Function at 0x100449ad0
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x260
mov rax, qword [0x100499010]
xor rax, rsp
mov qword [rsp + 0x250], rax
mov rbp, rdx
lea rcx, [rsp + 0x50]
xor edx, edx
mov r8d, 0x200
call sub.VCRUNTIME140.dll_memset
xor r15d, r15d
mov edi, r15d
mov dword [rsp + 0x40], r15d
call fcn.1004342d0
movzx ebx, al
lea rcx, [0x1004a8ef0]
mov rax, qword [0x1004a90d0]
call qword [case.0x10044bd0b.0]
test eax, eax
jne 0x100449b6a
cmp dword [0x1004a8ebc], r15d
je 0x100449b5d
test bl, bl
je 0x100449b5d
lea rdx, str.CreateSharedJobList
lea rcx, str.__s_____Waiting_for_CritSec__n
call fcn.10043bdc0
lea rcx, [0x1004a8ef0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x1004a8ebc], edi
je 0x100449b89
test bl, bl
je 0x100449b89
lea rdx, str.CreateSharedJobList
lea rcx, str.__s_____Enters_CritSec__n
call fcn.10043bdc0
mov eax, dword [0x1004a8ecc]
test rbp, rbp
mov rcx, qword [0x10049b798]
mov r14d, 1
cmovne eax, r14d
imul ebx, eax, 0x24c
add ebx, 4
test rcx, rcx
je 0x100449bbe
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x10049b798], r15
lea rsi, str.MSSQLSERVER
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rsi + rax*2], di
jne 0x100449bd0
add eax, 0x1d
cmp eax, 0x100
jle 0x100449c17
lea r9, str.SQLServerAgent
xor r8d, r8d
lea rdx, str.Internal_Error:_Buffer_overrun_in_MakeInstanceSafeName______s_shutting_down...
mov ecx, r14d
call fcn.100432180
mov rcx, qword [0x1004a90e0]
test rcx, rcx
je 0x100449cdb
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x100449cdb
lea r8, str.SQLServerAgentJobListMemory
mov word [rsp + 0x50], r15w
lea rax, [rsp + 0x50]
mov edx, 0x100
sub r8, rax
lea rcx, [rsp + 0x50]
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefe]
test rax, rax
je 0x100449c62
movzx eax, word [r8 + rcx]
test ax, ax
je 0x100449c62
mov word [rcx], ax
add rcx, 2
sub rdx, r14
jne 0x100449c40
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
call fcn.10044da70
cmp byte [rax + 0xc8], dil
jne 0x100449ca7
lea r8, [0x1004777a0]
mov edx, 0x100
lea rcx, [rsp + 0x50]
call fcn.10040d600
mov r8, rsi
lea rcx, [rsp + 0x50]
mov edx, 0x100
call fcn.10040d600
cmp dword [0x1004a9184], edi
je 0x100449cdb
lea r8, [0x10047773c]
mov edx, 0x100
lea rcx, [rsp + 0x50]
call fcn.10040d600
lea r8, [0x1004a9cf0]
mov edx, 0x100
lea rcx, [rsp + 0x50]
call fcn.10040d600
mov rdx, qword [0x1004a9178]
lea rax, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r8d, [r9 + 4]
lea rcx, [r9 - 1]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [0x10049b798], rax
test rax, rax
je 0x100449df6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x10049b798]
cmp eax, 0xb7
je 0x100449d59
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rsi, rax
test rax, rax
jne 0x100449da1
xor edx, edx
mov r8d, 0x94
mov ecx, r14d
call fcn.100432180
mov rcx, qword [0x10049b798]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x10049b798], r15
call fcn.1004342d0
lea rcx, [0x1004a8ef0]
movzx ebx, al
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x1004a8ebc], edi
je 0x100449d9a
test bl, bl
je 0x100449d9a
lea rdx, str.CreateSharedJobList
lea rcx, str.__s_____Leaves_CritSec__n
call fcn.10043bdc0
xor al, al
jmp 0x100449e35
mov dword [rax], r15d
lea rbx, [rax + 4]
test rbp, rbp
je 0x100449e62
lea rax, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x30], rax
lea rcx, [0x1004a8ec0]
lea rax, [fcn.100427860]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.SQLSVC.dll_SHRecMemBSLocate]
mov r8, rax
test rax, rax
jne 0x100449e92
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
call fcn.1004342d0
lea rcx, [0x1004a8ef0]
movzx ebx, al
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x1004a8ebc], r15d
je 0x100449e2b
test bl, bl
je 0x100449e2b
lea rdx, str.CreateSharedJobList
lea rcx, str.__s_____Leaves_CritSec__n
call fcn.10043bdc0
cmp qword [0x10049b798], r15
setne al
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.100469360
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
cmp edi, dword [0x1004a8ecc]
jge 0x100449ded
mov edx, edi
lea rcx, [0x1004a8ec0]
call qword [sym.imp.SQLSVC.dll_SHRecMemLock]
mov r8, rax
test rax, rax
je 0x100449fcd
cmp dword [rax + 0x12e0], r15d
jne 0x100449fcd
movups xmm0, xmmword [r8]
lea rax, [rbx + 0x10]
mov r9, r8
mov edx, 0x84
sub r9, rax
movups xmmword [rbx], xmm0
nop dword [rax + rax]
lea rcx, [rdx + 0x7fffff7a]
test rcx, rcx
je 0x100449ed6
movzx ecx, word [r9 + rax + 0x228]
test cx, cx
je 0x100449ed6
mov word [rax], cx
add rax, 2
sub rdx, r14
jne 0x100449eb0
lea rcx, [rax - 2]
test rdx, rdx
mov r9, r8
mov edx, 0x84
cmovne rcx, rax
mov word [rcx], r15w
lea rcx, [rbx + 0x134]
mov eax, dword [r8 + 0x358]
sub r9, rcx
mov dword [rbx + 0x118], eax
mov eax, dword [r8 + 0x35c]
mov dword [rbx + 0x11c], eax
mov eax, dword [r8 + 0x360]
mov dword [rbx + 0x120], eax
mov eax, dword [r8 + 0x364]
mov dword [rbx + 0x124], eax
mov eax, dword [r8 + 0x598]
mov dword [rbx + 0x128], eax
mov eax, dword [r8 + 0x368]
mov dword [rbx + 0x12c], eax
mov eax, dword [r8 + 0x36c]
mov dword [rbx + 0x130], eax
lea rax, [rdx + 0x7fffff7a]
test rax, rax
je 0x100449f78
movzx eax, word [r9 + rcx + 0x370]
test ax, ax
je 0x100449f78
mov word [rcx], ax
add rcx, 2
sub rdx, r14
jne 0x100449f52
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r15w
mov eax, dword [r8 + 0x588]
mov dword [rbx + 0x23c], eax
mov eax, dword [r8 + 0x58c]
mov dword [rbx + 0x240], eax
mov eax, dword [r8 + 0x590]
mov dword [rbx + 0x244], eax
mov eax, dword [r8 + 0x594]
mov dword [rbx + 0x248], eax
inc dword [rsi]
test rbp, rbp
jne 0x100449ded
add rbx, 0x24c
inc edi
jmp 0x100449e62