Function at 0x1403cfd45
Capabilities:
Execute anti-debugging instructions

Disassembly:
push r15
push r14
bt r14w, cx
jmp 0x1403cfd8c
push r13
or r14b, cl
cmp al, 0x2c
shld rax, rsi, 0x69
push r12
push rsi
or r12, rbp
jmp 0x1403cfda3
push rdi
movsx eax, r11w
push rbp
bt r14w, dx
mov r14b, r11b
push rbx
shl r14b, 0xf9
sub rsp, 0x1f8
movsx r12, r15w
shr ax, cl
movaps xmmword [rsp + 0x1e0], xmm11
movsx rax, r10w
movaps xmmword [rsp + 0x1d0], xmm10
rol r12b, 0x9b
jmp 0x1403cfdea
movaps xmmword [rsp + 0x1c0], xmm9
rcl ax, 0x55
cbw
clc
movaps xmmword [rsp + 0x1b0], xmm8
btr r14w, ax
movaps xmmword [rsp + 0x1a0], xmm7
shl ah, cl
not ax
movaps xmmword [rsp + 0x190], xmm6
cmp bpl, 0x88
and r14b, 0xf7
cwde
mov r14, rcx
mov r12, qword [rdx]
bsf eax, eax
shr ah, 0x38
sub al, 0x9f
mov rax, qword [rdx + 8]
jmp 0x1403cfe40
mov qword [rsp + 0x68], rax
cmp r12, rax
je 0x1403d0864
lea r15, [rsp + 0x90]
setne ah
lea rax, [r14 + 0x58]
mov qword [rsp + 0x60], rax
jmp 0x1403cfe67
xorps xmm6, xmm6
lea r13, [rsp + 0xd0]
lea rsi, [rsp + 0x30]
jmp 0x1403cfe7c
movss xmm8, dword [0x1400bd7e0]
jmp 0x1403cfe8a
movaps xmm9, xmmword [0x1400bd900]
jmp 0x1403cfe97
movaps xmm7, xmmword [0x1400bd3f0]
jmp 0x1403cfea3
movaps xmm10, xmmword [0x1400bd8e0]
jmp 0x1403cfeb0
movaps xmm11, xmmword [0x1400bd8f0]
jmp 0x1403cfedc
call fcn.140271af4
add r12, 0x110
cmp cl, r8b
cmp r12, qword [rsp + 0x68]
jmp 0x1403cfed6
je 0x1403d0864
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
jmp 0x1403cfef2
mov qword [rsp + 0x88], 7
movsxd rcx, esi
mov ch, 0x1d
movups xmmword [r15], xmm6
cwd
mov qword [r15 + 0x10], 0
mov qword [rsp + 0xa8], 7
movups xmmword [r15 + 0x20], xmm6
mov dl, r14b
bswap rcx
mov qword [r15 + 0x30], 0
jmp 0x1403cff39
lea rdx, [r12 + 0x30]
movzx cx, r9b
mov rcx, r13
call fcn.1403ac852
mov rax, qword [rsp + 0x88]
stc
cmp rax, 8
jmp 0x1403cff5d
jb 0x1403cffcd
mov rcx, qword [rsp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
jmp 0x1403cff77
cmp rdx, 0x1000
jb 0x1403cffc8
mov rbp, qword [rcx - 8]
cmp edi, 0xa8516c0
test r14b, 0xcc
add rcx, 0xfffffffffffffff8
clc
sub rcx, rbp
cmp rcx, 0x20
jmp 0x1403cffa3
jae 0x1403d0ca2
lea rax, [rax + rax]
movsx ecx, si
btc dx, bp
add rax, 0x29
mov rdx, rax
jmp 0x1403cffc0
mov rcx, rbp
jmp 0x1403cffc8
call fcn.140271af4
movups xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x80], xmm1
movsx rax, ax
adc ax, 0x405b
bts rax, rdx
movaps xmmword [rsp + 0x70], xmm0
or al, 0x18
movsxd rax, r9d
and al, r9b
