Function at 0x14001123a
Capabilities:
Terminate process

Disassembly:
jmp 0x140012680
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x1a8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x32
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1c8]
mov rax, qword [0x140022018]
xor rax, rbp
mov qword [rbp + 0x178], rax
lea rcx, [0x1400280a3]
call fcn.140011465
mov dword [rbp + 0x44], 0x3f8c
mov eax, dword [rbp + 0x44]
mov ecx, dword [rbp + 0x1a8]
lea eax, [rax + rcx + 8]
mov dword [rbp + 0x64], eax
mov eax, dword [rbp + 0x64]
mov edx, eax
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_calloc]
mov qword [rbp + 0x88], rax
mov eax, dword [rbp + 0x64]
add rax, 0x74
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov rdx, rax
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_calloc]
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
mov dword [rax], 0x9000301a
mov eax, dword [rbp + 0x64]
add rax, 0x6c
mov rcx, qword [rbp + 0xa8]
mov word [rcx + 4], ax
mov eax, 1
mov rcx, qword [rbp + 0xa8]
mov word [rcx + 8], ax
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0xa8]
movzx ecx, word [rcx + 4]
mov word [rax + 0xa], cx
mov rax, qword [rbp + 0xa8]
mov dword [rax + 0xc], 0x70526546
mov eax, dword [rbp + 0x64]
add rax, 0x68
mov rcx, qword [rbp + 0xa8]
mov dword [rcx + 0x14], eax
mov eax, 2
mov rcx, qword [rbp + 0xa8]
mov word [rcx + 0x18], ax
mov eax, 0xb
mov rcx, qword [rbp + 0xa8]
mov word [rcx + 0x1a], ax
mov eax, 8
imul rax, rax, 0
mov ecx, 7
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1c], cx
mov eax, 8
imul rax, rax, 0
mov ecx, 1
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1e], cx
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rbp + 0xa8]
mov dword [rcx + rax + 0x20], 0x68
mov eax, 8
imul rax, rax, 1
mov ecx, 0xa
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1c], cx
mov eax, 8
imul rax, rax, 1
mov ecx, 4
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1e], cx
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rbp + 0xa8]
mov dword [rcx + rax + 0x20], 0x6c
mov eax, 8
imul rax, rax, 3
mov ecx, 0x11
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1c], cx
mov eax, 8
imul rax, rax, 3
xor ecx, ecx
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1e], cx
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rbp + 0xa8]
mov dword [rcx + rax + 0x20], 0x70
mov eax, 8
imul rax, rax, 0xa
xor ecx, ecx
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rax + 0x1c], cx
mov eax, dword [rbp + 0x1a8]
mov ecx, dword [rbp + 0x44]
add ecx, eax
mov eax, ecx
mov ecx, 8
imul rcx, rcx, 0xa
mov rdx, qword [rbp + 0xa8]
mov word [rdx + rcx + 0x1e], ax
mov eax, 8
imul rax, rax, 0xa
mov rcx, qword [rbp + 0xa8]
mov dword [rcx + rax + 0x20], 0x70
mov eax, dword [rbp + 0x64]
mov r8d, eax
mov edx, 0x41
mov rcx, qword [rbp + 0x88]
call fcn.14001138e
mov rax, qword [rbp + 0x88]
mov dword [rax], 1
mov rax, qword [rbp + 0x88]
mov dword [rax + 4], 0x3e
mov eax, dword [rbp + 0x1a8]
mov ecx, dword [rbp + 0x44]
mov rdx, qword [rbp + 0x88]
lea rcx, [rdx + rcx + 8]
mov r8d, eax
mov rdx, qword [rbp + 0x1a0]
call fcn.14001122b
mov eax, dword [rbp + 0x64]
mov rcx, qword [rbp + 0xa8]
add rcx, 0x74
mov r8d, eax
mov rdx, qword [rbp + 0x88]
call fcn.14001122b
mov eax, dword [rbp + 0x64]
add rax, 0x60
mov rcx, qword [rbp + 0xa8]
add rcx, 0x14
mov edx, eax
call fcn.14001114a
mov rcx, qword [rbp + 0xa8]
mov dword [rcx + 0x10], eax
mov rax, qword [rbp + 0xa8]
movzx eax, word [rax + 4]
add eax, 8
cmp eax, 0x4000
jge 0x14001298f
mov rax, qword [rbp + 0xa8]
jmp 0x140012a32
mov rax, qword [rbp + 0xa8]
movzx eax, word [rax + 8]
bts eax, 0xf
mov rcx, qword [rbp + 0xa8]
mov word [rcx + 8], ax
mov eax, dword [rbp + 0x64]
add rax, 0x68
mov rcx, qword [rbp + 0xa8]
add rcx, 0xc
lea r9, [rbp + 0x24]
lea r8, [rbp + 8]
mov edx, eax
call fcn.14001114f
mov eax, dword [rbp + 0x24]
add eax, 4
mov rcx, qword [rbp + 0xa8]
mov word [rcx + 4], ax
mov eax, dword [rbp + 0x24]
mov rcx, qword [rbp + 0xa8]
add rcx, 0xc
mov r8d, eax
mov rdx, qword [rbp + 8]
call fcn.14001122b
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rbp + 0xa8]
movzx eax, word [rax + 4]
add eax, 8
cmp eax, 0x4000
jle 0x140012a2b
lea rcx, str.____Reparse_Data_Too_Big_n
call fcn.140011208
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
mov rax, qword [rbp + 0xa8]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001df60]
call fcn.1400113e8
mov rax, rdi
mov rcx, qword [rbp + 0x178]
xor rcx, rbp
call fcn.140011226
lea rsp, [rbp + 0x188]
pop rdi
pop rbp
ret