Function at 0x7ff741c5a250
Capabilities:
Check for debugger via api

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x430]
sub rsp, 0x530
mov rax, qword [0x7ff741cd7188]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov dword [rsp + 0x40], 0
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rsp + 0x40]
call qword [sym.imp.kernel32.dll_CheckRemoteDebuggerPresent]
cmp dword [rsp + 0x40], 1
je 0x7ff741c5a50e
xor edx, edx
lea rcx, [rsp + 0x50]
mov r8d, 0x4d0
call sub.VCRUNTIME140.dll_memset
mov dword [rbp - 0x80], 0x100010
call qword [sym.imp.kernel32.dll_GetCurrentThread]
mov rcx, rax
lea rdx, [rsp + 0x50]
call qword [sym.imp.kernel32.dll_GetThreadContext]
test eax, eax
je 0x7ff741c5a2f8
cmp qword [rbp - 0x68], 0
jne 0x7ff741c5a50e
cmp qword [rbp - 0x60], 0
jne 0x7ff741c5a50e
cmp qword [rbp - 0x58], 0
jne 0x7ff741c5a50e
cmp qword [rbp - 0x50], 0
jne 0x7ff741c5a50e
call qword [sym.imp.msvcp140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.msvcp140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x7ff741c5a316
imul rbx, rax, 0x64
jmp 0x7ff741c5a337
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rbx, rax
imul rax, rcx, 0x3b9aca00
add rbx, rax
call qword [sym.imp.msvcp140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.msvcp140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x7ff741c5a355
imul rax, rax, 0x64
jmp 0x7ff741c5a373
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
sub rax, rbx
cmp rax, 0x6052340
jge 0x7ff741c5a50e
mov qword [rsp + 0x550], rsi
mov al, 0x17
movzx r9d, al
mov qword [rsp + 0x558], r12
mov qword [rsp + 0x560], r14
xor al, 0x5b
mov qword [rsp + 0x568], r15
xor r9b, 0x5b
xor r12d, r12d
mov byte [rsp + 0x31], al
mov dl, 0x3a
mov byte [rsp + 0x35], r9b
movzx edi, dl
mov byte [rsp + 0x30], 0x5b
xor dl, 0x5b
mov byte [rsp + 0x3d], r12b
xor dil, 0x5b
mov byte [rsp + 0x33], dl
mov bl, 0x29
mov byte [rsp + 0x39], dil
movzx esi, bl
mov byte [rsp + 0x20], 8
xor bl, 0x5b
mov byte [rsp + 0x2d], r12b
xor sil, 0x5b
mov byte [rsp + 0x38], bl
mov byte [rsp + 0x3a], sil
mov cl, 0x34
xor cl, 0x5b
mov r10b, 0x32
xor r10b, 0x5b
mov byte [rsp + 0x32], cl
mov byte [rsp + 0x36], r10b
mov cl, 0x6d
mov r10b, 0x64
movzx r9d, cl
xor cl, 8
xor r9b, 8
mov r14b, 0x22
mov byte [rsp + 0x22], cl
xor r14b, 0x5b
mov byte [rsp + 0x25], r9b
mov byte [rsp + 0x3b], r14b
mov r8b, 0x3f
xor r8b, 0x5b
movzx r14d, r10b
mov byte [rsp + 0x34], r8b
xor r14b, 8
mov r11b, 0x39
mov byte [rsp + 0x2b], r14b
xor r11b, 0x5b
mov r15b, 0x1a
xor r15b, 0x5b
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x3c], r15b
mov al, 0x63
movzx r15d, r10b
xor al, 8
xor r10b, 8
mov byte [rsp + 0x21], al
mov dl, 0x7a
mov byte [rsp + 0x26], r10b
xor dl, 8
mov r8b, 0x66
xor r8b, 8
mov byte [rsp + 0x23], dl
mov r11b, 0x3b
mov byte [rsp + 0x24], r8b
xor r11b, 8
mov bl, 0x3a
xor bl, 8
mov byte [rsp + 0x27], r11b
mov dil, 0x26
mov byte [rsp + 0x28], bl
xor dil, 8
mov sil, 0x6c
xor sil, 8
mov byte [rsp + 0x29], dil
xor r15b, 8
mov byte [rsp + 0x2a], sil
mov byte [rsp + 0x2c], r15b
lea rcx, [rsp + 0x21]
call qword [sym.imp.kernel32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rsp + 0x31]
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov r15, qword [rsp + 0x568]
mov r14, qword [rsp + 0x560]
mov r12, qword [rsp + 0x558]
mov rsi, qword [rsp + 0x550]
test rax, rax
je 0x7ff741c5a50e
cmp qword [sym.imp.kernel32.dll_LoadLibraryA], rax
jne 0x7ff741c5a50e
mov al, 1
jmp 0x7ff741c5a510
xor al, al
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.7ff741ca8850
add rsp, 0x530
pop rdi
pop rbx
pop rbp
ret