Function at 0x18002e700
Capabilities:
Check for software breakpoints

Disassembly:
mov rax, rsp
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rdi
lea rbp, [rax - 0x18]
sub rsp, 0x108
movdqa xmm0, xmmword [0x18004e530]
movzx edi, byte [rbp + 0x28]
mov qword [rax + 0x18], rbx
mov rbx, rcx
mov qword [rax - 0x18], rsi
mov esi, edx
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r13
mov r13, qword [rbp + 0x38]
mov qword [rax - 0x30], r14
lea r14d, [rdx + 0xb]
mov qword [rax - 0x38], r15
mov r15, r8
movdqa xmmword [rbp - 0x50], xmm0
mov eax, edx
mov byte [rbp - 0x60], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x40], r13
cmp edx, r14d
jae 0x18002e8d0
mov r12, qword [rbp + 0x20]
lea ebx, [rdx - 0x69]
mov r9d, 0x65
lea rdx, [0x180000000]
lea r8d, [r9 - 0x18]
cmp ebx, 0x18
ja case.0x18002e7a6.5
mov ecx, dword [rdx + rbx*4 + 0x2ecc0]
add rcx, rdx
jmp rcx
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 0x10]
call fcn.18002e3b0
lea rax, [rbp + 0x38]
mov qword [rbp + 0x38], 8
mov r9d, 0x3a
mov qword [rsp + 0x20], rax
mov r8, r12
xor edx, edx
mov rcx, r15
call fcn.18000ad60
mov r9d, 0x65
lea rdx, [0x180000000]
lea r8d, [r9 - 0x18]
jmp case.0x18002e7a6.5
lea r8, [rsp + 0x60]
mov edx, r9d
xor ecx, ecx
call fcn.180022450
mov r13, rax
mov qword [rsp + 0x40], rax
jmp 0x18002e7db
xor r9d, r9d
lea rdx, [rbp - 0x60]
xor r8d, r8d
mov ecx, 0x91
call fcn.1800163f0
test al, al
jne 0x18002e7db
xor dil, dil
jmp 0x18002ebf3
lea r9, [rbp - 0x60]
mov r8, r12
lea rdx, [rsp + 0x60]
mov ecx, 0x86
call fcn.180005b70
test al, al
jne 0x18002e7db
mov ecx, 0x4f
nop dword [rax]
mov eax, ecx
sub eax, 0x4e
je 0x18002ebf3
cmp eax, 1
jne 0x18002e863
xor dil, dil
dec ecx
cmp ecx, 0x4d
ja 0x18002e850
jmp 0x18002e7db
mov byte [0x180064df9], 0
jmp case.0x18002e7a6.5
movsd xmm0, qword [str.eMappingObj]
mov eax, dword [0x18004d130]
movsd qword [rsp + 0x4d], xmm0
mov dword [rsp + 0x55], eax
jmp case.0x18002e7a6.5
mov word [rsp + 0x58], r9w
jmp case.0x18002e7a6.5
mov byte [rsp + 0x4c], 0x6c
jmp case.0x18002e7a6.5
test r13, r13
je 0x18002e822
jmp case.0x18002e7a6.5
mov dword [rsp + 0x49], 0x694679
jmp case.0x18002e7a6.5
mov word [rsp + 0x48], r8w
inc esi
inc ebx
cmp esi, r14d
jb 0x18002e793
mov eax, dword [rbp + 0x28]
mov rbx, qword [rbp + 0x20]
lea ecx, [rax + 0x510]
mov dword [rsp + 0x30], ecx
cmp eax, ecx
jae 0x18002ebf3
movzx ecx, word [rbp + 0x28]
movzx r12d, byte [rbp + 0x28]
mov rsi, qword [rsp + 0x38]
mov edx, dword [rsp + 0x30]
mov dword [rbp + 0x38], ecx
mov r14, qword [rbp + 0x38]
mov r15, qword [rbp + 0x38]
mov r8d, 0x63
cmp eax, 0x285
ja 0x18002ea2e
je 0x18002e9f6
sub eax, 0x69
je 0x18002e9eb
sub eax, 0xc
je 0x18002e970
sub eax, 0x60
je 0x18002e94a
sub eax, 0xc
je 0x18002ebf0
cmp eax, 0xcc
jne 0x18002ebd7
mov ecx, 0x100
mov dword [rbp + 0x38], ecx
jmp 0x18002ebd7
lea rdx, [0x18004c804]
lea rcx, [rsp + 0x5a]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [rbp + 0x38]
mov r12b, 1
mov edx, dword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
jmp 0x18002ebd7
mov rbx, qword [0x180064e30]
cmp rbx, qword [0x180064e38]
je 0x18002e9db
mov rcx, r13
call qword [rbx]
test al, al
jne 0x18002e9c6
mov esi, 0xbe
nop
mov eax, esi
sub eax, 0xbe
je 0x18002e9a4
cmp eax, 1
je 0x18002ebf3
jmp 0x18002e9bc
xor edx, edx
mov qword [rbp - 0x78], r13
mov r8d, 0x10e
lea rcx, [rbp - 0x78]
call fcn.180015fd0
xor dil, dil
inc esi
cmp esi, 0xc0
jb 0x18002e990
add rbx, 8
cmp rbx, qword [0x180064e38]
jne 0x18002e980
mov rsi, qword [rsp + 0x38]
mov ecx, dword [rbp + 0x38]
mov edx, dword [rsp + 0x30]
mov byte [0x180064df9], 1
jmp 0x18002ebd7
mov word [rsp + 0x59], r8w
jmp 0x18002ebd7
movsx eax, cx
xor r9d, r9d
xor edx, edx
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r8d, [r9 + 4]
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rsi, qword [rsp + 0x38]
mov r14, rax
mov ecx, dword [rbp + 0x38]
mov edx, dword [rsp + 0x30]
jmp 0x18002ebd7
sub eax, 0x2f1
je 0x18002ebcf
sub eax, 0x6c
je 0x18002ebba
sub eax, 0x6c
je 0x18002eaa6
cmp eax, 0x6c
jne 0x18002ebd7
mov rax, qword [rbx]
test rax, rax
je 0x18002ebd7
nop dword [rax]
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x18002ea6e
mov rsi, rcx
jmp 0x18002ea90
cmp rsi, rax
jne 0x18002ea7a
mov qword [rbx], 0
mov rsi, qword [rsi + 0x20]
lea rcx, [rsp + 0x38]
mov edx, 0xc4
call fcn.180011a40
mov rax, qword [rbx]
mov qword [rsp + 0x38], rsi
test rax, rax
jne 0x18002ea60
mov ecx, dword [rbp + 0x38]
mov edx, dword [rsp + 0x30]
jmp 0x18002ebd7
test r12b, r12b
je 0x18002ebd7
movsxd r13, dword [rbp + 0x38]
mov esi, 0xaf
nop dword [rax + rax]
mov eax, esi
sub eax, 0xad
je 0x18002eb33
sub eax, 1
je 0x18002eafc
cmp eax, 1
jne 0x18002eb99
movsx rax, r13w
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xf001f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r15, rax
jmp 0x18002eb99
test r15, r15
jne 0x18002eb99
mov ebx, 0x10
nop word [rax + rax]
mov eax, ebx
sub eax, 0x10
je 0x18002eb21
cmp eax, 1
jne 0x18002eb2a
xor r12b, r12b
jmp 0x18002eb2a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc ebx
cmp ebx, 0x12
jb 0x18002eb10
jmp 0x18002eb99
test r12b, r12b
je 0x18002eb99
mov ebx, 0x8a
nop dword [rax]
mov eax, ebx
sub eax, 0x8a
je 0x18002eb69
sub eax, 1
je 0x18002eb5e
cmp eax, 1
jne 0x18002eb8f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18002eb8f
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x18002eb8f
lea rax, [rbp - 0x70]
mov qword [rbp - 0x70], 0
mov r8d, 9
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
xor edx, edx
mov rcx, r15
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToDataEx]
inc ebx
cmp ebx, 0x8d
jb 0x18002eb40
dec esi
cmp esi, 0xac
ja 0x18002eac0
mov r13, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov ecx, dword [rbp + 0x38]
mov edx, dword [rsp + 0x30]
jmp 0x18002ebd7
xor ecx, ecx
movzx eax, r12b
test r14, r14
cmovne ecx, eax
movzx r12d, cl
mov ecx, dword [rbp + 0x38]
jmp 0x18002ebd7
mov rsi, qword [rbx]
mov qword [rsp + 0x38], rsi
mov eax, dword [rbp + 0x28]
add eax, 0x6c
mov dword [rbp + 0x28], eax
cmp eax, edx
jae 0x18002ebf3
mov rbx, qword [rbp + 0x20]
jmp 0x18002e8ff
mov dil, 1
mov rdx, qword [rsp + 0x78]
mov r15, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xe8]
mov r13, qword [rsp + 0xf0]
mov r12, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x100]
mov rbx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x18002ec5c
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ec57
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002ecb8
call fcn.180030c24
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x18002ecaa
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002eca5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002ecb8
call fcn.180030c24
movzx eax, dil
add rsp, 0x108
pop rdi
pop rbp
ret
call fcn.180034d34
int3