Function at 0x18005f900
Capabilities:
Get file size
Read file via mapping

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov rdi, qword [rbp - 0x41]
mov r11, r9
mov r9, qword [rbp - 0x41]
mov r15d, r8d
mov rax, qword [rbp - 0x41]
mov rsi, rdx
mov ebx, dword [rbp + 0x77]
mov r10, rcx
imul r12d, r8d, 0x27d
mov r14d, r8d
mov qword [rbp - 0x39], r9
cmp r8d, r12d
ja 0x18005fc6a
mov r13, qword [rbp - 0x41]
mov r15, qword [rbp - 0x41]
mov qword [rbp - 0x61], rax
mov rax, qword [rbp - 0x41]
mov qword [rbp - 0x51], rax
mov rax, qword [rbp - 0x41]
mov qword [rbp - 1], rax
mov rax, qword [rbp - 0x41]
mov qword [rbp - 0x49], rax
mov eax, dword [rbp + 0x77]
mov dword [rbp - 0x69], eax
nop dword [rax + rax]
cmp r14d, 0xcc3
ja 0x18005fa8e
je 0x18005fa7e
cmp r14d, 0xcf
ja 0x18005fa1c
je 0x18005f9fa
cmp r14d, 0x14
je 0x18005f9ee
cmp r14d, 0x21
je 0x18005f9e6
cmp r14d, 0xbd
jne 0x18005fc41
lea r9, [0x1801296c8]
xor edx, edx
xor ecx, ecx
lea r8d, [r14 - 0x67]
call fcn.1800d6a40
mov r9, qword [rbp - 0x39]
xor ebx, ebx
jmp 0x18005fc41
mov rdi, r13
jmp 0x18005fc41
mov r11, rsi
mov qword [rbp - 0x49], rsi
jmp 0x18005fc45
mov rdx, r10
mov ecx, 0xf
call fcn.1800d0d90
mov r15, rax
test rax, rax
je 0x18005fc10
mov r9, qword [rbp - 0x39]
jmp 0x18005fc41
cmp r14d, 0x3e8
je 0x18005fa4f
mov r8d, dword [rbp - 0x69]
mov r11, qword [rbp - 0x49]
cmp r14d, 0x672
jne 0x18005fc49
mov rdx, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x41]
mov qword [rbp - 0x61], rdx
mov qword [rbp - 0x51], rcx
jmp 0x18005fc51
mov qword [rsp + 0x28], 0
lea rcx, [rbp - 0x31]
xor r9d, r9d
mov qword [rsp + 0x20], r11
xor r8d, r8d
mov edx, 0xe0
call fcn.1800a3a80
mov r9, qword [rbp - 0x39]
mov qword [rbp - 1], rax
jmp 0x18005fc41
mov r11, qword [rbp - 0x49]
xor r8d, r8d
mov dword [rbp - 0x69], r8d
jmp 0x18005fc49
cmp r14d, 0x24ea
ja 0x18005fbde
je 0x18005fb17
cmp r14d, 0x1314
je 0x18005fb61
cmp r14d, 0x1965
je 0x18005faf3
cmp r14d, 0x1fb6
jne 0x18005fc41
cmp dword [r11], 1
jle 0x18005fadb
mov rcx, qword [rsi + 8]
mov edx, 0x6e
call fcn.1800d2700
mov r9, qword [rbp - 0x39]
mov dword [rbp - 0x69], eax
movsxd rcx, dword [rbp - 0x2d]
mov r8d, dword [rbp - 0x69]
add rcx, rdi
mov r11, qword [rbp - 0x49]
mov qword [rbp - 0x51], rcx
jmp 0x18005fc4d
cmp dword [rbp - 0x2d], 1
jge 0x18005fc41
mov esi, 0x49
cmp esi, 0x49
je 0x18005fb31
cmp esi, 0x13f6
je 0x18005fb2d
cmp esi, 0x27a3
jne 0x18005fb46
mov eax, ebx
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor ebx, ebx
jmp 0x18005fb46
xor r9d, r9d
mov rdx, r10
xor ecx, ecx
lea r8d, [r9 + 0x44]
call fcn.18009fdb0
mov r10, qword [rbp + 0x67]
add esi, 0x13ad
cmp esi, 0x3b07
jbe 0x18005fb02
mov r9, qword [rbp - 0x39]
mov rsi, qword [rbp + 0x6f]
jmp 0x18005fc41
cmp dword [r11], 1
jge 0x18005fbb0
mov edi, 0x106
nop dword [rax]
mov eax, edi
sub eax, 0x106
je 0x18005fb80
cmp eax, 0x55
je 0x18005fb17
jmp 0x18005fba5
lea r9, [0x18010e6c6]
mov dword [rbp - 0x59], 0
mov r8, r10
lea rdx, [rbp - 0x59]
mov ecx, 0xcd
call fcn.1800612d0
mov r10, qword [rbp + 0x67]
xor ebx, ebx
add edi, 0x55
cmp edi, 0x1b0
jb 0x18005fb70
mov rax, qword [rsi]
lea rcx, [rbp - 0x2d]
mov qword [rsp + 0x28], 0
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xe0
call fcn.1800a3a80
mov r9, qword [rbp - 0x39]
mov rdi, rax
jmp 0x18005fc41
cmp r14d, 0x286e
je 0x18005fc1a
cmp r14d, 0x500d
jne 0x18005fc41
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9, qword [rbp - 0x39]
test r9, r9
jne 0x18005fc41
nop dword [rax]
mov eax, 0xffffffff
jmp 0x18005fb19
mov r9d, 0x54
mov qword [rbp - 0x41], r15
lea r8, [rbp - 0x41]
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call fcn.1800bf800
mov r9, rax
mov qword [rbp - 0x39], rax
mov r11, qword [rbp - 0x49]
mov r8d, dword [rbp - 0x69]
mov rcx, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x61]
imul eax, dword [rbp + 0x77], 0x31
mov r10, qword [rbp + 0x67]
add r14d, eax
cmp r14d, r12d
ja 0x18005fc90
mov r11, qword [rbp + 0x7f]
jmp 0x18005f990
mov rdx, qword [rbp - 0x41]
mov rcx, qword [rbp - 0x41]
mov r11, qword [rbp - 0x41]
mov r8d, dword [rbp + 0x77]
mov qword [rbp - 0x61], rdx
mov qword [rbp - 0x51], rcx
mov qword [rbp - 0x49], r11
mov qword [rbp - 1], rax
mov dword [rbp - 0x69], r8d
jmp 0x18005fc94
mov r15d, dword [rbp + 0x77]
lea esi, [r15 + 0xa1b]
mov dword [rbp + 0x77], esi
cmp r15d, esi
jae 0x18005fb17
mov r13, qword [rbp - 0x41]
mov r12, qword [rbp - 0x41]
nop
cmp r15d, 0x1a2
ja 0x18005fef1
je 0x18005ffbb
cmp r15d, 0xdb
ja 0x18005fe8f
je 0x18005fe6e
cmp r15d, 0x14
je 0x18005ffd7
cmp r15d, 0x21
je 0x18005fd30
cmp r15d, 0xcf
jne 0x18006014a
lea rdx, [rbp - 0x29]
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r9d, dword [rbp - 0x29]
xor edx, edx
mov rcx, qword [rbp - 0x39]
mov qword [rsp + 0x28], 0
mov dword [rbp - 0x25], eax
lea r8d, [rdx + 2]
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [rbp - 9], rax
jmp 0x18006013e
mov esi, 0xfb
nop word [rax + rax]
cmp esi, 0x350
ja 0x18005fdfa
je 0x18005fdb5
cmp esi, 0xfb
je 0x18005fd85
cmp esi, 0x1c2
je 0x18005fe0a
cmp esi, 0x289
jne 0x18005fe53
cmp rdi, rcx
jb 0x18005fe53
mov esi, dword [rbp + 0x77]
mov r15d, 0xe8
jmp 0x18006014a
mov rdx, rdi
mov qword [rbp - 0x61], rdx
cmp rdi, rcx
jae 0x18005fe53
movzx eax, byte [rdi]
cmp al, 0xa
je 0x18005fe53
cmp al, 0xd
je 0x18005fe53
inc rdi
cmp rdi, rcx
jb 0x18005fd95
jmp 0x18005fe53
test r8d, r8d
lea rdx, [rbp - 0x59]
mov r8, r10
mov ecx, 0xcd
je 0x18005fdd6
mov dword [rbp - 0x59], 4
lea r9, str._br_
jmp 0x18005fde4
mov dword [rbp - 0x59], 5
lea r9, str._br__
call fcn.1800612d0
mov rcx, qword [rbp - 0x51]
mov rdx, rdi
mov r8d, dword [rbp - 0x69]
mov qword [rbp - 0x61], rdx
jmp 0x18005fe53
cmp esi, 0x417
je 0x18005fe38
cmp esi, 0x4de
jne 0x18005fe53
cmp rdx, rdi
jae 0x18005fe53
mov eax, edi
mov r9, rdx
sub eax, edx
mov r8, r10
lea rdx, [rbp - 0x59]
mov dword [rbp - 0x59], eax
mov ecx, 0xcd
call fcn.1800612d0
mov rcx, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x61]
mov r8d, dword [rbp - 0x69]
jmp 0x18005fe53
cmp rdi, rcx
jae 0x18005fe53
nop dword [rax]
movzx eax, byte [rdi]
cmp al, 0xa
je 0x18005fe4b
cmp al, 0xd
jne 0x18005fe53
inc rdi
cmp rdi, rcx
jb 0x18005fe40
mov r10, qword [rbp + 0x67]
add esi, 0xc7
cmp esi, 0x5a5
jb 0x18005fd40
jmp 0x18005fd30
mov rcx, qword [r11 + 0x10]
lea r8, [rbp + 7]
mov r9d, 0x59
xor edx, edx
call fcn.1800a62d0
xor r10d, r10d
mov qword [rbp + 0x67], r10
jmp 0x180060142
cmp r15d, 0xe8
je 0x18005fd7a
cmp r15d, 0x196
jne 0x18006014a
cmp qword [rbp - 9], 0
jne 0x18006014a
mov esi, 0xb9
nop dword [rax]
mov eax, esi
sub eax, 0xb8
je 0x18005fc10
cmp eax, 1
jne 0x18005fedf
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9, qword [rbp - 0x39]
dec esi
cmp esi, 0xb7
ja 0x18005fec0
mov esi, dword [rbp + 0x77]
jmp 0x18006013e
cmp r15d, 0x324
ja 0x18005ff6c
je 0x18005ff57
mov eax, r15d
sub eax, 0x1af
je 0x18005ff50
sub eax, 0xae
je 0x18005ff1b
cmp eax, 0x19
je 0x18005fb17
jmp 0x18006014a
mov ecx, dword [rbp - 0x29]
xor r9d, r9d
mov eax, dword [rbp - 0x25]
xor r8d, r8d
shl rcx, 0x20
or rcx, rax
mov rax, qword [rbp + 0x6f]
mov qword [rsp + 0x20], rcx
lea edx, [r9 + 4]
mov qword [rax], rcx
mov rcx, qword [rbp - 9]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r13, rax
jmp 0x18006013e
xor ebx, ebx
jmp 0x18006014a
test r13, r13
je 0x18005ff63
mov rax, qword [rbp + 0x7f]
mov qword [rax], r13
mov rcx, qword [rbp - 9]
jmp 0x180060138
cmp r15d, 0x3eb
je 0x180060135
cmp r15d, 0x4b2
jne 0x18006014a
mov ecx, 0x94
nop dword [rax + rax]
mov eax, ecx
sub eax, 0x94
je 0x18005ffa4
cmp eax, 0x68
je 0x18005fb17
jmp 0x18005ffb0
mov rax, r13
neg rax
sbb ebx, ebx
neg ebx
dec ebx
add ecx, 0x68
cmp ecx, 0x164
jb 0x18005ff90
mov eax, 0x9b
cmp eax, 0x9b
je 0x180060080
add eax, 0x13fb
cmp eax, 0x13fb
jbe 0x18005ffc0
mov eax, 0xa5
nop dword [rax]
cmp eax, 0xa5
je 0x18005fff7
cmp eax, 0x5f64
jne 0x18005ffff
mov dword [rbp + 0xf], 0
jmp 0x18005ffff
mov qword [rbp + 7], 0
add eax, 0x5ebf
cmp eax, 0xbd7e
jbe 0x18005ffe0
cmp dword [rbp - 0x31], 0
jle 0x18006014a
mov r14d, 0x86
nop dword [rax + rax]
cmp r14d, 0x86
je 0x1800600e1
cmp r14d, 0x2b72
je 0x18006006a
cmp r14d, 0x565e
jne 0x18006011c
mov ecx, 0x3b
cmp ecx, 0x3b
jne 0x180060057
mov eax, dword [rbp - 0x31]
mov dword [rbp + 0xf], eax
mov qword [rbp + 7], r12
add ecx, 0x1be3
cmp ecx, 0x1be3
jbe 0x180060048
jmp 0x18006011c
test r12, r12
jne 0x1800600bb
mov esi, 0x34
mov eax, esi
sub eax, 0x34
je 0x180060087
cmp eax, 1
jne 0x1800600b4
xor eax, eax
jmp 0x18005fb19
mov rdx, qword [r11 + 0x18]
lea rax, str.void_vkCmdCopyImageToBuffer_
mov r9d, 0x24
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rbp - 0x59], 1
lea rcx, [rbp - 0x59]
call fcn.180023820
mov r11, qword [rbp - 0x49]
inc esi
cmp esi, 0x36
jb 0x180060074
mov eax, dword [rbp - 0x31]
lea rdx, [rbp - 0x59]
mov r8, qword [rbp - 1]
mov r9, r12
mov ecx, 0xd3
mov dword [rbp - 0x59], eax
mov qword [rsp + 0x20], 0
call fcn.1800b25d0
jmp 0x180060118
mov eax, dword [rbp - 0x31]
lea r9, [rbp - 0x19]
mov rcx, qword [r11 + 0x18]
lea rdx, [rbp - 0x11]
mov dword [rbp - 0x21], eax
mov r8d, SHRegGetIntW
lea rax, [rbp - 0x21]
mov dword [rbp - 0x11], 1
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x19], 0
call fcn.1800dbb20
mov r12, rax
mov r11, qword [rbp - 0x49]
add r14d, 0x2aec
cmp r14d, 0x80c4
jbe 0x180060020
mov esi, dword [rbp + 0x77]
jmp 0x18006013e
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10, qword [rbp + 0x67]
mov rdx, qword [rbp - 0x61]
mov r8d, dword [rbp - 0x69]
add r15d, 0xc7
cmp r15d, esi
jae 0x18005fb17
mov rcx, qword [rbp - 0x51]
mov r11, qword [rbp - 0x49]
mov r9, qword [rbp - 0x39]
jmp 0x18005fcb0