Function at 0x1800643e0
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
movzx r15d, byte [rsp + 0xb0]
lea esi, [r8 + 0xa]
mov rdi, rcx
mov dword [rsp + 0x20], esi
mov rcx, qword [rsp + 0x30]
lea r9, [0x180000000]
mov qword [rsp + 0x30], rcx
xor ebx, ebx
mov r14, qword [rsp + 0x30]
mov r13, rdx
mov r12, qword [rsp + 0x30]
mov ebp, r8d
cmp r8d, esi
jae 0x1800645a6
mov eax, dword [rsp + 0x20]
lea esi, [r8 - 0x4e]
nop dword [rax + rax]
cmp esi, 0xf
ja case.default.0x180064464
mov ecx, dword [r9 + rsi*4 + 0x64e18]
add rcx, r9
jmp rcx
test rdi, rdi
jne case.0x180064464.4
mov edi, 0x64
cmp edi, 0x64
je 0x18006449e
cmp edi, 0x120
jne 0x1800644ae
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800743b0
mov qword [rsp + 0x28], rbx
mov dword [rax], 0x16
add edi, 0xbc
cmp edi, 0x1dc
jb 0x180064474
jmp 0x180064583
mov qword [rsp + 0x30], 1
jmp case.0x180064464.4
mov rcx, qword [rdi]
mov eax, dword [rcx + 4]
mov edx, dword [rcx + rax*4 + 0x10]
cmp edx, 2
je 0x18006452b
cmp edx, 5
je 0x18006452b
cmp edx, 3
jne case.0x180064464.4
mov rax, rcx
lea r8d, [rdx - 2]
mov rcx, qword [rcx + 0x218]
lea rdx, [0x1800987d8]
call qword [rax + 0x210]
mov rax, qword [rdi]
test byte [rax], 1
je 0x18006458b
mov rcx, qword [rax + 0x218]
lea rdx, [0x1800987dc]
mov r8d, 1
call qword [rax + 0x210]
jmp 0x18006458b
mov rbx, qword [rsp + 0xa0]
mov edi, 0x3f
cmp edi, 0x3f
je 0x180064556
cmp edi, 0x203d
jne 0x180064573
mov rax, qword [rbx]
test byte [rax], 1
je 0x180064573
lea rdx, str._n_:
jmp 0x180064560
mov rax, qword [rbx]
lea rdx, [0x1800987d4]
mov rcx, qword [rax + 0x218]
mov r8d, 1
call qword [rax + 0x210]
add edi, 0x1ffe
cmp edi, 0x3ffc
jbe 0x180064538
xor ebx, ebx
mov rdi, qword [rsp + 0xa0]
lea r9, [0x180000000]
mov eax, dword [rsp + 0x20]
inc ebp
inc esi
cmp ebp, eax
jb 0x180064450
mov esi, dword [rsp + 0x20]
mov ebp, dword [rsp + 0xb0]
cmp ebp, esi
jae case.0x1800645da.83
lea eax, [rbp - 0x4e]
movabs r8, 0x20100000201
movzx edx, r15b
cmp eax, 0xd
ja case.0x1800645da.84
mov ecx, dword [r9 + rax*4 + 0x64e58]
add rcx, r9
jmp rcx
mov rcx, qword [rdi]
mov eax, dword [rcx + 4]
mov edx, dword [rcx + rax*4 + 0x10]
dec edx
cmp edx, 1
ja case.0x180064464.4
mov ecx, 0xff
mov eax, ecx
sub eax, 0xff
je 0x180064606
cmp eax, 1
je case.0x1800645da.83
jmp 0x18006460e
mov dword [rsp + 0x28], 1
inc ecx
cmp ecx, 0x101
jb 0x1800645f2
jmp case.0x180064464.4
mov rcx, qword [rdi]
mov eax, dword [rcx + 4]
mov edx, dword [rcx + rax*4 + 0x10]
cmp edx, 7
jne 0x18006465e
mov eax, 0xfe
cmp eax, 0xfe
je 0x180064645
cmp eax, 0x496c
je case.0x1800645da.83
jmp 0x18006464d
mov dword [rsp + 0x28], 3
add eax, 0x486e
cmp eax, 0x90dc
jbe 0x180064631
jmp case.0x180064464.4
cmp edx, 6
jne case.0x180064464.4
mov eax, 0x31
nop dword [rax]
cmp eax, 0x31
je 0x180064680
cmp eax, 0x71
je case.0x1800645da.83
jmp 0x180064688
mov dword [rsp + 0x28], 4
add eax, 0x40
cmp eax, 0xb1
jb 0x180064670
jmp case.0x180064464.4
movsd xmm0, qword [r13]
call fcn.18007f180
test eax, eax
jne 0x1800646b9
movsd xmm0, qword [r13]
call fcn.18007f154
test eax, eax
jne 0x18006458b
mov ecx, 0x6f
nop
mov eax, ecx
sub eax, 0x6f
je 0x1800646d2
cmp eax, 1
je case.0x1800645da.83
jmp 0x1800646da
mov dword [rsp + 0x28], 5
inc ecx
cmp ecx, 0x71
jb 0x1800646c0
jmp 0x18006458b
mov r9, qword [rdi]
test byte [r9], 1
je 0x18006458b
mov eax, dword [r9 + 4]
cmp dword [r9 + rax*4 + 0x10], 3
je 0x18006458b
mov edi, ebx
test eax, eax
je 0x180064583
mov rbx, qword [rsp + 0xa0]
nop word [rax + rax]
mov rdx, qword [r9 + 8]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x180064730
mov rcx, qword [r9 + 0x218]
mov r8d, eax
call qword [r9 + 0x210]
mov r9, qword [rbx]
inc edi
cmp edi, dword [r9 + 4]
jb 0x180064720
jmp 0x180064581
movsx r15d, byte [r14]
mov ecx, r15d
call fcn.180074194
test eax, eax
je 0x18006458b
nop
movsx r15d, byte [r14 + 1]
inc r14
mov ecx, r15d
call fcn.180074194
test eax, eax
jne 0x180064770
jmp 0x18006458b
movsd xmm2, qword [r13]
lea rdx, [0x1800987e0]
movq r8, xmm2
lea rcx, [rsp + 0x38]
call fcn.18006bd70
lea rdx, str._NewProcess
lea rcx, [rsp + 0x38]
call fcn.180074c84
lea rdx, [rsp + 0x38]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1800647c2
cmp rax, rcx
jne 0x18006458b
lea rcx, [rsp + 0x38]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800647e0
movzx eax, word [0x1800987f4]
mov word [rcx], ax
movzx eax, byte [0x1800987f6]
mov byte [rcx + 2], al
jmp 0x18006458b
mov r14, rdi
mov r12, rbx
jmp case.0x180064464.4
cmp r15b, 0x30
jne 0x180064afa
movsx eax, byte [r14 + 1]
test al, al
je 0x180064afa
mov ecx, eax
call fcn.1800740ac
test eax, eax
jne 0x18006483f
movzx eax, byte [r14 + 1]
sub al, 0x58
test al, 0xdf
jne 0x180064af0
mov ebp, 0x125
mov eax, ebp
sub eax, 0x124
je 0x180064878
cmp eax, 1
jne 0x18006485a
movzx r15d, byte [r14 + 1]
inc r14
dec ebp
cmp ebp, 0x123
ja 0x180064844
mov ebp, dword [rsp + 0xb0]
mov esi, dword [rsp + 0x20]
mov qword [r13], r14
jmp case.0x1800645da.84
lea eax, [r15 - 0x58]
test al, 0xdf
je 0x180064994
mov esi, 0xb1
nop dword [rax]
mov eax, esi
sub eax, 0xb1
je 0x18006492e
cmp eax, 1
jne 0x180064981
lea eax, [r15 - 0x30]
cmp al, 7
jbe 0x1800648f0
mov edi, 0x21
mov eax, edi
sub eax, 0x1f
je case.0x1800645da.83
sub eax, 1
je 0x1800648ce
cmp eax, 1
jne 0x1800648de
mov qword [r13], r14
jmp 0x1800648de
call fcn.1800743b0
mov qword [rsp + 0x28], rbx
mov dword [rax], 0x16
dec edi
cmp edi, 0x1e
ja 0x1800648b3
nop word [rax + rax]
mov ecx, 0xcd
cmp ecx, 0xcd
jne 0x180064912
movsx eax, r15b
movzx r15d, byte [r14 + 1]
sub eax, 0x30
cdqe
inc r14
lea r12, [rax + r12*8]
add ecx, 0x6ce8
cmp ecx, 0x6ce8
jbe 0x1800648f5
cmp r15b, 0x30
jl 0x180064981
cmp r15b, 0x38
jl 0x1800648f0
jmp 0x180064981
mov rax, qword [rsp + 0xb8]
cmp dword [rax], 8
je 0x180064981
mov edi, 0x83
mov eax, edi
sub eax, 0x83
je 0x180064960
sub eax, 1
je 0x180064959
cmp eax, 1
je case.0x1800645da.83
jmp 0x180064977
mov qword [rsp + 0x28], rbx
jmp 0x180064977
mov rax, qword [rsp + 0xa0]
mov qword [r13], rax
call fcn.1800743b0
mov dword [rax], 0x16
inc edi
cmp edi, 0x86
jb 0x180064940
inc esi
cmp esi, 0xb3
jb 0x180064890
jmp 0x180064ac2
mov esi, 0xbd
nop dword [rax]
cmp esi, 0xbd
je 0x180064a69
cmp esi, 0x70f5
je 0x180064a10
cmp esi, 0xe12d
jne 0x180064ab0
mov edx, 0x103
cmp edx, 0x103
je 0x1800649df
cmp edx, 0x3db7
jne 0x1800649f0
movzx r15d, byte [r14 + 1]
inc r14
jmp 0x1800649f0
movsx eax, r15b
sub eax, 0x30
shl r12, 4
movsxd rcx, eax
add r12, rcx
add edx, 0x3cb4
cmp edx, 0x7968
jbe 0x1800649c5
movsx ecx, r15b
call fcn.18007427c
test eax, eax
jne 0x1800649c0
jmp 0x180064ab0
movsx r15d, byte [r14 + 1]
inc r14
mov ecx, r15d
call fcn.18007427c
test eax, eax
jne 0x180064ab0
mov edi, 0xf3
nop dword [rax]
mov eax, edi
sub eax, 0xf1
je case.0x1800645da.83
sub eax, 1
je 0x180064a4d
cmp eax, 1
jne 0x180064a5d
mov qword [r13], r14
jmp 0x180064a5d
call fcn.1800743b0
mov qword [rsp + 0x28], rbx
mov dword [rax], 0x16
dec edi
cmp edi, 0xf0
ja 0x180064a30
jmp 0x180064ab0
mov rax, qword [rsp + 0xb8]
cmp dword [rax], 0x10
je 0x180064ab0
mov edi, 0x81
nop dword [rax + rax]
mov eax, edi
sub eax, 0x80
je 0x180064e0f
cmp eax, 1
jne 0x180064aa9
mov rax, qword [rsp + 0xa0]
mov qword [r13], rax
call fcn.1800743b0
mov dword [rax], 0x16
dec edi
cmp edi, 0x7f
ja 0x180064a80
add esi, 0x7038
cmp esi, 0x150a8
jbe 0x1800649a0
movabs rcx, 0x20100000201
nop dword [rax]
lea eax, [r15 - 0x4c]
cmp al, 0x29
ja 0x18006485a
bt rcx, rax
jae 0x18006485a
movzx r15d, byte [r14 + 1]
inc r14
jmp 0x180064ad0
movabs r8, 0x20100000201
mov esi, pe_nt_image_headers64
nop
cmp esi, 0x108
je 0x180064b38
cmp esi, 0xb058
jne 0x180064bd5
lea eax, [r15 - 0x4c]
cmp al, 0x29
ja 0x180064bd5
movsx rax, al
bt r8, rax
jae 0x180064bd5
movzx r15d, byte [r14 + 1]
inc r14
jmp 0x180064b14
mov rax, qword [rsp + 0xb8]
cmp dword [rax], 0xa
je 0x180064bb0
mov edi, 0xd5
nop word [rax + rax]
cmp edi, 0xd5
je 0x180064b8a
cmp edi, 0x15c
je 0x180064b7d
cmp edi, 0x1e3
je 0x180064b76
cmp edi, 0x26a
je case.0x1800645da.83
jmp 0x180064b96
mov qword [rsp + 0x28], rbx
jmp 0x180064b96
call fcn.1800743b0
mov dword [rax], 0x16
jmp 0x180064b96
mov rax, qword [rsp + 0xa0]
mov qword [r13], rax
add edi, 0x87
cmp edi, 0x2f1
jb 0x180064b50
nop dword [rax]
nop dword [rax + rax]
movsx eax, r15b
inc r14
sub eax, 0x30
movsxd rcx, eax
lea rax, [r12 + r12*4]
movsx r15d, byte [r14]
lea r12, [rcx + rax*2]
mov ecx, r15d
call fcn.1800740ac
test eax, eax
jne 0x180064bb0
add esi, 0xaf50
movabs r8, 0x20100000201
cmp esi, 0x15ea0
jbe 0x180064b00
mov esi, dword [rsp + 0x20]
mov qword [r13], r14
jmp case.0x1800645da.84
movsx ecx, r15b
call fcn.1800740ac
test eax, eax
jne case.0x1800645da.84
lea eax, [r15 - 0x2b]
test al, 0xfd
je case.0x1800645da.84
mov edi, 0x11
mov eax, edi
sub eax, 0x11
je 0x180064c3e
sub eax, 1
je 0x180064c37
cmp eax, 1
je case.0x1800645da.83
jmp 0x180064c51
mov qword [rsp + 0x28], rbx
jmp 0x180064c51
lea rax, [r14 - 1]
mov qword [r13], rax
call fcn.1800743b0
mov dword [rax], 0x16
inc edi
cmp edi, 0x14
jb 0x180064c20
jmp case.0x1800645da.84
mov r9, qword [rdi]
test byte [r9], 1
je 0x180064c8d
mov eax, dword [r9 + 4]
cmp dword [r9 + rax*4 + 0x10], 6
jne 0x180064c8d
mov rcx, qword [r9 + 0x218]
lea rdx, str._n_:
mov r8d, 1
call qword [r9 + 0x210]
mov dword [rsp + 0x28], ebx
jmp case.0x1800645da.84
call fcn.1800743b0
mov dword [rax], ebx
mov rax, r12
imul rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], rax
jmp case.0x1800645da.84
mov r9, qword [rdi]
lea rcx, [rsp + 0x38]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x180064cc0
mov rcx, qword [r9 + 0x218]
lea rdx, [rsp + 0x38]
mov r8d, eax
call qword [r9 + 0x210]
jmp case.0x1800645da.84
mov rdx, qword [rdi]
mov r8d, dword [rdx + 4]
mov ecx, dword [rdx + r8*4 + 0x10]
test ecx, ecx
je 0x180064d12
sub ecx, 1
je 0x180064d2a
sub ecx, 1
je 0x180064d2a
sub ecx, 1
je 0x180064d5b
cmp ecx, 1
je 0x180064d43
mov ebp, 0x59
jmp case.0x1800645da.84
mov eax, 0x49
cmp eax, 0x49
je 0x180064da8
add eax, 0x52
cmp eax, 0x9b
jb 0x180064d17
mov eax, 0xda
nop
cmp eax, 0xda
je 0x180064d98
add eax, 0x7fbc
cmp eax, 0x7fbc
jbe 0x180064d30
mov eax, 0xbc
cmp eax, 0xbc
je 0x180064d88
add eax, 0x705c
cmp eax, 0x705c
jbe 0x180064d48
mov eax, 0x10f
cmp eax, 0x10f
je 0x180064d78
add eax, 0x14
cmp eax, 0x123
jb 0x180064d60
mov ebp, 0x59
jmp case.0x1800645da.84
mov dword [rdx + r8*4 + 0x10], 2
mov ebp, 0x59
jmp case.0x1800645da.84
mov dword [rdx + r8*4 + 0x10], 5
mov ebp, 0x59
jmp case.0x1800645da.84
mov dword [rdx + r8*4 + 0x10], 3
mov ebp, 0x59
jmp case.0x1800645da.84
mov dword [rdx + r8*4 + 0x10], 6
mov ebp, 0x59
jmp case.0x1800645da.84
cmp r15b, 0x2b
jne 0x180064dc3
movzx r15d, byte [r14 + 1]
lea rax, [r14 + 1]
cmp dl, 0x2b
cmovne rax, r14
mov r14, rax
jmp case.0x1800645da.84
cmp r15b, 0x2d
jne case.0x1800645da.84
movzx r15d, byte [r14 + 1]
inc r14
mov qword [rsp + 0x30], 0xffffffffffffffff
inc ebp
mov dword [rsp + 0xb0], ebp
cmp ebp, esi
jae case.0x1800645da.83
mov rdi, qword [rsp + 0xa0]
lea r9, [0x180000000]
jmp 0x1800645b5
mov rax, rbx
jmp 0x180064486