Function at 0x2d084
Capabilities:
Execute anti-debugging instructions

Disassembly:
add byte [rax], al
mov rax, rcx
mov ecx, dword [rbp + 4]
push rax
xchg ecx, eax
pop rcx
inc eax
push rsi
mov rsi, qword [rsp + 8]
lea rsi, [rsi + 0x2a]
xchg qword [rsp + 8], rsi
mov qword [rsp + 8], rsi
mov rsi, qword [rsp]
lea rsp, [rsp + 8]
mov dword [rbp + 4], eax
lea rdi, [rdi]
jmp 0x352b8
pushfq
push rbp
mov rbp, rsp
leave
xchg rdi, rax
lea rsp, [rsp - 8]
mov qword [rsp], rdi
mov rdi, rax
mov rax, qword [rsp]
xchg rcx, rdx
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rdx
mov rdx, qword [rsp]
rdtsc
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x28]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
and rax, 1
pushfq
add rbp, 0x70
popfq
lea rbp, [rbp - 0x70]
xchg rdx, rax
xchg qword [rsp], rax
xchg rdx, rax
lea rsp, [rsp + 8]
xchg rcx, rax
xchg qword [rsp], rcx
xchg rcx, rax
lea rsp, [rsp + 8]
je 0x25d18
jne 0x2a4c0
jmp 0x25d16
pushfq
push rsi
mov rsi, qword [rsp + 8]
lea rsi, [rsi + 0xc]
xchg qword [rsp + 8], rsi
mov qword [rsp + 8], rsi
mov rsi, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rax
mov rax, qword [rsp]
xchg rcx, rdx
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rdx
mov rdx, qword [rsp]
rdtsc
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x45]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
and rax, 1
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 3]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rdx, rax
xchg qword [rsp], rax
xchg rdx, rax
lea rsp, [rsp + 8]
xchg rdx, rax
xchg qword [rsp], rdx
xchg rdx, rax
lea rsp, [rsp + 8]
je 0x28768
jne 0x3a380
jmp 0x28766
add byte [rax], al
mov rax, rdx
mov edx, dword [rbp]
push rax
xchg edx, eax
pop rdx
cmp dword [rbp + 4], eax
pushfq
add rbp, 0x7b
popfq
lea rbp, [rbp - 0x7b]
jae 0x26bc8
mov rax, rcx
mov ecx, dword [rbp + 4]
push rax
xchg ecx, eax
pop rcx
mov rcx, rax
mov eax, dword [rbp + 4]
push rcx
xchg ecx, eax
pop rax
add ecx, ecx
lea rcx, [rcx]
mov ecx, ecx
push rsi
mov rsi, qword [rsp + 8]
lea rsi, [rsi + 0x77]
xchg qword [rsp + 8], rsi
mov qword [rsp + 8], rsi
mov rsi, qword [rsp]
lea rsp, [rsp + 8]
xchg rdx, rcx
mov rcx, qword [rbp + 8]
push rdx
xchg rdx, rcx
pop rcx
xchg r8, rbx
mov rbx, qword [rbp + 0x70]
push r8
xchg r8, rbx
pop rbx
mov al, byte [r8 + rax]
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x46]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
mov byte [rdx + rcx], al
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 6]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
mov rax, rdi
mov edi, dword [rbp + 4]
push rax
xchg edi, eax
pop rdi
lea eax, [rax + rax + 1]
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x21]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
mov eax, eax
push rax
mov rax, rdi
pop rax
xchg rcx, rax
mov rax, qword [rbp + 8]
push rcx
xchg rcx, rax
pop rax
mov byte [rcx + rax], 0x63
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x42]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
pushfq
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 0x41]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
xor byte [rcx + rax], 0x63
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x73]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x7e]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x175f0
test byte [rax], al
mov rax, rcx
mov ecx, dword [rbp]
push rax
xchg ecx, eax
pop rcx
shl rax, 1
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x2b]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
lea rsp, [rbp + 0x60]
pushfq
add rbp, 0x39
popfq
lea rbp, [rbp - 0x39]
xchg rcx, rbp
xchg qword [rsp], rcx
xchg rcx, rbp
lea rsp, [rsp + 8]
ret
add byte [rax], al
xchg rbx, rax
mov rbx, qword [rbp + 0x78]
push rax
xchg rbx, rax
pop rbx
xchg qword [rbp + 8], rbx
mov rbx, rax
push qword [rbp + 8]
xchg qword [rbp + 8], rbx
pop rbx
mov dword [rbp + 4], 0x648bfaab
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x5b]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
pushfq
push rbp
mov rbp, rsp
leave
push 0x648bfaab
push rbx
mov rbx, qword [rsp + 8]
xor dword [rbp + 4], ebx
mov rbx, qword [rsp]
lea rsp, [rsp + 0x10]
popfq
push rbp
mov rbp, rsp
leave
jmp 0x2d018
add byte [rax], al
popfq
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x57]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
je 0x26bc8
jne 0x26bc8
jmp 0x26bc6
add byte [rax], al
mov rax, rsi
mov esi, dword [rbp]
push rax
xchg esi, eax
pop rsi
shl rax, 1
push rdi
mov rdi, qword [rsp + 8]
lea rdi, [rdi + 2]
xchg qword [rsp + 8], rdi
mov qword [rsp + 8], rdi
mov rdi, qword [rsp]
lea rsp, [rsp + 8]
lea rsp, [rbp + 0x60]
lea rdi, [rdi]
xchg rcx, rbp
xchg qword [rsp], rcx
xchg rcx, rbp
lea rsp, [rsp + 8]
ret
mov dword [rax], 0x83489c9d
invalid
popfq
pushfq
add rbp, 0x22
popfq
lea rbp, [rbp - 0x22]
je 0x175f0
jne 0x175f0
jmp 0x175ee
popfq
lea rcx, [rcx]
je 0x1df50
jne 0x1df50
jmp 0x1df4e
call fcn.0002d180
call qword [rsi + 0x55155951]
sbb edx, ebx
mov es, word [rcx - 0xd]
pop rsi
or eax, 0x8b48519d
and al, 8
lea rcx, [rcx + 0xb]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x22b50
jne 0x22b50
jmp 0x22b4e
pushfq
pushfq
add rbp, 0x66
popfq
lea rbp, [rbp - 0x66]
xchg rcx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rax
mov rax, qword [rsp]
xchg rdi, rdx
lea rsp, [rsp - 8]
mov qword [rsp], rdi
mov rdi, rdx
mov rdx, qword [rsp]
rdtsc
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x4a]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
and rax, 1
mov rcx, rcx
xchg rdx, rax
xchg qword [rsp], rax
xchg rdx, rax
lea rsp, [rsp + 8]
xchg rdi, rax
xchg qword [rsp], rdi
xchg rdi, rax
lea rsp, [rsp + 8]
je 0x319c0
jne 0x31310
jmp 0x319be
popfq
lea rbx, [rbx]
je 0x1b360
jne 0x1b360
jmp 0x1b35e
ffreep st(0)
popfq
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x11]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
je 0x352b8
jne 0x352b8
jmp 0x352b6
add byte [rax], al
mov rax, rbx
mov ebx, dword [rbp]
push rax
xchg ebx, eax
pop rbx
cmp dword [rbp + 4], eax
mov rbx, rbx
jae 0x18888
mov rax, rcx
mov ecx, dword [rbp + 4]
push rax
xchg ecx, eax
pop rcx
mov rcx, rsi
mov esi, dword [rbp + 4]
push rcx
xchg ecx, esi
pop rsi
add ecx, ecx
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x34]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
mov ecx, ecx
lea rbx, [rbx]
xchg rdx, rdi
mov rdi, qword [rbp + 8]
push rdx
xchg rdx, rdi
pop rdi
xchg r8, rdx
mov rdx, qword [rbp + 0x70]
push r8
xchg r8, rdx
pop rdx
mov al, byte [r8 + rax]
push rbp
mov rbp, rsp
leave
mov byte [rdx + rcx], al
push rsi
mov rsi, qword [rsp + 8]
lea rsi, [rsi + 0x3d]
xchg qword [rsp + 8], rsi
mov qword [rsp + 8], rsi
mov rsi, qword [rsp]
lea rsp, [rsp + 8]
mov rax, rcx
mov ecx, dword [rbp + 4]
push rax
xchg ecx, eax
pop rcx
lea eax, [rax + rax + 1]
pushfq
add rbp, 0x33
popfq
lea rbp, [rbp - 0x33]
mov eax, eax
pushfq
add rbp, 0x57
popfq
lea rbp, [rbp - 0x57]
xchg rcx, rbx
mov rbx, qword [rbp + 8]
push rcx
xchg rcx, rbx
pop rbx
mov byte [rcx + rax], 0x97
lea rdx, [rdx]
pushfq
push rbp
mov rbp, rsp
leave
xor byte [rcx + rax], 0x97
push rdi
mov rdi, qword [rsp + 2]
pop rdi
popfq
pushfq
add rbp, 0x3e
popfq
lea rbp, [rbp - 0x3e]
jmp 0x193b8
popfq
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x24]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
je 0x42368
jne 0x42368
jmp 0x42366
push rax
mov rax, rdi
pop rax
add qword [rsp], 0xfffffffffffecd34
xchg qword [rsp], rax
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 2]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
xchg qword [rsp + 8], rax
lea rsi, [rsi]
xchg qword [rsp], rax
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x37]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x1c]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x2c215
add byte [rax], al
mov rax, rcx
mov ecx, dword [rbp + 4]
push rax
xchg ecx, eax
pop rcx
inc eax
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x3f]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
mov dword [rbp + 4], eax
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x39]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x352b8