Function at 0x140327a80
Capabilities:
Execute anti-debugging instructions

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x460], 0xfffffffffffffffe
mov rdi, rdx
mov rbx, rcx
mov qword [rbp + 0x450], 0
mov dword [rsp + 0x20], 0xa80a70f0
xor ecx, ecx
mov edx, 1
mov r8d, 0x75f11bef
mov r9d, 0x9b630f62
call fcn.14032a490
cmp rbx, 0x12345678
je 0x140327b0f
mov qword [rbp + 0x3f8], rax
call fcn.1403276b0
test rdi, rdi
sets al
cmp rdi, 0x10000
setb sil
or sil, al
rdtsc
mov r15, rdx
mov r14, rax
je 0x140327b82
xor r13d, r13d
jmp 0x140327b89
cmp qword [0x14050248c], 0x33c0
jne 0x14032808f
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0xd0272616
mov dword [rsp + 0x38], 0x4f168755
mov dword [rsp + 0x30], 0x6428d10a
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call fcn.14032a540
movabs rcx, 0x99cfddd7ca12695b
add rcx, rax
movabs rax, 0x6630222835edca65
mov rdx, rcx
xor rdx, rax
and rcx, rax
lea rax, [rdx + rcx*2]
mov qword [0x14050248c], rax
jmp 0x14032808f
cmp byte [rdi], 0
sete r13b
mov r12, rbx
test rbx, rbx
jne 0x140327baf
mov ecx, 1
mov edx, 1
mov r8d, 0x77181d0a
mov r9d, 0xe4c8dff7
call fcn.140329f20
mov r12, rax
movzx eax, byte [0x140520278]
test al, 1
mov byte [rbp + 0x45f], sil
je 0x140327bff
mov dword [rsp + 0x20], 0x6181aed0
mov ecx, 1
mov edx, 1
xor r8d, r8d
mov r9d, 0xe1dd5d6f
call fcn.140329e50
test rax, rax
je 0x140327bff
test sil, sil
je 0x140327c45
lea r9, [rbp + 0x450]
mov rcx, rbx
xor edx, edx
mov r8d, edi
jmp 0x140327cb6
test r12, r12
je 0x140327cce
mov eax, dword [r12 + 0x3c]
test rax, rax
je 0x140327cce
cmp dword [r12 + rax], 0x4550
jne 0x140327cce
cmp dword [r12 + rax + 0x88], 0
je 0x140327c3e
cmp dword [r12 + rax + 0x8c], 0
jne 0x140327cce
xor esi, esi
jmp 0x140327ceb
mov qword [rbp - 0x20], 0
xor ecx, ecx
test rdi, rdi
je 0x140327c97
xor edx, edx
jmp 0x140327c85
mov edx, 1
mov r8b, r9b
add rcx, r8
mov r8d, edx
not r8b
mov r9d, edx
xor r9b, 1
and r8b, 0xfe
or r8b, r9b
cmp r8b, 0xff
jne 0x140327c97
xor r8d, r8d
cmp byte [rdi + rcx], 0
setne r9b
je 0x140327c60
movzx edx, dl
jmp 0x140327c65
mov word [rbp - 0x20], cx
inc ecx
mov word [rbp - 0x1e], cx
mov qword [rbp - 0x18], rdi
lea rdx, [rbp - 0x20]
lea r9, [rbp + 0x450]
mov rcx, rbx
xor r8d, r8d
call qword [case.0x1400f5c95.0]
cmp eax, 0xc0000138
jne 0x140327cce
mov qword [rbp + 0x450], 0
lea rcx, [rbp - 0x20]
mov r8d, 0x400
xor edx, edx
call fcn.1403d1170
mov sil, 1
test r13b, r13b
je 0x140327df9
shl r15, 0x20
or r14, r15
lea rcx, [rbp - 0x20]
mov r8d, 0x400
xor edx, edx
call fcn.1403d1170
rdtsc
shl rdx, 0x20
or rdx, rax
sub rdx, r14
cmp qword [0x140502418], 0
je 0x140327d25
mov rax, qword [0x140502418]
cmp rax, rdx
jae 0x140327d2c
mov qword [0x140502418], rdx
cmp qword [rbp + 0x450], 0
setne al
sete cl
xor cl, sil
xor sil, al
and sil, al
or sil, cl
jne 0x14032802a
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x58], 0xc202beee
mov dword [rsp + 0x50], 0x9e196d1d
mov dword [rsp + 0x48], 0x888942c
mov qword [rsp + 0x40], 0
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.14032a050
mov ecx, 0xb5c8c501
add ecx, dword [0x14051df04]
mov edx, ecx
xor edx, eax
and ecx, eax
lea eax, [rdx + rcx*2]
cmp eax, 0xfd19062e
je 0x14032802a
mov dword [rsp + 0x20], 0x6181aed0
mov ecx, 1
mov edx, 1
xor r8d, r8d
mov r9d, 0xe1dd5d6f
call fcn.140329e50
test rax, rax
je 0x14032802a
inc qword [0x1405023b8]
cmp rdi, 0xffff
ja 0x140327ecf
lea r9, [rbp + 0x450]
mov rcx, rbx
xor edx, edx
mov r8d, edi
jmp 0x140327f52
mov dword [rsp + 0x20], 0x9af5f067
xor r12d, r12d
xor ecx, ecx
xor edx, edx
mov r8, rbx
mov r9d, 0xb9720c41
call fcn.140329a90
test rax, rax
je 0x140327ceb
nop
mov r13d, r12d
movzx ecx, word [rax + r13*2]
test ecx, ecx
je 0x140327e3b
cmp ecx, 0x2e
je 0x140327e3b
mov byte [rbp + r13 - 0x20], cl
inc r12d
jmp 0x140327e20
mov eax, 0x400
sub eax, r12d
cmp eax, 2
jb 0x140327ceb
mov dword [rbp + 0x404], eax
mov qword [rbp + 0x448], 0xf
mov qword [rbp + 0x440], 1
mov word [rbp + 0x430], 0x2e
cmp byte [rbp + 0x45f], 0
je 0x140327fa3
mov rax, qword [rbp + 0x440]
mov rcx, qword [rbp + 0x448]
cmp rcx, rax
jne 0x1403280aa
xor ecx, ecx
mov edx, 1
mov r8d, 0x3e860aff
mov r9d, 0xd454eda1
call fcn.140329bf0
mov qword [rsp + 0x20], 1
lea rcx, [rbp + 0x430]
mov edx, 1
mov r9, rax
call fcn.14008b5f0
jmp 0x1403280f4
mov qword [rbp + 0x430], 0
xor ecx, ecx
test rdi, rdi
je 0x140327f27
xor edx, edx
jmp 0x140327f15
mov edx, 1
mov r8b, r9b
add rcx, r8
mov r8d, edx
not r8b
mov r9d, edx
xor r9b, 1
and r8b, 0xfe
or r8b, r9b
cmp r8b, 0xff
jne 0x140327f27
xor r8d, r8d
cmp byte [rdi + rcx], 0
setne r9b
je 0x140327ef0
movzx edx, dl
jmp 0x140327ef5
mov word [rbp + 0x430], cx
inc ecx
mov word [rbp + 0x432], cx
mov qword [rbp + 0x438], rdi
lea rdx, [rbp + 0x430]
lea r9, [rbp + 0x450]
mov rcx, rbx
xor r8d, r8d
call qword [case.0x1400f5c95.0]
cmp eax, 0xc0000142
je 0x140327f6a
cmp eax, 0xc0000138
jne 0x140327ff5
mov qword [rbp + 0x450], 0
xor eax, eax
cmp rdi, 0x10000
setae al
lea rcx, [0x140502350]
inc qword [0x1405023f0]
inc qword [0x1405023c0]
lea rax, [rcx + rax*8]
add rax, 0x78
jmp 0x140328027
mov rcx, rdi
mov edx, 0x1f45493b
mov r8d, 0x8ffff76d
mov r9d, 0x4b27471d
call fcn.1400aa540
mov rcx, qword [rbp + 0x440]
mov rdx, qword [rbp + 0x448]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x1403280c4
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x430]
mov rdx, rax
mov r9, rdi
call fcn.14008b5f0
jmp 0x1403282b5
cmp qword [rbp + 0x450], 0
je 0x140327f75
xor eax, eax
cmp rdi, 0x10000
setae al
lea rcx, [0x140502350]
inc qword [0x1405023d8]
lea rax, [rcx + rax*8]
add rax, 0x90
inc qword [rax]
mov dword [rsp + 0x20], 0x6181aed0
xor esi, esi
xor ecx, ecx
mov edx, 1
mov r8, qword [rbp + 0x3f8]
mov r9d, 0xe1dd5d6f
call fcn.140329e50
movzx r9d, byte [rbp + 0x45f]
xor r9d, 0xc0000139
cmp qword [rbp + 0x450], 0
cmovne r9d, esi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x38], 0x3a7ecad6
mov dword [rsp + 0x30], 0x2c9f7f4e
mov ecx, 1
xor edx, edx
xor r8d, r8d
call fcn.140329e10
mov rax, qword [rbp + 0x450]
add rsp, 0x4e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rdx, [rax + 1]
mov qword [rbp + 0x440], rdx
