Function at 0x484290
Capabilities:
Read file via mapping

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4c8
mov rdi, rcx
lea rcx, [rsp + 0xc0]
call fcn.0049e8c0
mov rbx, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xc8]
test r15, r15
je 0x484954
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rax
cmp rax, 4
jae 0x484313
cmp rax, 3
je 0x48434d
cmp rax, 2
je 0x484392
cmp rax, 1
jne 0x4843bb
cmp word [r15], 0
jne 0x4843bb
jmp 0x484803
movabs rcx, 0x5c003f003f005c
lea rdx, [rcx + 0x1d0000]
cmp rdx, qword [r15]
je 0x484803
cmp rcx, qword [r15]
je 0x484803
cmp rax, 0xf8
jae 0x4843bb
cmp word [r15 + 2], 0x3a
jne 0x484392
movzx eax, word [r15 + 4]
jmp 0x48435f
cmp word [r15 + 2], 0x3a
jne 0x484392
movzx eax, word [r15 + 4]
test ax, ax
je 0x484380
cmp ax, 0x2f
je 0x48436d
movzx eax, ax
cmp eax, 0x5c
jne 0x484392
movzx eax, word [r15]
cmp eax, 0x2f
je 0x484396
cmp eax, 0x5c
je 0x484396
jmp 0x484803
movzx eax, word [r15]
cmp eax, 0x2f
je 0x484392
cmp eax, 0x5c
jne 0x484803
movzx eax, word [r15]
cmp ax, 0x5c
je 0x4843a4
movzx eax, ax
cmp eax, 0x2f
jne 0x4843bb
movzx eax, word [r15 + 2]
cmp eax, 0x2f
je 0x484803
cmp eax, 0x5c
je 0x484803
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x80], 2
mov qword [rsp + 0x88], 0
mov ebp, 0x200
mov eax, 2
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov ebx, 0xffffffff
xor r14d, r14d
xor esi, esi
cmp rbp, 0x201
jae 0x484450
jmp 0x48442f
jae 0x484510
cmp rbp, 0x201
jae 0x484450
lea r12, [rsp + 0xc0]
mov edi, 0x200
mov r15, rbp
mov r13, qword [rsp + 0x50]
jmp 0x4844ab
sub rbp, rsi
sub r14, rsi
cmp r14, rbp
mov r13, qword [rsp + 0x50]
jae 0x484487
lea rcx, [rsp + 0x78]
mov rdx, rsi
mov r8, rbp
call fcn.00480b80
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
mov r14, qword [rsp + 0x70]
cmp r14, rbx
mov esi, 0xffffffff
cmovb rsi, r14
mov qword [rsp + 0x88], rsi
mov r12, qword [rsp + 0x68]
mov rdi, rsi
mov r15, rsi
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rcx, r13
mov edx, r15d
mov r8, r12
xor r9d, r9d
call sub.kernel32.dll_GetFullPathNameW
mov r13d, eax
test eax, eax
jne 0x4844d7
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x484562
mov ebp, r13d
cmp r15, rbp
jne 0x484420
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x484a73
add r15, r15
cmp r15, rbx
cmovae r15, rbx
mov rbp, r15
cmp rbp, 0x201
jb 0x48442f
jmp 0x484450
cmp rdi, rbp
jb 0x484a8d
mov qword [rsp + 0x48], 0
cmp r13d, 2
jbe 0x484587
movzx eax, word [r12 + 2]
cmp eax, 0x3a
jne 0x48458e
cmp word [r12 + 4], 0x5c
jne 0x48458e
mov edi, 4
lea r13, str.__UNC_
lea rbx, [rdi + rbp]
inc rbx
mov r9, qword [rsp + 0x58]
cmp rbx, r9
ja 0x484649
jmp 0x4846de
call sub.kernel32.dll_GetLastError
mov ebx, eax
shl rbx, 0x20
or rbx, 2
mov rdi, qword [rsp + 0x60]
cmp qword [rsp + 0x70], 0
jne 0x4847b4
jmp 0x4847c7
je 0x4845ed
jmp 0x48462b
cmp r13d, 4
jb 0x4845ed
lea r13, [0x005c7100]
cmp word [r12], 0x5c
jne 0x484632
cmp eax, 0x3f
je 0x4845c3
cmp eax, 0x5c
jne 0x4845fb
movzx eax, word [r12 + 4]
cmp eax, 0x2e
je 0x4845d7
cmp eax, 0x3f
je 0x4845cc
jmp 0x4845ed
cmp word [r12 + 4], 0x3f
jne 0x4845ed
cmp word [r12 + 6], 0x5c
jne 0x4845ed
jmp 0x484632
cmp word [r12 + 6], 0x5c
jne 0x4845ed
add rbp, 0xfffffffffffffffc
add r12, 8
jmp 0x48453c
cmp word [r12], 0x5c
jne 0x48462b
movzx eax, word [r12 + 2]
cmp ax, 0x5c
jne 0x48462b
add rbp, 0xfffffffffffffffe
add r12, 4
mov edi, 8
lea r13, [0x005c6680]
lea rbx, [rdi + rbp]
inc rbx
mov r9, qword [rsp + 0x58]
cmp rbx, r9
ja 0x484649
jmp 0x4846de
lea r13, [0x005c7100]
xor edi, edi
lea rbx, [rdi + rbp]
inc rbx
mov r9, qword [rsp + 0x58]
cmp rbx, r9
jbe 0x4846de
xor r8d, r8d
mov rax, rbx
shr rax, 0x3e
sete r8b
lea rdx, [rbx + rbx]
add r8, r8
test r9, r9
je 0x48468a
lea rax, [r9 + r9]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], 2
jmp 0x484696
mov qword [rsp + 0xa0], 0
lea rcx, [rsp + 0xa8]
lea r9, [rsp + 0x90]
call fcn.00480020
cmp qword [rsp + 0xa8], 0
mov rcx, qword [rsp + 0xb0]
je 0x48470f
mov rdx, qword [rsp + 0xb8]
movabs rax, 0x8000000000000001
cmp rdx, rax
mov r9, qword [rsp + 0x58]
jne 0x484aa1
cmp rdi, r9
jbe 0x484703
lea rcx, [rsp + 0x38]
xor edx, edx
mov r8, rdi
call fcn.00480b80
