Function at 0x140091a80
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x140277eb8]
xor rax, rsp
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x70], rdx
mov rbx, rcx
mov qword [rbp - 0x70], rcx
lea rdx, str.active
xor r15d, r15d
lea rcx, [rbp - 0x50]
mov esi, r15d
mov dword [rsp + 0x30], r15d
call fcn.140018fc0
lea rdx, str.errorCode
lea rcx, [rsp + 0x58]
call fcn.140018fc0
lea rcx, [rsp + 0x38]
call fcn.1400cfca0
mov rax, qword [rbx + 0x18]
lea r14, [0x140208820]
xor edx, edx
mov dword [rsp + 0x30], r15d
lea r8, str.8BA1E16C_FC54_4595_9782_E370A5FBE8DA
mov qword [rsp + 0x40], r14
mov edi, r15d
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], sil
lea ecx, [rdx + 4]
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rbp - 0x58], rax
mov r13, rax
test rax, rax
jne 0x140091c77
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x140091c12
lea r9, [rbp + 0x4e5]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov ebx, edx
test edx, edx
jne 0x140091b60
movdqa xmm0, xmmword [0x140209090]
lea rax, [rbp + 0x4e5]
mov byte [rbp + 0x450], sil
movdqu xmmword [rbp + 0x460], xmm0
cmp r9, rax
je 0x140091bc2
lea r8, [rbp + 0x4e5]
mov rdx, r9
sub r8, r9
lea rcx, [rbp + 0x450]
call fcn.140013b20
cmp qword [rbp + 0x468], 0x10
lea rbx, [rbp + 0x450]
mov r8d, 0x25c
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
cmovae rbx, qword [rbp + 0x450]
lea rcx, [rbp + 0x50]
xor r9d, r9d
call fcn.1400c64e0
lea rdx, str.OpenFileMappingW_failed_with
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, 3
test sil, 2
je 0x140091c24
and esi, 0xfffffffd
lea rcx, [rbp + 0x50]
call fcn.1400c6840
test sil, 1
je 0x140091e57
mov rdx, qword [rbp + 0x468]
cmp rdx, 0x10
jb 0x140091e57
mov rcx, qword [rbp + 0x450]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140091d62
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400922ec
jmp 0x140091d62
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r12, rax
test rax, rax
jne 0x140091d6e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x140091d03
mov edx, ebx
lea rcx, [rbp + 0x490]
call fcn.14006b6a0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140091cc7
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
mov r8d, 0x264
lea rcx, [rbp + 0x150]
call fcn.1400c64e0
lea rdx, str.MapViewOfFile_failed_with
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, reloc.SHLWAPI.dll_SHCreateMemStream
test sil, 8
je 0x140091d18
and esi, 0xfffffff7
lea rcx, [rbp + 0x150]
call fcn.1400c6840
test sil, 4
je 0x140091e57
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0x10
jb 0x140091e57
mov rcx, qword [rbp + 0x490]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140091d62
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400922f8
call fcn.140156f20
xor bl, bl
jmp 0x1400921e4
mov r8d, 0x30
lea rdx, [rbp + 0x20]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
jne 0x140091e5e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x140091df2
mov edx, ebx
lea rcx, [rbp + 0x4b0]
call fcn.14006b6a0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140091db6
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
mov r8d, 0x270
lea rcx, [rbp + 0x250]
call fcn.1400c64e0
lea rdx, str.VirtualQuery_failed_with
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, 0x30
test sil, 0x20
je 0x140091e07
and esi, 0xffffffdf
lea rcx, [rbp + 0x250]
call fcn.1400c6840
test sil, 0x10
je 0x140091e4e
mov rdx, qword [rbp + 0x4c8]
cmp rdx, 0x10
jb 0x140091e4e
mov rcx, qword [rbp + 0x4b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140091e49
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400922fe
call fcn.140156f20
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
xor bl, bl
jmp 0x1400921e4
mov r8, qword [rbp + 0x38]
mov r14, r15
lea rbx, [r8 + 1]
test rbx, rbx
je 0x140091eb0
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x10], 0xffffffffffffffff
cmp rbx, rax
ja 0x140092304
lfence
mov rcx, rbx
call fcn.140002c80
mov r8, rbx
xor edx, edx
mov rcx, rax
mov r14, rax
lea r15, [rax + rbx]
call fcn.1401872d0
mov r8, qword [rbp + 0x38]
mov r13, qword [rbp - 0x58]
mov rdx, r12
mov rcx, r14
call fcn.140186ec0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.140005020
mov r12, qword [rsp + 0x70]
mov rdx, rax
mov rcx, r12
call fcn.1400087d0
mov rcx, qword [rbp - 0x30]
lea rax, [0x140208820]
mov qword [rbp - 0x38], rax
test rcx, rcx
je 0x140091f0d
cmp byte [rbp - 0x28], sil
je 0x140091f0d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x30]
mov edx, SafeArrayPutElement
call fcn.140156f20
lea rax, [rsp + 0x40]
xor r8d, r8d
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.1400cd680
mov rbx, qword [rax]
test rbx, rbx
je 0x140091f48
mov rax, qword [rbx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rbx
mov rax, qword [rcx]
call qword [rax]
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x38], rbx
test rdx, rdx
je 0x140091f71
mov rax, qword [rdx + 8]
add rdx, 8
movsxd rcx, dword [rax + 4]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140091f95
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x38]
cmp dword [rsp + 0x30], esi
jne 0x1400920da
mov rax, qword [rbx]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [rax + 0x60]
mov rdi, qword [rax]
test rdi, rdi
je 0x140091fc8
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x140091fe6
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp - 0x78], rsi
je 0x140092071
mov rsi, qword [rbp - 0x70]
mov rbx, qword [rdi]
mov rcx, qword [rsi + 0x18]
call fcn.14000b390
mov rcx, rax
call fcn.14001ead0
movzx r8d, al
lea rdx, [rbp - 0x50]
mov rcx, rdi
call qword [rbx + 0xb0]
mov rcx, qword [rsi + 0x18]
mov rbx, qword [rdi]
call fcn.14000b390
mov rcx, rax
lea rdx, [rbp - 0x20]
call fcn.14001e4a0
mov r8, rax
lea rdx, [rsp + 0x58]
mov rcx, rdi
call qword [rbx + reloc.OLEAUT32.dll_SetErrorInfo]
mov rcx, qword [rbp - 0x18]
lea rbx, [0x140208820]
mov qword [rbp - 0x20], rbx
test rcx, rcx
je 0x140092078
cmp byte [rbp - 0x10], 0
je 0x140092078
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x18]
mov edx, SafeArrayPutElement
call fcn.140156f20
jmp 0x140092078
lea rbx, [0x140208820]
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x140092095
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.14003a880
mov rdx, rax
mov rcx, r12
call fcn.1400087d0
mov rcx, qword [rbp]
mov qword [rbp - 8], rbx
test rcx, rcx
je 0x1400920d3
cmp byte [rbp + 8], 0
je 0x1400920d3
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov bl, 1
jmp 0x14009219b
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x14009213d
lea rdx, [rbp + 0x470]
lea rcx, [rsp + 0x40]
call fcn.140010490
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140092101
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
mov r8d, 0x28a
lea rcx, [rbp + 0x350]
call fcn.1400c64e0
lea rdx, str.Memory_mapped_file::Read
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, 0xc0
test sil, sil
jns 0x140092152
btr esi, 7
lea rcx, [rbp + 0x350]
call fcn.1400c6840
test sil, 0x40
je 0x140092199
mov rdx, qword [rbp + 0x488]
cmp rdx, 0x10
jb 0x140092199
mov rcx, qword [rbp + 0x470]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140092194
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400922e6
call fcn.140156f20
xor bl, bl
test r14, r14
je 0x1400921da
sub r15, r14
cmp r15, 0x1000
jb 0x1400921cf
lfence
mov rcx, qword [r14 - 8]
add r15, 0x27
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x1400922f2
mov r13, qword [rbp - 0x58]
mov r14, rcx
mov rdx, r15
mov rcx, r14
call fcn.140156f20
lea r14, [0x140208820]
xor r15d, r15d
test r13, r13
je 0x1400921f2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r14
test rcx, rcx
je 0x140092226
cmp byte [rsp + 0x50], 0
je 0x14009221c
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x48]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], 0
test rdi, rdi
je 0x140092240
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x14009225f
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x58], r14
test rcx, rcx
je 0x140092293
cmp byte [rsp + 0x68], 0
je 0x140092289
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov qword [rsp + 0x60], r15
mov byte [rsp + 0x68], 0
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x50], r14
test rcx, rcx
je 0x1400922b9
cmp byte [rbp - 0x40], 0
je 0x1400922b9
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x48]
mov edx, SafeArrayPutElement
call fcn.140156f20
movzx eax, bl
mov rcx, qword [rbp + 0x4e8]
xor rcx, rsp
call fcn.140156fc0
mov rbx, qword [rsp + 0x640]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.140095520
int3