Function at 0x1400166f0
Capabilities:
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov rdi, r8
mov r15, rdx
mov rbx, rcx
mov r13, qword [str.SetupPhase]
lea rax, str.ProcessCORMeta
mov qword [str.SetupPhase], rax
cmp rcx, qword [0x1401fa530]
jne 0x140081ac2
mov r12b, 1
xor r14d, r14d
mov qword [rbp - 0x61], r14
mov rcx, qword [rdx + 0x140]
mov rax, qword [rcx]
mov r9, qword [rax + 0x50]
mov rax, qword [r8 + 0x10]
mov rdx, rdi
sub rdx, qword [rax + 0xd0]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rdx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
inc edx
lea r8, [rbp - 0x61]
call r9
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081db3
mov rdx, r15
mov rcx, qword [rbp - 0x61]
call fcn.140058b4c
mov rsi, rax
cmp rax, qword [0x1401fa458]
je 0x140081db3
mov eax, dword [0x1401fa544]
lea ecx, [rax - 1]
test ecx, 0xfffffffb
je 0x140081da1
test r12b, r12b
je 0x140081adc
cmp eax, 6
jne 0x140081aca
mov rcx, rbx
call fcn.14003c930
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x19], r14
mov rcx, qword [rbp - 0x61]
mov rax, qword [rcx]
lea rdx, [rbp - 0x21]
call qword [rax + 0x48]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d94
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
lea r8, [rbp + 0x7f]
lea rdx, [rbp - 0x19]
call qword [rax + 0x18]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d94
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x140081d94
mov r8d, dword [rdi + 8]
cmp dword [rbp + 0x7f], r8d
jne 0x140081d94
mov rcx, qword [0x1401f72e0]
test r12b, r12b
cmovne rcx, qword [0x1401f7450]
mov rax, qword [rcx]
lea r9, [rbp - 0x59]
mov qword [rsp + 0x28], r9
lea r9, [0x1401a2ba8]
mov qword [rsp + 0x20], r9
mov r9d, 2
call qword [rax + 0x28]
mov ebx, eax
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081b15
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
lea r8, [rbp - 0x51]
lea rdx, [0x1401a5af8]
call qword [rax]
mov ebx, eax
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081b29
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ebx, eax
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081b3c
mov qword [rbp - 0x29], r14
mov rcx, qword [r15 + 0x140]
mov rax, qword [rcx]
lea rdx, [rbp - 0x29]
call qword [rax + 0x68]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081b4f
mov qword [rbp - 0x31], r14
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
lea rdx, [rbp - 0x31]
call qword [rax + 0x38]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081b5d
mov rcx, r14
mov qword [rbp - 0x69], rcx
nop dword [rax]
mov rbx, qword [rbp - 0x31]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x18]
test rcx, rcx
je 0x14001692a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbp - 0x69], r14
lea r9, [rbp - 9]
lea r8, [rbp - 0x69]
mov edx, 1
mov rcx, rbx
call rdi
test eax, eax
js 0x140016994
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x140016994
mov rax, qword [rcx]
lea rdx, [rbp - 1]
call qword [rax + 0x48]
test eax, eax
js 0x140081b6b
mov rbx, qword [rbp - 1]
test rbx, rbx
je 0x14001698f
cmp rbx, rsi
jne 0x140016989
mov rcx, qword [rbp - 0x69]
mov rax, qword [rcx]
lea rdx, [rbp + 0x67]
call qword [rax + 0x30]
test eax, eax
js 0x140081d3f
cmp byte [rbp + 0x67], 0x6b
je 0x140081b78
mov rcx, qword [rbp - 0x69]
jmp 0x140016910
mov rbx, r15
jmp 0x140016964
mov qword [rbp - 0x11], r14
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
lea rdx, [rbp - 0x41]
mov qword [rsp + 0x20], rdx
mov r9d, 1
lea r8, [rbp - 0x3d]
lea rdx, [rbp - 0x11]
call qword [rax + 0x30]
test eax, eax
js 0x1400169c7
cmp dword [rbp - 0x41], 1
je 0x140016af4
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
mov rdx, qword [rbp - 0x11]
call qword [rax + 0x18]
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, 0x48
call qword [sym.imp.tbbmalloc.dll_scalable_malloc]
mov rbx, rax
test rax, rax
je 0x140081d87
mov qword [rbp + 0x67], rax
lea rcx, [rax + 8]
mov edx, 0x1fd
call fcn.1400517ec
lea rax, [0x1401a37e8]
mov qword [rbx], rax
mov dword [rbx + 0x40], 1
mov qword [rsi + 0x60], rbx
mov ecx, 0x18
call qword [sym.imp.tbbmalloc.dll_scalable_malloc]
mov r9, rax
test rax, rax
je 0x140081d87
lea rax, [0x1401a5a98]
mov qword [r9], rax
mov dword [r9 + 8], 1
mov qword [r9 + 0x10], rsi
mov qword [rsi + 0x68], r9
mov rcx, qword [0x1401f72e8]
test r12b, r12b
cmovne rcx, qword [0x1401f7458]
mov rax, qword [rcx]
mov r8, qword [rsi + 0x60]
mov rdx, qword [rbp - 0x59]
call qword [rax + 0x190]
mov ebx, eax
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d67
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [str.SetupPhase], r13
mov rcx, qword [rbp - 0x69]
test rcx, rcx
jne 0x140081d7b
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x140016ab0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x140016ac0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x140016ad0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x140016ae0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
mov edx, dword [rbp - 0x3d]
call qword [rax + 0x20]
mov ebx, eax
mov ecx, eax
call fcn.14003394c
test al, al
je 0x140016998
jmp 0x140081d54
xor r12b, r12b
jmp 0x140016737
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x140016ae0
jmp 0x140016ad9
cmp byte [0x1401fa4b8], 0
je 0x1400167d0
mov edx, 0x1799
mov rcx, r15
call fcn.1400583f4
mov cl, 1
call fcn.140005b0c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14000510c
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor r9d, r9d
mov r8d, ebx
mov edx, 0x4bf
mov rcx, rsi
call fcn.1400c8498
int3
mov r9b, 1
mov r8d, ebx
mov edx, 0x4bf
xor ecx, ecx
call fcn.1400c8498
int3
xor r9d, r9d
mov r8d, ebx
mov edx, 0x4bf
xor ecx, ecx
call fcn.1400c8498
nop
mov edx, 0x4d3
mov rcx, rsi
call fcn.140124a00
nop
mov edx, 0x4d3
mov rcx, rsi
call fcn.140124a00
nop
mov ecx, eax
call fcn.1400eb398
nop
jmp 0x14001698f
mov qword [rbp - 0x39], r14
mov dword [rbp + 0x6f], r14d
mov rcx, qword [rbp - 0x69]
mov rax, qword [rcx]
lea rdx, [rbp - 0x39]
call qword [rax + 0x40]
test eax, eax
js 0x140081d31
mov rcx, qword [rbp - 0x39]
mov rax, qword [rcx]
lea r8, [rbp - 5]
lea rdx, [rbp + 7]
call qword [rax + 0x18]
test eax, eax
js 0x140081d31
lea rdx, [rbp + 0x6f]
mov rcx, qword [rbp + 7]
call fcn.1400b8e08
test al, al
je 0x140081d31
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x140081bd5
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x69]
mov rax, qword [rcx]
lea rdx, [rbp + 0x77]
call qword [rax + 0x20]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d46
mov eax, dword [rbp + 0x77]
test eax, eax
jle 0x140081c2d
lea rcx, [rax + rax*2]
shl rcx, 5
mov rax, qword [r15 + 0xd0]
mov edx, dword [rcx + rax - 0x5c]
bt edx, 0xc
jae 0x140081c2d
mov eax, dword [rcx + rax - 0x10]
and eax, 0xf
cmp eax, 8
je 0x140081c23
cmp eax, 5
jne 0x140081c2d
bt edx, 0xb
jb 0x140016989
mov rcx, qword [rbp - 0x51]
mov rax, qword [rcx]
mov r14d, dword [rbp + 0x6f]
mov edx, r14d
call qword [rax + 0x20]
mov edi, eax
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d1d
mov eax, dword [rbp + 0x77]
test eax, eax
jg 0x140081c63
cmp eax, 0xffffffff
je 0x140081c63
xor r14d, r14d
jmp 0x140016989
mov qword [rbp + 0x6f], 0
mov rcx, qword [rbp - 0x69]
mov rax, qword [rcx]
lea rdx, [rbp + 0x6f]
call qword [rax + 0x60]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d0f
lea rdx, [rbp + 0x6f]
mov rcx, r15
call fcn.140131f5c
mov rdi, rax
test rax, rax
je 0x140081d0f
mov rcx, qword [rbp - 0x69]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0x28]
lea rdx, [rbp - 0x45]
call r8
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d0f
mov rax, qword [rdi]
lea rdx, [rbp - 0x49]
mov rcx, rdi
call qword [rax + 0xa8]
mov ecx, eax
call fcn.14003394c
test al, al
jne 0x140081d0f
mov eax, dword [rbp - 0x49]
cmp dword [rbp - 0x45], eax
jbe 0x140081d0f
mov ecx, eax
mov rax, qword [0x1401fa518]
mov dword [rax + rcx*4], r14d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rbp + 0x6f]
test rcx, rcx
je 0x140081d03
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x69]
xor r14d, r14d
jmp 0x140016910
mov edx, 0x4d3
mov rcx, rbx
call fcn.140124a00
nop
xor r9d, r9d
mov r8d, edi
mov edx, 0x4bf
mov rcx, rbx
call fcn.1400c8498
nop
mov edx, 0x4d3
mov rcx, rbx
call fcn.140124a00
nop
mov ecx, eax
call fcn.1400eb398
mov edx, 0x4d3
mov rcx, rbx
call fcn.140124a00
int3
xor r9d, r9d
mov r8d, ebx
mov edx, 0x4bf
xor ecx, ecx
call fcn.1400c8498
int3
xor r9d, r9d
mov r8d, ebx
mov edx, 0x4bf
mov rcx, rsi
call fcn.1400c8498
nop
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x140016aa0
mov edx, 0x44e
xor ecx, ecx
call fcn.14005e3e8
nop
mov edx, 0x4d4
xor ecx, ecx
call fcn.14005e3e8
nop
mov rcx, qword [rbp - 0x61]
test rcx, rcx
je 0x140016ae0
jmp 0x140016ad9
mov edx, 0x4d4
xor ecx, ecx
call fcn.14005e3e8
int3