Function at 0x140003ce0
Capabilities:
Read file via mapping

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xd0
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x118], rbx
mov rax, qword [0x1401f3660]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
lea r13, str.CCspHelper::FileExportContent
mov qword [rsp + 0x20], r13
lea r9, [0x1401cdac8]
mov r8d, 0xb8
lea rdx, str..ce_CspEncrypter.cpp
lea ecx, [r8 - 0x74]
call fcn.140038200
cmp qword [rdi + 0x20], 8
jb 0x140003d51
mov rcx, qword [rdi + 8]
jmp 0x140003d55
lea rcx, [rdi + 8]
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x140003dbc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
lea r9, str._s___::CreateFileW_failed_with_Windows_error_code:__d_.
mov r8d, Ordinal_200
lea rdx, str..ce_CspEncrypter.cpp
lea ecx, [rbp + 0x46]
call fcn.140038200
mov ebx, 0xffff4a56
jmp 0x1400040bc
lea rdx, [rsp + 0xa0]
mov rcx, rbx
call fcn.140009b00
nop
mov rbx, qword [rsp + 0xb8]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], r12
mov word [rsp + 0x80], 0
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r12
mov word [rsp + 0x58], 0
mov rax, qword [rsi]
lea r8, [rsp + 0x78]
mov rdx, rdi
mov rcx, rsi
call qword [rax + Ordinal_26]
mov r8d, 6
lea rdx, str.Local_
lea rcx, [rsp + 0x50]
call fcn.14000b2d0
or r11, 0xffffffffffffffff
mov rsi, r11
mov rax, qword [rsp + 0x90]
cmp rax, r11
cmovb rsi, rax
mov rcx, qword [rsp + 0x68]
sub r11, rcx
cmp r11, rsi
jbe 0x140003e61
lea rax, [rcx + rsi]
cmp rax, rcx
jae 0x140003e6b
call fcn.14003b3f0
mov rcx, qword [rsp + 0x68]
test rsi, rsi
je 0x140003f3e
lea rdi, [rcx + rsi]
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x140003e91
call fcn.14003b3f0
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rdx, rdi
jae 0x140003eb7
mov r8, rcx
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.14000ba60
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
jmp 0x140003eda
test rdi, rdi
jne 0x140003eda
mov qword [rsp + 0x68], r12
lea rax, [rsp + 0x58]
cmp rdx, 8
cmovae rax, qword [rsp + 0x58]
mov word [rax], di
mov rdx, qword [rsp + 0x70]
jmp 0x140003f43
test rdi, rdi
je 0x140003f43
lea r8, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae r8, qword [rsp + 0x80]
lea rax, [rsp + 0x58]
cmp rdx, 8
cmovae rax, qword [rsp + 0x58]
sub rdx, rcx
lea rcx, [rax + rcx*2]
lea r9, [rsi + rsi]
add rdx, rdx
call fcn.140041310
mov qword [rsp + 0x68], rdi
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rax, qword [rsp + 0x58]
mov word [rax + rdi*2], 0
mov rdx, qword [rsp + 0x70]
jmp 0x140003f43
mov rdx, qword [rsp + 0x70]
lea rax, [rsp + 0x58]
cmp rdx, 8
cmovae rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9d, dword [rsp + 0x44]
xor edx, edx
lea r8d, [rdx + 4]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rsi, rax
test rax, rax
jne 0x140003fac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
lea r9, str._s___::CreateFileMappingW_failed_with_Windows_error_code:__d_.
mov r8d, 0xe2
lea rdx, str..ce_CspEncrypter.cpp
lea ecx, [rsi + 0x45]
call fcn.140038200
mov ebx, 0xffff4a54
jmp 0x14000403d
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 6]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
test rax, rax
jne 0x140003ffe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
lea r9, str._s___::MapViewOfFile_failed_with_Windows_error_code:__d_.
mov r8d, 0xeb
lea rdx, str..ce_CspEncrypter.cpp
lea ecx, [rdi + 0x45]
call fcn.140038200
mov ebx, 0xffff4a53
jmp 0x140004034
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 0x10
cmovae rdx, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb8]
mov rcx, rax
call fcn.140042d30
mov ebx, r12d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp qword [rsp + 0x70], 8
jb 0x140004059
mov rcx, qword [rsp + 0x58]
call fcn.140041700
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], r12
mov word [rsp + 0x58], 0
cmp qword [rsp + 0x98], 8
jb 0x140004086
mov rcx, qword [rsp + 0x80]
call fcn.140041700
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], r12
mov word [rsp + 0x80], 0
cmp qword [rsp + 0xc0], 0x10
jb 0x1400040bc
mov rcx, qword [rsp + 0xa8]
call fcn.140041700
mov qword [rsp + 0x20], r13
lea r9, str._s______
mov r8d, 0xff
lea rdx, str..ce_CspEncrypter.cpp
mov ecx, 0x44
call fcn.140038200
mov eax, ebx
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.140041910
mov rbx, qword [rsp + 0x118]
add rsp, 0xd0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret