Function at 0x140001540
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov rax, qword [0x14000d038]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r15, r8
mov rdi, rdx
mov qword [rbp - 0x31], rdx
mov qword [rbp - 0x29], r8
xor r13d, r13d
mov dword [rbp - 0x59], r13d
cmp qword [r8 + 0x18], 8
jb 0x140001589
mov r8, qword [r8]
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], r13
mov qword [rbp - 9], r13
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1400015c2
mov rdx, rax
lea rcx, [rbp - 0x21]
call fcn.140005910
nop
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
mov r12d, 1
mov dword [rbp - 0x59], r12d
movups xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], r13
mov r14d, 7
mov qword [rbp + 0x17], r14
mov word [rbp - 1], r13w
mov rsi, qword [rbp - 0x11]
lea rcx, [rbp - 0x21]
mov r9, qword [rbp - 0x21]
mov r10, qword [rbp - 9]
cmp r10, 8
cmovae rcx, r9
test rsi, rsi
je 0x140001644
mov rax, rsi
mov rbx, rcx
nop
cmp word [rbx], 0x2c
je 0x1400016f1
add rbx, 2
sub rax, 1
jne 0x140001630
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
je 0x140001751
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
mov qword [rbp - 0x41], r13
mov qword [rbp - 0x39], r13
mov r8, rbx
cmp rsi, rbx
cmovb r8, rsi
lea rdx, [rbp - 0x21]
cmp r10, 8
cmovae rdx, r9
lea rcx, [rbp - 0x51]
call fcn.140005910
or r12d, 2
mov dword [rbp - 0x59], r12d
cmp r14, 8
jb 0x1400016c7
lea rdx, [r14*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000174a
call fcn.1400075f0
movups xmm0, xmmword [rbp - 0x51]
movups xmmword [rbp - 1], xmm0
movups xmm1, xmmword [rbp - 0x41]
movups xmmword [rbp + 0xf], xmm1
mov rdx, qword [rdi + 8]
lea r8, [rbp - 1]
cmp rdx, qword [rdi + 0x10]
je 0x140001705
call fcn.1400070f0
add qword [rdi + 8], 0x20
jmp 0x14000170d
test rbx, rbx
je 0x140001644
sub rbx, rcx
sar rbx, 1
jmp 0x14000164b
mov rcx, rdi
call fcn.140006950
inc rbx
mov rsi, qword [rbp - 0x11]
cmp rsi, rbx
cmovb rbx, rsi
lea rcx, [rbp - 0x21]
cmp qword [rbp - 9], 8
cmovae rcx, qword [rbp - 0x21]
sub rsi, rbx
lea r8, [rsi*2 + 2]
lea rdx, [rcx + rbx*2]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x11], rsi
mov r14, qword [rbp + 0x17]
jmp 0x140001610
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rsi, rsi
je 0x140001780
mov rdx, qword [rdi + 8]
lea r8, [rbp - 0x21]
cmp rdx, qword [rdi + 0x10]
je 0x140001770
call fcn.1400070f0
add qword [rdi + 8], 0x20
jmp 0x140001778
mov rcx, rdi
call fcn.140006950
mov r9, qword [rbp - 0x21]
mov r10, qword [rbp - 9]
cmp r14, 8
jb 0x1400017c7
lea rdx, [r14*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400017ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400017ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400075f0
mov r10, qword [rbp - 9]
mov r9, qword [rbp - 0x21]
cmp r10, 8
jb 0x140001805
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x1400017fd
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400017fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r9
call fcn.1400075f0
mov qword [rbp - 0x11], r13
mov qword [rbp - 9], 7
mov word [rbp - 0x21], r13w
mov rdx, qword [r15 + 0x18]
cmp rdx, 8
jb 0x140001851
lea rdx, [rdx*2 + 2]
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14000184c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000188b
mov rcx, r8
call fcn.1400075f0
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], 7
mov word [r15], r13w
mov rax, rdi
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400075d0
mov rbx, qword [rsp + 0xf0]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3