Function at 0x14000c2c0
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xa8
mov dword [rsp + 0x48], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0xffffffffffffffff
je 0x14000c60e
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
je 0x14000c603
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
je 0x14000c5f8
mov rcx, qword [rsp + 0x58]
call fcn.14000cd60
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14000c5ed
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 0x18]
cmp eax, 0x20b
jne 0x14000c3cd
mov rax, qword [rsp + 0x60]
mov eax, dword [rax + 0x88]
mov dword [rsp + 0x70], eax
jmp 0x14000c3d9
mov rax, qword [rsp + 0x60]
mov eax, dword [rax + 0x78]
mov dword [rsp + 0x70], eax
mov edx, dword [rsp + 0x70]
mov rcx, qword [rsp + 0x60]
call fcn.14000cfa0
mov ecx, eax
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x14000c5ed
mov rax, qword [rsp + 0x68]
mov edx, dword [rax + 0x20]
mov rcx, qword [rsp + 0x60]
call fcn.14000cfa0
mov ecx, eax
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x74], 0
jmp 0x14000c438
mov eax, dword [rsp + 0x74]
add eax, 1
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0xd0]
cmp dword [rsp + 0x74], eax
jae 0x14000c45b
mov ecx, dword [rsp + 0x74]
mov rax, qword [rsp + 0xc8]
mov qword [rax + rcx*8], 0
jmp 0x14000c42d
mov dword [rsp + 0x74], 0
jmp 0x14000c470
mov eax, dword [rsp + 0x74]
add eax, 1
mov dword [rsp + 0x74], eax
mov rax, qword [rsp + 0x68]
mov eax, dword [rax + 0x18]
cmp dword [rsp + 0x74], eax
jae 0x14000c5a5
mov ecx, dword [rsp + 0x74]
mov rax, qword [rsp + 0x78]
mov eax, dword [rax + rcx*4]
mov dword [rsp + 0x88], eax
mov edx, dword [rsp + 0x88]
mov rcx, qword [rsp + 0x60]
call fcn.14000cfa0
mov ecx, eax
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x8c], 0
jmp 0x14000c4d6
mov eax, dword [rsp + 0x8c]
add eax, 1
mov dword [rsp + 0x8c], eax
mov eax, dword [rsp + 0xd0]
cmp dword [rsp + 0x8c], eax
jae 0x14000c5a0
mov eax, dword [rsp + 0x8c]
mov rdx, qword [rsp + 0xc0]
mov rdx, qword [rdx + rax*8]
mov rcx, qword [rsp + 0x80]
call fcn.14002baf0
test eax, eax
jne 0x14000c59b
mov rax, qword [rsp + 0x68]
mov edx, dword [rax + 0x24]
mov rcx, qword [rsp + 0x60]
call fcn.14000cfa0
mov eax, eax
mov rcx, qword [rsp + 0x58]
add rcx, rax
mov eax, dword [rsp + 0x74]
movzx eax, word [rcx + rax*2]
mov word [rsp + 0x94], ax
mov rax, qword [rsp + 0x68]
mov edx, dword [rax + 0x1c]
mov rcx, qword [rsp + 0x60]
call fcn.14000cfa0
mov eax, eax
mov rcx, qword [rsp + 0x58]
add rcx, rax
movzx eax, word [rsp + 0x94]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x90]
mov rdx, qword [rsp + 0xb8]
add rdx, rax
mov ecx, dword [rsp + 0x8c]
mov rax, qword [rsp + 0xc8]
mov qword [rax + rcx*8], rdx
mov dword [rsp + 0x48], 1
jmp 0x14000c5a0
jmp 0x14000c4c5
jmp 0x14000c465
cmp dword [rsp + 0x48], 0
je 0x14000c5ed
mov dword [rsp + 0x74], 0
jmp 0x14000c5c1
mov eax, dword [rsp + 0x74]
add eax, 1
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0xd0]
cmp dword [rsp + 0x74], eax
jae 0x14000c5ed
mov ecx, dword [rsp + 0x74]
mov rax, qword [rsp + 0xc8]
cmp qword [rax + rcx*8], 0
jne 0x14000c5eb
mov dword [rsp + 0x48], 0
jmp 0x14000c5ed
jmp 0x14000c5b6
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x48]
add rsp, 0xa8
ret