mov qword [rsp + 0xc8], r12
inc al
rcl ax, 0x5f
mov eax, dword [r12 + 0x88]
stc
cmp eax, 2
je 0x1403d0178
cmp eax, 1
je 0x1403d02a2
test eax, eax
jmp 0x1403d002e
jne 0x1403d06e6
movabs rax, 0x69958471d42babd0
mov qword [rsp + 0x30], rax
movsx rcx, r11w
mov rcx, rbx
cbw
movabs rax, 0x1120e30710a38ece
sets cl
movzx cx, r14b
movsx rcx, si
mov qword [rsp + 0x38], rax
cbw
movabs rax, 0x4764a407841692a2
not rcx
mov qword [rsp + 0x40], rax
xchg cl, ah
movsx eax, r10w
movabs rax, 0x199eee0663371024
mov qword [rsp + 0x48], rax
movsx ecx, r12w
bswap ecx
mov cx, r10w
movabs rcx, 0x69f08415d445ab85
jmp 0x1403d00a9
mov qword [rsp + 0xd0], rcx
cmovnp ecx, r8d
not cx
movsx rcx, r8w
movabs rcx, 0x1154e36410c68eba
jmp 0x1403d00cb
mov qword [rsp + 0xd8], rcx
movabs rcx, 0x4764a407847292c7
jmp 0x1403d00e2
mov qword [rsp + 0xe0], rcx
jmp 0x1403d00ef
mov qword [rsp + 0xe8], rax
mov rax, r13
jmp 0x1403d00ff
movaps xmm0, xmmword [rsp + 0x30]
jmp 0x1403d0109
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
jmp 0x1403d0116
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movsx ecx, dx
movsx rcx, r11w
mov rcx, rsi
jmp 0x1403d0133
call fcn.14020d629
mov rbx, rax
mov rax, qword [rsp + 0xa8]
cmp rax, rbx
jae 0x1403d0456
mov rcx, r15
not r9
mov rdx, rbx
not r9w
bswap r9w
mov r9, rsi
jmp 0x1403d0165
call fcn.1403bc249
movaps xmm0, xmm11
jmp 0x1403d0173
jmp 0x1403d05a3
movabs rax, 0x69918466d42cabc1
movsx rdx, di
movsxd rdx, ebp
mov dl, r8b
mov qword [rsp + 0x30], rax
bswap dx
cwd
movabs rax, 0x1130e30110aa8ed8
mov qword [rsp + 0x38], rax
cdq
movsx ax, r15b
movabs rax, 0x4764a407847292c7
movzx ecx, di
cmovl dx, r15w
mov qword [rsp + 0x40], rax
mov ecx, 0x2eb95404
movsxd rdx, ebx
movabs rcx, 0x199eee0663371024
movzx dx, ah
xchg edx, edx
mov qword [rsp + 0x48], rcx
mov dl, 0xe0
movabs rdx, 0x69f08415d445ab85
jmp 0x1403d01f0
mov qword [rsp + 0xd0], rdx
movabs rdx, 0x1154e36410c68eba
jmp 0x1403d0207
mov qword [rsp + 0xd8], rdx
jmp 0x1403d0214
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rcx
cdqe
mov rax, r13
movaps xmm0, xmmword [rsp + 0x30]
jmp 0x1403d0233
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
jmp 0x1403d0240
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403d024a
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x40], xmm0
mov rcx, rsi
jmp 0x1403d025b
call fcn.14020d629
mov rbx, rax
nop
or eax, r13d
bt rax, 0xfb
mov rax, qword [rsp + 0xa8]
jmp 0x1403d0279
cmp rax, rbx
jmp 0x1403d0281
jae 0x1403d04ce
mov rcx, r15
bswap r9w
mov rdx, rbx
setae r9b
mov r9, rsi
call fcn.1403bc249
jmp 0x1403d0528
movabs rax, 0x69d08470d436abd0
jmp 0x1403d02b1
mov qword [rsp + 0x30], rax
movabs rax, 0x112de34410b28edb
jmp 0x1403d02c5
mov qword [rsp + 0x38], rax
not ax
movabs rax, 0x4744a475840792a8
jmp 0x1403d02dc
mov qword [rsp + 0x40], rax
cdqe
movabs rax, 0x19beee686340104b
mov qword [rsp + 0x48], rax
bswap ax
movabs rax, 0x161477a27a0a7ecb
jmp 0x1403d0304
mov qword [rsp + 0x50], rax
mov ax, r8w
movsx ax, ah
movabs rax, 0x8d3e5cf0c47c0f2f
mov qword [rsp + 0x58], rax
cdqe
movabs rax, 0x69f08415d445ab85
jmp 0x1403d0331
mov qword [rsp + 0xd0], rax
cbw
movzx eax, r8w
cdqe
movabs rax, 0x1154e36410c68eba
jmp 0x1403d0350
mov qword [rsp + 0xd8], rax
movzx eax, r9w
movsx eax, r15w
xchg al, ah
movabs rax, 0x4764a407847292c7
jmp 0x1403d0371
mov qword [rsp + 0xe0], rax
lahf
movabs rax, 0x199eee0663371024
mov qword [rsp + 0xe8], rax
movzx ax, r14b
bswap rax
movabs rax, 0x167f77d17a637eb9
jmp 0x1403d03a3
mov qword [rsp + 0xf0], rax
movzx rax, bp
movabs rax, 0x8d3e5cf0c47c0f0e
jmp 0x1403d03be
mov qword [rsp + 0xf8], rax
mov rax, r13
jmp 0x1403d03ce
movaps xmm0, xmmword [rsp + 0x30]
jmp 0x1403d03d8
xorps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
jmp 0x1403d03e5
movaps xmm0, xmmword [rsp + 0x40]
jmp 0x1403d03ef
xorps xmm0, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
jmp 0x1403d0402
xorps xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x50], xmm0
not cx
movzx cx, dil
mov rcx, rsi
jmp 0x1403d041b
call fcn.14020d629
mov rbx, rax
sal ah, 0x9d
shl ax, 0xa6
mov rax, qword [rsp + 0xa8]
cmp ebp, r12d
cmp rax, rbx
jae 0x1403d0536
mov rcx, r15
mov rdx, rbx
mov r9, rsi
jmp 0x1403d044c
call fcn.1403bc249
jmp 0x1403d059a
mov rbp, r15
clc
cmp rax, 8
jb 0x1403d046c
mov rbp, qword [rsp + 0x90]
mov qword [rsp + 0xa0], rbx
xor dx, 0x3b25
shl r8b, 0xae
mov r8, rbx
cdq
sar ecx, cl
add r8, rbx
movsx rdx, r14w
movzx edx, r15w
mov rcx, rbp
movzx edx, r9w
cqo
lea rsi, [rsp + 0x30]
movsxd rdx, esp
movsx edx, cx
cmovb dx, r11w
mov rdx, rsi
jmp 0x1403d04af
call fcn.14049f837
mov word [rbp + rbx*2], 0
jmp 0x1403d04c0
movaps xmm0, xmm11
jmp 0x1403d04c9
jmp 0x1403d05a3
mov rbp, r15
cmp rax, 8
jb 0x1403d04ee
mov rbp, qword [rsp + 0x90]
cmovp rdx, rbx
or sil, dl
sbb r8b, 0x58
mov qword [rsp + 0xa0], rbx
mov r8, rbx
add r8, rbx
movsx si, cl
movsx rdx, di
movzx si, r9b
mov rcx, rbp
lea rsi, [rsp + 0x30]
cdq
cwd
mov rdx, rsi
call fcn.14049f837
mov word [rbp + rbx*2], 0
jmp 0x1403d0528
movaps xmm0, xmm8
jmp 0x1403d0531
jmp 0x1403d05a3
mov rbp, r15
cmp rax, 8
jb 0x1403d0551
mov rbp, qword [rsp + 0x90]
inc r8b
rcr sil, cl
mov qword [rsp + 0xa0], rbx
bt si, bp
movsx rsi, dx
mov r8, rbx
add cl, 0x3f
inc cx
or edx, r13d
add r8, rbx
xchg rdx, rcx
sete cl
mov rcx, rbp
movzx dx, dil
not si
lea rsi, [rsp + 0x30]
mov rdx, rsi
jmp 0x1403d058e
call fcn.14049f837
mov word [rbp + rbx*2], 0
movaps xmm0, xmm10
jmp 0x1403d05a3
movlhps xmm0, xmm9
movaps xmmword [rsp + 0xb0], xmm0
xchg cl, ch
mov cl, r12b
setle cl
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x70]
jmp 0x1403d05c6
call fcn.1403d0e18
mov rax, qword [0x1400b8ec0]
jmp 0x1403d05dc
lea rbp, [0x1400be4c0]
cqo
movsx rdi, r9w
mov qword [rsp + 0x150], rbp
movsx rdi, r8w
movsx edi, cx
movsxd r9, r14d
lea rdi, [0x14001d180]
movzx dx, ah
mov qword [rsp + 0x158], rdi
cmovae bx, di
mov qword [rsp + 0x168], r14
lea rbx, [rsp + 0x150]
mov cl, r11b
cwd
mov qword [rsp + 0x188], rbx
mov r8b, cl
mov r8, qword [r12 + 0x70]
movsx dx, cl
jmp 0x1403d0643
mov rdx, qword [r14 + 0x28]
movsxd rcx, r12d
mov rcx, qword [rax + 0x28]
xchg r9w, ax
mov qword [rsp + 0xd0], rbp
mov qword [rsp + 0xd8], rdi
lahf
movzx r9w, al
mov r9w, r9w
movzx eax, word [rsp + 0x160]
mov word [rsp + 0xe0], ax
xchg r9, r9
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0x108], r13
xchg r9w, r9w
movsx r9w, dil
mov r9, r13
jmp 0x1403d069f
call fcn.140407524
mov rcx, qword [rsp + 0x188]
test r15d, eax
jmp 0x1403d06b4
test rcx, rcx
jmp 0x1403d06bc
je 0x1403d06e6
cmp rcx, rbx
movsx ax, ah
setne dl
mov rax, qword [rcx]
jmp 0x1403d06d4
call qword [rax + 0x20]
mov qword [rsp + 0x188], 0
movsxd rcx, edi
mov rcx, qword [rsp + 0xc0]
test r13, 0x44291eb2
clc
test rcx, rcx
je 0x1403d071f
mov rax, qword [rcx]
jmp 0x1403d0707
call qword [rax + 0x10]
mov qword [rsp + 0xc0], 0
ror ax, cl
sub ah, 0x7e
sar ah, 0xf5
mov rax, qword [rsp + 0xa8]
test r9d, 0x6d8401ef
cmp bpl, cl
cmp rax, 8
jmp 0x1403d073a
jb 0x1403d07b7
mov rcx, qword [rsp + 0x90]
rcr dh, 0xa4
movzx edx, ax
lea rdx, [rax + rax]
jmp 0x1403d075b
add rdx, 2
jmp 0x1403d0764
cmp rdx, 0x1000
jb 0x1403d07b2
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp dx, r13w
cmc
cmp rcx, 0x20
jae 0x1403d0ca2
add rax, rax
or cx, 0x3aeb
cmp dl, r12b
add rax, 0x29
mov rdx, rax
movsxd rcx, r10d
movzx cx, r8b
mov ecx, 0x510e438a
mov rcx, rbp
jmp 0x1403d07b2
call fcn.140271af4
movaps xmmword [rsp + 0xa0], xmm7
test r12b, sil
bts ax, ax
mov word [rsp + 0x90], 0
test dx, 0x47de
movsx ax, r9b
and eax, 0x354a2738
mov rax, qword [rsp + 0x88]
cmp rax, 8
jmp 0x1403d07f0
jb 0x1403cfec2
mov rcx, qword [rsp + 0x70]
bts edx, edx
sub dl, sil
lea rdx, [rax + rax]
cmp dil, r11b
add rdx, 2
cmp rdx, 0x1000
jmp 0x1403d0818
jb 0x1403cfebd
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
cmp bp, r8w
sub rcx, rbp
cmc
cmp r10w, 0x6190
cmp rcx, 0x20
jmp 0x1403d083d
jae 0x1403d0ca2
add rax, rax
add rax, 0x29
movsx cx, r8b
mov rdx, rax
mov cl, 0xed
setge cl
mov rcx, rbp
jmp 0x1403d085f
jmp 0x1403cfebd
mov rbx, qword [r14 + 0x58]
rcr al, cl
rcr eax, 0xf3
sar al, 0x36
mov rax, qword [r14 + 0x60]
cmp dl, ah
mov qword [rsp + 0x68], rax
test r9, 0x6a173efe
clc
cmp rbx, rax
jmp 0x1403d088b
je 0x1403d0b40
lea rax, [r14 + 0x40]
test ax, dx
test ch, 0x3f
mov qword [rsp + 0x60], rax
stc
sub esi, esi
jmp 0x1403d08a8
xorps xmm7, xmm7
lea r15, [rsp + 0x70]
movzx r13, sp
not r13b
bswap r13
movss xmm6, dword [0x1400bd4a0]
movzx r12d, sp
lea r13, [0x1400be4f0]
movsx r12, r10w
movzx r12w, r11b
cmovge r12d, eax
lea r12, [0x14001d1f0]
jmp 0x1403d08e6
jmp 0x1403d091f
mov rcx, qword [rsp + 0x60]
mov r8b, 0x38
movsx r8, r8w
mov r8, r15
jmp 0x1403d08ff
call fcn.1403bd9f6
add rbx, 0x60
jmp 0x1403d090d
inc esi
cmp rbx, qword [rsp + 0x68]
jmp 0x1403d0919
je 0x1403d0b40
mov ecx, 0xd8
jmp 0x1403d0929
call fcn.140443fc3
mov rdi, rax
mov cl, r14b
movaps xmmword [rsp + 0x70], xmm7
movsxd rcx, ebx
xchg dl, r8b
mov rcx, rax
setge r8b
bswap r8w
mov dl, 1
mov r8, rax
movsx r8, r12w
mov r8, r15
call fcn.140434127
lea rax, [0x1400be8c0]
setae ch
mov qword [rdi], rax
not bpl
lea rbp, [rdi + 0x50]
movzx ecx, bx
movsx cx, r9b
mov qword [rdi + 0x88], 0
lea rcx, [rdi + 0xb0]
jmp 0x1403d098e
mov dword [rsp + 0x20], 0x3e4ccccd
jmp 0x1403d099b
xorps xmm1, xmm1
xorps xmm3, xmm3
movaps xmm2, xmm6
jmp 0x1403d09a9
call fcn.14021ad64
lea rax, [0x1400be638]
movsx edx, sp
movsx rdx, r9w
movzx rcx, cx
mov qword [rdi + 0xb0], rax
movzx eax, bx
mov qword [rdi + 0x48], rbx
mov al, pe_nt_image_headers64
rdtsc
cbw
mov dword [rdi + 0x90], esi
cdq
cdqe
xchg dx, dx
mov byte [rdi + 0x94], 0
cqo
mov qword [rsp + 0x110], r13
cmovb dx, ax
movzx ecx, si
cwde
mov qword [rsp + 0x118], r12
movsx edx, bp
rdtsc
jmp 0x1403d0a0b
mov qword [rsp + 0x128], r14
lea rax, [rsp + 0x110]
mov qword [rsp + 0x148], rax
movsx ecx, r10w
mov qword [rsp + 0x70], r13
cqo
setae dh
jmp 0x1403d0a36
mov qword [rsp + 0x78], r12
movzx eax, word [rsp + 0x120]
mov ecx, r12d
bswap dx
mov word [rsp + 0x80], ax
movzx rcx, bx
movsx rcx, cx
mov qword [rsp + 0x88], r14
mov qword [rsp + 0xa8], r15
mov rcx, r15
xchg rdx, rdx
mov rdx, rbp
jmp 0x1403d0a77
call fcn.1403c1dcc
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
jmp 0x1403d0a8c
je 0x1403d0aa7
cmp rcx, r15
setbe dl
setne dl
cdqe
movsx ax, ah
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x148]
cmp r8d, r12d
jmp 0x1403d0ab7
test rcx, rcx
jmp 0x1403d0abf
je 0x1403d0af0
lea rax, [rsp + 0x110]
not dl
sal dl, cl
cmp rcx, rax
setne dl
mov rax, qword [rcx]
jmp 0x1403d0adf
call qword [rax + 0x20]
mov qword [rsp + 0x148], 0
mov dh, dh
mov qword [rsp + 0x70], rdi
mov rdx, qword [r14 + 0x28]
seta r9b
cmovge r8w, r10w
movzx rcx, r15w
mov r8, qword [r14 + 0x38]
not cl
xchg r9d, r9d
mov rcx, rdi
mov r9, r14
call fcn.1402375c3
mov rdx, qword [r14 + 0x48]
cmc
cmp rdx, qword [r14 + 0x50]
je 0x1403d08eb
mov qword [rdx], rdi
jmp 0x1403d0b31
add qword [r14 + 0x48], 8
jmp 0x1403d0b3b
jmp 0x1403d0904
mov rax, qword [r14 + 0x40]
movsx cx, r10b
test r11b, 0xdc
neg cl
mov rcx, qword [r14 + 0x48]
cmp rax, rcx
jmp 0x1403d0b5b
je 0x1403d0bf6
xorps xmm0, xmm0
movss xmm1, dword [0x1400bd7b4]
xchg edx, edx
movsxd rdx, edx
cmovbe rdx, r8
movss xmm2, dword [0x1400bd630]
cqo
movzx dx, r13b
movss xmm3, dword [0x1400bd7b8]
movsxd rdx, r14d
mov rdx, qword [rax]
jmp 0x1403d0b97
mov dword [rdx + 8], 0x41200000
jmp 0x1403d0ba3
movaps xmm4, xmm0
jmp 0x1403d0bab
addss xmm4, xmm1
movss dword [rdx + 0xc], xmm4
jmp 0x1403d0bb9
movss xmm4, dword [r14 + 0x10]
jmp 0x1403d0bc4
addss xmm4, xmm2
movss dword [rdx + 0x10], xmm4
jmp 0x1403d0bd2
mov dword [rdx + 0x14], 0x428c0000
addss xmm0, xmm3
add rax, 8
stc
jmp 0x1403d0be8
cmp rax, rcx
jmp 0x1403d0bf0
jne 0x1403d0b8f
movaps xmm6, xmmword [rsp + 0x190]
movaps xmm7, xmmword [rsp + 0x1a0]
shl r12w, cl
movaps xmm8, xmmword [rsp + 0x1b0]
xor bpl, bpl
movsx r12, sp
shld r13w, ax, 0xcb
movaps xmm9, xmmword [rsp + 0x1c0]
add r14b, bl
rcr r14w, cl
rcr r14d, 0x4a
movaps xmm10, xmmword [rsp + 0x1d0]
bswap r13
shr dil, cl
movaps xmm11, xmmword [rsp + 0x1e0]
rcr rsi, cl
add rsp, 0x1f8
mov r13w, r15w
not dil
movsx r12w, r12b
pop rbx
movzx r13, dx
pop rbp
pop rdi
not r12b
movsxd r13, r13d
pop rsi
not r13b
xchg r15d, r15d
movzx r12d, ax
pop r12
mov r15b, bl
movsxd r13, ecx
pop r13
mov r15b, dil
movzx r14w, r9b
pop r14
seta r15b
mov r15w, 0xf1c
not r15b
pop r15
jmp 0x1403d0ca1
ret
call fcn.1404b245b
int3