Function at 0x1401646a0
Capabilities:
Read file via mapping

Disassembly:
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x78
mov dl, 1
mov rcx, qword [rsp + 0x80]
call fcn.140165040
mov rax, qword [rsp + 0x80]
add rax, 0xf8
mov rdx, qword [rsp + 0x88]
mov rcx, rax
call fcn.140137f40
mov rax, qword [rsp + 0x80]
mov byte [rax + 0x1c], 0
mov rcx, qword [rsp + 0x88]
call fcn.1400dc800
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 7
mov edx, 0x120089
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, qword [rsp + 0x80]
mov rdx, rax
call fcn.140163500
nop
mov rax, qword [rsp + 0x80]
mov rcx, rax
call fcn.14014d5a0
movzx eax, al
test eax, eax
je 0x14016492e
mov rax, qword [rsp + 0x80]
mov rcx, rax
call fcn.14014d590
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x1000002
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rcx, qword [rsp + 0x80]
add rcx, 8
mov rdx, rax
call fcn.140163500
nop
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014d5a0
movzx eax, al
test eax, eax
je 0x140164832
mov rax, qword [rsp + 0x80]
mov byte [rax + 0x18], 0
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014d590
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140162ba0
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rdx, qword [rsp + 0x48]
mov rcx, rax
call fcn.140163530
lea rcx, [rsp + 0x50]
call fcn.1401632e0
nop
jmp 0x14016490a
mov rax, qword [rsp + 0x80]
mov byte [rax + 0x18], 1
mov rax, qword [rsp + 0x80]
mov rcx, rax
call fcn.14014d590
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rcx, qword [rsp + 0x80]
add rcx, 8
mov rdx, rax
call fcn.140163500
nop
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014d5a0
movzx eax, al
test eax, eax
je 0x14016490a
mov rax, qword [rsp + 0x80]
add rax, 8
mov rcx, rax
call fcn.14014d590
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140162ba0
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rdx, qword [rsp + 0x58]
mov rcx, rax
call fcn.140163530
lea rcx, [rsp + 0x60]
call fcn.1401632e0
nop
mov rax, qword [rsp + 0x80]
add rax, 0x10
mov rcx, rax
call fcn.140163680
movzx eax, al
test eax, eax
jne 0x14016492c
call fcn.14013dad0
jmp 0x140164999
jmp 0x140164935
call fcn.14013dad0
jmp 0x140164999
xor edx, edx
mov rcx, qword [rsp + 0x80]
call fcn.140164a20
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jge 0x140164955
mov eax, dword [rsp + 0x40]
jmp 0x140164999
movzx eax, byte [rsp + 0x90]
test eax, eax
je 0x14016496b
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
jmp 0x140164995
mov rax, qword [rsp + 0x80]
add rax, 0xf8
mov rcx, rax
call fcn.1400dc800
mov rdx, rax
mov rcx, qword [rsp + 0x80]
call fcn.140164d50
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
add rsp, 0x78
ret