Function at 0x140030ec0
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x140112718]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rdx, qword [0x1401145d8]
lea r8, [rsp + 0x30]
xor edi, edi
mov rsi, rcx
mov rcx, qword [0x140114958]
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rsp + 0x30]
mov rax, qword [0x140114580]
lea rbp, [rax + rdx*8]
test rbp, rbp
je 0x140019305
mov ecx, 0x3e8
mov qword [rsp + 0x78], rbx
call fcn.1400c1680
xor edx, edx
mov qword [rsp + 0x38], rax
mov r8d, 0x3e8
mov rcx, rax
lea rbx, [rax + 0x3e8]
mov qword [rsp + 0x48], rbx
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rsp + 0x38]
mov r9d, 0x3e8
mov rcx, qword [0x140114958]
mov rdx, rbp
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x78]
movss xmm0, dword [r8 + 0x58]
ucomiss xmm0, xmm0
setp al
cmp al, 1
jne 0x140019324
mov rdx, qword [rsp + 0x48]
mov rax, r8
sub rdx, r8
cmp rdx, 0x1000
jb 0x1400192fd
mov r8, qword [r8 - 8]
add rdx, 0x27
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400194fe
mov rcx, r8
call fcn.1400c19dc
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1400c1540
lea r11, [rsp + 0x60]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
mov r10, qword [rsp + 0x40]
movss dword [rsi + 0x44], xmm0
mov eax, dword [r8 + 0x54]
mov dword [rsp + 0x30], eax
movss xmm0, dword [rsp + 0x30]
movss dword [rsi + 0x40], xmm0
mov rax, qword [r8 + 0x10]
mov qword [rsp + 0x30], rax
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsi + 0x20], xmm0
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0x30], rax
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsi + 0x28], xmm0
mov rax, qword [r8 + 0x20]
mov qword [rsp + 0x30], rax
movsxd rax, dword [rsi]
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsi + 0x30], xmm0
test eax, eax
jne 0x1400193d9
mov r9, r10
mov edx, edi
sub r9, r8
add r9, 0xfffffffffffffff7
je 0x1400193e0
lea rcx, [r8 + 3]
cmp byte [rcx - 1], dil
jne 0x1400193c5
cmp byte [rcx], dil
jne 0x1400193c5
cmp byte [rcx + 1], dil
jne 0x1400193c5
cmp byte [rcx + 2], 0xa
jne 0x1400193c5
cmp byte [rcx + 3], dil
jne 0x1400193c5
cmp byte [rcx + 4], dil
jne 0x1400193c5
cmp byte [rcx + 5], dil
jne 0x1400193c5
cmp byte [rcx + 6], dil
je 0x1400193d4
inc edx
inc rcx
movsxd rax, edx
cmp rax, r9
jb 0x140019396
jmp 0x1400193e0
mov dword [rsi], edx
movsxd rax, edx
mov ecx, dword [rax + r8]
mov dword [rsi + 0x58], ecx
movsxd rax, dword [rsi + 4]
test eax, eax
jne 0x14001942e
mov r9, r10
mov edx, edi
sub r9, r8
add r9, 0xfffffffffffffffd
je 0x140019436
lea rcx, [r8 + 2]
nop word [rax + rax]
cmp byte [rcx - 2], 0xcd
jne 0x140019417
cmp byte [rcx - 1], 0xcc
jne 0x140019417
cmp byte [rcx], 0xcc
jne 0x140019417
cmp byte [rcx + 1], 0x3d
je 0x140019426
inc edx
inc rcx
movsxd rax, edx
cmp rax, r9
jb 0x140019400
jmp 0x140019436
lea eax, [rdx + 4]
mov dword [rsi + 4], eax
jmp 0x140019436
movzx ecx, byte [rax + r8]
mov byte [rsi + 0x50], cl
movsxd rax, dword [rsi + 8]
test eax, eax
je 0x140019457
movsxd rdx, dword [rsi + 0xc]
test edx, edx
je 0x140019457
movzx ecx, byte [rax + r8]
mov byte [rsi + 0x51], cl
mov ecx, dword [rdx + r8]
mov dword [rsi + 0x54], ecx
jmp 0x1400194bd
sub r10, r8
lea rdx, [r10 - 0xc]
test rdx, rdx
je 0x1400194bd
lea rcx, [r8 + 5]
cmp byte [rcx - 5], 1
jne 0x1400194a2
cmp byte [rcx - 3], 0
jne 0x1400194a2
cmp byte [rcx], 0
jne 0x1400194a2
cmp byte [rcx + 1], 0
jne 0x1400194a2
cmp byte [rcx + 2], 0
jne 0x1400194a2
cmp byte [rcx + 3], 0
jne 0x1400194a2
cmp byte [rcx + 4], 0
jne 0x1400194a2
cmp byte [rcx + 5], 0
jne 0x1400194a2
cmp byte [rcx + 6], 0
jne 0x1400194a2
cmp byte [rcx + 7], 1
je 0x1400194b1
inc edi
inc rcx
movsxd rax, edi
cmp rax, rdx
jb 0x140019467
jmp 0x1400194bd
lea eax, [rdi + 1]
mov dword [rsi + 8], eax
add eax, 0xffffffd3
mov dword [rsi + 0xc], eax
cmp byte [0x1401149a0], 0
jne 0x1400194cd
mov byte [0x1401149a0], 1
mov rdx, qword [rsp + 0x48]
mov rax, r8
sub rdx, r8
cmp rdx, 0x1000
jb 0x1400192fd
mov r8, qword [r8 - 8]
add rdx, 0x27
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400192fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [rcx + 8]
jmp 0x140019200