Function at 0x140064d00
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x1401770a0]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r12, rcx
mov qword [rbp + 0xc0], rcx
xor edi, edi
mov r15d, edi
mov dword [rsp + 0x44], edi
call fcn.14003cb20
mov rbx, rax
mov qword [rbp - 0x80], rdi
lea rax, [0x14014cdd8]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
mov rcx, qword [rbx]
cmp dword [rcx], edi
je 0x140064db1
mov qword [rbp + 0x60], rdi
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x60]
mov qword [rbp - 0x80], rcx
lea r8, [0x14014b350]
mov qword [rsp + 0x28], r8
lea rax, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation___
mov qword [rsp + 0x20], rax
lea r9, str._s_s
xor edx, edx
mov rcx, rbx
call fcn.14003bde0
nop
mov dword [rsp + 0x64], edi
mov dword [rsp + 0x60], edi
lea rcx, [r12 + 0x620]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x64]
call qword [sym.imp.imagehlp.dll_MapFileAndCheckSumW]
mov ebx, eax
test eax, eax
jne 0x14006539b
call fcn.14003cb20
mov rcx, qword [rax]
mov r12, 0xffffffffffffffff
cmp dword [rcx], ebx
je 0x140064fba
mov dword [rbp - 0x20], 0x806f8047
mov dword [rbp - 0x1c], 0x80208074
mov dword [rbp - 0x18], 0x80688063
mov dword [rbp - 0x14], 0x80638065
mov dword [rbp - 0x10], 0x8020806b
mov dword [rbp - 0xc], 0x807d807b
mov dword [rbp - 8], 0x80768020
mov dword [rbp - 4], 0x80208073
mov dword [rbp], 0x806f8063
mov dword [rbp + 4], 0x8070806d
mov dword [rbp + 8], 0x807b8020
mov dword [rbp + 0xc], 0x8000807d
xor ebx, ebx
mov word [rbp + 0x10], bx
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14001a290
nop
mov dword [rsp + 0x44], 0x200001
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rcx, qword [rbp + 0x70]
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xb0], eax
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rbp + 0xb0]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rsp + 0x50], 0x22
lea rax, [rbp + 0x90]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rsp + 0x50], rcx
mov rax, r12
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140064ed0
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x40]
call fcn.1400222b0
nop
mov dword [rsp + 0x44], 0x600003
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
lea r14, [rbp + 0x40]
mov rsi, qword [rbp + 0x40]
mov r13, qword [rbp + 0x58]
cmp r13, 8
cmovae r14, rsi
mov rbx, qword [rbp + 0x50]
cmp rbx, 8
jae 0x140064f3e
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140064f7e
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043ab0
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400fabc0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
mov r15d, 0xe00007
mov dword [rsp + 0x44], r15d
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
jmp 0x140064fc2
mov r13, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x40]
test r15b, 4
je 0x14006501e
and r15d, 0xfffffffb
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14006500c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065007
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006656b
call fcn.1400f877c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
test r15b, 2
je 0x140065064
and r15d, 0xfffffffd
cmp r13, 8
jb 0x140065064
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14006505b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140066571
mov rcx, rsi
call fcn.1400f877c
nop
test r15b, 1
je 0x1400650b1
and r15d, 0xfffffffe
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x1400650b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400650ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140066577
call fcn.1400f877c
mov eax, dword [rsp + 0x60]
cmp dword [rsp + 0x64], eax
je 0x140065638
call fcn.14003cb20
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140065290
mov dword [rbp - 0x20], 0x80728054
mov dword [rbp - 0x1c], 0x80638061
mov dword [rbp - 0x18], 0x802c8065
mov dword [rbp - 0x14], 0x80668020
mov dword [rbp - 0x10], 0x8075806f
mov dword [rbp - 0xc], 0x8064806e
mov dword [rbp - 8], 0x80638020
mov dword [rbp - 4], 0x8072806f
mov dword [rbp], 0x80758072
mov dword [rbp + 4], 0x80748070
mov dword [rbp + 8], 0x80648065
mov dword [rbp + 0xc], 0x80638020
mov dword [rbp + 0x10], 0x80658068
mov dword [rbp + 0x14], 0x806b8063
mov dword [rbp + 0x18], 0x80758073
mov dword [rbp + 0x1c], 0x8000806d
xor ebx, ebx
mov word [rbp + 0x20], bx
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14001a290
bts r15d, 0x18
or r15d, 8
mov dword [rsp + 0x44], r15d
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rcx, qword [rbp + 0x70]
mov dword [rbp + 0xb0], ebx
