Function at 0x140494b9d
Capabilities:
Execute anti-debugging instructions

Disassembly:
push rbp
sbb al, r12b
bsr rbp, rdi
push rbx
push rsi
sbb bpl, r9b
push rdi
push r12
sub bpl, spl
push r13
or r13b, 0xe6
push r14
lahf
add dil, 0x3c
rol r13w, 0xdf
push r15
mov rbp, rsp
sub rsp, 0x78
mov rax, qword [0x1400b7288]
movsxd rdi, esi
xor rax, rsp
movzx di, dl
mov qword [rbp - 0x10], rax
clc
cmc
xadd r14w, r15w
mov r13, r9
ror dil, 0xa4
shr dil, cl
mov r14, r8
and r15, rbx
cmp r8w, 0x2d7b
mov qword [rbp - 0x48], rdx
cmp ah, al
cmovns rdi, rax
and di, 0x7b5a
mov rdi, rcx
sub edx, edx
mov r9d, edx
test spl, r8b
jmp 0x140494c1d
lea r15d, [rdx + 1]
cmp cx, r14w
cmp word [r13], dx
jmp 0x140494c2f
je 0x140494c90
movzx ecx, word [r13]
inc ax
sal al, cl
dec rax
lea rax, [r14 + 1]
cmp di, 0x2752
cmp cx, word [r13]
cmovne rax, r14
rol r14b, 0x17
shl ch, cl
shl cx, 0
mov r14, rax
or cx, r14w
cmp r10w, r15w
lea r9, [r9 + r15]
rcl ecx, 0xf5
movzx ecx, word [r13 + r9*2]
cmp r9w, si
test r13d, 0x5a6014bb
clc
test cx, cx
jmp 0x140494c8a
jne 0x140494c42
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
setge cl
xchg ecx, r8d
movzx cx, spl
mov qword [rbp - 0x20], rdx
movsx r8, ax
movzx cx, cl
mov qword [rbp - 0x18], rdx
movzx cx, dil
not cl
bswap r8w
mov r8, r14
lea rcx, [rbp - 0x30]
jmp 0x140494cc9
call fcn.14045ca1c
nop
not cl
mov cl, r15b
call fcn.14044e396
mov rbx, rax
movzx rcx, cx
mov qword [rbp - 0x38], rax
cmova ecx, r15d
lea rcx, [rbp - 0x40]
call fcn.1404663f7
mov qword [rbp - 0x40], rax
sub r9d, r9d
test bl, r12b
test rbx, rbx
jmp 0x140494d03
je 0x140494d70
mov rcx, qword [rbx]
cwde
bswap ax
cdqe
mov rax, qword [rcx + 0x10]
mov rcx, rbx
call qword [0x1400b8d90]
mov r8, rax
jmp 0x140494d28
sub r9d, r9d
cmp si, r8w
test sil, 0xb9
test rax, rax
je 0x140494d70
mov rcx, qword [rax]
mov rax, qword [rcx]
movsx ecx, r8w
movzx edx, r9w
movsxd rcx, r13d
mov edx, r15d
setl cl
mov rcx, r8
jmp 0x140494d5b
call qword [0x1400b8d90]
sub r9d, r9d
or r12w, 0x289a
btc si, r12w
cmc
mov byte [rbp - 0x58], r9b
ror r12, cl
mov rsi, r9
bts r12d, r13d
mov r12, r9
mov dword [rbp - 0x54], 0xfffffffe
sar r8b, 0xc5
test bpl, bpl
mov r8, r15
inc bl
mov qword [rbp - 0x50], r15
cmp dl, 0x1c
mov r15, qword [rbp - 0x18]
or bl, spl
cmc
mov rbx, qword [rbp - 0x30]
cmp bx, 0x10d8
test r14, r14
jne 0x140494ea3
cmp r15, 0x10
jmp 0x140494dbe
jb 0x140494e14
lea rdx, [r15 + 1]
btr rax, rsi
mov rax, rbx
cmp rdx, 0x1000
jb 0x140494e07
add rdx, 0x27
stc
mov rbx, qword [rbx - 8]
jmp 0x140494deb
sub rax, rbx
test r15b, spl
cmp bpl, r15b
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jmp 0x140494e01
ja 0x140495293
mov rcx, rbx
jmp 0x140494e0f
call fcn.1401a86e2
mov eax, dword [rbp - 0x54]
bsf rcx, rbp
mov rcx, qword [rbp - 0x10]
cmc
cmp dx, r11w
stc
xor rcx, rsp
jmp 0x140494e2d
call fcn.1404a4949
add rsp, 0x78
movsx r14d, r10w
jmp 0x140494e44
pop r15
movsx di, cl
pop r14
cmovns r13w, di
movsx ebp, r12w
movsxd r12, ebp
pop r13
sets r12b
jmp 0x140494e66
pop r12
movzx rbp, dx
movzx bp, r9b
pop rdi
pop rsi
not bp
movsx ebp, r8w
setns bpl
pop rbx
movsx rbp, sp
mov bpl, r11b
pop rbp
jmp 0x140494e8c
ret
cmp ax, word [r13]
je 0x140494eb7
inc rsi
cmp r11b, sil
sub al, al
dec ax
movzx eax, word [r13 + rsi*2]
test ax, ax
jmp 0x140494eb1
jne 0x140494e8d
lea rax, [rbp - 0x30]
sub cl, sil
shl cl, 0x89
cmp r15, 0x10
setae cl
mov byte [rbp - 0x57], cl
jmp 0x140494ed0
cmovae rax, rbx
cmp byte [rax + r12], r9b
jmp 0x140494edd
je 0x140494f06
lea rax, [rbp - 0x30]
cmp cx, 0x3b4b
test al, 0xd1
test cl, cl
jmp 0x140494ef5
cmovne rax, rbx
movsx rax, byte [rax + r12]
add rsi, rax
jmp 0x1404951ff
lea rsi, [rsi + r8]
bt rax, 0x39
movzx eax, word [r13 + rsi*2]
cmp ax, word [r13]
jmp 0x140494f1f
je 0x14049518f
test ax, ax
je 0x14049518f
mov rdx, qword [rbp - 0x48]
cmovs rcx, rdx
mov rcx, rdi
jmp 0x140494f3e
call fcn.14046e124
xor r9d, r9d
test si, 0x6f44
test al, al
jmp 0x140494f52
jne 0x14049517d
cmp byte [rbp + 0x68], 1
jmp 0x140494f61
jne 0x140495026
cmp byte [rdi + 8], r9b
jmp 0x140494f70
jne 0x140495012
mov rcx, qword [rdi]
cmp r14b, 0x3b
cmc
test rcx, rcx
jmp 0x140494f86
je 0x140495008
mov rax, qword [rcx + 0x38]
bswap edx
ror rdx, 0xa0
movzx edx, r13w
mov rdx, qword [rax]
test rdx, rdx
jmp 0x140494fa5
je 0x140494fd0
mov rax, qword [rcx + 0x50]
cmc
test ax, 0x13d2
stc
cmp dword [rax], r9d
jmp 0x140494fbd
jle 0x140494fd0
movzx eax, word [rdx]
jmp 0x140494fcb
jmp 0x140494fe7
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [0x1400b8d90]
xor r9d, r9d
movsx ecx, r15w
mov cl, r12b
mov ecx, 0xffff
cmp cx, ax
jmp 0x140494ff4
je 0x140495008
mov word [rdi + 0xa], ax
jmp 0x140495003
jmp 0x14049500e
mov qword [rdi], r9
sets al
mov byte [rdi + 8], 1
movzx eax, word [rdi + 0xa]
cmp word [r13 + rsi*2], ax
jmp 0x140495021
jmp 0x140495149
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
movsx dx, dil
movsx rdx, r9w
bswap dx
movzx edx, word [r13 + rsi*2]
jmp 0x140495044
mov rax, qword [rax + 0x40]
jmp 0x14049504d
call qword [0x1400b8d90]
mov word [rbp - 0x56], ax
jmp 0x14049505c
cmp byte [rdi + 8], 0
jmp 0x140495065
jne 0x140495102
mov rdx, qword [rdi]
test r14b, r10b
test rdx, rdx
jmp 0x140495079
je 0x1404950f1
mov rcx, qword [rdx + 0x38]
shl r8b, 0xfa
mov r8, qword [rcx]
test r8, r8
jmp 0x140495092
je 0x1404950b8
mov rcx, qword [rdx + 0x50]
cmp dword [rcx], 0
jmp 0x1404950a4
jle 0x1404950b8
movzx eax, word [r8]
jmp 0x1404950b3
jmp 0x1404950d0
mov rax, qword [rdx]
mov rcx, r8
mov rcx, rdx
mov rax, qword [rax + 0x30]
jmp 0x1404950ca
call qword [0x1400b8d90]
mov ecx, 0xffff
jmp 0x1404950da
cmp cx, ax
je 0x1404950f1
mov word [rdi + 0xa], ax
jmp 0x1404950ec
jmp 0x1404950fa
and qword [rdi], 0
rdtsc
cwd
cwde
mov byte [rdi + 8], 1
movsx rcx, r13w
mov rcx, qword [rbp - 0x40]
not dx
mov rax, qword [rcx]
movsx edx, r15w
movzx edx, si
movzx edx, word [rdi + 0xa]
jmp 0x14049511c
mov rax, qword [rax + 0x40]
jmp 0x140495125
call qword [0x1400b8d90]
xor r9d, r9d
mov rcx, 0x37ef6050
or cx, 0x1a1f
sal cl, 0xb3
cmp word [rbp - 0x56], ax
movsx rcx, cx
mov cx, 0x7ec2
mov ecx, r9d
setno cl
setne cl
test ecx, ecx
jmp 0x140495159
jne 0x14049517d
mov cl, 1
movsxd r8, r11d
movsx r8, ax
mov byte [rbp - 0x58], cl
setg r8b
mov r8, qword [rbp - 0x50]
jmp 0x140495178
jmp 0x140495202
cmp byte [rbp - 0x57], r9b
mov r8, qword [rbp - 0x50]
jmp 0x14049518a
jmp 0x14049519c
test cl, cl
mov dword [rbp - 0x54], r12d
movsxd rdx, ebx
rdtsc
cbw
lea rdx, [rbp - 0x30]
cdqe
cmovnp ecx, r15d
bswap rax
cmovne rdx, rbx
rcl cx, 0xb5
shld r15w, ax, 0xd2
mov ecx, 0x7f
shl r15w, cl
and rax, 0x545d620e
sbb r15, rdx
cmp r8, rcx
movsx r15d, r15w
jmp 0x1404951d8
movzx eax, r8b
not rbx
movsxd rbx, edx
cmovb ecx, eax
mov bl, spl
movsx r15, di
not bh
mov byte [rdx + r12], cl
mov rbx, qword [rbp - 0x30]
mov cl, 0x10
mov r15, qword [rbp - 0x18]
mov cl, r10b
mov cl, byte [rbp - 0x58]
inc r12
cmp cx, 0x167d
cmp r12, r14
jmp 0x140495212
jb 0x140494ea3
test cl, cl
jmp 0x14049521f
je 0x140494db5
mov rdx, qword [rbp - 0x48]
bswap cx
mov rcx, rdi
jmp 0x140495234
call fcn.14046e124
test al, al
jmp 0x140495240
jne 0x140494db5
inc qword [rbp - 0x50]
jmp 0x140495252
mov rcx, rdi
jmp 0x14049525a
call fcn.14046e307
or dword [rbp - 0x54], 0xffffffff
rcl r12, cl
sub r9d, r9d
movzx r8w, dil
mov byte [rbp - 0x58], r9b
mov esi, r9d
mov r8b, r12b
mov r8b, 7
mov r12d, r9d
movsx r8, r12w
movsxd r8, ecx
mov r8, qword [rbp - 0x50]
jmp 0x14049528e
jmp 0x140494ea3
call fcn.1404bae88
int3