Function at 0x140001260
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x18], r8d
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x30
mov r9, qword [rcx + 8]
mov rdi, rdx
mov r14, rcx
mov rax, qword [r9 + 8]
mov rbx, r9
cmp byte [rax + 0x19], 0
jne 0x1400012a9
cmp dword [rax + 0x20], r8d
jae 0x14000129d
mov rax, qword [rax + 0x10]
jmp 0x1400012a3
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140001291
cmp rbx, r9
je 0x1400012b4
cmp r8d, dword [rbx + 0x20]
jae 0x1400012ea
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
add rcx, 8
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov r8d, dword [rbp + 0x30]
cmp qword [rbx + 0x28], 0
je 0x140001365
mov rcx, qword [r14 + 8]
mov rbx, rcx
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x14000131a
cmp dword [rax + 0x20], r8d
jae 0x14000130e
mov rax, qword [rax + 0x10]
jmp 0x140001314
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140001302
cmp rbx, rcx
je 0x140001325
cmp r8d, dword [rbx + 0x20]
jae 0x140001357
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, dword [rbp + 0x30]
mov rcx, qword [r14 + 8]
mov rbx, rcx
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x14000138e
cmp dword [rax + 0x20], r8d
jae 0x140001382
mov rax, qword [rax + 0x10]
jmp 0x140001388
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140001376
cmp rbx, rcx
je 0x140001399
cmp r8d, dword [rbx + 0x20]
jae 0x1400013cf
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov r8d, dword [rbp + 0x30]
cmp qword [rbx + 0x30], 0
je 0x1400014c2
mov rcx, qword [r14 + 8]
mov rbx, rcx
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x140001408
nop dword [rax + rax]
cmp dword [rax + 0x20], r8d
jae 0x1400013fc
mov rax, qword [rax + 0x10]
jmp 0x140001402
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400013f0
cmp rbx, rcx
je 0x140001413
cmp r8d, dword [rbx + 0x20]
jae 0x140001445
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, qword [r14 + 8]
mov ecx, dword [rbp + 0x30]
mov rax, qword [rdx + 8]
mov rbx, rdx
cmp byte [rax + 0x19], 0
jne 0x14000147a
cmp dword [rax + 0x20], ecx
jae 0x14000146e
mov rax, qword [rax + 0x10]
jmp 0x140001474
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140001463
cmp rbx, rdx
je 0x140001484
cmp ecx, dword [rbx + 0x20]
jae 0x1400014b6
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov qword [rbx + 0x30], 0
mov r8d, dword [rbp + 0x30]
cmp qword [rdi + 0x18], 8
jb 0x1400014cc
mov rdi, qword [rdi]
mov rcx, qword [r14 + 8]
mov rbx, rcx
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400014f8
nop dword [rax]
cmp dword [rax + 0x20], r8d
jae 0x1400014ec
mov rax, qword [rax + 0x10]
jmp 0x1400014f2
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400014e0
cmp rbx, rcx
je 0x140001503
cmp r8d, dword [rbx + 0x20]
jae 0x140001535
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
xor r9d, r9d
xor edx, edx
or rcx, 0xffffffffffffffff
lea r8d, [r9 + 4]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x20000
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rbx + 0x28], rax
mov rdx, qword [r14 + 8]
mov ecx, dword [rbp + 0x30]
mov rax, qword [rdx + 8]
mov rbx, rdx
cmp byte [rax + 0x19], 0
jne 0x140001587
nop dword [rax]
cmp dword [rax + 0x20], ecx
jae 0x14000157b
mov rax, qword [rax + 0x10]
jmp 0x140001581
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140001570
cmp rbx, rdx
je 0x140001591
cmp ecx, dword [rbx + 0x20]
jae 0x1400015c6
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov ecx, dword [rbp + 0x30]
cmp qword [rbx + 0x28], 0
je 0x1400016c7
mov rdx, qword [r14 + 8]
mov rdi, rdx
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400015f9
cmp dword [rax + 0x20], ecx
jae 0x1400015ed
mov rax, qword [rax + 0x10]
jmp 0x1400015f3
mov rdi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400015e2
cmp rdi, rdx
je 0x140001603
cmp ecx, dword [rdi + 0x20]
jae 0x140001638
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rdi
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rdi, qword [rbp + 0x20]
mov ecx, dword [rbp + 0x30]
mov rdx, qword [r14 + 8]
mov rbx, rdx
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x140001667
nop dword [rax]
cmp dword [rax + 0x20], ecx
jae 0x14000165b
mov rax, qword [rax + 0x10]
jmp 0x140001661
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140001650
cmp rbx, rdx
je 0x140001671
cmp ecx, dword [rbx + 0x20]
jae 0x1400016a3
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
mov rcx, qword [rdi + 0x28]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 6]
mov qword [rsp + 0x20], 0x20000
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rbx + 0x30], rax
mov ecx, dword [rbp + 0x30]
mov rdx, qword [r14 + 8]
mov rbx, rdx
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400016ef
cmp dword [rax + 0x20], ecx
jae 0x1400016e3
mov rax, qword [rax + 0x10]
jmp 0x1400016e9
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400016d8
cmp rbx, rdx
je 0x1400016f9
cmp ecx, dword [rbx + 0x20]
jae 0x14000172b
lea rax, [rbp + 0x30]
lea r8, [rbp + 0x20]
lea rcx, [r14 + 8]
mov qword [rbp + 0x20], rax
call fcn.140008790
lea rdx, [rbp + 0x20]
lea rcx, [r14 + 8]
lea r9, [rax + 0x20]
mov r8, rbx
mov qword [rsp + 0x20], rax
call fcn.1400087d0
mov rbx, qword [rbp + 0x20]
cmp qword [rbx + 0x30], 0
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x58]
setne al
mov byte [r14 + 0x20], al
add rsp, 0x30
pop r14
pop rdi
pop rbp
ret