mov qword [rsp + 0x50], rbx
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], rcx
mov rax, r12
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400651a0
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x40]
call fcn.1400222b0
bts r15d, 0x19
or r15d, 0x10
mov dword [rsp + 0x44], r15d
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
lea r14, [rbp + 0x40]
mov rsi, qword [rbp + 0x40]
mov r13, qword [rbp + 0x58]
cmp r13, 8
cmovae r14, rsi
mov rbx, qword [rbp + 0x50]
cmp rbx, 8
jae 0x140065211
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140065251
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043ab0
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400fabc0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
bts r15d, 0x1a
or r15d, 0x20
mov dword [rsp + 0x44], r15d
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
jmp 0x140065298
mov r13, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x40]
test r15b, 0x20
je 0x1400652f4
and r15d, 0xffffffdf
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400652e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400652dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006657d
call fcn.1400f877c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
test r15b, 0x10
je 0x14006533a
and r15d, 0xffffffef
cmp r13, 8
jb 0x14006533a
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140065331
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140066583
mov rcx, rsi
call fcn.1400f877c
nop
test r15b, 8
je 0x140065387
and r15d, 0xfffffff7
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x140065387
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065382
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140066589
call fcn.1400f877c
mov r14, qword [rbp + 0xc0]
mov byte [r14 + 0x1a48], 1
jmp 0x14006563f
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x804d8020
mov dword [rbp], 0x80708061
mov dword [rbp + 4], 0x80698046
mov dword [rbp + 8], 0x8065806c
mov dword [rbp + 0xc], 0x806e8041
mov dword [rbp + 0x10], 0x80438064
mov dword [rbp + 0x14], 0x80658068
mov dword [rbp + 0x18], 0x806b8063
mov dword [rbp + 0x1c], 0x80758053
mov dword [rbp + 0x20], 0x8057806d
mov dword [rbp + 0x24], 0x8020803a
mov dword [rbp + 0x28], 0x807d807b
mov dword [rbp + 0x2c], 0x8000
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rcx, qword [rbp + 0x40]
mov dword [rsp + 0x50], ebx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rsp + 0x50], 2
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], rcx
mov r12, 0xffffffffffffffff
mov rax, r12
inc rax
cmp word [rcx + rax*2], 0
jne 0x140065483
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1400222b0
nop
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
lea r14, [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 8
setae byte [rsp + 0x40]
mov rsi, qword [rbp + 0x70]
cmovae r14, rsi
movabs rax, 0x7ffffffffffffffe
mov rbx, qword [rbp + 0x80]
cmp rbx, 8
jae 0x1400654fc
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140065532
mov rdi, rbx
or rdi, 7
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043ab0
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400fabc0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
mov r15d, 0x38000000
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f560
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400655aa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400655a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006658f
call fcn.1400f877c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
cmp byte [rsp + 0x40], al
je 0x1400655f8
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400655ef
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140066595
mov rcx, rsi
call fcn.1400f877c
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140065638
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065633
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006659b
call fcn.1400f877c
mov r14, qword [rbp + 0xc0]
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r13 + 7]
lea rdi, [r14 + 0x620]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
mov qword [rsp + 0x70], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140065949
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x80438020
mov dword [rbp], 0x80658072
mov dword [rbp + 4], 0x80748061
mov dword [rbp + 8], 0x80468065
mov dword [rbp + 0xc], 0x806c8069
mov dword [rbp + 0x10], 0x80578065
mov dword [rbp + 0x14], 0x8020803a
mov dword [rbp + 0x18], 0x807d807b
mov dword [rbp + 0x1c], 0x8020802c
mov dword [rbp + 0x20], 0x806f8066
mov dword [rbp + 0x24], 0x803a8072
mov dword [rbp + 0x28], 0x807b8020
mov dword [rbp + 0x2c], 0x8000807d
mov word [rbp + 0x30], r13w
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov dword [rsp + 0x50], ebx
mov qword [rbp + 0xb0], rdi
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rbp + 0xb0]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rsp + 0x50], 0xc2
lea rcx, [rbp + 0x90]
mov qword [rsp + 0x58], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rsp + 0x50], rax
nop dword [rax + rax]
inc r12
cmp word [rax + r12*2], 0
jne 0x140065790
mov qword [rsp + 0x58], r12
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1400222b0
nop
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea r15, [rbp + 0x70]
mov r12, qword [rbp + 0x88]
cmp r12, 8
setae r13b
mov r14, qword [rbp + 0x70]
cmovae r15, r14
mov rbx, qword [rbp + 0x80]
cmp rbx, 8
jae 0x140065801
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140065841
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043ab0
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1400fabc0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f560
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400658b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400658ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400665a1
call fcn.1400f877c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
test r13b, r13b
je 0x140065900
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400658f7
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400665a7
mov rcx, r14
call fcn.1400f877c
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140066518
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006593f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400665ad
call fcn.1400f877c
jmp 0x140066518
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov qword [rbp + 0xb0], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140065bd1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x80438020
mov dword [rbp], 0x80658072
mov dword [rbp + 4], 0x80748061
mov dword [rbp + 8], 0x80468065
mov dword [rbp + 0xc], 0x806c8069
mov dword [rbp + 0x10], 0x804d8065
mov dword [rbp + 0x14], 0x80708061
mov dword [rbp + 0x18], 0x80698070
mov dword [rbp + 0x1c], 0x8067806e
mov dword [rbp + 0x20], 0x803a8057
mov dword [rbp + 0x24], 0x807b8020
mov dword [rbp + 0x28], 0x8000807d
mov word [rbp + 0x2c], r13w
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov dword [rsp + 0x50], ebx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x50], 2
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x58], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rsp + 0x50], rax
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x140065a60
mov qword [rsp + 0x58], r12
lea r8, [rbp + 0xc0]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1400222b0
nop
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea r15, [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 8
setae byte [rsp + 0x40]
mov r12, qword [rbp + 0x70]
cmovae r15, r12
mov rbx, qword [rbp + 0x80]
cmp rbx, 8
jae 0x140065ad3
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov r14d, 7
jmp 0x140065b13
mov r14, rbx
or r14, 7
movabs rax, 0x7ffffffffffffffe
cmp r14, rax
cmova r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x60]
call fcn.140043ab0
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1400fabc0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x50], rbx
lea rbx, [rbp - 0x60]
cmp r14, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f560
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140065b85
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065b80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140066565
call fcn.1400f877c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
cmp byte [rsp + 0x40], al
je 0x140065bae
lea r8, [r13 + 1]
mov rdx, r12
lea rcx, [rbp + 0x70]
call fcn.140043db0
nop
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x140066504
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043db0
jmp 0x140066504
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
setne byte [rsp + 0x40]
test rax, rax
jne 0x140065da6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x804d8020
mov dword [rbp], 0x80708061
mov dword [rbp + 4], 0x80698056
mov dword [rbp + 8], 0x80778065
mov dword [rbp + 0xc], 0x8066804f
mov dword [rbp + 0x10], 0x80698046
mov dword [rbp + 0x14], 0x8065806c
mov dword [rbp + 0x18], 0x8020803a
mov dword [rbp + 0x1c], 0x807d807b
mov dword [rbp + 0x20], 0x8000
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov dword [rbp + 0x60], r14d
