Function at 0x14008af90
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x14026de28]
xor rax, rsp
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x70], rdx
mov rbx, rcx
mov qword [rbp - 0x70], rcx
lea rdx, str.active
xor r15d, r15d
lea rcx, [rbp - 0x50]
mov esi, r15d
mov dword [rsp + 0x30], r15d
call fcn.140018c00
lea rdx, str.errorCode
lea rcx, [rsp + 0x58]
call fcn.140018c00
lea rcx, [rsp + 0x38]
call fcn.1400c7790
mov rax, qword [rbx + 0x18]
lea r14, [0x1401ff7f0]
xor edx, edx
mov dword [rsp + 0x30], r15d
lea r8, str.8BA1E16C_FC54_4595_9782_E370A5FBE8DA
mov qword [rsp + 0x40], r14
mov edi, r15d
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], sil
lea ecx, [rdx + 4]
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rbp - 0x58], rax
mov r13, rax
test rax, rax
jne 0x14008b187
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x14008b122
lea r9, [rbp + 0x4e5]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov ebx, edx
test edx, edx
jne 0x14008b070
movdqa xmm0, xmmword [0x140200020]
lea rax, [rbp + 0x4e5]
mov byte [rbp + 0x450], sil
movdqu xmmword [rbp + 0x460], xmm0
cmp r9, rax
je 0x14008b0d2
lea r8, [rbp + 0x4e5]
mov rdx, r9
sub r8, r9
lea rcx, [rbp + 0x450]
call fcn.140013760
cmp qword [rbp + 0x468], 0x10
lea rbx, [rbp + 0x450]
mov r8d, 0x25c
lea rdx, str.C:uworkspace03_20cefwinauto_srcquery_handler_win.cc
cmovae rbx, qword [rbp + 0x450]
lea rcx, [rbp + 0x50]
xor r9d, r9d
call fcn.1400be000
lea rdx, str.OpenFileMappingW_failed_with
lea rcx, [rax + 8]
call fcn.140002500
mov rcx, rax
mov rdx, rbx
call fcn.140002500
mov esi, 3
test sil, 2
je 0x14008b134
and esi, 0xfffffffd
lea rcx, [rbp + 0x50]
call fcn.1400be360
test sil, 1
je 0x14008b367
mov rdx, qword [rbp + 0x468]
cmp rdx, 0x10
jb 0x14008b367
mov rcx, qword [rbp + 0x450]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b272
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b7fc
jmp 0x14008b272
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r12, rax
test rax, rax
jne 0x14008b27e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x14008b213
mov edx, ebx
lea rcx, [rbp + 0x490]
call fcn.140064e50
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14008b1d7
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.C:uworkspace03_20cefwinauto_srcquery_handler_win.cc
mov r8d, 0x264
lea rcx, [rbp + 0x150]
call fcn.1400be000
lea rdx, str.MapViewOfFile_failed_with
lea rcx, [rax + 8]
call fcn.140002500
mov rcx, rax
mov rdx, rbx
call fcn.140002500
mov esi, reloc.SHLWAPI.dll_SHCreateMemStream
test sil, 8
je 0x14008b228
and esi, 0xfffffff7
lea rcx, [rbp + 0x150]
call fcn.1400be360
test sil, 4
je 0x14008b367
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0x10
jb 0x14008b367
mov rcx, qword [rbp + 0x490]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b272
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b808
call fcn.14014e088
xor bl, bl
jmp 0x14008b6f4
mov r8d, 0x30
lea rdx, [rbp + 0x20]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
jne 0x14008b36e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x14008b302
mov edx, ebx
lea rcx, [rbp + 0x4b0]
call fcn.140064e50
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14008b2c6
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.C:uworkspace03_20cefwinauto_srcquery_handler_win.cc
mov r8d, 0x270
lea rcx, [rbp + 0x250]
call fcn.1400be000
lea rdx, str.VirtualQuery_failed_with
lea rcx, [rax + 8]
call fcn.140002500
mov rcx, rax
mov rdx, rbx
call fcn.140002500
mov esi, 0x30
test sil, 0x20
je 0x14008b317
and esi, 0xffffffdf
lea rcx, [rbp + 0x250]
call fcn.1400be360
test sil, 0x10
je 0x14008b35e
mov rdx, qword [rbp + 0x4c8]
cmp rdx, 0x10
jb 0x14008b35e
mov rcx, qword [rbp + 0x4b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b359
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b80e
call fcn.14014e088
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
xor bl, bl
jmp 0x14008b6f4
mov r8, qword [rbp + 0x38]
mov r14, r15
lea rbx, [r8 + 1]
test rbx, rbx
je 0x14008b3c0
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x10], 0xffffffffffffffff
cmp rbx, rax
ja 0x14008b814
lfence
mov rcx, rbx
call fcn.140002bc0
mov r8, rbx
xor edx, edx
mov rcx, rax
mov r14, rax
lea r15, [rax + rbx]
call fcn.14017e440
mov r8, qword [rbp + 0x38]
mov r13, qword [rbp - 0x58]
mov rdx, r12
mov rcx, r14
call fcn.14017e030
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.140004f60
mov r12, qword [rsp + 0x70]
mov rdx, rax
mov rcx, r12
call fcn.1400086b0
mov rcx, qword [rbp - 0x30]
lea rax, [0x1401ff7f0]
mov qword [rbp - 0x38], rax
test rcx, rcx
je 0x14008b41d
cmp byte [rbp - 0x28], sil
je 0x14008b41d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x30]
mov edx, SafeArrayPutElement
call fcn.14014e088
lea rax, [rsp + 0x40]
xor r8d, r8d
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.1400c5170
mov rbx, qword [rax]
test rbx, rbx
je 0x14008b458
mov rax, qword [rbx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rbx
mov rax, qword [rcx]
call qword [rax]
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x38], rbx
test rdx, rdx
je 0x14008b481
mov rax, qword [rdx + 8]
add rdx, 8
movsxd rcx, dword [rax + 4]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14008b4a5
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x38]
cmp dword [rsp + 0x30], esi
jne 0x14008b5ea
mov rax, qword [rbx]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [rax + 0x60]
mov rdi, qword [rax]
test rdi, rdi
je 0x14008b4d8
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x14008b4f6
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp - 0x78], rsi
je 0x14008b581
mov rsi, qword [rbp - 0x70]
mov rbx, qword [rdi]
mov rcx, qword [rsi + 0x18]
call fcn.14000b1c0
mov rcx, rax
call fcn.14001e710
movzx r8d, al
lea rdx, [rbp - 0x50]
mov rcx, rdi
call qword [rbx + 0xb0]
mov rcx, qword [rsi + 0x18]
mov rbx, qword [rdi]
call fcn.14000b1c0
mov rcx, rax
lea rdx, [rbp - 0x20]
call fcn.14001e0e0
mov r8, rax
lea rdx, [rsp + 0x58]
mov rcx, rdi
call qword [rbx + reloc.OLEAUT32.dll_SetErrorInfo]
mov rcx, qword [rbp - 0x18]
lea rbx, [0x1401ff7f0]
mov qword [rbp - 0x20], rbx
test rcx, rcx
je 0x14008b588
cmp byte [rbp - 0x10], 0
je 0x14008b588
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x18]
mov edx, SafeArrayPutElement
call fcn.14014e088
jmp 0x14008b588
lea rbx, [0x1401ff7f0]
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x14008b5a5
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.140038ff0
mov rdx, rax
mov rcx, r12
call fcn.1400086b0
mov rcx, qword [rbp]
mov qword [rbp - 8], rbx
test rcx, rcx
je 0x14008b5e3
cmp byte [rbp + 8], 0
je 0x14008b5e3
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov bl, 1
jmp 0x14008b6ab
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x14008b64d
lea rdx, [rbp + 0x470]
lea rcx, [rsp + 0x40]
call fcn.1400100d0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14008b611
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.C:uworkspace03_20cefwinauto_srcquery_handler_win.cc
mov r8d, 0x28a
lea rcx, [rbp + 0x350]
call fcn.1400be000
lea rdx, str.Memory_mapped_file::Read
lea rcx, [rax + 8]
call fcn.140002500
mov rcx, rax
mov rdx, rbx
call fcn.140002500
mov esi, 0xc0
test sil, sil
jns 0x14008b662
btr esi, 7
lea rcx, [rbp + 0x350]
call fcn.1400be360
test sil, 0x40
je 0x14008b6a9
mov rdx, qword [rbp + 0x488]
cmp rdx, 0x10
jb 0x14008b6a9
mov rcx, qword [rbp + 0x470]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b6a4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008b7f6
call fcn.14014e088
xor bl, bl
test r14, r14
je 0x14008b6ea
sub r15, r14
cmp r15, 0x1000
jb 0x14008b6df
lfence
mov rcx, qword [r14 - 8]
add r15, 0x27
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x14008b802
mov r13, qword [rbp - 0x58]
mov r14, rcx
mov rdx, r15
mov rcx, r14
call fcn.14014e088
lea r14, [0x1401ff7f0]
xor r15d, r15d
test r13, r13
je 0x14008b702
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r14
test rcx, rcx
je 0x14008b736
cmp byte [rsp + 0x50], 0
je 0x14008b72c
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x48]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], 0
test rdi, rdi
je 0x14008b750
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x14008b76f
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x58], r14
test rcx, rcx
je 0x14008b7a3
cmp byte [rsp + 0x68], 0
je 0x14008b799
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov qword [rsp + 0x60], r15
mov byte [rsp + 0x68], 0
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x50], r14
test rcx, rcx
je 0x14008b7c9
cmp byte [rbp - 0x40], 0
je 0x14008b7c9
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x48]
mov edx, SafeArrayPutElement
call fcn.14014e088
movzx eax, bl
mov rcx, qword [rbp + 0x4e8]
xor rcx, rsp
call fcn.14014e130
mov rbx, qword [rsp + 0x640]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14008ea60
int3