Function at 0x1400014a4
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbp
sub rsp, 0x4d0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x460], rcx
mov qword [rbp + 0x468], rdx
lea rax, [rbp + 0x1d0]
lea rdx, str.C:WindowsSystem32_
mov rcx, rax
call sub.msvcrt.dll_wcscpy
mov rdx, qword [rbp + 0x460]
lea rax, [rbp + 0x1d0]
mov rcx, rax
call sub.msvcrt.dll_wcscat
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
call rax
mov qword [rbp + 0x438], rax
cmp qword [rbp + 0x438], 0xffffffffffffffff
jne 0x14000155f
lea rax, [rbp + 0x1d0]
mov rdx, rax
lea rax, str.Failed_to_open_DLL_file:__s_n
mov rcx, rax
call fcn.140001450
mov eax, 0
jmp 0x140001845
mov rax, qword [rbp + 0x438]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x434], eax
mov rax, qword [rbp + 0x438]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0x1000002
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
call rax
mov qword [rbp + 0x428], rax
cmp qword [rbp + 0x428], 0
jne 0x1400015ef
mov rax, qword [rbp + 0x438]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
lea rax, str.Failed_to_create_file_mapping_n
mov rcx, rax
call fcn.140001450
mov eax, 0
jmp 0x140001845
mov rax, qword [rbp + 0x428]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 4
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_MapViewOfFile]
call rax
mov qword [rbp + 0x420], rax
cmp qword [rbp + 0x420], 0
jne 0x14000166c
mov rax, qword [rbp + 0x428]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x438]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
lea rax, str.Failed_to_map_view_of_file_n
mov rcx, rax
call fcn.140001450
mov eax, 0
jmp 0x140001845
mov rax, qword [rbp + 0x420]
mov qword [rbp + 0x418], rax
mov rax, qword [rbp + 0x418]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x410], rax
mov rax, qword [rbp + 0x410]
add rax, 0x18
mov qword [rbp + 0x408], rax
mov rax, qword [rbp + 0x408]
mov eax, dword [rax + 0x70]
mov edx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x400], rax
mov rax, qword [rbp + 0x400]
mov eax, dword [rax + 0x1c]
mov edx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x3f8], rax
mov rax, qword [rbp + 0x400]
mov eax, dword [rax + 0x20]
mov edx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x3f0], rax
mov rax, qword [rbp + 0x400]
mov eax, dword [rax + 0x24]
mov edx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x3e8], rax
mov qword [rbp + 0x448], 0
mov dword [rbp + 0x444], 0
jmp 0x1400017ef
mov eax, dword [rbp + 0x444]
lea rdx, [rax*4]
mov rax, qword [rbp + 0x3f0]
add rax, rdx
mov eax, dword [rax]
mov edx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x3e0], rax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
call sub.msvcrt.dll_strlen
lea rcx, [rax + 1]
mov rdx, qword [rbp + 0x3e0]
lea rax, [rbp - 0x40]
mov r8, rcx
mov rcx, rax
call sub.msvcrt.dll_mbstowcs
mov rdx, qword [rbp + 0x468]
lea rax, [rbp - 0x40]
mov rcx, rax
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x1400017e8
mov eax, dword [rbp + 0x444]
lea rdx, [rax + rax]
mov rax, qword [rbp + 0x3e8]
add rax, rdx
movzx eax, word [rax]
movzx eax, ax
lea rdx, [rax*4]
mov rax, qword [rbp + 0x3f8]
add rax, rdx
mov eax, dword [rax]
mov edx, eax
mov rax, qword [rbp + 0x420]
add rax, rdx
mov qword [rbp + 0x448], rax
jmp 0x140001805
add dword [rbp + 0x444], 1
mov rax, qword [rbp + 0x400]
mov eax, dword [rax + 0x18]
cmp dword [rbp + 0x444], eax
jb 0x140001738
mov rax, qword [rbp + 0x420]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
call rax
mov rax, qword [rbp + 0x428]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x438]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x448]
add rsp, 0x4d0
pop rbp
ret