Function at 0x556ba6
Capabilities:
Execute anti-debugging instructions

Disassembly:
std
inc r15
lea r10, [rsi + r11]
rdtsc
bswap rax
jmp 0x556bc8
mov rbp, rsp
mov rax, rbp
btr r12d, ebp
jmp 0x556b90
push word [rsp + 3]
mov r15d, r8d
xchg word [rsp + 0xe], cx
neg r14
jmp 0x556c8d
mov r10, qword [rsp + 0xa]
xchg r10d, eax
xchg bx, ax
lea r14, [r9*4]
lea rbp, [0x6169b198]
jmp 0x556bb2
lea rbp, [rdx*8]
push qword [rsp + 0x15]
jmp 0x556c67
mov r9w, word [rsp + 0x14]
bsf eax, eax
mov qword [rsp + 0x11], rdx
push bx
btc ecx, edx
mov qword [rsp + 0x16], rcx
jmp 0x556c02
sub rsp, 0xd
btr r15, rdx
mov ebx, 0xb9f5fc20
xchg r15w, r13w
mov r9b, sil
pop bp
jmp 0x556c18
mov qword [rsp + 5], r9
dec r13
mov r8w, r9w
jmp 0x556d92
push word [rsp]
bt eax, r11d
bswap rbx
lea r12, [r15 + riz + 0x4f289575]
bswap ebx
neg ebx
jmp 0x556c51
bswap edx
inc r11d
lea r15, [rdi + rbp]
not r15
lea r8, [rcx + riz + 0x2d]
mov word [rsp + 0x18], si
jmp 0x556c38
xchg qword [rsp + 4], r8
lea rax, [rdi + r15]
pop r8
mov bl, al
jmp 0x556cd7
xchg byte [rsp + 8], dl
xchg r9d, eax
mov rdx, r14
lea rbp, [r15 + riz + 0x83cb]
neg r9w
mov r15w, bp
jmp 0x556ca5
pop word [rsp + 5]
rdtsc
sete bpl
not bpl
mov r15b, r12b
setle r15b
jmp 0x556d2b
lea rsp, [rsp + 0x25]
bts edx, r15d
mov dx, word [rsp + 0x10]
xchg qword [rsp + 0xc], r10
xchg r15b, bl
mov r13, r11
jmp 0x556cbb
mov r13, qword [rsp]
mov r10d, ebp
push dx
mov r8, r10
jmp 0x556d6d
push word [rsp + 7]
mov r14d, 0x52a921e6
pop r8
mov r14b, r12b
lea r14, [rdi + riz - 0xb]
mov r8d, eax
jmp 0x556d15
bswap r10
bsr dx, r10w
xchg qword [rsp + 0x29], rbp
mov ebp, 0x87edeb69
push qword [rsp + 3]
cpuid
jmp 0x556cfa
mov al, byte [rsp + 6]
sub rsp, 5
xchg r10w, ax
xchg r15d, ebp
btr r8, rbx
bts r13, rax
jmp 0x556dd6
mov r11w, word [rsp + 0xc]
lea rcx, [rbx*4]
mov r12d, esi
mov r11d, esi
dec r13
mov rdx, 0xffffffff9883479e
jmp 0x556d52
mov bp, cx
call fcn.00556db2
mov byte [rsp + 1], r15b
lea r15, [r13 + r13]
xchg dword [rsp], ecx
bswap r8
xchg dl, r11b
lea rsp, [rsp + 2]
jmp 0x556e1d
mov rbp, 0xffffffffdae45043
shr rbp, 3
neg r8
bsf rcx, r9
xchg cl, bl
mov r8d, dword [rsp]
jmp 0x556e58
lea rdx, [rdx + rdx]
btr r9d, r11d
mov eax, 0x74815b75
mov r13w, word [rsp]
lea r14, [rcx + riz + 0x340d6e40]
mov rbx, rcx
jmp 0x557300
lea r8, [r15 + riz - 0xb85b]
mov byte [rsp + 0x10], r15b
pop r10w
jmp 0x556f0a
bswap edx
neg r10b
mov cl, byte [rsp + 0xd]
lea rsp, [rsp + 4]
pushfq
std
jmp 0x556e95
setl r15b
mov dword [rsp + 3], edi
cld
neg r15
not dl
jmp 0x556ee7
mov qword [rsp], r9
xchg r10b, r15b
std
cpuid
not r12d
rdtsc
jmp 0x556ec0
mov rcx, rdi
mov word [rsp + 3], sp
lea r15, [rbx*8]
shl r14, cl
neg r12w
mov cl, 0x95
jmp 0x556f4f
mov ebp, dword [rsp + 9]
std
pop rbx
lea rsp, [rsp + 1]
push word [rsp + 2]
cmc
jmp 0x556ed6
mov qword [rsp], r8
push qword [rsp + 0xa]
bswap r11
add rsp, 0xd
jmp 0x556fab
xchg dword [rsp + 8], r8d
pop r11w
mov r8, qword [rsp + 0xa]
lea rsp, [rsp + 3]
jmp 0x556f1d
cpuid
cld
sub rsp, 6
push word [rsp + 0xb]
not r11
not r12w
jmp 0x556f33
rdtsc
push r10w
push qword [rsp + 7]
std
pop qword [rsp]
jmp 0x556f92
mov byte [rsp + 4], cl
mov r8w, r13w
mov r13, r10
xchg r8w, r15w
lea r9, [r10 + r10]
mov r11b, 0xb4
jmp 0x556f64
push qword [rsp + 5]
mov rbx, r9
rdtsc
pop rbp
xchg byte [rsp + 1], r13b
jmp 0x556fdf
xchg word [rsp + 3], r15w
mov ax, 0x40f3
mov r15b, r13b
mov byte [rsp + 4], r8b
mov r11, 0x50cd786b
mov r9, rax
jmp 0x556f7a
mov byte [rsp + 7], r15b
mov qword [rsp], rbx
mov word [rsp + 3], r15w
jmp 0x556ffc
mov r8w, word [rsp]
mov rbx, qword [rsp + 8]
neg r9
mov r14w, cx
mov r14w, word [rsp + 6]
rcr rax, 0x3d
jmp 0x556fc9
xchg r10w, r11w
rdtsc
lea r14, [rbx + r15]
push word [rsp + 5]
cld
neg r8w
jmp 0x557052
bsf ebx, esp
clc
xchg dword [rsp + 0xb], ebp
lea r12, [r8 + riz + 0x5438dcf9]
pop r13w
setne r11b
jmp 0x556eae
lea rsp, [rsp + 0xa]
xchg dx, r14w
pushfq
cpuid
push word [rsp + 1]
jmp 0x5570c6
setl r9b
mov dl, byte [rsp + 1]
stc
xchg byte [rsp + 7], r10b
mov r8b, byte [rsp + 2]
bsf ax, r9w
jmp 0x55703b
push qword [rsp + 0xa]
call fcn.00557098
mov r14b, byte [rsp + 6]
pop r11
lea r13, [r10 + r15]
xchg bp, cx
jmp 0x5571cd
sub rsp, 0x18
xchg ebx, eax
pop qword [rsp + 2]
cpuid
mov byte [rsp + 0xa], r13b
xchg r12, r15
jmp 0x55701e
mov rbp, qword [rsp + 3]
mov r9w, di
or r13d, 0x5beb2817
jmp 0x557195
xchg byte [rsp + 5], r10b
stc
mov r11, r14
xchg byte [rsp + 4], r12b
pop qword [rsp]
xchg r10, rbx
jmp 0x557125
xchg dword [rsp], r15d
mov ax, 0x9b06
xchg r8w, bp
mov r9b, 0xa4
jmp 0x5571b6
push qword [rsp + 1]
lea r10, [r12 + 0xe9]
pop qword [rsp]
rcr r14d, cl
pop word [rsp + 3]
mov r12w, di
jmp 0x557152
xchg byte [rsp + 3], cl
setne r13b
or rcx, 0xffffffffc40b8d48
neg ecx
xchg word [rsp + 6], r15w
lea rax, [rsi + riz - 0x2c3ca916]
jmp 0x557168
mov r11w, r12w
setp cl
xchg al, r10b
cpuid
bsr r9d, r9d
jmp 0x557285
bt r12, rax
mov r14w, cx
pushfq
mov r14d, dword [rsp + 4]
push qword [rsp + 7]
mov bp, 0x40b
jmp 0x55713b
xchg bpl, r11b
mov r8w, r12w
bswap r13d
bsr dx, bx
jmp 0x557217
xchg rdx, rax
and r14w, r12w
mov bx, dx
mov r13b, byte [rsp]
not bx
mov word [rsp], r13w
jmp 0x5571e9
xchg edx, r10d
or rbp, 0xffffffff85935498
std
push r10
mov r10, 0x13bb7507
jmp 0x557263
lea r12, [0x799bdfcc]
lea rdx, [rcx + r9]
mov r14b, r11b
mov byte [rsp + 5], bl
add rsp, 5
not ebp
jmp 0x5571ff
mov rcx, qword [rsp]
xchg byte [rsp], bpl
shr r12d, 0x1a
mov r14b, r9b
jmp 0x5572d3
mov r8w, r9w
pop r15
setns dl
xchg r12, r11
mov rbx, r14
shr r10b, cl
jmp 0x55724d
mov r14, qword [rsp]
xchg rdx, r11
mov word [rsp + 4], bp
mov ax, dx
xchg rdx, r9
ror r15, cl
jmp 0x557232
mov word [rsp], bx
call fcn.005572b2
mov rbx, 0xffffffffad1dd30e
xchg bx, cx
dec r9b
sub rsp, 0x1e
mov ax, 0x47e6
mov qword [rsp + 1], rax
jmp 0x5573c9
xchg byte [rsp], bl
cld
bswap ebp
pop r14w
lea r9, [rdi + r9]
mov r13, 0x48ee5dd3
jmp 0x55710c
neg eax
pop word [rsp + 7]
xchg word [rsp + 0x11], bx
cmc
mov r14d, r8d
add rsp, 0xb
jmp 0x557365
neg r11b
mov bp, r15w
cpuid
shr al, cl
mov r12w, cx
xchg r14w, dx
jmp 0x55731a
bswap rax
stc
pop r13w
pop r14w
clc
inc r11d
jmp 0x5573ad
xchg r12, rax
inc r12w
std
pop r10w
xchg r15d, r12d
mov r8, rdx
jmp 0x55734f
mov r13, rbx
pop word [rsp + 7]
rdtsc
mov ax, 0x58f1
lea rsp, [rsp]
rcl r15d, 5
jmp 0x55733a
xchg r9b, r15b
lea rsp, [rsp + 0xa]
mov r14w, word [rsp]
jmp 0x5574e8
seto bpl
cpuid
pushfq
xchg cx, r10w
setg r13b
mov qword [rsp], rax
jmp 0x557397
and dl, r10b
lea r12, [0xfffffffff896e682]
mov qword [rsp + 0xa], r12
mov r13w, r11w
add rsp, 0x10
mov r15d, 0xf83910f
jmp 0x55737f
xchg r14b, r15b
mov r11b, r14b
mov r9b, byte [rsp]
cld
mov r11b, 0xb8
jmp 0x55741a
rcl r15w, cl
mov r9b, byte [rsp]
mov r13d, dword [rsp]
mov byte [rsp], bpl
mov cl, byte [rsp]
mov r14d, 0xaf8a6b12
jmp 0x5573e9
neg bpl
bsf rcx, r13
sbb r15w, bp
neg ax
cmc
push ax
jmp 0x557498
rol r11d, 0x1b
call fcn.00557477
test eax, 0x3acfa83a
ror dword [rcx + reloc.KERNEL32.dll_DeleteCriticalSection], cl
xor dl, 0xed
mov r10b, byte [rsp]
mov rax, 0x7ca65334
mov rcx, qword [rsp]
mov r15d, esi
mov r8w, 0x7928
xchg r9b, r14b
jmp 0x5573ff
add rsp, 2
bsf rbp, rbx
lea r12, [r14 + riz + 0xb3d]
clc
btc eax, edx
std
jmp 0x55742e
xchg r14w, r10w
mov byte [rsp], r9b
mov rbx, 0x39b672c7
cpuid
bswap ecx
xchg cx, r11w
jmp 0x557445