Function at 0x14000cf38
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Parse credit card information
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
movsx rax, di
push rbp
cmp dil, 0x87
lea rbp, [rsp - 0x9a0]
xor al, 1
stc
sub rsp, 0xaa0
jmp 0x14000cf5e
mov rax, qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
jmp 0x14000cf6a
xorps xmm0, xmm0
mov qword [0x1400092d8], rax
sub eax, eax
mov dword [rbp + 0x519], 0xb3c6b1e2
sbb cl, 0x68
sub r8d, r8d
btr bx, 0x66
test ebx, r14d
mov dword [rbp + 0x51d], 0xb7efb5c8
inc dl
bswap cx
mov dword [rbp + 0x521], 0xcbb3c9b6
lea ebx, [rax + 1]
mov dword [rbp + 0x525], 0xcf9bcdb8
xor dl, 0x65
mov dword [rbp + 0x529], 0xc3bbc1be
mov dword [rbp + 0x52d], 0xc7b9c5a7
mov ecx, 0x4a4a1d60
xor cl, sil
bswap cx
mov dword [rbp + 0x531], 0xdbbfd9bc
neg cx
mov dword [rbp + 0x535], 0xdfaadd8f
bswap cx
mov dword [rbp + 0x539], 0xd3abd1a2
cmp dx, di
mov dword [rbp + 0x53d], 0xd7b1d5aa
btc cx, di
neg dl
mov word [rbp + 0x541], 0xe9e8
shr dl, cl
movzx rcx, r11w
movups xmmword [rbp + 0x543], xmm0
mov dword [rbp + 0x553], eax
bsr rcx, rdx
shl rcx, cl
or dl, sil
mov word [rbp + 0x557], ax
adc cx, 0x55f0
sbb dl, 0x83
mov dl, byte [rbp + r8 + 0x519]
lea ecx, [r8 - 0x48]
cmp bl, 0x3a
mov al, dl
cmc
cmp ax, r15w
and al, cl
cmp di, 0x19e9
add al, al
test r8w, r9w
cmp r12b, 0xa8
sub dl, al
test r10b, 0x4d
sub dl, 8
cmp bh, 0xf2
jmp 0x14000d07a
add dl, cl
test cx, r14w
mov byte [rbp + r8 + 0x519], dl
test r15d, 0x520966a9
stc
add r8, rbx
jmp 0x14000d09d
cmp r8, 0x40
jmp 0x14000d0a6
jb 0x14000d042
lea rdx, [rbp + 0x519]
movzx ecx, sp
movsx ecx, dx
lea rcx, [rbp + 0x8c8]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
mov rax, qword [0x1400092d8]
cmovg cx, r13w
mov ch, 0x61
lea rcx, [rbp + 0x8c8]
call rax
mov qword [0x140009308], rax
test rax, rax
je 0x140010112
xor eax, eax
mov dword [rbp + 0x2ba], 0x38a0dc9
shld r8d, edx, 0xb2
rcr dl, 0x71
mov qword [rbp + 0x2e6], rax
cmc
bswap r8w
sbb ch, bh
sub r9d, r9d
jmp 0x14000d120
mov dword [rbp + 0x2ee], eax
mov word [rbp + 0x2f2], ax
bsf r8w, r10w
mov dl, 0x33
sbb dl, r14b
mov byte [rbp + 0x2f4], al
sbb r8b, r12b
mov dword [rbp + 0x2be], 0x79a01c1
shl cx, 0x3a
mov dword [rbp + 0x2c2], 0x3ba90598
add ch, 0xfb
mov dword [rbp + 0x2c6], 0x3fdf39df
mov dword [rbp + 0x2ca], 0x33d73da8
shl r8w, cl
mov dword [rbp + 0x2ce], 0x37a531c0
shl r8b, 0x31
mov dword [rbp + 0x2d2], 0x2bb635a7
cmp r15, rcx
inc al
mov dword [rbp + 0x2d6], 0x2fb729c3
xchg r8b, r8b
adc cx, sp
cmp r11d, ebx
mov dword [rbp + 0x2da], 0x23ba2db8
shr cl, cl
mov dword [rbp + 0x2de], 0x27c721d4
inc r8b
mov dword [rbp + 0x2e2], 0xdbda25bf
test r8b, dl
cmp bx, 0x6080
bsr r8w, bx
mov dl, byte [rbp + r9 + 0x2ba]
inc cx
btr ecx, 0xd6
movzx cx, bl
lea r8d, [r9 - 0x2a]
and al, 0xfe
mov al, dl
clc
mov ecx, 0x13
and al, r8b
cmp spl, r12b
sub cl, al
jmp 0x14000d205
add cl, cl
cmc
test edx, r15d
test r14w, 0x7690
add cl, dl
test sil, dil
stc
add cl, r8b
stc
cmp dil, 0x3d
mov byte [rbp + r9 + 0x2ba], cl
cmp r15, 0x89e17e4
lea r9, [r9 + rbx]
cmp r9, 0x3b
jb 0x14000d1d3
lea rdx, [rbp + 0x2ba]
movzx rcx, bx
mov cx, ax
bswap rcx
lea rcx, [rbp + 0x8e8]
jmp 0x14000d259
call qword [0x140009308]
mov rax, qword [0x1400092d8]
lea rcx, [rbp + 0x8e8]
jmp 0x14000d272
call rax
mov qword [0x1400092e0], rax
test rax, rax
je 0x140010112
sub eax, eax
jmp 0x14000d28b
mov dword [rbp + 0x695], 0xb9c05cd
jmp 0x14000d29a
xorps xmm0, xmm0
mov qword [rbp + 0x6c9], rax
movups xmmword [rbp + 0x6b9], xmm0
setbe dl
btr ecx, r9d
mov word [rbp + 0x6d1], ax
xor r8d, r8d
mov cx, 0x527c
mov byte [rbp + 0x6d3], al
mov dword [rbp + 0x699], 0xf9e09c0
mov dword [rbp + 0x69d], 0x33e70de5
mov dword [rbp + 0x6a1], 0x37a131c2
mov dword [rbp + 0x6a5], 0x3bd835a7
sar dl, cl
add al, bpl
mov dword [rbp + 0x6a9], 0x3fd739c3
mov dword [rbp + 0x6ad], 0x23d43daa
mov dword [rbp + 0x6b1], 0x27c721d6
test edx, r8d
sal cl, 0x47
mov dword [rbp + 0x6b5], 0x2b2425cf
mov dl, byte [rbp + r8 + 0x695]
cmp cx, r15w
stc
lea ecx, [r8 - 0x2b]
xchg al, al
mov al, dl
stc
and al, cl
add al, al
sub dl, al
cmc
add dl, 0x2d
stc
cmp bpl, 0x4e
add dl, cl
jmp 0x14000d351
mov byte [rbp + r8 + 0x695], dl
test rax, 0x6fa44802
lea r8, [r8 + rbx]
cmc
cmp r8, 0x3f
jmp 0x14000d36d
jb 0x14000d321
lea rdx, [rbp + 0x695]
movzx ecx, cx
lea rcx, [rbp + 0x918]
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movzx cx, r13b
lea rcx, [rbp + 0x918]
call rax
mov qword [0x140009398], rax
cmp bp, r12w
test rax, rax
jmp 0x14000d3b2
je 0x140010112
sub eax, eax
mov dword [rbp + 0x351], 0x2b572575
sub dl, al
rcr rcx, 0xc1
mov qword [rbp + 0x36b], rax
rcl cx, 0x7d
sbb dl, 0x18
adc dl, spl
sub r8d, r8d
mov dword [rbp + 0x373], eax
bswap cx
sub dl, 0x7c
ror dl, cl
mov word [rbp + 0x377], ax
add dl, 0x93
mov byte [rbp + 0x379], al
xchg cl, dl
stc
mov dword [rbp + 0x355], 0x2f59296f
xor cx, 0x383d
sbb dl, 0xbf
stc
mov dword [rbp + 0x359], 0x33532d5e
movzx cx, r11b
mov dword [rbp + 0x35d], 0x375b3161
adc cl, r8b
mov dword [rbp + 0x361], 0x3b453545
rcl al, cl
mov dword [rbp + 0x365], 0x3f47394c
mov word [rbp + 0x369], 0x3d3e
mov dl, byte [rbp + r8 + 0x351]
lea ecx, [r8 + 0x25]
mov al, dl
and al, cl
stc
add al, al
sub dl, al
cmc
sub dl, 3
jmp 0x14000d46d
add dl, cl
cmp bx, 0x538d
mov byte [rbp + r8 + 0x351], dl
cmp esp, 0x236f5373
cmc
add r8, rbx
jmp 0x14000d48f
cmp r8, 0x29
jmp 0x14000d498
jb 0x14000d44d
lea rdx, [rbp + 0x351]
movsx rcx, r15w
cmovae cx, sp
lea rcx, [rbp + 0x738]
jmp 0x14000d4b9
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movzx rcx, ax
lea rcx, [rbp + 0x738]
call rax
mov qword [0x140009390], rax
jmp 0x14000d4df
test rax, rax
jmp 0x14000d4e7
je 0x140010112
sub eax, eax
mov dword [rbp - 0x5c], 0x53ec5104
movzx ecx, bp
mov dword [rbp - 0x40], eax
cmc
sub r8d, r8d
mov word [rbp - 0x3c], ax
mov dword [rbp - 0x58], 0x5f155de6
mov al, 0xc6
mov dword [rbp - 0x54], 0x5be459f1
rol cl, 0x5b
mov dword [rbp - 0x50], 0xa70ba504
sar dl, 0xc8
rcl dl, 7
setl dl
mov dword [rbp - 0x4c], 0xa31da114
stc
mov dword [rbp - 0x48], 0xaf1dad09
test bpl, 0x4c
and dl, 0x31
mov dword [rbp - 0x44], 0xaba8a918
xchg dl, al
mov dl, byte [rbp + r8 - 0x5c]
clc
lea ecx, [r8 + 0x73]
mov al, dl
test bpl, bl
stc
cmp ebp, 0x23813df9
and al, cl
add al, al
test r8, 0x12fe0a3e
test r12b, bpl
sub dl, al
sub dl, 0x25
stc
add dl, cl
test ecx, 0x4f976108
cmp dl, dl
test sil, sil
mov byte [rbp + r8 - 0x5c], dl
cmp cl, bl
add r8, rbx
cmp r8, 0x22
jmp 0x14000d590
jb 0x14000d546
lea rdx, [rbp - 0x5c]
not cx
lea rcx, [rbp + 0x748]
jmp 0x14000d5a9
call qword [0x140009308]
mov rax, qword [0x1400092d8]
lea rcx, [rbp + 0x748]
call rax
mov qword [0x1400092f8], rax
test rax, rax
je 0x140010112
sub eax, eax
mov dword [rbp + 0x6d4], 0x8b1785f5
jmp 0x14000d5e0
xorps xmm0, xmm0
mov qword [rbp + 0x706], rax
or cl, 0xdd
not cl
shl dl, cl
movups xmmword [rbp + 0x6f6], xmm0
rcr cx, cl
mov byte [rbp + 0x70e], al
movsx ecx, r13w
add al, 0xa1
bt ecx, 0x95
xor r8d, r8d
dec ch
add al, spl
mov dword [rbp + 0x6d8], 0x8f1d89c5
test spl, cl
rol al, cl
mov dword [rbp + 0x6dc], 0xb3e88dc9
movzx cx, dil
bts rcx, r14
mov dword [rbp + 0x6e0], 0xb726b1d6
mov dword [rbp + 0x6e4], 0xbb21b5dd
xadd cl, dl
mov dword [rbp + 0x6e8], 0xbfc2b92f
sar al, 0x33
mov dword [rbp + 0x6ec], 0xa3d0bdd9
movzx rcx, bp
jmp 0x14000d671
mov dword [rbp + 0x6f0], 0xa7c4a1cd
mov word [rbp + 0x6f4], 0xa5a6
or cx, si
rcr dl, cl
mov dl, byte [rbp + r8 + 0x6d4]
lea ecx, [r8 - 0x6b]
mov al, dl
and al, cl
add al, al
cmp r14b, 3
test rcx, 0x10e52445
sub dl, al
sub dl, 0x13
add dl, cl
test r10, rbp
mov byte [rbp + r8 + 0x6d4], dl
add r8, rbx
stc
cmp r8, 0x3b
jmp 0x14000d6c5
jb 0x14000d689
lea rdx, [rbp + 0x6d4]
lea rcx, [rbp + 0x758]
jmp 0x14000d6de
call qword [0x140009308]
mov rax, qword [0x1400092d8]
mov rcx, rbp
lea rcx, [rbp + 0x758]
jmp 0x14000d6fa
call rax
mov qword [0x140009310], rax
test r8w, 0x60ed
test rax, rax
jmp 0x14000d711
je 0x140010112
xor eax, eax
jmp 0x14000d71e
mov dword [rbp + 0x559], 0xdb4dd961
jmp 0x14000d72d
xorps xmm0, xmm0
mov qword [rbp + 0x59b], rax
rcr cl, cl
movups xmmword [rbp + 0x58b], xmm0
shl r8b, cl
xor r9d, r9d
rol cx, cl
mov rcx, 0x61a30e33
mov dword [rbp + 0x55d], 0xd74bd56b
mov dword [rbp + 0x561], 0xd36ed15c
adc cl, 0xec
test dil, 8
mov dword [rbp + 0x565], 0xcf40cd51
movzx r8d, si
add cl, spl
mov dword [rbp + 0x569], 0xcb69c951
bts cx, sp
mov dword [rbp + 0x56d], 0xc771c559
mov dword [rbp + 0x571], 0xc358c162
or al, 0x9e
sete dl
bsf ecx, r9d
mov dword [rbp + 0x575], 0xbf1dbd21
xor r8w, 0x31e7
mov dword [rbp + 0x579], 0xbb0ab934
xor r8d, 0x7a995e5d
and cl, r10b
or rcx, 0x21635bf1
mov dword [rbp + 0x57d], 0xb72fb523
clc
ror dl, 0xcf
mov dword [rbp + 0x581], 0xb33eb126
mov dword [rbp + 0x585], 0xaf3cad31
mov word [rbp + 0x589], 0xa9a8
mov dl, byte [rbp + r9 + 0x559]
lea r8d, [r9 + 0x24]
