Function at 0x140283330
Capabilities:
Check for debugger via api
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rax, qword [0x140ad7868]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov eax, 0xf98ac85b
lea rsi, [rsp + 0x3c]
mov r13, qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
mov ebp, 0xeeb032df
mov edi, 0x4c52cfbd
mov ebx, 0x42a66b40
mov r15d, 0x726827d
mov r12d, 0xfb0d1f80
mov r14d, 0xa975e356
jmp 0x140283390
mov eax, 0x33e4fb36
nop dword [rax + rax]
cmp eax, 0xfb0d1f7f
jg 0x1402833e0
cmp eax, 0xdffa54e2
jle 0x140283410
cmp eax, 0xe7c98b59
jle 0x1402834ae
cmp eax, 0xe7c98b5a
je 0x140283383
cmp eax, 0xf98ac85b
jne 0x14028361a
mov qword [rsp + 0x28], rsi
mov rax, qword [rsp + 0x28]
mov dword [rsp + 0x3c], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x30], rax
mov eax, 0x7943a33
jmp 0x140283390
cmp eax, 0x33e4fb35
jg 0x140283450
cmp eax, 0x7943a32
jg 0x1402834ea
cmp eax, 0xfb0d1f80
je 0x14028356e
cmp eax, 0x726827d
jne 0x140283390
mov eax, 0xe0009d4e
jmp 0x140283390
cmp eax, 0x974235fa
jg 0x14028350a
cmp eax, 0x8652a436
je 0x140283585
cmp eax, 0x8a0a4f7d
jne 0x140283390
mov rcx, qword [rsp + 0x30]
mov rdx, rsi
call r13
mov eax, 0x42a66b40
jmp 0x140283390
cmp eax, 0x4c52cfbc
jg 0x14028353b
cmp eax, 0x33e4fb36
je 0x1402835b5
cmp eax, 0x42a66b40
jne 0x140283390
mov rcx, qword [rsp + 0x30]
mov rdx, rsi
call r13
cmp dword [rsp + 0x3c], 0
setne byte [rsp + 0x27]
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8a0a4f7d
cmove eax, r12d
cmp dword [0x140ae13a4], 0xa
cmovl eax, r12d
jmp 0x140283390
cmp eax, 0xdffa54e3
je 0x1402835dd
cmp eax, 0xe0009d4e
jne 0x140283390
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x98d061e
cmove eax, edi
cmp dword [0x140ae13a4], 0xa
cmovl eax, edi
jmp 0x140283390
cmp eax, 0x7943a33
je 0x1402835e7
cmp eax, 0x98d061e
jne 0x140283390
mov eax, 0x4c52cfbd
jmp 0x140283390
cmp eax, 0x974235fb
jne 0x14028360d
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b721f27
cmove eax, ebp
cmp dword [0x140ae13a4], 0xa
cmovl eax, ebp
jmp 0x140283390
cmp eax, 0x4c52cfbd
jne 0x140283627
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x98d061e
cmove eax, r14d
cmp dword [0x140ae13a4], 0xa
cmovl eax, r14d
jmp 0x140283390
cmp byte [rsp + 0x27], 0
mov eax, 0x8652a436
mov ecx, 0x974235fb
cmovne eax, ecx
jmp 0x140283390
mov rax, qword [rsp + 0x28]
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe7c98b5a
mov ecx, 0x33e4fb36
cmove eax, ecx
cmp dword [0x140ae13a4], 0xa
cmovl eax, ecx
jmp 0x140283390
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe7c98b5a
cmove eax, r15d
cmp dword [0x140ae13a4], 0xa
cmovl eax, r15d
jmp 0x140283390
mov eax, 0x5f492590
jmp 0x140283390
mov eax, dword [0x140ae13a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8a0a4f7d
cmove eax, ebx
cmp dword [0x140ae13a4], 0xa
cmovl eax, ebx
jmp 0x140283390
cmp eax, 0xa975e356
jne 0x140283390
jmp 0x14028363d
cmp eax, 0xeeb032df
jne 0x140283390
jmp 0x140283632
cmp eax, 0x7b721f27
jne 0x140283390
mov ecx, 0x1001
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140616370
nop
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret