Function at 0x140034f70
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x20], r9
mov byte [rsp + 0x18], r8b
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov r10, rcx
movzx eax, r8b
xor ecx, ecx
mov esi, 0x50
mov dword [rsp + 0x48], esi
movzx r14d, dl
mov dword [rsp + 0x50], ecx
mov edi, ecx
mov r12d, dword [r10 + 0x5b8]
mov ebx, r12d
mov ebp, ecx
mov r15d, ecx
mov r8d, ecx
mov r9d, ecx
cmp dl, 0xcc
jne 0x140034fd9
mov ecx, eax
sub ecx, 0x15
je 0x140034ffe
sub ecx, 0x95
je 0x140034ffe
sub ecx, 1
je 0x140034ffe
cmp ecx, 2
je 0x140034ffe
xor ecx, ecx
jmp 0x140034fe1
lea eax, [r14 + 0x40]
test al, 0xef
jne 0x140034ffe
mov rax, qword [r10 + 0x1910]
test rax, rax
je 0x140034ffe
nop dword [rax]
cmp dword [rax], 0xa
je 0x140035010
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x140034ff0
mov eax, 1
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r11, qword [rax + 8]
test r11, r11
je 0x14003520c
movzx r13d, byte [rsp + 0x58]
test r8d, r8d
jne 0x140035191
movzx edx, word [r11]
mov eax, pe_nt_image_headers64
cmp dx, ax
jae 0x140035071
cmp edx, 0x2e
ja 0x140035184
mov r9d, dword [r10 + 0x558]
cmp edx, 0x20
jb 0x14003505d
lea ecx, [rdx - 0x20]
movzx eax, cl
xor ecx, ecx
bt r9d, eax
jmp 0x140035061
bt r9d, edx
mov r9d, dword [rsp + 0x50]
setb cl
test ecx, ecx
jne 0x140035182
mov ecx, edx
sub ecx, 0x15
je 0x1400350af
sub ecx, 2
je 0x1400350a3
sub ecx, 1
je 0x140035097
cmp ecx, 1
jne 0x140035182
mov edx, 0xd3
mov ecx, 0x42
jmp 0x1400350b9
mov edx, 0xd2
mov ecx, 0x30
jmp 0x1400350b9
mov edx, 0x20e
mov ecx, 0x20
jmp 0x1400350b9
mov edx, 0xd1
mov ecx, 0x1c
mov r9d, 1
mov dword [rsp + 0x50], r9d
test edi, edi
jne 0x1400350dd
cmp word [r10 + 0x5e0], cx
ja 0x1400350dd
movzx eax, cx
cmp esi, eax
jbe 0x1400350dd
mov edi, edx
mov esi, eax
test ebx, ebx
jne 0x1400350ec
cmp word [r10 + 0x5e0], cx
cmove ebx, edx
test ebp, ebp
je 0x1400350f9
movzx eax, cx
cmp dword [rsp + 0x48], eax
jbe 0x14003510c
cmp word [r10 + 0x5e0], cx
ja 0x14003510c
movzx eax, cx
mov ebp, edx
mov dword [rsp + 0x48], eax
cmp r14b, 0xc0
jne 0x14003515f
lea eax, [r13 - 2]
cmp eax, 0xad
ja case.0x14003513a.6
lea r8, [0x140000000]
cdqe
movzx eax, byte [r8 + rax + 0x35228]
mov ecx, dword [r8 + rax*4 + 0x3521c]
add rcx, r8
jmp rcx
xor ecx, ecx
mov r15d, r9d
cmp r12d, edx
mov r8d, ecx
sete r8b
jmp 0x140035184
xor ecx, ecx
cmp dword [r10 + 0x5e4], edx
mov r8d, ecx
sete r8b
jmp 0x140035184
cmp r14b, 0xcc
jne 0x140035182
mov ecx, r13d
sub ecx, 0x13
je case.0x14003513a.7
sub ecx, r9d
je case.0x14003513a.7
sub ecx, 0x94
je case.0x14003513a.7
cmp ecx, r9d
je case.0x14003513a.7
mov r8d, r9d
xor ecx, ecx
mov r11, qword [r11 + 8]
test r11, r11
jne 0x140035023
mov r13, qword [rsp + 0x60]
test r9d, r9d
je 0x14003520c
mov ecx, r12d
mov dword [r13], ecx
test r12d, r12d
jne 0x1400351bf
movzx eax, word [r10 + 0x5e0]
cmp esi, eax
jne 0x1400351bf
mov r8d, 1
mov dword [r13], edi
mov ecx, edi
test ecx, ecx
jne 0x1400351e5
mov dword [r13], ebx
mov r8d, 1
mov ecx, ebx
test ebx, ebx
jne 0x1400351e5
xor eax, eax
mov ecx, eax
cmp esi, dword [rsp + 0x48]
jne 0x1400351e7
mov dword [r13], edi
mov ecx, edi
jmp 0x1400351e7
xor eax, eax
test ecx, ecx
jne 0x1400351fc
mov ecx, ebp
mov dword [r13], ebp
test ecx, ecx
jne 0x1400351fc
test r15d, r15d
cmovne r8d, eax
mov eax, r8d
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor eax, eax
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret