Function at 0x140020640
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
movaps xmmword [rsp + 0x40], xmm6
movups xmm6, xmmword [0x14004ce80]
movups xmmword [rsp + 0x20], xmm6
mov dl, 1
lea rcx, [rsp + 0x20]
call fcn.14001fdc0
nop
psrldq xmm6, 8
movq rcx, xmm6
mov esi, 0x96
mov edi, 0x12c
bt rcx, 0x35
jae 0x140020692
cmp ax, di
jmp 0x140020695
cmp ax, si
setae al
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test al, al
je 0x14002074d
lea rdx, str.Virtual_machine_detected_
call fcn.140022590
mov rcx, rax
lea rdx, [0x1400425d4]
call fcn.140022590
lea rcx, [rsp + 0x20]
call fcn.140022f30
mov rbx, rax
lea rdx, str.VM_name:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140022590
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400206ef
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140026180
lea rdx, [0x1400425d4]
mov rcx, rax
call fcn.140022590
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140020768
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020746
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020746
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140036b00
jmp 0x140020768
lea rdx, str.Running_in_baremetal
call fcn.140022590
mov rcx, rax
lea rdx, [0x1400425d4]
call fcn.140022590
movups xmm6, xmmword [0x14004ce80]
movups xmmword [rsp + 0x20], xmm6
mov dl, 1
lea rcx, [rsp + 0x20]
call fcn.14001fdc0
movzx edx, ax
psrldq xmm6, 8
movq rcx, xmm6
bt rcx, 0x35
cmovae di, si
cmp dx, di
jb 0x14002079f
mov al, 0x64
jmp 0x1400207ad
movzx eax, dl
mov ecx, 0x63
cmp edx, 0x64
cmovae eax, ecx
movzx eax, al
movd xmm6, eax
cvtdq2ps xmm6, xmm6
lea rdx, str.VM_certainty__raw_value_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140022590
mov rcx, rax
movaps xmm1, xmm6
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, [0x140042620]
call fcn.140022590
mov rcx, rax
lea rdx, [0x1400425d4]
call fcn.140022590
xorps xmm0, xmm0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
comiss xmm6, xmm0
jbe 0x140020828
lea rdx, str.VM_certainty_is_greater_than_0___closing_the_script.
call fcn.140022590
mov rcx, rax
lea rdx, [0x140023d00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.Certeza_de_VM_es_0___continuando_ejecuci
call fcn.140022590
mov rcx, rax
lea rdx, [0x140023d00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x50
pop rdi
ret