword [rbp + 0x4de8fc45]
xchg ebp, eax
fcos
ret
add byte [rax + 0x65], al
add byte [rbx], dh
and byte [rax], al
je 0x140008d18
outsd dx, dword [rsi]
add byte [rax], ah
add byte [rsi], dh
add byte [rax + rax], dh
ret 8
mov dword [rsp + 0x60], 0
mov qword [rsp + 0x70], 0
mov byte [rsp + 0x64], 0
mov byte [rsp + 0x65], 0
mov byte [rsp + 0x66], 0
mov byte [rsp + 0x67], 0
mov byte [rsp + 0x68], 0
mov byte [rsp + 0x69], 5
xor eax, eax
test eax, eax
je 0x14000905e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
and cl, byte [rbx - 0xef743d]
adc cl, byte [rcx - 0x3fcc13bb]
push rbp
push 0x4e1fc64b
add byte [rdx], al
hlt
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x220
add byte [rax], al
mov r8d, 0x20
mov dl, 2
lea rcx, [rsp + 0x64]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x140009514
xor eax, eax
test eax, eax
je 0x1400092d0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
call fcn.140008ff8
pop rcx
test al, al
jne 0x1400090f4
push rbp
mov eax, ebx
call 0x1b6668ff8
insb byte [rdi], dx
jne 0x14000915b
jb 0x1400090ec
add byte [rax], al
insb byte [rdi], dx
xchg esp, eax
push rax
add byte [rax + rdx*2], ah
add byte [rdi], cl
mov bh, 0x44
and al, 0x22
mov dword [rsp + 0x54], eax
mov byte [rsp + 0x58], 0x69
outsd dx, dword [rsi]
outsb dx, byte [rsi]
add al, byte [rax]
add byte [rdx], al
add byte [rsi], dh
add byte [rax], ch
add byte [rbx + rdx*2], al
insb byte [rdi], dx
invalid
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x140009509
xor eax, eax
test eax, eax
je 0x140009501
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov al, 4
add al, byte [rax]
mov dword [rsp + 0x60], 0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
xor eax, eax
test eax, eax
je 0x14000972b
nop
nop
add al, 0x8b
invalid
xor eax, eax
test eax, eax
je 0x140009942
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 0x38004012
add dword [rax], eax
add byte [rcx], cl
jb 0x1400097c6
jo 0x1400097c3
jle 0x14000976b
mov eax, ebx
mov edx, dword [rax]
call qword [rdx + 0x12c]
or ecx, 0xffffffff
xor edi, ecx
invalid
push rdx
push rax
lea eax, [rbp - 0x10]
mov dword [rax + 0x14], ebx
mov edx, dword [rbp - 4]
mov dword [rax + 0xc], edx
mov edx, dword [rbp - 4]
mov dword [rdx + 0x18], eax
mov esi, dword [rsp + rsi*2 + 0x69]
push rdx
invalid
add byte [rax], al
invalid
mov al, 0x4c
add byte [rax], dh
add byte [rax], al
add byte [rbx], cl
push rbx
je 0x140009846
imul ebp, dword [rsi + 0x67], 0x6e6f6328
jae 0x140009851
and byte [rbx + 0x3a], dl
ret
ret
fmul dword [rbx + 0x22e8fc45]
stc
loopne 0x140009859
push qword [rbx]
rcl byte [rbp + 0x68], 0xb8
test eax, 0x74158b98
out dx, eax
insb byte [rdi], dx
add byte [rcx + 0x277ee820], dh
invalid
xor eax, eax
push rbp
push 0xffffffff8b98a9b8
adc eax, 0x6cef74
mov cl, 0x20
call 0x13fdbbfec
lea ecx, [rbp]
add dword [rbp + 7], esi
mov eax, ebx
call fcn.1400097a0
pop rbx
ret
mov eax, dword [rsp + 0x60]
add rsp, 0x88
ret