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
jmp 0x48471b
xor esi, esi
mov rbx, r9
mov rcx, qword [rsp + 0x50]
jmp 0x48471b
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rbx
xor esi, esi
lea r8, [rdi + rdi]
mov r14, rcx
lea rcx, [rcx + rsi*2]
mov rdx, r13
call sub.msvcrt.dll_memcpy
add rsi, rdi
mov qword [rsp + 0x48], rsi
sub rbx, rsi
cmp rbx, rbp
jae 0x48475f
lea rcx, [rsp + 0x38]
mov rdx, rsi
mov r8, rbp
call fcn.00480b80
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
jmp 0x484764
mov rdi, qword [rsp + 0x60]
mov r8, rbp
add r8, rbp
lea rcx, [r14 + rsi*2]
mov rdx, r12
call sub.msvcrt.dll_memcpy
add rsi, rbp
mov qword [rsp + 0x48], rsi
cmp rsi, qword [rsp + 0x38]
jne 0x484797
lea rcx, [rsp + 0x38]
mov rdx, rsi
call fcn.00480940
mov rsi, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov word [rax + rsi*2], 0
inc rsi
mov qword [rsp + 0x48], rsi
xor ebx, ebx
cmp qword [rsp + 0x70], 0
je 0x4847c7
mov rcx, qword [0x005d3178]
xor edx, edx
mov r8, qword [rsp + 0x68]
call sub.kernel32.dll_HeapFree
test rbx, rbx
je 0x4847f0
cmp qword [rsp + 0x38], 0
je 0x484954
mov r8, qword [rsp + 0x40]
mov rcx, qword [0x005d3178]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x484954
mov rbx, qword [rsp + 0x38]
mov r15, qword [rsp + 0x40]
test r15, r15
je 0x484954
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r15
mov edx, 0x80000000
mov r8d, 7
xor r9d, r9d
call sub.kernel32.dll_CreateFileW
mov rsi, rax
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x48484e
call sub.kernel32.dll_GetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
test rbx, rbx
je 0x484864
mov rcx, qword [0x005d3178]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
cmp rsi, 0xffffffffffffffff
je 0x484951
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xf0], 0
lea rdx, [rsp + 0xc0]
mov rcx, r14
call sub.kernel32.dll_GetFileInformationByHandle
test eax, eax
je 0x4849b0
test byte [rsp + 0xc1], 4
je 0x4848e5
mov qword [rsp + 0x90], 0
lea r8, [rsp + 0x90]
mov rcx, r14
mov edx, 9
mov r9d, 8
call sub.kernel32.dll_GetFileInformationByHandleEx
test eax, eax
je 0x4849b0
mov r12, rdi
mov r15d, dword [rsp + 0xe0]
mov ebx, dword [rsp + 0xe4]
test r14, r14
je 0x4849c1
mov qword [rsp + 0xc0], 0
call sub.kernel32.dll_GetCurrentProcess
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0xc0]
mov rcx, rax
mov rdx, r14
mov r8, rax
call sub.kernel32.dll_DuplicateHandle
test eax, eax
je 0x484a49
mov rsi, qword [rsp + 0xc0]
jmp 0x4849c3
mov rbx, r14
mov eax, ebx
and eax, 3
cmp eax, 1
jne 0x4849a4
lea rsi, [rbx - 1]
mov rcx, qword [rbx - 1]
mov rax, qword [rbx + 7]
call qword [rax]
mov rax, qword [rbx + 7]
cmp qword [rax + 8], 0
je 0x484993
mov r8, qword [rsi]
cmp qword [rax + 0x10], 0x11
jb 0x484985
mov r8, qword [r8 - 8]
mov rcx, qword [0x005d3178]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x005d3178]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov qword [rdi], 0
jmp 0x484a5e
call sub.kernel32.dll_GetLastError
mov qword [rdi], 0
jmp 0x484a56
xor esi, esi
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 2
xor r9d, r9d
call sub.kernel32.dll_CreateFileMappingA
test rax, rax
je 0x484a37
mov rdi, rax
shl r15, 0x20
or r15, rbx
mov qword [rsp + 0x20], r15
mov rcx, rax
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_MapViewOfFile
mov rbx, rax
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
test rbx, rbx
je 0x484a37
mov qword [r12 + 8], rsi
mov qword [r12 + 0x10], rbx
mov qword [r12 + 0x18], r15
mov qword [r12], 1
jmp 0x484a56
mov qword [r12], 0
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
jmp 0x484a56
call sub.kernel32.dll_GetLastError
mov qword [r12], 0
mov rcx, r14
call sub.kernel32.dll_CloseHandle
nop
add rsp, 0x4c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str.internal_error:_entered_unreachable_codefailed_to_write_the_buffered_data
lea r8, str.library_std_src_sys_windows_mod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call fcn.00473ab0
jmp 0x484ab2
lea r8, str.library_std_src_sys_windows_mod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, rbp
mov rdx, rdi
call fcn.00474d50
jmp 0x484ab2
test rdx, rdx
jne 0x484aad
call fcn.0044f4a0
jmp 0x484ab2
call fcn.0044f920
ud2