Function at 0x140034448
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x428]
sub rsp, 0x510
mov rax, qword [0x1400fe008]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov eax, dword [0x1404c5720]
xor r14d, r14d
mov r15d, 1
test eax, eax
jne 0x1400344a4
call fcn.140062dd0
mov rax, qword [0x1404c6198]
test rax, rax
je 0x1400344a4
mov ecx, r15d
call rax
lea rcx, [rsp + 0x50]
call qword [0x1404c58c0]
mov eax, dword [rsp + 0x70]
lea rdx, str.Windows
lea rcx, [rbp + 0x200]
mov dword [0x140150d68], eax
call fcn.140055084
mov ebx, 0x114
lea rcx, [rbp + 0xa0]
mov r8d, ebx
xor edx, edx
call fcn.1400bfdc0
lea rcx, [rbp + 0xa0]
mov dword [rbp + 0xa0], ebx
call fcn.1400662e8
mov eax, dword [rbp + 0xb0]
test eax, eax
je 0x1400348f1
sub eax, r15d
je 0x14003484e
cmp eax, r15d
jne 0x14003490b
mov ecx, dword [rbp + 0xa4]
mov eax, dword [rbp + 0xa8]
cmp ecx, 6
jb 0x140034744
cmp eax, 2
jb 0x140034744
cmp qword [0x1404c57c8], r14
mov rbx, qword [0x1404c6108]
mov rdi, qword [0x1404c57d0]
je 0x14003454e
test rdi, rdi
jne 0x140034557
test rbx, rbx
je 0x140034744
mov esi, 0x11c
lea rcx, [rbp - 0x80]
mov r8d, esi
xor edx, edx
call fcn.1400bfdc0
mov dword [rbp - 0x80], esi
test rbx, rbx
je 0x140034656
lea rcx, [rbp - 0x80]
call rbx
lea rdx, [rbp - 0x6c]
lea rcx, [rbp + 0xb4]
call fcn.140055084
cmp dword [rbp - 0x7c], 6
mov eax, dword [rbp - 0x74]
mov dword [rbp + 0xac], eax
je 0x1400345e4
cmp dword [rbp - 0x7c], 0xa
jne 0x14003490b
cmp dword [rbp - 0x78], r14d
jne 0x14003490b
lea rcx, [rbp + 0x200]
cmp eax, 0x55f0
jb 0x1400345d8
lea r8, [0x1400ed1e8]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x10d
jmp 0x14003490b
lea r8, [0x1400ed1e0]
jmp 0x140034783
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x140034797
sub eax, r15d
je 0x140034634
sub eax, r15d
jne 0x140034605
lea rcx, [rbp + 0x200]
jmp 0x140034729
sub eax, r15d
je 0x140034612
cmp eax, r15d
jmp 0x14003476f
lea rcx, [rbp + 0x200]
lea r8, [0x1400ed1d8]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x10b
jmp 0x14003490b
lea r8, [0x1400ed1cc]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x109
jmp 0x14003490b
mov r8b, 2
mov dword [rbp + 0xac], r14d
mov edx, 2
mov word [rbp + 0xb4], r14w
xor ecx, ecx
call rdi
mov r8b, 2
mov edx, r15d
mov rcx, rax
call qword [0x1404c57d0]
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x7c], 0xa
mov r8, rax
call fcn.1400661d8
test eax, eax
je 0x1400346a4
lea r8, str.10_After
jmp 0x14003477c
mov r8b, 3
mov edx, 2
xor ecx, ecx
call qword [0x1404c57d0]
mov r8b, 3
mov edx, r15d
mov rcx, rax
call qword [0x1404c57d0]
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x7c], 0xa
mov r8, rax
mov rbx, rax
call fcn.1400661d8
test eax, eax
jne 0x140034775
mov r8, rbx
mov dword [rbp - 0x7c], 6
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x78], 4
call fcn.1400661d8
test eax, eax
jne 0x140034775
mov r8, rbx
mov dword [rbp - 0x7c], 6
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x78], 3
call fcn.1400661d8
lea rcx, [rbp + 0x200]
test eax, eax
jne 0x140034619
lea r8, [0x1400ed1d0]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x10a
jmp 0x14003490b
sub ecx, 3
je 0x14003482c
sub ecx, r15d
je 0x14003480a
sub ecx, r15d
je 0x1400347b9
sub ecx, r15d
je 0x1400345e7
cmp ecx, 4
jne 0x14003490b
test eax, eax
jne 0x14003490b
lea r8, [0x1400ed1e0]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x10c
jmp 0x14003490b
lea r8, str.Vista
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x108
jmp 0x14003490b
test eax, eax
je 0x1400347e8
cmp eax, r15d
jne 0x14003490b
lea r8, [0x1400ed22c]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x107
jmp 0x14003490b
lea r8, str.2000
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x106
jmp 0x14003490b
lea r8, [0x1400ed218]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x105
jmp 0x14003490b
