Function at 0x1400fc428
Capabilities:
Execute anti-debugging instructions

Disassembly:
add byte [rax], al
mov rax, rcx
mov ecx, dword [rsp + 0x40]
push rax
xchg ecx, eax
pop rcx
cmp dword [rsp + 0x24], eax
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x66]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
jae 0x1400ab280
mov dword [rsp + 0x20], 0
lea rcx, [rcx]
mov rax, rcx
mov ecx, dword [rsp + 0x24]
push rax
xchg ecx, eax
pop rcx
lea r8, [rsp + 0x20]
mov rsi, rsi
xchg rcx, rax
mov rax, qword [rsp + 0x30]
push rcx
xchg rcx, rax
pop rax
mov rdx, rbx
mov ebx, dword [rcx + rax*4]
push rdx
xchg edx, ebx
pop rbx
mov rcx, rsi
mov esi, 0x7257e94
push rcx
xchg ecx, esi
pop rsi
pushfq
pushfq
add rbp, 0x45
popfq
lea rbp, [rbp - 0x45]
push 0x46662edd
push rax
mov rax, qword [rsp + 8]
xor ecx, eax
mov rax, qword [rsp]
lea rsp, [rsp + 0x10]
popfq
push rdi
mov rdi, rdx
pop rdi
jmp 0x14011a177
xchg rcx, rax
mov rax, qword [rsp + 0x30]
push rcx
xchg rcx, rax
pop rax
jmp 0x14011a27f
jmp 0x1401b9c98
add byte [rax], al
mov rax, rdi
mov edi, dword [rsp + 0x40]
push rax
xchg edi, eax
pop rdi
cmp dword [rsp + 0x24], eax
lea rax, [rax]
jae 0x1400ab280
mov dword [rsp + 0x20], 0
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x37]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
mov rax, rcx
mov ecx, dword [rsp + 0x24]
push rax
xchg ecx, eax
pop rcx
lea r8, [rsp + 0x20]
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x17]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rbx
mov rbx, qword [rsp + 0x30]
push rcx
xchg rcx, rbx
pop rbx
mov rdx, rbx
mov ebx, dword [rcx + rax*4]
push rdx
xchg edx, ebx
pop rbx
mov rcx, rax
mov eax, 0x6da8b6f
push rcx
xchg ecx, eax
pop rax
pushfq
lea rcx, [rcx]
push 0x4799db26
push rdi
mov rdi, qword [rsp + 8]
xor ecx, edi
mov rdi, qword [rsp]
lea rsp, [rsp + 0x10]
popfq
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x73]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x14011a177
popfq
mov rax, rax
je 0x1401089e8
jne 0x1401089e8
jmp 0x1401089e6
call fcn.140119e40
call 0x1400f68d0
scasb al, byte [rdi]
and byte [rsi], bh
adc ebx, ebx
adc dl, byte [rbx + rbp*2 + 0x20bdb74f]
lea rax, str.VMWARE
call fcn.1400a3b30
invalid
call fcn.14014b740
mov eax, dword [rsp + 0x2c]
call fcn.140125810
invalid
and al, 8
call fcn.1401b0be0
fldenv [rsi + 0x55]
or dword [rbx + 0x66], esi
in eax, 0x38
lea rdi, cs:[0x1401d7a90]
call fcn.140114fe8
push rax
jl 0x1401b9c4e
jbe 0x1401b9cb7
add byte [rsi + rdx*2 + 0x24748b48], bl
or byte [rax - 0x73], cl
jbe 0x1401b9cc6
xchg qword [rsp + 8], rsi
and al, 8
mov qword [rsp + 8], rsi
mov rsi, qword [rsp]
lea rsp, [rsp + 8]
xchg rsi, rax
lea rsp, [rsp - 8]
mov qword [rsp], rsi
mov rsi, rax
mov rax, qword [rsp]
xchg rdx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rax
mov rax, rdx
mov rdx, qword [rsp]
rdtsc
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x51]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
and rax, 1
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x37]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rdx
xchg qword [rsp], rcx
xchg rcx, rdx
lea rsp, [rsp + 8]
xchg rcx, rax
xchg qword [rsp], rcx
xchg rcx, rax
lea rsp, [rsp + 8]
je 0x1401ce5b0
jne 0x140116378
jmp 0x1401ce5ae
add byte [rax], al
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x55]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x14008de00
jne 0x14008de00
jmp 0x14008ddfe