Function at 0x14065785d
Capabilities:
Contain obfuscated stackstrings
Execute anti-debugging instructions

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sar ch, cl
sub rsp, 0x98
cdqe
cbw
mov al, r10b
mov byte [rsp + 0x48], 0xe9
movsx rcx, bx
cwde
mov byte [rsp + 0x49], 0xda
cwde
lahf
bswap dx
mov byte [rsp + 0x4a], 0x5f
mov byte [rsp + 0x4b], 0x2e
xchg ch, ch
mov byte [rsp + 0x4c], 4
mov byte [rsp + 0x4d], 0x90
bswap rcx
cmovae cx, ax
cdqe
mov byte [rsp + 0x4e], 0x90
mov rcx, rcx
mov byte [rsp + 0x4f], 0x90
mov byte [rsp + 0x70], 0xc7
mov byte [rsp + 0x71], 0x40
lahf
bswap rax
mov byte [rsp + 0x72], 0x64
mov byte [rsp + 0x73], 1
movzx edx, r9w
bswap ax
mov byte [rsp + 0x74], 0
cwd
cbw
cqo
mov byte [rsp + 0x75], 0
cdqe
rdtsc
cwde
mov byte [rsp + 0x76], 0
mov byte [rsp + 0x77], 0x8b
cqo
mov byte [rsp + 0x78], 0x48
mov dx, dx
mov byte [rsp + 0x79], 0x64
cwde
mov byte [rsp + 0x7a], 0x41
lahf
xchg al, ch
movzx rax, dx
mov byte [rsp + 0x7b], 0x89
mov byte [rsp + 0x7c], 0x4c
cwd
mov byte [rsp + 0x7d], 0x24
mov byte [rsp + 0x7e], 0x2c
movzx ax, r9b
mov byte [rsp + 0x7f], 0xe9
movsx rdx, r8w
mov byte [rsp + 0x80], 0x15
cdq
cwd
cmove dx, si
mov byte [rsp + 0x81], 0xa0
cbw
mov byte [rsp + 0x82], 0xd1
movzx dx, r8b
mov byte [rsp + 0x83], 0xfb
mov byte [rsp + 0x34], 0xe9
movzx rdx, r11w
mov byte [rsp + 0x35], 0x9f
mov byte [rsp + 0x36], 0xb0
cmovle rax, rbx
mov byte [rsp + 0x37], 0x27
cwde
xchg dx, ax
mov byte [rsp + 0x38], 4
mov byte [rsp + 0x39], 0x90
mov dl, r9b
jmp 0x140657995
mov byte [rsp + 0x58], 0xc7
cdqe
mov byte [rsp + 0x59], 0x40
not dx
xchg rdx, rax
mov ecx, 0x2028ef15
mov byte [rsp + 0x5a], 0x64
movsx rcx, r12w
mov byte [rsp + 0x5b], 1
mov byte [rsp + 0x5c], 0
mov byte [rsp + 0x5d], 0
cdq
mov byte [rsp + 0x5e], 0
mov byte [rsp + 0x5f], 0x8b
rdtsc
cwde
not rcx
mov byte [rsp + 0x60], 0x48
movzx rcx, r15w
mov byte [rsp + 0x61], 0x64
xchg dx, cx
movsx dx, dil
mov byte [rsp + 0x62], 0x89
mov byte [rsp + 0x63], 0x4b
xchg ah, ah
mov byte [rsp + 0x64], 0xa8
cwde
movzx cx, sil
cdqe
mov byte [rsp + 0x65], 0xe9
not cx
mov byte [rsp + 0x66], 0x50
mov cl, bpl
cwde
movsx rcx, si
mov byte [rsp + 0x67], 0x4f
movzx rax, r12w
movsx rdx, r12w
movzx dx, r10b
mov byte [rsp + 0x68], 0xd8
cdq
mov byte [rsp + 0x69], 0xfb
mov byte [rsp + 0x50], 0x8b
cbw
lahf
mov byte [rsp + 0x51], 0x48
movsx eax, di
mov byte [rsp + 0x52], 0x64
mov byte [rsp + 0x53], 0x41
lahf
movzx rdx, r8w
mov byte [rsp + 0x54], 0x89
cdq
mov byte [rsp + 0x55], 0x4c
mov byte [rsp + 0x56], 0x24
mov byte [rsp + 0x57], 0x2c
mov byte [rsp + 0x3c], 0x8b
jmp 0x140657a79
mov byte [rsp + 0x3d], 0x48
movsx dx, dh
movsxd rdx, esp
mov byte [rsp + 0x3e], 0x64
cdq
mov byte [rsp + 0x3f], 0x89
mov byte [rsp + 0x40], 0x4b
mov byte [rsp + 0x41], 0xa8
cbw
cdq
mov rax, qword [rsp + 0xa0]
cqo
mov eax, dword [rax + 0xc]
movsx edx, r9w
mov dword [rsp + 0x30], eax
movzx rcx, r11w
cqo
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xa0]
jmp 0x140657ac9
call fcn.1406f6a27
mov qword [rsp + 0x88], rax
cmp bpl, 2
test dh, 0x27
cmp di, bx
cmp qword [rsp + 0x88], 0
jmp 0x140657aee
jne 0x140657b00
xor eax, eax
jmp 0x140657afb
jmp 0x140657d54
mov r9d, 0x20
setns r8b
movzx rdx, ax
mov r8, qword [0x1400aac58]
sete dh
mov edx, dword [rsp + 0x30]
cmovs cx, cx
mov cl, r12b
mov rcx, qword [rsp + 0xa0]
call fcn.1406f703d
mov r9d, 0x20
mov r8, qword [0x1400aaba8]
mov edx, dword [rsp + 0x30]
xchg ecx, ecx
sets cl
movzx ecx, bp
mov rcx, qword [rsp + 0xa0]
jmp 0x140657b56
call fcn.1406f703d
mov r9d, 0x20
mov r8, qword [0x1400aac68]
mov rcx, r15
mov edx, dword [rsp + 0x30]
mov rcx, 0x5a1c1995
mov rcx, rcx
movzx cx, r12b
mov rcx, qword [rsp + 0xa0]
call fcn.1406f703d
mov r9d, 0x20
cqo
bswap r8
movzx edx, r15w
mov r8, qword [str.:_axI]
mov edx, dword [rsp + 0x30]
mov cl, r9b
jmp 0x140657bb1
mov rcx, qword [rsp + 0xa0]
jmp 0x140657bbe
call fcn.1406f703d
cmp dword [rsp + 0xa8], 0
je 0x140657ccc
mov qword [rsp + 0x20], 8
cmovp cx, bx
lea r9, [rsp + 0x48]
mov r8, qword [0x1400aac58]
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xa0]
jmp 0x140657bfb
call fcn.1406f6ee1
mov qword [rsp + 0x20], 0x14
cqo
movzx dx, cl
movsxd rcx, r14d
lea r9, [rsp + 0x70]
mov r8, qword [0x1400aaba8]
cqo
mov edx, dword [rsp + 0x30]
not ch
movsxd rcx, edx
jmp 0x140657c2e
mov rcx, qword [rsp + 0xa0]
call fcn.1406f6ee1
mov qword [rsp + 0x20], 6
lea r9, [rsp + 0x34]
jmp 0x140657c4e
mov r8, qword [0x1400aac68]
movsx rdx, dx
setge dh
bswap cx
mov edx, dword [rsp + 0x30]
movzx ecx, r13w
movsx cx, bpl
movsx ecx, r15w
mov rcx, qword [rsp + 0xa0]
jmp 0x140657c7d
call fcn.1406f6ee1
mov qword [rsp + 0x20], 0x12
movsx r8, dx
lea r9, [rsp + 0x58]
cmovnp dx, sp
movsx dx, r12b
mov r8, qword [str.:_axI]
movsx edx, r10w
setl cl
mov edx, dword [rsp + 0x30]
mov cl, r10b
movsx ecx, ax
mov rcx, qword [rsp + 0xa0]
jmp 0x140657cc2
call fcn.1406f6ee1
jmp 0x140657d4f
mov qword [rsp + 0x20], 8
not r9w
lea r9, [rsp + 0x50]
mov r8, qword [0x1400aac58]
bswap ecx
mov edx, dword [rsp + 0x30]
not ch
bswap cx
mov rcx, qword [rsp + 0xa0]
jmp 0x140657cfd
call fcn.1406f6ee1
mov qword [rsp + 0x20], 6
movsx ecx, si
movsx r8, r12w
cwd
lea r9, [rsp + 0x3c]
cdq
movsx r8w, al
xchg r8, rdx
mov r8, qword [0x1400aac68]
cdq
jmp 0x140657d2f
mov edx, dword [rsp + 0x30]
movsx rcx, si
bswap cx
mov ch, 0x2a
mov rcx, qword [rsp + 0xa0]
jmp 0x140657d4a
call fcn.1406f6ee1
mov eax, 1
add rsp, 0x98
ret