Function at 0x1401b32b0
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions
Get thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1c8
movapd xmmword [rsp + 0x1b0], xmm6
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x14033f038]
xor rax, rsp
mov qword [rsp + 0x1a8], rax
mov eax, dword [0x140354b68]
mov ecx, dword [0x14034fed0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1401b372b
cmp byte [rsi], 0
je 0x1401b35c0
mov eax, dword [0x14035473c]
mov ecx, dword [0x14034fed0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1401b377e
cmp byte [0x140354738], 0
je 0x1401b35ec
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea rdx, [rsp + 0x190]
mov qword [rdx], 0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
movsd xmm0, qword [0x140354740]
xorpd xmm6, xmm6
ucomisd xmm0, xmm6
jne 0x1401b337d
jnp 0x1401b35fa
ucomisd xmm0, xmm6
jne 0x1401b3389
jnp 0x1401b3724
movsd xmm1, qword [rsp + 0x190]
unpcklps xmm1, xmmword [0x140309940]
subpd xmm1, xmmword [0x140309950]
movapd xmm2, xmm1
unpckhpd xmm2, xmm1
addsd xmm2, xmm1
divsd xmm2, xmm0
mulsd xmm2, qword [0x140308b20]
cvttsd2si rax, xmm2
mov qword [rsp + 0x50], rax
mov rax, qword [0x1403411f8]
lea rcx, [0x14003b7a0]
lea r14, [rsp + 0x58]
cmp rax, rcx
jne 0x1401b376d
mov qword [r14], 0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [r14]
movabs rcx, 0x8637bd05af6
cmp rax, rcx
jg 0x1401b3413
imul rax, rax, 0xf4240
cqo
idiv qword [0x140354790]
jmp 0x1401b3435
mov rcx, qword [0x140354790]
cqo
idiv rcx
imul r8, rax, 0xf4240
imul rax, rdx, 0xf4240
cqo
idiv rcx
add rax, r8
mov qword [rsp + 0x58], rax
movabs rcx, 0x7fffffffffffffff
mov rdx, qword [0x140354950]
lea r8, [rdx + rcx]
add r8, 2
cmp r8, 2
jae 0x1401b346f
cmp rax, rdx
je 0x1401b399d
lea rax, [rcx + 1]
test rdx, rdx
cmovs rax, rcx
jmp 0x1401b3483
xor r8d, r8d
cmp rax, rdx
setns r8b
add r8, rcx
sub rax, rdx
cmovo rax, r8
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp byte [rsi], 0
je 0x1401b35c0
mov ebp, eax
mov ecx, dword [0x1403411e0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
and rax, 0xfffffffffffffffc
je 0x1401b34cd
mov rcx, qword [0x140354ad0]
shl rcx, 4
mov edx, dword [rax + rcx + 8]
cmp edx, dword [0x140354ad8]
jne 0x1401b34cd
cmp qword [rax + rcx], 0
jne 0x1401b35c0
lea r14, [0x140354ad0]
mov rax, qword [0x1403428e0]
and rax, r14
cmp rax, qword [0x1403428c8]
je 0x1401b3865
mov ecx, dword [0x1403411e0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
and rax, 0xfffffffffffffffc
je 0x1401b3763
mov rcx, qword [0x140354ad0]
shl rcx, 4
mov qword [rax + rcx], r14
mov ecx, dword [0x140354ad8]
mov rdx, qword [0x140354ad0]
shl rdx, 4
mov dword [rax + rdx + 8], ecx
mov al, byte [rsi]
test al, 8
jne 0x1401b3876
test al, 1
je 0x1401b3888
mov rax, qword [0x140354b58]
test rax, rax
je 0x1401b38ab
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x20], 0
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
mov r9d, ebp
call qword [case.0x140211850.0]
mov ecx, dword [0x1403411e0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
and rax, 0xfffffffffffffffc
je 0x1401b35ac
mov rcx, qword [0x140354ad0]
shl rcx, 4
mov qword [rax + rcx], 0
mov ecx, dword [0x140354ad8]
mov rdx, qword [0x140354ad0]
shl rdx, 4
mov dword [rax + rdx + 8], ecx
and r14, qword [0x1403428e0]
cmp r14, qword [0x1403428c8]
je 0x1401b398c
mov rcx, qword [rsp + 0x1a8]
xor rcx, rsp
call fcn.140171860
movaps xmm6, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x50], 0
jmp 0x1401b33c3
mov r14, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov ebp, eax
call r14
mov rcx, rax
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x140354750]
mov ecx, dword [0x14034fed0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1401b37e2
mov eax, dword [0x140354760]
mov ecx, dword [0x14034fed0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1401b381c
rdtsc
mov qword [rsp + 0x40], rax
mov r15, rdx
xor r13d, r13d
lea r12, [rsp + 0x58]
mov qword [r12], r13
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r14, qword [r12]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, ebp
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov qword [r12], r13
lea r12, [rsp + 0x58]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
sub r14, qword [0x140354758]
cvtsi2sd xmm1, r14
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [r12]
divsd xmm1, xmm0
xorpd xmm0, xmm0
movsd xmm2, qword [0x14030a288]
ucomisd xmm2, xmm1
ja 0x1401b337d
shl r15, 0x20
mov rax, qword [rsp + 0x40]
or rax, r15
sub rax, qword [0x140354748]
movq xmm2, rax
punpckldq xmm2, xmmword [0x140309940]
subpd xmm2, xmmword [0x140309950]
movapd xmm0, xmm2
unpckhpd xmm0, xmm2
addsd xmm0, xmm2
divsd xmm0, xmm1
movsd qword [0x140354740], xmm0
jmp 0x1401b337d
xor eax, eax
jmp 0x1401b33be
lea rcx, [0x140354b68]
call fcn.14016f8b4
cmp dword [0x140354b68], 0xffffffff
jne 0x1401b330c
lea rcx, [0x1403547a0]
xor edx, edx
call fcn.1400a8f40
lea rcx, [0x140354b68]
call fcn.14016ef8c
jmp 0x1401b330c
call fcn.140001120
jmp 0x1401b3501
mov rcx, r14
call qword [case.0x140211850.0]
mov rax, qword [r14]
jmp 0x1401b343a
lea rcx, [0x14035473c]
call fcn.14016f8b4
cmp dword [0x14035473c], 0xffffffff
jne 0x1401b333a
lea r14, [rsp + 0x58]
mov rcx, r14
call fcn.1400ef500
mov bpl, byte [r14 + 0x29]
cmp byte [r14 + 0x5f], 0
jns 0x1401b37bc
mov rcx, qword [rsp + 0xa0]
call fcn.14016eccc
cmp byte [rsp + 0x9f], 0
js 0x1401b3a0d
mov byte [0x140354738], bpl
lea rcx, [0x14035473c]
call fcn.14016ef8c
jmp 0x1401b333a
lea rcx, [0x140354750]
call fcn.14016f8b4
cmp dword [0x140354750], 0xffffffff
jne 0x1401b3645
rdtsc
shl rdx, 0x20
or rdx, rax
mov qword [0x140354748], rdx
lea rcx, [0x140354750]
call fcn.14016ef8c
jmp 0x1401b3645
lea rcx, [0x140354760]
call fcn.14016f8b4
cmp dword [0x140354760], 0xffffffff
jne 0x1401b366a
lea r14, [rsp + 0x58]
mov qword [r14], 0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [r14]
mov qword [0x140354758], rax
lea rcx, [0x140354760]
call fcn.14016ef8c
jmp 0x1401b366a
lea rcx, [0x140354ad0]
call fcn.140156f20
jmp 0x1401b34eb
mov rcx, rsi
mov rdx, rbx
call fcn.14022b6f0
mov al, byte [rsi]
jmp 0x1401b352f
xorpd xmm0, xmm0
movapd xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], 0
xor eax, eax
xor r15d, r15d
jmp 0x1401b393a
xorpd xmm0, xmm0
movapd xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], 0
movabs rax, 0xaaaaaaaaaaaaaa00
lea r8, [rsp + 0x58]
mov qword [r8 + 8], rax
lea rax, [0x1403547a8]
mov qword [r8], rax
lea rcx, [0x1403547a0]
mov rdx, rdi
call fcn.140213cb0
mov rdi, rax
test rax, rax
je 0x1401b390a
lea rdx, [rsp + 0x48]
lea r8, [rsp + 0x50]
mov rcx, rdi
call fcn.14022a760
mov eax, dword [0x140354958]
test al, 8
jne 0x1401b39e7
cmp byte [rsp + 0x60], 0
je 0x1401b392a
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov r15b, byte [rsp + 0x1a7]
mov rax, qword [rsp + 0x198]
mov ecx, r15d
and cl, 0x7f
test r15b, r15b
movzx edi, cl
cmovs rdi, rax
test rdi, rdi
je 0x1401b39b8
cmp dword [0x140352b00], 2
jg 0x1401b39b8
lea rdx, str....._base_trace_event_trace_log.cc
lea rbx, [rsp + 0x58]
mov rcx, rbx
mov r8d, 0x813
mov r9d, 2
call fcn.1400d3710
lea rcx, [rsp + 0x68]
test r15b, r15b
jns 0x1401b39a0
mov rdx, qword [rsp + 0x190]
jmp 0x1401b39a8
lea rcx, [0x140354ad0]
call fcn.1401571d0
jmp 0x1401b35c0
int3
lea rdx, [rsp + 0x190]
mov r8, rdi
call fcn.14015f6d6
mov rcx, rbx
call fcn.140169410
test byte [rsi], 0x10
jne 0x1401b39dd
cmp byte [rsp + 0x1a7], 0
jns 0x1401b3572
mov rcx, qword [rsp + 0x190]
call fcn.14016eccc
jmp 0x1401b3572
mov rdx, rsi
call fcn.140213c40
jmp 0x1401b39bd
mov qword [rsp + 0x20], rdi
lea rcx, [0x1403547a0]
lea rdx, [rsp + 0x190]
lea r9, [rsp + 0x48]
mov r8b, 0x45
call fcn.140213520
jmp 0x1401b3918
mov rcx, qword [rsp + 0x88]
call fcn.14016eccc
jmp 0x1401b37ca