Function at 0x18000e5f0
Capabilities:
Get file size
Read file via mapping

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rax, qword [0x180080920]
xor rax, rsp
mov qword [rsp + 0xc0], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov r12, r8
mov r13, rdx
movups xmmword [rsp + 0x60], xmm0
xor ebx, ebx
lea r8d, [rax + 1]
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov dword [rsp + 0x28], pe_nt_image_headers64
mov edx, 0x80000000
movups xmmword [r11 - 0x78], xmm0
mov dword [r11 - 0x48], eax
movups xmmword [r11 - 0x68], xmm0
mov dword [rsp + 0x20], 3
movups xmmword [r11 - 0x58], xmm0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
je 0x18000e842
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
xor edx, edx
mov dword [rsp + 0x20], eax
lea r8d, [rbx + 2]
mov rcx, rbp
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov r14, rax
test rax, rax
je 0x18000e820
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
lea edx, [rbx + 4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rsi, rax
test rax, rax
je 0x18000e820
lea rdx, [rsp + 0x50]
mov rcx, rax
call sym.TitanEngine.dll_GetPE32DataFromMappedFileEx
test al, al
je 0x18000e80d
xor edx, edx
lea rcx, [0x180084650]
mov r8d, 0x39a
call fcn.18004c900
mov rax, qword [rsp + 0x54]
lea r8d, [rbx + 0x15]
mov qword [0x180084998], rax
xor edx, edx
mov eax, dword [rsp + 0x5c]
mov rcx, rsi
mov qword [0x1800849a0], rax
mov eax, dword [rsp + 0x68]
mov qword [0x1800849b0], rax
movzx eax, word [rsp + 0xa6]
mov dword [0x180084650], eax
call sym.TitanEngine.dll_GetPE32DataFromMappedFile
mov rdx, qword [0x1800849a0]
mov rcx, rsi
add rdx, qword [0x180084998]
shr eax, 0xd
and al, 1
mov byte [0x1800849e8], al
call sym.TitanEngine.dll_GetPE32SectionNumberFromVA
cmp dword [0x180084650], ebx
mov dword [0x180084994], eax
jle 0x18000e7e1
mov qword [rsp + 0x108], rdi
lea rdi, [0x180084660]
nop dword [rax]
mov r8d, 0x29
mov edx, ebx
mov rcx, rsi
call sym.TitanEngine.dll_GetPE32DataFromMappedFile
mov r8d, 0x2a
mov dword [rdi - 4], eax
mov edx, ebx
mov rcx, rsi
call sym.TitanEngine.dll_GetPE32DataFromMappedFile
mov dword [rdi], eax
test eax, 0xfff
je 0x18000e7b8
and eax, 0xfffff000
add eax, 0x1000
mov dword [rdi], eax
mov r8d, 0x2d
mov edx, ebx
mov rcx, rsi
call sym.TitanEngine.dll_GetPE32DataFromMappedFile
mov dword [rdi + 4], eax
inc ebx
add rdi, 0x1a
cmp ebx, dword [0x180084650]
jl 0x18000e780
mov rdi, qword [rsp + 0x108]
mov r9, rsi
mov qword [0x1800849e0], r12
mov r8, r14
mov qword [0x1800849d8], r13
mov edx, r15d
mov rcx, rbp
call fcn.18000dc30
cmp byte [0x1800849e8], 0
jne 0x18000e842
mov al, 1
jmp 0x18000e844
mov r9, rsi
mov r8, r14
mov edx, r15d
mov rcx, rbp
call fcn.18000dc30
jmp 0x18000e842
lea rdx, [rsp + 0x40]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x18000e842
test byte [rsp + 0x40], 2
jne 0x18000e842
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.180049ad0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rsi
ret