test r9, 0x552b6eb6
test ebp, r10d
mov al, dl
btc cx, 0x8e
add cl, spl
mov ecx, 2
and al, r8b
cmp ch, ah
sub cl, al
test spl, r8b
clc
add cl, cl
add cl, dl
cmp esp, r11d
add cl, r8b
jmp 0x14000d83c
mov byte [rbp + r9 + 0x559], cl
lea r9, [r9 + rbx]
cmc
clc
test al, 0xc9
cmp r9, 0x4a
jb 0x14000d7fd
lea rdx, [rbp + 0x559]
lea rcx, [rbp + 0x988]
call qword [0x140009308]
mov rax, qword [0x1400092d8]
setno cl
cmovae cx, di
lea rcx, [rbp + 0x988]
jmp 0x14000d884
call rax
mov qword [0x1400092d0], rax
cmp al, dil
test r15b, 0x32
test rax, rax
jmp 0x14000d89c
je 0x140010112
xor eax, eax
setle dl
sub dl, 0xb7
mov dword [rbp + 0x32d], 0xc376c112
mov qword [rbp + 0x345], rax
sar cx, 0x95
adc rcx, r10
sub r8d, r8d
movsx rcx, di
mov dword [rbp + 0x34d], eax
mov dword [rbp + 0x331], 0xc714c568
mov dword [rbp + 0x335], 0xcb64c969
dec al
btc cx, 0xbb
ror al, 0xe3
mov dword [rbp + 0x339], 0xcf61cd68
mov dword [rbp + 0x33d], 0xd317d17d
rcl dl, cl
clc
mov dword [rbp + 0x341], 0xd7d6d56c
sub ecx, r14d
mov dl, byte [rbp + r8 + 0x32d]
rcl al, 0xb4
sbb ch, 0x3b
lea ecx, [r8 - 0x60]
mov al, dl
and al, cl
add al, al
test bpl, r11b
cmp di, 0xeeb
sub dl, al
cmc
sub dl, 0x60
jmp 0x14000d93c
add dl, cl
mov byte [rbp + r8 + 0x32d], dl
lea r8, [r8 + rbx]
clc
cmp r8, 0x24
jb 0x14000d911
lea rdx, [rbp + 0x32d]
movzx cx, bh
movsx rcx, bp
mov cx, r9w
lea rcx, [rbp + 0x978]
jmp 0x14000d974
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movzx ecx, si
jmp 0x14000d989
lea rcx, [rbp + 0x978]
jmp 0x14000d995
call rax
mov qword [0x140009358], rax
stc
test rax, rax
jmp 0x14000d9a7
je 0x140010112
xor eax, eax
mov dword [rbp + 0x5f9], 0x3b70151
jmp 0x14000d9be
xorps xmm0, xmm0
mov word [rbp + 0x623], ax
rcl al, cl
add al, r14b
movups xmmword [rbp + 0x613], xmm0
xor r8d, r8d
not dl
shl cl, 0x91
mov dword [rbp + 0x5fd], 0x1fbf1d55
or dl, r8b
sub dl, r11b
mov dword [rbp + 0x601], 0x1b4319ae
not ch
rol al, 0xa2
sub dl, 0xd1
mov dword [rbp + 0x605], 0x17b915ab
adc cx, 0x5a7b
mov dword [rbp + 0x609], 0x13b311a6
mov dword [rbp + 0x60d], 0x6fd36daf
or dl, 0xea
mov dl, 0xb
mov word [rbp + 0x611], 0x696e
sal dl, 0x38
mov dl, byte [rbp + r8 + 0x5f9]
or al, 0xbe
sal rcx, 0xb4
sbb ch, 0xed
lea ecx, [r8 + 0x2b]
mov al, dl
cmp r9b, dl
and al, cl
test r13b, 0x56
test r14b, spl
add al, al
cmc
jmp 0x14000da5d
sub dl, al
cmp r8, rsp
stc
sub dl, 0x2d
jmp 0x14000da6b
add dl, cl
mov byte [rbp + r8 + 0x5f9], dl
test sp, 0x76cd
lea r8, [r8 + rbx]
cmp r15w, 0xfea
jmp 0x14000da89
cmp r8, 0x2c
jmp 0x14000da92
jb 0x14000da32
lea rdx, [rbp + 0x5f9]
xchg ecx, ecx
mov cx, cx
lea rcx, [rbp + 0x968]
jmp 0x14000dab0
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movsx cx, r13b
lea rcx, [rbp + 0x968]
jmp 0x14000dace
call rax
mov qword [0x1400092c8], rax
jmp 0x14000dae0
test rax, rax
jmp 0x14000dae8
je 0x140010112
sub eax, eax
add dx, 0x5c18
movsx dx, r11b
mov dword [rbp + 0x234], 0xa337a111
btc rdx, 0x8d
xadd cl, dl
dec dx
mov qword [rbp + 0x252], rax
not dl
cqo
dec dh
xor r8d, r8d
mov word [rbp + 0x25a], ax
sub al, r10b
xchg cl, cl
mov dword [rbp + 0x238], 0x9f0a9d0d
shr dh, cl
sets al
mov dword [rbp + 0x23c], 0x9b3b9909
mov dword [rbp + 0x240], 0x972f950a
mov dword [rbp + 0x244], 0x933d9107
shr al, cl
mov dword [rbp + 0x248], 0x8f2f8d02
mov dword [rbp + 0x24c], 0x8b178913
sar cl, 0x23
mov word [rbp + 0x250], 0x858a
sub cl, 0x85
shr al, cl
mov cl, byte [rbp + r8 + 0x234]
sbb dx, r13w
jmp 0x14000db93
lea edx, [r8 + 0x1b]
sar al, cl
mov al, dl
test r8, r14
cmc
and al, cl
add al, al
cmp rdi, 0x25457590
cmp cl, r12b
sub dl, al
test dx, 0x1b75
add dl, 0x43
cmp dh, 0x16
add dl, cl
test r12b, 5
mov byte [rbp + r8 + 0x234], dl
jmp 0x14000dbcf
lea r8, [r8 + rbx]
cmp r10b, r12b
stc
cmp r8, 0x28
jmp 0x14000dbe0
jb 0x14000db7f
lea rdx, [rbp + 0x234]
mov cx, 0x3f97
lea rcx, [rbp + 0x8f8]
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movsx ecx, ax
cmovge cx, r13w
lea rcx, [rbp + 0x8f8]
call rax
mov qword [0x140009330], rax
test rax, rax
jmp 0x14000dc25
je 0x140010112
sub eax, eax
jmp 0x14000dc32
mov dword [rbp + 0x4de], 0x63f765d5
jmp 0x14000dc41
xorps xmm0, xmm0
mov word [rbp + 0x516], ax
cmp spl, dl
movsxd rdx, r15d
sbb rdx, rsp
movups xmmword [rbp + 0x506], xmm0
cwd
xor dx, 0x2930
mov byte [rbp + 0x518], al
ror cl, 0x6c
sub r8d, r8d
sal al, 0xe3
add al, r13b
ror al, 0xdf
mov dword [rbp + 0x4e2], 0x6ffe61d2
rcl al, 0x3b
mov dword [rbp + 0x4e6], 0x6bc26dff
mov dword [rbp + 0x4ea], 0x57a769c1
mov dword [rbp + 0x4ee], 0x53f855c4
xor al, r8b
ror cl, 0xb9
and al, 8
mov dword [rbp + 0x4f2], 0x5fc151e6
xadd dl, al
mov dword [rbp + 0x4f6], 0x5bc95df3
sbb dl, r11b
mov al, 0x68
mov dword [rbp + 0x4fa], 0x47f759ea
setnp cl
add edx, edx
mov dword [rbp + 0x4fe], 0x43ef45ef
test r10w, dx
xchg dl, al
mov dword [rbp + 0x502], 0x4f4041df
adc al, spl
mov cl, byte [rbp + r8 + 0x4de]
inc dx
lea edx, [r8 + 0x11]
xor al, 8
mov al, dl
cmp r13b, r8b
test rax, rdi
and al, cl
add al, al
clc
test bh, ah
sub dl, al
cmp r14d, r13d
sub dl, 0x77
test r14b, r15b
clc
add dl, cl
cmc
test rcx, r10
mov byte [rbp + r8 + 0x4de], dl
lea r8, [r8 + rbx]
cmp r15b, 0xb
test cx, 0x90d
jmp 0x14000dd3e
cmp r8, 0x3b
jmp 0x14000dd47
jb 0x14000dcf2
lea rdx, [rbp + 0x4de]
jmp 0x14000dd5c
lea rcx, [rbp + 0x958]
jmp 0x14000dd68
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movsx cx, r10b
lea rcx, [rbp + 0x958]
jmp 0x14000dd86
call rax
mov qword [0x1400092a0], rax
test rax, rax
jmp 0x14000dd97
je 0x140010112
sub eax, eax
sub dx, r13w
bt dx, 0xe
mov dword [rbp + 0x1b4], 0x7b077939
cdq
movsxd rdx, r11d
rcl dh, 0x5f
mov qword [rbp + 0x1ea], rax
inc cl
sub r8d, r8d
cmc
add cl, r9b
mov dword [rbp + 0x1f2], eax
xor cl, 0xe
mov word [rbp + 0x1f6], ax
or cl, r8b
rol cl, 0x3c
cdq
mov byte [rbp + 0x1f8], al
mov dword [rbp + 0x1b8], 0x7f0e7d2a
or edx, ebx
test r15d, 0xd094dad
mov dword [rbp + 0x1bc], 0x7312710f
mov dword [rbp + 0x1c0], 0x77377515
