Function at 0x140130d39
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dl, 0x7c
xchg dword [rdx - 0x37], ebx
and eax, 0x8b2ee143
jl 0x14012f449
push r8
jbe 0x14012f41e
add eax, 0x2dc3f645
retf 0x9aad
int3
in al, dx
or byte [rax - 0x73], cl
lodsb al, byte [rsi]
and al, 0xa0
cld
invalid
push rbx
xor ebp, 0x838b1169
jp 0x1401311a3
lea ebp, [rcx + 0x5c5e]
lea esi, [rbp + 0xaadf]
call rax
test rsi, rbx
div rdi
movabs rbx, 0xcd6f27943a687eb
xor ebx, 0x8c92b23b
jae 0x14012f41c
jnp 0x1401300c3
jg 0x14013098b
ret 0x30
xchg rbp, rcx
mov rbp, qword [rax + 0x18]
xchg rbp, rcx
add rdi, r9
jmp 0x14013096c
xchg r8, rax
mov r8, qword [rcx + 0x10]
xchg r8, rax
jmp 0x140130979
xchg rbx, rcx
mov rbx, qword [rax]
xchg rbx, rcx
xchg r9, r12
mov r12, qword [rcx + 0x30]
xchg r12, r9
movsxd rax, dword [r9 + 0x3c]
jmp 0x1401309db
int3
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140130a61
cmp edx, 0x4c1b866d
jmp 0x1401309cd
mov edx, 0xb38c2ed
lea rax, [r11 + r10*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
jmp 0x140130a56
je 0x140130aa8
inc r8d
jmp 0x1401309ed
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax + rax]
mov r10d, r8d
jne 0x140130a2d
je 0x140130a2d
ror r8d, 0x93
rol edi, 0x82
pushfq
rcl r13d, 0xe2
bswap rsi
jmp 0x14012fd0e
jmp 0x1401309b2
test al, al
je 0x1401309d3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
jne 0x140130a76
je 0x140130a76
lea ecx, [rbp + 0x318f]
movabs r10, 0x5ae83cffffff1ae9
xor esi, 0x756fd77f
lea r8d, [rcx + 0xedf2]
add r8d, 0x56c4817f
call 0x140130ef6
lea r12d, [rbp - 0x4a7]
lea r14d, [rbp + 0x3305]
jge 0x140130a94
jmp 0x140130995
add al, 0
add byte [rbp + rcx*4 - 0x5b], al
pop rcx
sti
invalid
ret
mov ecx, dword [rbx + r9 + 0x24]
xorps xmm0, xmm0
add rcx, r9
xchg r15, r14
mov qword [rsp + 0x20], r14
xchg r15, r14
movzx edx, word [rcx + r10*2]
jmp 0x140130be3
test al, al
je 0x140130c0f
nop dword [rax]
movsx eax, al
jmp 0x140130ba3
cmp r10, rcx
jae 0x140130c7a
movabs r11, 0x47ae147ae147ae15
je 0x140130af7
jne 0x140130af7
mul rdi
movabs rsi, 0x500630000002ebe9
jmp 0x140130de7
ror r9d, 0x8d
ror r9d, 0x3a
jb 0x14013034b
int3
mov r10d, r8d
mov edx, 0x41e802d3
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
jmp 0x140130ac8
shl rdx, 1
or rax, rdx
xchg r9, rcx
mov rcx, rax
je 0x140130b6d
jne 0x140130b6d
test r15, rdx
sub r9d, 0x93449189
rcr edi, 0xc0
jmp rax
jmp 0x140130d3a
ja 0x14013193a
mov r10, qword [rbp + 0x120]
mov rcx, qword [rbp + 0x118]
add rcx, r10
mov qword [rsp + 0x40], r15
jmp 0x140130adb
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
jmp 0x140130bfb
sub r10, 0x52f093ff
add rcx, qword [rbp + 0x118]
cmp r10, rcx
jmp 0x140130c74
xchg r11, rax
mov r11, qword [rsp + 0x30]
xchg r11, rax
dec rax
cmp rax, 0xfffffffffffffffd
jmp 0x140130b82
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov r14d, dword [rcx + rdx*4]
lea rdx, [rbp + 0x178]
jmp 0x140130d5e
test al, al
jne 0x140130ad3
cmp edx, 0xf6db493b
je 0x140130ecc
inc r8d
jmp 0x140130b1c
mov edx, 4
mov qword [rsp + 0x40], r9
cmp r13, rdx
jmp 0x140130e13
shr rcx, 1
shr rcx, 1
imul rcx, rcx, 0x64
sub r8, rcx
cmp r8, 0x4b
jb 0x140130ea4
jmp 0x140130c17
shl rdx, 1
shl rdx, 1
shl rdx, 1
or rax, rdx
xchg r11, r8
mov r11, rax
jmp 0x140130c5c
xchg r8, r11
xchg rbp, rax
mov rbp, r11
xchg rbp, rax
mul r8
xchg r12, rcx
mov r12, r8
jmp 0x140130eb7
jb 0x140130de8
lea rax, [rsp + 0x58]
mov dword [rsp + 0x58], r15d
mov r9d, 0x20
mov qword [rsp + 0x20], rax
jmp 0x140130e53
xchg r15, r13
mov qword [rsp + 0x30], r13
xchg r15, r13
call rdi
test eax, eax
jne 0x14013193a
jne 0x140130cd7
je 0x140130cd7
call rax
jmp rax
jmp 0x140130bce
je 0x140130cfb
movzx eax, byte [r9]
inc al
mov byte [r9], al
inc ecx
movsxd rax, ecx
jmp 0x140130e01
xchg rcx, r15
mov qword [rbp + 0x188], rcx
xchg r15, rcx
xchg r13, rbp
movdqu xmmword [r13 + 0x198], xmm0
xchg r13, rbp
jmp 0x140130c94
mov r10, qword [rax + 0x18]
xchg r10, rcx
xchg rsi, rax
mov rsi, qword [rcx + 0x10]
xchg rsi, rax
jmp 0x140130e32
invalid
xchg rcx, r9
and r9d, 0xfff
add r9, r10
mov byte [r9], 0x45
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140130c17
jmp 0x140130dd1
add r14, r9
mov qword [rbp + 0x178], 0x30
mov r9d, 0x64
mov qword [rbp + 0x190], r15
mov r8d, r9d
mov qword [rbp + 0x180], r15
lea rcx, [rsp + 0x30]
je 0x140130db4
jne 0x140130db4
rcl ecx, 0xbb
cmp rdi, rdx
test edi, 0xeff4b281
test esi, 0x8d8f0666
call rax
ret
jmp 0x140130d05
rdtsc
shl rdx, 0xb
shl rdx, 1
shl rdx, 3
shl rdx, 0xe
jmp 0x140130c45
nop
rdtsc
shl rdx, 0x13
shl rdx, 7
shl rdx, 3
shl rdx, 1
shl rdx, 1
shl edx, 1
jmp 0x140130b3a
cmp rax, rdx
jb 0x140130e27
movzx eax, byte [r9]
jmp 0x140130e9b
mov ecx, r15d
cmovb rdx, r13
test rdx, rdx
je 0x140130e0a
nop dword [rax]
movzx eax, byte [r9]
test al, al
jmp 0x140130cec
mov rcx, qword [rax]
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop dword [rax]
jmp 0x140130b1c
lea r8, [rbp + 0x118]
mov rcx, 0xffffffffffffffff
mov ecx, 0xffffffff
lea rdx, [rbp + 0x120]
call rsi
mov rax, qword gs:[0x60]
mov r8d, r15d
xchg rcx, r10
jne 0x140130e85
je 0x140130e85
lea ebp, [rdi + 0xa68]
movabs r12, 0x4bd6dffffffe9ce9
lea r14d, [rdx + 0x830b]
popf
call 0x14013037d
jmp 0x140130d26
sub al, 0x8e
add al, 4
add al, dl
mov byte [r9], al
mov rcx, qword [rbp + 0x120]
add r10, 0x52f0a3ff
jmp 0x140130bb8
xchg r12, rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 4
jmp 0x140130c29
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
jmp 0x140130f45
xchg r9, r11
mov r11, qword [rdx + 0x30]
xchg r9, r11
movsxd rcx, dword [r9 + 0x3c]
mov ebx, dword [rcx + r9 + 0x88]
jmp 0x140130f90
call rax
mov r10, qword [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
jmp 0x140130f73
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
xchg rdx, rbp
mov rbp, qword [rcx]
xchg rbp, rdx
jmp 0x140130ee9
lea rdx, [0x140134b30]
add rax, r9
mov ecx, 1
jmp 0x140130f04
xor ecx, ecx
xchg r9, rax
mov rdi, r9
xchg r9, rax
call r10
mov rcx, qword gs:[0x60]
mov r8d, r15d
jmp 0x140130f2f
mov r11d, dword [rbx + r9 + 0x20]
mov ecx, 0xfffed4e9
jmp [0xc4d62e25]
invalid
rcl edx, 0x99
cmp edx, 0xb45d3e63
test r10d, 0xf29a5752
test esi, 0xec9c3e41
lea r12d, [rcx + 0x44fe]
jge 0x1401321a0
cmp r9, rbp
rcl ebx, 0x6e
jg 0x14013095a
jmp rax
mov eax, 0xffffffff