Function at 0x1402dc3e0
Capabilities:
Read file via mapping

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x14045d5f0]
xor rax, rsp
mov qword [rbp], rax
mov edi, dword [rbp + 0x70]
mov r15, r9
mov r14, rdx
mov rbx, rcx
cmp edi, 0x4000
jbe 0x1402dba53
mov eax, 0xc000000d
jmp 0x1402dbc5c
xor r12d, r12d
test r8d, r8d
jne 0x1402dba49
test rbx, rbx
je 0x1402dba66
cmp word [rcx], r12w
je 0x1402dba49
call fcn.1402c0d20
mov rcx, rax
mov rdx, qword [rax]
call qword [rdx + 0x10]
mov rcx, rax
call fcn.1402c32a0
test al, al
jne 0x1402dba8a
mov eax, 0xc0000022
jmp 0x1402dbc5c
call fcn.1402c9100
mov rsi, rax
test rax, rax
je 0x1402dba80
xorps xmm0, xmm0
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor edx, edx
mov r8d, 0x8000004
or rcx, 0xffffffffffffffff
movdqu xmmword [rsp + 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140010610
mov r10, qword [rsp + 0x40]
test r10, r10
je 0x1402dbc11
cmp r10, 0xffffffffffffffff
je 0x1402dbb06
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rcx, r10
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r10, qword [rsp + 0x40]
mov rcx, rax
mov qword [rsp + 0x48], rax
jmp 0x1402dbb0b
mov rcx, qword [rsp + 0x48]
lea rax, [r10 + 1]
test rax, 0xfffffffffffffffe
je 0x1402dbc16
test rcx, rcx
je 0x1402dbc16
mov qword [rbp - 0x68], 7
mov qword [rbp - 0x70], r12
mov word [rbp - 0x80], r12w
mov qword [rsp + 0x58], r12
test rbx, rbx
je 0x1402dbb5d
cmp word [rbx], r12w
jne 0x1402dbb4f
mov ebx, 0xc000000d
jmp 0x1402dbbf7
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.1402dbdd0
jmp 0x1402dbb62
mov qword [rsp + 0x58], r14
xor edx, edx
lea rcx, [rbp - 0x60]
lea r8d, [rdx + 0x58]
call fcn.1402e2e70
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.1402c9570
mov rax, qword [rsp + 0x40]
lea r9, [rsp + 0x58]
cmp qword [rbp - 0x68], 8
lea r8, [rsp + 0x68]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x70]
lea rax, [rbp - 0x80]
mov dword [rsp + 0x50], edi
cmovae rax, qword [rbp - 0x80]
mov edx, 0x1a
mov qword [rsp + 0x68], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.1402db510
test eax, eax
je 0x1402dbbe0
mov ebx, 0xc0000022
jmp 0x1402dbbf7
mov ebx, dword [rbp - 0x58]
test ebx, ebx
jne 0x1402dbbf7
mov rdx, qword [rsp + 0x48]
mov r8, rdi
mov rcx, r15
call fcn.1402e2940
xor r8d, r8d
lea rcx, [rbp - 0x80]
mov dl, 1
call fcn.14000e6a0
mov rcx, qword [rsp + 0x48]
mov r10, qword [rsp + 0x40]
jmp 0x1402dbc1b
mov rcx, qword [rsp + 0x48]
mov ebx, 0xc000000d
test rcx, rcx
je 0x1402dbc2b
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov r10, qword [rsp + 0x40]
lea rcx, [r10 - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1402dbc5a
call fcn.14002ddc0
mov r8, qword [rbp + 0x48]
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
mov r9, rax
call fcn.14002e980
mov rcx, qword [rsp + 0x40]
call fcn.14002e070
mov eax, ebx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1402e0100
add rsp, 0x110
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, rdx
xor edx, edx
jmp 0x1402dba10