Function at 0x2100e1b10
Capabilities:
Map section object

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x98
mov rbx, qword [rsp + 0x110]
mov eax, dword [rsp + 0x118]
mov qword [rsp + 0x68], rbx
mov r12, rcx
mov rsi, rdx
mov rdi, r8
mov ebx, 8
test byte [rsp + 0x108], 2
jne 0x2100e1b63
mov edx, r9d
and edx, 0x40000000
cmp edx, 1
sbb ebx, ebx
and ebx, 0xfffffffe
add ebx, 4
mov edx, ebx
mov qword [rsp + 0x70], rsi
shl edx, 4
and r9d, 0x20000000
mov qword [rsp + 0x78], rdi
cmovne ebx, edx
test al, al
jne 0x2100e1b91
mov rax, qword [0x21034b1a0]
test byte [rax + 0x13], 1
jne 0x2100e1d30
lea r14, [rsp + 0x78]
lea r15, [rsp + 0x68]
mov dword [rsp + 0x48], ebx
test dword [rsp + 0x100], 0x8000000
mov dword [rsp + 0x40], 0x100000
lea r13, [rsp + 0x70]
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
jne 0x2100e1c40
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, r13
mov rcx, r12
mov rdx, 0xffffffffffffffff
call sym.NtMapViewOfSection
mov ebp, eax
test eax, eax
jns 0x2100e1c18
test rsi, rsi
je 0x2100e1cb8
mov rax, rdi
test byte [rsp + 0x108], 0x10
je 0x2100e1c75
mov qword [rsp + 0x70], 0
mov ecx, ebp
call sym.RtlNtStatusToDosError
mov ecx, eax
call sym.SetLastError
test byte [0x210273880], 1
jne 0x2100e1ccd
mov rax, qword [rsp + 0x70]
add rsp, 0x98
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor r9d, r9d
mov r8, r13
mov rdx, 0xffffffffffffffff
mov rcx, r12
mov qword [rsp + 0x20], 0
call sym.NtMapViewOfSection
mov ebp, eax
test rsi, rsi
je 0x2100e1cb8
xor eax, eax
test ebp, ebp
jns 0x2100e1c18
test byte [rsp + 0x108], 0x10
jne 0x2100e1c01
mov dword [rsp + 0x48], ebx
xor r9d, r9d
mov r8, r13
mov rcx, r12
mov dword [rsp + 0x40], 0
mov rdx, 0xffffffffffffffff
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x70], 0
call sym.NtMapViewOfSection
mov ebp, eax
test ebp, ebp
js 0x2100e1c01
test byte [0x210273880], 1
je 0x2100e1c25
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x110]
mov edx, 0x40
lea r9, str._p__status__p___NtMapViewOfSection__h:_p__addr:_p__len:_lu__off:_Y__protect:_y__type:_y_
mov dword [rsp + 0x58], 0
lea r8, str.void_MapView_HANDLE__void__size_t__DWORD__int__int__off_t__bool_
lea rcx, [0x210273880]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rax
call method.strace.prntf_unsigned_int__char_const__char_const__..._
jmp 0x2100e1c25
cmp byte [0x2103184d0], 0
jne 0x2100e1d4f
mov rax, qword [rax + 8]
mov byte [0x2103184d0], 1
sub rax, 1
mov qword [0x210230b18], rax
mov edi, dword [rsp + 0x100]
lea rax, [0x210230b10]
mov qword [rsp + 0x80], 1
mov qword [rsp + 0x88], rax
shr edi, 0xe
and edi, 0x2000
or edi, 0x100000
test rsi, rsi
je 0x2100e1e60
lea r14, [rsp + 0x78]
mov dword [rsp + 0x30], ebx
lea r13, [rsp + 0x68]
mov rcx, r12
mov dword [rsp + 0x40], 0
lea r15, [rsp + 0x70]
mov r9, r13
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0x38], 0
mov r8, r15
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r14
call fcn.21022d160
mov ebp, eax
test eax, eax
jns 0x2100e1df6
test byte [rsp + 0x108], 0x10
je 0x2100e1eb0
mov qword [rsp + 0x70], 0
mov ecx, ebp
call sym.RtlNtStatusToDosError
mov ecx, eax
call sym.SetLastError
test byte [0x210273880], 1
je 0x2100e1c25
mov rax, qword [rsp + 0x78]
mov dword [rsp + 0x58], ebx
mov edx, 0x40
lea r9, str._p__status__p___NtMapViewOfSectionEx__h:_p__addr:_p__off:_Y__viewsize:_U__alloc_type:_y__protect:_y
mov dword [rsp + 0x50], edi
lea r8, str.void_MapView_HANDLE__void__size_t__DWORD__int__int__off_t__bool_
lea rcx, [0x210273880]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rax
call method.strace.prntf_unsigned_int__char_const__char_const__..._
jmp 0x2100e1c25
lea rax, [rsp + 0x80]
mov dword [rsp + 0x30], ebx
lea r9, [rsp + 0x68]
mov rcx, r12
mov dword [rsp + 0x28], edi
lea r8, [rsp + 0x70]
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x78]
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x20], rax
call fcn.21022d160
mov ebp, eax
test ebp, ebp
jns 0x2100e1df6
jmp 0x2100e1ddf
mov dword [rsp + 0x30], ebx
mov r9, r13
mov r8, r15
mov rcx, r12
lea rax, [rsp + 0x80]
mov dword [rsp + 0x28], edi
mov rdx, 0xffffffffffffffff
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x70], 0
call fcn.21022d160
mov ebp, eax
jmp 0x2100e1ea2