Function at 0x14001a1cc
Capabilities:
Encode data using base64
Print debug messages

Disassembly:
push r15
cmp r9b, sil
push r14
cmp bx, 0x5cb9
test r13b, 0x24
push r13
push r12
cmp r9w, 0x1131
push rsi
movzx rsi, r8w
btc si, r15w
add si, 0x5937
push rdi
sbb rsi, rsp
sbb sil, 0x2d
ror sil, 0x80
push rbp
push rbx
bt esi, ebx
movzx esi, si
rol si, cl
sub rsp, 0x4b8
xor sil, r13b
mov rsi, rcx
cmc
test rdx, rdx
jmp 0x14001a222
je 0x14001a2cd
mov rdi, qword [rsi + 0x28]
bsf rdx, rbp
movsxd rcx, eax
mov rdx, qword [rdi + 0x50]
movsx cx, sil
or rcx, r12
shl cx, 0xf
add rdi, 0x48
lea rbx, [rsp + 0x1d0]
cmovae rcx, r9
movzx cx, r9b
mov rcx, rbx
call fcn.1400153ec
mov rcx, qword [rbx]
stc
clc
test r10b, 0x18
test rcx, rcx
jmp 0x14001a271
je 0x14001b10d
cmp dword [rsp + 0x1d8], 0
movsx ax, r12b
movzx eax, r15w
mov eax, 0xc0000001
jmp 0x14001a292
je 0x14001b112
mov rdx, rsi
call fcn.14001b61f
test al, al
seto ch
cmovl rcx, rcx
movzx rcx, r14w
mov eax, 0xe0000000
mov ecx, 0xc0000001
jmp 0x14001a2bc
cmovne ecx, eax
movsx ax, r11b
xchg ah, ah
mov eax, ecx
jmp 0x14001b112
call fcn.140011689
test al, al
jmp 0x14001a2d9
je 0x14001b035
call fcn.1400192b4
mov edi, eax
jmp 0x14001a2eb
test eax, eax
js 0x14001b168
call fcn.1400157cd
mov rcx, rax
bt bx, bp
shr bh, cl
and rbx, rdi
mov ebx, eax
seto al
sbb ax, 0xdeab
shr rcx, 0x20
bts rax, rdi
adc eax, 0x608c54a4
mov eax, ecx
mov dword [0x14000e778], ebx
adc al, dil
mov dword [rsp + 0x3c], ecx
sub ax, cx
bts eax, r13d
mov dword [0x14000e77c], ecx
ror al, 0x2f
movabs rax, 0x3d59435f17545944
mov qword [rsp + 0x4d], rax
movsxd rax, r10d
ror ax, cl
adc ah, 0x1f
movabs rax, 0x5459445e475c465f
cmc
jmp 0x14001a361
mov qword [rsp + 0x48], rax
cmp byte [rsp + 0x54], 0
jmp 0x14001a370
je 0x14001a3db
xor eax, eax
rcl dl, cl
xor cl, r14b
rcl dl, 0x17
mov ecx, eax
sar dl, 0x94
sub dl, r12b
xor dl, 0xba
mov dl, al
btc ecx, r9d
stc
sbb cl, 0x39
lea ecx, [rdx + 0x31]
test rax, 0xffffffff9e15e0b1
cmp r11b, 0x1f
jmp 0x14001a3a7
xor byte [rsp + rax + 0x48], cl
mov cl, r11b
mov rcx, rax
inc rcx
add ah, 0x84
and rax, 0x1f80c5ad
btr rax, r13
mov rax, rcx
test r14b, 0xa7
test spl, bl
cmp rcx, 0xd
jmp 0x14001a3d5
jne 0x14001a380
lea rcx, [rsp + 0x48]
clc
cmp rdx, rbp
xor edx, edx
jmp 0x14001a3eb
call fcn.1400039d3
mov qword [0x14000e780], rax
movzx rdx, r12w
btr dx, cx
mov rdx, rax
test r8b, r14b
cmp r9b, dl
movups xmm0, xmmword [0x14000b9f2]
movups xmmword [rsp + 0x60], xmm0
stc
cmp r8w, dx
cmc
mov dword [rsp + 0x6f], 0x43483165
cmp byte [rsp + 0x72], 0
je 0x14001a474
sub eax, eax
mov ecx, eax
xor r8b, 0x2a
mov r8b, al
lea ecx, [r8 + 0x31]
cmc
clc
test si, dx
xor byte [rsp + rax + 0x60], cl
xchg ecx, ecx
movzx cx, r10b
movzx ecx, cx
mov rcx, rax
inc ax
inc rcx
test al, bl
cmc
mov rax, rcx
jmp 0x14001a46a
cmp rcx, 0x13
jne 0x14001a42f
lea rcx, [rsp + 0x60]
jmp 0x14001a47e
call sub.ntoskrnl.exe_DbgPrint
mov rax, qword [sym.imp.ntoskrnl.exe_ExGetPreviousMode]
jmp 0x14001a48f
mov eax, dword [rax + 0xc]
jmp 0x14001a497
mov dword [0x14000e78c], eax
call fcn.140001ffe
mov edx, dword [0x14000e788]
movups xmm0, xmmword [0x14000ba05]
movups xmmword [rsp + 0xa0], xmm0
test spl, r11b
stc
mov dword [rsp + 0xb0], 0x44491a79
cmp sil, spl
cmp byte [rsp + 0xb3], 0
jmp 0x14001a4d6
je 0x14001a526
sub eax, eax
sal r8b, cl
mov ecx, eax
rol ch, 0x3e
mov r8b, al
lea ecx, [r8 + 0x31]
test ax, di
clc
xor byte [rsp + rax + 0xa0], cl
cmovno cx, sp
inc ecx
mov ecx, 0x37a602
mov rcx, rax
movsx eax, sp
cwde
inc rcx
seta ah
movzx rax, r13w
mov rax, rcx
cmp rcx, 0x14
jmp 0x14001a520
jne 0x14001a4e1
lea rcx, [rsp + 0xa0]
jmp 0x14001a533
call sub.ntoskrnl.exe_DbgPrint
cmp ebx, 0x611
jmp 0x14001a543
mov dword [rsp + 0x44], edi
jmp 0x14001a54c
mov dword [rsp + 0x40], ebx
jmp 0x14001a555
ja 0x14001b20b
movups xmm0, xmmword [0x14000ba29]
test r13w, 0x77bc
cmc
cmp r11b, 0x19
movups xmmword [rsp + 0x120], xmm0
test bl, 0xbb
cmp spl, al
clc
movups xmm0, xmmword [0x14000ba19]
movups xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x130], 0x51
cmp ebp, 0xa99f2a22
cmp byte [rsp + 0x130], 0
jmp 0x14001a5a6
je 0x14001a5ee
sub eax, eax
cmp r9b, r14b
sar cx, 0x84
mov ecx, eax
rcl cl, cl
clc
mov dl, al
lea ecx, [rdx + 0x31]
test edx, 0xb4b26527
xor byte [rsp + rax + 0x110], cl
mov rcx, rax
dec ah
inc rcx
rol al, cl
mov eax, ebp
shr ah, cl
mov rax, rcx
cmp bl, dh
cmp rcx, 0x21
jmp 0x14001a5e8
jne 0x14001a5b5
mov word [rsp + 0x2c], 0x3641
cmp r11d, 0x1329b894
mov dword [rsp + 0x28], 0x4c56461f
jmp 0x14001a60e
cmp byte [rsp + 0x2d], 0
jmp 0x14001a618
je 0x14001a669
sub eax, eax
rcl dl, 0x82
and dl, spl
sar cx, 0x93
mov ecx, eax
mov dl, al
lea ecx, [rdx + 0x31]
test r13b, 0x9c
cmp r13, 0xffffffffa7041592
xor byte [rsp + rax + 0x28], cl
movsx cx, ch
dec ch
setnp ch
mov rcx, rax
setbe ah
inc rcx
mov rax, rcx
test sp, 0x13b2
cmp rcx, 6
jmp 0x14001a663
jne 0x14001a62a
mov rax, qword [0x14000e780]
mov qword [rsp + 0x30], rax
jmp 0x14001a67b
test rax, rax
jmp 0x14001a683
je 0x14001b2c5
mov rcx, qword [rsp + 0x30]
movsxd rax, dword [rcx + 0x3c]
stc
cmp word [rcx + rax + 6], 0
jmp 0x14001a69e
je 0x14001b2c5
mov rcx, qword [rsp + 0x30]
sub rdx, rbp
lea rdx, [rcx + rax]
xadd bpl, bpl
movzx eax, word [rcx + rax + 0x14]
rcl bpl, 0xd
dec bpl
mov qword [rsp + 0xc8], rdx
lea rbp, [rax + rdx]
add rbp, 0x18
movzx eax, cx
mov qword [rsp + 0xc0], rbp
mov byte [rsp + 0x5f], 0
mov rax, qword [rbp]
movsxd rdx, r15d
mov cx, 0xaab3
mov qword [rsp + 0x57], rax
not rdx
jmp 0x14001a6f8
lea rcx, [rsp + 0x28]
lea rdx, [rsp + 0x57]
jmp 0x14001a707
call sub.ntoskrnl.exe_strcmp
test eax, eax
jmp 0x14001a713
je 0x14001a75f
mov rax, rbp
add rax, 0x28
mov rcx, qword [rsp + 0xc8]
or rdx, 0xffffffffd5255dac
movzx ecx, word [rcx + 6]
btr bp, di
shr edx, cl
lea rcx, [rcx + rcx*4]
clc
bts rdx, rax
mov rdx, qword [rsp + 0xc0]
lea rcx, [rdx + rcx*8]
mov rbp, rax
cmp rax, rcx
jb 0x14001a6db
jmp 0x14001b2c5
mov edi, dword [rbp + 8]
movzx ecx, r9w
mov r14d, dword [rbp + 0xc]
movzx cx, r11b
bswap cx
lea rcx, [rsp + 0x110]
jmp 0x14001a77f
call sub.ntoskrnl.exe_strlen
mov ecx, eax
movzx r13d, bx
mov r15d, 0
mov r12d, 0
stc
mov r13d, 0
cmc
test eax, eax
jmp 0x14001a7a5
js 0x14001abf9
mov ecx, eax
rol r8b, 6
and eax, 0x7fffffff
inc ecx
test r13b, al
sub edx, edx
and r8w, di
jmp 0x14001a7ca
xor ebx, ebx
btr r8w, 0xb6
xadd r8d, r8d
xor r10d, r10d
cmp dil, 0x39
shl r8w, 0x93
shr r8d, 0xa1
sub r9d, r9d
mov r8b, 0x21
xor r11d, r11d
bsr r8w, r9w
btr r8w, 0x85
shl r8b, cl
mov r8d, ebx
cmp rax, rdx
jne 0x14001a84f
test r9b, 1
jmp 0x14001a812
je 0x14001a829
mov ebx, r10d
and bl, 1
jmp 0x14001a823
jne 0x14001ab4c
test r9b, 1
jmp 0x14001a832
jne 0x14001aa90
test r10b, 1
jne 0x14001a99d
sub r11d, r11d
jmp 0x14001a84a
jmp 0x14001aaad
movzx ebx, byte [rsp + rdx + 0x110]
bt r15w, 0xbe
mov r15d, ebx
add r13b, r12b
mov r12b, bl
inc r13b
add r12d, 0xffffff9f
sbb r15, rax
mov r13b, bl
or r15b, r11b
bsr r15d, esi
lea r15d, [r13 - 0x20]
cmp r12b, 0x1a
jmp 0x14001a887
movzx r15d, r15b
jmp 0x14001a890
cmovae r15d, ebx
cmovge rbx, r15
btr bx, 0x3d
xor bx, cx
mov ebx, r15d
mov r15b, bl
add r15d, 0xffffffd0
clc
cmp r15b, 0xa
jmp 0x14001a8b4
jb 0x14001a93e
mov r15b, bl
stc
add r15d, 0xffffffbf
cmp r15b, 0x19
jbe 0x14001a93e
cmp bl, 0x20
jmp 0x14001a8d4
je 0x14001a809
movzx r9d, bl
cmc
cmp r9d, 0x3f
jmp 0x14001a8e8
jne 0x14001ab4c
mov r9b, 1
movsxd rbx, r15d
mov ebx, r10d
movsx r12d, ax
mov r15d, 0
and r13b, 0x3f
sal r12b, cl
jmp 0x14001a90d
mov r12d, 0
setge r13b
bsr r13w, bx
mov r13d, 0
jmp 0x14001a92a
test r10b, 1
jmp 0x14001a933
