Function at 0x140019f98
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x140019fe4
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x140019fdf
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x140019fdf
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x140019fdf
xor eax, eax
add rsp, 0x40
pop rbx
ret
invalid
invalid
invalid
mov byte [rdi + rsi*4 + 0x1e], ah
mov bl, 0x39
dec dword [r15]
jmp 0x14005181f
cmp dword [rdi - 1], eax
por mm7, mm2
sub r11b, byte [rbx]
invalid
dec dword [rsi + rbp*4 + 0x6b]
cmp dword [rsp + rax*8 + 0x23], ebp
fisttp word [rcx + 0x79]
invalid
or eax, 0xad82804c
invalid
sub byte [rsi + 0x5fb7e2da], 0xbf
clc
fbstp tbyte [rsi]
sub al, byte [rax + 0x7b39b0ff]
jnp 0x140051859
cmp bh, 0xb0
cmp dword [rbx + 0x7b], edi
stc
clc
or bh, byte [rbx + 0x6d5a1e8c]
mov ebx, 0x6d5a1e8c
mov ebx, 0x6d5a1e8c
rol al, cl
notrack jmp 0x1400518ad
iretd
outsd dx, dword [rsi]
hlt
mov ch, 0x36
or dword [rdi - 9], ecx
clc
invalid
or bh, dh
adc al, 0xf
sbb esi, dword [rsi + 0x5fc31723]
jmp [rdi - 0x59]
invalid
jl 0x140051ccb
cmp al, 0xf5
mov ebp, 0xfba4bee1
invalid
movsd dword [rdi], dword [rsi]
jae 0x140051d40
in eax, 0x9d
invalid
ret 0x2f60
xlatb
invalid
push rsi
and ecx, dword [rdi + 0x4c]
lea ecx, fs:[rdx - 0x6b]
sbb byte [rdx], cl
fcompi st(4)
invalid
xchg ecx, eax
xchg ebp, eax
jo 0x140051d98
or edi, esi
sbb al, 0xd2
mov edx, dword [rcx + 0x7416938a]
xchg ecx, eax
invalid
xchg ebx, eax
invalid
je 0x140051dd7
xchg ecx, eax
mov dl, byte [rbx - 0x7b348bea]
xor dword [rdx + 0x27546b65], edx
cmc
xor cx, bp
jae 0x140051da3
invalid
mov bh, 0x8f
invalid
int3
stosb byte [rdi], al
jnp 0x140051dfd
stosb byte [rdi], al
mov ch, dh
fst qword [rdx]
imul ebx, esi, 0x49288b9e
ror qword [r10 - 0x3080cbea], 0x24
invalid
invalid
pop rsi
invalid
push rax
pop rax
loop 0x140051eb1
pop rdi
out dx, eax
sub esi, dword [rdx - 0x2d]
invalid
xchg edx, eax
mov byte [rbp - 0x56], cl
stosb byte [rdi], al
popfq
cmp ah, byte [0x1638583ab]
and eax, 0x238064de
and eax, 0x238064de
xchg r13d, eax
invalid
mov eax, 0x552fc601
pop rbx
test eax, 0x3738ad41
invalid
test dword [rbp + 0x24], 0xbd9b623b
pop rbp
ror dword [rbp + 0x4f], 1
out 0x46, eax
ret 0xdde8
mov edi, 0x97adbeb2
invalid
enter 0x6d14, 0x64
mov edi, 0xd392b1ed
cmp al, bl
in eax, 0xcb
test esi, edx
cld
mov eax, 0x11bf0868
sub al, ch
call 0x140d67b61
call 0x140d67b61
jns 0x140051ec6
pcmpeqb mm5, qword [rdx - 0xfb3898b]
jnp 0x140051f7a
invalid
invalid
invalid
pushfq
jmp 0x1be1b33f1
pop rbx
mov word [rbp - 0x111851e], ds
invalid
div ebp
test dword [rax - 0x2182bd3f], ebp
invalid
int1
stc
fdivrp st(0)
mov byte [rsi + rsi*2], bl
test eax, 0xa7f6ffbe
pop rdi
lea eax, [rcx - 0x5c]
invalid
hlt