Function at 0x140143110
Capabilities:
Execute anti-debugging instructions
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xce0
mov rax, qword [0x1401bb548]
xor rax, rsp
mov qword [rsp + 0xcd0], rax
mov rsi, rdx
mov r15, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x38], rdx
xor edi, edi
mov qword [rsp + 0x98], rdi
cmp rcx, 0x1fefa
je 0x140143b01
call fcn.140144380
mov qword [rsp + 0x78], rdi
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rsp + 0x90], rax
mov byte [rsp + 0x20], dil
mov byte [rsp + 0x21], dil
xor dl, dl
test rsi, rsi
je 0x1401431c8
cmp qword [rsi], 7
jb 0x1401431b2
mov dl, 1
mov rax, qword [0x1401bb300]
inc rax
mov qword [0x1401bb300], rax
jmp 0x1401431c8
mov rcx, qword [rsi]
mov rax, qword [0x1401bb2f8]
cmp rcx, rax
jbe 0x1401431c8
mov qword [0x1401bb2f8], rcx
test r15, r15
je 0x140143532
test dl, dl
jne 0x140143532
xor r13b, r13b
mov r12d, edi
nop
mov r14d, r12d
movzx eax, byte [r14 + r15]
xor al, 0x33
cmp al, 0x1d
je 0x1401431fb
cmp al, 0x33
je 0x140143532
inc r12d
jmp 0x1401431e0
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0xd0]
call fcn.140174eb0
mov r8, r14
mov rdx, r15
lea rcx, [rsp + 0xd0]
call fcn.140174800
lea rcx, [rsp + 0xd0]
call fcn.1401422d0
mov rbx, rax
mov qword [rsp + 0xa0], rax
test rax, rax
jne 0x14014335c
xor edx, edx
lea rcx, [rsp + 0xd0]
call fcn.140143b60
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x140143276
mov rax, qword [0x1401bb2a8]
inc rax
mov qword [0x1401bb2a8], rax
jmp 0x140143354
mov rax, qword [0x1401bb2b0]
inc rax
mov qword [0x1401bb2b0], rax
call fcn.140147b00
mov r10, rax
test rax, rax
je 0x140143354
mov qword [rsp + 0xa8], rdi
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0xb0], rax
mov ebx, edi
mov eax, ebx
movsx ecx, byte [rsp + rax + 0xd0]
mov word [rsp + rax*2 + 0x4d0], cx
test cx, cx
je 0x1401432cd
inc ebx
jmp 0x1401432b2
movzx eax, bx
add ax, ax
mov word [rsp + 0xa8], ax
add ax, 2
mov word [rsp + 0xaa], ax
lea r9, [rsp + 0xa0]
lea r8, [rsp + 0xa8]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x140143323
mov qword [rsp + 0x78], rax
mov rax, qword [0x1401bb270]
inc rax
mov qword [0x1401bb270], rax
jmp 0x140143334
mov rax, qword [0x1401bb278]
inc rax
mov qword [0x1401bb278], rax
mov r8d, ebx
add r8, r8
xor edx, edx
lea rcx, [rsp + 0x4d0]
call fcn.140174eb0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
mov rbx, qword [rsp + 0xa0]
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0xd0]
call fcn.140174eb0
inc r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x24], edi
movzx ecx, byte [r12 + r15]
xor cl, 0x33
cmp cl, 0x10
jne 0x1401433ab
inc r12d
mov dword [rsp + 0x28], r12d
mov byte [rsp + 0x20], 1
mov ecx, r12d
add rcx, r15
call fcn.140114e20
mov dword [rsp + 0x24], eax
mov rbx, qword [rsp + 0xa0]
mov dword [rsp + 0x64], r12d
test rsi, rsi
je 0x1401433d7
cmp qword [rsi], 7
jb 0x1401433d7
mov r13b, 1
mov rax, qword [0x1401bb300]
inc rax
mov qword [0x1401bb300], rax
mov rbx, qword [rsp + 0xa0]
test rbx, rbx
je 0x140143532
test r13b, r13b
jne 0x140143532
mov rax, rbx
mov qword [rsp + 0x40], rbx
movsxd rcx, dword [rbx + 0x3c]
test ecx, ecx
je 0x140143402
lea rax, [rbx + rcx]
mov qword [rsp + 0x40], rax
jmp 0x140143422
test rax, rax
je 0x140143532
lea rcx, [rax + 0x88]
mov qword [rsp + 0x58], rcx
mov rdx, rdi
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x40], rdi
mov eax, dword [rcx]
test eax, eax
je 0x140143465
mov r8d, dword [rcx + 4]
test r8d, r8d
je 0x140143465
lea rdx, [rbx + rax]
