Function at 0x1800383c0
Capabilities:
Execute anti-debugging instructions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov dword [rsp + 0x54], edx
mov rdi, rcx
rdtsc
mov rcx, rdx
shl rcx, 0x20
or rcx, rax
rdtsc
shl rdx, 0x20
or rdx, rax
cmp rcx, rdx
mov eax, 0xad38129b
mov r15d, 0x8e946bdf
cmove r15d, eax
test rdi, rdi
mov eax, 0x193237a5
mov ecx, 0xea98d1ac
cmove ecx, eax
xor ecx, r15d
mov r12d, r15d
xor r12d, 0xfcb085c1
mov r13d, r15d
xor r13d, 0x47491bf7
mov ebp, r15d
xor ebp, 0x7459e3a9
mov eax, r15d
xor eax, 0x40b796a6
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x2c], r15d
xor r15d, 0x69cc8fc7
jmp 0x180038460
xor r8d, dword [rsp + 0x2c]
xor r8d, 0x40b796be
mov rcx, rdi
xor edx, edx
call fcn.18003ad10
mov ecx, ebp
mov r8d, ecx
mov eax, ecx
imul eax, r12d
add eax, r13d
cmp eax, 0x9a27e99
jle 0x180038570
cmp eax, 0x4e63d465
jle 0x180038710
mov ecx, ebp
cmp eax, 0x4e63d466
je 0x180038460
cmp eax, 0x5fea8890
je 0x180038929
mov ecx, r8d
cmp eax, 0x7d6e96f2
jne 0x180038460
mov eax, dword [rdi]
mov dword [rsp + 0x28], eax
mov ecx, dword [rsp + 0x28]
mov eax, r8d
xor eax, dword [rsp + 0x2c]
mov r9d, eax
xor r9d, 0xb6c14595
mov edx, dword [rsp + 0x28]
not edx
add edx, ecx
mov ecx, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x28]
mov ecx, eax
xor ecx, 0x493eba6a
add edx, dword [rsp + 0x28]
imul edx, r9d
mov r10d, eax
xor r10d, 0x9649f842
mov r11d, dword [rsp + 0x44]
xor r11d, r10d
mov r14d, dword [rsp + 0x44]
not r14d
imul r14d, r9d
mov r9d, eax
xor r9d, 0x82fc1c6
mov ebx, dword [rsp + 0x44]
and ebx, r10d
not ebx
imul ebx, ecx
mov ecx, eax
xor ecx, 0xb6c14596
add r9d, r10d
add r9d, ecx
add r9d, r11d
add r9d, r14d
lea ecx, [rbx + r9]
inc ecx
mov r9d, eax
xor r9d, 0x165b4399
imul r9d, ecx
mov ecx, eax
xor ecx, 0x851f33d4
add ecx, r9d
mov dword [rsp + 0x64], ecx
mov ecx, eax
xor ecx, 0xd761fd51
imul ecx, dword [rsp + 0x64]
xor eax, 0xbe104554
add eax, ecx
mov ecx, 0x1eeebec7
cmp edx, eax
jb 0x180038568
mov ecx, 0xa1f8f37c
xor ecx, r8d
jmp 0x180038460
mov ecx, r15d
cmp eax, 0xdc681817
jle 0x1800388f0
cmp eax, 0xdc681818
je 0x180038460
cmp eax, 0xeebfa256
je 0x180038448
mov ecx, r8d
cmp eax, 0xff6921fc
jne 0x180038460
mov eax, dword [rsp + 0x54]
mov dword [rdi], eax
mov qword [rdi + 8], 0
mov esi, r8d
xor esi, dword [rsp + 0x2c]
mov edx, esi
xor edx, 0xadcfa1d8
mov r9d, dword [rsp + 0x3c]
and r9d, edx
mov ecx, esi
xor ecx, 0x7459e3a8
mov r10d, esi
xor r10d, 0x52305e27
mov r11d, dword [rsp + 0x3c]
xor r11d, r10d
add r11d, r9d
or r10d, dword [rsp + 0x3c]
xor edx, dword [rsp + 0x3c]
add edx, r11d
mov r9d, esi
xor r9d, 0x52305e26
imul edx, ecx
add r9d, ecx
sub r9d, r10d
add r9d, edx
mov edx, esi
xor edx, 0xa02b8c66
imul edx, r9d
mov r9d, esi
xor r9d, 0xacc5fc41
add r9d, edx
mov dword [rsp + 0x60], r9d
mov edx, esi
xor edx, 0xf9d1d486
imul edx, dword [rsp + 0x60]
mov r9d, esi
xor r9d, 0x8162afc1
add r9d, edx
mov dword [rdi + 0x10], r9d
mov dword [rsp + 0x30], eax
mov edx, dword [rsp + 0x30]
mov r9d, esi
xor r9d, 0x7459e3ab
mov r10d, dword [rsp + 0x30]
not r10d
add r10d, edx
imul r10d, r9d
mov edx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
add edx, r10d
inc edx
mov r10d, esi
xor r10d, 0x2adc9f10
mov r11d, dword [rsp + 0x38]
or r11d, r10d
mov ebx, dword [rsp + 0x38]
xor ebx, r10d
mov r14d, esi
xor r14d, 0xc9531add
mov eax, esi
xor eax, 0xd52360ef
or eax, dword [rsp + 0x38]
imul eax, r9d
and r10d, dword [rsp + 0x38]
not r10d
imul r10d, ecx
add r14d, r9d
sub r14d, r11d
add r14d, ebx
add r14d, eax
lea eax, [r10 + r14]
inc eax
mov ecx, esi
xor ecx, 0x3c5580d4
imul ecx, eax
mov eax, esi
xor eax, 0x284d4cb9
add eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, esi
xor eax, 0x7ee08e7c
imul eax, dword [rsp + 0x5c]
xor esi, 0x5e96419
add esi, eax
mov ecx, 0xd6b1991
cmp edx, esi
jb 0x1800386fa
mov ecx, 0x3c524fe
xor ecx, r8d
jmp 0x180038460
mov ecx, dword [rsp + 0x40]
cmp eax, 0x9a27e9a
je 0x180038460
cmp eax, 0xd834b3a
jne 0x180038985
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
xor r8d, dword [rsp + 0x2c]
mov eax, r8d
xor eax, 0xdb4bd10
mov edx, dword [rsp + 0x34]
and edx, eax
mov r9d, r8d
xor r9d, 0xf24b42ef
mov r10d, dword [rsp + 0x34]
or r10d, r9d
mov r11d, r8d
xor r11d, 0x7932fa39
imul r11d, r10d
mov r10d, r8d
xor r10d, 0x903e7468
or eax, dword [rsp + 0x34]
add eax, edx
and r9d, dword [rsp + 0x34]
mov edx, r8d
xor edx, 0x7932fa30
add edx, r10d
add edx, r11d
sub edx, eax
lea eax, [rdx + r9]
inc eax
mov edx, r8d
xor edx, 0xba140b71
imul edx, eax
mov eax, r8d
xor eax, 0x119fdff8
add eax, edx
mov dword [rsp + 0x58], eax
mov eax, r8d
xor eax, 0xff462ac1
imul eax, dword [rsp + 0x58]
mov edx, r8d
xor edx, 0x9cd8b278
add edx, eax
mov r9, r8
movabs rax, 0xfbe626c8e4cb9e28
xor r9, rax
mov r10, qword [rsp + 0x48]
or r10, r9
mov rax, r8
xor rax, 0x7932fa39
imul rax, r10
mov r10, r8
movabs r11, 0x419d9371b3461d7
xor r10, r11
mov r11, qword [rsp + 0x48]
xor r11, r10
mov rsi, r8
xor rsi, 0x7932fa3a
imul rsi, r11
mov r11, qword [rsp + 0x48]
or r11, r10
mov rbx, r8
xor rbx, 0xffffffff86cd05c6
imul rbx, r11
add rbx, rsi
mov r11, qword [rsp + 0x48]
not r11
or r11, r9
mov r9, r8
xor r9, 0x7932f6b0
add r9, r10
add r9, rax
add r9, rbx
sub r9, r11
mov rax, r8
movabs r10, 0x477ae6d49bfe4f1d
xor rax, r10
imul rax, r9
mov r9, r8
movabs r10, 0x274e430f2b638336
xor r9, r10
add r9, rax
mov qword [rsp + 0x70], r9
mov rax, r8
movabs r9, 0xcd46f581739ca495
xor rax, r9
imul rax, qword [rsp + 0x70]
movabs r9, 0xc21f8642d9c8f7b2
xor r8, r9
add r8, rax
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov r14, rax
rdtsc
mov rcx, rdx
shl rcx, 0x20
or rcx, rax
rdtsc
shl rdx, 0x20
or rdx, rax
mov r8d, 0x6832f44f
cmp rcx, rdx
je 0x1800388d2
mov r8d, 0xc88
mov rcx, r14
xor edx, edx
call fcn.18003ad10
mov qword [rdi + 8], r14
mov ecx, r15d
jmp 0x180038460
cmp eax, 0x8e7db274
je 0x180038460
mov ecx, r8d
cmp eax, 0xc6de33a2
jne 0x180038460
mov rax, qword [rdi + 8]
mov ecx, 0xaa49a982
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180038921
mov ecx, 0x5c599438
xor ecx, r8d
jmp 0x180038460
rdtsc
mov rcx, rdx
shl rcx, 0x20
or rcx, rax
rdtsc
shl rdx, 0x20
or rdx, rax
mov r14d, 0xbd3fc5e
cmp rcx, rdx
je 0x18003894f
mov r14d, 0x22c287fc
mov r8, r14
xor r8, 0x22c28cb4
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
xor edx, edx
call fcn.18003ad10
xor r14, 0x22c28b74
mov rcx, rsi
xor edx, edx
mov r8, r14
call fcn.18003ad10
mov ecx, dword [rsp + 0x40]
jmp 0x180038460
mov ecx, r8d
cmp eax, 0x4db67af8
jne 0x180038460
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret