Function at 0x18006da90
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x18009a1f0]
xor rax, rsp
mov qword [rbp + 0x1f], rax
imul eax, edx, 0x99
mov r15, r8
mov qword [rsp + 0x40], r9
mov r12d, edx
mov qword [rbp - 0x61], r8
mov r14, rcx
mov dword [rbp - 0x6d], edx
mov esi, edx
mov qword [rbp - 0x51], rcx
mov dword [rsp + 0x38], edx
mov dword [rbp - 0x69], eax
cmp edx, eax
ja 0x18006db2c
mov r13, qword [rbp - 0x59]
xor edi, edi
mov rbx, qword [rbp - 0x59]
cmp esi, 0x1332
ja 0x18006e01f
je 0x18006db2c
mov eax, esi
sub eax, 0x68
je 0x18006e004
sub eax, 0xa9
je 0x18006dd49
sub eax, 8
je 0x18006db58
cmp eax, 0x637
jne 0x18006e07e
mov dword [rsp + 0x30], 1
mov rax, qword [rsp + 0x30]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.180082e70
mov rbx, qword [rsp + 0x148]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp qword [r15 + 0x50], rdi
jne 0x18006e09b
mov rax, qword [r15 + 0x20]
cmp qword [r15 + 0x28], rax
jb 0x18006dd2b
mov r14d, 0x102
nop word [rax + rax]
mov eax, r14d
sub eax, 0x100
je 0x18006dd0f
sub eax, 1
je 0x18006dbb1
cmp eax, 1
jne 0x18006dd13
mov rsi, qword [r15 + 0x18]
mov qword [rbp - 0x31], rsi
lea rax, [rsi + 1]
mov qword [r15 + 0x18], rax
jmp 0x18006dd13
mov rax, qword [r15 + 0x10]
cmp qword [r15 + 0x18], rax
jb 0x18006dccc
mov esi, 0xf5
cmp esi, 0xf5
je 0x18006dc0f
cmp esi, 0x88db
jne 0x18006dcba
mov r15, qword [rbp - 0x39]
test r15, r15
je 0x18006e072
mov r13, qword [rbp - 0x61]
xor edx, edx
mov rax, qword [r13 + 0x18]
mov r8, qword [r13 + 0x10]
sub r8, rax
shl r8, 3
lea rcx, [r15 + rax*8]
call sub.VCRUNTIME140.dll_memset
mov qword [r13 + 8], r15
mov r15, r13
jmp 0x18006dcba
shl qword [r15 + 0x10], 1
mov ecx, 8
mov rax, qword [r15 + 0x10]
mov r8, qword [r15 + 8]
lea rax, [rax*8]
mov qword [rbp - 0x49], rax
nop dword [rax]
mov eax, ecx
sub eax, 8
je 0x18006dca6
sub eax, 0x26
je 0x18006dc7a
sub eax, 0x5c
je 0x18006dc57
cmp eax, 0x52
jne 0x18006dc6a
movzx eax, byte [r8]
bts eax, 7
mov dword [0x40002c00], eax
jmp 0x18006dc6a
movups xmm0, xmmword [r8]
movsd xmm1, qword [r8 + 0x10]
movups xmmword [rbp - 0x49], xmm0
movsd qword [rbp - 0x39], xmm1
add ecx, 0x190
cmp ecx, 0x640
jbe 0x18006dc30
jmp 0x18006dcb6
mov eax, dword [pe_dos_header]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x48], eax
mov ecx, 0x104
mov eax, dword [r8]
lea r8, [rsp + 0x48]
imul eax, dword [rbp - 0x49]
mov dword [rsp + 0x50], eax
call fcn.1800560c0
jmp 0x18006dcb3
mov rdx, qword [rbp - 0x49]
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov rbx, rax
mov qword [rbp - 0x39], rbx
add esi, 0x87e6
cmp esi, 0x10fcc
jbe 0x18006dbc4
mov rax, qword [r15 + 8]
mov rsi, qword [rbp - 0x31]
cmp qword [rax + rsi*8], rdi
jne 0x18006dd13
mov rax, qword [r15 + 0x20]
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x21]
mov qword [rbp - 0x29], rax
mov ecx, 0xb2
mov qword [rbp - 0x21], 0x28
call fcn.180024980
test rax, rax
je 0x18006e072
mov rcx, qword [r15 + 8]
mov qword [rcx + rsi*8], rax
jmp 0x18006dd13
mov qword [r15 + 0x28], rdi
dec r14d
cmp r14d, 0xff
ja 0x18006db80
mov r14, qword [rbp - 0x51]
mov esi, dword [rsp + 0x38]
mov rax, qword [r15 + 0x28]
mov r8, qword [r15 + 0x18]
mov rdx, qword [r15 + 8]
lea rcx, [rax + rax*4]
mov rax, qword [rdx + r8*8 - 8]
lea r13, [rax + rcx*8]
jmp 0x18006e07e
test r9, r9
je 0x18006dffa
mov r8, qword [r9]
lea rdx, [rbp - 0x19]
mov ecx, 0x61
call fcn.180029430
mov r12d, 0x72
nop dword [rax]
mov eax, r12d
sub eax, 0x6f
je 0x18006dfda
sub eax, 1
je 0x18006de8d
sub eax, 1
je 0x18006ddbe
cmp eax, 1
jne 0x18006dfe9
lea r8d, [rax + 0x61]
mov dword [rsp + 0x58], 8
lea rdx, [rbp - 0x19]
lea rcx, [rsp + 0x58]
call fcn.180035df0
mov dword [rbp - 0x71], eax
xor eax, eax
mov dword [rbp + 0x17], eax
mov word [rbp + 0x1b], ax
jmp 0x18006dfe9
mov esi, 6
lea r14, [rbp + 0x17]
mov r15d, 4
nop dword [rax]
mov eax, r15d
sub eax, 4
je 0x18006de05
sub eax, 0xb2
je 0x18006de6a
sub eax, 0x5b
je 0x18006ddef
cmp eax, 0x66
je 0x18006de40
jmp 0x18006de30
mov eax, 0x112
cmp eax, 0x112
je 0x18006de40
add eax, 0x28
cmp eax, 0x13a
jb 0x18006ddf4
test esi, esi
je 0x18006de2e
mov dword [rbp - 0x79], 8
mov r8d, 0x62
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x79]
call fcn.180035df0
mov byte [r14], al
inc r14
sub esi, 1
jne 0x18006de10
dec esi
add r15d, 0xc1
cmp r15d, 0x3c9
jb 0x18006ddd0
cmp dword [rbp + 0x17], 0x62726f76
jne 0x18006e0d9
cmp word [rbp + 0x1b], 0x7369
jne 0x18006e0d9
mov r15, qword [rbp - 0x61]
mov r14, qword [rbp - 0x51]
mov esi, dword [rsp + 0x38]
jmp 0x18006dfe9
xor edx, edx
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x60]
call fcn.1800402a0
test al, al
je 0x18006de40
mov rcx, qword [rbp - 0x19]
mov rdx, r14
call qword [0x18009a2d8]
jmp 0x18006de30
mov ecx, dword [rbp - 0x71]
sub ecx, 1
je 0x18006dea8
sub ecx, 2
je 0x18006df0c
cmp ecx, 2
je 0x18006df58
jmp 0x18006dfa8
mov esi, 0xcc
nop dword [rax]
cmp esi, 0xcc
je 0x18006def0
cmp esi, 0x6204
je 0x18006dece
cmp esi, 0xc33c
je 0x18006db2c
jmp 0x18006defe
cmp dword [r15 + 8], edi
jne 0x18006e0e6
mov r8d, 0xbe
lea rdx, [rbp - 0x19]
mov rcx, r15
call fcn.180064a20
mov dword [rsp + 0x30], eax
jmp 0x18006defe
mov rax, qword [rsp + 0x40]
cmp dword [rax + 0xc], edi
je 0x18006e0e6
add esi, 0x6138
cmp esi, 0x123a8
jbe 0x18006deb0
mov esi, 0x99
cmp esi, 0x99
je 0x18006df27
cmp esi, 0x4422
je 0x18006db2c
jmp 0x18006df46
cmp dword [r15 + 8], edi
je 0x18006e0e6
mov r8, r14
lea rcx, [rbp - 0x19]
mov edx, 0xe3
call fcn.1800412e0
mov dword [rsp + 0x30], eax
add esi, 0x4389
cmp esi, 0x8712
jbe 0x18006df11
mov esi, dword [rsp + 0x38]
mov eax, 0x1f
nop dword [rax]
cmp eax, 0x1f
je 0x18006df88
cmp eax, 0x156f
jne 0x18006df9c
xor r9d, r9d
lea r8, [rbp - 0x19]
mov rcx, r15
lea edx, [r9 + 0x7c]
call fcn.180029af0
mov dword [rsp + 0x30], eax
jmp 0x18006db2c
cmp dword [r15 + 8], edi
je 0x18006e0e6
cmp qword [r14 + 0x18], rdi
je 0x18006e0e6
add eax, 0x1550
cmp eax, 0x2aa0
jbe 0x18006df60
mov eax, 0x123
nop dword [rax]
cmp eax, 0x123
je 0x18006dfc4
cmp eax, 0xb949
je 0x18006db2c
jmp 0x18006dfcc
mov dword [rsp + 0x30], 0xffffff7b
add eax, 0xb826
cmp eax, 0x1704c
jbe 0x18006dfb0
jmp 0x18006dfe9
mov esi, 0x111
mov r12d, 0x6f
mov dword [rsp + 0x38], esi
dec r12d
cmp r12d, 0x6e
ja 0x18006dd70
mov r12d, dword [rbp - 0x6d]
mov dword [rsp + 0x30], 0xffffff7b
jmp 0x18006e07e
mov edx, 0xffffffff
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x18006e07e
mov dword [rsp + 0x30], edi
jmp 0x18006db2c
cmp esi, 0x13c2
je 0x18006e07a
cmp esi, 0x266b
je 0x18006e04c
cmp esi, 0x3914
je 0x18006e045
cmp esi, 0x4bbd
je 0x18006db2c
jmp 0x18006e07e
mov qword [rsp + 0x30], r13
jmp 0x18006e07e
mov rax, qword [r9]
lea rdx, [rbp - 0x59]
mov r9, r13
mov qword [rbp - 0x59], rax
mov r8, r14
mov qword [rsp + 0x20], r15
mov ecx, 0x9d
call fcn.18005c230
cmp qword [r13], rdi
jne 0x18006e07e
mov rax, rdi
jmp 0x18006db31
inc qword [r15 + 0x28]
imul eax, r12d, 0x11
add esi, eax
mov dword [rsp + 0x38], esi
cmp esi, dword [rbp - 0x69]
ja 0x18006db2c
mov r9, qword [rsp + 0x40]
jmp 0x18006daf0
mov rax, qword [r9]
lea r8, [rsp + 0x40]
xor r9d, r9d
mov dword [rsp + 0x28], 0x4b
xor edx, edx
mov qword [rsp + 0x40], rax
lea rcx, [r15 + 0x30]
mov qword [rsp + 0x20], rdi
call fcn.18002ce60
test rax, rax
je 0x18006e072
lea rcx, [rax + rax*4]
mov rax, qword [r15 + 0x30]
mov rax, qword [rax + rcx*8]
jmp 0x18006db31
mov dword [rsp + 0x30], 0xffffff7c
jmp 0x18006db2c
mov dword [rsp + 0x30], 0xffffff7b
jmp 0x18006db2c