Function at 0x140001f60
Capabilities:
Check for debugger via api
Check for outputdebugstring error
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x68], rax
mov rdi, rcx
mov qword [rsp + 0x78], rcx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], 0xf
mov byte [rcx], r13b
mov esi, 1
mov dword [rsp + 0x30], esi
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
lea rcx, str.Detected
lea rdx, str.Not_Detected
test eax, eax
cmovne rdx, rcx
lea rcx, [rbp - 0x80]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x13
jb 0x14000207d
lea rax, [r8 + 0x13]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x140002012
mov r14, qword [rbx]
lea rax, [0x140006a23]
mov r15d, 0x13
lea r12, str.Debugger_Presence:
cmp rax, r14
jbe 0x140002041
lea rax, [r14 + r8]
cmp r12, rax
ja 0x140002041
cmp r14, r12
jbe 0x140002044
mov r13, r14
sub r13, r12
jmp 0x140002044
mov r13, r15
inc r8
lea rcx, [r14 + 0x13]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r13
mov rdx, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov r8, r15
sub r8, r13
lea rdx, [r12 + 0x13]
add rdx, r13
lea rcx, [r14 + r13]
call sub.VCRUNTIME140.dll_memcpy
xor r13d, r13d
jmp 0x1400020a2
mov r15d, 0x13
mov qword [rsp + 0x28], r15
lea r12, str.Debugger_Presence:
mov qword [rsp + 0x20], r12
mov edx, r15d
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
or esi, 2
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x1400020fe
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x14000210b
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqa xmm6, xmmword [0x140006ac0]
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
or esi, 4
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r9, rbx
mov rcx, qword [rdi + 0x10]
mov qword [rbp + 0x60], rcx
mov rdx, qword [rdi + 0x18]
mov rax, rdx
sub rax, rcx
movq r14, xmm1
cmp r14, rax
ja 0x1400021a5
lea rax, [r14 + rcx]
mov qword [rdi + 0x10], rax
mov r12, rdi
cmp rdx, 0xf
jbe 0x140002189
mov r12, qword [rdi]
add rcx, r12
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + r12]
mov rcx, qword [rbp + 0x60]
mov byte [rax + rcx], 0
jmp 0x1400021bf
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r13, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
cmp r13, 0xf
jbe 0x1400021fa
lea rdx, [r13 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400021f1
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400021f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140003f48
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002238
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002233
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002233
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rbp + 0x60], 0
lea rdx, [rbp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
je 0x140002260
cmp dword [rbp + 0x60], 0
je 0x140002260
mov al, 1
jmp 0x140002262
xor al, al
lea rdx, str.Not_Detected
test al, al
lea rcx, str.Detected
cmovne rdx, rcx
lea rcx, [rbp - 0x60]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x13
jb 0x140002311
lea rax, [r8 + 0x13]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x1400022aa
mov r14, qword [rbx]
lea rax, [0x140006a3b]
lea r12, str.Debugger__Remote_:
cmp rax, r14
jbe 0x1400022d8
lea rax, [r14 + r8]
cmp r12, rax
ja 0x1400022d8
cmp r14, r12
ja 0x1400022d0
xor r13d, r13d
jmp 0x1400022db
mov r13, r14
sub r13, r12
jmp 0x1400022db
mov r13, r15
inc r8
lea rcx, [r14 + 0x13]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r13
mov rdx, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov r8, r15
sub r8, r13
lea rdx, [r12 + 0x13]
add rdx, r13
lea rcx, [r14 + r13]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140002330
mov qword [rsp + 0x28], r15
lea r12, str.Debugger__Remote_:
mov qword [rsp + 0x20], r12
mov rdx, r15
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
or esi, 8
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x140002390
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x14000239d
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
or esi, 0x10
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r9, rbx
mov rcx, qword [rdi + 0x10]
mov qword [rbp + 0x60], rcx
mov rdx, qword [rdi + 0x18]
mov rax, rdx
sub rax, rcx
movq r14, xmm1
cmp r14, rax
ja 0x14000242f
lea rax, [r14 + rcx]
mov qword [rdi + 0x10], rax
mov r12, rdi
cmp rdx, 0xf
jbe 0x140002413
mov r12, qword [rdi]
add rcx, r12
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + r12]
mov rcx, qword [rbp + 0x60]
mov byte [rax + rcx], 0
jmp 0x140002449
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r13, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
cmp r13, 0xf
jbe 0x140002484
lea rdx, [r13 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000247b
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000247b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140003f48
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400024c2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400024bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
call fcn.1400016f0
lea rdx, str.Not_Detected
test al, al
lea rax, str.Detected
cmovne rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x13
jb 0x140002576
lea rax, [r8 + 0x13]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x14000250f
mov r14, qword [rbx]
lea rax, [0x140006a53]
lea r12, str.Debugger_Binaries:
cmp rax, r14
jbe 0x14000253d
lea rax, [r14 + r8]
cmp r12, rax
ja 0x14000253d
cmp r14, r12
ja 0x140002535
xor r13d, r13d
jmp 0x140002540
mov r13, r14
sub r13, r12
jmp 0x140002540
mov r13, r15
inc r8
lea rcx, [r14 + 0x13]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r13
mov rdx, r12
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
sub r15, r13
lea rdx, [r12 + 0x13]
add rdx, r13
lea rcx, [r14 + r13]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140002595
mov qword [rsp + 0x28], r15
lea r12, str.Debugger_Binaries:
mov qword [rsp + 0x20], r12
mov rdx, r15
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
or esi, 0x20
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x1400025f5
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x140002602
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
or esi, 0x40
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r9, rbx
mov r13, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x18]
mov rax, rcx
sub rax, r13
movq r14, xmm1
cmp r14, rax
ja 0x14000268e
lea rax, [r14 + r13]
mov qword [rdi + 0x10], rax
mov r12, rdi
cmp rcx, 0xf
jbe 0x140002674
mov r12, qword [rdi]
lea rcx, [r12 + r13]
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + r12]
mov byte [rax + r13], 0
jmp 0x1400026a8
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r15, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
cmp r15, 0xf
jbe 0x1400026e3
lea rdx, [r15 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400026da
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140003f48
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140002721
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000271c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000271c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
call fcn.140001d10
lea rdx, str.Not_Detected
test al, al
lea rax, str.Detected
cmovne rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x12
jb 0x1400027de
lea rax, [r8 + 0x12]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x140002772
mov r14, qword [rbx]
lea rax, [0x140006a6a]
mov r13d, 0x12
lea r15, str.Debugger_Libarys:
cmp rax, r14
jbe 0x1400027a6
lea rax, [r14 + r8]
cmp r15, rax
ja 0x1400027a6
cmp r14, r15
ja 0x14000279e
xor r12d, r12d
jmp 0x1400027a9
mov r12, r14
sub r12, r15
jmp 0x1400027a9
mov r12, r13
inc r8
lea rcx, [r14 + 0x12]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov r8, r13
sub r8, r12
lea rdx, [r15 + 0x12]
add rdx, r12
lea rcx, [r14 + r12]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140002803
mov r13d, 0x12
mov qword [rsp + 0x28], r13
lea r15, str.Debugger_Libarys:
mov qword [rsp + 0x20], r15
mov edx, r13d
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
bts esi, 7
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x140002864
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x140002871
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
bts esi, 8
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r9, rbx
mov r13, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x18]
mov rax, rcx
sub rax, r13
movq r14, xmm1
cmp r14, rax
ja 0x1400028fe
lea rax, [r14 + r13]
mov qword [rdi + 0x10], rax
mov r12, rdi
cmp rcx, 0xf
jbe 0x1400028e4
mov r12, qword [rdi]
lea rcx, [r12 + r13]
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + r12]
mov byte [rax + r13], 0
jmp 0x140002918
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r15, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
cmp r15, 0xf
jbe 0x140002953
lea rdx, [r15 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000294a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000294a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140003f48
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140002991
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000298c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000298c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub eax, ebx
lea rdx, str.Not_Detected
cmp eax, 0x5dc
lea rax, str.Detected
cmovae rdx, rax
lea rcx, [rbp]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x10
jb 0x140002a68
lea rax, [r8 + 0x10]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x1400029fc
mov r14, qword [rbx]
lea rax, [0x140006a80]
mov r13d, 0x10
lea r15, str.Debugger_Timer:
cmp rax, r14
jbe 0x140002a30
lea rax, [r14 + r8]
cmp r15, rax
ja 0x140002a30
cmp r14, r15
ja 0x140002a28
xor r12d, r12d
jmp 0x140002a33
mov r12, r14
sub r12, r15
jmp 0x140002a33
mov r12, r13
inc r8
lea rcx, [r14 + 0x10]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
sub r13, r12
lea rdx, [r15 + 0x10]
add rdx, r12
lea rcx, [r14 + r12]
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140002a8d
mov r13d, 0x10
mov qword [rsp + 0x28], r13
lea r15, str.Debugger_Timer:
mov qword [rsp + 0x20], r15
mov edx, r13d
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
bts esi, 9
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x140002aee
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x140002afb
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
bts esi, 0xa
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r9, rbx
mov r13, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x18]
mov rax, rcx
sub rax, r13
movq r14, xmm1
cmp r14, rax
ja 0x140002b88
lea rax, [r14 + r13]
mov qword [rdi + 0x10], rax
mov r12, rdi
cmp rcx, 0xf
jbe 0x140002b6e
mov r12, qword [rdi]
lea rcx, [r12 + r13]
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r12 + r14]
mov byte [rax + r13], 0
jmp 0x140002ba2
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r15, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
cmp r15, 0xf
jbe 0x140002bdd
lea rdx, [r15 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140002bd4
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002bd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140003f48
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140002c1b
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rcx, str.Ur_debugging_my_stuff.
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Not_Detected
test eax, eax
lea rax, str.Detected
cmovne rdx, rax
lea rcx, [rbp + 0x20]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x12
jb 0x140002cf4
lea rax, [r8 + 0x12]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x140002c82
mov r14, qword [rbx]
lea rax, [0x140006a9a]
lea r15, str.Debugger_Message:
cmp rax, r14
jbe 0x140002cb6
lea rax, [r14 + r8]
cmp r15, rax
ja 0x140002cb6
mov r13d, 0x12
cmp r14, r15
ja 0x140002cae
xor r12d, r12d
jmp 0x140002cbf
mov r12, r14
sub r12, r15
jmp 0x140002cbf
mov r13d, 0x12
mov r12d, r13d
inc r8
lea rcx, [r14 + 0x12]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
sub r13, r12
lea rdx, [r15 + 0x12]
add rdx, r12
lea rcx, [r14 + r12]
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140002d19
mov r13d, 0x12
mov qword [rsp + 0x28], r13
lea r15, str.Debugger_Message:
mov qword [rsp + 0x20], r15
mov edx, r13d
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
bts esi, 0xb
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x140002d7a
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x140002d87
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
bts esi, 0xc
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r9, rbx
mov r13, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x18]
mov rax, rcx
sub rax, r13
movq r14, xmm1
cmp r14, rax
ja 0x140002e14
lea rax, [r14 + r13]
mov qword [rdi + 0x10], rax
mov r12, rdi
cmp rcx, 0xf
jbe 0x140002dfa
mov r12, qword [rdi]
lea rcx, [r12 + r13]
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + r12]
mov byte [rax + r13], 0
jmp 0x140002e2e
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r15, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
cmp r15, 0xf
jbe 0x140002e69
lea rdx, [r15 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140002e60
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140003f48
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140002ea7
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ea2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ea2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
call fcn.140001f30
test al, al
lea rdx, str.Not_Detected
lea rcx, str.Detected
cmovne rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.1400033e0
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x15
jb 0x140002f64
lea rax, [r8 + 0x15]
mov qword [rbx + 0x10], rax
mov r14, rbx
cmp rcx, 0xf
jbe 0x140002ef8
mov r14, qword [rbx]
lea rax, [0x140006ab5]
mov r13d, 0x15
lea r15, str.Debugger_Breakpoint:
cmp rax, r14
jbe 0x140002f2c
lea rax, [r14 + r8]
cmp r15, rax
ja 0x140002f2c
cmp r14, r15
ja 0x140002f24
xor r12d, r12d
jmp 0x140002f2f
mov r12, r14
sub r12, r15
jmp 0x140002f2f
mov r12, r13
inc r8
lea rcx, [r14 + 0x15]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
sub r13, r12
lea rdx, [r15 + 0x15]
add rdx, r12
lea rcx, [r14 + r12]
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140002f89
mov r13d, 0x15
mov qword [rsp + 0x28], r13
lea r15, str.Debugger_Breakpoint:
mov qword [rsp + 0x20], r15
mov edx, r13d
mov rcx, rbx
call fcn.140003d70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movdqu xmmword [rsp + 0x48], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
bts esi, 0xd
mov dword [rsp + 0x30], esi
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
cmp rcx, rdx
jae 0x140002fea
lea rax, [rcx + 1]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x38]
mov word [rax + rcx], 0xa
jmp 0x140002ff7
mov r9b, 0xa
lea rcx, [rsp + 0x38]
call fcn.140003500
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x68], xmm1
movdqu xmmword [rsp + 0x48], xmm6
mov byte [rsp + 0x38], 0
bts esi, 0xe
mov dword [rsp + 0x30], esi
lea r9, [rsp + 0x58]
movq rsi, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
mov rax, rdx
sub rax, rcx
movq r14, xmm1
cmp r14, rax
ja 0x140003083
lea rax, [r14 + rcx]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0xf
jbe 0x14000306a
mov rax, qword [rdi]
lea rbx, [rax + rcx]
mov r8, r14
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rbx], 0
jmp 0x14000309d
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.140003790
mov r15, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
cmp r15, 0xf
jbe 0x1400030d8
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400030cf
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400030cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140003f48
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140003116
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003111
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003111
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f48
mov rax, rdi
mov rcx, qword [rbp + 0x68]
xor rcx, rsp
call fcn.140003f20
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret