Function at 0x140019f98
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x140019fe4
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x140019fdf
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x140019fdf
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x140019fdf
xor eax, eax
add rsp, 0x40
pop rbx
ret
jmp 0x1bccc7272
sbb dh, cl
adc ecx, esi
insb byte [rdi], dx
cdq
fild word [r11 - 0x70e63942]
invalid
xor eax, 0xf0e57bb0
fdivr st(0), st(0)
in al, dx
invalid
invalid
int3
and ecx, dword [rcx - 0x4ff92bb5]
jnp 0x140051860
invalid
add byte [rsi], al
mov ecx, 0x76ce7834
invalid
invalid
xchg ebp, eax
jbe 0x1400518d3
jbe 0x1400518d3
jbe 0x1400518d3
mov dh, 0x5d
jl 0x140051894
out 0xdb, al
outsd dx, dword [rsi]
in eax, dx
out 0xf3, al
mov bh, 0x91
xchg ecx, eax
xchg ecx, eax
invalid
add eax, 0x4a5efc36
sbb al, 0x17
jae 0x14005189d
invalid
add dword [rax + 0x42], ecx
add esi, eax
and dword [rsp + rdx*2], edi
cmp al, 0x54
rcr dword [rcx + 0x4d88cd8], 1
invalid
invalid
sbb eax, 0x7c7d8e7b
and byte [rax + 0x7e], dl
cli
rol dword [rsp], 0x48
mov ch, 0x68
xor eax, 0x3983bf31
invalid
sbb bh, byte [rbx - 0x37]
sub dword [rcx + 0x24c5ab50], 0x30
sub byte [rdi + 5], cl
mov byte [rdx - 0x1e], bh
push 0xffffffffd4472f99
invalid
adc byte [rax - 0x6883f1e], dl
jge 0x140051e39
jns 0x140051df3
sar byte [rcx + 0xb], 1
lahf
mov edi, 0x1616f776
mov eax, 0x9d8bdefd
mov bl, byte [rdi + 0x32a4d745]
movsb byte [rdi], byte [rsi]
xor ah, byte [rdi]
movsb byte [rdi], byte [rsi]
xor ah, byte [rdi]
movsb byte [rdi], byte [rsi]
mov bl, bl
out 0x2c, al
invalid
mov r13b, 0xb4
loop 0x140051e4e
in eax, 0x57
jg 0x140051db9
add bl, bh
hlt
pop rsi
jbe 0x140051d9c
invalid
int1
rol dword [rsi + 0x4a], 1
invalid
jbe 0x140051eac
jbe 0x140051eac
invalid
test bl, cl
cli
movsb byte [rdi], byte [rsi]
invalid
mov ebp, 0x7bf2e36e
movsd dword [rdi], dword [rsi]
jge 0x140051e25
sbb al, 0xa
cmp al, 0x75
jne 0x140051ee1
sub ebp, dword [rcx - 0x68b883fa]
mov r11d, 0x16127aee
adc dl, byte [rsi]
adc dl, byte [rsi]
imul edi, eax, 0xbed2063
stc
sub byte [rbp - 0x3b], dl
lodsb al, byte [rsi]
mov dh, 0xbb
mov byte [rcx - 0x3d7671c6], bl
stosd dword [rdi], eax
cdq
cmp cl, byte [rsi + 0x35abc289]
invalid
pop rdx
xchg edi, eax
invalid
xor eax, 0x1f4b975a
int 0x9e
adc byte [rsi], bh
mov dh, 0xa1
xchg edi, eax
int1
fld xword [rbp - 0x53]
lodsd eax, dword [rsi]
movsq qword [rdi], qword [rsi]
mov bh, 0x20
stosb byte [rdi], al
jl 0x140051f1a
out dx, al
invalid
xlatb
jnp 0x140051e84
push rax
loopne 0x140051ee4
push rbp
mov esi, 0x327a9f9f
invalid
sub al, 0x5e
invalid
jnp 0x140051e92
xchg ebp, eax
xlatb
sti
fdivr qword gs:[rcx - 0x40]
mov byte [rax - 0x68], ah
xchg ebx, eax
cld
sal bl, cl
sub cl, byte [rsi - 0xd]
jne 0x140051f41
invalid
adc dword [rbx], esi
xor dl, byte [rbp - 0x69]
invalid
invalid
ror byte [rcx], 0x4e
in eax, dx
sar dl, 1
cdq
invalid
ffreep st(0)
adc ah, byte [rbx + rcx*8]
cmp ebx, ebp
jg 0x140051f7a
mov edi, 0xf04c8a4a
jnp 0x140051f7a
cmp al, 0x11
xchg byte [rdi + 0x54bf11e8], ah
cmp eax, 0xb6d3fb9d
sbb byte [rdx - 0x56], bl
sahf
popfq
sti
sal dword [rsi - 0x6155a5e8], cl
invalid
invalid
invalid
js 0x140051fc8
mov edi, 0xf9678323
int1
invalid
lahf
ror byte [rax - 0x63], cl
hlt
lodsd eax, dword [rsi]
or edx, dword [rdx + 0x46e80ad6]
in eax, dx
int1
invalid
jb 0x14005208c
invalid
movabs al, byte [0x6a93d7bef9cf557a]
or eax, 0x606ecdf8
rcr dword [0x1634054d5], 0xfd
xor edi, dword [rbx]
and edi, ebp
xor edi, dword [rbx]
and edi, ebp
jb 0x140052101
fisttp word [rbp + rbp + 0x16d2c7b]
fadd qword [rbx + 0x2a]
pop rax
pop rdx
invalid
mov ecx, 0xf83a8351
mov esi, 0x72a1f7ff
sub ebp, dword [rcx - 1]
invalid
imul edi, dword [rdi + rbx*2 + 0x1f], 0x5a
jge 0x14005210b
invalid