Function at 0x1400fb168
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.14016b760
and esi, dword [rdi - 0x2fc3a6c7]
mov ebx, 0x8d486857
cmp eax, 0xb865b
call fcn.140127c60
stosd dword [rdi], eax
rcr dword [rdx], 2
add byte [rax], al
pushfq
push rdx
mov rdx, qword [rsp + 8]
lea rdx, [rdx + 0x50]
xchg qword [rsp + 8], rdx
mov qword [rsp + 8], rdx
mov rdx, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rax
mov rax, qword [rsp]
xchg rdx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rax
mov rax, rdx
mov rdx, qword [rsp]
rdtsc
push rbp
mov rbp, rsp
leave
and rax, 1
pushfq
add rbp, 0xa
popfq
lea rbp, [rbp - 0xa]
xchg rbx, rdx
xchg qword [rsp], rbx
xchg rbx, rdx
lea rsp, [rsp + 8]
xchg rcx, rax
xchg qword [rsp], rcx
xchg rcx, rax
lea rsp, [rsp + 8]
je 0x1401033e0
jne 0x140138118
jmp 0x1401033de
popfq
push rbp
mov rbp, rsp
leave
je 0x140175388
jne 0x140175388
jmp 0x140175386
jmp 0x1400f0f60
add byte [rax], al
popfq
lea rsi, [rsi]
je 0x14012aa60
jne 0x14012aa60
jmp 0x14012aa5e
pushfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x2f]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rcx
mov rcx, rax
mov rax, qword [rsp]
xchg rdx, rax
lea rsp, [rsp - 8]
mov qword [rsp], rax
mov rax, rdx
mov rdx, qword [rsp]
rdtsc
push rax
mov rax, qword [rsp + 3]
pop rax
and rax, 1
mov rbx, rbx
xchg rcx, rdx
xchg qword [rsp], rcx
xchg rcx, rdx
lea rsp, [rsp + 8]
xchg rcx, rax
xchg qword [rsp], rcx
xchg rcx, rax
lea rsp, [rsp + 8]
je 0x1401667f0
jne 0x1400f6c18
jmp 0x1401667ee
add byte [rax], al
or eax, 0xffffffff
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x40]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x14011aed8
add byte [rax], al
xchg rbx, rcx
mov rcx, qword [rsp + 0x50]
push rbx
xchg rbx, rcx
pop rcx
xchg rbp, rsi
mov rsi, qword [rsp + 0x58]
push rbp
xchg rbp, rsi
pop rsi
xchg rsi, rax
mov rax, qword [rsp + 0x60]
push rsi
xchg rsi, rax
pop rax
add rsp, 0x20
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x55]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
xchg r15, rax
xchg qword [rsp], rax
xchg r15, rax
lea rsp, [rsp + 8]
xchg rbx, r14
xchg qword [rsp], rbx
xchg rbx, r14
lea rsp, [rsp + 8]
xchg rsi, r13
xchg qword [rsp], rsi
xchg rsi, r13
lea rsp, [rsp + 8]
xchg rcx, r12
xchg qword [rsp], rcx
xchg rcx, r12
lea rsp, [rsp + 8]
xchg rdx, rdi
xchg qword [rsp], rdx
xchg rdx, rdi
lea rsp, [rsp + 8]
ret
popfq
push rbp
mov rbp, rsp
leave
je 0x140168080
jne 0x140168080
jmp 0x14016807e
add byte [rax], al
popfq
push rcx
mov rcx, qword [rsp + 8]
lea rcx, [rcx + 0x51]
xchg qword [rsp + 8], rcx
mov qword [rsp + 8], rcx
mov rcx, qword [rsp]
lea rsp, [rsp + 8]
je 0x1401329e8
jne 0x1401329e8
jmp 0x1401329e6
jae 0x140168080
or eax, 0xffffffff
push rbx
mov rbx, qword [rsp + 8]
lea rbx, [rbx + 0x4b]
xchg qword [rsp + 8], rbx
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
lea rsp, [rsp + 8]
jmp 0x1401329e8
add byte [rax], al
xchg rbx, rdx
mov rdx, qword [rsp + 0x50]
push rbx
xchg rbx, rdx
pop rdx
xchg rbp, rbx
mov rbx, qword [rsp + 0x58]
push rbp
xchg rbp, rbx
pop rbx
xchg rsi, rax
mov rax, qword [rsp + 0x60]
push rsi
xchg rsi, rax
pop rax
add rsp, 0x20
push rax
mov rax, qword [rsp + 8]
lea rax, [rax + 0x36]
xchg qword [rsp + 8], rax
mov qword [rsp + 8], rax
mov rax, qword [rsp]
lea rsp, [rsp + 8]
xchg rcx, r15
xchg qword [rsp], rcx
xchg rcx, r15
lea rsp, [rsp + 8]
xchg rbx, r14
xchg qword [rsp], rbx
xchg rbx, r14
lea rsp, [rsp + 8]
xchg rcx, r13
xchg qword [rsp], rcx
xchg rcx, r13
lea rsp, [rsp + 8]
xchg r12, rax
xchg qword [rsp], rax
xchg r12, rax
lea rsp, [rsp + 8]
xchg rdi, rax
xchg qword [rsp], rax
xchg rdi, rax
lea rsp, [rsp + 8]
ret