Function at 0x689da0
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push 0xffffffffffffffff
push 0x775f78
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
push esi
push edi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x248]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x240], esi
cmp dword [esi + 0x1e8], 0x10
lea eax, [esi + 0x1d4]
mov byte [esp + 0x247], 0
jb 0x689ded
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 1
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x1ec], eax
cmp eax, 0xffffffff
jne 0x68a048
movdqa xmm0, xmmword [0x79bdb0]
lea eax, [esp + 0x164]
movdqu xmmword [esp + 0x164], xmm0
push 0x80
movdqa xmm0, xmmword [str.914_Vrx]
push eax
movdqu xmmword [esp + 0x17c], xmm0
lea eax, [esp + 0x4c]
xorps xmm0, xmm0
push eax
movdqu xmmword [esp + 0x190], xmm0
movdqu xmmword [esp + 0x1a0], xmm0
movdqu xmmword [esp + 0x1b0], xmm0
movdqu xmmword [esp + 0x1c0], xmm0
movdqu xmmword [esp + 0x1d0], xmm0
movdqu xmmword [esp + 0x1e0], xmm0
call fcn.006f8110
add esp, 0xc
lea esi, [esp + 0x44]
mov ecx, 0x20
lea edi, [esp + 0x164]
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x1f4]
mov byte [esp + 0x1e4], 0x78
push eax
lea ecx, [esp + 0x168]
call fcn.0056d340
lea eax, [esp + 0x1f4]
mov dword [esp + 0x250], 0
push eax
lea ecx, [esp + 0x22c]
call fcn.004194e0
cmp dword [eax + 0x14], 0x10
mov byte [esp + 0x250], 1
jb 0x689ee8
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x210]
call fcn.00406a00
add eax, 4
mov byte [esp + 0x250], 2
cmp dword [eax + 0x14], 0x10
jb 0x689f08
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x118]
call fcn.00406a00
mov ecx, dword [esp + 0x240]
lea eax, [esp + 0x118]
push 0xffffffffffffffff
push 0
push eax
add ecx, 0x1f0
mov byte [esp + 0x25c], 3
call fcn.004094b0
cmp dword [esp + 0x12c], 0x10
mov dword [esp + method.wbs::StringBase_char_.virtual_0], vtable.wbs::StringBase_char_.0
jb 0x689f5f
push dword [esp + 0x118]
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x12c], 0xf
mov dword [esp + 0x128], 0
mov byte [esp + 0x118], 0
cmp dword [esp + 0x224], 0x10
mov dword [esp + method.wbs::StringBase_char_.virtual_0], vtable.wbs::StringBase_char_.0
jb 0x689fa1
push dword [esp + 0x210]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x23c], 0x10
mov byte [esp + 0x210], 0
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0xf
jb 0x689fd8
push dword [esp + 0x228]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x208], 0x10
mov dword [esp + 0x23c], 0xf
mov dword [esp + 0x238], 0
mov byte [esp + 0x228], 0
mov dword [esp + 0x250], 0xffffffff
jb 0x68a01a
push dword [esp + 0x1f4]
call fcn.006f75a9
add esp, 4
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x1ec]
call esi
mov al, byte [esp + 0x247]
mov ecx, dword [esp + 0x248]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x248
ret
push 0
push 0
push 0
push 2
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [esp + 0x1f0], eax
test eax, eax
jne 0x68a1d4
movdqa xmm0, xmmword [str.10X__n]
lea eax, [esp + 0x164]
movdqu xmmword [esp + 0x164], xmm0
push 0x80
movdqa xmm0, xmmword [0x79bd20]
push eax
movdqu xmmword [esp + 0x17c], xmm0
lea eax, [esp + 0x4c]
xorps xmm0, xmm0
push eax
movdqu xmmword [esp + 0x190], xmm0
movdqu xmmword [esp + 0x1a0], xmm0
movdqu xmmword [esp + 0x1b0], xmm0
movdqu xmmword [esp + 0x1c0], xmm0
movdqu xmmword [esp + 0x1d0], xmm0
movdqu xmmword [esp + 0x1e0], xmm0
call fcn.006f8110
add esp, 0xc
lea esi, [esp + 0x44]
mov ecx, 0x20
lea edi, [esp + 0x164]
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x1f4]
mov byte [esp + 0x1e4], 0x78
push eax
lea ecx, [esp + 0x168]
call fcn.0056d340
lea eax, [esp + 0x1f4]
mov dword [esp + 0x250], 4
push eax
lea ecx, [esp + 0x22c]
call fcn.004194e0
cmp dword [eax + 0x14], 0x10
mov byte [esp + 0x250], 5
jb 0x68a13a
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x210]
call fcn.00406a00
add eax, 4
mov byte [esp + 0x250], 6
cmp dword [eax + 0x14], 0x10
jb 0x68a15a
mov eax, dword [eax]
push eax
lea ecx, [esp + 0xfc]
call fcn.00406a00
mov ecx, dword [esp + 0x240]
lea eax, [esp + 0xfc]
push 0xffffffffffffffff
push 0
push eax
add ecx, 0x1f0
mov byte [esp + 0x25c], 7
call fcn.004094b0
cmp dword [esp + 0x110], 0x10
mov dword [esp + 0xf8], vtable.wbs::StringBase_char_.0
jb 0x68a1b1
push dword [esp + 0xfc]
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x110], 0xf
mov dword [esp + 0x10c], 0
mov byte [esp + 0xfc], 0
jmp 0x689f7d
push 0
push 0
push 0
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov dword [esp + 0x1e8], ecx
test ecx, ecx
jne 0x68a410
movdqa xmm0, xmmword [0x79bd50]
lea eax, [esp + 0x164]
movdqu xmmword [esp + 0x164], xmm0
push 0x80
movdqa xmm0, xmmword [0x79bd00]
push eax
movdqu xmmword [esp + 0x17c], xmm0
lea eax, [esp + 0x4c]
xorps xmm0, xmm0
push eax
movdqu xmmword [esp + 0x190], xmm0
movdqu xmmword [esp + 0x1a0], xmm0
movdqu xmmword [esp + 0x1b0], xmm0
movdqu xmmword [esp + 0x1c0], xmm0
movdqu xmmword [esp + 0x1d0], xmm0
movdqu xmmword [esp + 0x1e0], xmm0
call fcn.006f8110
add esp, 0xc
lea esi, [esp + 0x44]
mov ecx, 0x20
lea edi, [esp + 0x164]
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x1f4]
mov byte [esp + 0x1e4], 0x78
push eax
lea ecx, [esp + 0x168]
call fcn.0056d340
lea eax, [esp + 0x1f4]
mov dword [esp + 0x250], 8
push eax
lea ecx, [esp + 0x22c]
call fcn.004194e0
cmp dword [eax + 0x14], 0x10
mov byte [esp + 0x250], 9
jb 0x68a2c6
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x210]
call fcn.00406a00
add eax, 4
mov byte [esp + 0x250], 0xa
cmp dword [eax + 0x14], 0x10
jb 0x68a2e6
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x134]
call fcn.00406a00
mov ecx, dword [esp + 0x240]
lea eax, [esp + 0x134]
push 0xffffffffffffffff
push 0
push eax
add ecx, 0x1f0
mov byte [esp + 0x25c], 0xb
call fcn.004094b0
cmp dword [esp + 0x148], 0x10
mov dword [esp + method.wbs::StringBase_char_.virtual_0], vtable.wbs::StringBase_char_.0
jb 0x68a33d
push dword [esp + 0x134]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x224], 0x10
mov dword [esp + 0x148], 0xf
mov dword [esp + 0x144], 0
mov byte [esp + 0x134], 0
mov dword [esp + method.wbs::StringBase_char_.virtual_0], vtable.wbs::StringBase_char_.0
jb 0x68a37f
push dword [esp + 0x210]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x23c], 0x10
mov dword [esp + 0x224], 0xf
mov dword [esp + 0x220], 0
mov byte [esp + 0x210], 0
jb 0x68a3b6
push dword [esp + 0x228]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x208], 0x10
mov dword [esp + 0x23c], 0xf
mov dword [esp + 0x238], 0
mov byte [esp + 0x228], 0
mov dword [esp + 0x250], 0xffffffff
jb 0x68a7d3
push dword [esp + 0x1f4]
call fcn.006f75a9
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 4
push dword [esp + 0x1f0]
call esi
jmp 0x68a020
mov eax, 0x5a4d
cmp ax, word [ecx]
je 0x68a5b5
movdqa xmm0, xmmword [str.10X159__71__X__n]
lea eax, [esp + 0x164]
movdqu xmmword [esp + 0x164], xmm0
push 0x80
movdqa xmm0, xmmword [str._69__Vrx]
push eax
movdqu xmmword [esp + 0x17c], xmm0
lea eax, [esp + 0x4c]
xorps xmm0, xmm0
push eax
movdqu xmmword [esp + 0x190], xmm0
movdqu xmmword [esp + 0x1a0], xmm0
movdqu xmmword [esp + 0x1b0], xmm0
movdqu xmmword [esp + 0x1c0], xmm0
movdqu xmmword [esp + 0x1d0], xmm0
movdqu xmmword [esp + 0x1e0], xmm0
call fcn.006f8110
add esp, 0xc
lea esi, [esp + 0x44]
mov ecx, 0x20
lea edi, [esp + 0x164]
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x1f4]
mov byte [esp + 0x1e4], 0x78
push eax
lea ecx, [esp + 0x168]
call fcn.0056d340
lea eax, [esp + 0x1f4]
mov dword [esp + 0x250], 0xc
push eax
lea ecx, [esp + 0x22c]
call fcn.004194e0
cmp dword [eax + 0x14], 0x10
mov byte [esp + 0x250], 0xd
jb 0x68a4f0
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x2c]
call fcn.00406a00
add eax, 4
mov byte [esp + 0x250], 0xe
cmp dword [eax + 0x14], 0x10
jb 0x68a50d
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x210]
call fcn.00406a00
mov ecx, dword [esp + 0x240]
lea eax, [esp + 0x20c]
push eax
add ecx, 0x1ec
mov byte [esp + 0x254], 0xf
call fcn.00406c20
lea ecx, [esp + 0x20c]
call fcn.0061b700
lea ecx, [esp + 0x28]
call fcn.0061b700
cmp dword [esp + 0x23c], 0x10
jb 0x68a56a
push dword [esp + 0x228]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x208], 0x10
mov dword [esp + 0x23c], 0xf
mov dword [esp + 0x238], 0
mov byte [esp + 0x228], 0
mov dword [esp + 0x250], 0xffffffff
jb 0x68a7c6
push dword [esp + 0x1f4]
call fcn.006f75a9
add esp, 4
jmp 0x68a7c6
movdqu xmm0, xmmword [ecx]
movdqu xmmword [esi + 0x20a], xmm0
movdqu xmm0, xmmword [ecx + 0x10]
movdqu xmmword [esi + 0x21a], xmm0
movdqu xmm0, xmmword [ecx + 0x20]
movdqu xmmword [esi + 0x22a], xmm0
movdqu xmm0, xmmword [ecx + 0x30]
movdqu xmmword [esi + 0x23a], xmm0
mov eax, dword [ecx + 0x3c]
add eax, ecx
cmp dword [eax], 0x4550
je 0x68a7af
movdqa xmm0, xmmword [str.10X_b1]
lea eax, [esp + 0x164]
movdqu xmmword [esp + 0x164], xmm0
push 0x80
movdqa xmm0, xmmword [0x79bdc0]
movdqu xmmword [esp + 0x178], xmm0
push eax
movdqa xmm0, xmmword [0x7823b0]
lea eax, [esp + 0x4c]
movdqu xmmword [esp + 0x18c], xmm0
push eax
xorps xmm0, xmm0
movdqu xmmword [esp + 0x1a0], xmm0
movdqu xmmword [esp + 0x1b0], xmm0
movdqu xmmword [esp + 0x1c0], xmm0
movdqu xmmword [esp + 0x1d0], xmm0
movdqu xmmword [esp + 0x1e0], xmm0
call fcn.006f8110
add esp, 0xc
lea esi, [esp + 0x44]
mov ecx, 0x20
lea edi, [esp + 0x164]
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x14c]
mov byte [esp + 0x1e4], 0x78
push eax
lea ecx, [esp + 0x168]
call fcn.0056d340
lea eax, [esp + 0x14c]
mov dword [esp + 0x250], 0x10
push eax
lea ecx, [esp + 0xe4]
call fcn.004194e0
cmp dword [eax + 0x14], 0x10
mov byte [esp + 0x250], 0x11
jb 0x68a6d3
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x10]
call fcn.00406a00
add eax, 4
mov byte [esp + 0x250], 0x12
cmp dword [eax + 0x14], 0x10
jb 0x68a6f0
mov eax, dword [eax]
push eax
lea ecx, [esp + 0xc8]
call fcn.00406a00
mov ecx, dword [esp + 0x240]
lea eax, [esp + 0xc4]
push eax
add ecx, 0x1ec
mov byte [esp + 0x254], 0x13
call fcn.00406c20
lea ecx, [esp + 0xc4]
call fcn.0061b700
lea ecx, [esp + 0xc]
call fcn.0061b700
cmp dword [esp + 0xf4], 0x10
jb 0x68a74d
push dword [esp + 0xe0]
call fcn.006f75a9
add esp, 4
cmp dword [esp + 0x160], 0x10
mov dword [esp + 0xf4], 0xf
mov dword [esp + 0xf0], 0
mov byte [esp + 0xe0], 0
mov dword [esp + 0x250], 0xffffffff
jb 0x68a78f
push dword [esp + 0x14c]
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x160], 0xf
mov dword [esp + 0x15c], 0
mov byte [esp + 0x14c], 0
jmp 0x68a7c6
lea edi, [esi + 0x24c]
mov byte [esp + 0x247], 1
mov ecx, 0x3e
mov esi, eax
rep movsd dword es:[edi], dword [esi]
push dword [esp + 0x1e8]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push dword [esp + 0x1f0]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x68a020