Function at 0x180036180
Capabilities:
Execute anti-debugging instructions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1f8
movaps xmmword [rsp + 0x1e0], xmm6
mov edi, r8d
mov dword [rsp + 0xfc], edx
rdtsc
mov r8, rdx
shl r8, 0x20
or r8, rax
rdtsc
shl rdx, 0x20
or rdx, rax
cmp r8, rdx
mov eax, 0xe998f800
mov r14d, 0xb76b32dd
cmove r14d, eax
mov rbx, rcx
mov esi, 0xb76b32c9
mov r8, r14
xor r8, rsi
lea rcx, [rsp + 0x160]
xor edx, edx
call fcn.18003ad10
or rsi, 0x24
xor rsi, r14
lea rcx, [rsp + 0x1a0]
xor edx, edx
mov r8, rsi
call fcn.18003ad10
mov ecx, r14d
xor ecx, 0x16b36087
mov edx, dword [rsp + 0xf8]
and edx, ecx
mov eax, r14d
xor eax, 0xb76b32dc
mov r8d, r14d
xor r8d, 0xe94c9f78
xor ecx, dword [rsp + 0xf8]
add ecx, edx
mov edx, r14d
and r8d, dword [rsp + 0xf8]
xor edx, 0xe94c9f7b
not r8d
add r8d, ecx
mov ecx, r14d
xor ecx, 0xb76b32de
add ecx, edx
imul r8d, eax
add r8d, ecx
mov ecx, r14d
xor ecx, 0x7d8dcd5e
imul ecx, r8d
mov edx, r14d
xor edx, 0x2a1d36cd
add edx, ecx
mov dword [rsp + 0x154], edx
mov ecx, r14d
xor ecx, 0x93ccb5f6
imul ecx, dword [rsp + 0x154]
mov edx, r14d
xor edx, 0xddf3d38d
add edx, ecx
mov dword [rsp + 0x160], edx
mov ecx, r14d
xor ecx, 0x255a984d
mov edx, dword [rsp + 0xf4]
and edx, ecx
mov r8d, r14d
xor r8d, 0xdaa567ad
mov r9d, r14d
xor r9d, 0xb76b32df
add r9d, r8d
sub r9d, dword [rsp + 0xf4]
or ecx, dword [rsp + 0xf4]
add ecx, edx
imul ecx, eax
add ecx, r9d
mov eax, r14d
xor eax, 0xf7d17164
imul eax, ecx
mov ecx, r14d
xor ecx, 0x4056e7cf
add ecx, eax
mov dword [rsp + 0x150], ecx
mov eax, r14d
xor eax, 0xf78fe054
imul eax, dword [rsp + 0x150]
mov ecx, r14d
xor ecx, 0x4730783
add ecx, eax
mov dword [rsp + 0x164], ecx
mov qword [rsp + 0x158], rbx
test rbx, rbx
mov eax, 0x7024ef89
mov edx, 0x147a62f0
cmove edx, eax
mov qword [rsp + 0x98], 0
xor edx, r14d
mov r10d, edx
shr r10d, 0x10
mov r12d, r14d
xor r12d, 0xedef2e64
mov r13d, r14d
xor r13d, 0xe7d5fdaf
mov eax, r14d
xor eax, 0xc222ed35
mov dword [rsp + 0xe4], eax
shr eax, 0x10
mov dword [rsp + 0xe0], eax
mov eax, r14d
xor eax, 0x17a72510
mov dword [rsp + 0xd4], eax
shr eax, 0x10
mov dword [rsp + 0xd0], eax
mov eax, r14d
xor eax, 0xa3899f37
mov dword [rsp + 0x68], eax
shr eax, 0x10
mov dword [rsp + 0x64], eax
mov eax, r14d
xor eax, 0x49ed3c84
mov dword [rsp + 0xcc], eax
shr eax, 0x10
mov dword [rsp + 0xc8], eax
mov eax, r14d
xor eax, 0xeee563f4
mov dword [rsp + 0xbc], eax
shr eax, 0x10
mov dword [rsp + 0xb8], eax
mov eax, r14d
xor eax, 0xf6d78ec4
mov dword [rsp + 0xdc], eax
shr eax, 0x10
mov dword [rsp + 0xd8], eax
rol di, 8
mov word [rsp + 0x94], di
mov qword [rsp + 0xa0], r14
mov eax, r14d
xor eax, 0x70dd8f6f
mov dword [rsp + 0xb4], eax
shr eax, 0x10
mov dword [rsp + 0xb0], eax
xorps xmm6, xmm6
mov dword [rsp + 0xc4], r12d
mov dword [rsp + 0xc0], r13d
jmp 0x180036450
mov rcx, qword [rsp + 0x198]
call qword [sym.imp.ntdll.dll_NtClose]
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0xb0]
mov edx, dword [rsp + 0xb4]
mov r8d, edx
mov r9d, r10d
mov esi, ecx
mov ebp, ebx
mov edi, eax
mov eax, r9d
shl eax, 0x10
movzx r15d, dx
or r15d, eax
mov r11d, r15d
imul r11d, r12d
add r11d, r13d
cmp r11d, 0xfea505b4
jle 0x180036590
cmp r11d, 0x337afb79
jle 0x180036600
cmp r11d, 0x4f594ccf
jg 0x1800366c5
cmp r11d, 0x337afb7a
je 0x180036ab6
cmp r11d, 0x363aabf7
je 0x180036ade
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0x3d997983
jne 0x180036450
mov qword [rsp + 0xa8], 0
movaps xmmword [rsp + 0x1d0], xmm6
mov eax, dword [rsp + 0x74]
not eax
xor r15d, dword [rsp + 0xa0]
mov ecx, r15d
xor ecx, 0xed4fbbc2
and eax, ecx
mov edx, dword [rsp + 0x74]
or edx, ecx
mov r8d, dword [rsp + 0x74]
not r8d
or r8d, ecx
mov ecx, r15d
xor ecx, 0xf6d78ec5
imul ecx, r8d
mov r8d, r15d
xor r8d, 0x12b0443d
mov r9d, dword [rsp + 0x74]
or r9d, r8d
mov r10d, r15d
xor r10d, 0xf6d78edb
add r10d, r8d
sub r10d, eax
add r10d, edx
add r10d, ecx
sub r10d, r9d
inc r10d
mov eax, r15d
xor eax, 0x6a75df2d
imul eax, r10d
mov ecx, r15d
xor ecx, 0xeb10ada4
add ecx, eax
mov dword [rsp + 0x11c], ecx
mov eax, r15d
xor eax, 0x9d
imul eax, dword [rsp + 0x11c]
xor r15d, 0x64
add r15d, eax
mov eax, dword [rsp + 0x108]
mov ecx, r15d
sar eax, cl
mov dword [rsp + 0x60], eax
jmp 0x180036bc3
cmp r11d, 0xb81b681c
jle 0x180036660
cmp r11d, 0xd310029a
jg 0x18003672c
mov eax, edi
mov ebx, ebp
mov ecx, dword [rsp + 0x118]
mov r10d, dword [rsp + 0xe0]
mov edx, dword [rsp + 0xe4]
cmp r11d, 0xb81b681d
je 0x180036450
cmp r11d, 0xbcfaf126
je 0x180036ba7
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0xcd09ece0
je 0x180036bbb
jmp 0x180036450
cmp r11d, 0x2484567d
jle 0x1800369e6
cmp r11d, 0x2484567e
je 0x180036bd7
cmp r11d, 0x2b3efe1a
je 0x180036c02
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0x2e8a6e97
jne 0x180036450
mov dword [rsp + 0x6c], edi
test edi, edi
js 0x1800366ab
mov eax, dword [rsp + 0x1d0]
jmp 0x1800366a7
cmp r11d, 0x9d101cbc
jle 0x180036a41
cmp r11d, 0x9d101cbd
je 0x180036c27
cmp r11d, 0xa85585fd
je 0x180036f1a
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0xae2d0620
jne 0x180036450
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x6c], eax
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0xb8]
mov edx, dword [rsp + 0xbc]
jmp 0x180036450
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0xd8]
mov edx, dword [rsp + 0xdc]
cmp r11d, 0x4f594cd0
je 0x180036450
mov eax, dword [rsp + 0x110]
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0xd0]
mov edx, dword [rsp + 0xd4]
cmp r11d, 0x5cd7e0d1
je 0x180036450
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0x63327f1a
je 0x18003643b
jmp 0x180036450
cmp r11d, 0xd310029b
je 0x180036f47
cmp r11d, 0xdc9bf213
je 0x180037264
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0xf463a2db
jne 0x180036450
mov r14d, ebp
mov ebp, esi
mov edx, r15d
mov rbx, qword [rsp + 0xa0]
xor edx, ebx
mov eax, edx
xor eax, 0x90d07374
mov ecx, edx
xor ecx, 0x6f2f8c84
mov r9d, edx
xor r9d, 0x8a38c7ec
add r9d, eax
sub r9d, dword [rsp + 0x84]
mov r10d, dword [rsp + 0x84]
xor r10d, ecx
mov eax, edx
xor eax, 0x8a38c6ed
imul r10d, eax
mov r11d, dword [rsp + 0x84]
not r11d
mov esi, edx
xor esi, 0x75c73912
imul esi, r11d
add esi, r9d
mov r9d, dword [rsp + 0x84]
not r9d
or r9d, ecx
mov ecx, edx
xor ecx, 0x8a38c6ee
imul r9d, ecx
add r9d, esi
add r9d, r10d
mov r10d, edx
xor r10d, 0xfa012a91
imul r10d, r9d
mov r9d, edx
xor r9d, 0xe1887a00
add r9d, r10d
mov dword [rsp + 0x138], r9d
mov r9d, edx
xor r9d, 0xb3df2a39
imul r9d, dword [rsp + 0x138]
mov r10d, edx
xor r10d, 0xf8edf948
add r10d, r9d
mov dword [rsp + 0x1a0], r10d
movzx r9d, word [rsp + 0x5e]
not r9d
xor r8d, ebx
mov r10d, r8d
xor r10d, 0x5263
movzx r11d, word [rsp + 0x5e]
movzx esi, word [rsp + 0x5e]
or si, r10w
and r10d, r9d
mov r9d, r8d
xor r9d, 0xffffc6ed
mov ebx, r8d
xor ebx, 0xad9c
and r11w, bx
add r11d, r10d
mov r10d, r8d
xor r10d, 0x527c
or bx, word [rsp + 0x5e]
add ebx, r11d
imul ebx, r9d
mov r9d, r8d
xor r9d, 0xffffc6ee
add r9d, r10d
sub r9d, esi
add r9d, ebx
mov r10d, r8d
xor r10d, 0xffffc8d1
imul r10d, r9d
mov r9d, r8d
xor r9d, 0xffffefdc
add r9d, r10d
mov word [rsp + 0x96], r9w
mov r9d, r8d
xor r9d, 0xbff9
imul r9w, word [rsp + 0x96]
xor r8d, 0x29fc
add r8d, r9d
mov word [rsp + 0x1b8], r8w
mov r8d, dword [rsp + 0xfc]
mov dword [rsp + 0x1bc], r8d
movzx r8d, word [rsp + 0x94]
mov word [rsp + 0x1ba], r8w
mov qword [rsp + 0xa8], 0
mov r8d, edx
xor r8d, 0x894985d
mov r9d, dword [rsp + 0xe8]
xor r9d, r8d
mov r10d, edx
xor r10d, 0x709f8472
mov r11d, edx
xor r11d, 0x894985e
add r11d, r10d
mov r10d, edx
xor r10d, 0x9a38c6ec
add r10d, r11d
add r10d, dword [rsp + 0xe8]
imul r9d, eax
add r10d, r9d
mov eax, dword [rsp + 0xe8]
not eax
or eax, r8d
imul eax, ecx
add eax, r10d
inc eax
mov ecx, edx
xor ecx, 0x326c7993
imul ecx, eax
mov eax, edx
xor eax, 0x722b24f4
add eax, ecx
mov dword [rsp + 0x134], eax
mov eax, edx
xor eax, 0xe6b3c693
imul eax, dword [rsp + 0x134]
xor edx, 0x812210f4
add edx, eax
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0xa8]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtCreateEvent]
mov edx, 0x3a0f9412
mov dword [rsp + 0x100], eax
test eax, eax
jns 0x1800369d0
mov edx, 0xffe4d52f
xor edx, r15d
mov r10d, edx
shr r10d, 0x10
mov eax, edi
mov ebx, r14d
mov ecx, ebp
jmp 0x180036450
cmp r11d, 0xfea505b5
je 0x18003642d
cmp r11d, 0x4555d14
jne 0x1800372a3
mov qword [rsp + 0x98], 0
cmp dword [rsp + 0x10c], 0
mov eax, 0x6595e06c
mov ecx, 0xfae54983
cmovns eax, ecx
movaps xmmword [rsp + 0x180], xmm6
xor r15d, eax
mov r10d, r15d
shr r10d, 0x10
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov edx, r15d
jmp 0x180036450
mov eax, edi
mov ebx, dword [rsp + 0x114]
mov ecx, esi
mov r10d, dword [rsp + 0xc8]
mov edx, dword [rsp + 0xcc]
cmp r11d, 0x9262bee2
je 0x180036450
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0x9914e9c3
jne 0x180036450
mov rax, qword [rsp + 0x98]
mov edx, 0x4fc4e6b1
mov qword [rsp + 0x198], rax
test rax, rax
je 0x180036aa0
mov edx, 0x2882ca82
xor edx, r15d
mov r10d, edx
shr r10d, 0x10
mov dword [rsp + 0x10c], ebp
jmp 0x180037298
mov rcx, qword [rsp + 0x190]
call qword [sym.imp.ntdll.dll_NtClose]
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0xd8]
mov edx, dword [rsp + 0xdc]
jmp 0x180036450
mov edx, r15d
xor edx, dword [rsp + 0xa0]
mov eax, edx
xor eax, 0x6ff7ebf2
mov ecx, dword [rsp + 0xf0]
and ecx, eax
mov r8d, edx
xor r8d, 0x147a62f1
imul r8d, ecx
mov ecx, edx
xor ecx, 0x9008140d
mov r9d, dword [rsp + 0xf0]
xor eax, dword [rsp + 0xf0]
and r9d, ecx
mov r10d, edx
xor r10d, 0x47a62f0
add r10d, ecx
sub r10d, r9d
add r10d, r8d
add eax, r10d
inc eax
mov ecx, edx
xor ecx, 0x955be28f
imul ecx, eax
mov eax, edx
xor eax, 0x6f8294dc
add eax, ecx
mov dword [rsp + 0x14c], eax
mov eax, edx
xor eax, 0xf9445d8f
imul eax, dword [rsp + 0x14c]
xor edx, 0xf43b6edc
add edx, eax
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x98]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtCreateEvent]
mov edx, 0x5339a1dc
mov dword [rsp + 0x114], eax
test eax, eax
jns 0x180036b98
mov edx, 0x9cf542dd
xor edx, r15d
mov r10d, edx
shr r10d, 0x10
jmp 0x180037298
mov qword [rsp + 0x98], 0
movaps xmmword [rsp + 0x180], xmm6
mov dword [rsp + 0x60], 0xffffffff
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0x64]
mov edx, dword [rsp + 0x68]
jmp 0x180036450
mov rcx, qword [rsp + 0xa8]
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ntdll.dll_NtWaitForSingleObject]
mov ebx, ebp
mov ecx, esi
mov r10d, dword [rsp + 0xd0]
mov edx, dword [rsp + 0xd4]
jmp 0x180036450
mov ebx, esi
test esi, esi
js 0x180036c0f
mov ebx, dword [rsp + 0x180]
mov eax, edi
mov ecx, esi
mov r10d, dword [rsp + 0xc8]
mov edx, dword [rsp + 0xcc]
jmp 0x180036450
mov dword [rsp + 0x104], ebp
mov dword [rsp + 0x70], esi
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0x158]
mov rcx, qword [rax]
mov ebx, r15d
xor ebx, dword [rsp + 0xa0]
mov eax, ebx
xor eax, 0x4f42df29
mov r8d, dword [rsp + 0x80]
and r8d, eax
mov r9d, ebx
xor r9d, 0xb0bd20d7
mov r10d, dword [rsp + 0x80]
or r10d, eax
mov r13d, ebx
xor r13d, 0xb03752ff
mov r11d, dword [rsp + 0x80]
not r11d
or r11d, eax
add r11d, r10d
and eax, dword [rsp + 0x80]
mov r10d, ebx
xor r10d, 0xb03672f9
add r10d, r9d
sub r10d, r8d
add r10d, eax
imul r11d, r13d
lea eax, [r11 + r10]
inc eax
mov r8d, ebx
xor r8d, 0x257cf949
imul r8d, eax
mov eax, ebx
xor eax, 0x4a1af3f8
add eax, r8d
mov dword [rsp + 0x130], eax
mov r8d, ebx
xor r8d, 0xe2d770f9
imul r8d, dword [rsp + 0x130]
mov eax, ebx
xor eax, 0xf82a9e28
mov r9d, ebx
xor r9d, 0x626d6a69
and r9d, dword [rsp + 0x12c]
add eax, r8d
mov r8d, ebx
xor r8d, 0x626d6a66
mov r10d, ebx
xor r10d, 0x9d929596
or r10d, dword [rsp + 0x12c]
mov r11d, ebx
xor r11d, 0xb03752d1
add r11d, r8d
sub r11d, r9d
lea r8d, [r11 + r10]
inc r8d
mov r9d, ebx
xor r9d, 0x35f86da1
imul r9d, r8d
mov r8d, ebx
xor r8d, 0xb0fd19b0
add r8d, r9d
mov dword [rsp + 0x128], r8d
mov r8d, ebx
xor r8d, 0x61598e61
imul r8d, dword [rsp + 0x128]
mov r9d, ebx
xor r9d, 0x1c8de7f1
mov r10d, dword [rsp + 0x7c]
and r10d, r9d
mov r11d, ebx
xor r11d, 0x1c8de7ee
mov ebp, ebx
xor ebp, 0xe372180e
mov r12d, dword [rsp + 0x7c]
xor r12d, ebp
mov esi, ebx
xor esi, 0xb03752fc
imul r12d, esi
or r9d, dword [rsp + 0x7c]
imul r9d, r13d
add r9d, r12d
mov r14d, ebx
xor r14d, 0xb03752ce
add r14d, r11d
mov r12d, ebx
xor r12d, 0x4fc8ad00
imul r10d, r12d
add r14d, r10d
add r14d, r9d
and ebp, dword [rsp + 0x7c]
lea r9d, [r14 + rbp]
inc r9d
mov r10d, ebx
xor r10d, 0xf66b8f09
imul r10d, r9d
mov r9d, ebx
xor r9d, 0x2a3972d4
add r9d, r10d
mov r10d, ebx
xor r10d, 0x10176070
mov dword [rsp + 0x124], r9d
mov r9d, ebx
xor r9d, 0x5265a139
imul r9d, dword [rsp + 0x124]
add r10d, r8d
mov r8d, ebx
xor r8d, 0xc53e73a4
add r8d, r9d
mov dword [rsp + 0x48], r8d
lea r8, [rsp + 0x1a0]
mov qword [rsp + 0x40], r8
mov dword [rsp + 0x38], r10d
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtDeviceIoControlFile]
mov r10d, ebx
xor r10d, 0xbf4c2d8
mov ecx, dword [rsp + 0x78]
xor ecx, r10d
imul ecx, esi
mov edx, dword [rsp + 0x78]
or edx, r10d
imul edx, r12d
mov r8d, ebx
xor r8d, 0xf40b3d27
or r8d, dword [rsp + 0x78]
imul r8d, r13d
add r8d, edx
mov edx, dword [rsp + 0x78]
and edx, r10d
mov r9d, ebx
xor r9d, 0xb03753fd
add r9d, r10d
add r9d, ecx
add r9d, r8d
add edx, r9d
inc edx
mov ecx, ebx
xor ecx, 0xdb88d0dd
imul ecx, edx
mov edx, ebx
xor edx, 0x6f117b9a
add edx, ecx
mov dword [rsp + 0x120], edx
mov ecx, ebx
xor ecx, 0xca216f75
imul ecx, dword [rsp + 0x120]
xor ebx, 0x37e5e04a
add ebx, ecx
mov edx, 0x8a86514f
mov dword [rsp + 0x110], eax
cmp eax, ebx
je 0x180036f02
mov edx, 0xa4dbe2f4
xor edx, r15d
mov r10d, edx
shr r10d, 0x10
mov eax, edi
mov ebx, dword [rsp + 0x104]
jmp 0x18003724b
mov rcx, qword [rsp + 0x98]
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ntdll.dll_NtWaitForSingleObject]
mov ecx, eax
mov eax, edi
mov ebx, ebp
mov r10d, dword [rsp + 0xe0]
mov edx, dword [rsp + 0xe4]
jmp 0x180036450
mov dword [rsp + 0x70], esi
mov rdx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x158]
mov rcx, qword [rax]
mov ebx, r15d
xor ebx, dword [rsp + 0xa0]
mov eax, ebx
xor eax, 0xfbc03c94
and eax, dword [rsp + 0x90]
mov r14d, ebx
xor r14d, 0x4743c32e
imul eax, r14d
mov r8d, ebx
xor r8d, 0x43fc364
mov r9d, ebx
xor r9d, 0x43fc36b
mov r10d, dword [rsp + 0x90]
and r10d, r9d
mov esi, ebx
xor esi, 0x4743c32d
mov r11d, dword [rsp + 0x90]
not r11d
add r11d, r10d
or r9d, dword [rsp + 0x90]
mov r10d, ebx
xor r10d, 0x4742e32f
add r10d, r8d
add r10d, eax
sub r10d, r9d
imul r11d, esi
add r11d, r10d
mov eax, ebx
xor eax, 0xfadcf71
imul eax, r11d
mov r8d, ebx
xor r8d, 0xc781d564
add r8d, eax
mov dword [rsp + 0x148], r8d
mov r8d, ebx
xor r8d, 0xcbffe4d9
imul r8d, dword [rsp + 0x148]
mov eax, ebx
xor eax, 0x30b87634
add eax, r8d
mov r9d, ebx
xor r9d, 0x7f35217e
mov r8d, dword [rsp + 0x8c]
xor r8d, r9d
mov r10d, dword [rsp + 0x8c]
or r10d, r9d
mov r12d, ebx
xor r12d, 0xb8bc3cd2
imul r10d, r12d
mov r11d, dword [rsp + 0x8c]
or r11d, r9d
mov r13d, ebx
xor r13d, 0x80cade81
or r13d, dword [rsp + 0x8c]
add r13d, r8d
mov r8d, ebx
xor r8d, 0x4743c338
imul r13d, esi
add r9d, r8d
add r9d, r11d
add r9d, r10d
add r9d, r13d
inc r9d
mov r10d, ebx
xor r10d, 0x6a175df5
imul r10d, r9d
mov r9d, ebx
xor r9d, 0xcd38f366
add r9d, r10d
mov dword [rsp + 0x144], r9d
mov r9d, ebx
xor r9d, 0xfacfc245
imul r9d, dword [rsp + 0x144]
mov r10d, dword [rsp + 0xec]
not r10d
mov r11d, ebx
xor r11d, 0x543bd091
and r10d, r11d
mov r13d, dword [rsp + 0xec]
xor r13d, r11d
or r11d, dword [rsp + 0xec]
not r11d
add r11d, r13d
mov r13d, ebx
xor r13d, 0x543bd092
add r13d, r8d
mov r8d, ebx
xor r8d, 0xea93248a
imul r11d, esi
sub r13d, r10d
add r13d, r11d
mov r10d, ebx
xor r10d, 0x34fc76e3
imul r10d, r13d
mov r11d, ebx
xor r11d, 0x81689f28
add r11d, r10d
mov dword [rsp + 0x140], r11d
mov r10d, ebx
xor r10d, 0x846cf203
imul r10d, dword [rsp + 0x140]
add r8d, r9d
mov r9d, ebx
xor r9d, 0x27f29468
add r9d, r10d
mov dword [rsp + 0x48], r9d
lea r9, [rsp + 0x160]
mov qword [rsp + 0x40], r9
mov dword [rsp + 0x38], r8d
mov qword [rsp + 0x30], r9
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtDeviceIoControlFile]
mov r9d, ebx
xor r9d, 0xd7b7143b
mov ecx, dword [rsp + 0x88]
xor ecx, r9d
mov edx, dword [rsp + 0x88]
xor edx, ebx
xor edx, 0x2848ebc4
imul edx, r14d
mov r8d, dword [rsp + 0x88]
not r8d
add r8d, ecx
mov ecx, dword [rsp + 0x88]
not ecx
or ecx, r9d
imul ecx, r12d
mov r10d, ebx
xor r10d, 0xd7b71434
mov r9d, ebx
xor r9d, 0x4743c22f
add r9d, r10d
add r9d, edx
imul r8d, esi
add r8d, r9d
add r8d, ecx
mov edx, ebx
xor edx, 0xab1595d5
imul edx, r8d
mov ecx, ebx
xor ecx, 0x84cf37b8
add ecx, edx
mov dword [rsp + 0x13c], ecx
mov ecx, ebx
xor ecx, 0x8a2b4865
imul ecx, dword [rsp + 0x13c]
xor ebx, 0x94a226e0
add ebx, ecx
mov edx, 0x53340292
mov dword [rsp + 0x118], eax
cmp eax, ebx
je 0x18003723d
mov edx, 0xe4b2e772
xor edx, r15d
mov r10d, edx
shr r10d, 0x10
mov eax, edi
mov ebx, ebp
mov ecx, dword [rsp + 0x70]
mov r12d, dword [rsp + 0xc4]
mov r13d, dword [rsp + 0xc0]
jmp 0x180036450
mov rax, qword [rsp + 0xa8]
mov edx, 0x71c57467
mov qword [rsp + 0x190], rax
test rax, rax
je 0x180037283
mov edx, 0x3d968961
xor edx, r15d
mov r10d, edx
shr r10d, 0x10
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x108], eax
mov eax, edi
mov ebx, ebp
mov ecx, esi
jmp 0x180036450
mov eax, edi
mov ebx, ebp
mov ecx, esi
mov r10d, r9d
mov edx, r8d
cmp r11d, 0x243c158c
jne 0x180036450
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1c0], xmm0
movaps xmmword [rsp + 0x1b0], xmm0
movaps xmmword [rsp + 0x1a0], xmm0
movaps xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0
mov eax, dword [rsp + 0x60]
movaps xmm6, xmmword [rsp + 0x1e0]
add rsp, 0x1f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret