Function at 0x1800196f8
Capabilities:
Check mutex on windows
Read file via mapping

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov rbx, r8
movzx r15d, dl
mov rsi, rcx
call fcn.18000f3c4
test al, al
jne 0x180019918
mov r14d, 1
mov edx, r14d
lea rcx, [rbp + 0x1f]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
lea rcx, [rbp + 0x1f]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [rbp + 7], r14d
mov dword [rbp - 9], DispGetIDsOfNames
lea rax, [rbp + 0x1f]
mov qword [rbp - 1], rax
mov rcx, qword [rbx + 0x10]
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
sub rax, rcx
cmp rax, 2
jb 0x180019ba4
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x180019792
mov rax, qword [rbx]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 2
lea r9, [0x1800ead70]
mov r8, rbx
mov dl, byte [rbp + 0x7f]
lea rcx, [rbp - 0x29]
call fcn.1800090dc
lea r8, [rbp - 0x29]
cmp qword [rbp - 0x11], 0x10
cmovae r8, qword [rbp - 0x29]
mov edx, r15d
lea rcx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsi], rax
mov r14d, 0x1000
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x180019816
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, r14
jb 0x180019811
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019baa
call fcn.18009d1f4
cmp qword [rsi], 0
jne 0x180019827
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180019b81
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x18001983c
mov rcx, qword [rsi]
call fcn.180007b24
mov rcx, qword [rbx + 0x10]
sub rdi, rcx
cmp rdi, 3
jb 0x180019bb0
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x18001985a
mov rax, qword [rbx]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 3
lea r9, [0x1800ead74]
mov r8, rbx
mov dl, byte [rbp + 0x7f]
lea rcx, [rbp - 0x29]
call fcn.1800090dc
lea rax, [rbp - 0x29]
cmp qword [rbp - 0x11], 0x10
cmovae rax, qword [rbp - 0x29]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x12000
xor r9d, r9d
lea r8d, [r9 + 4]
lea rdx, [rbp - 9]
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsi + 8], rax
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x1800198ee
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, r14
jb 0x1800198e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019bb6
call fcn.18009d1f4
cmp qword [rsi + 8], 0
je 0x18001981c
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x180019a54
mov rcx, qword [rsi + 8]
call fcn.180007b24
jmp 0x180019a54
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
and qword [rbp + 7], 0
movdqu xmmword [rbp - 0x29], xmm0
and qword [rbp - 0x19], 0
lea rcx, [rbp + 0xf]
call fcn.180010d38
nop
lea r9, [rbp - 0x29]
lea r8, [rbp - 9]
lea rdx, str.OSSMemRoute
lea rcx, [rbp + 0xf]
call fcn.180011058
mov rax, qword [rbp - 1]
mov rbx, qword [rbp - 9]
sub rax, rbx
sar rax, 3
mov rdi, qword [rbp - 0x29]
cmp rax, 2
jne 0x1800199ae
mov rcx, qword [rbp - 0x21]
sub rcx, rdi
sar rcx, 2
cmp rax, rcx
jne 0x1800199ae
xor edx, edx
test rcx, rcx
je 0x1800199ae
xor eax, eax
lea r14d, [rdx + 1]
cmp dword [rdi + rax*4], 0
jne 0x180019997
mov rax, qword [rbx + rax*8]
mov qword [rsi + 8], rax
jmp 0x1800199a4
cmp dword [rdi + rax*4], r14d
jne 0x1800199a4
mov rax, qword [rbx + rax*8]
mov qword [rsi], rax
add edx, r14d
mov eax, edx
cmp rax, rcx
jb 0x180019987
cmp qword [rsi + 8], 0
je 0x180019af3
cmp qword [rsi], 0
je 0x180019af3
mov rcx, qword [rbp + 0xf]
test rcx, rcx
je 0x1800199d3
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov r14d, 0x1000
test rdi, rdi
je 0x180019a1b
mov rax, qword [rbp - 0x19]
sub rax, rdi
sar rax, 2
lea rdx, [rax*4]
mov rax, rdi
cmp rdx, r14
jb 0x180019a12
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019bbc
mov rcx, rdi
call fcn.18009d1f4
nop
test rbx, rbx
je 0x180019a54
mov rdx, qword [rbp + 7]
sub rdx, rbx
and rdx, 0xfffffffffffffff8
mov rax, rbx
cmp rdx, r14
jb 0x180019a4c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019b9e
mov rcx, rbx
call fcn.18009d1f4
mov al, r15b
neg al
sbb ebx, ebx
and ebx, 0xf001b
mov qword [rsp + 0x20], 0x12000
xor r9d, r9d
xor r8d, r8d
lea edx, [rbx + 4]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, 0xa000
test rax, rax
jne 0x180019aac
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea edx, [rbx + 4]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x18001981c
xor ecx, ecx
jmp 0x180019ab3
lea rcx, [rax + 0xa000]
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rcx
test r15b, r15b
je 0x180019aec
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.1800a02d0
mov rcx, qword [rsi + 0x18]
test rcx, rcx
je 0x180019ae3
xor edx, edx
mov r8d, 0x8000
call fcn.1800a02d0
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor eax, eax
jmp 0x180019b81
mov rcx, qword [rbp + 0xf]
test rcx, rcx
je 0x180019b03
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov r14d, 0x1000
test rdi, rdi
je 0x180019b47
mov rax, qword [rbp - 0x19]
sub rax, rdi
sar rax, 2
lea rdx, [rax*4]
mov rax, rdi
cmp rdx, r14
jb 0x180019b3e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019bbc
mov rcx, rdi
call fcn.18009d1f4
nop
test rbx, rbx
je 0x180019b7c
mov rdx, qword [rbp + 7]
sub rdx, rbx
and rdx, 0xfffffffffffffff8
mov rax, rbx
cmp rdx, r14
jb 0x180019b74
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019b9e
mov rcx, rbx
call fcn.18009d1f4
mov eax, 6
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1800a45b8
int3
call fcn.180001e88
int3
call fcn.1800a45b8
int3
call fcn.180001e88
int3
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
int3