Function at 0x1400d0954
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
movsx r10d, di
btc r10, r10
push rdi
cmovs r10w, ax
push r12
add r10, r10
sar r10w, 0xbd
push r13
push r14
push r15
sub rsp, 0xa0
bswap r14d
shr r10w, 9
mov qword [rsp + 0x68], 0xfffffffffffffffe
sar r14b, cl
cmp r15, 0xffffffffea3673ae
stc
mov qword [r11 + 0x18], rbx
jmp 0x1400d09ad
mov qword [r11 + 0x20], rsi
mov r14, r9
bt bx, di
mov r15, r8
mov rbx, rdx
mov r10, rcx
test dx, 0x5796
cmp r11b, 0x22
sub r13d, r13d
mov qword [r11 - 0x48], r13
mov qword [r11 - 0x40], r13
mov qword [r11 - 0x38], r13
test rdx, rdx
jmp 0x1400d09e1
je 0x1400d1377
movzx esi, byte [rsp + 0x118]
shr r8w, 0xc
add ax, 0x598b
movzx eax, sil
xadd dil, r12b
and r12w, dx
neg al
dec rdi
bswap r8d
sbb ecx, ecx
xadd al, r9b
and ecx, 2
cmp ah, 1
or al, 0x38
cmc
mov eax, r13d
xchg di, r12w
stc
dec edi
movzx r12d, byte [rsp + 0x128]
sal r9b, cl
test r12b, r12b
movzx r9d, bp
movzx r8w, r8b
setne al
shld di, r8w, 0x8d
mov r9b, 0
or ecx, eax
mov dword [rsp + 0x20], ecx
movzx cx, r12b
jmp 0x1400d0a59
lea r9, [r11 - 0x48]
not r8w
bswap di
movsx rcx, ax
mov rdi, qword [rsp + 0x120]
mov r8, rdi
cmove rcx, r10
movzx rcx, r12w
jmp 0x1400d0a80
mov rcx, r10
call fcn.1400cdb3b
test al, al
jmp 0x1400d0a8f
je 0x1400d135d
mov rdx, qword [rsp + 0x90]
test rdx, rdx
jne 0x1400d0ad9
mov ebx, 0x80000006
mov eax, 0xc000000f
shl ch, 0xbf
test rdi, rdi
movsx ecx, r10w
mov cx, 0x959f
movsx rcx, r10w
cmovne ebx, eax
mov rcx, qword [rsp + 0x80]
call fcn.1400329c0
mov eax, ebx
jmp 0x1400d1435
mov ecx, dword [rsp + 0x110]
test r12b, 4
mov r8d, ecx
sub r8d, 2
je 0x1400d0b3f
sub r8d, 1
jmp 0x1400d0afa
je 0x1400d0b35
cmp r8d, 0x22
je 0x1400d0b26
mov rcx, qword [rsp + 0x80]
call fcn.1400329c0
mov eax, 0xc0000002
jmp 0x1400d0b21
jmp 0x1400d1435
mov esi, 0x68
jmp 0x1400d0b30
jmp 0x1400d0b44
mov esi, 0x5e
jmp 0x1400d0b44
mov esi, 0x44
mov edi, dword [rsp + 0x108]
cmp r14b, r8b
cmp edi, esi
jmp 0x1400d0b55
jae 0x1400d0b77
mov rcx, qword [rsp + 0x80]
call fcn.1400329c0
mov eax, 0xc0000004
jmp 0x1400d0b72
jmp 0x1400d1435
mov r8d, r13d
sub r9, r13
btr r9w, r13w
mov r9d, r13d
jmp 0x1400d0b8a
test rdx, rdx
jmp 0x1400d0b92
je 0x1400d0c3f
lea ebx, [rsi + 7]
adc ax, r15w
sbb al, 0xa8
shr r11b, 0x33
mov r15, qword [rsp + 0x80]
sal ah, 0xb1
or r11b, 0x8c
mov r10, r15
mov r11, rdx
rcr edx, cl
sal dl, 0x26
adc edx, r10d
nop
dec dl
shr dx, cl
shl dx, 0x35
mov eax, r8d
sal dx, cl
sar dl, cl
rol dx, 0x92
neg eax
and eax, ebx
add r8d, eax
dec rax
movzx eax, word [r10]
lea edx, [rax + rsi + 7]
dec eax
mov eax, r9d
cmp cx, 0xed10
neg eax
and edx, eax
add r9d, edx
clc
jmp 0x1400d0c01
add r10, 0x18
test di, 0x3eb2
stc
sub r11, 1
jmp 0x1400d0c14
jne 0x1400d0bcc
cmp edi, r8d
jmp 0x1400d0c22
jae 0x1400d0c4c
mov rcx, r15
call fcn.1400329c0
mov eax, 0xc0000023
jmp 0x1400d0c3a
jmp 0x1400d1435
mov r15, qword [rsp + 0x80]
jmp 0x1400d0c56
mov rdx, qword [rsp + 0x90]
clc
cmc
cmp edi, r9d
jmp 0x1400d0c5e
sbb ebx, ebx
cmc
test r13w, 0x888f
and ebx, 0x80000005
test r10w, 0x6828
cmp esp, 0x9c97499d
jmp 0x1400d0c7e
mov dword [rsp + 0xd8], ebx
test al, r15b
stc
cmp r10w, 0x86be
sub ecx, 2
jmp 0x1400d0c97
je 0x1400d1109
sub ecx, 1
jmp 0x1400d0ca5
je 0x1400d0ec6
cmp ecx, 0x22
je 0x1400d0cc3
mov ebx, 0xc0000002
jmp 0x1400d0cbe
jmp 0x1400d1344
mov r12d, r13d
sub ax, r10w
shr r14w, cl
mov ah, bl
mov r14, r13
mov rax, r13
mov qword [rsp + 0x60], rax
cmp rax, rdx
jae 0x1400d0e97
lea rcx, [rax + rax*2]
rdtsc
movsx rbx, r8w
xor dl, r9b
lea rdx, [rsp + 0x70]
bts di, ax
btr r8w, 0x3b
mov rax, qword [r15 + rcx*8]
btr di, r12w
mov qword [rdx], rax
mov rax, qword [r15 + rcx*8 + 8]
mov qword [rdx + 8], rax
mov rax, qword [r15 + rcx*8 + 0x10]
and r8w, 0xe936
mov rcx, qword [rsp + 0xd0]
rcl rbx, cl
cmc
btr r8, rbp
mov ecx, dword [rcx + 8]
test r15b, dl
bt rdi, r15
mov edi, dword [rax + 4]
rol r15w, cl
xor edi, ecx
mov ebx, dword [rax + 8]
clc
cbw
xor ebx, ecx
sub r8d, 0x9c1eacbb
mov eax, r12d
sal cx, cl
xor r15d, 0x71a7ef11
test sp, r9w
neg eax
and eax, 7
xor cl, r10b
add r12d, eax
mov r15d, r12d
shld ecx, r8d, 0xbf
add r15, qword [rsp + 0x100]
mov r8d, esi
sub edx, edx
mov cx, 0x83b5
movsx rcx, r9w
mov rcx, r15
call fcn.140038410
mov r11d, ebx
setge bl
mov qword [r15 + 0x28], r11
sub ax, cx
mov qword [r15 + 0x30], r11
rcr rbx, cl
btr bx, r9w
mov eax, 0x10
bsf cx, sp
shl bl, 0xa9
xor bx, r10w
test edi, edi
mov ecx, 1
cmovne eax, ecx
add bl, r15b
neg bx
mov dword [r15 + 0x38], eax
movzx eax, word [rsp + 0x70]
sub bl, 0x3c
bt bx, 0x1e
rcl bh, 0xba
mov dword [r15 + 0x3c], eax
movsxd rbx, ebx
btr rbx, 0x3a
bswap bx
mov ebx, dword [rsp + 0xd8]
jmp 0x1400d0dfb
cmp ebx, 0x80000005
jmp 0x1400d0e06
je 0x1400d0e32
mov r8, rax
cmovl ecx, esi
mov cl, 0xbc
cwd
lea rcx, [r15 + 0x68]
mov rdx, qword [rsp + 0x78]
jmp 0x1400d0e24
call fcn.140038b20
add r12d, dword [r15 + 0x3c]
jmp 0x1400d0e32
add r12d, esi
clc
jmp 0x1400d0e3b
test r14, r14
jmp 0x1400d0e43
je 0x1400d0e5f
mov eax, r15d
cdq
jmp 0x1400d0e57
sub eax, r14d
not dl
mov dword [r14], eax
mov r14, r15
xchg r15w, dx
mov rax, qword [rsp + 0x60]
cmovnp rdx, r12
mov r15b, 0x96
movsxd rdx, r11d
inc rax
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x90]
mov r15, qword [rsp + 0x80]
jmp 0x1400d0e92
jmp 0x1400d0cdb
mov eax, r12d
movzx cx, dl
jmp 0x1400d0ea3
mov rcx, qword [rsp + 0xf8]
jmp 0x1400d0eb0
mov qword [rcx + 8], rax
jmp 0x1400d0eb9
mov dword [rcx], r13d
jmp 0x1400d0ec1
jmp 0x1400d1344
mov r12d, r13d
rcr al, cl
rcr ah, 0x2e
mov r14, r13
rol al, cl
bt eax, esi
mov rax, r13
cmp sil, 0xbb
jmp 0x1400d0ee2
mov qword [rsp + 0x60], rax
cmp rax, rdx
jmp 0x1400d0eef
jae 0x1400d10e4
lea rcx, [rax + rax*2]
cqo
neg r8w
shl di, 0x29
lea rdx, [rsp + 0x70]
cdqe
shrd r8d, eax, 0x3e
bsf rax, rsi
mov rax, qword [r15 + rcx*8]
bts r8d, r14d
rol bh, 4
mov qword [rdx], rax
btc r8d, 0
mov rax, qword [r15 + rcx*8 + 8]
xchg dil, bl
test r15w, dx
mov qword [rdx + 8], rax
inc r8w
shl di, 0x35
mov rax, qword [r15 + rcx*8 + 0x10]
mov rcx, qword [rsp + 0xd0]
movzx di, r12b
or ebx, esi
shr ebx, cl
mov ecx, dword [rcx + 8]
xor r15b, r9b
rol r15b, cl
bswap r8
mov edi, dword [rax + 4]
setnp bl
xor edi, ecx
sbb r15w, 0x8bad
sal r15b, cl
mov ebx, dword [rax + 8]
xor ebx, ecx
mov eax, r12d
movsx cx, r8b
bt r15w, 0xb2
dec r15
neg eax
bsf r8d, r14d
rcl r8b, 0x10
add r15, 0x618cd9ac
and eax, 7
sar r15b, cl
add r12d, eax
mov r15d, r12d
movzx r8, sp
xor r8w, 0x31a5
and ch, 0x10
add r15, qword [rsp + 0x100]
mov r8d, esi
ror ch, cl
stc
cmovl rcx, rsi
xor edx, edx
mov rcx, r15
jmp 0x1400d0fcd
call fcn.140038410
mov r11d, ebx
sal bl, 0x9c
btr cx, r14w
rcr ch, cl
mov qword [r15 + 0x28], r11
clc
mov qword [r15 + 0x30], r11
movsx ecx, r10w
mov eax, 0x10
add rbx, r15
mov bh, bl
test edi, edi
movzx bx, cl
not bh
mov ch, 0xa7
mov ecx, 1
movsx rbx, r9w
cmovne eax, ecx
sub bl, r15b
ror bh, 0x2f
sar bh, cl
mov dword [r15 + 0x38], eax
bts bx, dx
cmp cl, r10b
sbb bl, bpl
movzx eax, word [rsp + 0x70]
btr ebx, 0x38
cmovbe bx, bx
mov dword [r15 + 0x3c], eax
xor bl, spl
ror bx, 0x1f
mov ebx, dword [rsp + 0xd8]
cmp spl, 0x15
jmp 0x1400d104b
cmp ebx, 0x80000005
je 0x1400d1074
mov r8, rax
lea rcx, [r15 + 0x5e]
movsxd rdx, r10d
mov rdx, qword [rsp + 0x78]
jmp 0x1400d106b
call fcn.140038b20
add r12d, dword [r15 + 0x3c]
add r12d, esi
cmp dh, 0xbe
test r14, r14
je 0x1400d109a
mov eax, r15d
bsr dx, r9w
rcl dh, 0x33
shld dx, r9w, 0x24
sub eax, r14d
mov dword [r14], eax
mov r14, r15
inc dh
movsx rdx, r8w
mov r15w, 0xc7bd
mov rax, qword [rsp + 0x60]
inc rax
movzx rdx, r11w
mov r15d, 0xcab715b9
setle r15b
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x90]
movsxd r15, r10d
cmovs r15d, r15d
mov r15, qword [rsp + 0x80]
jmp 0x1400d10df
jmp 0x1400d0ee7
mov eax, r12d
movzx rcx, r9w
mov rcx, qword [rsp + 0xf8]
jmp 0x1400d10f8
mov qword [rcx + 8], rax
mov dword [rcx], r13d
jmp 0x1400d1104
jmp 0x1400d1344
mov r12d, r13d
cmovb r14w, r14w
sal ah, cl
mov r14, r13
mov rax, r13
mov qword [rsp + 0x60], rax
cmp cx, sp
nop
cmp rax, rdx
jmp 0x1400d112a
jae 0x1400d131e
lea rcx, [rax + rax*2]
lahf
lea rdx, [rsp + 0x70]
mov rax, qword [r15 + rcx*8]
mov qword [rdx], rax
ror dil, cl
mov rax, qword [r15 + rcx*8 + 8]
setno r8b
mov qword [rdx + 8], rax
mov rax, qword [r15 + rcx*8 + 0x10]
bts r15w, si
setno dil
shld r15, rdx, 0xaa
mov rcx, qword [rsp + 0xd0]
mov ecx, dword [rcx + 8]
movzx ebx, r15w
add r8, 0x520b40ad
mov edi, dword [rax + 4]
rol r15w, cl
bt r15, rdi
movsx r8, ax
xor edi, ecx
test r9w, r10w
sbb r8w, 0x3a26
add r15w, ax
mov ebx, dword [rax + 8]
rol al, cl
cwde
rol r8w, 0xb3
xor ebx, ecx
inc ah
jmp 0x1400d11ad
mov eax, r12d
jmp 0x1400d11ba
neg eax
movsx r8, r8w
movzx ecx, r8w
neg r15w
and eax, 7
movsx r15d, si
movsx rcx, r12w
adc r8b, 0x24
add r12d, eax
shld r15d, esi, 0x28
dec r15
neg ch
mov r15d, r12d
add r15, qword [rsp + 0x100]
adc r8w, r14w
shr r8b, cl
mov r8d, esi
neg ecx
xchg cl, cl
xor edx, edx
mov rcx, r15
jmp 0x1400d1207
call fcn.140038410
mov r11d, ebx
bts bx, r15w
mov qword [r15 + 0x28], r11
sar rbx, cl
rcl bh, 0x15
movsx ebx, cx
mov qword [r15 + 0x30], r11
cbw
clc
mov eax, 0x10
rcr cx, cl
test edi, edi
movsx ecx, sp
movzx ebx, di
movsx rcx, r10w
mov ecx, 1
cmovne eax, ecx
movzx bx, bpl
movzx ebx, sp
mov dword [r15 + 0x38], eax
clc
movzx eax, word [rsp + 0x70]
bt bx, r8w
cmp ah, ah
sub bl, 0x10
mov dword [r15 + 0x3c], eax
xor rbx, 0x29d2d84
mov ebx, dword [rsp + 0xd8]
test ebp, esi
cmp ebx, 0x80000005
jmp 0x1400d127f
je 0x1400d12ad
mov r8, rax
lea rcx, [r15 + 0x44]
movzx dx, r10b
mov rdx, qword [rsp + 0x78]
jmp 0x1400d129b
call fcn.140038b20
add r12d, dword [r15 + 0x3c]
cmp ecx, 0x389abe21
test spl, r11b
add r12d, esi
clc
test r14, r14
je 0x1400d12d9
mov eax, r15d
add dl, 0x28
sbb dl, 0x92
xchg edx, edx
sub eax, r14d
movsxd rdx, esi
movzx rdx, r8w
inc dx
mov dword [r14], eax
inc edx
lahf
cdq
mov r14, r15
bswap ax
mov rax, qword [rsp + 0x60]
movzx r15, r13w
cmovle rdx, r10
inc rax
mov dl, 7
movsx r15d, dx
movsxd r15, r12d
mov qword [rsp + 0x60], rax
movsx dx, ah
mov rdx, qword [rsp + 0x90]
movsxd r15, r14d
mov r15, qword [rsp + 0x80]
jmp 0x1400d1319
jmp 0x1400d1122
mov ecx, r12d
movsxd rdx, edi
xchg dh, dh
mov rdx, qword [rsp + 0xf8]
mov qword [rdx + 8], rcx
movsx cx, r15b
cmovno rcx, rcx
xchg rcx, rcx
mov dword [rdx], r13d
mov rcx, rbp
mov rcx, r15
jmp 0x1400d134c
call fcn.1400329c0
mov eax, ebx
jmp 0x1400d1358
jmp 0x1400d1435
mov r13, qword [rsp + 0x80]
mov r10, qword [rsp + 0xd0]
jmp 0x1400d1372
jmp 0x1400d1398
mov r12b, byte [rsp + 0x128]
mov rdi, qword [rsp + 0x120]
movsxd r9, ebp
mov sil, byte [rsp + 0x118]
jmp 0x1400d1398
mov byte [rsp + 0x50], r12b
mov qword [rsp + 0x48], rdi
cdq
mov byte [rsp + 0x40], sil
cdq
cwde
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0x38], eax
cmova edx, ecx
cqo
rdtsc
mov eax, dword [rsp + 0x108]
movsx r8d, cx
movzx edx, si
mov dword [rsp + 0x30], eax
mov cx, di
movsxd rdx, eax
mov rax, qword [rsp + 0x100]
not edx
mov qword [rsp + 0x28], rax
movzx r8w, sil
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x20], rax
movzx r8, r8w
movzx r9d, r8w
mov r8b, 0x3e
mov r9, qword [rsp + 0xf0]
movzx edx, cx
cqo
cdq
mov r8, r14
mov rdx, r15
mov cl, 7
mov rcx, rbx
call qword [r10 + 0x60]
mov ebx, eax
jmp 0x1400d1426
mov rcx, r13
jmp 0x1400d142e
call fcn.1400329c0
mov eax, ebx
lea r11, [rsp + 0xa0]
bswap r12w
movsxd r14, edx
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
not r13b
cmovne r14d, ebp
mov r12b, 0xb2
pop r14
pop r13
mov r12b, 0x81
pop r12
movsx di, dl
movsxd rdi, ebx
movsx rdi, r14w
pop rdi
jmp 0x1400d1475
ret