Function at 0x180009bd9
Capabilities:
Authenticate hmac
Encode data using base64
Execute anti-debugging instructions
Get number of processors
Get system information on windows

Disassembly:
test ebx, 0x800f0000
fcom dword [rsi]
add byte [rax], al
and dword [rbp - 0x48], 0
lea rcx, [rbp - 0x50]
mov rdx, rdi
call fcn.18000b053
mov ebx, 0xfde9
lea rcx, [rbp - 0x50]
call fcn.180009bd9
invalid
mov dword [rax], 0xf000000
invalid
mov eax, dword [rsi + 0x48000072]
test eax, eax
jne 0x18000f1d7
jne 0x18000c90e
call fcn.180009bd9
fisttp word [rax + rbx + 0x38]
call 0x11b5f4e2b
add byte [rax], al
mov ecx, 0xe8219482
call fcn.18000d718
invalid
cli
invalid
test ecx, 0
call fcn.180008f2e
sub al, 0x66
sahf
shr eax, cl
jo 0x18000d655
call fcn.18000e40c
loop 0x180006bf2
pop rdi
invalid
pushfq
jl 0x18000a116
mov bp, bp
jge 0x18000a116
jo 0x18000e8a9
test rcx, rcx
je 0x180010636
je 0x18000c1c0
call fcn.18000cd8e
loopne 0x180006c28
mov dword [rsi], esp
call 0x1a44cf9d8
and byte [rdx - 0x3b359056], bh
call fcn.18000d793
ficomp word [rsi + 0x48e8049e]
add ecx, 0x2c618b14
jl 0x1800126a1
mov r15, r15
jge 0x1800126a1
movsxd r8, dword [r8]
jb 0x18000741a
xchg bh, bh
jae 0x18000741a
dec r8
call fcn.18000d900
pop rsp
stc
ret 0xe8fe
invalid
pushfq
ja 0x180014867
xchg bl, bl
jbe 0x180014867
jbe 0x18000ddbd
call fcn.18000c8e9
test si, 0
jo 0x18000c172
test eax, eax
jne 0x180008c2a
call fcn.18000d0b5
jne 0x1800073f8
lodsb al, byte [rsi]
and eax, ebp
lea rcx, [0x18001a4e7]
jmp fcn.180005d4f
pop r9
jmp 0x180009128
ret
mov r9, qword [rsp + 8]
jp 0x18000837d
mov r12, r12
jnp 0x18000837d
mov r9d, 0x8a31cf70
mov r8d, 0x6914a315
call fcn.18001273e
mov rcx, rbx
call fcn.180010694
outsd dx, dword [rsi]
invalid
movsxd r9, dword [r9]
je 0x18000babe
mov dh, dh
jne 0x18000babe
test rcx, 0
call fcn.180014297
sbb eax, 0xe8f737c5
mov r8, qword [rsp + 8]
jo 0x18000c4af
xchg r15, r15
jno 0x18000c4af
mov rdx, r11
mov rcx, rsi
call fcn.180013b03
fcomp st(2)
ret 0xe8d7
invalid
mov rbx, qword [rsp + 0x30]
test ax, 0
call fcn.180011724
invalid
ret
mov ecx, eax
call qword [0x18001a7e2]
test edi, 0
jb 0x180013dad
call fcn.180009c3f
call 0x168feef0c
push r9
ja 0x180007b8d
mov cx, cx
jbe 0x180007b8d
ret
xor r8, 0x1620ea4e
jb 0x18000cd23
mov sp, sp
jae 0x18000cd23
js 0x18000602e
call fcn.180005f86
iretd
test esi, 0
jb 0x1800130ee
cmp esi, eax
call fcn.18000fd3b
shl byte [rsi - 0x6b], 2
call 0x1a44ca6a0
adc byte [rdi], cl
mov bl, ch
add eax, 0xf6860000
jns 0x18000ab46
call fcn.180006830
test eax, 0xe8329108
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
pop rax
mov rsi, qword [rsp + 0x60]
test ecx, 0
jb 0x180012c0d
add rsp, 0x30
call fcn.18000a181
jne 0x18000a7fd
and eax, 0xc7ff48e8
jmp 0x18000a538
popfq
jg 0x18000753c
xchg bh, bh
jle 0x18000753c
jb 0x18000b209
test eax, eax
je 0x18000ad9e
je 0x180010c0d
call fcn.180006716
out dx, eax
cli
adc eax, ebp
call fcn.18000d0b5
sub byte [rbp + 0x4ce821ac], 0x29
and al, 0x10
jmp 0x180010ae2
lea ecx, [rsp + 0x40]
call fcn.1800148da
pop rsi
clc
invalid
sub esp, 0x20
mov rdi, rdx
mov rbx, rcx
mov edx, 0x4b3d7443
mov ecx, 0x1e79e9b7
call fcn.18000d793
push rdx
neg dword [rsi - 0x7e3c17fc]
int1
mov cl, 0x1e
mov edx, 0xffb750e8
invalid
pushfq
jo 0x180014a4f
xchg r10, r10
jno 0x180014a4f
jne 0x18000f378
test di, 0
call fcn.180009ee1
cmpsd dword [rsi], dword [rdi]
add al, byte [rdi - 0x19]
call 0x17fc861cf
dec dword [rcx + rcx*4 + 0x36]
call fcn.18000f58a
jmp 0x18000baf0
pop r12
jg 0x180007973
xchg rsi, rsi
jle 0x180007973
movsxd rbx, ebp
call fcn.1800147cb
stc
invalid
invalid
call 0x1a09c4d0b
invalid
mov ebx, dword [rbx + 0xe20]
jne 0x180014214
call fcn.180013ae2
std
cmp al, 0x6b
jrcxz 0x18000c1be
movsxd r8, dword [r8]
js 0x180006c5d
mov r13, r13
jns 0x180006c5d
pushfq
jg 0x180010756
xchg rdi, rdi
jle 0x180010756
test si, 0
call fcn.18000693c
and eax, 0xe82219c2
pop rbp
jb 0x18000f330
xchg si, si
jae 0x18000f330
test rax, 0
jo 0x180009bbb
call fcn.18000f21b
xchg ecx, eax
add eax, ebx
xor al, ch
je 0x18000a7ea
call fcn.180009158
mov cl, ah
invalid
add byte [rbp - 0x75], cl
ror byte [rdi], 0x81
mov dh, 0x26
add byte [rax], al
sub qword [rsp + 0x10], r8
je 0x18001355a
xchg rsp, rsp
jne 0x18001355a
jb 0x1800085c6
cmp eax, 0x1a
jae 0x1800146d3
jae 0x1800063fc
test r9, 0
jo 0x1800065b8
call fcn.180009f09
mov dword [rdi + 0x51e8132b], esp
call fcn.1800105a5
jae 0x18000cd19
movsd dword [rdi], dword [rsi]
out dx, al
call 0x1804f125a
add byte [rbx + rdx*4 + 0x6d], bl
adc eax, ebp
add rbp, 0x15e6e04
jb 0x18000ec82
mov si, si
jae 0x18000ec82
invalid
sahf
shr eax, cl
je 0x18000b699
lea rcx, [rbp + 0x340]
call fcn.18000b45b
and edx, dword [rdi + 0x41e8378e]
mov ecx, 0xa2407249
mov r8d, 0x4e710e19
mov dword [rsp + 0x20], 0x78
call fcn.18001273e
call fcn.18000dd46
outsd dx, dword [rsi]
sbb eax, 0x48e8c4fb
mov ecx, ebp
call qword [0x18001a631]
mov ecx, dword [rsi + 0x18]
lea r13d, [rcx + rax + 1]
mov edi, eax
mov eax, 2
movsxd rcx, r13d
call fcn.18000c151
movabs byte [0x24448d4ce83acc81], al
pop rax
mov rcx, r13
test rbx, 0
test ebx, 0
call fcn.18000f3b4
loopne 0x18000dccb
insb byte [rdi], dx
sub ebp, eax
invalid
lea ecx, [0x180019f47]
jmp fcn.180005d4f
add qword [rsp + 0x10], rbp
jl 0x180007e3b
mov rax, qword [rax]
call fcn.18000fd3b
add eax, 0xe8029604
ret
ret
test ebp, 0
jb 0x1800138a9
cmp rax, rdx
call fcn.18000d718
movsd dword [rdi], dword [rsi]
pop rsi
xor esp, edi
call 0x1001047d6
push r12
invalid
invalid
jg 0x18000f3ca
add byte [rax], al
mov r12, r12
jno 0x180012718
invalid
call fcn.18000fad7
invalid
sub rdx, 0x2d51cfa3
jl 0x180011c2c
add byte [rsi - 0x75], ah
in al, 0xf
invalid
mov sp, sp
jge 0x180011c2c
mov rcx, qword [rsi + 0x50]
call fcn.1800072dc
xor al, 0xc2
pop rax
loopne 0x180010762
jb 0x18000dd36
add rsp, 0x70
call fcn.180012452
xor dword [rbx - 0x5f], esi
invalid
popfq
jp 0x18000c0cd
xchg r8, r8
jnp 0x18000c0cd
adc eax, 0x977a
test r13, 0
jne 0x180014215
call fcn.1800132fb
int 0x2b
invalid