Biew:
File : a03.exe                      Size :     3072 bytes
00000400:a4833C9                         xor       rcx,rcx
00000403:aE84C010000                     calln     file:00000554
00000408:a48890509200000                 mov       [rip+00002009],rax
0000040F:aBA007F0000                     mov       edx,00007F00
00000414:a4833C9                         xor       rcx,rcx
00000417:aE844010000                     calln     file:00000560
0000041C:a488905FD1F0000                 mov       [rip+00001FFD],rax
00000423:a4889051E200000                 mov       [rip+0000201E],rax
0000042A:aBA007F0000                     mov       edx,00007F00
0000042F:a4833C9                         xor       rcx,rcx
00000432:aE82F010000                     calln     file:00000566
00000437:a488905EA1F0000                 mov       [rip+00001FEA],rax
0000043E:a488D0DBB1F0000                 lea       rcx,[rip+00001FBB]
00000445:aE822010000                     calln     file:0000056C
0000044A:a6A00                           push (d)  +00
0000044C:aFF35C61F0000                   push (d)  [rip+00001FC6]
00000452:a6A00                           push (d)  +00
00000454:a6A00                           push (d)  +00
00000456:a6800000080                     push      80000000
0000045B:a6800000080                     push      80000000
00000460:a6800000080                     push      80000000
00000465:a6800000080                     push      80000000
0000046A:a4883EC20                       sub (q)   rsp,+20
0000046E:a41B90000CF00                   mov       r9d,00CF0000
00000474:a4C8D05D51F0000                 lea       r8,[rip+00001FD5]
0000047B:a488D15D41F0000                 lea       rdx,[rip+00001FD4]
00000482:a4833C9                         xor       rcx,rcx
00000485:aE8E8000000                     calln     file:00000572
0000048A:a4883C460                       add (q)   rsp,+60
0000048E:a4889055B200000                 mov       [rip+0000205B],rax
00000495:aBA0A000000                     mov       edx,0000000A
0000049A:a488B0D4F200000                 mov       rcx,[rip+0000204F]
000004A1:aE8D2000000                     calln     file:00000578
000004A6:a488B0D43200000                 mov       rcx,[rip+00002043]
000004AD:aE8CC000000                     calln     file:0000057E
000004B2:a4D33C9                         xor       r9,r9
000004B5:a4D33C0                         xor       r8,r8
000004B8:a4833D2                         xor       rdx,rdx
000004BB:a488D0D36200000                 lea       rcx,[rip+00002036]
000004C2:aE8BD000000                     calln     file:00000584
000004C7:a480BC0                         or        rax,rax
000004CA:a741A                           je        file:000004E6
000004CC:a488D0D25200000                 lea       rcx,[rip+00002025]
000004D3:aE8B2000000                     calln     file:0000058A
000004D8:a488D0D19200000                 lea       rcx,[rip+00002019]
000004DF:aE8AC000000                     calln     file:00000590
000004E4:aEBCC                           jmps      file:000004B2
000004E6:a488B0D1B200000                 mov       rcx,[rip+0000201B]
000004ED:aE868000000                     calln     file:0000055A
000004F2:a4883FA02                       cmp (q)   rdx,+02
000004F6:a7515                           jne       file:0000050D
000004F8:a51                             push      rcx
000004F9:a52                             push      rdx
000004FA:a4150                           push      r8
000004FC:a4151                           push      r9
000004FE:aE893000000                     calln     file:00000596
00000503:a4159                           pop       r9
00000505:a4159                           pop       r9
00000507:a5A                             pop       rdx
00000508:a59                             pop       rcx
00000509:a4833C0                         xor       rax,rax
0000050C:aC3                             retn
0000050D:a4883FA10                       cmp (q)   rdx,+10
00000511:a752F                           jne       file:00000542
00000513:a51                             push      rcx
00000514:a52                             push      rdx
00000515:a4150                           push      r8
00000517:a4151                           push      r9
00000519:a41B904000000                   mov       r9d,00000004
0000051F:a4C8D05411F0000                 lea       r8,[rip+00001F41]
00000526:a488D15521F0000                 lea       rdx,[rip+00001F52]
0000052D:aE870000000                     calln     file:000005A2
00000532:a4159                           pop       r9
00000534:a4159                           pop       r9
00000536:a5A                             pop       rdx
00000537:a59                             pop       rcx
00000538:a4883F807                       cmp (q)   rax,+07
0000053C:a7504                           jne       file:00000542
0000053E:a4833C0                         xor       rax,rax
00000541:aC3                             retn
00000542:a51                             push      rcx
00000543:a52                             push      rdx
00000544:a4150                           push      r8
00000546:a4151                           push      r9
00000548:aE84F000000                     calln     file:0000059C
0000054D:a4159                           pop       r9
0000054F:a4159                           pop       r9
00000551:a5A                             pop       rdx
00000552:a59                             pop       rcx
00000553:aC3                             retn
00000554:aFF25AE0E0000                   jmp (d)   [rip+00000EAE]
0000055A:aFF25A00E0000                   jmp (d)   [rip+00000EA0]
00000560:aFF25B20E0000                   jmp (d)   [rip+00000EB2]
00000566:aFF25B40E0000                   jmp (d)   [rip+00000EB4]
0000056C:aFF25B60E0000                   jmp (d)   [rip+00000EB6]
00000572:aFF25B80E0000                   jmp (d)   [rip+00000EB8]
00000578:aFF25BA0E0000                   jmp (d)   [rip+00000EBA]
0000057E:aFF25BC0E0000                   jmp (d)   [rip+00000EBC]
00000584:aFF25BE0E0000                   jmp (d)   [rip+00000EBE]
0000058A:aFF25C00E0000                   jmp (d)   [rip+00000EC0]
00000590:aFF25C20E0000                   jmp (d)   [rip+00000EC2]
00000596:aFF25C40E0000                   jmp (d)   [rip+00000EC4]
0000059C:aFF25C60E0000                   jmp (d)   [rip+00000EC6]
000005A2:aFF25C80E0000                   jmp (d)   [rip+00000EC8]

WinDbg:
CommandLine: D:\asm\prog\a64\01d\a03.exe
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is: 
ModLoad: 00000000`00400000 00000000`00404000   image00000000`00400000
ModLoad: 00000000`78ec0000 00000000`78ff9000   ntdll.dll
ModLoad: 00000000`78d40000 00000000`78eb2000   C:\WINDOWS\system32\kernel32.dll
ModLoad: 00000000`78c30000 00000000`78d3c000   C:\WINDOWS\system32\USER32.dll
ModLoad: 000007ff`7fc90000 000007ff`7fd28000   C:\WINDOWS\system32\GDI32.dll
(740.294): Break instruction exception - code 80000003 (first chance)
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll - 
ntdll!DbgBreakPoint:
00000000`78ef3320 cc               int     3
0:000> bp 401000
*** WARNING: Unable to verify checksum for image00000000`00400000
*** ERROR: Module load completed but symbols could not be loaded for image00000000`00400000
0:000> bp 4010f2
0:000> g
Breakpoint 0 hit
image00000000_00400000+0x1000:
00000000`00401000 4833c9           xor     rcx,rcx
0:000> g
ModLoad: 000007ff`7a240000 000007ff`7a2df000   C:\WINDOWS\system32\MSCTF.dll
ModLoad: 000007ff`7fee0000 000007ff`7ffe5000   C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 000007ff`7fd30000 000007ff`7fed9000   C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 000007ff`7fc00000 000007ff`7fc86000   C:\WINDOWS\system32\msvcrt.dll
Breakpoint 1 hit
image00000000_00400000+0x10f2:
00000000`004010f2 4883fa02         cmp     rdx,0x2
0:000> r rdx
rdx=0000000000000024
0:000> p
image00000000_00400000+0x10f6:
00000000`004010f6 7515 jnz image00000000_00400000+0x110d (000000000040110d) [br=1]
0:000> p
image00000000_00400000+0x110d:
00000000`0040110d 4883fa10         cmp     rdx,0x10
0:000> p
image00000000_00400000+0x1111:
00000000`00401111 752f jnz image00000000_00400000+0x1142 (0000000000401142) [br=1]
0:000> p
image00000000_00400000+0x1142:
00000000`00401142 51               push    rcx
0:000> p
image00000000_00400000+0x1143:
00000000`00401143 52               push    rdx
0:000> p
image00000000_00400000+0x1144:
00000000`00401144 4150             push    r8
0:000> p
image00000000_00400000+0x1146:
00000000`00401146 4151             push    r9
0:000> p
image00000000_00400000+0x1148:
00000000`00401148 e84f000000 call image00000000_00400000+0x119c (000000000040119c)
0:000> p
image00000000_00400000+0x114d:
00000000`0040114d 4159             pop     r9
0:000> p
image00000000_00400000+0x114f:
00000000`0040114f 4159             pop     r9
0:000> p
image00000000_00400000+0x1151:
00000000`00401151 5a               pop     rdx
0:000> p
image00000000_00400000+0x1152:
00000000`00401152 59               pop     rcx
0:000> p
image00000000_00400000+0x1153:
00000000`00401153 c3               ret
0:000> g
Breakpoint 1 hit
image00000000_00400000+0x10f2:
00000000`004010f2 4883fa02         cmp     rdx,0x2
0:000> r rdx
rdx=0000000000000081
0:000> p
image00000000_00400000+0x10f6:
00000000`004010f6 7515 jnz image00000000_00400000+0x110d (000000000040110d) [br=1]
0:000> p
image00000000_00400000+0x110d:
00000000`0040110d 4883fa10         cmp     rdx,0x10
0:000> p
image00000000_00400000+0x1111:
00000000`00401111 752f jnz image00000000_00400000+0x1142 (0000000000401142) [br=1]
0:000> p
image00000000_00400000+0x1142:
00000000`00401142 51               push    rcx
0:000> p
image00000000_00400000+0x1143:
00000000`00401143 52               push    rdx
0:000> p
image00000000_00400000+0x1144:
00000000`00401144 4150             push    r8
0:000> p
image00000000_00400000+0x1146:
00000000`00401146 4151             push    r9
0:000> p
image00000000_00400000+0x1148:
00000000`00401148 e84f000000 call image00000000_00400000+0x119c (000000000040119c)
0:000> p
image00000000_00400000+0x114d:
00000000`0040114d 4159             pop     r9
0:000> g
Breakpoint 1 hit
image00000000_00400000+0x10f2:
00000000`004010f2 4883fa02         cmp     rdx,0x2
0:000> r rdx
rdx=0000000000000083
0:000> g
Breakpoint 1 hit
image00000000_00400000+0x10f2:
00000000`004010f2 4883fa02         cmp     rdx,0x2
0:000> r rdx
rdx=0000000000000001
0:000> p
image00000000_00400000+0x10f6:
00000000`004010f6 7515 jnz image00000000_00400000+0x110d (000000000040110d) [br=1]
0:000> p
image00000000_00400000+0x110d:
00000000`0040110d 4883fa10         cmp     rdx,0x10
0:000> p
image00000000_00400000+0x1111:
00000000`00401111 752f jnz image00000000_00400000+0x1142 (0000000000401142) [br=1]
0:000> p
image00000000_00400000+0x1142:
00000000`00401142 51               push    rcx
0:000> p
image00000000_00400000+0x1143:
00000000`00401143 52               push    rdx
0:000> p
image00000000_00400000+0x1144:
00000000`00401144 4150             push    r8
0:000> p
image00000000_00400000+0x1146:
00000000`00401146 4151             push    r9
0:000> p
image00000000_00400000+0x1148:
00000000`00401148 e84f000000 call image00000000_00400000+0x119c (000000000040119c)
0:000> p
image00000000_00400000+0x114d:
00000000`0040114d 4159             pop     r9