cmp rcx, 0x10
jb 0x1403280e7
mov rcx, qword [rbp + 0x430]
jmp 0x1403280ee
mov r12, rax
add r12, rcx
mov qword [rbp + 0x440], r12
cmp rdx, 0x10
jb 0x14032820d
mov rdx, qword [rbp + 0x430]
jmp 0x140328214
lea rcx, [rbp + 0x430]
mov word [rcx + rax], 0x23
movzx edx, di
mov r12d, 1
lea r9, [rbp + 0x3f4]
movabs r8, 0xcccccccccccccccd
nop
mov rcx, rdx
mov rax, rdx
mul r8
shr rdx, 3
lea eax, [rdx + rdx]
lea eax, [rax + rax*4]
mov r10d, ecx
sub r10d, eax
or r10b, 0x30
mov byte [r9], r10b
cmp rcx, 0xa
jb 0x14032813e
inc r12
dec r9
jmp 0x140328110
mov qword [rbp + 0x418], 0
mov qword [rbp + 0x420], 0xf
mov byte [rbp + 0x408], 0
test r12, r12
je 0x140328199
cmp r12, 0xf
jbe 0x140328177
lea rcx, [rbp + 0x408]
mov rdx, r12
call fcn.14008aa10
jmp 0x140328199
mov qword [rbp + 0x418], r12
lea rcx, [rbp + 0x408]
mov rdx, r9
mov r8, r12
call fcn.1403d0ac0
mov byte [rbp + r12 + 0x408], 0
mov r8, qword [rbp + 0x418]
cmp qword [rbp + 0x420], 0x10
jb 0x1403281b3
mov r9, qword [rbp + 0x408]
jmp 0x1403281ba
lea r9, [rbp + 0x408]
mov rcx, qword [rbp + 0x440]
mov rax, qword [rbp + 0x448]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x1403281e9
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x430]
mov rdx, r8
call fcn.14008b5f0
jmp 0x140328255
lea r10, [rcx + r8]
mov rdx, r10
mov qword [rbp + 0x428], r10
mov qword [rbp + 0x440], r10
cmp rax, 0x10
jb 0x140328237
mov r12, qword [rbp + 0x430]
jmp 0x14032823e
lea rdx, [rbp + 0x430]
mov qword [rbp + 0x428], rdx
add rcx, rdx
mov rdx, rdi
mov r8, rax
call fcn.1403d0ac0
mov rax, qword [rbp + 0x428]
mov byte [rax + r12], 0
jmp 0x1403282b5
lea r12, [rbp + 0x430]
add rcx, r12
mov rdx, r9
call fcn.1403d0ac0
mov rax, qword [rbp + 0x428]
mov byte [r12 + rax], 0
mov rax, qword [rbp + 0x420]
add rax, qword [0x14051df88]
cmp rax, 0x10
jb 0x1403282b5
mov rcx, qword [rbp + 0x408]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14032829c
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x14032839d
add rax, 0x28
mov rdx, rax
mov rcx, r8
mov dword [rsp + 0x20], 0x5b6e4e1
mov r8d, 0xd85487e
mov r9d, 0x421f6ab8
call fcn.1400a8a50
mov rax, qword [rbp + 0x440]
mov ecx, dword [rbp + 0x404]
cmp rax, rcx
jae 0x14032833a
cmp qword [rbp + 0x448], 0x10
jb 0x1403282da
mov rdx, qword [rbp + 0x430]
jmp 0x1403282e1
lea rdx, [rbp + 0x430]
lea rcx, [r13 - 0x20]
add rcx, rbp
xor r8d, r8d
test rax, rax
je 0x140328311
nop word cs:[rax + rax]
movzx r9d, byte [rdx + r8]
mov byte [rcx + r8], r9b
inc r8d
cmp rax, r8
ja 0x140328300
mov eax, r8d
mov byte [rcx + rax], 0
mov qword [rbp + 0x408], 0
lea rcx, [rbp - 0x20]
lea rdx, [rbp + 0x408]
call fcn.140326960
mov qword [rbp + 0x450], rax
mov rax, qword [rbp + 0x448]
cmp rax, 0x10
jb 0x140327ceb
mov rcx, qword [rbp + 0x430]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14032837a
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x20
jae 0x140328398
add rax, 0x28
mov rdx, rax
mov rcx, r8
mov dword [rsp + 0x20], 0x5b6e4e1
mov r8d, 0xd85487e
mov r9d, 0x421f6ab8
call fcn.1400a8a50
jmp 0x140327ceb
call fcn.140388c3c
call fcn.140388c3c
int3