Function at 0x140019f98
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x140019fe4
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x140019fdf
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x140019fdf
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x140019fdf
xor eax, eax
add rsp, 0x40
pop rbx
ret
out 0x7e, al
cmp byte [rdi - 0x4bffc319], 0xce
pop rbp
sal byte cs:[rdx - 0x66], 1
add byte [rsp + rax*8], ah
sahf
push rsp
cmpsb byte [rsi], byte [rdi]
and eax, 0x687fbb43
shr ebp, 1
in eax, dx
in eax, dx
jmp rax
adc ah, byte [rbp + 0x39b31eb7]
scasd eax, dword [rdi]
cmpsb byte [rsi], byte [rdi]
and byte [rax], cl
push rax
push rcx
invalid
out 0xc1, al
xor al, 0x95
retf
insb byte [rdi], dx
and esp, dword [rax + rdx*8]
lodsd eax, dword [rsi]
invalid
cmp byte [rbp + 0x75fe0808], 0xfc
and ebx, dword [rcx]
invalid
call qword [rdi - 0x7d001ed1]
push rsp
mov esp, 0xfa634e4e
int1
pop rbx
or dword [rbx + 0x3e], 0xce9d3c8c
invalid
invalid
invalid
cmp al, 0x9d
invalid
out dx, al
jae 0x14005187b
invalid
invalid
outsd dx, dword [rsi]
hlt
jns 0x140051908
invalid
test dword [r11], 0xb4e1aa14
mov bl, 0x4a
stosd dword [rdi], eax
invalid
mov dl, 0xc3
outsd dx, dword [rsi]
scasd eax, dword [rdi]
mov edx, 0x86b41d0c
invalid
std
and dword [rbx + 0x2985776], ebx
adc byte [rdx + 0x6b81d5f4], dl
or eax, 0x504da6a9
jg 0x140051d65
jbe 0x140051e0a
cwde
add dl, byte [rax]
xchg edx, eax
hlt
out 0xf, al
cmp byte [rdi - 0x66982bc], bh
invalid
std
xchg edi, eax
sub dh, byte [rcx + 0x1f7bea87]
jns 0x140051e5f
or esi, 0xffffffbe
push 0xffffffffffffffb5
jle 0x140051db1
ret
mov dh, 0xc3
pop rax
xchg ebp, eax
sub dword [rdx + riz*2 - 0x59], esp
add dword gs:[rcx + 0x56562b72], esi
jle 0x140051dc2
invalid
stosd dword [rdi], eax
jno 0x140051dae
mov al, byte [rcx - 0x13]
and byte [rdi - 0x497ab13], ah
sti
sti
push 0x1528eb9d
frstor dword [rbx]
jb 0x140051dec
sub byte [0x1b25141ed], dl
fist dword [rdi + 0x643d7be9]
xchg edi, eax
jmp 0x131695b92
int1
mov eax, 0xf7141e8a
and eax, esp
jne 0x140051e5f
jp 0x140051e60
int3
adc al, 0x43
cmp ebx, edi
invalid
add eax, 0x806d5a39
invalid
mov edx, 0x60ea6be9
cmp esp, esi
adc al, 0x69
ficomp word [rsi - 0x3cbb5575]
xchg edi, eax
mov dl, byte [rsi]
xor al, 0x7f
sahf
mov ebp, dword [rdx - 0x75683cbc]
invalid
jg 0x140051e56
cmc
jrcxz 0x140051dfa
add al, 0x9e
rcr byte [rdi - 0x19], cl
invalid
jno 0x140051e85
and dword [rdx - 0x389a7182], edx
int 0x22
jl 0x140051e1c
xchg edx, eax
jle 0x140051e16
invalid
xor eax, 0xbb0e3738
and rbx, r8
invalid
pop rdi
fisubr dword [rsi + 0x24]
push 0xffffffffffffff97
invalid
invalid
invalid
xor byte [rcx], cl
cdq
invalid
jle 0x140052195
insd dword [rdi], dx
div byte [r14]
pop rdx
mov ebx, 0x2c47ca6b
scasd eax, dword [rdi]
sub byte [rcx + 0x62], al
pop rax
pop rdx
cld
ja 0x1400520c2
sub dword [rdi + 0x2f], eax
sar edx, cl
femms
invalid
mov edi, 0xf822333f
mov esi, 0xf611f7ff
invalid
jg 0x1400521d9
or cl, byte es:[rax + 0x754b2a78]
pop rsi
invalid
mov dh, byte [rdx]
sbb byte [rdx + rbx*8], bpl
xchg edi, eax
cli
mov edx, 0x1d92fccd
jmp 0x1400521c5
or esi, esp
invalid
sbb bh, bh
add eax, 0x507a237d
cdq
xchg edi, eax
xchg dword [rax], edi
invalid