Function at 0x1402ad8e8
Capabilities:
Execute anti-debugging instructions

Disassembly:
add byte [rax], al
mov rax, rdi
mov edi, dword [rsp + 0x10]
push rax
xchg edi, eax
pop rdi
cmp dword [rsp + 4], eax
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x57]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x14020d980
movsxd rax, dword [rsp + 0xc]
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x15]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rax
mov rax, qword [rsp + 0x18]
push rcx
xchg rcx, rax
pop rax
lea rax, [rcx + rax*4]
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x19]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
mov qword [rsp + 0x20], rax
pushfq
add rbp, 8
popfq
lea rbp, [rbp - 8]
movsxd rax, dword [rsp + 4]
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x72]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
movsxd rcx, dword [rsp + 4]
lea rax, [rax]
xchg rdx, rbx
mov rbx, qword [rsp + 0x20]
push rdx
xchg rdx, rbx
pop rbx
movzx eax, byte [rdx + rax]
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x49]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
mov byte [rsp + rcx + 0x14], al
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 7]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x14021e310
pushfq
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x7b]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
xchg rdi, rax
lea rsp, [rsp - 8]
mov qword [rsp], rdi
mov rdi, rax
mov rax, qword [rsp]
xchg rdx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rax
mov rax, rdx
mov rdx, qword [rsp]
rdtsc
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x40]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
and rax, 1
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x32]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rdx, rax
xchg qword [rsp], rax
xchg rdx, rax
lea rsp, [rsp + 8]
xchg rdx, rax
xchg qword [rsp], rdx
xchg rdx, rax
lea rsp, [rsp + 8]
je 0x140206690
jne 0x140237f98
jmp 0x14020668e
add byte [rax], al
popfq
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x48]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
je 0x1402158c0
jne 0x1402158c0
jmp 0x1402158be
add byte [rax], al
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x57]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x140205c58
jne 0x140205c58
jmp 0x140205c56
add byte [rax], al
mov rax, rcx
mov ecx, dword [rsp + 0x14]
push rax
xchg ecx, eax
pop rcx
mov rcx, rax
mov eax, dword [rsp]
push rcx
xchg ecx, eax
pop rax
push rax
push rbx
mov rbx, qword [rsp + 8]
xor ecx, ebx
mov rbx, qword [rsp]
lea rsp, [rsp + 0x10]
mov rax, rsi
mov esi, ecx
push rax
xchg esi, eax
pop rsi
mov dword [rsp], eax
pushfq
add rbp, 0x55
popfq
lea rbp, [rbp - 0x55]
mov rax, rdx
mov edx, dword [rsp]
push rax
xchg edx, eax
pop rdx
shr eax, 0xd
lea rsi, [rsi]
mov rcx, rax
mov eax, dword [rsp]
push rcx
xchg ecx, eax
pop rax
shl ecx, 0x13
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x74]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
or eax, ecx
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x61]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
mov dword [rsp], eax
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x23]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x1402158c0
add byte [rax], al
mov rax, rcx
mov ecx, dword [rsp + 0xc]
push rax
xchg ecx, eax
pop rcx
shl eax, 2
push rax
mov rax, qword [rsp + 7]
pop rax
mov rcx, rax
mov eax, dword [rsp + 0x48]
push rcx
xchg ecx, eax
pop rax
push rax
cmp ecx, dword [rsp]
pushfq
not qword [rsp + 8]
inc qword [rsp + 8]
add ecx, dword [rsp + 8]
popfq
lea rsp, [rsp + 8]
mov rax, rdx
mov edx, ecx
push rax
xchg edx, eax
pop rdx
mov dword [rsp + 0x10], eax
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x39]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
cmp dword [rsp + 0x10], 0
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x4d]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
je 0x14022d1a0
mov dword [rsp + 4], 0
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x23]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x14021fe18
and eax, dword [rax]
popfq
pushfq
add rbp, 0x1e
popfq
lea rbp, [rbp - 0x1e]
je 0x14021e310
jne 0x14021e310
jmp 0x14021e30e
add byte [rax], al
popfq
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x67]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
je 0x14020d980
jne 0x14020d980
jmp 0x14020d97e
add byte [rax], al
mov rax, rcx
mov ecx, dword [rsp]
push rax
xchg ecx, eax
pop rcx
add rsp, 0x30
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x29]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rdi
xchg qword [rsp], rcx
xchg rcx, rdi
lea rsp, [rsp + 8]
ret
add byte [rax], al
mov rax, rdi
mov edi, dword [rsp + 0x14]
push rax
xchg edi, eax
pop rdi
mov rcx, rax
mov eax, dword [rsp]
push rcx
xchg ecx, eax
pop rax
push rax
push rdx
mov rdx, qword [rsp + 8]
xor ecx, edx
mov rdx, qword [rsp]
lea rsp, [rsp + 0x10]
mov rax, rdx
mov edx, ecx
push rax
xchg edx, eax
pop rdx
mov dword [rsp], eax
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x2e]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
mov rax, rcx
mov ecx, dword [rsp]
push rax
xchg ecx, eax
pop rcx
shr eax, 0xd
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x4f]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
mov rcx, rdi
mov edi, dword [rsp]
push rcx
xchg ecx, edi
pop rdi
shl ecx, 0x13
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x31]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
or eax, ecx
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x6a]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
mov dword [rsp], eax
lea rax, [rax]
jmp 0x1402158c0
pushfq
add byte [rax - 0x75], cl
ror dword [rbx - 0x6eafdbf4], 0x59
mov rax, rcx
mov ecx, dword [rsp]
push rax
xchg ecx, eax
pop rcx
add rsp, 0x30
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x36]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rdi
xchg qword [rsp], rcx
xchg rcx, rdi
lea rsp, [rsp + 8]
ret
pushfq
pushfq
add rbp, 0x39
popfq
lea rbp, [rbp - 0x39]
xchg rcx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rax
mov rax, qword [rsp]
xchg rsi, rdx
lea rsp, [rsp - 8]
mov qword [rsp], rsi
mov rsi, rdx
mov rdx, qword [rsp]
rdtsc
pushfq
add rbp, 0x1e
popfq
lea rbp, [rbp - 0x1e]
and rax, 1
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x36]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rsi, rdx
xchg qword [rsp], rsi
xchg rsi, rdx
lea rsp, [rsp + 8]
xchg rcx, rax
xchg qword [rsp], rcx
xchg rcx, rax
lea rsp, [rsp + 8]
je 0x140205d78
jne 0x1402bc3d0
jmp 0x140205d76
add byte [rax], al
mov rax, rdi
mov edi, dword [rsp + 4]
push rax
xchg edi, eax
pop rdi
inc eax
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x34]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
mov dword [rsp + 4], eax
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x5d]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x140235430
pushfq
push rsi
mov rsi, qword [rsp + 8]
lea rsi, [rsi + 0x35]
xchg qword [rsp + 8], rsi
mov qword [rsp + 8], rsi
mov rsi, qword [rsp]
lea rsp, [rsp + 8]
xchg rdi, rax
lea rsp, [rsp - 8]
mov qword [rsp], rdi
mov rdi, rax
mov rax, qword [rsp]
xchg rdi, rdx
lea rsp, [rsp - 8]
mov qword [rsp], rdi
mov rdi, rdx
mov rdx, qword [rsp]
rdtsc
mov rax, rax
and rax, 1
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x69]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rdx
xchg qword [rsp], rcx
xchg rcx, rdx
lea rsp, [rsp + 8]
xchg rbx, rax
xchg qword [rsp], rbx
xchg rbx, rax
lea rsp, [rsp + 8]
je 0x1402393b8
jne 0x140239148
jmp 0x1402393b6
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x56]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x1402b57f8
jne 0x1402b57f8
jmp 0x1402b57f6
pushfq
push rax
mov rax, rcx
pop rax
xchg rsi, rax
lea rsp, [rsp - 8]
mov qword [rsp], rsi
mov rsi, rax
mov rax, qword [rsp]
xchg rdx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rax
mov rax, rdx
mov rdx, qword [rsp]
rdtsc
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x1a]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
and rax, 1
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x27]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
xchg rbx, rdx
xchg qword [rsp], rbx
xchg rbx, rdx
lea rsp, [rsp + 8]
xchg rbx, rax
xchg qword [rsp], rbx
xchg rbx, rax
lea rsp, [rsp + 8]
je 0x1402034b0
jne 0x1402b1920
jmp 0x1402034ae
add byte [rax], al
mov rax, rbx
mov ebx, dword [rsp + 4]
push rax
xchg ebx, eax
pop rbx
inc eax
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x16]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
mov dword [rsp + 4], eax
pushfq
add rbp, 0xc
popfq
lea rbp, [rbp - 0xc]
jmp 0x140235430
add byte [rax], al
mov rax, rdx
mov edx, dword [rsp + 0x10]
push rax
xchg edx, eax
pop rdx
cmp dword [rsp + 4], eax
pushfq
add rbp, 0x65
popfq
lea rbp, [rbp - 0x65]
je 0x1401fdb58
movsxd rax, dword [rsp + 0xc]
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x1c]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rsi
mov rsi, qword [rsp + 0x18]
push rcx
xchg rcx, rsi
pop rsi
lea rax, [rcx + rax*4]
push rcx
mov rcx, rdx
pop rcx
mov qword [rsp + 0x20], rax
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x14]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
movsxd rax, dword [rsp + 4]
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x24]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
movsxd rcx, dword [rsp + 4]
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x24]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rdx, rax
mov rax, qword [rsp + 0x20]
push rdx
xchg rdx, rax
pop rax
movzx eax, byte [rdx + rax]
push rbp
mov rbp, rsp
leave
mov byte [rsp + rcx + 0x14], al
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x6b]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x14021d900
in al, dx
leave
and rax, 1
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x46]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
xchg rdx, rax
xchg qword [rsp], rax
xchg rdx, rax
lea rsp, [rsp + 8]
xchg rcx, rax
xchg qword [rsp], rcx
xchg rcx, rax
lea rsp, [rsp + 8]
je 0x140203658
jne 0x140221898
jmp 0x140203656
call 0x1402aa448
in eax, dx
cli
jnp 0x1402364df
push 0x4843c487
lea edi, [0x1402c1998]
call fcn.1401fe9b0
jnp 0x140236476
xchg esp, eax
sldt word [rax]
xchg rsi, rbx
xchg qword [rsp], rsi
xchg rsi, rbx
lea rsp, [rsp + 8]
movsxd rax, eax
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x60]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
lea rax, [rbx + rax - 9]
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x42]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rbx
xchg qword [rsp], rcx
xchg rcx, rbx
lea rsp, [rsp + 8]
xchg qword [rsp], rax
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x6a]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp fcn.1401fb780
popfq
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x48]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
je 0x140205368
jne 0x140205368
jmp 0x140205366
popfq
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x68]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
je 0x140117c30
jne 0x140117c30
jmp 0x140117c2e
add byte [rax], al
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x67]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x140235430
jne 0x140235430
jmp 0x14023542e
jmp 0x1402364d0
popfq
pushfq
add rbp, 0x60
popfq
lea rbp, [rbp - 0x60]
je 0x140209b28
jne 0x140209b28
jmp 0x140209b26
add byte [rax], al
mov rax, rcx
mov ecx, dword [rsp + 0xc]
push rax
xchg ecx, eax
pop rcx
shl eax, 2
mov rax, rax
mov rcx, rax
mov eax, dword [rsp + 0x48]
push rcx
xchg ecx, eax
pop rax
push rax
cmp ecx, dword [rsp]
pushfq
not qword [rsp + 8]
inc qword [rsp + 8]
add ecx, dword [rsp + 8]
popfq
lea rsp, [rsp + 8]
mov rax, rdi
mov edi, ecx
push rax
xchg edi, eax
pop rdi
mov dword [rsp + 0x10], eax
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x1e]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
cmp dword [rsp + 0x10], 0
pushfq
add rbp, 0x42
popfq
lea rbp, [rbp - 0x42]
je 0x1402158c0
mov dword [rsp + 4], 0
push rax
mov rax, qword [rsp + 0xb]
pop rax
jmp 0x140235430
popfq
pushfq
add rbp, 0x76
popfq
lea rbp, [rbp - 0x76]
je 0x140234d40
jne 0x140234d40
jmp 0x140234d3e