Function at 0x140019f98
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x140019fe4
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x140019fdf
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x140019fdf
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x140019fdf
xor eax, eax
add rsp, 0x40
pop rbx
ret
mov ebx, 0xb7a3b34c
cmc
mov bl, 0xa3
mov bh, 0xf5
or eax, 0xce47c7b1
pop rbp
sal dh, 1
sti
call 0x1386ddfc6
ret 0xdf4d
mov edx, 0x17f4d9b6
mov edx, 0x17f4d9b6
ja 0x140051803
sbb dl, byte [rdi]
mov al, 0x55
cmpsd dword [rsi], dword [rdi]
outsd dx, dword [rsi]
sbb eax, 0x66b88f27
and rdx, r12
mov eax, 0xd4234966
std
add ebx, ebp
jmp 0x140051867
outsd dx, dword [rsi]
invalid
jmp 0x140051867
push rdi
wait
sbb dword [rdi + 0x3346d58e], eax
push rbp
xchg dword [rsi - 0xccb92b], ecx
cmc
adc dword [rdi - 3], esi
std
pop rsi
mov esp, 0x103128fc
sub eax, 0x45daef24
sub byte [rcx], dh
adc byte [0x185e0076c], ch
invalid
call 0x1a9ac864c
ror dword [rax + 0x15e0df50], 1
pop rcx
cdq
js 0x140051840
insd dword [rdi], dx
cmpsd dword [rsi], dword [rdi]
imul edx, ecx, 0xe0df5088
adc eax, 0x78995965
loop 0x1400517e6
xchg dword [rdi + 0x76], eax
shl dword [rcx - 0x72eeeda7], 1
invalid
pop rcx
adc dl, byte [rcx]
invalid
jbe 0x140051833
movabs eax, dword [0x1a7bc0918d111259]
pop rcx
xchg ecx, eax
sar byte [rbx + 0x1a], 0x59
retfq 0x2c17
mov ebp, 0x3811f046
adc byte [rdx - 0x406ae94d], cl
cmc
outsd dx, dword [rsi]
hlt
jg 0x140051813
sub edx, dword [rdi + 0xf]
loope 0x1400518dd
add edi, dword [rax - 0x4460d960]
imul edx, eax, 0xfffffff6
xor al, 0x14
jmp 0x140051850
invalid
push qword [rax + rdi*8 + 0x3c]
enter 0xfffffffffffff02f, 0x23
clc
and edi, eax
and edx, dword [rbp - 0x21]
std
invalid
sub al, 0x3d
or dword [rbp - 0x4e], 0xffffffaf
push rsp
mov byte [rsi + 0x64], 0x31
fnsave dword [rdi]
sub dword [rcx - 0x5d81d3ea], edx
push rsp
scasd eax, dword [rdi]
pop rax
test byte [rbx + rdx*2 + 0x1e], al
stosd dword [rdi], eax
xchg ebx, eax
ja 0x140051dec
in eax, dx
adc eax, 0xa25d6daf
cmpsd dword [rsi], dword [rdi]
pop rsi
xchg dword [rbx], edx
jge 0x140051d95
adc edi, esi
jnp 0x140051d8e
ror byte [rbx + 0x542e8a91], cl
xchg ecx, eax
mov ch, byte [rsi]
push rsp
push rbx
xchg esp, eax
int3
adc al, 0x43
cmp ebx, edi
rcr byte [rbx - 0x79f5d286], 1
invalid
adc eax, 0xeb1d321c
invalid
invalid
sar edi, cl
stosb byte [rdi], al
cdq
sbb edi, dword [rsp + rbx*4 + 0x33]
pop qword [rbx]
ret
retf
pop rsp
cld
adc byte [0x1b73f9e0a], dl
cmp al, 0x76
jns 0x140051e6a
jg 0x140051e73
pop rdi
out dx, eax
sub esi, dword [rdx + 0x39]
call 0x18ece853a
leave
mov ch, 0xd9
fnstenv [rdx]
add eax, 0xcbf1acec
retf
retf
in al, 0xe1
invalid
xchg esp, eax
invalid
enter 0xaaf, 0xffffffffffffff95
bnd jg 0x140051e8e
int3
adc edi, edi
sbb al, 0xdb
xchg edi, eax
invalid
test byte [r13 + 0x23cff3da], 0x86
xchg edi, eax
mov bh, 0x3d
invalid
invalid
invalid
or word [rsp + rsi*2 + 0x5fe5ad7b], cx
xor byte [rax], ch
xor al, 0x75
out dx, eax
mov ebx, dword [rbx + 0x37]
fidivr word [0xd6918c45]
adc dh, byte [rbx]
scasd eax, dword [rdi]
int 0x2c
sub al, 0xed
movabs byte [0x9668eedb971f6168], al
mov dword cs:[rdi - 0x1e], 0x3971b55
loope 0x140051f76
push rbp
sbb edx, dword [rdi + 0x5efae103]
pop rsi
je 0x140051f89
adc al, 0x94
retf 0xdfa6
lodsd eax, dword [rsi]
out dx, eax
cmc
scasb al, byte [rdi]
invalid
invalid
sbb byte [0xcfcb570c], bl
lea esp, [rax]
lahf
cmpsd dword [rsi], dword [rdi]
invalid
hlt