Function at 0x140488777
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
dec bl
cdqe
push rsi
shld rbp, r9, 0x5d
add bp, bx
push rdi
shr dil, cl
cmp si, r13w
rcr al, cl
push r12
movsx eax, r15w
rol edi, 0xef
movsxd r12, r15d
push r13
shl bx, 0x78
push r14
push r15
sbb bh, 0x2f
mov rbp, rsp
sub rsp, 0x80
shl bl, cl
ror dil, 0x35
mov rax, qword [0x1400b7288]
xor rax, rsp
btr r14w, 0xc6
btr r15w, r10w
mov qword [rbp - 0x10], rax
rcr al, cl
mov rax, qword [rbp + 0x60]
bts rbx, r15
cmp ax, sp
mov bl, r11b
lea r15, [rbp - 0x30]
and si, 0x1331
movsx rsi, r14w
mov r14, qword [rbp + 0x68]
bsr esi, eax
sub r13d, r13d
shld esi, r10d, 0x6d
mov rdi, qword [rbp + 0x70]
sbb r12, 0x63b8652b
cmp r9d, 0x3e7
mov qword [rbp - 0x38], rax
mov eax, r15d
jmp 0x140488820
mov esi, r9d
movzx eax, ax
movsx rax, r12w
setg r13b
mov dword [rbp - 0x60], r9d
add r13d, 3
dec r12w
test r11b, r11b
mov dword [rbp - 0x58], r8d
stc
cmp r9d, 0x63
movsx rbx, r9w
mov qword [rbp - 0x48], rdi
mov eax, 2
mov qword [rbp - 0x50], r15
movsx r12w, r15b
bswap r12d
cmovle r13d, eax
shrd r12w, r14w, 1
shl ah, cl
shr ax, 0xe
mov r12, rdx
xor bl, r10b
sub ax, 0x6840
rol eax, cl
cmp r9d, 9
cdqe
not bh
mov eax, 1
bswap bx
mov ebx, 0x1f1655ad
mov rbx, rcx
jmp 0x140488898
cmovle r13d, eax
and dword [r14], 0
call fcn.140462f15
test al, al
jmp 0x1404888ac
jne 0x140488a6a
mov esi, 0xffff
test al, 0x11
cmp r14b, al
cmp dword [r14], r13d
jge 0x140488a66
cmp byte [rbx + 8], 0
jmp 0x1404888ce
jne 0x14048895a
mov rcx, qword [rbx]
cmp dh, dl
test rcx, rcx
jmp 0x1404888e1
je 0x14048894a
mov rax, qword [rcx + 0x38]
mov rdx, qword [rax]
cmp si, r9w
test r10d, esi
clc
test rdx, rdx
je 0x14048891c
mov rax, qword [rcx + 0x50]
cmp dh, 0xcd
cmp dword [rax], 0
jmp 0x14048890e
jle 0x14048891c
movzx eax, word [rdx]
jmp 0x14048892e
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
jmp 0x140488928
call qword [case.0x14044236c.0]
cmp si, ax
jmp 0x140488936
je 0x14048894a
mov word [rbx + 0xa], ax
jmp 0x140488945
jmp 0x140488952
and qword [rbx], 0
movzx eax, r8w
mov byte [rbx + 8], 1
rdtsc
cqo
mov rax, qword [rdi]
movsxd rcx, r11d
bswap cx
movsx cx, bl
mov edx, 0x48
xchg ecx, r8d
jmp 0x140488977
movzx r8d, word [rbx + 0xa]
not cl
xchg cx, cx
setne cl
mov rcx, rdi
jmp 0x14048898c
mov rax, qword [rax + 0x20]
call qword [case.0x14044236c.0]
test al, al
jmp 0x14048899d
je 0x140488a66
mov rcx, qword [rbx]
cmp dh, 0xec
jmp 0x1404889ae
test rcx, rcx
jmp 0x1404889b6
je 0x140488a2c
mov rax, qword [rcx + 0x38]
cmp qword [rax], 0
je 0x140488a00
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jle 0x140488a00
dec dword [rax]
mov rax, 0x2617de4
mov rcx, qword [rcx + 0x38]
mov rdx, qword [rcx]
lea rax, [rdx + 2]
jmp 0x1404889f0
mov qword [rcx], rax
mov rax, r11
cdqe
movzx eax, word [rdx]
jmp 0x140488a12
mov rax, qword [rcx]
mov rax, qword [rax + 0x38]
jmp 0x140488a0c
call qword [case.0x14044236c.0]
cmp si, ax
jmp 0x140488a1a
je 0x140488a2c
sub al, al
jmp 0x140488a27
jmp 0x140488a32
and qword [rbx], 0
mov al, 1
mov byte [rbx + 8], al
mov ch, 0x8c
mov rdx, r12
inc cl
mov ch, 0x32
inc dword [r14]
cmovl rcx, rsi
movzx cx, r12b
mov rcx, rbx
jmp 0x140488a54
call fcn.140462f15
test al, al
jmp 0x140488a60
je 0x1404888bc
mov esi, dword [rbp - 0x60]
cdq
mov rdx, r12
mov cl, 0x1f
mov rcx, rbx
jmp 0x140488a77
call fcn.140462f15
test al, al
jne 0x140488d23
cmp dword [r14], r13d
jge 0x140488d23
cmp byte [rbx + 8], al
jmp 0x140488a95
jne 0x140488b3f
mov rcx, qword [rbx]
stc
test bpl, r13b
test rcx, rcx
jmp 0x140488aaa
je 0x140488b2c
mov rax, qword [rcx + 0x38]
cmovne edx, r9d
stc
movzx dx, ch
mov rdx, qword [rax]
test rdx, rdx
je 0x140488af1
mov rax, qword [rcx + 0x50]
test r12b, 0xc0
jmp 0x140488ad6
cmp dword [rax], 0
jmp 0x140488ade
jle 0x140488af1
movzx eax, word [rdx]
jmp 0x140488aec
jmp 0x140488b03
mov rax, qword [rcx]
jmp 0x140488af9
mov rax, qword [rax + 0x30]
call qword [case.0x14044236c.0]
mov ecx, 0xffff
test r12b, 0xfe
test dil, r14b
clc
cmp cx, ax
jmp 0x140488b18
je 0x140488b2c
mov word [rbx + 0xa], ax
jmp 0x140488b27
jmp 0x140488b3b
and qword [rbx], 0
movzx eax, si
bsr cx, di
bsf rcx, r8
mov byte [rbx + 8], 1
mov rax, qword [rdi]
xor r8d, r8d
movzx edx, word [rbx + 0xa]
cmovo cx, bp
not cx
mov cl, r15b
mov rcx, rdi
jmp 0x140488b5b
mov rax, qword [rax + 0x70]
jmp 0x140488b64
call qword [case.0x14044236c.0]
cmp al, 0x2b
jmp 0x140488b71
jne 0x140488c51
mov rcx, qword [rbx]
lea r15, [rbp - 0x2f]
clc
test rax, 0x27720d3c
mov byte [rbp - 0x30], al
cmc
stc
mov qword [rbp - 0x50], r15
test rcx, rcx
jmp 0x140488b96
je 0x140488c39
mov rax, qword [rcx + 0x38]
cmc
cmp rcx, 0x417f0fd8
cmp qword [rax], 0
jmp 0x140488bb1
je 0x140488c0b
mov rax, qword [rcx + 0x50]
cmp bl, bpl
test edx, esp
cmc
cmp dword [rax], 0
jmp 0x140488bc9
jle 0x140488c0b
dec dword [rax]
not edx
cbw
cdqe
mov rcx, qword [rcx + 0x38]
movsx rax, r10w
mov rdx, r10
mov rdx, qword [rcx]
lea rax, [rdx + 2]
jmp 0x140488bee
mov qword [rcx], rax
cmovnp ax, r11w
movsx ax, r11b
not ax
movzx eax, word [rdx]
jmp 0x140488c06
jmp 0x140488c18
mov rax, qword [rcx]
mov rax, qword [rax + 0x38]
call qword [case.0x14044236c.0]
mov ecx, 0xffff
clc
cmc
cmp cx, ax
jmp 0x140488c27
je 0x140488c39
sub al, al
jmp 0x140488c34
jmp 0x140488c44
and qword [rbx], 0
mov al, 1
jmp 0x140488c44
mov byte [rbx + 8], al
jmp 0x140488c4c
jmp 0x140488d23
cmp al, 0x2d
jne 0x140488d23
mov rcx, qword [rbx]
cmovl r15, r13
lea r15, [rbp - 0x2f]
clc
jmp 0x140488c6a
mov byte [rbp - 0x30], al
clc
cmp r8d, 0x29851732
cmc
mov qword [rbp - 0x50], r15
clc
jmp 0x140488c80
test rcx, rcx
je 0x140488d14
mov rax, qword [rcx + 0x38]
cmp qword [rax], 0
jmp 0x140488c96
je 0x140488cdc
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jmp 0x140488ca8
jle 0x140488cdc
dec dword [rax]
movsx eax, si
cbw
movzx rax, r8w
mov rcx, qword [rcx + 0x38]
mov rdx, qword [rcx]
lea rax, [rdx + 2]
jmp 0x140488cc9
mov qword [rcx], rax
nop
movsxd rax, edi
sets al
movzx eax, word [rdx]
jmp 0x140488cf3
mov rax, qword [rcx]
jmp 0x140488ce4
mov rax, qword [rax + 0x38]
jmp 0x140488ced
call qword [case.0x14044236c.0]
mov ecx, 0xffff
cmp cx, ax
jmp 0x140488d00
je 0x140488d14
mov byte [rbx + 8], 0
jmp 0x140488d0f
jmp 0x140488d23
and qword [rbx], 0
bswap dx
mov byte [rbx + 8], 1
mov cx, bx
cdq
mov rdx, r12
mov rcx, rbx
jmp 0x140488d2e
call fcn.140462f15
test al, al
jne 0x140488f2d
mov esi, 1
bswap r15
rol r15b, cl
mov r15d, 0xffff
jmp 0x140488d57
cmp dword [r14], r13d
jmp 0x140488d5f
jge 0x140488f1a
cmp byte [rbx + 8], 0
jmp 0x140488d6e
jne 0x140488e15
mov rcx, qword [rbx]
cmp sp, di
test rcx, rcx
jmp 0x140488d82
je 0x140488e02
mov rax, qword [rcx + 0x38]
shrd edx, ecx, 0x84
mov rdx, qword [rax]
cmp r12w, r8w
stc
test rdx, rdx
jmp 0x140488da0
je 0x140488dce
mov rax, qword [rcx + 0x50]
jmp 0x140488db3
cmp dword [rax], 0
jmp 0x140488dbb
jle 0x140488dce
movzx eax, word [rdx]
jmp 0x140488dc9
jmp 0x140488de5
mov rax, qword [rcx]
jmp 0x140488dd6
mov rax, qword [rax + 0x30]
jmp 0x140488ddf
call qword [case.0x14044236c.0]
cmp r15w, ax
jmp 0x140488dee
je 0x140488e02
mov word [rbx + 0xa], ax
jmp 0x140488dfd
jmp 0x140488e0e
and qword [rbx], 0
or dx, 0x340
shl ah, 0xc7
mov byte [rbx + 8], sil
adc ch, 0xa4
mov rax, qword [rdi]
bts dx, sp
sub r8d, r8d
cdq
cqo
movzx edx, word [rbx + 0xa]
mov rcx, rdi
jmp 0x140488e2e
mov rax, qword [rax + 0x70]
jmp 0x140488e37
call qword [case.0x14044236c.0]
cmp al, 0x30
jmp 0x140488e44
jne 0x140488f1a
add dword [r14], esi
mov rcx, qword [rbx]
cmp dl, 0x3e
test rcx, rcx
jmp 0x140488e5b
je 0x140488ee5
mov rax, qword [rcx + 0x38]
jmp 0x140488e6f
cmp qword [rax], 0
jmp 0x140488e78
je 0x140488eb8
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jmp 0x140488e8a
jle 0x140488eb8
dec dword [rax]
mov rcx, qword [rcx + 0x38]
mov rdx, qword [rcx]
cwde
cmovne ax, r13w
lea rax, [rdx + 2]
jmp 0x140488ea8
mov qword [rcx], rax
movzx eax, word [rdx]
jmp 0x140488eb3
jmp 0x140488ecf
mov rax, qword [rcx]
jmp 0x140488ec0
mov rax, qword [rax + 0x38]
jmp 0x140488ec9
call qword [case.0x14044236c.0]
cmp r15w, ax
jmp 0x140488ed8
je 0x140488ee5
xor al, al
jmp 0x140488ef1
and qword [rbx], 0
setg al
cwd
mov al, sil
mov rdx, r12
movzx ecx, sp
mov byte [rbx + 8], al
movzx ecx, r11w
mov cx, 0x741a
not cx
mov rcx, rbx
call fcn.140462f15
test al, al
jmp 0x140488f14
je 0x140488d57
mov r15, qword [rbp - 0x50]
inc sil
sete sil
mov esi, dword [rbp - 0x60]
jmp 0x140488f2d
cmp dword [r14], 0
jmp 0x140488f36
jle 0x140488f4b
mov byte [r15], 0x30
movsx rdx, dx
inc r15
not cx
cdq
mov rdx, r12
bswap cx
mov rcx, rbx
jmp 0x140488f59
call fcn.140462f15
test al, al
jmp 0x140488f65
jne 0x1404891ba
lea rdi, [rbx + 0xa]
sal si, 0xb1
mov rsi, rdi
stc
test r15b, 0xd0
cmp rax, r10
cmp byte [rbx + 8], 0
jmp 0x140488f87
jne 0x14048903a
mov rcx, qword [rbx]
jmp 0x140488f9c
test rcx, rcx
jmp 0x140488fa4
je 0x140489031
mov rax, qword [rcx + 0x38]
sub dl, 0xcf
jmp 0x140488fb6
mov rdx, qword [rax]
jmp 0x140488fc1
test rdx, rdx
jmp 0x140488fc9
je 0x140488ff7
mov rax, qword [rcx + 0x50]
test esp, 0x596c230e
test r11b, al
cmp dword [rax], 0
jmp 0x140488fe4
jle 0x140488ff7
movzx eax, word [rdx]
jmp 0x140488ff2
jmp 0x14048900e
mov rax, qword [rcx]
jmp 0x140488fff
mov rax, qword [rax + 0x30]
jmp 0x140489008
call qword [case.0x14044236c.0]
mov ecx, 0xffff
cmp cx, ax
jmp 0x14048901b
je 0x140489031
mov word [rsi], ax
mov rdi, rsi
jmp 0x14048902c
jmp 0x140489036
and qword [rbx], 0
stc
mov byte [rbx + 8], 1
mov rcx, qword [rbp - 0x48]
rdtsc
dec eax
sub r8d, r8d
cmovns rdx, rcx
movzx edx, word [rdi]
mov rax, qword [rcx]
mov rax, qword [rax + 0x70]
jmp 0x140489058
call qword [case.0x14044236c.0]
lea ecx, [rax - 0x30]
cmc
cmp cl, 9
jmp 0x14048906a
ja 0x1404891ae
mov ecx, dword [r14]
clc
jmp 0x14048907a
cmp ecx, r13d
jmp 0x140489082
jge 0x1404891ae
mov byte [r15], al
cqo
movzx dx, bpl
lea rdx, [rbp - 0x11]
bsr rax, rax
inc al
cmp r15, rdx
jmp 0x1404890a4
lea rax, [r15 + 1]
cmovae rax, r15
sal r15b, 0x24
cmove r15, rbp
or r15w, 0x6a6f
mov r15, rax
rol ah, 0x44
movzx ax, r9b
bts rax, rdi
lea eax, [rcx + 1]
or cx, r13w
mov dword [r14], eax
mov cl, r12b
neg ch
mov rcx, qword [rbx]
test rcx, rcx
jmp 0x1404890e3
je 0x140489179
mov rax, qword [rcx + 0x38]
cmc
cmp qword [rax], 0
jmp 0x1404890f7
je 0x140489137
mov rax, qword [rcx + 0x50]
cmp dword [rax], 0
jmp 0x140489109
jle 0x140489137
dec dword [rax]
lahf
mov rcx, qword [rcx + 0x38]
mov rdx, qword [rcx]
nop
mov ax, 0x391
lea rax, [rdx + 2]
jmp 0x140489128
mov qword [rcx], rax
cmovle ax, dx
movzx eax, word [rdx]
jmp 0x14048914e
mov rax, qword [rcx]
jmp 0x14048913f
mov rax, qword [rax + 0x38]
jmp 0x140489148
call qword [case.0x14044236c.0]
mov ecx, 0xffff
cmp rbx, 0x64d778fd
jmp 0x14048915f
cmp cx, ax
jmp 0x140489167
je 0x140489179
xor al, al
jmp 0x140489174
jmp 0x140489184
and qword [rbx], 0
movsx edx, si
mov al, 1
cqo
mov rdx, r12
bswap rcx
movzx rcx, r13w
mov byte [rbx + 8], al
bswap rcx
mov rcx, rbx
jmp 0x14048919c
call fcn.140462f15
test al, al
jmp 0x1404891a8
je 0x140488f7e
mov esi, dword [rbp - 0x60]
sal rax, cl
sub r9w, si
cbw
cmp dword [r14], 0
setb r8b
movsxd r8, edi
lea rax, [rbp - 0x30]
bswap rcx
mov r8w, 0x17d3
cwd
lea r9, [rbp - 0x5c]
mov r8d, 0xa
mov dl, r8b
cmovne rax, r15
not ecx
movsxd rdx, edx
bsf edx, r8d
lea rdx, [rbp - 0x40]
cmc
shl cl, 0x37
shl cl, cl
and dword [rbp - 0x5c], 0
mov cl, r15b
movsx rcx, di
lea rcx, [rbp - 0x30]
mov byte [rax], 0
jmp 0x14048920e
call fcn.1404987d4
mov rdx, r12
movsxd rcx, ebx
mov rcx, rbx
xchg rdi, rdi
movsx rdi, r11w
cmovp di, r8w
mov edi, eax
jmp 0x14048922f
call fcn.140462f15
sub ecx, ecx
test al, al
cbw
lea eax, [rcx + 1]
jmp 0x140489242
cmovne ecx, eax
or eax, 0x4a430875
rcr rax, cl
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x40], rax
jmp 0x14048925a
je 0x140489290
cmp dword [rbp - 0x5c], 0
jne 0x140489290
cmp edi, dword [rbp - 0x58]
jmp 0x140489272
jl 0x140489290
cmp esi, edi
jmp 0x14048927f
jl 0x140489290
mov rax, qword [rbp - 0x38]
mov dword [rax], edi
jmp 0x140489298
or ecx, 2
jmp 0x140489298
mov eax, ecx
add cl, r12b
cmovs cx, r12w
mov rcx, qword [rbp - 0x10]
jmp 0x1404892ab
xor rcx, rsp
jmp 0x1404892b3
call fcn.1404996f5
mov rbx, qword [rsp + 0xd0]
sal esi, 0x66
add rsp, 0x80
mov sil, 0xcb
pop r15
mov r14w, 0x5f5e
pop r14
setns sil
xchg bpl, dil
movsx r13d, r13w
pop r13
movzx r12d, r11w
bswap r12d
movzx r12w, sil
pop r12
mov bpl, 0xe
pop rdi
jmp 0x1404892fd
pop rsi
movzx rbp, r12w
bswap rbp
pop rbp
jmp 0x14048930b
ret