mov qword [rsp + 0x50], rdx
lea rax, [rdx + r8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x80], rdx
jmp 0x140143492
test rdx, rdx
je 0x140143532
cmp dword [rcx + 4], 0x28
jb 0x140143532
mov r8d, dword [rdx + 0x10]
mov dword [rsp + 0x2c], r8d
mov ecx, dword [rdx + 0x14]
mov dword [rsp + 0x60], ecx
mov eax, dword [rdx + 0x1c]
add rax, rbx
mov qword [rsp + 0x68], rax
mov eax, dword [rdx + 0x18]
mov dword [rsp + 0x48], eax
mov eax, dword [rdx + 0x20]
add rax, rbx
mov qword [rsp + 0x70], rax
mov eax, dword [rdx + 0x24]
add rax, rbx
mov qword [rsp + 0x58], rax
jmp 0x1401434fe
cmp qword [rsp + 0x68], 0
je 0x140143532
cmp byte [rsp + 0x20], 0
je 0x140143767
mov rax, qword [0x1401bb280]
inc rax
mov qword [0x1401bb280], rax
test ecx, ecx
je 0x140143532
cmp dword [rsp + 0x24], r8d
jae 0x14014359b
mov byte [rsp + 0x21], 1
cmp qword [rsp + 0x98], 0
jne 0x140143a72
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x140143569
call fcn.140145b90
test rax, rax
je 0x14014355a
mov rcx, rbx
call rax
cmp qword [rsp + 0x98], 0
jne 0x140143a72
mov rax, qword [0x1401bb268]
inc rax
mov qword [0x1401bb268], rax
cmp byte [rsp + 0x20], 0
je 0x140143a5f
mov rax, qword [0x1401bb290]
inc rax
mov qword [0x1401bb290], rax
jmp 0x140143a83
mov eax, dword [rsp + 0x24]
sub eax, r8d
cmp eax, ecx
jae 0x14014352d
mov ecx, eax
mov rax, qword [rsp + 0x68]
mov r8d, dword [rax + rcx*4]
mov dword [rsp + 0x2c], r8d
jmp 0x1401435ce
test r8d, r8d
je 0x140143532
mov ebx, r8d
mov r14, qword [rsp + 0xa0]
add rbx, r14
cmp rbx, rdx
jb 0x14014375a
cmp rbx, qword [rsp + 0x40]
ja 0x14014375a
mov rdx, r15
mov rcx, rbx
call fcn.140144080
test al, al
je 0x140143729
mov rdx, r14
mov rcx, rbx
call fcn.140143b60
test rax, rax
je 0x140143637
mov qword [rsp + 0xa0], rax
mov rax, qword [0x1401bb2a8]
inc rax
mov qword [0x1401bb2a8], rax
jmp 0x140143648
mov rax, qword [0x1401bb2b0]
inc rax
mov qword [0x1401bb2b0], rax
mov qword [rsp + 0x98], rdi
mov rax, qword [0x1401bb258]
inc rax
mov qword [0x1401bb258], rax
call fcn.140147160
mov r10, rax
test rax, rax
je 0x140143541
mov rax, qword [0x1401bb2b8]
inc rax
mov qword [0x1401bb2b8], rax
lea r9, [rsp + 0x98]
mov r8d, dword [rsp + 0x24]
xor edx, edx
mov rcx, qword [rsp + 0xa0]
call r10
cmp eax, 0xc0000138
jne 0x1401436ae
mov qword [rsp + 0x98], rdi
jmp 0x1401436b9
cmp qword [rsp + 0x98], 0
jne 0x1401436f1
mov rax, qword [0x1401bb2f0]
inc rax
mov qword [0x1401bb2f0], rax
mov rax, qword [0x1401bb2c0]
inc rax
mov qword [0x1401bb2c0], rax
mov rax, qword [0x1401bb2c8]
inc rax
mov qword [0x1401bb2c8], rax
jmp 0x140143541
mov rax, qword [0x1401bb2f0]
inc rax
mov qword [0x1401bb2f0], rax
mov rax, qword [0x1401bb2d8]
inc rax
mov qword [0x1401bb2d8], rax
mov rax, qword [0x1401bb2e0]
inc rax
mov qword [0x1401bb2e0], rax
jmp 0x140143532
mov rax, qword [0x1401bb250]
inc rax
mov qword [0x1401bb250], rax
test rsi, rsi
je 0x140143742
inc qword [rsi]
mov rdx, rsi
mov rcx, rbx
call fcn.140143110
mov qword [rsp + 0x98], rax
jmp 0x140143532
mov qword [rsp + 0x98], rbx
jmp 0x140143532
mov rax, qword [0x1401bb288]
inc rax
mov qword [0x1401bb288], rax
test ecx, ecx
je 0x140143532
cmp qword [rsp + 0x70], 0
je 0x140143532
cmp qword [rsp + 0x58], 0
je 0x140143532
cmp dword [rsp + 0x48], 0
je 0x140143532
mov r13d, edi
mov dword [rsp + 0x24], r13d
cmp r13d, dword [rsp + 0x48]
jae 0x140143532
mov r10d, r13d
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax + r10*4]
test ecx, ecx
je 0x140143a57
mov r9d, ecx
