Function at 0x1403a9fb8
Capabilities:
Execute anti-debugging instructions

Disassembly:
push r15
neg al
push r14
push r13
and dl, 0xa9
push r12
push rsi
shrd r8, rcx, 0xfd
stc
push rdi
xchg r13b, r13b
push rbp
rdtsc
xadd eax, edx
add rax, rbp
push rbx
xadd r13b, r14b
rcl r12w, 0xd3
cdq
sub rsp, 0x88
not r12b
shl sil, 0x2c
mov r14, rcx
cbw
inc rbp
mov eax, dword [rcx + 0x24]
rol r13b, 0x21
movsx dx, r14b
mov ebx, dword [rcx + 0x28]
ror rdx, 0xb5
mov esi, dword [rcx + 0x2c]
movsx r12, bp
mov ebp, dword [rcx + 0x54]
sar dl, cl
mov r8d, dword [rcx + 0x50]
mov r12, qword [rcx + 0x30]
cmp eax, 0x7f3b78df
inc dx
cwd
mov rdx, qword [rcx + 0x38]
movzx r13w, bpl
and r13b, 0x7b
mov dword [rsp + 0x24], eax
adc r13b, r8b
or r13b, 0xa
mov r13d, eax
sub ah, 0x3a
xadd eax, eax
movzx eax, bp
and r13d, 0x7fff
mov ax, di
sal ah, 5
lea rax, [rcx + 0xc8]
cmp ax, 0x501c
cmp r14b, r9b
mov qword [rsp + 0x48], rax
bts ax, r11w
lea rax, [rcx + 0x80c8]
test cx, si
mov qword [rsp + 0x78], rax
shrd ax, bp, 0x1f
shl ax, cl
dec rax
lea rax, [rcx + 0x192a2]
stc
mov qword [rsp + 0x58], rax
mov eax, 0x2e1923ba
shl rax, cl
lea rax, [rcx + 0x1c8]
mov qword [rsp + 0x50], rax
lea rax, [rcx + 0xd0]
test r10d, 0x75901b0b
stc
mov qword [rsp + 0x60], rax
cwde
movsxd rax, ebx
sub ax, 0x1dd3
mov rax, qword [r14 + 0xb8]
clc
cmp dil, 0x7d
cmp ecx, r12d
test rax, rax
jmp 0x1403aa0e2
jne 0x1403aa108
cmp dword [r14 + 0xa8], 0
jmp 0x1403aa0f5
je 0x1403aac47
test ebx, ebx
jmp 0x1403aa102
je 0x1403aac47
mov qword [rsp + 0x30], rdx
sar r15, cl
mov dword [rsp + 0x28], ebp
bts ebp, r9d
xadd r15d, ebp
mov dword [rsp + 0x2c], r8d
movsx r15d, r15w
mov r15d, 0x1000
sub r15d, ebx
rcr bpl, cl
sal bpl, 0xd9
bswap rbp
cmp rax, r15
bswap ebp
movsxd rbp, eax
xchg ebp, ebp
cmovb r15, rax
shrd rbp, rsi, 0xf3
bsf bp, r8w
sub rax, r15
adc bpl, r10b
setl bpl
cmp cl, bpl
mov qword [r14 + 0xb8], rax
bsr bp, si
lea ebp, [rbx + r15]
test r13b, bpl
cmp bl, 0xb6
test r15, r15
jmp 0x1403aa17a
je 0x1403aa262
add ebx, dword [rsp + 0x24]
movzx rdx, r13w
mov rdx, qword [r14 + 0xb0]
jmp 0x1403aa194
jmp 0x1403aa1c2
mov rdx, rdi
stc
add rdx, qword [r14 + 0xb0]
test r10w, 0x2ca8
mov qword [r14 + 0xb0], rdx
cmc
add ebx, edi
sub r15d, edi
jmp 0x1403aa1bc
je 0x1403aa262
and ebx, 0x7fff
rcl r8d, cl
rcr ch, cl
mov edi, 0x8000
sub edi, ebx
sub r8b, r11b
cmp edi, r15d
movsx r8d, r9w
movzx ecx, cx
cmovae edi, r15d
movzx ax, r12b
movsx eax, ax
xchg ah, ah
mov rax, qword [rsp + 0x48]
cmovns r8d, r10d
lea rcx, [rax + rbx]
cmovnp r8d, esp
jmp 0x1403aa205
mov r8, rdi
jmp 0x1403aa20d
call fcn.1404a6b00
cmp ebx, 0x100
jmp 0x1403aa21d
ja 0x1403aa199
mov rax, qword [rsp + 0x78]
rcr r8, 0xf6
lea rcx, [rax + rbx]
bt r8d, 0xa9
mov rdx, qword [r14 + 0xb0]
mov r8d, 0x101
test r13b, r14b
cmc
sub r8d, ebx
cmp bpl, dl
cmp edi, r8d
cmovb r8d, edi
jmp 0x1403aa258
call fcn.1404a6b00
jmp 0x1403aa199
mov r15d, 0x8000
setb dil
movzx edi, r15w
bsr di, r12w
mov edi, ebp
jmp 0x1403aa27c
sub r15d, ebp
cmp r15d, esi
cmovae r15d, esi
clc
test dx, 0x6a7e
cmp dword [r14 + 0xa8], 0
jmp 0x1403aa299
jne 0x1403aa2ab
cmp edi, 0x1000
jb 0x1403aac15
cmp edi, 4
mov r8d, dword [rsp + 0x2c]
mov bpl, 0xe9
mov ebp, dword [rsp + 0x28]
mov dx, r14w
mov rdx, qword [rsp + 0x30]
setge bl
cmovl bx, cx
mov ebx, dword [rsp + 0x24]
jae 0x1403aa4a6
mov dword [rsp + 0x24], ebx
sal sil, 0xa5
movsx rsi, r9w
xor ebx, ebx
cmovae si, r12w
sbb sil, bpl
mov esi, r15d
cmp r10, r12
test edi, edi
jmp 0x1403aa2f7
je 0x1403aa0cb
dec edi
jmp 0x1403aa304
jmp 0x1403aa321
inc r13d
and r13d, 0x7fff
add edi, 0xffffffff
jmp 0x1403aa31b
jae 0x1403aab93
mov eax, r13d
movsx cx, sil
xadd ch, ch
movzx eax, byte [r14 + rax + 0xc8]
btc ecx, 0x94
bts rcx, rbx
sar rcx, cl
mov byte [r12], al
test bh, ah
bt rcx, rdx
shr byte [rdx], 1
movsx cx, dil
cmovns ecx, r13d
bswap ecx
inc ebp
mov ch, 0x9e
setge cl
lea rcx, [r12 + 1]
jmp 0x1403aa369
dec r8d
jmp 0x1403aa371
add r12, 2
test r8d, r8d
jmp 0x1403aa37d
cmove rdx, rcx
jmp 0x1403aa386
cmovne r12, rcx
mov ecx, r14d
mov ecx, 8
jmp 0x1403aa397
cmove r8d, ecx
inc word [r14 + rax*2 + 0x81ca]
setno ch
cwde
mov ecx, dword [rsp + 0x24]
xchg ah, ah
mov rax, r14
inc ecx
movsx eax, r9w
inc r15d
cmp r15d, 0x8000
movzx eax, r9w
mov eax, 0x8000
jmp 0x1403aa3cf
cmovae r15d, eax
test bpl, bpl
cmp r12, qword [rsp + 0x58]
jmp 0x1403aa3e0
mov dword [rsp + 0x24], ecx
jmp 0x1403aa3e9
jbe 0x1403aa309
mov dword [r14 + 0x24], ecx
jmp 0x1403aa3fb
mov dword [r14 + 0x28], edi
inc cx
shl rcx, cl
sbb cx, ax
mov dword [r14 + 0x2c], r15d
rcr ecx, cl
mov dword [r14 + 0x54], ebp
btr ecx, ebp
sal cl, 0x64
mov qword [r14 + 0x30], r12
mov cl, r15b
btc cx, 0xa4
rol ch, 6
mov qword [r14 + 0x38], rdx
rol cl, 0x25
and ch, 0xe
movzx ecx, r12w
mov dword [r14 + 0x50], r8d
mov rcx, r14
test r10, r13
cmp di, r9w
xor edx, edx
jmp 0x1403aa44a
call fcn.1403ac066
test eax, eax
jmp 0x1403aa456
jne 0x1403aaba0
mov ebp, dword [r14 + 0x54]
movsx r12w, r8b
movzx r12, r15w
mov r12, qword [r14 + 0x30]
not rdx
mov rdx, qword [r14 + 0x38]
movsx r8w, cl
mov r8d, dword [r14 + 0x50]
jmp 0x1403aa482
jmp 0x1403aa309
add r13d, dword [rsp + 0x80]
and r13d, 0x7fff
stc
cmc
cmp edi, 3
jmp 0x1403aa4a0
jbe 0x1403aa2d4
mov dword [rsp + 0x28], ebp
cmp cx, 0x130
inc r9
mov r9d, edi
movzx r10d, r12w
adc bpl, 0x28
mov qword [rsp + 0x30], rdx
movsx ebp, r14w
rdtsc
mov ebp, r13d
bts eax, esi
movzx r11w, sil
rol r11b, cl
mov r11d, dword [r14 + rbp + 0xc8]
btc rdx, r12
shr dl, 0xff
mov ecx, r11d
and ecx, 0xffffff
btr si, 0x77
cmp r13b, 0x34
adc rax, rbx
mov eax, ecx
shr eax, 0x11
bsr di, di
inc r10b
mov edx, r11d
ror edi, cl
bswap si
and edx, 0xfff
bsf si, r10w
btr si, r11w
clc
xor edx, eax
movzx edi, word [r14 + rdx*2 + 0x292aa]
mov word [r14 + rdx*2 + 0x292aa], bx
btr rsi, rbp
mov r10d, ebx
movsx si, r12b
cmp bx, 0x89c
rol sil, 0xcc
sub r10d, edi
cmc
xor esi, 0x320f1d3e
cmovge rsi, rax
movzx esi, r10w
cmp esi, esp
test r10w, 0x3734
cmp r15d, esi
jmp 0x1403aa56a
mov qword [rsp + 0x80], rbp
jb 0x1403aa786
mov eax, edi
btc r13d, 0x6c
adc r13w, cx
and eax, 0x7fff
cmp bp, 0x19e3
mov rdx, qword [rsp + 0x48]
movsx r13d, si
cmovp r13d, r10d
btr r13, 0x30
mov edx, dword [rdx + rax]
add r13d, 0x131d31a0
shld r13, rax, 0x1c
rcl r13d, 0x9f
mov dword [rsp + 0x44], r9d
movsx r13, si
btr r9d, ecx
mov r13d, ebx
ror r9b, 0xed
mov ebx, 0xffffff
bt r9, 0xb0
add r9w, 0x7995
and edx, ebx
btc r9, r15
mov ebx, r13d
movsx r9, bp
rcl r9w, cl
mov r9d, dword [rsp + 0x44]
cmp edx, ecx
jmp 0x1403aa5f3
jne 0x1403aa786
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x2c], r8d
rcl dx, 0xa8
mov dword [rsp + 0x24], ebx
movsxd rsi, ebp
mov rcx, qword [rsp + 0x48]
movzx rsi, dx
movsx edx, bx
add rcx, rbp
mov qword [rsp + 0x38], rcx
or dx, 0x3bd0
movzx ecx, r15w
mov rcx, qword [rsp + 0x50]
cqo
test r13w, r15w
lea r8, [rcx + rbp]
shld si, r11w, 0x3c
sal sil, 0xee
inc bl
mov rsi, rdi
cmp dil, 0xc9
movsx cx, r13b
sbb bx, 0xed1
and edi, 0x7fff
not cx
btr edx, r9d
mov qword [rsp + 0x68], rdi
mov cx, 0x33fc
and rbx, 0x2b6a53f4
lea rdx, [r14 + rbp]
stc
clc
sar bh, cl
add rax, qword [rsp + 0x60]
mov ecx, 0x20
jmp 0x1403aa692
xor r13d, r13d
mov edi, r9d
mov ebx, r14d
nop dword [rax]
btc ebp, r13d
rol rbp, cl
movsxd rbx, r11d
movzx ebp, word [rdx + r13 + 0xca]
btc bx, 0x5b
movzx ebx, word [rax + r13 - 6]
test bp, 0x7a9c
cmp bp, bx
jne 0x1403aa7c9
movzx ebp, word [rdx + r13 + 0xcc]
stc
movzx ebx, word [rax + r13 - 4]
cmc
jmp 0x1403aa6e9
cmp bp, bx
jne 0x1403aa7de
movzx ebp, word [rdx + r13 + 0xce]
sar bh, cl
xor ebx, r14d
movzx ebx, word [rax + r13 - 2]
test r15, r15
cmp bp, bx
jne 0x1403aa7f5
movzx ebp, word [rdx + r13 + 0xd0]
movzx bx, bl
add rbx, r11
movzx ebx, word [rax + r13]
stc
cmp bp, 0x671f
cmp bp, bx
jne 0x1403aa815
dec ecx
stc
test r15, 0x43dd7f41
cmp r11b, r14b
add r13, 8
cmc
cmp r13d, 0x100
jmp 0x1403aa754
jne 0x1403aa6ac
movzx ebp, byte [r8]
clc
mov rax, qword [rsp + 0x50]
ror ch, cl
mov rcx, qword [rsp + 0x68]
xadd ebx, ebx
movzx ebx, byte [rax + rcx]
jmp 0x1403aa77a
xor ecx, ecx
jmp 0x1403aa781
jmp 0x1403aa841
mov byte [r12], r11b
mov rdx, qword [rsp + 0x30]
or rcx, r14
shr byte [rdx], 1
cdqe
dec ax
movzx r13w, dil
inc r12
movsx rdi, ax
bswap edi
movsx r13w, r13b
movzx eax, r11b
mov r13d, 1
cmovge di, bp
movsx cx, bh
mov rcx, r12
mov edi, r9d
jmp 0x1403aaa69
lea r8, [rdx + r13]
add r8, 0xca
jmp 0x1403aa7d9
jmp 0x1403aa841
lea r8, [rdx + r13]
cmc
cmp edi, 0x11bf4b9e
add r8, 0xcc
jmp 0x1403aa841
lea r8, [rdx + r13]
clc
test r14d, 0x7647383a
cmp r15b, r13b
add r8, 0xce
jmp 0x1403aa810
jmp 0x1403aa841
lea r8, [rdx + r13]
cqo
sar ah, 0x6c
add r8, 0xd0
inc r13w
add r13b, r14b
nop word cs:[rax + rax]
dec al
add r13b, 0x47
rcr ax, 0x92
mov rax, qword [rsp + 0x38]
sbb r13w, 0xce0
sub r8d, eax
sar r13w, 0xd4
and r8d, 0xfffffffe
shld r13d, eax, 0xcd
sar r13b, 0x16
xor eax, eax
sar r13b, 0xab
sub dl, r11b
cmp bpl, bl
not r13d
sete al
rol bh, 0x7b
sbb bx, ax
xchg bl, bl
or eax, r8d
bts r13w, si
movzx rbx, r12w
mov ebx, dword [rsp + 0x24]
shr r13b, cl
dec r13b
shr r13b, 0x90
cmp si, bx
cmova r13w, r8w
mov r13d, 0x102
movsxd rdx, esp
cqo
mov edx, 0
jmp 0x1403aa8b2
cmove r13d, edx
test ecx, ecx
jmp 0x1403aa8bd
cmovne r13d, eax
cmp r13d, 3
jmp 0x1403aa8ca
jb 0x1403aa8f2
jne 0x1403aa928
movzx eax, r10w
test r14b, r11b
jmp 0x1403aa8e2
cmp eax, 0x2000
jmp 0x1403aa8ec
jb 0x1403aa928
mov byte [r12], r11b
seta r13b
sub dx, ax
movsxd rax, ecx
mov rdx, qword [rsp + 0x30]
shrd eax, r15d, 0x55
shr byte [rdx], 1
inc r12
movsx r13w, r9b
movzx eax, r11b
mov r13d, 1
jmp 0x1403aa923
jmp 0x1403aaa53
cmp r13d, edi
cwd
movsx r8w, dl
mov al, r9b
cmovae r13d, edi
movzx edx, r14w
inc rbp
bswap si
mov rax, qword [rsp + 0x70]
dec eax
btr r8w, 0xca
rol ebp, cl
lea esi, [r13 - 3]
mov byte [r12], sil
cdq
adc dl, r12b
mov dword [r12 + 1], eax
rcl dl, cl
bts di, si
add r12, 3
rcr r8b, cl
xchg ecx, edx
mov rdx, qword [rsp + 0x30]
movzx ecx, byte [rdx]
shr cl, 1
movzx r8, r13w
or rdi, 0x32880ad5
or cl, 0x80
xor bpl, r11b
mov byte [rdx], cl
xchg cl, dil
btr rcx, r13
jmp 0x1403aa99b
mov ecx, eax
movzx edi, ax
and ecx, 0x1ff
mov ebp, r14d
lea rbp, [0x1400bcab0]
or dil, 0x1e
mov edi, r12d
add rcx, rbp
rcl r8w, 0x42
shr bpl, 0xeb
mov rbp, rax
mov r8b, 0x3e
shld r8d, r15d, 0x9a
sar dil, cl
shr rbp, 8
mov edi, ebx
inc rbx
or ebx, ecx
sar r8w, 0xfc
lea rbx, [0x1400bccb0]
bts r8w, r10w
shr r8, 0x87
add rbp, rbx
bsf r8w, r8w
mov ebx, edi
neg r8b
mov r8b, r9b
mov edi, dword [rsp + 0x44]
dec r8b
setne r8b
cmp eax, 0x200
cbw
cmovb rbp, rcx
mov cx, r10w
cwde
movsx rcx, ax
movzx ecx, byte [rbp]
dec rbp
movsx rax, sp
movzx eax, bp
inc word [r14 + rcx*2 + 0x840a]
setae bpl
cwde
lea rcx, [0x1400bcd30]
movsx rbp, r12w
movzx bp, r13b
movzx eax, word [rcx + rsi*2]
movsxd rbp, r13d
mov rcx, r12
movzx bp, r15b
mov r8d, dword [rsp + 0x2c]
movzx bp, al
movzx ebp, di
dec ebp
mov ebp, dword [rsp + 0x28]
jmp 0x1403aaa72
inc word [r14 + rax*2 + 0x81ca]
jmp 0x1403aaa86
sub r12d, r12d
dec eax
dec r8d
bswap rax
mov r12b, spl
not r12b
cmove rdx, rcx
cmovno eax, r11d
mov r12b, r10b
sete r12b
mov eax, 8
cmove r8d, eax
dec al
movzx eax, r8w
shr rax, cl
add r12, rcx
movzx rax, r13w
or al, 0xe5
add ebp, r13d
dec al
btr ax, 0x3e
xadd ah, al
add ebx, r13d
shr ax, cl
add r15d, r13d
movsxd rax, eax
movzx eax, dx
btc ax, sp
cmp r15d, 0x8000
setno ah
not ah
nop
mov eax, 0x8000
jmp 0x1403aaaf9
cmovae r15d, eax
sub edi, r13d
cmc
cmp r12, qword [rsp + 0x58]
jmp 0x1403aab0b
jbe 0x1403aa487
mov dword [r14 + 0x24], ebx
adc cl, ah
cmp r10b, 0x5a
shr rcx, 0xbc
mov dword [r14 + 0x28], edi
shrd cx, di, 0xe
mov dword [r14 + 0x2c], r15d
movsx ecx, r15w
mov dword [r14 + 0x54], ebp
bsf cx, r15w
mov qword [r14 + 0x30], r12
mov qword [r14 + 0x38], rdx
or cl, r9b
movsx rcx, dx
mov dword [r14 + 0x50], r8d
mov rcx, r14
test r10w, r8w
xor edx, edx
jmp 0x1403aab5a
call fcn.1403ac066
test eax, eax
jmp 0x1403aab66
jne 0x1403aaba0
mov ebp, dword [r14 + 0x54]
cwd
mov r12, qword [r14 + 0x30]
movzx dx, al
not r8d
movzx r8, ax
mov rdx, qword [r14 + 0x38]
mov r8d, dword [r14 + 0x50]
jmp 0x1403aab8e
jmp 0x1403aa487
mov esi, r15d
jmp 0x1403aab9b
jmp 0x1403aa0cb
setns al
jmp 0x1403aabb0
movzx eax, al
bts r13w, di
add rsp, 0x88
movsxd rbp, eax
setns dil
pop rbx
pop rbp
movsx edi, r12w
movzx si, r8b
movzx r15, r10w
pop rdi
movsxd r14, r8d
movsx r12, r14w
mov sil, 0xf0
pop rsi
bswap r12
movzx r13w, bpl
movsx r12, bx
pop r12
movsx r14w, r15b
pop r13
movzx r14d, r13w
jmp 0x1403aabff
pop r14
movsx r15w, r12b
not r15b
setb r15b
pop r15
jmp 0x1403aac14
ret
mov esi, r15d
movzx rbp, r15w
movsx bx, sil
mov ebx, edi
cdq
lahf
movsx ax, r13b
mov r8d, dword [rsp + 0x2c]
mov ebp, dword [rsp + 0x28]
movsxd rax, r14d
not dl
movzx rax, r9w
mov rdx, qword [rsp + 0x30]
movzx eax, si
movsxd rax, edi
mov eax, dword [rsp + 0x24]
jmp 0x1403aac50
mov dword [r14 + 0x24], eax
mov dword [r14 + 0x28], ebx
mov dword [r14 + 0x2c], esi
mov dword [r14 + 0x54], ebp
mov al, dil
mov qword [r14 + 0x30], r12
mov qword [r14 + 0x38], rdx
mov dword [r14 + 0x50], r8d
mov al, 1
jmp 0x1403aac76
jmp 0x1403aabb0