Function at 0x140485b14
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 0x18], rbx
ror eax, 0xe5
push rbp
cmp r11b, al
push rsi
rcr rbp, 0x48
add ax, 0x2c26
ror eax, cl
push rdi
push r12
push r13
xor bp, r12w
push r14
rol rsi, 0x70
push r15
mov ah, 0xe0
bswap r15d
mov rbp, rsp
sub bx, 0x2ea8
movsx rsi, r10w
dec ah
sub rsp, 0x80
cwde
test dl, r9b
mov rax, qword [0x1400b7288]
xor rax, rsp
bsf r14, r11
mov qword [rbp - 0x10], rax
add r12b, 0x73
mov rax, qword [rbp + 0x60]
lea r15, [rbp - 0x30]
mov r14, qword [rbp + 0x68]
movzx r12d, r10w
sub r13d, r13d
mov rdi, qword [rbp + 0x70]
jmp 0x140485b8d
cmp r9d, 0x3e7
mov sil, r15b
jmp 0x140485b9f
mov qword [rbp - 0x38], rax
mov esi, r9d
movsxd rbx, r15d
lahf
setg r13b
mov dword [rbp - 0x60], r9d
bsf r12, rcx
inc ax
rcr r12b, cl
add r13d, 3
mov dword [rbp - 0x58], r8d
cmp r9d, 0x63
jmp 0x140485bcd
mov qword [rbp - 0x48], rdi
not rax
cwde
mov eax, 2
bswap r12w
mov qword [rbp - 0x50], r15
cmovle r13d, eax
sub al, bh
ror r12w, cl
add al, 0xbc
mov r12, rdx
mov eax, 0x184f558d
cmp r9d, 9
movsx rax, r13w
mov eax, 1
movsx bx, dh
jmp 0x140485c0c
mov rbx, rcx
cmovle r13d, eax
clc
and dword [r14], 0
jmp 0x140485c1d
call fcn.14046031e
test al, al
jmp 0x140485c29
jne 0x140485e12
mov esi, 0xffff
cmp dword [r14], r13d
jmp 0x140485c3c
jge 0x140485e0c
cmp byte [rbx + 8], 0
jne 0x140485ce5
mov rcx, qword [rbx]
jmp 0x140485c54
test rcx, rcx
jmp 0x140485c5c
je 0x140485cd3
mov rax, qword [rcx + 0x38]
mov rdx, qword [rax]
stc
test rdx, rdx
jmp 0x140485c72
je 0x140485ca0
mov rax, qword [rcx + 0x50]
jmp 0x140485c85
cmp dword [rax], 0
jmp 0x140485c8d
jle 0x140485ca0
movzx eax, word [rdx]
jmp 0x140485c9b
jmp 0x140485cb7
mov rax, qword [rcx]
jmp 0x140485ca8
mov rax, qword [rax + 0x30]
jmp 0x140485cb1
call qword [case.0x1404c1b3d.0]
cmp si, ax
jmp 0x140485cbf
je 0x140485cd3
mov word [rbx + 0xa], ax
jmp 0x140485cce
jmp 0x140485cd7
and qword [rbx], 0
mov byte [rbx + 8], 1
movsxd rdx, r8d
cdqe
movzx r8w, r11b
mov rax, qword [rdi]
mov edx, 0x48
movzx r8d, word [rbx + 0xa]
mov rcx, rdi
jmp 0x140485cfa
mov rax, qword [rax + 0x20]
jmp 0x140485d03
call qword [case.0x1404c1b3d.0]
test al, al
jmp 0x140485d10
je 0x140485e0c
mov rcx, qword [rbx]
stc
cmc
test rcx, rcx
jmp 0x140485d23
je 0x140485dc9
mov rax, qword [rcx + 0x38]
cmp al, r15b
clc
cmp sil, 0xd
cmp qword [rax], 0
jmp 0x140485d3e
je 0x140485d9d
mov rax, qword [rcx + 0x50]
cmp r13w, 0x411d
jmp 0x140485d54
cmp dword [rax], 0
jle 0x140485d9d
dec dword [rax]
movsx ax, r11b
cwd
rdtsc
mov rcx, qword [rcx + 0x38]
cwd
bswap dx
mov rdx, qword [rcx]
mov al, 0xec
cdqe
movsx ax, bpl
lea rax, [rdx + 2]
jmp 0x140485d86
mov qword [rcx], rax
movsx ax, r13b
cdqe
movzx eax, word [rdx]
jmp 0x140485d98
jmp 0x140485db4
mov rax, qword [rcx]
jmp 0x140485da5
mov rax, qword [rax + 0x38]
jmp 0x140485dae
call qword [case.0x1404c1b3d.0]
cmp si, ax
jmp 0x140485dbc
je 0x140485dc9
xor al, al
jmp 0x140485dde
and qword [rbx], 0
dec cx
movzx cx, ch
mov al, 1
movzx rdx, r12w
cmovns dx, bp
mov byte [rbx + 8], al
mov rdx, r12
cmovp rcx, rbx
inc dword [r14]
mov ch, 0xde
movzx rcx, r8w
mov rcx, rbx
jmp 0x140485dfa
call fcn.14046031e
test al, al
jmp 0x140485e06
je 0x140485c34
mov esi, dword [rbp - 0x60]
movzx ecx, si
mov rdx, r12
mov ch, ah
movzx ecx, r9w
mov rcx, rbx
call fcn.14046031e
test al, al
jmp 0x140485e2a
jne 0x1404860ab
cmp dword [r14], r13d
jmp 0x140485e38
jge 0x1404860ab
cmp byte [rbx + 8], al
jne 0x140485ee3
mov rcx, qword [rbx]
test rcx, rcx
jmp 0x140485e52
je 0x140485ecf
mov rax, qword [rcx + 0x38]
bsf edx, ebp
shrd edx, ebx, 0xa8
mov rdx, qword [rax]
cmc
jmp 0x140485e6c
test rdx, rdx
jmp 0x140485e74
je 0x140485e9e
mov rax, qword [rcx + 0x50]
test bp, 0x752b
cmp dword [rax], 0
jmp 0x140485e8b
jle 0x140485e9e
movzx eax, word [rdx]
jmp 0x140485e99
jmp 0x140485eb5
mov rax, qword [rcx]
jmp 0x140485ea6
mov rax, qword [rax + 0x30]
jmp 0x140485eaf
call qword [case.0x1404c1b3d.0]
mov ecx, 0xffff
cmp al, r10b
cmp cx, ax
je 0x140485ecf
mov word [rbx + 0xa], ax
jmp 0x140485edd
and qword [rbx], 0
rdtsc
shr rdx, cl
shrd rdx, rbp, 0x10
mov byte [rbx + 8], 1
cbw
mov rax, qword [rdi]
movsx ecx, dx
rol dh, 0x7b
xor r8d, r8d
movzx edx, word [rbx + 0xa]
not cx
xchg rcx, rcx
mov rcx, rdi
mov rax, qword [rax + 0x70]
jmp 0x140485f05
call qword [case.0x1404c1b3d.0]
cmp al, 0x2b
jmp 0x140485f12
jne 0x140485fe2
mov rcx, qword [rbx]
lea r15, [rbp - 0x2f]
test eax, edx
clc
mov byte [rbp - 0x30], al
cmc
mov qword [rbp - 0x50], r15
cmc
cmp sil, r9b
test rcx, rcx
jmp 0x140485f36
je 0x140485fcf
mov rax, qword [rcx + 0x38]
clc
test spl, r13b
cmp qword [rax], 0
jmp 0x140485f4d
je 0x140485f9e
mov rax, qword [rcx + 0x50]
jmp 0x140485f5c
cmp dword [rax], 0
jle 0x140485f9e
dec dword [rax]
movsxd rdx, esi
movsx rax, r15w
mov rcx, qword [rcx + 0x38]
movsxd rax, ebx
lahf
movzx rdx, r14w
mov rdx, qword [rcx]
lahf
lea rax, [rdx + 2]
jmp 0x140485f87
mov qword [rcx], rax
movsx eax, r11w
mov ah, 0xd3
movzx eax, word [rdx]
jmp 0x140485f99
jmp 0x140485fb0
mov rax, qword [rcx]
jmp 0x140485fa6
mov rax, qword [rax + 0x38]
call qword [case.0x1404c1b3d.0]
mov ecx, 0xffff
cmp cx, ax
jmp 0x140485fbd
je 0x140485fcf
xor al, al
jmp 0x140485fca
jmp 0x140485fda
and qword [rbx], 0
mov al, 1
jmp 0x140485fda
mov byte [rbx + 8], al
jmp 0x1404860ab
cmp al, 0x2d
jne 0x1404860ab
mov rcx, qword [rbx]
lea r15, [rbp - 0x2f]
test r12, rbp
clc
cmc
mov byte [rbp - 0x30], al
cmp al, r14b
test r13, rbp
mov qword [rbp - 0x50], r15
test rcx, rcx
jmp 0x14048600b
je 0x14048609f
mov rax, qword [rcx + 0x38]
cmp qword [rax], 0
jmp 0x14048601e
je 0x140486063
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jle 0x140486063
dec dword [rax]
cwde
rdtsc
mov rcx, qword [rcx + 0x38]
mov rdx, qword [rcx]
movzx ax, bpl
cdqe
movsx eax, r11w
lea rax, [rdx + 2]
jmp 0x140486051
mov qword [rcx], rax
xchg ah, ah
cmovs eax, r8d
lahf
movzx eax, word [rdx]
jmp 0x14048607a
mov rax, qword [rcx]
jmp 0x14048606b
mov rax, qword [rax + 0x38]
jmp 0x140486074
call qword [case.0x1404c1b3d.0]
mov ecx, 0xffff
clc
cmp ch, 0xa9
cmp cx, ax
jmp 0x14048608b
je 0x14048609f
mov byte [rbx + 8], 0
jmp 0x14048609a
jmp 0x1404860ab
and qword [rbx], 0
movzx rcx, di
mov byte [rbx + 8], 1
mov rdx, r12
movsxd rcx, r9d
mov rcx, rbx
jmp 0x1404860b9
call fcn.14046031e
test al, al
jne 0x1404862c2
mov esi, 1
btc r15w, r11w
mov r15d, 0xffff
cmp dword [r14], r13d
jmp 0x1404860de
jge 0x1404862b3
cmp byte [rbx + 8], 0
jmp 0x1404860ed
jne 0x140486189
mov rcx, qword [rbx]
jmp 0x1404860fb
test rcx, rcx
jmp 0x140486103
je 0x140486177
mov rax, qword [rcx + 0x38]
mov rdx, qword [rax]
test r13w, 0x25a
jmp 0x14048611b
test rdx, rdx
jmp 0x140486123
je 0x140486148
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jmp 0x140486135
jle 0x140486148
movzx eax, word [rdx]
jmp 0x140486143
jmp 0x14048615a
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
jmp 0x140486154
call qword [case.0x1404c1b3d.0]
cmp r15w, ax
jmp 0x140486163
je 0x140486177
mov word [rbx + 0xa], ax
jmp 0x140486172
jmp 0x140486182
and qword [rbx], 0
btc edx, 0x69
xor dx, si
mov byte [rbx + 8], sil
sar ch, cl
stc
mov rax, qword [rdi]
sar ch, 0xa8
shl rdx, 0xd5
and dx, ax
sub r8d, r8d
setae dl
movzx ecx, r15w
movsxd rdx, r12d
movzx edx, word [rbx + 0xa]
mov cl, r15b
movzx cx, r11b
mov rcx, rdi
jmp 0x1404861b7
mov rax, qword [rax + 0x70]
jmp 0x1404861c0
call qword [case.0x1404c1b3d.0]
cmp al, 0x30
jmp 0x1404861cd
jne 0x1404862b3
add dword [r14], esi
bsf cx, r13w
mov rcx, qword [rbx]
test edx, r13d
cmp r9w, 0x710c
test rcx, rcx
jmp 0x1404861ef
je 0x14048627e
mov rax, qword [rcx + 0x38]
cmp qword [rax], 0
je 0x140486251
mov rax, qword [rcx + 0x50]
cmp esi, 0x18537c2
test r9b, 0xeb
cmp dword [rax], 0
jmp 0x140486219
jle 0x140486251
dec dword [rax]
cwd
mov rcx, qword [rcx + 0x38]
mov ax, r12w
movzx dx, r15b
cmovp dx, si
mov rdx, qword [rcx]
cdqe
movzx rax, bx
lea rax, [rdx + 2]
mov qword [rcx], rax
movzx eax, word [rdx]
jmp 0x14048624c
jmp 0x140486263
mov rax, qword [rcx]
jmp 0x140486259
mov rax, qword [rax + 0x38]
call qword [case.0x1404c1b3d.0]
cmp r15w, ax
jmp 0x14048626c
je 0x14048627e
xor al, al
jmp 0x140486279
jmp 0x14048628e
and qword [rbx], 0
movsx rdx, sp
movsxd rdx, r13d
xchg ch, cl
mov al, sil
mov rdx, r12
cmovae cx, dx
mov cl, r8b
movsx ecx, si
mov byte [rbx + 8], al
mov rcx, rbx
call fcn.14046031e
test al, al
jmp 0x1404862ad
je 0x1404860d6
mov r15, qword [rbp - 0x50]
rcr esi, cl
adc sil, 0x46
not esi
mov esi, dword [rbp - 0x60]
cmp dword [r14], 0
jmp 0x1404862cb
jle 0x1404862da
mov byte [r15], 0x30
cqo
inc r15
mov rdx, r12
mov rcx, rbx
jmp 0x1404862e5
call fcn.14046031e
test al, al
jmp 0x1404862f1
jne 0x14048654d
lea rdi, [rbx + 0xa]
btr si, di
bt esi, 0x2f
sbb esi, 0x19043c30
mov rsi, rdi
cmp byte [rbx + 8], 0
jmp 0x140486315
jne 0x1404863c6
mov rcx, qword [rbx]
test r8b, r15b
test cl, 0xf1
test rcx, rcx
je 0x1404863b6
mov rax, qword [rcx + 0x38]
or edx, ebp
adc dl, r11b
ror edx, 0xa4
mov rdx, qword [rax]
test rdx, rdx
jmp 0x140486344
je 0x140486374
mov rax, qword [rcx + 0x50]
cmc
cmp r14d, 0x43b91086
test bpl, sil
cmp dword [rax], 0
jmp 0x140486361
jle 0x140486374
movzx eax, word [rdx]
jmp 0x14048636f
jmp 0x140486386
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
jmp 0x140486380
call qword [case.0x1404c1b3d.0]
mov ecx, 0xffff
cmp r10d, r8d
cmp cx, ax
jmp 0x140486396
je 0x1404863b6
mov word [rsi], ax
not di
movzx rdi, r15w
bswap di
mov rdi, rsi
jmp 0x1404863b1
jmp 0x1404863c2
and qword [rbx], 0
bt ax, 0xc7
movzx eax, di
mov byte [rbx + 8], 1
mov rcx, qword [rbp - 0x48]
sbb dx, r12w
clc
sub r8d, r8d
movzx edx, word [rdi]
movsx eax, cx
mov rax, qword [rcx]
jmp 0x1404863e0
mov rax, qword [rax + 0x70]
jmp 0x1404863e9
call qword [case.0x1404c1b3d.0]
lea ecx, [rax - 0x30]
stc
cmp cl, 9
jmp 0x1404863fb
ja 0x14048653e
mov ecx, dword [r14]
test r15d, 0x1841704e
cmp r11b, r10b
cmp ecx, r13d
jmp 0x140486416
jge 0x14048653e
mov byte [r15], al
cwde
lea rdx, [rbp - 0x11]
sub eax, 0x6a803135
cmp r15, rdx
movsx eax, bp
movsx rax, bp
lea rax, [r15 + 1]
jmp 0x14048643c
cmovae rax, r15
ror r15w, 0x4d
sub r15b, 0xf4
movzx r15d, r8w
mov r15, rax
jmp 0x140486458
lea eax, [rcx + 1]
bts ecx, r14d
bsf cx, cx
mov dword [r14], eax
mov cx, cx
mov rcx, qword [rbx]
cmc
test rcx, rcx
jmp 0x140486475
je 0x140486505
mov rax, qword [rcx + 0x38]
cmp ebp, r12d
cmp qword [rax], 0
jmp 0x14048648b
je 0x1404864d2
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jle 0x1404864d2
dec dword [rax]
bswap ax
jmp 0x1404864a8
mov rcx, qword [rcx + 0x38]
mov rdx, qword [rcx]
movsx ax, dh
lea rax, [rdx + 2]
jmp 0x1404864bc
mov qword [rcx], rax
movzx rax, r13w
xchg ah, ah
movzx eax, word [rdx]
jmp 0x1404864cd
jmp 0x1404864e9
mov rax, qword [rcx]
jmp 0x1404864da
mov rax, qword [rax + 0x38]
jmp 0x1404864e3
call qword [case.0x1404c1b3d.0]
mov ecx, 0xffff
stc
clc
cmp cx, ax
je 0x140486505
xor al, al
jmp 0x140486500
jmp 0x140486512
and qword [rbx], 0
mov al, 1
xchg dx, dx
movsx rcx, si
mov rdx, r12
bswap cx
mov byte [rbx + 8], al
mov cl, 0xff
movsx ecx, r11w
seto cl
mov rcx, rbx
jmp 0x14048652c
call fcn.14046031e
test al, al
jmp 0x140486538
je 0x14048630c
mov esi, dword [rbp - 0x60]
shr r9, 0xdf
cwd
cmp r13w, 0x3154
cmp dword [r14], 0
setnp cl
bswap r8
jmp 0x14048655c
lea rax, [rbp - 0x30]
lea r9, [rbp - 0x5c]
movzx cx, r9b
mov rcx, r11
not cl
mov r8d, 0xa
cmovne rax, r15
dec dh
shl edx, 9
bswap dx
lea rdx, [rbp - 0x40]
mov ch, 0xe2
movsx ecx, r10w
and dword [rbp - 0x5c], 0
jmp 0x140486594
lea rcx, [rbp - 0x30]
jmp 0x14048659d
mov byte [rax], 0
jmp 0x1404865a5
call fcn.140495d5c
mov rdx, r12
mov rcx, rbx
cmove rdi, rsp
not dil
movsx di, sil
mov edi, eax
jmp 0x1404865c3
call fcn.14046031e
xor ecx, ecx
test r11, 0x45ac134c
cmc
cmp edi, esp
test al, al
mov ax, r11w
lea eax, [rcx + 1]
jmp 0x1404865e2
cmovne ecx, eax
lea rax, [rbp - 0x30]
test ax, 0x30af
jmp 0x1404865f2
cmp qword [rbp - 0x40], rax
jmp 0x1404865fb
je 0x14048663b
cmp dword [rbp - 0x5c], 0
jmp 0x14048660a
jne 0x14048663b
cmp edi, dword [rbp - 0x58]
jl 0x14048663b
cmp esi, edi
jmp 0x140486620
jl 0x14048663b
mov rax, qword [rbp - 0x38]
jmp 0x14048662f
mov dword [rax], edi
jmp 0x140486636
jmp 0x140486648
or ecx, 2
sbb eax, 0x45541325
btc ax, 0x67
mov eax, ecx
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140496cc6
mov rbx, qword [rsp + 0xd0]
cmovs bp, dx
add rsp, 0x80
movzx r14d, bx
movsx r13d, sp
pop r15
xchg r13w, si
pop r14
jmp 0x14048667e
pop r13
mov r12b, r15b
bswap esi
pop r12
pop rdi
seta bpl
movsx bp, r10b
movzx esi, r12w
pop rsi
movzx ebp, di
pop rbp
jmp 0x14048669f
ret