Function at 0x180064780
Capabilities:
Check for software breakpoints

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov dword [rax + 8], ecx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0xc8
lea ebx, [rcx + 0x528]
mov rsi, r9
mov dword [rsp + 0x58], ebx
mov rbp, r8
mov r10, rdx
mov edi, ecx
cmp ecx, ebx
jae 0x180064e4a
mov rbx, qword [rsp + 0x60]
lea rdx, [0x1800b1a5c]
mov qword [rax - 0x28], r12
lea r8, str.elem
mov r12, qword [rsp + 0x88]
mov qword [rax - 0x30], r13
mov r13, qword [rsp + 0x70]
mov qword [rax - 0x38], r14
mov r14d, dword [rsp + 0x5c]
mov qword [rax - 0x40], r15
mov r15, qword [rsp + 0x80]
mov eax, dword [rsp + 0x58]
nop dword [rax + rax]
cmp edi, 0xf1
ja 0x180064b92
je 0x180064e1b
mov eax, edi
sub eax, 0x31
je 0x180064869
sub eax, 0x1b
je 0x180064858
sub eax, 0x17
je 0x180064831
cmp eax, 0x73
je 0x180064e1b
jmp 0x180064e02
mov r13, qword [r10]
mov r14d, 1
xor r8d, r8d
mov dword [rsp + 0x5c], r14d
xor edx, edx
mov qword [rsp + 0x70], r13
mov ecx, 0x103
call fcn.18002b850
jmp 0x180064dec
mov rbx, qword [r10]
mov rbx, qword [rbx + 8]
mov qword [rsp + 0x60], rbx
jmp 0x180064e02
xor ecx, ecx
nop dword [rax + rax]
movzx eax, byte [r10 + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x1800649bb
cmp rcx, 4
jne 0x180064870
mov r13, qword [rsp + 0x98]
mov edi, 0x21
mov r15, qword [rsp + 0x90]
nop dword [rax]
cmp edi, 0x21
je 0x1800648df
cmp edi, 0xe6
je 0x1800648c6
cmp edi, 0x1ab
jne 0x18006497e
mov rcx, r13
call fcn.18008b7b8
jmp 0x18006497e
mov r8, r13
lea rdx, [0x1800bbbb0]
lea rcx, [rsp + 0x78]
call fcn.180039790
jmp 0x18006497e
cmp dword [rsi + 8], 1
je 0x180064960
movzx esi, byte [rsp + 0x20]
mov ebx, 0xa5
nop
mov eax, ebx
sub eax, 0xa5
je 0x180064929
cmp eax, 0x35
jne 0x180064940
lea r8, [rsp + 0x20]
mov byte [rsp + 0x20], sil
mov edx, 0xff
mov rcx, r15
call fcn.180010180
mov r9d, 0x123
mov r8, r15
xor edx, edx
xor ecx, ecx
call fcn.180072c10
jmp 0x180064940
lea rdx, str.Target_Phx.ConditionCodeEntry.UnsignedConditionCodeT
mov ecx, 6
mov sil, 1
call fcn.180010140
mov r15, rax
add ebx, 0x35
cmp ebx, 0x10f
jb 0x1800648f0
mov byte [rsp + 0x20], sil
mov rsi, qword [rsp + 0x108]
mov qword [rsp + 0x90], r15
movzx eax, byte [rbp]
lea rcx, [rsp + 0x28]
mov r8d, 0xcd
mov byte [rsp + 0x28], al
mov rdx, rsi
call fcn.180013f80
mov r13, rax
add edi, 0xc5
cmp edi, 0x270
jb 0x1800648a0
mov rbx, qword [rsp + 0x78]
mov r15, qword [rsp + 0x80]
mov edi, dword [rsp + 0xf0]
mov qword [rsp + 0x98], r13
mov r13, qword [rsp + 0x70]
mov qword [rsp + 0x60], rbx
jmp 0x180064dec
xor ecx, ecx
nop dword [rax]
movzx eax, byte [r10 + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x180064b5c
cmp rcx, 5
jne 0x1800649c0
movzx r13d, byte [rsp + 0x40]
mov edi, 0xcc
cmp edi, 0xcc
je 0x180064a7c
cmp edi, 0x75f0
je 0x180064a47
cmp edi, 0xeb14
je 0x180064a19
cmp edi, 0x16038
jne 0x180064b27
mov rcx, r15
call fcn.18008b7b8
jmp 0x180064b27
mov r9, qword [rsp + 0x88]
lea rdx, str._s__s_
mov r8, r15
lea rcx, [rsp + 0x78]
call fcn.180039790
mov rcx, qword [rsp + 0x88]
call fcn.18008b7b8
jmp 0x180064b27
movzx eax, byte [rbp]
lea r8, [rsp + 0x30]
mov byte [rsp + 0x30], al
lea rdx, [rsp + 0x38]
mov rax, qword [rsi]
mov ecx, 0x6e
mov byte [rsp + 0x38], 0
mov r9, qword [rax + 8]
call fcn.1800225a0
mov qword [rsp + 0x88], rax
jmp 0x180064b27
cmp dword [rsi + 8], 2
je 0x180064afd
mov ebx, 0x6f
cmp ebx, 0x6f
je 0x180064ae7
cmp ebx, 0x24db
je 0x180064ad1
cmp ebx, 0x4947
je 0x180064ab8
cmp ebx, 0x6db3
jne 0x180064aea
mov r9d, 0x123
mov r8, r12
xor edx, edx
xor ecx, ecx
call fcn.180072c10
jmp 0x180064aea
lea r8, [rsp + 0x28]
mov byte [rsp + 0x28], r13b
mov edx, 0xff
mov rcx, r12
call fcn.180010180
jmp 0x180064aea
lea rdx, str.being_used_are_not_cryptographic_related_:__.__p___li_
mov ecx, 6
call fcn.180010140
mov r12, rax
jmp 0x180064aea
mov r13b, 1
add ebx, 0x246c
cmp ebx, 0x91b0
jbe 0x180064a87
mov byte [rsp + 0x40], r13b
movzx eax, byte [rbp]
lea r8, [rsp + 0x48]
mov byte [rsp + 0x48], al
lea rdx, [rsp + 0x50]
mov rax, qword [rsi]
mov ecx, 0x6e
mov byte [rsp + 0x50], 0
mov r9, qword [rax]
call fcn.1800225a0
mov r15, rax
add edi, 0x7524
cmp edi, 0x1d490
jbe 0x1800649e4
mov rbx, qword [rsp + 0x78]
mov r13, qword [rsp + 0x70]
mov edi, dword [rsp + 0xf0]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x80], r15
jmp 0x180064dec
movzx eax, byte [rbp]
lea r8, [rsp + 0xf0]
mov r9d, 0x92
mov byte [rsp + 0xf0], al
mov rdx, rsi
mov rcx, r10
call fcn.180019140
mov qword [rsp + 0x78], rax
mov rbx, rax
mov qword [rsp + 0x60], rax
jmp 0x180064dec
cmp edi, 0x108
je 0x180064bc2
cmp edi, 0x1ad
je 0x180064bb3
cmp edi, 0x252
je 0x180064e1b
jmp 0x180064e06
mov dword [rsp + 0x60], r14d
mov rbx, qword [rsp + 0x60]
jmp 0x180064e06
mov r15d, dword [rsp + 0x68]
mov r14d, 0xfe
mov rbx, qword [rsp + 0x110]
mov eax, r14d
sub eax, 0xfc
je 0x180064c5e
sub eax, 1
je 0x180064c12
cmp eax, 1
jne 0x180064db4
test rbx, rbx
je 0x180064bfb
mov eax, dword [r13 + 0x88]
mov dword [rbx], eax
mov r15d, dword [r13 + 0x8c]
