Function at 0x1403c3fcd
Capabilities:
Execute anti-debugging instructions

Disassembly:
neg qword [rsp + rdx]
neg dil
add rbx, r10
shr qword [rsp + rdx*2], 0xad
adc dil, 0x2a
xchg byte [rsp + rdx*2 + 6], dl
xor sil, dil
sar qword [rsp + rdx*2], cl
sub dword [rsp + rdx + 4], eax
lea r8, [r8 + rdx*8 - 2]
setg al
jnp 0x1403b2101
lea rsp, [rsp + 0x10]
jmp 0x1403dfc2c
mov rcx, qword [r8]
mov edx, 0x54169cab
neg rdx
movzx dx, byte ss:[rcx + rdx + 0x54169cab]
mov ecx, 0xe2bf0530
movzx edi, cx
lea r8, [r8 + rdi*2 - 0xa5a]
mov ebx, ecx
movsx r10d, di
mov word [r8 + rdi*2 - 0xa60], dx
lea rbp, [rdi*8 + 0x7996c435]
shr bx, 0x42
xchg ecx, r10d
lea r11, [r11 + rcx*4 - 0x14c4]
not rcx
adc di, 0x611e
movsx edx, r10w
mov r10d, dword [r11 + rcx*4 + 0x14c4]
sal rdi, 0x33
adc ebp, ecx
xor r10d, esi
rol cl, 0x23
neg bp
lea rdx, [rdx*4 + 0x3a9e8430]
not r10d
rol edi, cl
inc r10d
neg rbp
mov eax, ebx
ror ebx, 0x61
rol r10d, 1
jmp 0x1403cf773
ror byte [rsp + rdx*2 + 1], 0x67
mov word [rdx + r8], di
push rbp
ror rbx, 0x3d
pop rbx
pop rbp
jae fcn.1403c82e3
call fcn.1403d4eee
xor ebp, 0xc315b1aa
movzx edi, word [rsp + rdx - 0x1601c733]
ror ebp, 3
ror r10b, 0x62
sub ebp, 0xa6124436
shr dil, 0x64
ror ebp, cl
push rdx
shr ecx, cl
call fcn.1403c3890
mov ebp, 0x5da60409
mov rdi, qword [r8 + rbp - 0x5da60409]
movzx edx, bp
mov cl, byte [rbp + r8 - 0x5da60401]
mov eax, 0xcb0e2401
dec edx
mov ebx, edx
lea r8, [r8 + rbp - 0x5da60407]
xchg ebp, eax
mov r10d, ebp
sub rdx, r10
shr rdi, cl
movsx ecx, bp
mov qword [rbx + r8 - 0x408], rdi
sar ebx, cl
lea r11, [r11 + rax - 0x5da6040d]
rol ecx, 0x17
add rcx, 0x6ea97005
jge 0x1403c598b
dec di
ror ebp, 1
sal di, 0xee
lea ebp, [rbp + rdi*4 + 0x31b43796]
neg rdx
bswap rdi
seto dl
push rsi
lea rsi, [r10 - 0x70fbc2d5]
movzx ecx, si
xor dword [rsp + rax - 0x73148401], ebp
sar dl, 0x45
xadd dil, dl
lea rbx, [rcx*8 - 0x1cd880c8]
pop rsi
jge 0x1403b6dd7
xor eax, ecx
movsxd rbp, ebp
or ebx, 0x2ab0e418
dec al
adc r9, rbp
jmp 0x1403ccfa7
xchg dl, dil
bswap ecx
xadd rdx, rbx
movsx r10d, bl
jae 0x1403bf619
lea rcx, [rdi + rdx*8 + 0x43880a8b]
mov qword [rsp + rbp*4 - 0xa000], 0x271483ba
add r9, rbx
sal dword [rsp + rdx*2 + 3], 0x71
lea r11, [r11 + rdx*2 - 1]
movzx edi, byte [r11 + rbp*4 - 0xa000]
lea r10, [rbp + rax*8 - 0x7d5d784b]
