Function at 0x140be5d67
Capabilities:
Execute anti-debugging instructions

Disassembly:
jo 0x140c18d37
sub r14, 0x40470952
neg r14w
setns byte [rsp + 0x28]
add dword [rsp + 0x20], 0x6e5550ac
mov word [rsp + 0x20], 0x5229
sub word [rsp + 0x48], 0xbe2
cmp byte [rsp + 0x48], 0x13
not bp
cmovbe ebp, dword [rsp + 0x20]
not byte [rsp + 0x28]
js 0x140c18d22
add r10d, r10d
mov rbx, r14
xor byte [rsp + 0x38], 0x3a
not r10w
push r14
neg r15b
neg rbx
mov r11, qword [rsp + 0x28]
or dil, byte [rsp + 1]
bswap ebx
or bl, byte [rsp + 0x44]
setb byte [rsp + 0x18]
movsx r14, di
bswap r15
or r10w, word [rsp + 6]
add rbx, r14
and r15b, r14b
setae dil
sub qword [rsp + 0x18], rbx
add qword [rsp + 0x38], 0xfffffffffff5a619
add r14b, 0x6c
mov r9, qword [rsp + 0x18]
neg bl
neg ebx
neg word [rsp + 0x40]
or r10, rdi
add byte [rsp + 0x40], r15b
sub r9b, 0x8b
setl r9b
mov r15, qword [rsp + 0x48]
mov r14d, 0x58c853ca
lea r14, [rbx*8 + 0x68813795]
and r14, 0xe214672
test byte [rsp], 0x6e
mov r10, rbx
call fcn.140b64f32
xor dword [rsp + 0x28], 0x14443ce2
setge byte [rsp + 0x28]
push qword [rsp + 0x50]
popfq
lea rsp, [rsp + 0x58]
call fcn.140cd4689
setae sil
and si, 0x2f00
bswap esi
not sil
add si, 0x3092
seto sil
mov rsi, qword [rsp + 8]
jae 0x140ba7f83
jno 0x140b4fe41
neg ebp
mov ebp, dword [rsp]
test word [rsp], 0x412c
ja 0x14062a731
call 0x140b15f67
xlatb
shr byte [rbp + 0xc], cl
insd dword [rdi], dx
out 0xc4, eax
xchg esi, eax
sal dword [rbp + 0x57], 0xed
js 0x14062a70f
clc
pop rax
add ebp, dword [rsi - 0x2a]
loope 0x14062a74b
invalid
push rax
add eax, 0xdea89cac
invalid
out 0x94, eax
jle 0x14062a6e7
jne 0x14062a76d
add eax, 0x58f83fa0
retf
invalid
and rbp, qword [rsp + 0x28]
sete byte [rsp]
and al, 0
add rbp, r14
call fcn.140c03b4a
je 0x14062a6d3
lea edx, [rbp - 0x75f25dae]
xchg ebp, eax
push rdx
movabs byte [0x655bf6aaeb728a0d], al
jb 0x14062a738
stosb byte [rdi], al
neg byte [rbx + 0x65]
adc edi, dword [rax]
adc ecx, dword [rsp + rdx*4 + 0x21]
loope 0x14062a6ea
xchg esi, eax
mov ebp, 0x61a22928
xchg ecx, eax
in eax, dx
jne 0x14062a7db
invalid
cmpsd dword [rsi], dword [rdi]
test al, 0x68
adc eax, 0xdcbb8773
sal ah, cl
scasd eax, dword [rdi]
wait
jae 0x14062a71c
outsb dx, byte [rsi]
mov esp, 0x80b070bf
lahf
jb 0x14062a745
sar byte [rbx + 0x4e], 1
adc dword gs:[rdx - 0x62], ebp
pop rcx
xchg esp, eax
cmp esp, dword [rsi + 0x6c]
test dword [rsi - 0x485b3534], edx
invalid
adc byte [rdx + riz*4 + 0x13d51d8], bh
invalid
call fcn.140ba2910
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x18], 0xffffffffbf70bc83
call fcn.1405f6463
mov esi, 0xb71b44ef
fisub dword [rsi]
xchg ebp, eax
mov rsi, qword [rsp + 0x18]
movsx r13w, r13w
lea r13, [r13*4 + 0x47c87018]
pop r13
jno 0x140b232b2
setno byte [rsp + 0x18]
not dword [rsp + 0x18]
or word [rsp + 0x20], 0x3a0
test byte [rsp + 0x20], 0x88
jae 0x140b0ef69
retf 0xdec4
neg cl
not rcx
movabs r11, 0x72387561368a0e51
cmp r11d, ecx
je 0x140b1cd3a
setg cl
neg r11d
test ecx, 0x4f753326
lea r11, [r11 + r11*4 + 0x641923f4]
mov r11b, 0x9a
ja 0x140b4fe47
mov edx, r11d
mov edx, r11d
setno dl
sub dx, 0x254f
js 0x140c34f55
xor dx, dx
push r8
mov dl, 0x2c
xor edx, 0x20385c6d
mov r11d, 0x56534526
add qword [rsp + 8], 0xfffffffffff8fdaf
bswap r11d
mov r8, rdx
push r12
call fcn.140b802ba
invalid
call fcn.140b68f98
call fcn.1406415aa
wait
stc
mov ah, 0x47
clc
idiv dword [0x10545160e]
xor dh, cl
pushfq
add edi, dword [rbx]
mov word [rdi], cs
xchg cl, bl
cli
outsd dx, dword [rsi]
xchg edx, eax
mov ecx, 0x152e227f
movsd dword [rdi], dword [rsi]
mov cl, 0x89
invalid
mov rbp, qword [rsp + 0x18]
test cl, 0x77
setns cl
and cx, cx
mov cl, 0xda
neg cl
lea rcx, [rcx*2 + 0x48fb0d61]
add cl, cl
test ch, cl
jl 0x140b37929
not rcx
cmp cl, 0x99
movabs rcx, 0x3d5b154a3f85332e
sete cl
bswap rcx
not rcx
call fcn.140644035
call fcn.14061cc1a
add qword [rsp], 0xffffffffbf4a4edb
xor word [rsp + 0x38], 0x25e0
add qword [rsp + 0x18], 0xffffffffbf502f89
mov byte [rsp + 0x10], 0xee
call fcn.140b000c6
and r12, r14
neg ebp
cmp r12, 0x2f2b39ce
not r12b
call fcn.140b8ed4c
mov ecx, 0x7e47a1e6
xor dword [rbx - 0x7a152e2b], edi
jne 0x140b214c0
and esp, dword [rdx]
retf 0xdbb1
pop rcx
cmp al, 0x4a
loopne 0x140b21514
invalid
ret 0x4c67
jns 0x140613a76
add r15w, 0xd92
and r15, r15
test r15d, 0x36c35348
lea r15, [r15*2 + 0xb6742c9]
lea r15, [r15*8 + 0x20877b95]
setb r15b
cmp r15, 0x35256d99
call fcn.140ae7ef5
not r9b
test dword [rsp + 0x21], r9d
mov word [rsp + 0x20], r9w
jge 0x14068bd4c
add word [rsp + 0x20], 0x3584
pop r15
neg ebp
cmp qword [rsp + 0x18], 0x7e764c6f
mov rbp, qword [rsp + 8]
mov qword [rsp + 0x10], 0x29896d6d
call fcn.140c20d40
push rdi
push r9
movabs r9, 0x3b8b535b6352162b
call fcn.140b39a58
add byte [rsp], 0xe
neg dword [rsp]
xor word [rsp], 0x5e6c
cmp word [rsp], 0x1396
ja 0x140b6b3dc
neg r11w
mov qword [rsp + 0x10], 0x7a0a3985
call fcn.140b4605d
add dword [rsp], 0x24f858ce
and dword [rsp], 0x16975331
neg word [rsp]
push qword [rsp + 0x18]
popfq
lea rsp, [rsp + 0x28]
call fcn.140ce1315
cmp r15, 0x7e7e5516
push r15
push r9
push r14
movabs r9, 0x61600f8121055572
movzx edx, byte [rsp + 0x13]
lea r9, [rdx + rdx*8 + 0x469f28a1]
movsx rdx, word [rsp + 0x10]
mov r9, qword [rsp + 0x10]
js 0x140be5d67
mov r14, qword [rsp + 0x10]
sub r9w, r14w
mov dl, byte [rsp + 0x12]
movzx r14w, r15w
test word [rsp + 0x14], r14w
push rsi
mov r15, qword [rsp + 0x30]
movabs rsi, 0x1c9e256b44d803c8
not edx
mov r14, qword [rsp + 0x18]
seto byte [rsp + 0x18]
xor dx, word [rsp + 0x18]
sub si, r9w
or edx, esi
pop rsi
add r14b, r14b
call 0x140be5d67
rcl dword [rdx - 7], cl
push rsp
ja 0x140b3d6c8
push rcx
sti
sub al, 0x3b
invalid
call fcn.140b05688
add qword [rsp + 8], rcx
neg r13
or r13b, byte [rsp + 0xd]
mov word [rsp], r13w
mov word [rsp], 0x967
not word [rsp + 8]
not dword [rsp]
test cl, cl
bswap r13d
movsx r13w, r15b
not r13
mov rcx, qword [rsp + 0x18]
not dword [rsp + 8]
cmovb r15, qword [rsp]
seta byte [rsp + 8]
call fcn.14061564a
add qword [rsp + 0x20], 0x65ed06b7
jns 0x1406368e7
mov bh, dh
cmp byte [rbx + r11*8 + 0x549f039], bpl
invalid
jge 0x140b3559a
jl 0x140b93cb3
call fcn.140b01b81
mov r8, qword [rsp + 0x18]
mov r10, qword [rsp + 0x10]
sets byte [rsp + 8]
sub r10b, 0xf6
add qword [rsp + 0x10], 0x3fac23d1
or qword [rsp + 8], 0x559675d5
add dword [rsp + 0x10], 0x63da7567
neg r15d
or qword [rsp + 0x10], 0x4c4518d9
not dword [rsp + 8]
jle 0x140b5d6a7
neg r15d
not byte [rsp + 0x10]
and r15d, r15d
not r15
xor dword [rsp + 0x10], 0x207f6984
cmp r10b, r15b
jge 0x140ba8055
lea r10, [r15 + r15*8 + 0x15435ca4]
lea r10, [r10*4 + 0x2dc0448b]
xor word [rsp + 8], 0x68bc
mov r10, qword [rsp]
add r15b, 0x64
cmp word [rsp + 0x10], 0x655d
bswap r15
jo 0x140b30021
mov bh, dh
invalid
test qword [rsp], 0x35967d7f
not word [rsp]
setns byte [rsp]
jg 0x140b3d623
mov rbp, qword [rsp + 0x10]
add qword [rsp + 0x48], 0xffffffffbf3e497a
test qword [rsp + 0x20], r10
jl 0x140b0a1f0
setl r9b
add qword [rsp], 0xffffffffffa73bcc
call fcn.140b4dc06
add qword [rsp + 0x10], 0x4fd065
push qword [rsp]
popfq
lea rsp, [rsp + 0x10]
ret
jle 0x140b5d63e
and dword [rsp + 0x10], r15d
neg word [rsp + 0x10]
not byte [rsp + 0x18]
call fcn.140aeba58
bswap r14d
popfq
movsxd r14, r14d
mov r14d, 0x239222df
call fcn.140bee8be
add al, 0xd7
invalid
or r14b, byte [rsp + 0xd]
xor dl, 0x18
setne byte [rsp + 0x28]
neg dl
not r8
mov rdx, qword [rsp + 0x20]
mov byte [rsp + 8], 0xb5
jae 0x1406004f7
jle 0x140605c90
call fcn.140c2f96f
xor qword [rsp + 0x98], 0x4ea519cb
sub byte [rsp + 0x98], 0xc5
push qword [rsp + 0xd8]
popfq
lea rsp, [rsp + 0xf8]
call fcn.140cc6afe
mov rdx, r9
or sil, sil
test r8, 0x492b06e8
movabs r15, 0x7a5b1c5b03a7204e
not r13b
mov r11, qword [rsp + 0x10]
bswap esi
setae r13b
call fcn.140becc7d
jo 0x140be299f
jo 0x140c1e46f
call fcn.140c1e466
push r8
je 0x140600504
movabs r8, 0x597d2a56677c5bae
test r8b, 0x4b
not r8b
push r14
push 0x763a7e85
push rdx
jo 0x140c21d15
movabs rdx, 0x2ac85c4e620834a5
neg r9d
mov r14, r9
lea rdx, [rdx + r8*4 + 0x62fa4c91]
push rbp
call fcn.140b86c3e
not dword [rsp + 0x48]
xor qword [rsp + 0x48], rbp
add r14, 0x3c452592
mov r14, qword [rsp + 0x50]
test dword [rsp + 0x20], ebp
movsxd rbp, ebp
jb 0x140c18d7a
mov qword [rsp + 0x48], 0x6f7225cf
not bp
sets byte [rsp + 0x20]
test dword [rsp + 0x28], 0x3bf32c30
setg byte [rsp + 0x20]
or dword [rsp + 0x20], 0x60a91bde
jns 0x140c07ba2
mov rbp, qword [rsp + 0x38]
mov byte [rsp + 0x48], 0x36
call fcn.140c1dbca
call fcn.140611e3a
call fcn.14061cdfd
and word [rsp + 0x30], 0x43b3
add byte [rsp + 0x30], 0xb4
setb byte [rsp + 0x58]
jae 0x140c03b59
not byte [rsp + 0x30]
test qword [rsp + 0x30], 0x56a42cd
setl byte [rsp + 0x58]
cmp word [rsp + 0x38], 0x1827
not word [rsp + 0x38]
mov dword [rsp + 0x38], 0x2b194290
call fcn.140c20d2e
push r11
pushfq
movabs r11, 0x46a544136dd92849
push rdx
movabs rdx, 0x163658eb134e400f
neg r11w
xor dx, r11w
test r11, r11
movzx r11, dx
call 0x140b0a225
je 0x140c34fc4
push rbx
movabs r11, 0x67aa45b153882df2
pushfq
and r11, 0x6eb12f4b
sub r11b, 0x59
xor r11, 0x618c4fe7
neg r11b
push r12
movabs r12, 0x6f2a5aff4ad3728e
push rcx
mov r12, r11
movabs rcx, 0x70e075a502164371
push rbp
bswap r11d
movabs rbp, 0x373b0ae70ae70a8b
mov ecx, dword [rdx]
out 0xa, eax
out 0xa, eax
cmp esi, dword [rdi]
mov cx, bp
mov r11, qword [rsp + 0x20]
mov qword [rsp + 0x20], 0xffffffffebd3ab83
push r9
bswap rcx
or cx, 0x2f88
test r12b, 0x9d
movabs r9, 0x665c351b06b90441
movzx ebp, bpl
mov r9b, bpl
jo 0x140b213b7
push rcx
movzx ebp, r9w
call fcn.140b68dd3
push rdi
call fcn.140afaf9c
test eax, 0xba495241
push rdx
pop rbp
out 0x66, eax
push rbp
and dword [rsi], ebp
pushfq
add r10, 0xa56122f
and r10d, 0x42ab5a15
test r10w, 0x550a
push r15
jb 0x140b5d663
setb r10b
not r10w
jb 0x140c35040
movabs r15, 0x38236e8550ce7b5d
sub r15d, 0x3cf7411b
or r10w, 0x2286
call fcn.14063bcda
repne scasw ax, word [rdi]
push r15
pushfq
movabs r15, 0x33d319b10926270f
push rdi
push r9
or r15d, r15d
mov r9, r15
sets r15b
add r15w, 0x6475
and r9d, 0x77646a42
movabs rdi, 0x70270cbd5a5f0cf7
add r15b, 0x1b
test r15d, 0x5f1f0e9a
lea r15, [r9 + rdi*2 + 0x523e6a52]
mov r15, qword [rsp + 0x18]
mov qword [rsp + 0x18], 0xffffffff9c2c4024
sub al, 0x9c
lea rdi, [r9 + rdi*2 + 0x3bc11261]
not rdi
not r9
push rdx
lea r9, [r9 + r9 + 0x323629cc]
js 0x140b414b0
mov rdx, r9
seta dil
call fcn.140619f4f
repne scasw ax, word [rdi]
call fcn.140612dea
and eax, ebp
loope 0x140c350b8
invalid