Function at 0x1401667b0
Capabilities:
Read file via mapping

Disassembly:
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x78
mov dl, 1
mov rcx, qword [rsp + 0x80]
call fcn.140167150
mov rax, qword [rsp + 0x80]
add rax, 0xf8
mov rdx, qword [rsp + 0x88]
mov rcx, rax
call fcn.14013a060
mov rax, qword [rsp + 0x80]
mov byte [rax + 0x1c], 0
mov rcx, qword [rsp + 0x88]
call fcn.1400da570
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 7
mov edx, 0x120089
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, qword [rsp + 0x80]
mov rdx, rax
call fcn.140165640
nop
mov rax, qword [rsp + 0x80]
mov rcx, rax
call fcn.14014f6c0
movzx eax, al
test eax, eax
je 0x140166a3e
mov rax, qword [rsp + 0x80]
mov rcx, rax
call fcn.14014f6b0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x1000002
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rcx, qword [rsp + 0x80]
add rcx, 8
mov rdx, rax
call fcn.140165640
nop
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014f6c0
movzx eax, al
test eax, eax
je 0x140166942
mov rax, qword [rsp + 0x80]
mov byte [rax + 0x18], 0
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014f6b0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140164ce0
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rdx, qword [rsp + 0x48]
mov rcx, rax
call fcn.140165670
lea rcx, [rsp + 0x50]
call fcn.140165420
nop
jmp 0x140166a1a
mov rax, qword [rsp + 0x80]
mov byte [rax + 0x18], 1
mov rax, qword [rsp + 0x80]
mov rcx, rax
call fcn.14014f6b0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rcx, qword [rsp + 0x80]
add rcx, 8
mov rdx, rax
call fcn.140165640
nop
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014f6c0
movzx eax, al
test eax, eax
je 0x140166a1a
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014f6b0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140164ce0
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rdx, qword [rsp + 0x58]
mov rcx, rax
call fcn.140165670
lea rcx, [rsp + 0x60]
call fcn.140165420
nop
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rcx, rax
call fcn.140165790
movzx eax, al
test eax, eax
jne 0x140166a3c
call fcn.14013fbf0
jmp 0x140166aa9
jmp 0x140166a45
call fcn.14013fbf0
jmp 0x140166aa9
xor edx, edx
mov rcx, qword [rsp + 0x80]
call fcn.140166b30
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jge 0x140166a65
mov eax, dword [rsp + 0x40]
jmp 0x140166aa9
movzx eax, byte [rsp + 0x90]
test eax, eax
je 0x140166a7b
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
jmp 0x140166aa5
mov rax, qword [rsp + 0x80]
add rax, 0xf8
mov rcx, rax
call fcn.1400da570
mov rdx, rax
mov rcx, qword [rsp + 0x80]
call fcn.140166e60
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
add rsp, 0x78
ret