lea r8, str.NT_3.51
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 0x104
jmp 0x14003490b
mov eax, dword [rbp + 0xa8]
test eax, eax
je 0x1400348b8
cmp eax, 0xa
je 0x140034888
cmp eax, 0x5a
jne 0x14003490b
lea r8, [0x1400ed1b4]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], 3
jmp 0x14003490b
lea r8, [0x1400ed1a4]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
cmp word [rbp + 0xb4], 0x41
mov dword [0x14015f6e0], 2
jne 0x14003490b
lea r8, [0x1400ed1ac]
jmp 0x1400348e3
lea r8, [0x1400ed190]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
cmp word [rbp + 0xb4], 0x43
mov dword [0x14015f6e0], r15d
jne 0x14003490b
lea r8, str.OSR2
lea rcx, [rbp + 0x200]
call fcn.1400551b4
jmp 0x14003490b
lea r8, [0x1400ed188]
lea rcx, [rbp + 0x200]
call fcn.1400551b4
mov dword [0x14015f6e0], r14d
mov eax, dword [rbp + 0xac]
lea r9, [rbp + 0x200]
mov edx, 0x100
test eax, eax
je 0x140034946
lea rcx, [rbp + 0xb4]
mov qword [rsp + 0x28], rcx
lea r8, str._s___Build__d__s__
lea rcx, [0x140150330]
mov dword [rsp + 0x20], eax
call fcn.1400552cc
jmp 0x140034959
lea r8, [0x1400ecf1c]
lea rcx, [0x140150330]
call fcn.1400552cc
mov edx, 8
mov dword [0x14015f6dc], 0x70000
lea rcx, [rsp + 0x48]
call qword [0x1404c5758]
mov ecx, dword [rsp + 0x48]
call qword [0x1404c5740]
xor eax, eax
mov byte [rbp + 0x1c0], r14b
xor ecx, ecx
mov byte [rbp + 0x1f0], r14b
cpuid
xor ecx, ecx
mov dword [0x14015f6e4], r14d
mov eax, r15d
mov r9b, r14b
cpuid
mov r8d, edx
mov dword [rsp + 0x30], eax
shr r8d, 4
xor ecx, ecx
mov eax, 0x80000000
and r8d, r15d
cpuid
mov dword [rsp + 0x34], ebx
mov edi, r15d
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], edx
cmp eax, 0x80000004
jb 0x140034a45
xor ecx, ecx
mov eax, 0x80000002
cpuid
mov dword [rsp + 0x30], eax
mov eax, 0x80000003
mov dword [rsp + 0x38], ecx
xor ecx, ecx
mov dword [rsp + 0x34], ebx
mov dword [rsp + 0x3c], edx
movups xmm1, xmmword [rsp + 0x30]
cpuid
mov dword [rsp + 0x30], eax
mov eax, 0x80000004
mov dword [rsp + 0x38], ecx
xor ecx, ecx
mov dword [rsp + 0x34], ebx
mov dword [rsp + 0x3c], edx
movups xmm0, xmmword [rsp + 0x30]
cpuid
mov dword [rsp + 0x30], eax
movdqu xmmword [rbp + 0x1d0], xmm0
mov dword [rsp + 0x34], ebx
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], edx
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x1c0], xmm1
movdqu xmmword [rbp + 0x1e0], xmm0
movd r9d, xmm1
xor ecx, ecx
mov eax, r15d
cpuid
bt edx, 0x17
jae 0x140034a6c
mov edi, 3
bt edx, 0x19
jae 0x140034a6c
mov edi, 4
bt edx, 0x1a
lea eax, [rdi + 1]
cmovb edi, eax
mov dword [0x14015f6f0], r8d
test r8d, r8d
je 0x140034aee
rdtsc
shl rdx, 0x20
or rax, rdx
mov rsi, rax
call fcn.14005650c
mov ebx, eax
call fcn.14005650c
sub eax, ebx
cmp eax, 0x64
jl 0x140034a8b
rdtsc
shl rdx, 0x20
xorps xmm0, xmm0
or rdx, rax
sub rdx, rsi
lea rcx, [rdx + rdx*4]
add rcx, rcx
mov qword [0x14015f6f8], rcx
test rdx, rdx
js 0x140034ac0
cvtsi2sd xmm0, rdx
jmp 0x140034ad5
mov rax, rdx
and rdx, r15
shr rax, 1
or rax, rdx
cvtsi2sd xmm0, rax
addsd xmm0, xmm0
divsd xmm0, qword [0x1400f3c38]
mov r9b, byte [rbp + 0x1c0]
cvttsd2si eax, xmm0
mov dword [0x140150930], eax
sub edi, 3
je 0x140034b0b
sub edi, r15d
je 0x140034b04
cmp edi, r15d
jne 0x140034b12
mov dword [0x14015f6ec], r15d
mov dword [0x14015f6e8], r15d
mov dword [0x14015f6e4], r15d
test r9b, r9b
je 0x140034b55
mov eax, dword [0x1401f4ae8]
test eax, eax
jne 0x140034b2c
call fcn.14006cd3c
mov eax, dword [0x1401f4ae8]
mov dword [rsp + 0x28], eax
lea r9, [0x140150730]
mov r8d, 0x7ffd
mov qword [rsp + 0x20], 0x200
or edx, 0xffffffff
lea rcx, [rbp + 0x1c0]
call fcn.14005c224
cmp dword [0x14015f6dc], 0x70000
jge 0x140034b6a
or ecx, 0xffffffff
call qword [0x1404c59f8]
xor eax, eax
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.1400bdaf0
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret