Function at 0x140103dc0
Capabilities:
Read file via mapping

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r14, r9
mov r15, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x1401fdbb8]
xor rax, rsp
mov qword [rsp + 0x80], rax
call fcn.140104350
mov edi, eax
test eax, eax
jne 0x140104139
mov r12d, dword [rsp + 0xf0]
cmp byte [r15 + 0x10], 1
mov r13, r12
jne 0x140103e19
mov r13, qword [r15 + 8]
add r13, r12
cmp byte [r14 + 0x10], 1
jne 0x140103e24
add r13, qword [r14 + 8]
mov rax, r13
shr rax, 0x20
jne 0x140104276
mov rbp, qword [rsp + 0xf8]
lea rdi, [rsi + 0x28]
mov dword [rsp + 0x20], r13d
mov qword [rsp + 0x28], 0
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, 0x8000004
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rcx, rdi
mov rdx, rax
call fcn.140002910
mov rcx, qword [rsi + 0x28]
lea rax, [rcx + 1]
cmp rax, 1
ja 0x140103e8f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp], eax
mov edi, 0x19
jmp 0x140104139
mov qword [rsp + 0x20], 0
mov edx, 6
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14010411b
mov rcx, rax
cmp byte [r15 + 0x10], 1
mov rdi, r12
mov qword [rsp + 0x38], rax
jne 0x140103ff6
mov r8, qword [r15 + 8]
test r8, r8
je 0x140103fdc
lea rbp, [rcx + r12]
mov rdi, qword [r15]
mov rcx, rbp
mov rdx, rdi
call fcn.140176c30
mov rax, qword [rbp]
test rax, rax
je 0x140103ef7
sub rax, rdi
mov qword [rbp], rax
mov rax, qword [rbp + 8]
test rax, rax
je 0x140103f07
sub rax, rdi
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x10]
test rax, rax
mov rcx, qword [rsp + 0x38]
je 0x140103f1c
sub rax, rdi
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x140103f2c
sub rax, rdi
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x140103f3c
sub rax, rdi
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x28]
test rax, rax
je 0x140103f4c
sub rax, rdi
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x140103f5c
sub rax, rdi
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x38]
test rax, rax
je 0x140103f6c
sub rax, rdi
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x40]
test rax, rax
je 0x140103f7c
sub rax, rdi
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x48]
test rax, rax
je 0x140103f8c
sub rax, rdi
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x50]
test rax, rax
je 0x140103f9c
sub rax, rdi
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x140103fac
sub rax, rdi
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x60]
test rax, rax
je 0x140103fbc
sub rax, rdi
mov qword [rbp + 0x60], rax
mov rax, qword [rbp + 0x68]
test rax, rax
je 0x140103fcc
sub rax, rdi
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x70]
test rax, rax
je 0x140103fdc
sub rax, rdi
mov qword [rbp + 0x70], rax
cmp byte [r15 + 0x10], 0
je 0x1401042c1
mov rdi, qword [r15 + 8]
add rdi, r12
mov rbp, qword [rsp + 0xf8]
cmp byte [r14 + 0x10], 1
jne 0x14010401b
add rcx, rdi
mov rdx, qword [r14]
mov r8, qword [r14 + 8]
call fcn.140176c30
cmp byte [r14 + 0x10], 0
je 0x1401042c1
add rdi, qword [r14 + 8]
cmp rdi, r13
jne 0x1401042d4
mov qword [rsp + 0x48], r12
mov rcx, rsi
call fcn.140103230
mov edi, 8
test al, al
je 0x140104130
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x58], r12
mov rcx, qword [rsi]
lea r13, [rsp + 0x58]
mov qword [rsp + 0x20], r13
lea rdx, [0x140203908]
lea r8, [rsp + 0x48]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14010412b
mov edi, 0x3a
cmp qword [rsp + 0x58], 8
jne 0x140104130
cmp byte [r15 + 0x10], 1
jne 0x1401040e6
mov rax, qword [r15 + 8]
mov qword [rsp + 0x40], rax
mov rcx, rsi
call fcn.140103230
mov edi, 8
test al, al
je 0x140104130
mov qword [rsp + 0x58], r12
mov rcx, qword [rsi]
mov qword [rsp + 0x20], r13
lea rdx, [0x140203910]
lea r8, [rsp + 0x40]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14010412b
mov edi, 0x3a
cmp qword [rsp + 0x58], 8
jne 0x140104130
cmp byte [r14 + 0x10], 1
jne 0x14010415f
mov rax, qword [r14 + 8]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], 8
lea r9, [0x140203918]
lea r8, [rsp + 0x58]
mov rcx, rsi
call fcn.140103d20
test eax, eax
je 0x14010415f
mov edi, eax
jmp 0x140104130
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp], eax
mov edi, 0x1b
jmp 0x140104139
mov edi, 0x39
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp], eax
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.140174050
mov eax, edi
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r15, rbp
mov ebp, dword [rsi + 0x10]
mov r14, qword [rsi]
mov ecx, 0x40
call fcn.140173ca0
mov rdi, rax
mov r9, qword [rsi + 0x38]
mov qword [rsp + 0x20], rbx
mov rcx, rax
mov rdx, r14
mov r8d, ebp
call fcn.14012b4b0
mov rbx, qword [rsi + 0x30]
mov qword [rsi + 0x30], rdi
test rbx, rbx
je 0x1401041ad
mov rcx, rbx
call fcn.14012b530
mov rcx, rbx
call fcn.140173cf0
mov rdi, qword [rsi + 0x30]
mov rcx, rdi
mov rdx, qword [rsp + 0x38]
mov r8d, dword [rsp + 0xf0]
mov r9d, 0x400
call fcn.14012b640
mov edi, 4
test al, al
je 0x140104139
mov r14, r15
mov qword [rsp + 0x58], r12
mov rdi, qword [rsi]
mov rbx, qword [rsi + 0x28]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 7
lea r9, [rsp + 0x58]
mov rcx, rax
mov rdx, rbx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14010424b
mov qword [rsp + 0x20], 8
lea r9, [0x140201748]
lea r8, [rsp + 0x58]
mov rcx, rsi
call fcn.140103d20
test eax, eax
je 0x14010425e
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r14], eax
jmp 0x140104139
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r14], eax
mov edi, 0x1a
jmp 0x140104139
mov rcx, rsi
call fcn.1401033c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
jmp 0x140104139
lea rdx, str.Init
lea r8, str....._sandboxwin_src_target_process.cc
lea rdi, [rsp + 0x58]
mov rcx, rdi
mov r9d, 0x117
call fcn.140063850
lea rdx, str.shared_mem_size___std::numeric_limits_DWORD_::max__
lea rbp, [rsp + 0x78]
mov rcx, rbp
mov r8d, 0xffffffff
mov r9, rdi
call fcn.14006e190
mov rcx, rbp
call fcn.14006e420
jmp 0x140103e31
lea rcx, [0x1401b1076]
lea rdx, str....._third_partylibc_srcincludeoptional:790:_assertion_this__has_value___failed:_optional_operator___called_on_a_disengaged_value_n
call fcn.14003f000
mov rcx, r13
call fcn.14006dbd0
mov r13, rax
mov rcx, rdi
call fcn.14006dbd0
lea rcx, str.current_offset__shared_mem_size
mov rdx, rax
mov r8, r13
call fcn.14006dea0
test rax, rax
je 0x140104024
mov rdi, rax
lea rdx, str.Init
lea r8, str....._sandboxwin_src_target_process.cc
lea rcx, [rsp + 0x58]
mov r9d, 0x139
call fcn.140063850
lea r13, [rsp + 0x50]
mov rcx, r13
mov rdx, rdi
mov r8d, 0xffffffff
lea r9, [rsp + 0x58]
call fcn.14006e250
mov rcx, r13
call fcn.14006e420
jmp 0x140104024