mov dword [r13 + 0x8c], 2
jmp 0x180064db4
mov ecx, dword [rbp]
test ecx, ecx
je 0x180064c5e
sub ecx, 1
je 0x180064c55
sub ecx, 1
je 0x180064c4c
sub ecx, 1
je 0x180064c37
cmp ecx, 1
jne 0x180064db4
cmp r15d, 2
je 0x180064c42
mov eax, dword [rsi]
mov dword [r13 + 0x88], eax
jmp 0x180064c5e
mov dword [rsp + 0x5c], 0
jmp 0x180064c5e
inc dword [r13 + 0x88]
jmp 0x180064c5e
mov eax, dword [rsi]
or dword [r13 + 0x88], eax
mov edi, pe_nt_image_headers64
mov dword [rsp + 0xf0], edi
lea r14d, [rdi - 0xc]
cmp r15d, 1
jne 0x180064dbb
mov ebp, 0xc1
lea rbx, [0x1800dcca0]
cmp ebp, 0xc1
je 0x180064d47
cmp ebp, 0x479f
jne 0x180064d8a
mov rax, qword [0x1800dcc98]
mov ecx, dword [rax + 0x58]
cmp dword [r13 + 0x58], ecx
jbe 0x180064d8a
mov esi, 0x4e
mov eax, esi
sub eax, 0x4e
je 0x180064cce
sub eax, 0x8e
je 0x180064d36
cmp eax, 0x25
je 0x180064d8a
jmp 0x180064d36
cmp qword [0x1800dcaa8], 0
je 0x180064d36
mov edi, 0xcd
nop dword [rax]
mov eax, edi
sub eax, 0xcc
je 0x180064d02
cmp eax, 1
jne 0x180064d2c
mov rcx, qword [0x1800dcaa8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x180064d2c
or dword [0x1800dca9c], 1
cmp dword [0x1800db0f0], 0
jne 0x180064d1f
mov rcx, qword [0x1800dcaa0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [0x1800dcaa8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
dec edi
cmp edi, 0xcb
ja 0x180064ce0
add esi, 0x25
cmp esi, 0xbd
jb 0x180064cb5
jmp 0x180064d8a
mov r9d, 0x95
lea rcx, [r13 + 8]
xor r8d, r8d
xor edx, edx
call fcn.18005afc0
mov ecx, dword [0x1800dce4c]
lea rdx, [r13 + 8]
mov eax, dword [r13 + 0x58]
xor r9d, r9d
bts ecx, eax
mov dword [0x1800dce4c], ecx
mov eax, dword [r13 + 0x58]
lea r8d, [r9 + 0x6a]
lea rcx, [rax + rax*4]
lea rcx, [rbx + rcx*8]
call fcn.1800693a0
add ebp, 0x46de
cmp ebp, 0x8dbc
jbe 0x180064c84
mov rsi, qword [rsp + 0x108]
mov rbp, qword [rsp + 0x100]
mov rbx, qword [rsp + 0x110]
mov edi, dword [rsp + 0xf0]
dec r14d
cmp r14d, 0xfb
ja 0x180064bd5
mov rbx, qword [rsp + 0x60]
mov ecx, 0x87
mov dword [rsp + 0x68], r15d
mov r15, qword [rsp + 0x80]
call fcn.180069fc0
mov r14d, dword [rsp + 0x5c]
mov r10, qword [rsp + 0xf8]
lea rdx, [0x1800b1a5c]
lea r8, str.elem
mov eax, dword [rsp + 0x58]
add edi, 0xa5
mov dword [rsp + 0xf0], edi
cmp edi, eax
jb 0x180064800
mov r14, qword [rsp + 0xb0]
mov rax, rbx
mov r13, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xa8]
add rsp, 0xc8
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, qword [rsp + 0x60]
add rsp, 0xc8
pop rdi
pop rsi
pop rbp
pop rbx
ret