add r9, qword [rsp + 0xa0]
mov edx, edi
nop word [rax + rax]
movsxd rcx, edx
movzx r8d, byte [rcx + r9]
mov eax, r12d
add rax, rcx
cmp r8b, byte [rax + r15]
jne 0x1401439be
test r8b, r8b
jne 0x140143a3a
mov rax, qword [rsp + 0x58]
movzx ecx, word [rax + r10*2]
mov rax, qword [rsp + 0x68]
mov edx, dword [rax + rcx*4]
mov dword [rsp + 0x2c], edx
jmp 0x140143833
test edx, edx
je 0x1401439be
mov ebx, edx
mov r14, qword [rsp + 0xa0]
add rbx, r14
cmp rbx, qword [rsp + 0x80]
jb 0x140143a22
cmp rbx, qword [rsp + 0x40]
ja 0x140143a22
mov rdx, r15
mov rcx, rbx
call fcn.140144080
test al, al
je 0x1401439f4
mov rdx, r14
mov rcx, rbx
call fcn.140143b60
mov rcx, rax
mov edx, dword [rsp + 0x64]
test rax, rax
je 0x1401438b5
mov qword [rsp + 0xa0], rax
mov rax, qword [0x1401bb2a8]
inc rax
mov qword [0x1401bb2a8], rax
lea r14, [rdx + r15]
mov rdx, r14
call fcn.1401428d0
mov rcx, rax
jmp 0x1401438d4
mov rax, qword [0x1401bb2b0]
inc rax
mov qword [0x1401bb2b0], rax
mov rcx, rdi
mov r14, qword [rsp + 0x88]
add r14, rdx
mov qword [rsp + 0x98], rcx
mov rax, qword [0x1401bb258]
inc rax
mov qword [0x1401bb258], rax
test rcx, rcx
jne 0x140143a35
call fcn.140147160
mov rbx, rax
test rax, rax
je 0x1401439ea
mov dword [rsp + 0xbc], edi
mov rcx, r14
call fcn.140144750
mov word [rsp + 0xb8], ax
inc ax
mov word [rsp + 0xba], ax
mov qword [rsp + 0xc0], r14
lea r9, [rsp + 0x98]
xor r8d, r8d
lea rdx, [rsp + 0xb8]
mov rcx, qword [rsp + 0xa0]
call rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
cmp eax, 0xc0000138
je 0x140143967
cmp eax, 0xc0000142
jne 0x14014396f
mov qword [rsp + 0x98], rdi
mov rax, qword [0x1401bb2b8]
inc rax
mov qword [0x1401bb2b8], rax
cmp qword [rsp + 0x98], 0
jne 0x1401439c6
mov rax, qword [0x1401bb2f0]
inc rax
mov qword [0x1401bb2f0], rax
mov rax, qword [0x1401bb2c0]
inc rax
mov qword [0x1401bb2c0], rax
mov rax, qword [0x1401bb2d0]
inc rax
mov qword [0x1401bb2d0], rax
inc r13d
jmp 0x1401437a6
mov rax, qword [0x1401bb2d8]
inc rax
mov qword [0x1401bb2d8], rax
mov rax, qword [0x1401bb2e8]
inc rax
mov qword [0x1401bb2e8], rax
jmp 0x140143a2a
mov qword [rsp + 0x98], rdi
jmp 0x1401439be
mov rax, qword [0x1401bb250]
inc rax
mov qword [0x1401bb250], rax
test rsi, rsi
je 0x140143a0d
inc qword [rsi]
mov rdx, rsi
mov rcx, rbx
call fcn.140143110
mov qword [rsp + 0x98], rax
jmp 0x140143a2a
mov qword [rsp + 0x98], rbx
cmp qword [rsp + 0x98], 0
je 0x1401439be
jmp 0x140143532
inc edx
jmp 0x1401437e0
inc r13d
jmp 0x1401437a6
mov rax, qword [0x1401bb298]
inc rax
mov qword [0x1401bb298], rax
jmp 0x140143a83
mov rax, qword [0x1401bb260]
inc rax
mov qword [0x1401bb260], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov rcx, rax
sub rcx, qword [rsp + 0x90]
mov rax, qword [0x1401bb320]
test rax, rax
je 0x140143aaf
mov rax, qword [0x1401bb320]
cmp rax, rcx
jae 0x140143ab6
mov qword [0x1401bb320], rcx
cmp qword [rsp + 0x98], 0
jne 0x140143af0
cmp byte [rsp + 0x20], 0
je 0x140143aeb
mov edi, 0xc0000138
mov ecx, 0x4750412d
cmp byte [rsp + 0x21], 0
cmovne edi, ecx
mov ecx, edi
call fcn.14014a9c0
mov rax, qword [rsp + 0x98]
jmp 0x140143b2d
mov edi, 0xc0000139
mov ecx, edi
call fcn.14014a9c0
mov rax, qword [rsp + 0x98]
jmp 0x140143b2d
cmp qword [0x1401bb354], 0x33c0
jne 0x140143b2a
call fcn.14014afe7
add rax, 0x33c0
mov qword [0x1401bb354], rax
mov rax, qword [rsp + 0x98]
jmp 0x140143b2d
mov rax, rdi
mov rcx, qword [rsp + 0xcd0]
xor rcx, rsp
call fcn.140172c20
lea r11, [rsp + 0xce0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret