Function at 0x140019f98
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x140019fe4
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x140019fdf
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x140019fdf
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x140019fdf
xor eax, eax
add rsp, 0x40
pop rbx
ret
invalid
mov ah, 0x1f
jmp 0x140051829
movabs eax, dword [0x1ff6ec68b6a7ea2f]
mov ebx, 0xdbbf9f01
lahf
mov edi, 0x5b292db
lahf
mov edi, 0x5b292db
imul edi, ecx, 0x1a71475a
sahf
cld
jle 0x1400517e5
mov esp, 0xf24bf0bb
invalid
int3
xchg esi, eax
invalid
dec dword [rsi + rbp*4 + 0x6b]
jrcxz 0x140051875
popfq
xchg edi, eax
invalid
xor eax, 0xad56e5e6
invalid
mov esi, 0x8d3df3a1
in eax, 0x96
cmp al, 0xc4
invalid
invalid
hlt
invalid
cwde
jmp 0x1400518c9
jg 0x140051852
sub al, 0xf0
leave
retf
int3
invalid
pop rdx
push rsi
invalid
movabs byte [0x7bf083dab88ca241], al
loope 0x140051d7d
jnp 0x140051d60
std
sub al, 0xb3
adc dword [rdi], ecx
out dx, eax
pop rdi
sbb ah, ah
fisttp dword [rsi - 0x5b]
imul esp, eax, 0x6c74ff3f
je 0x140051dfd
sahf
pop rsi
test dword [rdi], 0x1cc7cc81
invalid
invalid
invalid
jne 0x140051d75
cmp eax, dword [rbp + 0xc]
loope 0x140051e2e
rcr byte ss:[rdi + riz], 1
add eax, 0xc83a3b0
loop 0x140051e26
pushfq
xor ah, byte [rbx + 0x2748c2c]
movabs dword [0x4c86291802748c2c], eax
jbe 0x140051e72
cwde
movabs dword [0x4c86291802748c2c], eax
jbe 0x140051e72
cwde
invalid
add byte [rsi], cl
outsb dx, byte [rsi]
xchg dword [rbx], edx
jge 0x140051d95
adc edi, dword [rbp - 0x6b]
xchg edi, eax
or edi, esi
sbb al, 0xd2
mov edx, dword [rcx + 0x4261a48a]
xchg ecx, eax
invalid
movsb byte [rdi], byte [rsi]
invalid
jae 0x140051dae
xchg ecx, eax
mov ah, byte [rcx + riz*2 + 0x39a17342]
in eax, 0x3d
hlt
cmp ebp, esp
cmp eax, 0x620222f4
push rsp
invalid
shr bl, 1
sub al, 0x25
and al, 0x8a
lodsd eax, dword [rsi]
mov ah, 0x26
cmpsb byte [rsi], byte [rdi]
add al, 0xa4
jge 0x140051df9
mov edx, 0x12633afe
push rsi
invalid
fist word [rcx - 0x7c25a5d1]
invalid
sbb edi, dword [rdx - 0x58]
invalid
mov edi, 0xed874b22
pushfq
adc al, 0x33
stosd dword [rdi], eax
add al, bl
xchg esp, eax
invalid
or al, 0x2f
xor cl, byte [rcx]
jns 0x140051ebd
idiv byte [rbx + rdx*8 - 0x4d]
xchg ecx, eax
invalid
xor dword ss:[rbx], edi
cmp eax, 0x1fc0addd
invalid
pop rdi
std
invalid
int3
sub dl, byte [rdx + 0x22]
xor dword [rbx + rbp*8 - 0x6e], eax
jmp 0x1bd9da979
sbb al, 0xf4
invalid
mov esp, 0xf2950a39
jg 0x140051f76
imul edx, dword [rdi], 0x43f20653
movsb byte [rdi], byte [rsi]
jge 0x140051ed0
invalid
invalid
or dh, byte [rbx + rdi*4 + 0x74]
mov eax, 0x4b16aba8
sahf
invalid
fbstp tbyte [rsp + rcx]
xchg esp, eax
invalid
invalid
xchg byte [rsi + rax*8 - 0x1a528429], bh
pop rdi
ret
or al, 0x64
xor ebx, esi
mov ah, 0xa7
scasd eax, dword [rdi]
int 0x2c
sub al, 0xee
retf 0xbadd
sar dword [rdx - 0x32], cl
in eax, 0x78
fsubr st(0), st(0)
xor dword [rbp - 0xbfb13d2], ebx
sbb al, 0x4b
sti
and eax, 0x411c072c
xchg ebp, eax
and eax, 0xe615e129
invalid
mov bl, 0x7c
adc byte [rbx], dh
out 0xcf, eax
xchg edi, eax
pop rcx
enter 0x66ef, 0x31
test eax, 0xcbdfb17
mov ebp, 0x53407bca
jno 0x14005215c
invalid
invalid
invalid
hlt