Function at 0x18011e1fd
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 8], rbx
cmovge bx, dx
sbb bl, r9b
rol bl, cl
mov qword [rsp + 0x10], rbp
btc rbp, r15
mov qword [rsp + 0x18], rsi
rcr bl, 0x14
sbb bpl, 0xfc
push rdi
push r14
movsx ebp, cx
ror bh, 0x1c
push r15
rcl rbx, 0xa0
inc ebp
sub rsp, 0x80
not ebx
movsxd r14, eax
movzx ebx, sp
mov rbx, rcx
setp bpl
mov rbp, r9
jmp 0x18011e256
mov rcx, r8
movsx r15, ax
mov r15b, dl
xchg r15b, r14b
mov r15, r8
movsx r14d, dx
setb r14b
movzx r14w, spl
mov r14, rdx
jmp 0x18011e27b
call fcn.1800824fc
call fcn.18011a71d
mov rdi, qword [rsp + 0xc0]
xchg r9w, r8w
shr r8b, 0x7f
movsx r9, si
sub esi, esi
sub r9b, dil
mov r8d, 0x80000029
clc
rcr r9w, 0x14
mov r9d, 0x80000026
cmp r13b, r10b
cmp dword [rax + 0x40], esi
jmp 0x18011e2bb
jne 0x18011e314
cmp dword [rbx], 0xe06d7363
jmp 0x18011e2cc
je 0x18011e314
cmp dword [rbx], r8d
jne 0x18011e2fd
cmp dword [rbx + 0x18], 0xf
jmp 0x18011e2e4
jne 0x18011e306
cmp qword [rbx + 0x60], 0x19930520
jmp 0x18011e2f7
je 0x18011e314
cmp dword [rbx], r9d
je 0x18011e314
test byte [rdi], 0x20
jmp 0x18011e30e
jne 0x18011e6a9
test byte [rbx + 4], 0x66
je 0x18011e4fe
cmp dword [rdi + 8], esi
jmp 0x18011e326
je 0x18011e6a9
movsxd rdx, dword [rdi + 8]
cmp spl, r9b
shr ax, cl
lea r15, [0x180000000]
rcl cl, 0xa5
cmovb rax, r15
add rdx, qword [rbp + 8]
sub cl, r11b
cwde
cmp r10w, 0x2ec7
movzx ecx, byte [rdx]
shr eax, cl
sar al, cl
setg al
and ecx, 0xf
movsx rax, byte [rcx + r15 + 0x6c8a0]
jmp 0x18011e374
mov cl, byte [rcx + r15 + 0x6c8b0]
test r11b, r15b
sub rdx, rax
mov eax, dword [rdx - 4]
shr eax, cl
test eax, eax
jmp 0x18011e38e
je 0x18011e6a9
cmp dword [rsp + 0xc8], esi
jmp 0x18011e3a0
jne 0x18011e6a9
test byte [rbx + 4], 0x20
je 0x18011e4d6
cmp dword [rbx], r9d
jmp 0x18011e3b8
jne 0x18011e45e
mov r8, qword [rbp + 0x20]
mov rdx, rbp
movsx ecx, r10w
cmovne ecx, esp
setne cl
mov rcx, rdi
jmp 0x18011e3d7
call fcn.18011ab59
mov r9d, eax
cmp eax, 0xffffffff
jmp 0x18011e3e7
jl 0x18011e6f3
cmp dword [rdi + 8], esi
je 0x18011e434
movsxd rdx, dword [rdi + 8]
test r12b, 0x63
stc
add rdx, qword [rbp + 8]
movzx ecx, byte [rdx]
btc si, 0xed
not al
and ecx, 0xf
movsx rax, byte [rcx + r15 + 0x6c8a0]
mov cl, byte [rcx + r15 + 0x6c8b0]
xadd esi, esi
rcr esi, 0xd
sub rdx, rax
mov esi, dword [rdx - 4]
shr esi, cl
jmp 0x18011e434
cmp r9d, esi
jmp 0x18011e43c
jge 0x18011e6f3
mov rcx, r14
movzx rdx, sp
mov rdx, rbp
mov r8, rdi
jmp 0x18011e454
call fcn.18011f51d
jmp 0x18011e6a9
cmp dword [rbx], r8d
jne 0x18011e4d6
mov r9d, dword [rbx + 0x38]
jmp 0x18011e470
cmp r9d, 0xffffffff
jmp 0x18011e479
jl 0x18011e6f3
movsxd rdx, dword [rdi + 8]
add rdx, qword [rbp + 8]
movzx ecx, byte [rdx]
shl ax, 0x3a
sal ax, 0x96
seta ah
and ecx, 0xf
movsx rax, byte [rcx + r15 + 0x6c8a0]
mov cl, byte [rcx + r15 + 0x6c8b0]
sub rdx, rax
and al, r15b
mov eax, dword [rdx - 4]
shr eax, cl
clc
test spl, 0xc9
cmc
cmp r9d, eax
jmp 0x18011e4c2
jge 0x18011e6f3
mov rcx, qword [rbx + 0x28]
jmp 0x18011e4d1
jmp 0x18011e449
mov r8, rdi
mov rdx, 0x13b74d8
cdq
seta dh
mov rdx, rbp
not cx
movzx ecx, r8w
movsxd rcx, r9d
mov rcx, r14
call fcn.1801187f5
jmp 0x18011e6a9
mov r8, qword [rbp + 8]
lea rcx, [rsp + 0x50]
not dh
setbe dh
mov rdx, rdi
jmp 0x18011e514
call fcn.180088879
cmp dword [rsp + 0x50], esi
jmp 0x18011e522
jne 0x18011e536
test byte [rdi], 0x40
jmp 0x18011e530
je 0x18011e6a9
cmp dword [rbx], 0xe06d7363
jne 0x18011e639
cmp dword [rbx + 0x18], 3
jb 0x18011e639
cmp dword [rbx + 0x20], 0x19930522
jmp 0x18011e558
jbe 0x18011e639
mov rax, qword [rbx + 0x30]
clc
cmp dword [rax + 8], esi
jmp 0x18011e56b
je 0x18011e639
call fcn.1801195b4
mov r10, rax
mov rax, qword [rbx + 0x30]
adc cx, 0x5f
cmc
shrd cx, r13w, 0x53
movsxd rcx, dword [rax + 8]
clc
cmp rcx, 0x5f7147c1
add r10, rcx
jmp 0x18011e59d
je 0x18011e639
movzx ecx, byte [rsp + 0xd8]
movsxd rdx, r8d
movzx r8, bx
mov r9, rbp
cdq
cbw
mov dword [rsp + 0x38], ecx
cqo
movzx rdx, ax
mov r8, r15
movsx dx, r11b
rdtsc
not rcx
mov rcx, qword [rsp + 0xd0]
movzx rax, r13w
mov rdx, r14
jmp 0x18011e5ea
mov qword [rsp + 0x30], rcx
movsxd rax, r14d
cwde
mov rax, r10
movzx rcx, r13w
xchg cx, cx
jmp 0x18011e602
mov ecx, dword [rsp + 0xc8]
jmp 0x18011e60e
mov dword [rsp + 0x28], ecx
not ch
setno cl
movzx cx, sil
mov rcx, rbx
jmp 0x18011e624
mov qword [rsp + 0x20], rdi
jmp 0x18011e62e
call qword [0x18006c288]
jmp 0x18011e6ae
mov rax, qword [rsp + 0xd0]
movzx r9d, di
cdq
mov r9, rbp
cqo
movsx r8, sp
setns dh
mov qword [rsp + 0x38], rax
cwde
cbw
mov r8, r15
movsx dx, r15b
rdtsc
mov eax, dword [rsp + 0xc8]
jmp 0x18011e677
mov rdx, r14
movzx rcx, r11w
jmp 0x18011e683
mov dword [rsp + 0x30], eax
mov rcx, rbx
mov al, byte [rsp + 0xd8]
jmp 0x18011e696
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], rdi
jmp 0x18011e6a4
call fcn.18011c53a
mov eax, 1
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
movzx r14w, r14b
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
movsx r15, r13w
cmovl edi, ebx
setno r15b
mov rsp, r11
movsx di, r13b
movzx r14w, bl
pop r15
movzx r14w, sil
pop r14
setnp dil
pop rdi
jmp 0x18011e6f2
ret
call fcn.1801240aa
int3