je 0x14001aab8
jmp 0x14001abf9
test r9b, 1
jne 0x14001ab4c
mov r15d, 0
and r12b, 0x14
bt r12w, si
sub r13b, r9b
mov r12d, 0
or r13b, bpl
rol r13w, cl
mov r13d, 0
cmp r11d, 1
jmp 0x14001a976
jg 0x14001abf9
movsxd r10, r11d
jmp 0x14001a984
inc r11d
jmp 0x14001a98c
mov byte [rsp + r10 + 0x25], bl
mov bl, 1
jmp 0x14001a998
jmp 0x14001aab8
cmp r11d, 2
jmp 0x14001a9a6
jne 0x14001ab4c
movsx r10d, byte [rsp + 0x26]
xchg r11b, bl
mov r11d, r10d
sub bl, r12b
sub bl, 0x93
mov bl, r10b
sar r15b, 0xa4
test r10w, r15w
add r15b, 0x82
lea r10d, [rbx - 0x30]
or r15b, 0x2e
movsx rbx, si
add r11d, 0xffffffc9
sbb bh, 0x9c
sub r15b, r13b
cmp r10b, 0xa
bswap bx
movzx r10d, r10b
cmovae r10d, r11d
and r11w, 0xd92f
sbb r11b, 0x20
movsx r11d, byte [rsp + 0x25]
rol r15b, cl
mov ebx, r11d
sar r15b, 0x86
mov r15b, r11b
adc r11w, sp
lea r11d, [r15 - 0x30]
jmp 0x14001aa1c
add ebx, 0xfc9
cmp r11b, 0xa
jmp 0x14001aa2b
movzx r11d, r11b
cmovae r11d, ebx
clc
shl r11d, 4
jmp 0x14001aa3d
add r11d, r10d
setbe r10b
movsx r10, si
mov r10b, 0x33
mov r10d, r11d
movzx r11, r12w
movsx r11d, cx
movsx r11w, r10b
movsxd r11, r8d
inc r8d
test r11b, 0x8b
cmp sil, 0x3c
mov word [rsp + r11*2 + 0x1e0], r10w
jmp 0x14001aa7e
sub r11d, r11d
test bh, 0x1e
sub ebx, ebx
jmp 0x14001aa8b
jmp 0x14001aab8
movsxd r9, r8d
inc r8d
inc r15
mov word [rsp + r9*2 + 0x1e0], 0x100
rcr r15b, cl
xor r11d, r11d
xor r9d, r9d
mov ebx, r10d
movzx r15w, dl
inc r10b
mov r10d, ebx
mov r15d, esp
movsxd r15, edi
not r15w
mov r15, rdx
inc r15
mov rdx, r15
xor bl, ah
bt rbx, rdx
mov ebx, r8d
cmp rcx, r15
jmp 0x14001aadf
jne 0x14001a7fd
mov ecx, r8d
cmp bp, 0x6a2b
sub ah, 0xa0
mov eax, ecx
test r8d, r8d
jmp 0x14001aafa
jle 0x14001ab5d
xor edx, edx
movsx r9d, r14w
movzx r9d, word [rsp + rdx*2 + 0x1e0]
cmp r9d, 0x100
jne 0x14001ab77
mov r9, rdx
inc dh
xchg dx, dx
mov dx, 0x2e8f
inc r9
movsx dx, sil
mov rdx, r9
cmp r8b, al
cmp rcx, r9
jne 0x14001ab06
mov r15d, r8d
jmp 0x14001ab47
jmp 0x14001ab84
sub r15d, r15d
cmc
sub r12d, r12d
jmp 0x14001ab58
jmp 0x14001ab6a
mov r12d, eax
jmp 0x14001ab66
sub r15d, r15d
clc
sub r13d, r13d
jmp 0x14001ab72
jmp 0x14001abf9
mov r15d, edx
rol dh, cl
movsx r9w, dl
xor r9b, r15b
lea rdx, [rsp + 0x1de]
lea rcx, [rdx + rcx*2]
xor r9b, r10b
xor edx, edx
or r9b, spl
btc r9w, bx
test spl, r13b
movzx r9d, word [rcx]
cmp r9d, 0x100
jmp 0x14001abb0
jne 0x14001abdf
mov r9d, edx
movzx edx, r12w
inc r9d
add rcx, 0xfffffffffffffffe
clc
mov edx, r9d
cmp r8d, r9d
jmp 0x14001abd0
jne 0x14001aba0
mov edx, r8d
movsxd r13, ebx
cmc
rcr bh, cl
mov r12d, eax
cmp r9b, 0x31
shr bh, cl
bts r8w, r9w
mov r13d, edx
sar r8d, cl
and ecx, 0xc9aa53b5
mov ebx, r12d
movsx r8d, dx
setne cl
add r14, qword [rsp + 0x30]
btr r8w, si
mov r8d, 0x104
rol ch, 0xad
ror ch, 0xbc
or rcx, r13
lea rcx, [rsp + 0x3b0]
clc
test r15d, 0xe63db8a6
xor edx, edx
jmp 0x14001ac33
call fcn.14000c400
add r13d, r15d
sub ebx, r13d
and al, r12b
movsxd rax, r15d
jmp 0x14001ac49
lea r12, [rsp + rax*2]
cmp r15b, sil
add r12, 0x1e0
cmc
test ebx, ebx
jle 0x14001ad24
mov eax, ebx
sal rdx, 0x93
cdq
mov r13d, eax
cmp sil, r9b
rcr dh, 6
sbb dl, 0xa4
sub eax, eax
bts rdx, rsp
xor ecx, ecx
dec edx
mov edx, ecx
movzx ecx, word [r12 + rax*2]
test r8b, 0x1e
stc
jmp 0x14001ac8e
cmp edx, 0x100
jmp 0x14001ac99
je 0x14001acb0
cmp ecx, 0x100
jmp 0x14001acaa
je 0x14001ae82
mov byte [rsp + rcx + 0x3b4], 1
movzx rdx, r12w
mov rdx, rax
inc rdx
mov rax, rdx
test edi, esi
stc
cmp r13, rdx
jne 0x14001ac7d
mov r8d, 0x100
lea rcx, [rsp + 0x2b0]
cmp rbp, 0xffffffffa73e7036
xor edx, edx
call fcn.14000c400
xor eax, eax
movzx ecx, word [r12 + rax*2]
mov byte [rsp + rcx + 0x2b0], 1
movsx cx, r10b
mov rcx, rax
inc rcx
lahf
mov rax, rcx
test r8w, 0x51b8
cmp r13, rcx
jmp 0x14001ad19
jne 0x14001acef
jmp 0x14001ad53
mov r8d, 0x100
sub cl, sil
add cl, sil
test rdx, 0x1e9aa928
lea rcx, [rsp + 0x2b0]
jmp 0x14001ad47
xor edx, edx
jmp 0x14001ad4e
call fcn.14000c400
movsxd rax, ebx
movsx rcx, bp
inc dl
movsxd rcx, ecx
lea rcx, [r14 + rax]
inc ebx
sub dl, bpl
movsxd rdx, ebx
sub r9d, r9d
cmp rdi, 0x6587c6ae
xor r10d, r10d
sub r11d, r11d
cmp r9, rdi
jmp 0x14001ad83
jae 0x14001a719
mov r8d, r11d
jmp 0x14001ad93
movsxd r11, r11d
movzx r11d, word [r12 + r11*2]
cmp r11d, 0x100
je 0x14001adc1
movzx ebx, byte [r14 + r9]
test r8, rdx
test rsp, 0xffffffffb392cf98
cmp r11w, bx
jne 0x14001adf2
inc r10
inc r9
jmp 0x14001add3
mov r11d, r8d
mov r8b, bpl
inc r11d
movsxd r8, r13d
mov r8, r9
cmovle r9w, r9w
mov r9, r10
mov r10d, r11d
jmp 0x14001ae42
sub r9, r10
rcl r8d, 0xb1
movzx r8d, byte [rcx + r9]
clc
cmc
cmp byte [rsp + r8 + 0x2b0], 0
movzx r8w, dil
mov r8, rdx
jmp 0x14001ae16
je 0x14001ae22
mov r8d, 1
add r8, r9
sal rbx, 0x3c
shl bh, 0x89
movsxd rbx, r14d
sub r9d, r9d
cmc
add r11w, 0x9f26
movsx ebx, ax
sub r10d, r10d
movsxd rbx, ebp
mov r11d, r10d
bswap bx
sub bl, r13b
mov rbx, r9
mov r9, r8
sal r10b, cl
mov r10w, r12w
mov r10, rbx
test r14b, 0x96
test dl, bpl
cmp rbx, rax
jmp 0x14001ae6a
jne 0x14001ad7b
sub r8, rax
movzx eax, r14w
sete al
mov rax, r8
jmp 0x14001afae
sub r8d, r8d
stc
sub edx, edx
cmc
clc
xor r9d, r9d
jmp 0x14001ae94
cmp r9, rdi
jmp 0x14001ae9c
jae 0x14001a719
mov rcx, r9
movsxd r9, edx
stc
movzx r9d, word [r12 + r9*2]
clc
test r9, r8
cmp r9d, 0x100
je 0x14001aed9
movzx r10d, byte [r14 + rcx]
test bx, 0xb52e
stc
cmp r9w, r10w
jmp 0x14001aed3
jne 0x14001af0f
inc r8
cmovp r9, r9
bswap r9w
inc rcx
mov r9w, bx
mov r9d, edx
movsxd rdx, ebp
inc r9d
bswap rdx
mov dx, r9w
movsx edx, r13w
mov rdx, r8
mov r8d, r9d
jmp 0x14001af0a
jmp 0x14001af5f
sub rcx, r8
lea rdx, [r14 + rcx]
movzx edx, byte [rax + rdx]
test r14b, r9b
cmp r15w, r8w
cmp byte [rsp + rdx + 0x3b4], 1
mov dh, 0x3e
movzx edx, si
jmp 0x14001af34
mov edx, 1
jmp 0x14001af3e
je 0x14001af4b
mov rdx, rax
sbb r9b, 0x34
add rcx, rdx
bsr r10d, edi
sub edx, edx
xor r8d, r8d
sal r9w, cl
cmp r11b, 0x24
mov r9d, r8d
adc r8d, 0x64a3609d
mov r10, rdx
shr r8w, 0x32
movzx r8d, r11w
mov r8, rdx
dec dl
bsf dx, dx
mov edx, r9d
bt r9, r14
bts r9d, ebx
mov r9, rcx
jmp 0x14001af92
cmp r10, r13
jmp 0x14001af9a
jne 0x14001ae94
sub rcx, r13
btc ax, ax
shl al, 0x94
mov rax, rcx
cmc
cmp eax, 0xffffffff
jmp 0x14001afb6
je 0x14001a719
sub eax, r15d
jmp 0x14001afca
cdqe
cmp bpl, 0x2f
cmp rax, 0xffffffffffffffff
jmp 0x14001afd9
je 0x14001a719
mov rdx, qword [rsp + 0x30]
sar cl, 0xb2
stc
sar ch, cl
add rdx, rax
sal ah, 0x22
movsx rcx, dx
movsx eax, r12w
mov eax, dword [rbp + 0xc]
sbb rcx, 0x7a0f9637
mov ecx, eax
stc
jmp 0x14001b00c
add rcx, rdx
je 0x14001b2c5
add rcx, 0xa
movsx dx, sil
bswap rdx
mov edx, 1
jmp 0x14001b02b
call fcn.1400020ea
jmp 0x14001b2b0
movabs rax, 0x454e2f2b20261f5b
test r10b, 0xb2
jmp 0x14001b048
mov qword [rsp + 0xfd], rax
test r10b, 0x15
jmp 0x14001b059
movups xmm0, xmmword [0x14000b9b6]
clc
jmp 0x14001b066
movups xmmword [rsp + 0xf0], xmm0
test r13, rsi
cmp byte [rsp + 0x104], 0
je 0x14001b0ec
xor eax, eax
movzx ecx, r10w
adc cl, r8b
mov ecx, eax
mov cl, sil
xadd dl, dl
rol dl, 0x19
mov dl, al
jmp 0x14001b09a
lea ecx, [rdx + 0x31]
jmp 0x14001b0a3
xor byte [rsp + rax + 0xf0], cl
movzx ecx, r14w
movzx cx, bh
movsx rcx, r15w
mov rcx, rax
mov ax, r11w
jmp 0x14001b0c4
inc rcx
xadd ax, ax
movzx rax, r11w
bswap rax
mov rax, rcx
test r10d, 0x3681cfb2
cmc
cmp rcx, 0x15
jmp 0x14001b0e6
jne 0x14001b088
lea rcx, [rsp + 0xf0]
jmp 0x14001b0f9
call sub.ntoskrnl.exe_DbgPrint
mov esi, 0xc0000001
jmp 0x14001b108
jmp 0x14001b124
mov eax, 0xc0000001
mov esi, eax
setg cl
mov rcx, rdi
jmp 0x14001b11f
call fcn.140014fdf
mov eax, esi
add rsp, 0x4b8
movsxd rbx, edi
mov r13w, r9w
pop rbx
pop rbp
movzx esi, ax
pop rdi
not r15w
mov r12, r8
movsx r15d, r15w
pop rsi
movzx r14w, r15b
mov r14b, 0x30
pop r12
pop r13
pop r14
movsx r15d, bx
mov r15b, dl
jmp 0x14001b160
pop r15
jmp 0x14001b167
ret
movups xmm0, xmmword [0x14000b9d5]
movups xmmword [rsp + 0x14a], xmm0
movups xmm0, xmmword [0x14000b9cb]
clc
stc
movups xmmword [rsp + 0x140], xmm0
cmp byte [rsp + 0x159], 0
jmp 0x14001b195
je 0x14001b1ed
sub eax, eax
xadd rcx, rcx
shr dl, 0xa9
sar dl, 0x27
mov ecx, eax
clc
mov dl, al
xchg ecx, ecx
bsf cx, r12w
btc rcx, r12
lea ecx, [rdx + 0x31]
xor byte [rsp + rax + 0x140], cl
dec ch
movsx cx, r10b
mov rcx, 0xffffffffa8934f0c
mov rcx, rax
movzx rax, bx
cwde
inc rcx
mov rax, rcx
stc
cmp rcx, 0x1a
jmp 0x14001b1e7
jne 0x14001b1a7
lea rcx, [rsp + 0x140]
jmp 0x14001b1fa
call sub.ntoskrnl.exe_DbgPrint
mov esi, edi
jmp 0x14001b206
jmp 0x14001b124
movups xmm0, xmmword [0x14000ba50]
movups xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [0x14000ba40]
test spl, 0xb2
movups xmmword [rsp + 0x1a0], xmm0
mov word [rsp + 0x1c0], 0x41
jmp 0x14001b243
cmp word [rsp + 0x1c0], 0
jmp 0x14001b251
je 0x14001b29e
xor eax, eax
bt cx, 0x27
mov ecx, eax
add ecx, 0x31
cmp r14w, bp
test sil, 0x9b
jmp 0x14001b270
xor word [rsp + rax*2 + 0x1a0], cx
movzx ecx, r10w
cmovns cx, bp
mov cl, r14b
mov rcx, rax
movzx eax, bx
inc rcx
neg al
mov rax, rcx
test r11b, bpl
cmp rcx, 0x11
jne 0x14001b25e
lea rcx, [rsp + 0x1a0]
jmp 0x14001b2ab
call fcn.140015781
mov qword [0x14000e790], rax
sub dx, r11w
or edx, 0x77036e24
movsx rdx, bx
mov rdx, qword [0x14000e790]
clc
movups xmm0, xmmword [0x14000ba6d]
test r15d, eax
movups xmmword [rsp + 0x18b], xmm0
cmp sil, al
movups xmm0, xmmword [0x14000ba62]
jmp 0x14001b2ee
movups xmmword [rsp + 0x180], xmm0
test rbx, 0x23098a91
cmp byte [rsp + 0x19a], 0
jmp 0x14001b30a
je 0x14001b350
xor eax, eax
cmovno rcx, r9
mov ecx, eax
mov r8b, al
movsx ecx, r10w
lea ecx, [r8 + 0x31]
jmp 0x14001b328
xor byte [rsp + rax + 0x180], cl
dec ch
jmp 0x14001b336
mov rcx, rax
inc rcx
shl ah, cl
cwde
mov rax, rcx
test r11w, cx
cmp rcx, 0x1b
jne 0x14001b316
lea rcx, [rsp + 0x180]
jmp 0x14001b35d
call sub.ntoskrnl.exe_DbgPrint
call fcn.140016232
mov qword [0x14000e798], rax
setae dil
movups xmm0, xmmword [0x14000ba88]
sbb rdx, r10
sar dil, cl
movups xmmword [rsp + 0x16b], xmm0
bswap dx
stc
movups xmm0, xmmword [0x14000ba7d]
movups xmmword [rsp + 0x160], xmm0
cmp byte [rsp + 0x17a], 0
mov edi, dword [rsp + 0x44]
movzx edx, r11w
movsx rdx, bx
not dh
mov edx, dword [rsp + 0x40]
jmp 0x14001b3b9
je 0x14001b406
xor eax, eax
rol r8b, cl
xor r8b, r12b
mov ecx, eax
mov r8b, al
lea ecx, [r8 + 0x31]
xor byte [rsp + rax + 0x160], cl
movsx rcx, cx
movsx ecx, r8w
movzx rcx, sp
mov rcx, rax
inc rcx
movzx eax, r12w
mov rax, rcx
test r13b, 0x91
cmp al, dil
cmp rcx, 0x1b
jmp 0x14001b400
jne 0x14001b3c7
lea rcx, [rsp + 0x160]
mov r8d, dword [rsp + 0x3c]
jmp 0x14001b418
call sub.ntoskrnl.exe_DbgPrint
mov ecx, edi
cmc
test rsi, rsi
jmp 0x14001b428
je 0x14001b45c
mov rcx, qword [rsi + 0x28]
jmp 0x14001b437
call fcn.140015efd
mov ecx, eax
bt rsi, r14
movzx si, r14b
mov esi, eax
jmp 0x14001b454
test eax, eax
js 0x14001b124
mov esi, ecx
rol ax, cl
movabs rax, 0x452f2c6220345e7a
cmp r9b, r13b
stc
test cl, ah
mov qword [rsp + 0xdd], rax
test r13b, bl
movups xmm0, xmmword [0x14000ba98]
stc
clc
test r14b, al
movups xmmword [rsp + 0xd0], xmm0
clc
cmp r8b, 0x17
cmp byte [rsp + 0xe4], 0
jmp 0x14001b4a2
je 0x14001b507
xor eax, eax
rcr cl, 0x12
mov ecx, eax
bts ecx, ecx
mov dl, al
mov ecx, 0xf2e41bb
movsxd rcx, eax
btr ecx, 0x9b
lea ecx, [rdx + 0x31]
xor byte [rsp + rax + 0xd0], cl
inc cl
sete cl
mov ecx, 0x811c4982
mov rcx, rax
movsx rax, r12w
lahf
movzx rax, r10w
inc rcx
shld eax, ecx, 0x1c
mov rax, rcx
test r8, 0x220e283e
cmp rbp, 0xffffffffc8a53da1
cmp rcx, 0x15
jmp 0x14001b501
jne 0x14001b4ad
lea rcx, [rsp + 0xd0]
call sub.ntoskrnl.exe_DbgPrint
lea rcx, [0x140009ec0]
lea rdx, [0x14000ec08]
jmp 0x14001b527
call fcn.14001257f
mov qword [0x14000ec10], rax
test sil, r11b
test rax, rax
je 0x14001b124
mov rcx, rax
mov r8w, cx
mov r8d, dword [0x14000ec40]
lea rdx, [0x14000ec18]
jmp 0x14001b559
call fcn.140015b5e
mov rcx, qword [0x14000ec10]
test r11b, r9b
cmp r11b, r13b
sub edx, edx
jmp 0x14001b572
call qword [sym.imp.ntoskrnl.exe_PsSetCreateProcessNotifyRoutineEx]
mov esi, eax
test eax, eax
js 0x14001b124
movups xmm0, xmmword [0x14000baad]
clc
movups xmmword [rsp + 0x80], xmm0
test dh, 0x11
cmc
cmp r10b, 0x1f
mov dword [rsp + 0x90], 0x44282d61
cmc
cmp byte [rsp + 0x93], 0
je 0x14001b608
sub eax, eax
shr ecx, cl
mov ecx, eax
bts cx, di
mov dl, al
adc ecx, 0x172b69ba
inc rcx
rol cl, 0x2b
lea ecx, [rdx + 0x31]
cmc
xor byte [rsp + rax + 0x80], cl
movsx cx, bpl
mov rcx, rax
movsx eax, r14w
not al
inc rcx
bsf rax, r11
movsx eax, cx
sal eax, 0x10
mov rax, rcx
test r9b, 0xab
cmp rcx, 0x14
jmp 0x14001b602
jne 0x14001b5b8
lea rcx, [rsp + 0x80]
call sub.ntoskrnl.exe_DbgPrint
call fcn.140004d00
jmp 0x14001b124