Function at 0x1400620e0
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x1401740a0]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r12, rcx
mov qword [rbp + 0xc0], rcx
xor edi, edi
mov r15d, edi
mov dword [rsp + 0x44], edi
call fcn.14003cbe0
mov rbx, rax
mov qword [rbp - 0x80], rdi
lea rax, [0x140149d78]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
mov rcx, qword [rbx]
cmp dword [rcx], edi
je 0x140062191
mov qword [rbp + 0x60], rdi
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x60]
mov qword [rbp - 0x80], rcx
lea r8, [0x140148370]
mov qword [rsp + 0x28], r8
lea rax, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation___
mov qword [rsp + 0x20], rax
lea r9, str._s_s
xor edx, edx
mov rcx, rbx
call fcn.14003bea0
nop
mov dword [rsp + 0x64], edi
mov dword [rsp + 0x60], edi
lea rcx, [r12 + 0x620]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x64]
call qword [sym.imp.imagehlp.dll_MapFileAndCheckSumW]
mov ebx, eax
test eax, eax
jne 0x14006277b
call fcn.14003cbe0
mov rcx, qword [rax]
mov r12, 0xffffffffffffffff
cmp dword [rcx], ebx
je 0x14006239a
mov dword [rbp - 0x20], 0x806f8047
mov dword [rbp - 0x1c], 0x80208074
mov dword [rbp - 0x18], 0x80688063
mov dword [rbp - 0x14], 0x80638065
mov dword [rbp - 0x10], 0x8020806b
mov dword [rbp - 0xc], 0x807d807b
mov dword [rbp - 8], 0x80768020
mov dword [rbp - 4], 0x80208073
mov dword [rbp], 0x806f8063
mov dword [rbp + 4], 0x8070806d
mov dword [rbp + 8], 0x807b8020
mov dword [rbp + 0xc], 0x8000807d
xor ebx, ebx
mov word [rbp + 0x10], bx
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14001a400
nop
mov dword [rsp + 0x44], 0x200001
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rcx, qword [rbp + 0x70]
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xb0], eax
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rbp + 0xb0]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rsp + 0x50], 0x22
lea rax, [rbp + 0x90]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rsp + 0x50], rcx
mov rax, r12
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400622b0
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x40]
call fcn.140022420
nop
mov dword [rsp + 0x44], 0x600003
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
lea r14, [rbp + 0x40]
mov rsi, qword [rbp + 0x40]
mov r13, qword [rbp + 0x58]
cmp r13, 8
cmovae r14, rsi
mov rbx, qword [rbp + 0x50]
cmp rbx, 8
jae 0x14006231e
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x14006235e
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043b70
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400f8070
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
mov r15d, 0xe00007
mov dword [rsp + 0x44], r15d
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
jmp 0x1400623a2
mov r13, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x40]
test r15b, 4
je 0x1400623fe
and r15d, 0xfffffffb
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400623ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400623e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006394b
call fcn.1400f5c2c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
test r15b, 2
je 0x140062444
and r15d, 0xfffffffd
cmp r13, 8
jb 0x140062444
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14006243b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063951
mov rcx, rsi
call fcn.1400f5c2c
nop
test r15b, 1
je 0x140062491
and r15d, 0xfffffffe
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x140062491
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006248c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063957
call fcn.1400f5c2c
mov eax, dword [rsp + 0x60]
cmp dword [rsp + 0x64], eax
je 0x140062a18
call fcn.14003cbe0
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140062670
mov dword [rbp - 0x20], 0x80728054
mov dword [rbp - 0x1c], 0x80638061
mov dword [rbp - 0x18], 0x802c8065
mov dword [rbp - 0x14], 0x80668020
mov dword [rbp - 0x10], 0x8075806f
mov dword [rbp - 0xc], 0x8064806e
mov dword [rbp - 8], 0x80638020
mov dword [rbp - 4], 0x8072806f
mov dword [rbp], 0x80758072
mov dword [rbp + 4], 0x80748070
mov dword [rbp + 8], 0x80648065
mov dword [rbp + 0xc], 0x80638020
mov dword [rbp + 0x10], 0x80658068
mov dword [rbp + 0x14], 0x806b8063
mov dword [rbp + 0x18], 0x80758073
mov dword [rbp + 0x1c], 0x8000806d
xor ebx, ebx
mov word [rbp + 0x20], bx
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14001a400
bts r15d, 0x18
or r15d, 8
mov dword [rsp + 0x44], r15d
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rcx, qword [rbp + 0x70]
mov dword [rbp + 0xb0], ebx
mov qword [rsp + 0x50], rbx
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], rcx
mov rax, r12
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140062580
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x40]
call fcn.140022420
bts r15d, 0x19
or r15d, 0x10
mov dword [rsp + 0x44], r15d
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
lea r14, [rbp + 0x40]
mov rsi, qword [rbp + 0x40]
mov r13, qword [rbp + 0x58]
cmp r13, 8
cmovae r14, rsi
mov rbx, qword [rbp + 0x50]
cmp rbx, 8
jae 0x1400625f1
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140062631
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043b70
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400f8070
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
bts r15d, 0x1a
or r15d, 0x20
mov dword [rsp + 0x44], r15d
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
jmp 0x140062678
mov r13, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x40]
test r15b, 0x20
je 0x1400626d4
and r15d, 0xffffffdf
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400626c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400626bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006395d
call fcn.1400f5c2c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
test r15b, 0x10
je 0x14006271a
and r15d, 0xffffffef
cmp r13, 8
jb 0x14006271a
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140062711
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063963
mov rcx, rsi
call fcn.1400f5c2c
nop
test r15b, 8
je 0x140062767
and r15d, 0xfffffff7
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x140062767
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062762
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063969
call fcn.1400f5c2c
mov r14, qword [rbp + 0xc0]
mov byte [r14 + 0x1a48], 1
jmp 0x140062a1f
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x804d8020
mov dword [rbp], 0x80708061
mov dword [rbp + 4], 0x80698046
mov dword [rbp + 8], 0x8065806c
mov dword [rbp + 0xc], 0x806e8041
mov dword [rbp + 0x10], 0x80438064
mov dword [rbp + 0x14], 0x80658068
mov dword [rbp + 0x18], 0x806b8063
mov dword [rbp + 0x1c], 0x80758053
mov dword [rbp + 0x20], 0x8057806d
mov dword [rbp + 0x24], 0x8020803a
mov dword [rbp + 0x28], 0x807d807b
mov dword [rbp + 0x2c], 0x8000
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rcx, qword [rbp + 0x40]
mov dword [rsp + 0x50], ebx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rsp + 0x50], 2
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], rcx
mov r12, 0xffffffffffffffff
mov rax, r12
inc rax
cmp word [rcx + rax*2], 0
jne 0x140062863
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.140022420
nop
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
lea r14, [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 8
setae byte [rsp + 0x40]
mov rsi, qword [rbp + 0x70]
cmovae r14, rsi
movabs rax, 0x7ffffffffffffffe
mov rbx, qword [rbp + 0x80]
cmp rbx, 8
jae 0x1400628dc
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140062912
mov rdi, rbx
or rdi, 7
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043b70
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400f8070
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
mov r15d, 0x38000000
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f620
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14006298a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062985
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006396f
call fcn.1400f5c2c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
cmp byte [rsp + 0x40], al
je 0x1400629d8
lea rdx, [r13*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400629cf
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063975
mov rcx, rsi
call fcn.1400f5c2c
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140062a18
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062a13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006397b
call fcn.1400f5c2c
mov r14, qword [rbp + 0xc0]
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r13 + 7]
lea rdi, [r14 + 0x620]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
mov qword [rsp + 0x70], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140062d29
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x80438020
mov dword [rbp], 0x80658072
mov dword [rbp + 4], 0x80748061
mov dword [rbp + 8], 0x80468065
mov dword [rbp + 0xc], 0x806c8069
mov dword [rbp + 0x10], 0x80578065
mov dword [rbp + 0x14], 0x8020803a
mov dword [rbp + 0x18], 0x807d807b
mov dword [rbp + 0x1c], 0x8020802c
mov dword [rbp + 0x20], 0x806f8066
mov dword [rbp + 0x24], 0x803a8072
mov dword [rbp + 0x28], 0x807b8020
mov dword [rbp + 0x2c], 0x8000807d
mov word [rbp + 0x30], r13w
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov dword [rsp + 0x50], ebx
mov qword [rbp + 0xb0], rdi
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rbp + 0xb0]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rsp + 0x50], 0xc2
lea rcx, [rbp + 0x90]
mov qword [rsp + 0x58], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xb0], xmm0
mov qword [rsp + 0x50], rax
nop dword [rax + rax]
inc r12
cmp word [rax + r12*2], 0
jne 0x140062b70
mov qword [rsp + 0x58], r12
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.140022420
nop
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea r15, [rbp + 0x70]
mov r12, qword [rbp + 0x88]
cmp r12, 8
setae r13b
mov r14, qword [rbp + 0x70]
cmovae r15, r14
mov rbx, qword [rbp + 0x80]
cmp rbx, 8
jae 0x140062be1
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov edi, 7
jmp 0x140062c21
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x60]
call fcn.140043b70
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1400f8070
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x50], rbx
lea rbx, [rbp - 0x60]
cmp rdi, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f620
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140062c93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062c8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063981
call fcn.1400f5c2c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
test r13b, r13b
je 0x140062ce0
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140062cd7
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063987
mov rcx, r14
call fcn.1400f5c2c
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x1400638f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062d1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006398d
call fcn.1400f5c2c
jmp 0x1400638f8
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov qword [rbp + 0xb0], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140062fb1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x80438020
mov dword [rbp], 0x80658072
mov dword [rbp + 4], 0x80748061
mov dword [rbp + 8], 0x80468065
mov dword [rbp + 0xc], 0x806c8069
mov dword [rbp + 0x10], 0x804d8065
mov dword [rbp + 0x14], 0x80708061
mov dword [rbp + 0x18], 0x80698070
mov dword [rbp + 0x1c], 0x8067806e
mov dword [rbp + 0x20], 0x803a8057
mov dword [rbp + 0x24], 0x807b8020
mov dword [rbp + 0x28], 0x8000807d
mov word [rbp + 0x2c], r13w
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov dword [rsp + 0x50], ebx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x50], 2
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x58], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rsp + 0x50], rax
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x140062e40
mov qword [rsp + 0x58], r12
lea r8, [rbp + 0xc0]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.140022420
nop
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea r15, [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 8
setae byte [rsp + 0x40]
mov r12, qword [rbp + 0x70]
cmovae r15, r12
mov rbx, qword [rbp + 0x80]
cmp rbx, 8
jae 0x140062eb3
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
mov r14d, 7
jmp 0x140062ef3
mov r14, rbx
or r14, 7
movabs rax, 0x7ffffffffffffffe
cmp r14, rax
cmova r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x60]
call fcn.140043b70
mov qword [rbp - 0x60], rax
lea r8, [rbx*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.1400f8070
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x50], rbx
lea rbx, [rbp - 0x60]
cmp r14, 8
cmovae rbx, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f620
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140062f65
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062f60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063945
call fcn.1400f5c2c
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
cmp byte [rsp + 0x40], al
je 0x140062f8e
lea r8, [r13 + 1]
mov rdx, r12
lea rcx, [rbp + 0x70]
call fcn.140043e70
nop
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x1400638e4
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043e70
jmp 0x1400638e4
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
setne byte [rsp + 0x40]
test rax, rax
jne 0x140063186
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov dword [rbp - 0x20], 0x80728045
mov dword [rbp - 0x1c], 0x806f8072
mov dword [rbp - 0x18], 0x802c8072
mov dword [rbp - 0x14], 0x80638020
mov dword [rbp - 0x10], 0x806c8061
mov dword [rbp - 0xc], 0x8069806c
mov dword [rbp - 8], 0x8067806e
mov dword [rbp - 4], 0x804d8020
mov dword [rbp], 0x80708061
mov dword [rbp + 4], 0x80698056
mov dword [rbp + 8], 0x80778065
mov dword [rbp + 0xc], 0x8066804f
mov dword [rbp + 0x10], 0x80698046
mov dword [rbp + 0x14], 0x8065806c
mov dword [rbp + 0x18], 0x8020803a
mov dword [rbp + 0x1c], 0x807d807b
mov dword [rbp + 0x20], 0x8000
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov dword [rbp + 0x60], r14d
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0x60], 2
lea rcx, [rbp + 0xc0]
mov qword [rbp + 0x68], rcx
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x60], rax
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x1400630b0
mov qword [rbp + 0x68], r12
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x90]
call fcn.140022420
nop
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x60]
call fcn.140043030
nop
lea r14, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r14, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f620
nop
mov r8, qword [rbp - 0x48]
cmp r8, 8
jb 0x14006312e
inc r8
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.140043e70
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
mov r8, qword [rbp + 0xa8]
cmp r8, 8
jb 0x140063163
inc r8
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x90]
call fcn.140043e70
nop
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x1400638d3
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043e70
jmp 0x1400638d3
movsxd rcx, dword [rax + 0x3c]
add rcx, rbx
mov eax, dword [rcx + 8]
mov dword [r14 + 0x1a38], eax
mov eax, dword [rcx + 0x58]
mov dword [r14 + 0x1a3c], eax
mov eax, dword [rcx + 0x28]
mov dword [r14 + 0x1a44], eax
mov eax, dword [rcx + 0x50]
mov dword [r14 + 0x1a40], eax
call fcn.14003cbe0
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1400632ae
mov dword [rbp - 0x20], 0x80788045
mov dword [rbp - 0x1c], 0x80658063
mov dword [rbp - 0x18], 0x80748070
mov dword [rbp - 0x14], 0x806f8069
mov dword [rbp - 0x10], 0x8020806e
mov dword [rbp - 0xc], 0x806f806d
mov dword [rbp - 8], 0x80758064
mov dword [rbp - 4], 0x8065806c
mov dword [rbp], 0x803a8020
mov dword [rbp + 4], 0x807b8020
mov dword [rbp + 8], 0x8000807d
xor eax, eax
mov word [rbp + 0xc], ax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14001a400
nop
or r15d, 0x40
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rax, qword [rbp + 0x70]
mov qword [rbp + 0x60], rax
lea r8, [r14 + 0x418]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001b5e0
nop
bts r15d, 7
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140043030
nop
bts r15d, 8
mov dword [rsp + 0x44], r15d
lea r14, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r14, qword [rbp - 0x60]
call fcn.14003cbe0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
mov r14, qword [rbp + 0xc0]
bt r15d, 8
jae 0x1400632e8
btr r15d, 8
mov r8, qword [rbp - 0x48]
cmp r8, 8
jb 0x1400632d4
inc r8
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.140043e70
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], ax
jmp 0x1400632ea
xor eax, eax
test r15b, r15b
jns 0x140063320
btr r15d, 7
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x140063310
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043e70
xor eax, eax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], ax
test r15b, 0x40
je 0x140063347
and r15d, 0xffffffbf
mov r8, qword [rbp + 0x88]
cmp r8, 8
jb 0x140063347
inc r8
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.140043e70
call fcn.14003cbe0
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140063480
mov r14, qword [r14 + 0x1a30]
mov dword [rbp - 0x20], 0x8066804f
mov dword [rbp - 0x1c], 0x80738066
mov dword [rbp - 0x18], 0x80748065
mov dword [rbp - 0x14], 0x80208020
mov dword [rbp - 0x10], 0x80208020
mov dword [rbp - 0xc], 0x80208020
mov dword [rbp - 8], 0x80208020
mov dword [rbp - 4], 0x80208020
mov dword [rbp], 0x803a8020
mov dword [rbp + 4], 0x807b8020
mov dword [rbp + 8], 0x8000807d
xor eax, eax
mov word [rbp + 0xc], ax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x90]
call fcn.14001a400
nop
bts r15d, 9
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rax, qword [rbp + 0x90]
mov qword [rbp + 0x70], r14
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x60], 0xe
lea rcx, [rbp + 0x70]
mov qword [rbp + 0x68], rcx
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x60], xmm0
mov qword [rbp + 0x60], rax
nop
inc r12
cmp word [rax + r12*2], 0
jne 0x140063410
mov qword [rbp + 0x68], r12
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.140022420
nop
bts r15d, 0xa
mov dword [rsp + 0x44], r15d
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.140043030
nop
bts r15d, 0xb
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r14, qword [rbp + 0x40]
call fcn.14003cbe0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
nop
bt r15d, 0xb
jae 0x1400634ba
btr r15d, 0xb
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x1400634a6
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140043e70
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r14w
bt r15d, 0xa
jae 0x1400634d0
btr r15d, 0xa
lea rcx, [rbp - 0x20]
call fcn.140043eb0
nop
bt r15d, 9
jae 0x1400634e8
btr r15d, 9
lea rcx, [rbp + 0x90]
call fcn.140043eb0
call fcn.14003cbe0
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x1400635f6
mov dword [rbp - 0x60], 0x80688043
mov dword [rbp - 0x5c], 0x80638065
mov dword [rbp - 0x58], 0x8053806b
mov dword [rbp - 0x54], 0x806d8075
mov dword [rbp - 0x50], 0x80208020
mov dword [rbp - 0x4c], 0x80208020
mov dword [rbp - 0x48], 0x80208020
mov dword [rbp - 0x44], 0x80208020
mov dword [rbp - 0x40], 0x803a8020
mov dword [rbp - 0x3c], 0x807b8020
mov dword [rbp - 0x38], 0x8023803a
mov dword [rbp - 0x34], 0x807d8078
mov dword [rbp - 0x30], 0x8000
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
bts r15d, 0xc
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
mov r12, qword [rbp + 0xc0]
lea r8, [r12 + 0x1a3c]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14001b540
nop
bts r15d, 0xd
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140043030
nop
bts r15d, 0xe
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae r14, qword [rbp + 0x90]
call fcn.14003cbe0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
jmp 0x1400635fd
mov r12, qword [rbp + 0xc0]
bt r15d, 0xe
jae 0x140063616
btr r15d, 0xe
lea rcx, [rbp + 0x90]
call fcn.140043eb0
nop
bt r15d, 0xd
jae 0x14006362c
btr r15d, 0xd
lea rcx, [rbp - 0x20]
call fcn.140043eb0
nop
bt r15d, 0xc
jae 0x140063641
btr r15d, 0xc
lea rcx, [rbp + 0x40]
call fcn.140043eb0
call fcn.14003cbe0
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140063748
mov dword [rbp - 0x60], 0x806e8045
mov dword [rbp - 0x5c], 0x80728074
mov dword [rbp - 0x58], 0x80508079
mov dword [rbp - 0x54], 0x8069806f
mov dword [rbp - 0x50], 0x8074806e
mov dword [rbp - 0x4c], 0x80208020
mov dword [rbp - 0x48], 0x80208020
mov dword [rbp - 0x44], 0x80208020
mov dword [rbp - 0x40], 0x803a8020
mov dword [rbp - 0x3c], 0x807b8020
mov dword [rbp - 0x38], 0x8023803a
mov dword [rbp - 0x34], 0x807d8078
mov r14d, 0x8000
mov dword [rbp - 0x30], r14d
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
or r15d, r14d
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
lea r8, [r12 + 0x1a44]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14001b540
nop
bts r15d, 0x10
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140043030
nop
bts r15d, 0x11
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae r14, qword [rbp + 0x90]
call fcn.14003cbe0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
nop
bt r15d, 0x11
jae 0x140063761
btr r15d, 0x11
lea rcx, [rbp + 0x90]
call fcn.140043eb0
nop
bt r15d, 0x10
jae 0x140063777
btr r15d, 0x10
lea rcx, [rbp - 0x20]
call fcn.140043eb0
nop
mov r14d, 0x8000
test r14d, r15d
je 0x140063790
btr r15d, 0xf
lea rcx, [rbp + 0x40]
call fcn.140043eb0
call fcn.14003cbe0
mov rcx, qword [rax]
cmp dword [rcx], 0
je 0x140063893
mov dword [rbp - 0x60], 0x80698054
mov dword [rbp - 0x5c], 0x8065806d
mov dword [rbp - 0x58], 0x80748053
mov dword [rbp - 0x54], 0x806d8061
mov dword [rbp - 0x50], 0x80208070
mov dword [rbp - 0x4c], 0x80208020
mov dword [rbp - 0x48], 0x80208020
mov dword [rbp - 0x44], 0x80208020
mov dword [rbp - 0x40], 0x803a8020
mov dword [rbp - 0x3c], 0x807b8020
mov dword [rbp - 0x38], 0x8023803a
mov dword [rbp - 0x34], 0x807d8078
mov dword [rbp - 0x30], r14d
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x40]
call fcn.14001a400
nop
bts r15d, 0x12
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rax, qword [rbp + 0x40]
mov qword [rbp + 0x60], rax
lea r8, [r12 + 0x1a38]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14001b540
nop
bts r15d, 0x13
mov dword [rsp + 0x44], r15d
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140043030
nop
bts r15d, 0x14
mov dword [rsp + 0x44], r15d
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae r14, qword [rbp + 0x90]
call fcn.14003cbe0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._BDREINIT__::_CrashedModuleInfo::FillExeHeaderInformation____
xor edx, edx
mov rcx, rax
call fcn.14003f620
nop
bt r15d, 0x14
jae 0x1400638ac
btr r15d, 0x14
lea rcx, [rbp + 0x90]
call fcn.140043eb0
nop
bt r15d, 0x13
jae 0x1400638c2
btr r15d, 0x13
lea rcx, [rbp - 0x20]
call fcn.140043eb0
nop
bt r15d, 0x12
jae 0x1400638d3
lea rcx, [rbp + 0x40]
call fcn.140043eb0
nop
cmp byte [rsp + 0x40], 0
je 0x1400638e4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
nop
lea rax, [rdi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400638f8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rax, [rsi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14006390c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x80]
call fcn.14003bd90
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1400f5be0
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
int3