Function at 0x140131e48
Capabilities:
Access peb ldr_data
Execute anti-debugging instructions

Disassembly:
push r15
lea rbp, [rsp - 0x2b8]
sub rsp, 0x3b8
jmp 0x140131194
nop
sub rsp, 8
mov qword [rsp], r14
jmp 0x14013109e
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1401312bb
cmp edx, 0xb6ef69d8
jmp 0x14013130b
je 0x140131311
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
je 0x1401312ed
jne 0x1401312ed
pop r10
mov edx, 0x7f765a6
rol r9d, 0xaa
xor edx, 0x563687d9
add ebx, 0x50e9dc40
lea esi, [rbp - 0xd90f]
rcl edi, 0xed
rol ebx, 0x15
movabs r13, 0x2bafd9ffffff3be9
rcr r12d, 0xc3
rcr r11d, 0xbb
rcl edx, 0x7b
push rbx
test esi, 0x1d79e98f
rcl esi, 0xa2
ret
jmp 0x14013122d
je 0x140131380
inc r8d
jmp 0x140131319
mov r10d, r8d
mov edx, 0x4078ad54
lea rax, [r9 + r10*4]
jmp 0x14013136c
movabs r11, 0xbe8f1ffffff38e9
call rcx
je 0x140131cb1
call 0x140131e48
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
jmp 0x1401312b2
mov rax, qword gs:[0x60]
mov r8d, r13d
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
jne 0x1401313ba
movabs r11, 0x47ae147ae147ae15
nop word [rax + rax]
rdtsc
shl rdx, 0x12
shl rdx, 4
jmp 0x140131af7
shl rdx, 1
shl rdx, 1
or rax, rdx
mov r8, rax
xchg r11, r9
mov rax, r9
xchg r9, r11
jne 0x140131ac1
je 0x140131ac1
js 0x140132336
pause
rol r13d, 0xb
div rdx
jmp rcx
jmp 0x140131d30
nop dword [rax]
shl rdx, 1
shl rdx, 1
shl rdx, 8
or rax, rdx
jmp 0x140131c89
shr rcx, 1
add rcx, rdx
shr rcx, 5
shr rcx, 1
jmp 0x140131bd5
test eax, eax
jne 0x140134b94
mov r9d, 0x8000
xchg r12, r8
mov qword [rsp + 0x3a8], r8
xchg r8, r12
lea r8, [rbp + 0xd0]
jmp 0x140131d44
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x48]
call r14
jmp 0x140131d18
imul rcx, rcx, 0x64
sub r8, rcx
cmp r8, 0x4b
jb 0x140131c9f
je 0x140131bec
jne 0x140131bec
movabs r9, 0x25fd22000000abe9
dec r15
jmp 0x140130c88
jmp 0x140131c9c
shl rdx, 4
shl rdx, 4
shl rdx, 1
je 0x140131c40
jne 0x140131c40
div r10
int3
jmp 0x140131a92
jb 0x140131a1d
lea rax, [rbp + 0x20]
mov dword [rbp + 0x20], r13d
mov r9d, 0x20
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xd0]
jmp 0x140131baf
xchg r8, rax
mov r9, r8
xchg r8, rax
and r9d, 0xfff
jmp 0x140131d5f
mov rbx, r9
xchg rcx, r13
mov r13, qword [rsp + 0x48]
je 0x140131cd5
jne 0x140131cd5
rcl r9d, 0x6e
neg r8
jmp rcx
fdivr st(7)
loope 0x140131cf6
ror esp, 0x66
pause
js 0x140131201
test rbx, rcx
popf
add r14d, 0x145829da
popfq
lea ebp, [rdx + 0xea]
movabs rbx, 0x2043c900000126e9
add r8d, 0x833f0711
jmp 0x1401325cf
jmp 0x140131e00
and al, 0x30
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140134b94
jmp 0x140131dcf
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rcx, qword [rsp + 0x30]
call rdi
jmp 0x140131b3b
mul r8
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
sub rcx, rdx
jmp 0x140131b09
mov qword [rbp + 0xd0], r13
lea rdx, [rsp + 0x48]
mov rcx, 0xffffffffffffffff
call r15
jmp 0x140131d7a
add r9, r10
mov byte [r9], 0xc3
test rbx, rbx
je 0x140131c9c
rdtsc
shl rdx, 0x15
jmp 0x140131bfc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
jmp 0x140131ad3
mov r10, qword [rsp + 0x48]
xchg r13, rsi
mov rbx, rsi
jmp 0x140131e3f
xchg r13, rcx
add r10, 0x518b3bb7
sub r10, 0x518b2bb7
add rcx, qword [rbp + 0xd0]
cmp r10, rcx
jmp 0x140131c64
xchg r13, rsi
xchg rcx, rbx
mov rbx, qword [rbp + 0xd0]
xchg rbx, rcx
add rcx, r10
cmp r10, rcx
jae 0x140131c6a
jmp 0x140131a09