Function at 0x1400922b0
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov rax, qword [0x140278ec8]
xor rax, rsp
mov qword [rbp + 0x4e8], rax
mov qword [rsp + 0x70], rdx
mov rbx, rcx
mov qword [rbp - 0x70], rcx
lea rdx, str.active
xor r15d, r15d
lea rcx, [rbp - 0x50]
mov esi, r15d
mov dword [rsp + 0x30], r15d
call fcn.140018fc0
lea rdx, str.errorCode
lea rcx, [rsp + 0x58]
call fcn.140018fc0
lea rcx, [rsp + 0x38]
call fcn.1400d07c0
mov rax, qword [rbx + 0x18]
lea r14, [0x140209838]
xor edx, edx
mov dword [rsp + 0x30], r15d
lea r8, str.8BA1E16C_FC54_4595_9782_E370A5FBE8DA
mov qword [rsp + 0x40], r14
mov edi, r15d
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], sil
lea ecx, [rdx + 4]
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rbp - 0x58], rax
mov r13, rax
test rax, rax
jne 0x1400924a7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x140092442
lea r9, [rbp + 0x4e5]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov ebx, edx
test edx, edx
jne 0x140092390
movdqa xmm0, xmmword [0x14020a0a0]
lea rax, [rbp + 0x4e5]
mov byte [rbp + 0x450], sil
movdqu xmmword [rbp + 0x460], xmm0
cmp r9, rax
je 0x1400923f2
lea r8, [rbp + 0x4e5]
mov rdx, r9
sub r8, r9
lea rcx, [rbp + 0x450]
call fcn.140013b20
cmp qword [rbp + 0x468], 0x10
lea rbx, [rbp + 0x450]
mov r8d, 0x25c
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
cmovae rbx, qword [rbp + 0x450]
lea rcx, [rbp + 0x50]
xor r9d, r9d
call fcn.1400c7000
lea rdx, str.OpenFileMappingW_failed_with
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, 3
test sil, 2
je 0x140092454
and esi, 0xfffffffd
lea rcx, [rbp + 0x50]
call fcn.1400c7360
test sil, 1
je 0x140092687
mov rdx, qword [rbp + 0x468]
cmp rdx, 0x10
jb 0x140092687
mov rcx, qword [rbp + 0x450]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140092592
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140092b1c
jmp 0x140092592
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r12, rax
test rax, rax
jne 0x14009259e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x140092533
mov edx, ebx
lea rcx, [rbp + 0x490]
call fcn.14006bed0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400924f7
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
mov r8d, 0x264
lea rcx, [rbp + 0x150]
call fcn.1400c7000
lea rdx, str.MapViewOfFile_failed_with
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, reloc.SHLWAPI.dll_SHCreateMemStream
test sil, 8
je 0x140092548
and esi, 0xfffffff7
lea rcx, [rbp + 0x150]
call fcn.1400c7360
test sil, 4
je 0x140092687
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0x10
jb 0x140092687
mov rcx, qword [rbp + 0x490]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140092592
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140092b28
call fcn.140157a40
xor bl, bl
jmp 0x140092a14
mov r8d, 0x30
lea rdx, [rbp + 0x20]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
jne 0x14009268e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x140092622
mov edx, ebx
lea rcx, [rbp + 0x4b0]
call fcn.14006bed0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400925e6
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
mov r8d, 0x270
lea rcx, [rbp + 0x250]
call fcn.1400c7000
lea rdx, str.VirtualQuery_failed_with
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, 0x30
test sil, 0x20
je 0x140092637
and esi, 0xffffffdf
lea rcx, [rbp + 0x250]
call fcn.1400c7360
test sil, 0x10
je 0x14009267e
mov rdx, qword [rbp + 0x4c8]
cmp rdx, 0x10
jb 0x14009267e
mov rcx, qword [rbp + 0x4b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140092679
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140092b2e
call fcn.140157a40
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
xor bl, bl
jmp 0x140092a14
mov r8, qword [rbp + 0x38]
mov r14, r15
lea rbx, [r8 + 1]
test rbx, rbx
je 0x1400926e0
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x10], 0xffffffffffffffff
cmp rbx, rax
ja 0x140092b34
lfence
mov rcx, rbx
call fcn.140002c80
mov r8, rbx
xor edx, edx
mov rcx, rax
mov r14, rax
lea r15, [rax + rbx]
call fcn.140187df0
mov r8, qword [rbp + 0x38]
mov r13, qword [rbp - 0x58]
mov rdx, r12
mov rcx, r14
call fcn.1401879e0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, r14
lea rcx, [rbp - 0x38]
call fcn.140005020
mov r12, qword [rsp + 0x70]
mov rdx, rax
mov rcx, r12
call fcn.1400087d0
mov rcx, qword [rbp - 0x30]
lea rax, [0x140209838]
mov qword [rbp - 0x38], rax
test rcx, rcx
je 0x14009273d
cmp byte [rbp - 0x28], sil
je 0x14009273d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x30]
mov edx, SafeArrayPutElement
call fcn.140157a40
lea rax, [rsp + 0x40]
xor r8d, r8d
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.1400ce1a0
mov rbx, qword [rax]
test rbx, rbx
je 0x140092778
mov rax, qword [rbx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rbx
mov rax, qword [rcx]
call qword [rax]
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x38], rbx
test rdx, rdx
je 0x1400927a1
mov rax, qword [rdx + 8]
add rdx, 8
movsxd rcx, dword [rax + 4]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x1400927c5
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x38]
cmp dword [rsp + 0x30], esi
jne 0x14009290a
mov rax, qword [rbx]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call qword [rax + 0x60]
mov rdi, qword [rax]
test rdi, rdi
je 0x1400927f8
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x140092816
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp - 0x78], rsi
je 0x1400928a1
mov rsi, qword [rbp - 0x70]
mov rbx, qword [rdi]
mov rcx, qword [rsi + 0x18]
call fcn.14000b390
mov rcx, rax
call fcn.14001ead0
movzx r8d, al
lea rdx, [rbp - 0x50]
mov rcx, rdi
call qword [rbx + 0xb0]
mov rcx, qword [rsi + 0x18]
mov rbx, qword [rdi]
call fcn.14000b390
mov rcx, rax
lea rdx, [rbp - 0x20]
call fcn.14001e4a0
mov r8, rax
lea rdx, [rsp + 0x58]
mov rcx, rdi
call qword [rbx + reloc.OLEAUT32.dll_SetErrorInfo]
mov rcx, qword [rbp - 0x18]
lea rbx, [0x140209838]
mov qword [rbp - 0x20], rbx
test rcx, rcx
je 0x1400928a8
cmp byte [rbp - 0x10], 0
je 0x1400928a8
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x18]
mov edx, SafeArrayPutElement
call fcn.140157a40
jmp 0x1400928a8
lea rbx, [0x140209838]
mov qword [rbp - 0x68], rdi
test rdi, rdi
je 0x1400928c5
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.14003a880
mov rdx, rax
mov rcx, r12
call fcn.1400087d0
mov rcx, qword [rbp]
mov qword [rbp - 8], rbx
test rcx, rcx
je 0x140092903
cmp byte [rbp + 8], 0
je 0x140092903
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp]
mov edx, SafeArrayPutElement
call fcn.140157a40
mov bl, 1
jmp 0x1400929cb
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x14009296d
lea rdx, [rbp + 0x470]
lea rcx, [rsp + 0x40]
call fcn.140010490
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140092931
mov rbx, qword [rax]
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_srcquery_handler_win.cc
mov r8d, 0x28a
lea rcx, [rbp + 0x350]
call fcn.1400c7000
lea rdx, str.Memory_mapped_file::Read
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rbx
call fcn.1400025c0
mov esi, 0xc0
test sil, sil
jns 0x140092982
btr esi, 7
lea rcx, [rbp + 0x350]
call fcn.1400c7360
test sil, 0x40
je 0x1400929c9
mov rdx, qword [rbp + 0x488]
cmp rdx, 0x10
jb 0x1400929c9
mov rcx, qword [rbp + 0x470]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400929c4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140092b16
call fcn.140157a40
xor bl, bl
test r14, r14
je 0x140092a0a
sub r15, r14
cmp r15, 0x1000
jb 0x1400929ff
lfence
mov rcx, qword [r14 - 8]
add r15, 0x27
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x140092b22
mov r13, qword [rbp - 0x58]
mov r14, rcx
mov rdx, r15
mov rcx, r14
call fcn.140157a40
lea r14, [0x140209838]
xor r15d, r15d
test r13, r13
je 0x140092a22
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], r14
test rcx, rcx
je 0x140092a56
cmp byte [rsp + 0x50], 0
je 0x140092a4c
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x48]
mov edx, SafeArrayPutElement
call fcn.140157a40
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], 0
test rdi, rdi
je 0x140092a70
mov rax, qword [rdi + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x140092a8f
mov rcx, qword [rax + 8]
movsxd rdx, dword [rcx + 4]
lea rcx, [rax + 8]
add rcx, rdx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x58], r14
test rcx, rcx
je 0x140092ac3
cmp byte [rsp + 0x68], 0
je 0x140092ab9
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.140157a40
mov qword [rsp + 0x60], r15
mov byte [rsp + 0x68], 0
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x50], r14
test rcx, rcx
je 0x140092ae9
cmp byte [rbp - 0x40], 0
je 0x140092ae9
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x48]
mov edx, SafeArrayPutElement
call fcn.140157a40
movzx eax, bl
mov rcx, qword [rbp + 0x4e8]
xor rcx, rsp
call fcn.140157ae0
mov rbx, qword [rsp + 0x640]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140195efc
int3
call fcn.140195efc
int3
call fcn.140195efc
int3
call fcn.140195efc
int3
call fcn.140195efc
int3
call fcn.140095d50
int3