Function at 0x180006609
Capabilities:
Authenticate hmac
Check for software breakpoints
Check os version
Encode data using base64
Encrypt data using speck
Execute anti-debugging instructions
Get number of processors
Get system information on windows

Disassembly:
popfq
jp 0x18000c77f
xchg r12, r12
jnp 0x18000c77f
test r8, 0
jb 0x18000d826
invalid
xor edx, edx
mov rcx, rdi
call fcn.180008b49
call fcn.18000c1d6
out dx, eax
sbb eax, 0x48e828dd
mov dword [rcx], eax
dec dword [r8 + 8]
call fcn.180014074
jne 0x180005dc2
cmpsd dword [rsi], dword [rdi]
in eax, dx
call 0x1a45c8738
adc byte [rdi], cl
pop qword [rcx + 0x66000085]
xchg esi, esi
add byte [rax], al
xchg si, si
jle 0x18000e378
lea rcx, [rsp + 0x20]
call fcn.18000a20e
call fcn.180009f09
or dword [rdi + 0x2b], esp
adc ebp, eax
lea rcx, [rbp - 0x29]
call fcn.18000b7a6
call fcn.18000d0a6
add al, 0xb6
ror dword [rsi], 1
call 0x1a4545f77
adc byte [rdi], cl
xchg esp, esi
sldt word [rax]
xchg r15, r15
jbe 0x180006e26
call fcn.180009b91
or dl, byte [rsi]
nop
sub al, 0xe8
add rsp, 0x28
pop r9
pop r8
pop rdx
call fcn.1800082d9
loope 0x180005df5
cmc
invalid
push rdx
jo 0x180014315
nop
jno 0x180014315
test cl, 0
jb 0x1800113ad
cmp edx, ebp
call fcn.180013325
mov bh, 0x1f
lodsb al, byte [rsi]
out 0xe8, al
je 0x18000f458
call fcn.18000828e
test r13, 0
js 0x18000c408
and qword [rbx], 0
call fcn.180007f38
mov bl, byte [rdi]
movabs eax, dword [0x412024548d48e828]
mov eax, 0x104
mov rbx, rcx
call qword [0x18001a532]
test r14, 0
jb 0x180013697
xor r14d, r14d
test r13, 0
jb 0x18000fe3c
call fcn.1800149ad
test byte [rcx], 0xce
call 0x1f5d2ebda
sbb dword [rdi], ecx
test dword [rcx - 0x8ffffcc], edi
mov dword [rax], 0xf000000
movsxd rdi, dword [rdi]
jg 0x1800075aa
xchg ah, ah
jle 0x1800075aa
test ebx, 0
xor r8, 0xdc226b
jb 0x18000af23
mov dx, dx
jae 0x18000af23
call fcn.18000e1f2
jmp 0x18000e1f4
pushfq
jl 0x180009f88
xchg rsp, rsp
jge 0x180009f88
mov qword [rsp + 0x18], rcx
call fcn.1800149ad
jge 0x180007606
add esi, ecx
call 0x1803afbb5
add byte [rbp + rcx*4 - 0x64], cl
invalid
invalid
pushfq
and al, 0x50
invalid
add byte [rdx - 0x17fb6164], cl
jmp 0x18000f457
add qword [rsp + 0x10], rdx
jb 0x180010719
mov cl, cl
jae 0x180010719
mov dword [rbp - 0x38], ebx
mov qword [rbp - 0x50], rbx
call fcn.180010694
xchg edi, eax
shr al, 0x48
lea edx, [fcn.18000e9d9]
mov r9, r14
mov rcx, rsi
call fcn.18000f391
xchg ebx, eax
sub byte [rcx], ch
invalid
invalid
movsxd r8, dword [r8]
jo 0x180010df5
xchg ah, ah
jno 0x180010df5
call fcn.18000a20e
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x40], rbx
ret
mov dword [rax], 0xf000000
mov esp, dword [rbx + 0x48]
add byte [rax], al
sub rsp, 0x48
mov rax, qword [0x18001a7fa]
test ax, 0
jb 0x180009527
test rax, rax
call fcn.1800145dc
jnp 0x18000ad78
cmc
sub al, ch
ret 0x4908
add qword [rsp + 0x10], r8
jo 0x180005daa
xchg rdx, rdx
jno 0x180005daa
mov edx, dword [rsp + 0x48]
mov rax, qword [rbx + 0x10]
mov dword [rax + rdx], edi
test r11, 0
xchg edx, eax
mov al, 0xff
invalid
pop r8
jl 0x18000aa14
nop
jge 0x18000aa14
jo 0x18000dcbf
or rax, rdx
mov r8, rax
rdtsc
shl rdx, 0x20
test rcx, 0
jne 0x18000e447
or rax, rdx
call fcn.180009c3f
push rax
in al, 0x52
invalid
movsxd r15, dword [r15]
jb 0x18001014a
mov al, al
jae 0x18001014a
movsxd rdx, dword [rdx]
jl 0x180010ba5
xchg rsp, rsp
jge 0x180010ba5
add ebp, ebp
lea eax, [rsi + 2]
movsxd rcx, ebp
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.180008293
mov rdi, rax
test r11, 0
call fcn.180014297
mov al, 0x70
cmp bh, dh
call 0x1030fd6b9
idiv esi
invalid
lea ebx, [rsp + 0xf0]
sar bh, 1
inc dword [rbp + 0xf1175c0]
test edx, edi
retf 0xffff
mov eax, dword [rcx]
mov r8, rcx
call fcn.180008f2e
loop 0x18000dc6a
mov rdi, qword [rsp + 8]
jo 0x180006aa5
mov rax, rax
jno 0x180006aa5
mov rcx, rdi
call fcn.18000828e
mov rax, qword [rsp]
mov qword gs:[0x198], rax
call fcn.18000d793
sbb byte [rsi - 0x173c17fc], 0x5b
xor al, 0
add byte [rcx - 0x17f58180], bl
jnp 0x180006ec4
and dword [rbx + 8], 0
lea eax, [rdx + 4]
call fcn.18000d0a6
sbb byte [rax + 0x53e80ed2], al
test rsi, 0
call fcn.1800105a5
or spl, byte [rbp + 0x23e8e8ee]
mov esp, 0x8d48ffff
push rbp
sub byte [rax - 0x73], cl
rol byte [r13 - 0x75], 1
invalid
test esp, 0
call fcn.18000e67b
invalid
xchg r14, r14
jbe 0x18000ddf0
mov rbx, qword [rsp + 0x30]
mov ebx, dword [rsp + 0x30]
call fcn.1800072dc
fstp xword [rsi]
pop rax
loopne 0x18000f44e
test rdi, 0
call fcn.18000dd46
mov eax, 0xe8c4fb6c
mov rbx, rcx
test r15, 0
call fcn.180013325
cmp eax, 0xe81953ad
and ecx, 3
pushfq
jb 0x18001167c
mov r11, r11
jae 0x18001167c
test r15, 0
jb 0x18000ad2d
test ebx, ebx
jne 0x18001017a
jne 0x18001180d
call qword [rsp + 0xa8]
mov ebx, eax
call fcn.180010af2
cli
popfq
cmp eax, 0x3ce857e8
or byte [rax], al
add ch, bh
invalid
popfq
jmp 0x180007a7a
pushfq
jl 0x180013ebc
xchg al, al
jge 0x180013ebc
pushfq
je 0x180006fd2
mov cl, cl
jne 0x180006fd2
and al, 0x10
mov eax, dword [rax]
call fcn.180009158
in al, dx
jmp 0x18001137e
mov esi, dword [rbx + 0x18]
lea ecx, [rbp - 0x50]
call fcn.18000a20e
lea rcx, [rbp - 0x30]
call fcn.18000ff0d
call fcn.18000e086
lodsd eax, dword [rsi]
fcom qword [rbx - 0x29]
call 0x17f4d139e
add rdx, 0x11279be
ja 0x18000807d
xchg rcx, rcx
jbe 0x18000807d
call fcn.180008bfe
in eax, 0xd5
adc esp, edx
call 0x1a47dca2c
or byte [rdi], cl
mov word [rax + 0x48ffff8a], es
mov edi, edi
jge 0x18000c967
pushfq
jb 0x18001219f
xchg al, al
jae 0x18001219f
mov r8, qword [rsp + 8]
jg 0x18000a47c
mov si, si
jle 0x18000a47c
jmp fcn.180005d4f
mov rdx, qword [rsp + 8]
jp 0x18000d03f
mov r14, r14
jnp 0x18000d03f