Function at 0x2b28cb
Capabilities:
Execute anti-debugging instructions

Disassembly:
call rax
mov rbx, qword [rsp + 0x40]
shld ax, r10w, 0xa8
or rdi, r13
mov rax, rsi
stc
add rsp, 0x20
jmp 0x2b2d30
call rax
mov rbx, rax
test r8d, ebp
mov qword [rsp + 0x50], rax
test rax, rax
jmp 0x2b2972
mov qword [rsp + 8], rbx
sete r9b
push rbp
movzx ax, sil
push rsi
push rdi
setae ah
sub rsp, 0x20
cmp r12w, bx
xor esi, esi
not al
sub dl, r14b
mov rbp, rcx
movsx cx, dh
lea r9, [rsp + 0x48]
movzx ax, spl
lea rdx, [rsp + 0x50]
rol rcx, cl
cdqe
cmp r11, 0x6aa33f87
lea ecx, [rsi + 0xb]
adc ax, r13w
rcl ah, cl
sub r8d, r8d
movzx eax, si
not ax
movzx ax, r9b
mov qword [rsp + 0x50], rsi
movsxd rax, ebp
movsx ax, bpl
cwde
mov dword [rsp + 0x48], esi
mov rax, qword [0x0027b028]
call rax
mov eax, dword [rsp + 0x48]
stc
cmp sil, 0xaf
jmp 0x2b2950
test eax, eax
je 0x2b2d17
lea edx, [rax + rax]
sub ecx, ecx
nop
not ah
movzx ax, dil
mov rax, qword [0x0027b020]
jmp 0x28aeb6
je 0x2b2d1c
mov r8d, dword [rsp + 0x48]
btc r9w, si
cmp r11, 0x7a286b84
test al, r10b
lea r9, [rsp + 0x48]
adc dh, 0x68
lea ecx, [rsi + 0xb]
bts dx, r9w
ror dh, 0xda
add r8d, r8d
mov rdx, rax
cwde
cbw
mov al, r15b
mov rax, qword [0x0027b028]
call rax
test eax, eax
jmp 0x2b29bb
js 0x2b2d17
lea r10, [0x0028762c]
mov r9, rsi
mov cl, 0x74
shr al, 0x98
sub r10, rbp
rcl ah, 0xa0
nop
movzx r8d, byte [r9 + rbp]
jmp 0x2b29e1
lea rax, [r9 + rbp]
bts rcx, rbp
btr ecx, r15d
rcr ecx, cl
mov ecx, r9d
ror dl, 0x84
movsx rdx, r8w
movzx edx, r10w
movzx edx, byte [r10 + rax]
cmovle ax, cx
cbw
mov eax, 0x25fe0502
jmp 0x2b2a13
rol eax, cl
cmp r9b, 0xf5
stc
clc
add al, r9b
inc r9
cmc
xor dl, al
shrd rax, r15, 0x64
cwde
lea eax, [rdx - 0x41]
cmp r15b, dl
cmp al, 0x19
ja 0x2b2a41
add dl, 0x20
sbb ax, bx
sal ax, cl
lea eax, [r8 - 0x41]
stc
cmp al, 0x19
jmp 0x2b2a4d
ja 0x2b2a57
add r8b, 0x20
test dl, dl
je 0x2b2a68
cmp dl, r8b
je 0x2b29d7
cmp dl, r8b
jb 0x2b2a88
ja 0x2b2a88
mov r8, qword [0x0027b038]
jmp 0x2b2a83
jmp 0x2b2b73
lea r10, [0x0027e574]
rcl cl, cl
sar r9b, 0xd5
bsf r8w, r8w
mov r9, rsi
cqo
clc
rdtsc
sub r10, rbp
nop
movzx r8d, byte [r9 + rbp]
movsx edx, r9w
bt dx, r10w
lea rax, [r9 + rbp]
mov dh, 0x37
bt rcx, 0xd8
mov ecx, r9d
movzx edx, di
clc
btc dx, r14w
movzx edx, byte [r10 + rax]
rcl ah, cl
movsx rax, cx
mov eax, 0x25fe0502
jmp 0x2b2ae2
rol eax, cl
test bl, sil
add al, r9b
jmp 0x2b2aef
inc r9
test r8w, 0x1dd3
cmp r12b, sil
xor dl, al
sub eax, r14d
cmp bp, bp
stc
lea eax, [rdx - 0x41]
cmp al, 0x19
jmp 0x2b2b0e
ja 0x2b2b17
add dl, 0x20
lea eax, [r8 - 0x41]
test r14d, 0x22c5761b
stc
cmp al, 0x19
jmp 0x2b2b2a
ja 0x2b2b3c
add r8b, 0x20
jmp 0x2b2b3c
test dl, dl
jmp 0x2b2b43
je 0x2b2b57
cmp dl, r8b
jmp 0x2b2b51
je 0x2b2aa6
cmp dl, r8b
jmp 0x2b2b5f
jb 0x2b2c0c
ja 0x2b2c0c
mov r8, qword [0x0027b088]
clc
test r8, r8
jmp 0x2b2b7b
je 0x2b2c0c
mov rbx, qword [rsp + 0x50]
mov rdx, rsi
neg r10w
btc r10d, eax
mov r10d, dword [rbx]
jmp 0x2b2b99
test r10, r10
jmp 0x2b2ba1
je 0x2b2d1c
lea rcx, [rbx + 0x18]
nop
clc
add r9w, r14w
mov r9, qword [rcx]
cmp r9, r8
jmp 0x2b2bbc
jae 0x2b2be2
mov eax, dword [rcx + 8]
test r8b, r9b
stc
cmp r14b, r14b
lea rax, [rax + r9]
stc
cmp r13b, r13b
cmp rax, r8
jmp 0x2b2bdc
ja 0x2b2bff
inc rdx
add rcx, 0x128
cmp rdx, r10
jmp 0x2b2bf4
jb 0x2b2bb1
jmp 0x2b2d1c
mov rsi, r9
jmp 0x2b2c07
jmp 0x2b2d1c
mov rbx, qword [rsp + 0x50]
btc di, 0xbd
sar rdi, 0x2d
mov r11, rsi
rcl dil, cl
mov edi, dword [rbx]
jmp 0x2b2c27
test rdi, rdi
je 0x2b2d1c
lea r10, [rbx + 8]
nop
movzx eax, word [r10 + 0x26]
btc rdx, 0x22
mov r9, rbp
bt dx, sp
cmc
ror r8b, cl
sub r9, rax
sal r8b, 0xb
or ecx, esi
lea r8, [rax + r10 + 0x28]
sal ecx, 0xad
sub r9, r10
xchg dx, ax
rdtsc
movsxd rcx, r14d
nop
movzx rdx, r13w
movzx ecx, r14w
mov al, bpl
movzx ecx, byte [r9 + r8 - 0x28]
bswap eax
inc eax
movzx edx, byte [r8]
xchg ah, ah
mov ah, 0x86
movsx ax, bh
inc r8
clc
lea eax, [rcx - 0x41]
test al, r13b
cmp al, 0x19
ja 0x2b2ca3
add cl, 0x20
sal ax, 0x5c
neg ah
lea eax, [rdx - 0x41]
cmp cx, 0x64cb
cmp al, 0x19
jmp 0x2b2cb2
ja 0x2b2cbf
add dl, 0x20
test r15, rsi
clc
test cl, cl
jmp 0x2b2cc6
je 0x2b2cd9
cmp cl, dl
jmp 0x2b2cd3
je 0x2b2c71
cmp cl, dl
jb 0x2b2ce7
jbe 0x2b2d09
inc r11
cmp r11b, 0x13
clc
add r10, 0x128
cmp r11, rdi
jmp 0x2b2cfe
jb 0x2b2c35
jmp 0x2b2d1c
mov rsi, qword [r10 + 0x10]
jmp 0x2b2d12
jmp 0x2b2d1c
mov rbx, qword [rsp + 0x50]
sub edx, edx
mov rcx, rbx
mov rax, qword [0x0027b030]
jmp 0x273717
pop rdi
mov sil, r14b
pop rsi
pop rbp
jmp 0x2b2d3b
ret