xor dil, sil
not dil
ror dil, 1
mov ebx, ecx
not dword [rsp + rbp*2 - 0x4ffd]
add dword [rsp + rdx*2 + 4], 0x9e978012
adc dil, 0xa0
dec ax
jns 0x1403b0a32
add r9, rdi
or cx, cx
mov qword [rsp + rbx - 0xc4af], rax
xor bpl, byte [rbx + r8 - 0xc4af]
mov cl, byte [rbx + r8 - 0xc4ad]
movzx edx, r10w
lea r8, [r8 + rbx*2 - 0x1895c]
mov qword [rsp + rbx - 0xc4a7], rax
sal bpl, cl
mov word [r8 + rbx - 0xc4af], bp
mov qword [rsp + rbx - 0xc4af], r9
ret 0x10
push rax
mov qword [rsp + rcx + 0x582], rsi
mov esi, ebx
neg bp
xor dword [rsp + rcx + 0x582], r10d
dec bl
xor edx, 0xfaa12598
xor dl, al
pop rsi
adc dil, al
je 0x1403df887
adc bx, 0x5206
movsxd r10, r10d
sub ebp, 0x86960713
xchg bl, bpl
add r9, r10
rol cl, 0xa1
jmp r9
mov qword [rsp + rdi*2 - 0x392b4fde], rsi
shl ebx, 0x81
xor dword [rsp + rdi - 0x1c95a7ef], edx
pop rsi
movsxd rdx, edx
sar ecx, cl
adc r9, rdx
lea rbx, [r10 + rbx*2 - 0x504a91db]
or r10, r9
jmp r10
push rsi
xor dword [rsp + rbx*4 - 0x35e50], ecx
xadd rbp, r10
lea r10, [rbx + rbp - 0x7d76df68]
pop rsi
movsxd rcx, ecx
adc r9, rcx
sal bl, 0x81
mov eax, dword [r8 + rbx*2 - 0x1ae50]
call fcn.1403cc6aa
dec ebx
push 0x341d1123
push 0x5f087326
lea rsp, [rsp + 0x10]
jne 0x1403cd2b8
mov eax, 0x1b11ef35
mov rax, qword [rbp + rax*2 - 0x3623de6a]
sub rsp, 0x20
push 0x5c16c49a
lea rsp, [rsp + 8]
call rax
mov rsp, qword [rbp + riz - 0x10]
mov r9d, 0xb9ae95ad
mov rbp, qword [rbp + riz - 8]
movsx edi, r9b
shl dil, 0x62
and edi, r9d
mov qword [rbp + riz], rax
movzx r10d, dil
push rdi
mov r8, rbp
jns 0x1403dee69
lea rax, [r10 + rdi*8 - 0x786e62fe]
mov rsi, qword [rsp + r10*2 - 0x140]
mov r9, qword [rsp + r10 - 0x94]
mov r11, qword [rsp + r10*8 - 0x508]
not byte [rsp + r10 - 0xa0]
push rdi
movzx ebp, r10w
lea r11, [r11 + r10*2 - 0x14c]
push r10
ja 0x1403e0784
xor r10b, sil
movzx eax, bp
and ebp, eax
dec r10b
or bp, di
jne 0x1403e233e
mov edx, 0x3a223838
mov rdx, rax
lea rsp, [rsp + 0x10]
jmp 0x1403c173c
call fcn.1403d2052
sub r11, 4
jmp 0x1403e0730
mov ebx, dword [rbx + r11 - 0x204]
call fcn.1403d6c4a
xor ecx, 0xd4237591
mov edi, ebp
movsx edx, di
neg dx
not ecx
dec rdx
movzx eax, bpl
and di, bp
sbb ecx, 0xd912bf85
rol bx, 0x44
jae 0x1403b83a5
mov qword [rsp + rbp*2 - 0xb8], rdx
xchg word [rsp + rdx + 0xa00e], ax
movsxd rdi, edi
jmp 0x1403e0826
jnp 0x1403b49da
jno 0x1403cc5b1
movzx ecx, dil
xor dword [rsp + rax - 0x77a47404], r10d
lea rsi, [rdi + rax*2 - 0x204092cb]
mov rsi, qword [rsp + rax - 0x77a47404]
movsxd r10, r10d
call fcn.1403dcc4d
mov edx, 0x1a588a
jmp 0x1403e4f19
xor dword [rsp + rbp*2], eax
call fcn.1403d97e0
sub r11, 4
call fcn.1403b7ff7
mov ebx, edx
and bp, bx
mov word [r8 + rbp*2 - 0x90c], ax
sal edi, 0xce
sub r10, rbp
jmp r9
xor ebx, 0x6f95fa95
xor rcx, r10
push rbp
mov qword [rsp + r10*2 - 0x13418], rsi
sal r10, cl
movsx eax, r10w
and al, al
xor dword [rsp + r10*8 - 0x134180], ebx
sub di, 0x735
pop rsi
adc dl, ch
movsxd rbx, ebx
adc r9, rbx
call fcn.1403e4742
movsx eax, cl
xor dword [rsp + rdx - 0x49abb420], r10d
pop rsi
movsx ebp, dl
movsxd r10, r10d
ror edx, cl
adc edi, ecx
adc r9, r10
rdtsc
lea r8, [r8 + rcx - 0x2a]
mov dword [r8 + rcx*2 - 0x40], eax
mov dword [r8 + rcx - 0x22], edx
call fcn.1403c415d
lea rbx, [rsp + rbx + 0x10]
dec r10
sal qword [rsp + rdx*2 - 0x7a5a3ed8], cl
setp byte [rsp + rdx - 0x3d2d1f6a]
mov word [rbx + rdx*2 - 0x7a5a3ed8], bp
mov qword [rsp + rdx*2 - 0x7a5a3ed8], r9
ret 8
call fcn.1403b80fe
mov rax, qword [rbp + rbx*8]
call fcn.1403d5d45
push 0xffffffff9f1d3527
mov dx, word [r8]
mov cl, byte [r8 + 2]
add r8, 2
mov ebx, 0x4185e393
mov edi, 0xbd9a1c17
sal dx, cl
mov ecx, edi
rol qword [rsp + rbx - 0x4185e393], 0xf5
movzx eax, bl
mov word [rax + r8 - 0x93], dx
push rbx
mov word [rsp + rbx - 0x4185e391], ax
inc ax
lea r11, [r11 + rax - 0x98]
mov ecx, dword [r11 + rax*2 - 0x128]
xchg word [rsp + rax - 0x8a], di
movzx ebp, di
xor ecx, esi
lea rax, [rax + rax*2 - 0x6be2c5fb]
bswap ecx
neg ecx
xchg dil, bl
and di, 0xdf9d
rol byte [rsp + rbp - 0xffef], 0x86
bswap ecx
ja 0x1403c50a9
xor ebp, esi
xchg qword [rsp + rdx - 0x4ccbc821], rdx
lea rax, [rdx + rdx*8 + 0x3010fe97]
bswap ebp
mov r10d, 0x2b9a6d2f
pop rcx
and dword [rsp + rdx*4 - 0x58071cd7], ecx
inc ebp
jmp 0x1403b6652
shl edi, cl
neg r10d
jmp 0x1403ba2f5
call fcn.1403b026a
mov r10d, 0x382b90e
jmp 0x1403e38c4
shl qword [rsp + rcx*2 - 0x38], cl
neg edx
bswap edi
dec ax
not rcx
lea edx, [rdx + rdi*4 + 0x4adb83ca]
movzx ebp, byte [rsp + rdi - 0x1c95a7eb]
rol edx, cl
jmp 0x1403ba877
call fcn.1403ba595
mov edi, 0x338b88bc
not edi
mov eax, dword [r11]
lea rdi, [rdi*4 + 0x14aecc25]
