Function at 0x180004c00
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xe0
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rsp + 0xd8], rax
mov rbx, qword [rsp + 0x60]
lea eax, [r9 + 0x12]
mov qword [rsp + 0x90], r8
mov ebp, r9d
mov dword [rsp + 0x70], eax
mov r10, r8
mov r12, rdx
mov r13, rcx
cmp r9d, eax
jae case.0x180004ca0.295
mov rdi, qword [rsp + 0x88]
xor r14d, r14d
mov r15, qword [rsp + 0x88]
lea eax, [rbp - 0x11c]
movabs r9, 0x100003600
lea rdx, [0x180000000]
cmp eax, 0x4b
ja case.0x180004ca0.301
movzx eax, byte [rdx + rax + 0x53d0]
mov ecx, dword [rdx + rax*4 + 0x5388]
add rcx, rdx
jmp rcx
mov qword [rsp + 0x48], r14
mov r9, r12
mov qword [rsp + 0x40], r14
xor r8d, r8d
mov qword [rsp + 0x38], r14
xor edx, edx
mov qword [rsp + 0x30], r14
xor ecx, ecx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0xdf
call fcn.180013570
mov rdi, rax
jmp case.0x180004ca0.301
movzx eax, byte [0x1800749b9]
mov byte [rsp + 0x60], al
mov rbx, qword [rsp + 0x60]
jmp case.0x180004ca0.301
inc qword [r12 + 0x20]
jmp case.0x180004ca0.301
mov rcx, qword [r12 + 0x10]
mov r8, r14
mov rdx, qword [r12]
mov qword [rsp + 0x78], r14
test rcx, rcx
je case.0x180004ca0.301
movsx rax, byte [r8 + rdx]
cmp al, 0x20
ja case.0x180004ca0.292
bt r9, rax
jae case.0x180004ca0.292
inc r8
mov qword [rsp + 0x78], r8
cmp r8, rcx
jb 0x180004d13
jmp case.0x180004ca0.301
mov rcx, qword [r12 + 0x278]
call fcn.18005fd08
jmp case.0x180004ca0.301
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x60], rbx
jmp case.0x180004ca0.301
xor r8d, r8d
mov edx, 0x10f
xor ecx, ecx
call fcn.18000e590
test al, al
jne case.0x180004ca0.301
mov r8, r12
xor edx, edx
mov ecx, 0xf0
call fcn.180055410
jmp case.0x180004ca0.295
xor eax, eax
lock cmpxchg dword [r12 + 0x11c], r14d
cmp eax, 1
jne case.0x180004ca0.301
mov esi, 0xcc
cmp esi, 0xcc
je 0x180004dbf
cmp esi, 0x3234
jne 0x180004dce
xchg dword [r12 + 0x11c], r14d
jmp case.0x180004ca0.295
mov r8, r12
xor edx, edx
mov ecx, 0xf0
call fcn.180055410
add esi, 0x3168
cmp esi, 0x62d0
jbe 0x180004da2
jmp case.0x180004ca0.301
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x180004e0d
mov r9, qword [r12]
lea r8, [rsp + 0x98]
xor edx, edx
mov qword [rsp + 0x98], rsi
lea ecx, [rdx + 2]
call fcn.180058ff0
mov qword [r12], rax
sub qword [r12 + 0x10], rsi
jmp case.0x180004ca0.301
mov dword [r12 + 0x280], r14d
jmp case.0x180004ca0.301
xor eax, eax
lock cmpxchg dword [r12 + 0x120], r14d
cmp eax, 1
jne case.0x180004ca0.301
mov esi, 0x95
nop
mov eax, esi
sub eax, 0x94
je case.0x180004ca0.295
cmp eax, 1
jne 0x180004e6a
mov edx, 0x91
mov rcx, r12
call fcn.1800055c0
mov eax, r14d
xchg dword [r12 + 0x120], eax
dec esi
cmp esi, 0x93
ja 0x180004e40
jmp case.0x180004ca0.301
cmp qword [r12 + 0x18], r14
jne 0x180004fa8
mov esi, 0xad
nop dword [rax]
mov eax, esi
sub eax, 0xad
je 0x180004f5b
sub eax, 0x56
je 0x180004f46
sub eax, 0x56
je 0x180004f31
sub eax, 0x56
je 0x180004f1c
cmp eax, 0x56
jne 0x180004f99
mov rax, qword [r12 + 0x18]
