Function at 0x140004ac0
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp + 0x370], rax
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor r14d, r14d
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x18], r14
mov qword [rcx + 0x20], r14
lea rsi, [rbp + 0x3c0]
call fcn.140002450
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r14
mov r9, rbx
mov r8d, 0x104
lea rdx, [rbp + 0x160]
mov rcx, qword [rax]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vswprintf]
mov ecx, 0xffffffff
test eax, eax
cmovs eax, ecx
test eax, eax
js 0x140004d0f
lea r9, str.written
lea r8, [rbp + 0x160]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400049f0
test eax, eax
js 0x140004d0f
lea r8, [rsp + 0x50]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
test rax, rax
je 0x140004d2b
mov rcx, qword [rdi]
mov qword [rdi], rax
test rcx, rcx
je 0x140004ba8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, str.avail
lea r8, [rbp + 0x160]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400049f0
lea r8, [rsp + 0x50]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
test rax, rax
je 0x140004d4e
mov rcx, qword [rdi + 8]
mov qword [rdi + 8], rax
test rcx, rcx
je 0x140004bf3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, str.mutex
lea r8, [rbp + 0x160]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400049f0
lea r8, [rsp + 0x50]
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
test rax, rax
je 0x140004d71
mov rcx, qword [rdi + 0x10]
mov qword [rdi + 0x10], rax
test rcx, rcx
je 0x140004c3e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [0x140007800]
lea r8, [rbp + 0x160]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400049f0
lea r8, [rsp + 0x50]
xor edx, edx
mov ecx, 6
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov rbx, rax
test rax, rax
je 0x140004d94
mov rcx, qword [rdi + 0x18]
mov qword [rdi + 0x18], rax
test rcx, rcx
je 0x140004c8c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov edx, 6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
je 0x140004cec
mov rcx, qword [rdi + 0x20]
mov qword [rdi + 0x20], rax
test rcx, rcx
je 0x140004cc0
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rdi + 0x28], rbx
lea rcx, [rbx + 0x10]
mov qword [rdi + 0x30], rcx
mov rax, rdi
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.1400056d0
add rsp, 0x480
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, str.Failed_to_map_a_view_of_the_file_mapping_object.
lea rcx, [rsp + 0x30]
call fcn.140002dd0
lea rdx, [0x140008cb0]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [rsp + 0x30]
call fcn.140004a50
lea rdx, [0x140008d80]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.Failed_to_open_a_handle_to_the_written_event_object.
lea rcx, [rsp + 0x30]
call fcn.140002dd0
lea rdx, [0x140008cb0]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.Failed_to_open_a_handle_to_the_available_event_object.
lea rcx, [rsp + 0x30]
call fcn.140002dd0
lea rdx, [0x140008cb0]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.Failed_to_open_a_handle_to_the_mutex_object.
lea rcx, [rsp + 0x30]
call fcn.140002dd0
lea rdx, [0x140008cb0]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.Failed_to_open_a_handle_to_the_file_mapping_object.
lea rcx, [rsp + 0x30]
call fcn.140002dd0
lea rdx, [0x140008cb0]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3