shl di, 0xac
movzx ebp, dil
xor eax, esi
dec eax
mov ebx, 0xdc8baca0
neg eax
lea r10, [rdi + rdi*2 + 0x153c6d3c]
add bl, 0x17
bswap eax
ror eax, 1
dec r10d
lea eax, [rax + rbp + 0x6509a41d]
lea r10, [rbx*4 - 0x47e141d7]
movzx ecx, bl
ror bpl, 0x26
push rsi
jae 0x1403c7bcb
mov ecx, eax
mov ebp, dword [rcx + r11 - 0x55064ac6]
setne byte [rsp + r10*4 - 0x280]
and r10b, 0x21
rol edi, cl
xor ebp, esi
neg ebp
call fcn.1403cebd9
inc eax
mov ebp, ecx
rol eax, 1
dec cl
add ebp, 0xe18b27ac
push rcx
xor eax, 0xc8a64f96
sar word [rsp + rbx - 0x6b67a1c], 0x6f
push rbx
push rbx
not eax
mov qword [rsp + rbx - 0x6b67a10], rsi
add dword [rsp + rbx*2 - 0xd6cf434], 0x6cbed214
xor dword [rsp + rcx - 0x7a0f], eax
mov rsi, qword [rsp + rbx - 0x6b67a10]
call fcn.1403bdc5e
xor dword [rsp + rbp*2 - 0xb8], edi
mov rsi, qword [rsp + rbp*2 - 0xb8]
jmp 0x1403c7334
ror dx, 0xe4
add r9, rdi
movsx ebx, cx
sar word [rsp + rbp - 0x5b], cl
cmovne bx, word [rsp + rbp - 0x60]
mov qword [rsp + rbp*2 - 0xc0], r9
ret 8
mov ebp, 0x799bbaa5
lea r11, [r11 + rbp - 0x799bbaa9]
mov ecx, dword [rbp + r11 - 0x799bbaa5]
movzx edi, bp
lea r10, [rbp + rdi - 0x3ee41ec8]
xor ecx, esi
mov ebx, 0x843442a6
neg ecx
not ecx
add di, r10w
movzx eax, r10b
lea ecx, [rdi + rcx - 0x480cde42]
adc di, 0xc59e
lea r10, [rbp + r10*8 - 0x1bdd7b73]
rol ecx, 2
or r10b, dil
dec ecx
sar r10, 0x31
call fcn.1403dece1
mov ebx, dword [r11 + rbp + 0x213a4e0b]
movzx r10d, dx
rol rcx, 0x57
lea rdi, [rdx*8 + 0x5e87b6bf]
xor ebx, esi
bswap ebx
shr dil, 0x43
lea rbp, [rcx + r10*2 - 0x51535ff1]
add rcx, 0xffffffff8e112f8f
not ebx
bswap ebx
js 0x1403c7607
ror r10b, 1
not di
xor r10b, 0x15
xor edi, ebp
inc r10b
shr al, 0x26
xor r10b, 0x9a
xor sil, r10b
xchg dil, cl
shr cl, 0xa1
add r10, rsp
call fcn.1403b19f5
jmp 0x1403e15cf
mov ebp, r10d
mov bx, word [r8 + r10 - 0x382b90e]
lea rdi, [r10*8 + 0x1a0e189]
lea r8, [r8 + r10 - 0x382b90c]
bswap rbp
movsx ecx, bpl
lea r11, [r11 + rdi - 0x1db6a9fa]
movzx r10d, byte [r11 + r10*2 - 0x705721c]
and bpl, bpl
jp 0x1403c19f4
jmp 0x1403b16e9
lea r11, [r11 + rdx - 0x1a588e]
lea r10, [rdx*8 - 0x754d9eb]
push rdx
movsx eax, dx
mov ebp, dword [r11 + rdx*2 - 0x34b114]
xor ebp, esi
and edx, eax
not edx
call 0x1403cc861
push rbx
mov qword [rsp + rbx - 0x1300], r9
ret 0x10