mov rdx, qword [rsp + 0x58]
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0x90]
mov rax, qword [rax]
mov qword [rdx + rcx*8 + 8], rax
mov rax, qword [r12 + 0x18]
lea rcx, [rax + rax*4]
mov qword [rdx + rcx*8], r13
mov rax, rbx
mov rcx, qword [rsp + 0xd8]
xor rcx, rsp
call fcn.1800604b0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rax, qword [r12 + 0x18]
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0x58]
mov qword [rax + rcx*8 + 0x18], r14
jmp 0x180004f99
mov rax, qword [r12 + 0x18]
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0x58]
mov qword [rax + rcx*8 + 0x10], r14
jmp 0x180004f99
mov rax, qword [r12 + 0x18]
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0x58]
mov qword [rax + rcx*8 + 0x20], r14
jmp 0x180004f99
mov rax, qword [r12]
mov r9, r12
mov qword [rsp + 0x48], r14
xor r8d, r8d
mov qword [rsp + 0x40], r14
xor edx, edx
mov qword [rsp + 0x38], r14
xor ecx, ecx
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0xdf
mov qword [rsp + 0x58], rax
call fcn.180013570
mov qword [r12 + 0x18], rax
add esi, 0x56
cmp esi, 0x25b
jb 0x180004e90
mov r15, qword [r12 + 0x18]
jmp case.0x180004ca0.301
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9f
xor ecx, ecx
call fcn.18000bed0
cmp rax, 2
jne 0x180005114
mov esi, ILRemoveLastID
cmp esi, 0x13b
ja 0x1800050ce
je 0x1800050aa
mov eax, esi
sub eax, 0xf
je 0x18000509b
sub eax, 0x64
je 0x180005074
cmp eax, 0x64
jne 0x180005105
movups xmm0, xmmword [str.aFa0vxtMRE64CPpK_JANvw]
mov eax, dword [0x180068520]
lea r8, [rsp + 0x80]
movups xmm1, xmmword [0x180068508]
mov edx, dword [rsp + 0x68]
mov rcx, qword [rsp + 0xa0]
movups xmmword [rsp + 0xa8], xmm0
mov dword [rsp + 0xd0], eax
movsd xmm0, qword [0x180068518]
movzx eax, word [0x180068524]
movsd qword [rsp + 0xc8], xmm0
mov qword [rsp + 0x80], r14
movups xmmword [rsp + 0xb8], xmm1
mov word [rsp + 0xd4], ax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov dword [rsp + 0x6c], eax
jmp 0x180005105
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r8, r12
xor edx, edx
mov ecx, 0xf0
mov qword [rsp + 0xa0], rax
call fcn.180055410
mov dword [rsp + 0x68], 0x20008
jmp 0x180005105
mov byte [rsp + 0x50], 1
mov qword [rsp + 0x88], r14
jmp 0x180005105
mov rcx, qword [rsp + 0x88]
lea rdx, [rsp + 0xa8]
call qword [sym.imp.GDI32.dll_CopyEnhMetaFileW]
cmp dword [rsp + 0x6c], r14d
jne 0x180005105
mov byte [rsp + 0x50], r14b
jmp 0x180005105
mov eax, esi
sub eax, 0x19f
je 0x1800050e2
cmp eax, 0x64
je case.0x180004ca0.295
jmp 0x180005105
cmp byte [rsp + 0x50], r14b
je 0x180005105
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.ADVAPI32.dll_IsTokenRestricted]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add esi, 0x64
cmp esi, 0x267
jb 0x180004fd3
xor r8d, r8d
mov edx, 0x94
mov rcx, r12
call fcn.18003fa30
test al, al
je 0x18000513c
mov r8, r12
xor edx, edx
mov ecx, 0xf0
call fcn.180055410
jmp case.0x180004ca0.301
mov r9d, 0xf2
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r12
xor ecx, ecx
call fcn.180005420
jmp case.0x180004ca0.301
mov rcx, qword [r12 + 0x260]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r12 + 0x268]
call fcn.18005fd08
mov dword [r12 + 0x270], r14d
jmp case.0x180004ca0.301
mov r8, qword [r12]
test r15, r15
je 0x180005360
nop
lea rax, [r15 + r15*4]
lea r9, [r8 + rax*8]
mov rax, qword [r10]
cmp rax, qword [r9 + 8]
jne 0x18000522c
mov edx, 0xaf
nop word [rax + rax]
mov eax, edx
sub eax, 0xac
je 0x180005360
sub eax, 1
je 0x180005215
sub eax, 1
je 0x1800051fc
cmp eax, 1
jne 0x18000521d
mov rcx, qword [r9 + 0x18]
lea rax, [rdi + rdi*4]
test rcx, rcx
je 0x1800051f1
mov qword [r8 + rax*8 + 0x18], rcx
mov rax, qword [r9 + 0x18]
lea rcx, [rax + rax*4]
mov qword [r8 + rcx*8 + 0x20], rdi
mov qword [r9 + 0x18], rdi
jmp 0x18000521d
mov qword [r8 + rax*8 + 0x18], r14
mov qword [r9 + 0x18], rdi
jmp 0x18000521d
lea rax, [rdi + rdi*4]
lea rcx, [r8 + rax*8]
mov qword [rcx + 0x20], r15
mov qword [rcx + 0x10], r14
mov rax, qword [r10]
mov qword [rcx + 8], rax
jmp 0x18000521d
lea rax, [rdi + rdi*4]
mov qword [r8 + rax*8], r13
dec edx
cmp edx, 0xab
ja 0x1800051b0
jmp 0x180005357
jae 0x1800052e6
mov edx, 0x1f
cmp edx, 0x1f
je 0x180005290
cmp edx, 0x6e7
je 0x180005281
cmp edx, 0xdaf
je 0x18000526c
cmp edx, 0x1477
je 0x180005262
cmp edx, 0x1b3f
je 0x180005360
jmp 0x1800052d2
lea rax, [rdi + rdi*4]
mov qword [r8 + rax*8], r13
jmp 0x1800052d2
lea rax, [rdi + rdi*4]
lea rcx, [r8 + rax*8]
mov qword [rcx + 0x10], r14
mov rax, qword [r10]
mov qword [rcx + 8], rax
jmp 0x1800052d2
lea rax, [rdi + rdi*4]
mov qword [r9 + 0x20], rdi
mov qword [r8 + rax*8 + 0x18], r15
jmp 0x1800052d2
mov rcx, qword [r9 + 0x20]
test rcx, rcx
je 0x1800052c4
lea rax, [rcx + rcx*4]
cmp qword [r8 + rax*8 + 0x10], r15
jne 0x1800052b4
mov qword [r8 + rax*8 + 0x10], rdi
lea rax, [rdi + rdi*4]
mov qword [r8 + rax*8 + 0x20], rcx
jmp 0x1800052d2
mov qword [r8 + rax*8 + 0x18], rdi
lea rax, [rdi + rdi*4]
mov qword [r8 + rax*8 + 0x20], rcx
jmp 0x1800052d2
lea rax, [rdi + rdi*4]
mov qword [r12 + 0x18], rdi
mov qword [r8 + rax*8 + 0x20], r14
add edx, 0x6c8
cmp edx, 0x21e8
jbe 0x180005237
jmp 0x180005357
mov rax, qword [r9 + 0x18]
test rax, rax
je 0x1800052f4
mov r15, rax
jmp 0x180005357
mov edx, 0x43
nop dword [rax]
mov eax, edx
sub eax, 0x43
je 0x18000534c
sub eax, 1
je 0x18000533c
sub eax, 1
je 0x180005327
sub eax, 1
je 0x18000531d
cmp eax, 1
je 0x180005360
jmp 0x180005350
lea rax, [rdi + rdi*4]
mov qword [r8 + rax*8], r13
jmp 0x180005350
lea rax, [rdi + rdi*4]
lea rcx, [r8 + rax*8]
mov qword [rcx + 0x20], r15
mov rax, qword [r10]
mov qword [rcx + 8], rax
jmp 0x180005350
lea rax, [rdi + rdi*4]
mov qword [r8 + rax*8 + 0x18], r14
mov qword [r8 + rax*8 + 0x10], r14
jmp 0x180005350
mov qword [r9 + 0x18], rdi
inc edx
cmp edx, 0x48
jb 0x180005300
test r15, r15
jne 0x180005190
mov ebp, 0x167
jmp case.0x180004ca0.301
mov ebp, 0x141
inc ebp
cmp ebp, dword [rsp + 0x70]
jae case.0x180004ca0.295
mov r10, qword [rsp + 0x90]
jmp 0x180004c6e