Function at 0x1403341b7
Capabilities:
Contain obfuscated stackstrings
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 8], rbx
and ah, cl
mov qword [rsp + 0x10], rsi
movsxd r11, eax
and r8b, cl
mov qword [rsp + 0x18], rdi
xor cx, 0x663a
mov qword [rsp + 0x20], r14
rol r11b, cl
btr r8d, r15d
clc
push rbp
xor dil, 0x70
sar edi, cl
movsx r10d, sp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movzx rsi, r13w
inc al
mov rax, qword [0x14002b008]
xor rax, rsp
and r8w, bp
mov qword [rbp + 0x4f], rax
btc r9w, r12w
mov esi, edi
bswap cx
sub ebx, ebx
bts eax, esi
lea rdi, [0x1400269d0]
setbe r10b
sbb r10b, 0x59
neg r10
mov r10, rdi
lea r11, [0x140000000]
neg r10
or sil, r11b
shr si, cl
mov r9d, ebx
cqo
rcr esi, cl
dec dh
movabs rsi, 0x4ec4ec4ec4ec4ec5
bswap r8w
nop dword [rax]
and r8b, r10b
xchg r8b, cl
nop word [rax + rax]
sar r8b, cl
mov rcx, r9
lea r8, [rdi + 1]
add r8, r9
shrd eax, eax, 0xc3
mov rax, rsi
sub dl, r10b
mul r9
shr rdx, 2
shrd ax, di, 0x78
or al, r8b
imul rax, rdx, 0xd
shl rdx, cl
sub dx, sp
sub rcx, rax
movzx eax, byte [rcx + r11 + 0x269c0]
jmp 0x1403342b3
lea rcx, [r8 + r10]
cmp r10w, sp
cmp r9w, 0x1bcd
xor edx, 0x10505220
xor al, byte [r9 + rdi]
movsx edx, dx
neg edx
mov byte [rbp + r9 - 0x21], al
shl dh, 0x37
mov rax, rsi
cdq
shr rdx, cl
rcr dx, 0xe6
mul rcx
mov rcx, r9
shr rdx, 2
sub ax, 0x3e59
xor eax, r14d
imul rax, rdx, 0xd
sub rcx, rax
xadd dh, ah
movzx eax, byte [rcx + r11 + 0x269c1]
ror cx, cl
xor al, byte [r8]
rol ecx, cl
lea r8, [rdi + 2]
clc
cmovg ecx, r8d
btc rcx, 0xd4
mov byte [rbp + r9 - 0x20], al
xchg dh, al
test al, bpl
add r8, r9
ror al, cl
movsx cx, ch
mov rax, rsi
lea rcx, [r8 + r10]
bts edx, ecx
test r10w, r14w
mul rcx
rcr rax, 0xce
mov cl, 0x7d
movsx ecx, r8w
mov rcx, r9
rcr ah, 0x57
shr rdx, 2
shld eax, r8d, 0xb7
imul rax, rdx, 0xd
sbb dh, 0xb2
sub rcx, rax
xor ax, 0x49fb
movzx eax, byte [rcx + r11 + 0x269c2]
xor al, byte [r8]
sbb r8b, r11b
mov edx, 0x409c3820
lea r8, [rdi + 3]
sub cx, 0x39b7
bsr dx, r15w
jmp 0x14033438f
mov byte [rbp + r9 - 0x1f], al
sal ax, 4
movsx rax, dx
shl cx, cl
lea r8, [r8 + r9]
shl rdx, cl
lahf
mov rax, rsi
and cx, r14w
lea rcx, [r8 + r10]
sal dx, 0xfe
sar dx, 0xe0
movsx rdx, r15w
mul rcx
mov rcx, r9
cmp dl, spl
shr rdx, 2
sar ax, 0xe4
imul rax, rdx, 0xd
shl rdx, cl
sal edx, 0x8b
sub rcx, rax
bsf dx, di
movzx eax, byte [rcx + r11 + 0x269c3]
dec cx
xor al, byte [r8]
adc cl, r10b
clc
lea r8, [rdi + 4]
movzx edx, r11w
mov byte [rbp + r9 - 0x1e], al
shld dx, r15w, 0xd5
clc
lea r8, [r8 + r9]
mov rax, rsi
lea rcx, [r8 + r10]
cmc
shl dx, cl
and dh, cl
mul rcx
shl cl, cl
mov rcx, r9
inc al
sal eax, cl
test rcx, 0x6a921cd8
shr rdx, 2
sbb rax, 0x7fbd251a
imul rax, rdx, 0xd
clc
cmp r15b, r12b
sub rcx, rax
dec rax
btc rax, 0xba
shrd ax, dx, 0x2c
movzx eax, byte [rcx + r11 + 0x269c4]
clc
xor al, byte [r8]
jmp 0x140334463
mov byte [rbp + r9 - 0x1d], al
add r9, 5
cmp r9, 0xf
jb 0x140334271
lea rdi, [0x1400269f0]
mov ch, 0x72
cmp dx, r14w
mov byte [rbp - 0x12], bl
mov sil, cl
sbb r8d, esp
add dl, 0x42
mov r10, rdi
movsxd rdx, ebx
mov dword [rbp - 0x51], 0x52444543
dec rcx
neg r10
sar sil, 0x84
bts si, r12w
adc r9w, sp
mov dword [rbp - 0x4d], 0x52455649
movzx eax, r14w
jmp 0x1403344c4
mov word [rbp - 0x49], 0x3036
shld r8, rsi, 1
cbw
rdtsc
mov r9, rbx
btr r8d, 0xf8
or ah, 0x14
mov byte [rbp - 0x47], bl
movabs rsi, 0xe38e38e38e38e38f
rcr r8w, cl
btr ecx, 0x2b
mov dword [rbp - 0x41], 0x52444543
cqo
xchg r8w, cx
jmp 0x140334505
mov dword [rbp - 0x3d], 0x52455649
ror ax, 0x95
cmovns rax, r14
shl r8d, cl
mov word [rbp - 0x39], 0x3035
movsx ecx, r8w
mov r8d, eax
mov byte [rbp - 0x37], bl
mov dword [rbp - 0x59], 0x46504e
bts r8, r14
btr rcx, 0xd3
mov dword [rbp - 0x31], 0x6674656e
movzx rdx, cx
movsx rcx, r10w
mov dword [rbp - 0x2d], 0x65746c69
cbw
mov word [rbp - 0x29], 0x3272
mov byte [rbp - 0x27], bl
and ch, 0x50
nop dword [rax]
movsx r8w, bpl
btr ecx, 0x6d
xor dl, r14b
mov rcx, r9
cdq
cmc
lea r8, [rdi + 1]
lea r8, [r8 + r9]
sal ax, 0x2a
bswap eax
and al, r14b
mov rax, rsi
neg dl
dec dl
mul r9
cmovle eax, r13d
shr rdx, 3
ror ax, cl
shl al, cl
lea rax, [rdx + rdx*8]
rol dx, cl
ror dh, 0x91
xadd rdx, rdx
sub rcx, rax
movzx eax, byte [rcx + r11 + 0x269e0]
lea rcx, [r8 + r10]
xor al, byte [r9 + rdi]
test r14b, 0x98
btr dx, bx
cqo
mov byte [rbp + r9 - 0x11], al
sub ah, dh
movsx eax, r13w
bt edx, 0x3f
mov rax, rsi
xchg edx, edx
shld dx, r14w, 0x98
movzx rdx, cx
mul rcx
jmp 0x1403345ec
mov rcx, r9
inc ax
stc
shr rdx, 3
xor al, 0x36
cbw
lea rax, [rdx + rdx*8]
btc dx, bx
mov dl, r14b
sub rcx, rax
and dl, r9b
adc dl, r14b
clc
movzx eax, byte [rcx + r11 + 0x269e1]
bts cx, di
btr cx, 0x67
neg dl
xor al, byte [r8]
movzx rcx, r8w
xadd r8b, cl
rcl r8d, 0x20
lea r8, [rdi + 2]
rcr rdx, cl
mov byte [rbp + r9 - 0x10], al
sal dl, 0xe1
rcr ah, cl
movsx rax, si
lea r8, [r8 + r9]
mov rax, rsi
lea rcx, [r8 + r10]
xor dx, 0x7d0c
sub dh, 0xd1
xchg dl, dl
mul rcx
rcr ah, 0xff
cmp dil, 0xc8
mov rcx, r9
sar al, 0xd6
cmp dl, r9b
shr rdx, 3
lea rax, [rdx + rdx*8]
bt rdx, 0xde
shl edx, 0x15
adc dh, 0xd3
sub rcx, rax
movzx eax, byte [rcx + r11 + 0x269e2]
and ch, 0x12
sar cl, 0xce
sub ch, 0x93
xor al, byte [r8]
add r8b, r12b
test r11b, r13b
btr cx, di
lea r8, [rdi + 3]
dec dl
mov byte [rbp + r9 - 0xf], al
jmp 0x1403346bb
add r8, r9
mov rax, rsi
btc ecx, 0x97
btr rdx, 0x3f
or rcx, 0x479c13fa
lea rcx, [r8 + r10]
bswap rdx
xor dx, 0x497c
mul rcx
ror cx, 0x37
xor eax, 0x764d6036
mov rcx, r9
setae al
btr rax, rdx
lahf
shr rdx, 3
clc
sal ax, cl
movsx eax, r10w
lea rax, [rdx + rdx*8]
or dh, 0x68
sub rcx, rax
rdtsc
bswap dx
movzx eax, byte [rcx + r11 + 0x269e3]
shl dx, cl
xor al, byte [r8]
rcr r8w, cl
lea r8, [rdi + 4]
mov byte [rbp + r9 - 0xe], al
lea r8, [r8 + r9]
or ax, r12w
cmovl ecx, ebp
mov rax, rsi
lea rcx, [r8 + r10]
rcl edx, cl
or edx, 0x32d558c1
movsx edx, bx
mul rcx
movsxd rax, edi
rcl ecx, 0xf6
btr ecx, esp
mov rcx, r9
xadd ah, ah
cmp bx, 0x650c
movzx ax, r10b
shr rdx, 3
rol al, cl
lea rax, [rdx + rdx*8]
jmp 0x14033477b
sub rcx, rax
movzx eax, byte [rcx + r11 + 0x269e4]
xor al, byte [r8]
mov byte [rbp + r9 - 0xd], al
test esp, 0x5c5d1254
test r12w, r13w
stc
add r9, 5
cmp rbp, r11
cmp r12b, 0xbc
cmp r9, 0xf
jmp 0x1403347ae
jb 0x14033456a
lea rax, [rbp - 0x21]
mov r8b, 0x71
shl r8b, 0x71
mov byte [rbp - 2], bl
shl r8b, cl
cmc
mov qword [rbp + 0x1f], rax
sub r8b, dl
shld r8w, bp, 0x50
and ax, 0xf8e
sub edx, edx
sal al, 0xaf
lea rax, [rbp - 0x51]
cmc
shl r8b, 0xf7
and r8w, bp
sub ecx, ecx
mov qword [rbp + 0x27], rax
not ax
bswap r8w
movsxd rax, r15d
mov r8d, 0xf003f
movzx ax, r14b
mov rax, 0x7a255a1b
lea rax, [rbp - 0x41]
jmp 0x140334814
mov qword [rbp + 0x2f], rax
movsxd rax, ecx
lea rax, [rbp - 0x59]
mov qword [rbp + 0x37], rax
lea rax, [rbp - 0x31]
jmp 0x14033482c
mov qword [rbp + 0x3f], rax
cmovo ax, r10w
movsx rax, sp
lea rax, [rbp - 0x11]
mov qword [rbp + 0x47], rax
jmp 0x140334846
call fcn.1400fe1c1
mov r14, rax
cqo
mov si, 0x4ba1
lea rsi, [rbp + 0x1f]
nop
xchg r8b, dl
movzx dx, ch
mov rdx, qword [rsi]
jmp 0x140334872
mov r8d, 0x10020
not cl
jmp 0x140334882
mov rcx, r14
jmp 0x14033488a
call fcn.1401b2634
lea r8, [rbp - 1]
bswap di
mov edx, 1
mov rcx, rax
cmovno di, di
setb dil
movsx rdi, r10w
mov rdi, rax
jmp 0x1403348b3
call 0x140106669
mov rcx, rdi
jmp 0x1403348c1
call 0x1402402a7
mov rcx, rdi
call fcn.14013fafb
inc ebx
cmc
test r8b, 0x3c
lea rsi, [rsi + 8]
cmp edx, edx
cmp ebx, 6
jb 0x140334861
mov rcx, r14
call fcn.14015b4b8
mov rcx, qword [rbp + 0x4f]
test r14w, r14w
test r10, 0x6d703987
xor rcx, rsp
jmp 0x140334906
call fcn.140009740
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x10]
movsx rdi, r13w
mov rsi, qword [r11 + 0x18]
seta r14b
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
xchg bpl, bpl
movsx ebp, r9w
cmovl ebp, eax
mov rsp, r11
movsx ebp, r8w
pop rbp
jmp 0x140334942
ret