Function at 0x14002d48c
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x14002d4d8
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x14002d4d3
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x14002d4d3
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x14002d4d3
xor eax, eax
add rsp, 0x40
pop rbx
ret
scasd eax, dword [rdi]
adc ebx, dword [rdi - 0x64]
xor eax, dword [rdx + rbx*4 - 0x12]
imul ebp, dword [rcx + 0x726f890], 0xd25f6ecf
sub eax, dword [rax + 0xdcacf82]
invalid
cmp ch, byte [0x160f171c4]
int3
test al, 0xd7
imul ebp, esi, 0xffffffdf
or byte [rdi + 0x7fbf4972], 0xff
dec dword [rcx]
jmp 0x1400f5f9e
movsb byte [rdi], byte [rsi]
in eax, 0x8b
mov esi, 0x9beef68
adc eax, 0xc03d7afa
out dx, eax
lea ebp, [0x1557c92a7]
mov esi, 0x32c3b628
jo 0x1400f5fcf
mov ah, 0x1f
sbb esp, dword [0x1845a993a]
cmp dword [rbx + 0x44], ecx
frstor dword [rbp + 0x30ad6b08]
mov dl, 0xad
popfq
cmpsb byte [rsi], byte [rdi]
lea edi, [rsi]
invalid
lodsd eax, dword [rsi]
xor byte [rdx - 0x72596253], dh
invalid
add al, byte [rbp + rbx*8 + 0xf]
je 0x1400f5f97
ret
mov ebx, dword [rdi - 0x5d6a7064]
adc ebx, ebx
jmp 0x19352f514
sbb eax, 0x111ec0e
jp 0x1400f6a62
dec dword [rdx + 0x20f9b1fc]
add al, 0xc7
mov bh, ah
mov cl, 0xf9
and byte [rdi + rax*8], al
invalid
out 0xdf, eax
pop rsp
or eax, ebx
adc edi, edi
or byte [rbp + 0x30c6f7e9], bh
invalid
push 0x1d321655
movsd dword [rdi], dword [rsi]
movsd dword [rdi], dword [rsi]
ror byte [edx + 0x6050339a], 0x81
movsb byte [rdi], byte [rsi]
push rbp
call [rdi + 0x759b42f3]
xchg dh, cl
mov ebx, dword [rbx + 0x732a48fb]
test dword [rax - 0x633d110], edx
pop rcx
and dh, cl
push rdx
adc dword [rdi + rcx], 0x787833b6
adc al, 0xf
mov dh, 0x33
js 0x1400f6b50
invalid
nop
push rsp
call [rbx + riz*2]
add bh, bh
xchg ecx, eax
cmp bh, dh
adc eax, 0x9c876aa5
push 0xffffffffffffff87
pushfq
pushfq
mov dl, 0x72
xchg edx, eax
cmp byte [rax + rax*4 - 0x7f437f44], 0xbc
movsd dword [rdi], dword [rsi]
pop rdi
xchg esi, eax
mov bl, byte [rdi - 0xe5bed45]
adc ah, byte [rcx + rsi*8 + 0x4d688089]
pushfq
invalid
xchg ebp, eax
jg 0x1400f6b39
cmp byte [rax + rax*4 - 0x69a05a44], 0x8a
lahf
mov ebx, 0x89f1a412
adc ah, byte [rcx + rsi*8 + 0x4d688089]
pushfq
adc ah, byte [rcx + rsi*8 + 0x4d688089]
pushfq
sbb byte [rbp - 0xb3d081], dl
not byte [rax + 0x11]
pop rbx
movabs dword [0xb222a5e3d6bf5578], eax
invalid
jrcxz 0x1400f6abc
and dh, byte [rdx - 0x4dcb5600]
invalid
xchg ebx, eax
push rsi
push rax
adc dword [rbx - 0x5d], ebx
js 0x1400f6b68
mov edi, 0x22a5e3d6
mov dl, 0
stosb byte [rdi], al
xor al, 0xb2
invalid
invalid
ret
or bh, byte [rcx]
movsb byte [rdi], byte [rsi]
ja 0x1400f6b30
mul dword [rcx + 0x5e]
mov byte [rax], dh
jmp [rsi + rbp + 0x3da47c61]
invalid
in al, dx
loop 0x1400f6af4
invalid
add eax, 0xa802a7b3
sub dword [rcx - 1], edx
ret 0x75db
cli
and al, 0xff
invalid
add ecx, edx
xor byte [rdx - 0x38], cl
xor eax, 0x28001a85
xchg esp, eax
invalid
outsb dx, byte [rsi]
jbe 0x1400f6bda
mov ebx, 0x341c6cf1
and al, byte [rdi]
jb 0x1400f6b47
invalid
mov esp, 0xc2e6ca03
cmp eax, 0xd65a5fca
mov eax, 0xc8401cd
and byte [rbx + 0x409cb33c], al
invalid
sal dh, cl
and eax, 0xd464ff67
invalid