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0x60], 2
lea rcx, [rbp + 0xc0]
mov qword [rbp + 0x68], rcx
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x60], rax
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x140065cd0
mov qword [rbp + 0x68], r12
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x90]
call fcn.1400222b0
nop
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x60]
call fcn.140042f70
nop
lea r14, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r14, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f560
nop
mov r8, qword [rbp - 0x48]
cmp r8, 8
jb 0x140065d4e
inc r8
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.140043db0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
mov r8, qword [rbp + 0xa8]
cmp r8, 8
jb 0x140065d83
inc r8
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x90]
call fcn.140043db0
nop
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x1400664f3
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043db0
jmp 0x1400664f3
movsxd rcx, dword [rax + 0x3c]
add rcx, rbx
mov eax, dword [rcx + 8]
mov dword [r14 + 0x1a38], eax
mov eax, dword [rcx + 0x58]
mov dword [r14 + 0x1a3c], eax
mov eax, dword [rcx + 0x28]
mov dword [r14 + 0x1a44], eax
mov eax, dword [rcx + 0x50]
mov dword [r14 + 0x1a40], eax
call fcn.14003cb20
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140065ece
mov dword [rbp - 0x20], 0x80788045
mov dword [rbp - 0x1c], 0x80658063
mov dword [rbp - 0x18], 0x80748070
mov dword [rbp - 0x14], 0x806f8069
mov dword [rbp - 0x10], 0x8020806e
mov dword [rbp - 0xc], 0x806f806d
mov dword [rbp - 8], 0x80758064
mov dword [rbp - 4], 0x8065806c
mov dword [rbp], 0x803a8020
mov dword [rbp + 4], 0x807b8020
mov dword [rbp + 8], 0x8000807d
xor eax, eax
mov word [rbp + 0xc], ax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14001a290
nop
or r15d, 0x40
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rax, qword [rbp + 0x70]
mov qword [rbp + 0x60], rax
lea r8, [r14 + 0x418]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001b470
nop
bts r15d, 7
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140042f70
nop
bts r15d, 8
mov dword [rsp + 0x44], r15d
lea r14, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r14, qword [rbp - 0x60]
call fcn.14003cb20
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
mov r14, qword [rbp + 0xc0]
bt r15d, 8
jae 0x140065f08
btr r15d, 8
mov r8, qword [rbp - 0x48]
cmp r8, 8
jb 0x140065ef4
inc r8
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.140043db0
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
jmp 0x140065f0a
xor eax, eax
test r15b, r15b
jns 0x140065f40
btr r15d, 7
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x140065f30
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043db0
xor eax, eax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], ax
test r15b, 0x40
je 0x140065f67
and r15d, 0xffffffbf
mov r8, qword [rbp + 0x88]
cmp r8, 8
jb 0x140065f67
inc r8
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.140043db0
call fcn.14003cb20
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1400660a0
mov r14, qword [r14 + 0x1a30]
mov dword [rbp - 0x20], 0x8066804f
mov dword [rbp - 0x1c], 0x80738066
mov dword [rbp - 0x18], 0x80748065
mov dword [rbp - 0x14], 0x80208020
mov dword [rbp - 0x10], 0x80208020
mov dword [rbp - 0xc], 0x80208020
mov dword [rbp - 8], 0x80208020
mov dword [rbp - 4], 0x80208020
mov dword [rbp], 0x803a8020
mov dword [rbp + 4], 0x807b8020
mov dword [rbp + 8], 0x8000807d
xor eax, eax
mov word [rbp + 0xc], ax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x90]
call fcn.14001a290
nop
bts r15d, 9
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rax, qword [rbp + 0x90]
mov qword [rbp + 0x70], r14
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x60], 0xe
lea rcx, [rbp + 0x70]
mov qword [rbp + 0x68], rcx
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp + 0x60], rax
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x140066030
mov qword [rbp + 0x68], r12
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.1400222b0
nop
bts r15d, 0xa
mov dword [rsp + 0x44], r15d
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.140042f70
nop
bts r15d, 0xb
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r14, qword [rbp + 0x40]
call fcn.14003cb20
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
nop
bt r15d, 0xb
jae 0x1400660da
btr r15d, 0xb
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x1400660c6
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043db0
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r14w
bt r15d, 0xa
jae 0x1400660f0
btr r15d, 0xa
lea rcx, [rbp - 0x20]
call fcn.140043df0
nop
bt r15d, 9
jae 0x140066108
btr r15d, 9
lea rcx, [rbp + 0x90]
call fcn.140043df0
call fcn.14003cb20
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140066216
mov dword [rbp - 0x60], 0x80688043
mov dword [rbp - 0x5c], 0x80638065
mov dword [rbp - 0x58], 0x8053806b
mov dword [rbp - 0x54], 0x806d8075
mov dword [rbp - 0x50], 0x80208020
mov dword [rbp - 0x4c], 0x80208020
mov dword [rbp - 0x48], 0x80208020
mov dword [rbp - 0x44], 0x80208020
mov dword [rbp - 0x40], 0x803a8020
mov dword [rbp - 0x3c], 0x807b8020
mov dword [rbp - 0x38], 0x8023803a
mov dword [rbp - 0x34], 0x807d8078
mov dword [rbp - 0x30], 0x8000
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
bts r15d, 0xc
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
mov r12, qword [rbp + 0xc0]
lea r8, [r12 + 0x1a3c]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14001b3d0
nop
bts r15d, 0xd
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140042f70
nop
bts r15d, 0xe
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae r14, qword [rbp + 0x90]
call fcn.14003cb20
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
jmp 0x14006621d
mov r12, qword [rbp + 0xc0]
bt r15d, 0xe
jae 0x140066236
btr r15d, 0xe
lea rcx, [rbp + 0x90]
call fcn.140043df0
nop
bt r15d, 0xd
jae 0x14006624c
btr r15d, 0xd
lea rcx, [rbp - 0x20]
call fcn.140043df0
nop
bt r15d, 0xc
jae 0x140066261
btr r15d, 0xc
lea rcx, [rbp + 0x40]
call fcn.140043df0
call fcn.14003cb20
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140066368
mov dword [rbp - 0x60], 0x806e8045
mov dword [rbp - 0x5c], 0x80728074
mov dword [rbp - 0x58], 0x80508079
mov dword [rbp - 0x54], 0x8069806f
mov dword [rbp - 0x50], 0x8074806e
mov dword [rbp - 0x4c], 0x80208020
mov dword [rbp - 0x48], 0x80208020
mov dword [rbp - 0x44], 0x80208020
mov dword [rbp - 0x40], 0x803a8020
mov dword [rbp - 0x3c], 0x807b8020
mov dword [rbp - 0x38], 0x8023803a
mov dword [rbp - 0x34], 0x807d8078
mov r14d, 0x8000
mov dword [rbp - 0x30], r14d
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
or r15d, r14d
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
lea r8, [r12 + 0x1a44]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14001b3d0
nop
bts r15d, 0x10
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140042f70
nop
bts r15d, 0x11
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae r14, qword [rbp + 0x90]
call fcn.14003cb20
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
nop
bt r15d, 0x11
jae 0x140066381
btr r15d, 0x11
lea rcx, [rbp + 0x90]
call fcn.140043df0
nop
bt r15d, 0x10
jae 0x140066397
btr r15d, 0x10
lea rcx, [rbp - 0x20]
call fcn.140043df0
nop
mov r14d, 0x8000
test r14d, r15d
je 0x1400663b0
btr r15d, 0xf
lea rcx, [rbp + 0x40]
call fcn.140043df0
call fcn.14003cb20
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1400664b3
mov dword [rbp - 0x60], 0x80698054
mov dword [rbp - 0x5c], 0x8065806d
mov dword [rbp - 0x58], 0x80748053
mov dword [rbp - 0x54], 0x806d8061
mov dword [rbp - 0x50], 0x80208070
mov dword [rbp - 0x4c], 0x80208020
mov dword [rbp - 0x48], 0x80208020
mov dword [rbp - 0x44], 0x80208020
mov dword [rbp - 0x40], 0x803a8020
mov dword [rbp - 0x3c], 0x807b8020
mov dword [rbp - 0x38], 0x8023803a
mov dword [rbp - 0x34], 0x807d8078
mov dword [rbp - 0x30], r14d
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001a290
nop
bts r15d, 0x12
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
lea r8, [r12 + 0x1a38]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14001b3d0
nop
bts r15d, 0x13
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140042f70
nop
bts r15d, 0x14
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae r14, qword [rbp + 0x90]
call fcn.14003cb20
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f560
nop
bt r15d, 0x14
jae 0x1400664cc
btr r15d, 0x14
lea rcx, [rbp + 0x90]
call fcn.140043df0
nop
bt r15d, 0x13
jae 0x1400664e2
btr r15d, 0x13
lea rcx, [rbp - 0x20]
call fcn.140043df0
nop
bt r15d, 0x12
jae 0x1400664f3
lea rcx, [rbp + 0x40]
call fcn.140043df0
nop
cmp byte [rsp + 0x40], 0
je 0x140066504
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
nop
lea rax, [rdi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140066518
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14006652c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x80]
call fcn.14003bcd0
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1400f8730
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
nop
call fcn.1400ff670
int3