Function at 0x1400674a0
Capabilities:
Read file on windows
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov r15, r9
mov r13, r8
mov rsi, rcx
mov edx, dword [0x140204d10]
mov rax, qword gs:[0x58]
mov ecx, 0x20
mov rax, qword [rax + rdx*8]
mov edx, dword [rax + rcx]
imul rax, rdx, 0xd8
add rax, qword [rsi + 0x648]
cmp dword [rax + 0xc0], 0
jne 0x140068122
cmp byte [rsi + 0x1058], 0
jne 0x140068122
xor r12d, r12d
mov r14, qword [0x140202f20]
test r14, r14
je 0x140067568
lea rbx, str.BEGIN_HEARTBEAT_n
mov edi, 0x10
nop dword [rax + rax]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x67]
mov r8d, edi
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140067568
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x140067568
mov eax, dword [rbp + 0x67]
test eax, eax
je 0x140067568
add rbx, rax
sub rdi, rax
jne 0x140067530
mov byte [rsi + 0x1058], 1
mov ecx, 0xee8
call fcn.140116d14
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x140067613
lea rax, vtable.Fossilize::VulkanDevice.0
mov qword [rbx], rax
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
mov qword [rbx + 0x20], r12
lea rcx, [rbx + 0x28]
xor edx, edx
mov r8d, 0x338
call fcn.140119530
mov dword [rbx + 0x360], r12d
mov qword [rbx + 0x368], r12
mov qword [rbx + 0x370], r12
mov dword [rbx + 0x378], 0
mov word [rbx + 0x37c], 0
lea rcx, [rbx + 0x380]
xor edx, edx
mov r8d, 0xb48
call fcn.140119530
lea rcx, [rbx + 0xec8]
call fcn.1400062c0
mov qword [rbx + 0xed0], r12
mov qword [rbx + 0xed8], r12
mov qword [rbx + 0xee0], r12
jmp 0x140067616
mov rbx, r12
mov rcx, qword [rsi + 0x1050]
mov qword [rsi + 0x1050], rbx
test rcx, rcx
je 0x140067633
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [rsi + 0x1068], r13
mov qword [rsi + 0x1070], r15
movzx eax, byte [rsi + 9]
mov byte [rsi + 0x1063], al
call fcn.140114280
mov rbx, rax
call fcn.140114264
cmp rbx, 0x989680
jne 0x140067667
imul rbx, rax, 0x64
jmp 0x140067683
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
lea rdx, [rsi + 0x1060]
mov rcx, qword [rsi + 0x1050]
call fcn.140003100
test al, al
je 0x140068149
mov r8, rsi
lea rdx, [0x140061750]
mov rcx, qword [rsi + 0x1050]
call fcn.140004f60
movzx ecx, byte [rsi + 9]
test cl, cl
je 0x1400676fd
mov rax, qword [rsi + 0x1050]
cmp byte [rax + 0x37b], 0
jne 0x1400676fd
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_INFO:_Requested_pipeline_stats__but_device_does_not_support_them._Disabling._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov byte [rsi + 9], 0
xor cl, cl
cmp qword [rsi + 0xa0], 0
je 0x1400679cb
mov r14, qword [rsi + 0x1050]
cmp byte [r14 + 0x379], 0
je 0x1400679cb
mov edi, r12d
add r14, 0xeb8
nop word [rax + rax]
movzx r8d, byte [r14]
lea ecx, [rdi + rdi]
lea rax, [rbp - 0x39]
add rcx, rax
lea rdx, str._02x
call fcn.1400319c0
inc edi
lea r14, [r14 + 1]
cmp edi, 0x10
jb 0x140067730
mov r14, 0xffffffffffffffff
cmp qword [0x140202f20], 0
je 0x1400677df
lea r8, [rbp - 0x39]
lea rdx, str.MODULE_UUID__s_n
lea rcx, [rbp - 9]
call fcn.1400319c0
lea r15, [rbp - 9]
mov r12, qword [0x140202f20]
lea rax, [rbp - 9]
mov rdi, r14
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140067790
test rdi, rdi
je 0x1400677dc
nop
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x67]
mov r8d, edi
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14006781a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14006781a
mov eax, dword [rbp + 0x67]
test eax, eax
je 0x14006781a
add r15, rax
sub rdi, rax
jne 0x1400677a0
xor r12d, r12d
lea rdx, [rsi + 0x90]
lea rcx, [rbp - 0x59]
call fcn.140006120
nop
mov rcx, qword [rbp - 0x49]
mov rdx, qword [rbp - 0x41]
cmp rcx, rdx
jae 0x140067826
lea rax, [rcx + 1]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 0x59]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x59]
mov word [rax + rcx], 0x2e
jmp 0x140067839
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r9b, 0x2e
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x59]
call fcn.1400054d0
lea rax, [rbp - 0x39]
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x140067840
mov rcx, qword [rbp - 0x49]
mov rdx, qword [rbp - 0x41]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x14006788b
lea rax, [r14 + rcx]
mov qword [rbp - 0x49], rax
lea rdi, [rbp - 0x59]
cmp rdx, 0x10
cmovae rdi, qword [rbp - 0x59]
add rdi, rcx
mov r8, r14
lea rdx, [rbp - 0x39]
mov rcx, rdi
call fcn.140118d20
mov byte [rdi + r14], 0
jmp 0x1400678a3
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x39]
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x59]
call fcn.1400176c0
mov rcx, qword [rbp - 0x49]
mov rdx, qword [rbp - 0x41]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1400678da
lea rax, [rcx + 4]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 0x59]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x59]
mov dword [rax + rcx], 0x7a6f662e
mov byte [rax + rcx + 4], 0
jmp 0x1400678fa
mov qword [rsp + 0x20], 4
lea r9, str..foz
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rbp - 0x59]
call fcn.1400176c0
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rcx, qword [rbp - 0x59]
xor edx, edx
call fcn.140035620
mov rcx, rax
mov r8, qword [rsi + 0xab0]
mov qword [rsi + 0xab0], rax
test r8, r8
je 0x140067939
mov rax, qword [r8]
mov edx, 1
mov rcx, r8
call qword [rax]
mov rcx, qword [rsi + 0xab0]
mov rax, qword [rcx]
call qword [rax + 8]
test al, al
jne 0x14006798c
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_WARN:_Failed_to_prepare_module_identifier_database._Disabling_identifiers._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rcx, qword [rsi + 0xab0]
mov qword [rsi + 0xab0], r12
test rcx, rcx
je 0x14006798c
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x1400679c7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400679c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006817f
call fcn.140116d50
movzx ecx, byte [rsi + 9]
test cl, cl
je 0x140067abe
lea rdx, [rsi + 0xb0]
lea r8, str..__tmp.foz
lea rcx, [rbp - 0x59]
call fcn.14004ab90
nop
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rcx, qword [rbp - 0x59]
mov edx, 3
call fcn.140035620
mov rcx, rax
mov r8, qword [rsi + 0x778]
mov qword [rsi + 0x778], rax
test r8, r8
je 0x140067a2d
mov rax, qword [r8]
mov edx, 1
mov rcx, r8
call qword [rax]
mov rcx, qword [rsi + 0x778]
mov rax, qword [rcx]
call qword [rax + 8]
test al, al
jne 0x140067a83
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_WARN:_Failed_to_prepare_stats_database._Disabling_pipeline_stats._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rcx, qword [rsi + 0x778]
mov qword [rsi + 0x778], r12
test rcx, rcx
je 0x140067a7f
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov byte [rsi + 9], 0
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x140067abe
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067ab9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068185
call fcn.140116d50
cmp qword [rsi + 0x20], 0
je 0x140067c97
mov dword [rbp - 0x39], 0x11
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x59], xmm1
mov qword [rbp - 0x49], r12
lea rcx, [rsi + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140067af5
mov rcx, qword [rcx]
lea rdx, [0x14014dfb0]
call fcn.140123fac
mov rdi, rax
test rax, rax
je 0x140067ba8
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.140124548
mov rcx, rdi
call fcn.140124aa0
movsxd r14, eax
mov rcx, rdi
call fcn.140124d7c
test r14, r14
je 0x140067ba8
mov rdx, r14
lea rcx, [rbp - 0x59]
call fcn.140031050
mov r9, rdi
mov r8, r14
mov edx, 1
mov rcx, qword [rbp - 0x59]
call fcn.140124270
cmp rax, r14
jne 0x140067ba8
lea rdx, [rbp - 0x59]
mov rcx, rsi
call fcn.14006bd30
test al, al
je 0x140067b7d
mov rcx, qword [rbp - 0x59]
mov qword [rbp - 0x19], rcx
mov rax, qword [rbp - 0x51]
sub rax, rcx
mov qword [rbp - 0x21], rax
jmp 0x140067ba8
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_INFO:_Failed_to_validate_pipeline_cache._Creating_a_blank_one._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rax, qword [0x140203158]
mov rcx, qword [rsi + 0x1050]
lea r9, [rsi + 0x488]
xor r8d, r8d
lea rdx, [rbp - 0x39]
mov rcx, qword [rcx + 0x18]
call rax
test eax, eax
je 0x140067c5d
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_WARN:_Failed_to_create_pipeline_cache__trying_to_create_a_blank_one._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov rax, qword [0x140203158]
mov rcx, qword [rsi + 0x1050]
lea r9, [rsi + 0x488]
xor r8d, r8d
lea rdx, [rbp - 0x39]
mov rcx, qword [rcx + 0x18]
call rax
test eax, eax
je 0x140067c5d
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_create_pipeline_cache._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov qword [rsi + 0x488], r12
mov rcx, qword [rbp - 0x59]
test rcx, rcx
je 0x140067c97
mov rdx, qword [rbp - 0x49]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067c92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006818b
call fcn.140116d50
cmp qword [rsi + 0x40], 0
je 0x140067f00
mov rax, qword [rsi + 0x1050]
cmp byte [rax + 0x37c], 0
je 0x140067ed5
mov dword [rbp - 0x39], 0x3b9d3b00
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x59], xmm1
mov qword [rbp - 0x49], r12
lea rcx, [rsi + 0x30]
cmp qword [rcx + 0x18], 0x10
jb 0x140067ce2
mov rcx, qword [rcx]
lea rdx, [0x14014dfb0]
call fcn.140123fac
mov rdi, rax
test rax, rax
je 0x140067de4
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.140124548
mov rcx, rdi
call fcn.140124aa0
movsxd r14, eax
mov rcx, rdi
call fcn.140124d7c
test r14, r14
je 0x140067de4
mov rdx, r14
lea rcx, [rbp - 0x59]
call fcn.140031050
mov r9, rdi
mov r8, r14
mov edx, 1
mov rcx, qword [rbp - 0x59]
call fcn.140124270
cmp rax, r14
jne 0x140067de4
mov r8, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x59]
sub r8, rdx
cmp r8, 0x18
jae 0x140067d8b
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Validation_cache_header_is_too_small._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
jmp 0x140067daf
movzx ecx, byte [rdx + 7]
shl ecx, 8
movzx eax, byte [rdx + 6]
or ecx, eax
shl ecx, 8
movzx eax, byte [rdx + 5]
or ecx, eax
shl ecx, 8
movzx eax, byte [rdx + 4]
or ecx, eax
cmp ecx, 1
je 0x140067ddc
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_INFO:_Failed_to_validate_validation_cache._Creating_a_blank_one._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
jmp 0x140067de4
mov qword [rbp - 0x19], rdx
mov qword [rbp - 0x21], r8
mov rax, qword [0x140203960]
mov rcx, qword [rsi + 0x1050]
lea r9, [rsi + 0x490]
xor r8d, r8d
lea rdx, [rbp - 0x39]
mov rcx, qword [rcx + 0x18]
call rax
test eax, eax
je 0x140067e99
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_WARN:_Failed_to_create_validation_cache__trying_to_create_a_blank_one._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov rax, qword [0x140203960]
mov rcx, qword [rsi + 0x1050]
lea r9, [rsi + 0x490]
xor r8d, r8d
lea rdx, [rbp - 0x39]
mov rcx, qword [rcx + 0x18]
call rax
test eax, eax
je 0x140067e99
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_create_validation_cache._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov qword [rsi + 0x490], r12
mov rcx, qword [rbp - 0x59]
test rcx, rcx
je 0x140067f00
mov rdx, qword [rbp - 0x49]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067ece
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068143
call fcn.140116d50
jmp 0x140067f00
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Requested_validation_cache__but_validation_layers_do_not_support_this_extension._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
cmp qword [rsi + 0xe0], 0
je 0x140067f41
mov rcx, rsi
call fcn.140060570
test al, al
jne 0x140067f41
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_WARN:_Failed_to_initialize_replayer_cache._Ignoring__n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
call fcn.140114280
mov rdi, rax
call fcn.140114264
cmp rdi, 0x989680
jne 0x140067f5d
imul rcx, rax, 0x64
jmp 0x140067f7e
cqo
idiv rdi
mov r8, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
mov rcx, rax
imul rax, r8, 0x3b9aca00
add rcx, rax
sub rcx, rbx
movabs rax, 0x431bde82d7b634db
imul rcx
mov rbx, rdx
sar rbx, 0x12
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov ecx, 2
call fcn.140121458
mov rcx, rax
mov r8d, ebx
lea rdx, str.Fossilize_INFO:_Creating_Vulkan_device_took:__ld_ms_n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
test r13, r13
je 0x140068122
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_INFO:_Replaying_for_application:_n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ebx, dword [r13 + 0x2c]
mov ecx, 2
call fcn.140121458
mov ecx, ebx
and ecx, 0xfff
mov r9d, ebx
shr r9d, 0xc
and r9d, 0x3ff
shr ebx, 0x16
mov dword [rsp + 0x20], ecx
mov r8d, ebx
lea rdx, str.Fossilize_INFO:___apiVersion:__u._u._u_n
mov rcx, rax
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ebx, dword [r13 + 0x28]
mov ecx, 2
call fcn.140121458
mov r8d, ebx
lea rdx, str.Fossilize_INFO:___engineVersion:__u_n
mov rcx, rax
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ebx, dword [r13 + 0x18]
mov ecx, 2
call fcn.140121458
mov r8d, ebx
lea rdx, str.Fossilize_INFO:___applicationVersion:__u_n
mov rcx, rax
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rbx, qword [r13 + 0x20]
test rbx, rbx
je 0x1400680eb
mov ecx, 2
call fcn.140121458
mov r8, rbx
lea rdx, str.Fossilize_INFO:___engineName:__s_n
mov rcx, rax
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rbx, qword [r13 + 0x10]
test rbx, rbx
je 0x140068122
mov ecx, 2
call fcn.140121458
mov r8, rbx
lea rdx, str.Fossilize_INFO:___applicationName:__s_n
mov rcx, rax
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14011d39c
int3
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_create_Vulkan_device__bailing_..._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ecx, 1
call fcn.14011d804
int3
call fcn.14011d39c
int3
call fcn.14011d39c
int3
call fcn.14011d39c
int3