mov dword [rbp + 0x1c4], 0x8bec8908
and al, 0x7b
test r13b, r14b
cmp r8d, r11d
mov dword [rbp + 0x1c8], 0x8ffd8dd6
mov dword [rbp + 0x1cc], 0x83fd81eb
mov dword [rbp + 0x1d0], 0x87f685d2
mov dword [rbp + 0x1d4], 0x9bfd99f7
movzx rdx, r14w
mov dword [rbp + 0x1d8], 0x9fe99dfd
shr dl, cl
cmp bh, 0xf0
xor al, dil
mov dword [rbp + 0x1dc], 0x93c091eb
sal edx, 0x11
mov dword [rbp + 0x1e0], 0x97ed95f1
or cl, cl
mov dword [rbp + 0x1e4], 0xabdda9f1
neg al
movzx rdx, bx
mov word [rbp + 0x1e8], 0xadaa
xor al, 2
mov cl, byte [rbp + r8 + 0x1b4]
movsx dx, r11b
bts dx, r10w
bt rdx, 0xd4
lea edx, [r8 - 0x11]
shr al, 0x45
mov al, dl
jmp 0x14000deb6
and al, cl
cmp sil, r9b
add al, al
test cx, ax
sub dl, al
test r8d, 0x4c39608c
add dl, 0x77
cmp r14, rdi
add dl, cl
clc
cmc
mov byte [rbp + r8 + 0x1b4], dl
clc
test rcx, 0x36db0a84
cmp rsp, rdx
lea r8, [r8 + rbx]
cmp dl, r11b
stc
cmp r8, 0x45
jmp 0x14000def7
jb 0x14000de91
lea rdx, [rbp + 0x1b4]
xchg cl, ch
movzx cx, ch
movsxd rcx, edi
lea rcx, [rbp + 0x948]
jmp 0x14000df19
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movsxd rcx, r8d
mov cl, 0x5e
lea rcx, [rbp + 0x948]
jmp 0x14000df37
call rax
mov qword [0x140009360], rax
stc
test r15, rax
test rax, rax
jmp 0x14000df4c
je 0x140010112
sub eax, eax
sbb dx, 0x2842
cmp esi, r15d
mov dword [rbp + 0x25c], 0x33cf35e3
xchg cl, cl
cmp bl, 0x68
mov qword [rbp + 0x286], rax
xor r8d, r8d
shld dx, r9w, 0x97
shl dl, 0xae
mov dword [rbp + 0x28e], eax
rcl cl, 0x5c
mov byte [rbp + 0x292], al
mov dword [rbp + 0x260], 0xcfbc31df
mov dword [rbp + 0x264], 0xcb31cd31
ror al, cl
cmc
mov dword [rbp + 0x268], 0xc717c93f
mov dword [rbp + 0x26c], 0xc348c54a
sar cl, cl
mov cl, bl
shl cl, 0xde
mov dword [rbp + 0x270], 0xdf3dc13d
bswap dx
test al, 0x90
sal cl, cl
mov dword [rbp + 0x274], 0xdb0cdd26
ror dh, 0xa
mov dword [rbp + 0x278], 0xd729d954
adc cl, 0x5a
sal dl, 0xa2
mov dword [rbp + 0x27c], 0xd32fd52b
jmp 0x14000e003
mov dword [rbp + 0x280], 0xef5dd15f
inc al
mov word [rbp + 0x284], 0xedee
adc cl, r9b
btr dx, 0x5c
mov cl, byte [rbp + r8 + 0x25c]
lea edx, [r8 - 7]
or al, 0xca
mov al, dl
and al, cl
stc
add al, al
test r8w, r13w
sub dl, al
clc
stc
add dl, 0x31
cmc
add dl, cl
mov byte [rbp + r8 + 0x25c], dl
stc
lea r8, [r8 + rbx]
test r13b, 0xa4
cmp r8, 0x37
jb 0x14000e020
lea rdx, [rbp + 0x25c]
lea rcx, [rbp + 0x938]
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movzx cx, spl
jmp 0x14000e085
lea rcx, [rbp + 0x938]
call rax
mov qword [0x140009328], rax
test rax, rax
jmp 0x14000e09d
je 0x140010112
xor eax, eax
jmp 0x14000e0aa
mov dword [rbp + 0x404], 0x5bcf592d
jmp 0x14000e0b9
xorps xmm0, xmm0
mov dword [rbp + 0x448], eax
sar dh, 0x65
movups xmmword [rbp + 0x438], xmm0
cmc
movzx edx, r13w
movsx cx, r10b
sub r9d, r9d
xchg r8b, dl
mov dword [rbp + 0x408], 0x47d44534
rcr ecx, 0x27
mov dword [rbp + 0x40c], 0x43de41d7
adc r8b, 0x8e
mov dword [rbp + 0x410], 0x4f2d4d21
dec dl
mov dword [rbp + 0x414], 0x4b3f49d4
not al
mov dword [rbp + 0x418], 0x77e27518
mov dword [rbp + 0x41c], 0x73eb7103
inc cl
cqo
shld rdx, rsi, 0xa3
mov dword [rbp + 0x420], 0x7fe27def
mov dword [rbp + 0x424], 0x7bef7915
add cl, 0x49
bsf dx, r14w
sub dh, dl
mov dword [rbp + 0x428], 0x670a6525
mov dword [rbp + 0x42c], 0x63f0610c
cmc
mov dword [rbp + 0x430], 0x6ffd6d01
mov dx, bp
btr edx, 4
mov dword [rbp + 0x434], 0x6b6a69fb
bt dx, 0xaf
xadd cl, al
mov r8b, byte [rbp + r9 + 0x404]
shld dx, dx, 0x60
lea edx, [r9 - 0x34]
neg cl
add al, r10b
mov al, dl
shrd cx, r10w, 0xbb
mov ecx, 0x36
and al, r8b
sub cl, al
cmp r14d, edx
test r15w, 0x3762
jmp 0x14000e1b8
add cl, cl
test spl, r8b
cmc
test r12b, 0x38
add cl, dl
add cl, r8b
mov byte [rbp + r9 + 0x404], cl
lea r9, [r9 + rbx]
cmp r9, 0x48
jb 0x14000e182
lea rdx, [rbp + 0x404]
lea rcx, [rbp + 0x928]
jmp 0x14000e1f0
call qword [0x140009308]
mov rax, qword [0x1400092d8]
not cl
jmp 0x14000e208
lea rcx, [rbp + 0x928]
jmp 0x14000e214
call rax
mov qword [0x140009370], rax
clc
test rax, rax
je 0x140010112
sub eax, eax
shl dl, 0xcd
mov dword [rbp + 0x1f9], 0x2bc72ddb
neg dh
sbb cl, 3
mov qword [rbp + 0x227], rax
sub r8d, r8d
dec dl
sal cl, cl
inc cl
mov dword [rbp + 0x22f], eax
mov byte [rbp + 0x233], al
mov dword [rbp + 0x1fd], 0xd74429d5
jmp 0x14000e26e
mov dword [rbp + 0x201], 0xd34ed54b
ror al, cl
mov dword [rbp + 0x205], 0xdf31d131
clc
cqo
shl al, cl
mov dword [rbp + 0x209], 0xdb16dd4b
cmovae dx, si
or edx, ebx
setno dl
mov dword [rbp + 0x20d], 0xc75ad935
rcr cl, 0xc1
sar al, 0xd4
stc
mov dword [rbp + 0x211], 0xc32dc525
movzx dx, r8b
mov dword [rbp + 0x215], 0xcf3ec128
sbb cl, r14b
movsxd rdx, r8d
bt rdx, r15
mov dword [rbp + 0x219], 0xcb59cd52
adc al, 0x32
ror dl, cl
mov dword [rbp + 0x21d], 0xf71bc927
bt edx, 0xf1
and dh, 0x7b
sub dl, spl
mov dword [rbp + 0x221], 0xf36df56b
btc dx, r13w
rcl dh, cl
add edx, 0x7161f47
mov word [rbp + 0x225], 0xf1f0
mov cl, byte [rbp + r8 + 0x1f9]
lea edx, [r8 + 0x7a]
rol al, cl
mov al, pe_nt_image_headers64
mov al, dl
cmp cl, r12b
stc
and al, cl
clc
cmp dx, 0x6f9f
jmp 0x14000e335
add al, al
test r9b, 0x7b
cmp r10b, 0xbd
sub dl, al
sub dl, 0x56
clc
add dl, cl
mov byte [rbp + r8 + 0x1f9], dl
test spl, 0x74
add r8, rbx
test ah, cl
cmp r8, 0x3b
jmp 0x14000e361
jb 0x14000e312
lea rdx, [rbp + 0x1f9]
movsx cx, r14b
lea rcx, [rbp + 0x908]
jmp 0x14000e37f
call qword [0x140009308]
mov rax, qword [0x1400092d8]
lea rcx, [rbp + 0x908]
jmp 0x14000e398
call rax
mov qword [0x1400092c0], rax
cmc
test rax, rax
jmp 0x14000e3aa
je 0x140010112
xor eax, eax
movsx edx, r15w
mov dword [rsp + 0x53], 0xdbafd98d
mov dword [rsp + 0x6f], eax
add r8b, r10b
sub r9d, r9d
movzx rcx, r12w
mov byte [rsp + 0x73], al
add cl, 0xfd
mov dword [rsp + 0x57], 0xe790e5b9
add ch, 0xf2
mov dword [rsp + 0x5b], 0xe395e194
xor al, spl
rol al, 0xb2
mov dword [rsp + 0x5f], 0xef85ed8f
or dl, r13b
test r14w, r8w
mov dword [rsp + 0x63], 0xeb8be9b8
shr r8b, cl
mov dword [rsp + 0x67], 0xf79bf59b
mov dword [rsp + 0x6b], 0xf3f2f183
adc cl, r10b
sal cx, 0x21
mov r8b, byte [rsp + r9 + 0x53]
rol dh, 0x52
btc rdx, rdx
lea edx, [r9 + 0x5c]
rcr ch, cl
clc
mov al, dl
and ch, 0xea
rcl cl, cl
mov ecx, 0x3e
test sil, r10b
and al, r8b
sub cl, al
stc
add cl, cl
stc
add cl, dl
cmp di, 0x587f
add cl, r8b
cmc
stc
cmp di, 0x60b1
mov byte [rsp + r9 + 0x53], cl
add r9, rbx
clc
cmc
cmp r11b, 0xcb
cmp r9, 0x21
jmp 0x14000e470
jb 0x14000e41d
lea rdx, [rsp + 0x53]
cmovle cx, dx
mov rcx, rcx
movsxd rcx, esp
lea rcx, [rbp + 0x8d8]
jmp 0x14000e491
call qword [0x140009308]
mov rax, qword [0x1400092d8]
cmovns ecx, r10d
lea rcx, [rbp + 0x8d8]
jmp 0x14000e4ae
call rax
mov qword [0x140009290], rax
clc
test rax, rax
jmp 0x14000e4c0
je 0x140010112
xor eax, eax
mov dword [rbp + 0x293], 0x3ba9397d
cdq
movzx edx, cx
mov qword [rbp + 0x2af], rax
rcr cl, cl
xor r8d, r8d
mov word [rbp + 0x2b7], ax
sbb cl, r13b
mov byte [rbp + 0x2b9], al
bt dx, r11w
jmp 0x14000e502
mov dword [rbp + 0x297], 0x3f503d79
shl cl, cl
mov dword [rbp + 0x29b], 0x23b12152
mov dword [rbp + 0x29f], 0x27472547
mov dword [rbp + 0x2a3], 0x2b4f29b2
test spl, r15b
cmp bx, r9w
adc cl, 0xf6
mov dword [rbp + 0x2a7], 0x2f482d65
clc
mov dword [rbp + 0x2ab], 0x53505142
sub cl, 0xb4
cmovne rdx, rbp
mov cl, byte [rbp + r8 + 0x293]
lea edx, [r8 - 0x59]
mov al, dl
and al, cl
jmp 0x14000e568
add al, al
test edx, 0x4ca518d1
cmp sil, 0x75
cmc
sub dl, al
cmc
add dl, 0x6f
add dl, cl
mov byte [rbp + r8 + 0x293], dl
cmp r11b, al
lea r8, [r8 + rbx]
cmp spl, 0x60
clc
cmp r8, 0x27
jmp 0x14000e59a
jb 0x14000e552
lea rdx, [rbp + 0x293]
lea rcx, [rbp + 0x8b8]
jmp 0x14000e5b3
call qword [0x140009308]
mov rax, qword [0x1400092d8]
lea rcx, [rbp + 0x8b8]
jmp 0x14000e5cc
call rax
mov qword [0x1400093a8], rax
test bl, 0x9f
test rax, rax
je 0x140010112
xor eax, eax
jmp 0x14000e5e8
mov dword [rbp + 0x70f], 0x3b1015d
jmp 0x14000e5f7
xorps xmm0, xmm0
mov byte [rbp + 0x733], al
and al, 0xa0
movups xmmword [rbp + 0x723], xmm0
clc
sub r8d, r8d
movsx dx, r14b
sar dx, 0x2e
mov dword [rbp + 0x713], 0x1fae1d5c
mov dword [rbp + 0x717], 0x1ba719a1
mov dword [rbp + 0x71b], 0x17a8154d
mov dword [rbp + 0x71f], 0x131011a2
rcl cl, 0xb8
mov cl, byte [rbp + r8 + 0x70f]
lea edx, [r8 + 0x2b]
rcr al, cl
mov al, dl
clc
and al, cl
test r9b, r11b
clc
add al, al
clc
sub dl, al
test bpl, r9b
cmp dx, sp
jmp 0x14000e668
sub dl, 0x2d
cmp cx, dx
stc
add dl, cl
mov byte [rbp + r8 + 0x70f], dl
test r14b, r10b
clc
lea r8, [r8 + rbx]
jmp 0x14000e68c
cmp r8, 0x25
jb 0x14000e641
lea rdx, [rbp + 0x70f]
movsx ecx, r13w
movsx cx, r12b
lea rcx, [rbp + 0x8a8]
jmp 0x14000e6b2
call qword [0x140009308]
mov rax, qword [0x1400092d8]
movsx ecx, r13w
lea rcx, [rbp + 0x8a8]
jmp 0x14000e6cf
sub al, al
mov rbx, qword [rsp + 0xab0]
and bp, r8w
mov bp, 0x5750
movsx bp, sil
add rsp, 0xaa0
setle bpl
bswap ebp
mov bpl, 0x50
pop rbp
jmp 0x14001013f
ret