Function at 0x140019f98
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbx
sub rsp, 0x40
and qword [rsp + 0x30], 0
mov rax, rdx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov rbx, rcx
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov rcx, rax
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rbx + 0x30], rax
cmp rax, 0xffffffffffffffff
jne case.default.0x140019fe4
add rsp, 0x40
pop rbx
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, rax
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
nop dword [rax + rax]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x140019fdf
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop dword [rax + rax]
mov qword [rbx], rax
test rax, rax
je 0x140019fdf
mov rcx, qword [rbx + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
nop dword [rax + rax]
mov dword [rbx + 0x18], eax
cmp eax, 0xffffffff
je 0x140019fdf
xor eax, eax
add rsp, 0x40
pop rbx
ret
invalid
imul edi, edi, 0xffffffdd
in al, dx
xchg edi, eax
xchg ebp, eax
pop rcx
je 0x1400517e2
invalid
imul ebx, dword [rdi + rax*8 + 0x62c2f868], 0x9f0e8a6e
pop rdi
xchg dword [rdi + 0xb], esi
sbb al, 0x31
stosb byte [rdi], al
jnp 0x140051875
popfq
cld
jno 0x140051828
sahf
cld
push rdx
xchg esp, eax
movabs dword [0x2f5e5a5090a998ec], eax
pop rsi
invalid
mov bh, 0x1e
mov bl, 0x39
invalid
pop rsi
invalid
jnp 0x14005186d
insd dword [rdi], dx
std
mov al, 0xbf
cdq
invalid
in eax, dx
mov ch, 0xdf
mov ebx, 0xc35e3710
movabs al, byte [0xf82bbea5ef52e1fa]
out dx, eax
movsd dword [rdi], dword [rsi]
mov esi, 0xbf1f82b
out dx, eax
out dx, eax
movsd dword [rdi], dword [rsi]
mov esi, 0xbf1f82b
out dx, eax
in al, 0x97
js 0x140051860
adc eax, 0x973da554
mov al, 0x4d
mov bh, reloc.OLEAUT32.dll_SysAllocStringByteLen
add ch, dh
xchg ebx, eax
pop rsp
pop rbp
cqo
jge 0x1400518b9
mov al, 0x2e
or dword [r8 + 0x22913d06], edx
xchg ecx, eax
invalid
lodsd eax, dword [rsi]
iretd
invalid
xchg ecx, eax
and ch, byte [rbp + 0x5a04c2cf]
xlatb
outsd dx, dword [rsi]
cmp al, 0xda
add ch, ch
invalid
cmp ebx, dword [rdx + 0xa]
je 0x140051849
push rbp
mov dh, byte [rbx - 0x48916aea]
call 0xdbebe228
add dword [rdi + 0x72], edx
add dl, byte [rdi]
invalid
push rdi
mov cl, 0xec
invalid
retf
invalid
xlatb
mov dh, 0xf7
jp 0x140051dca
std
jne 0x140051d1f
and dword [rbx + 0x16e775f4], 0x68
fild qword [rdx + 0x3deef37d]
invalid
mov r14d, 0xbf7b59fb
mov esi, 0xbf7b59fb
jbe 0x140051dc2
not dword [rsi]
sar dword [rdi - 0x62748b45], 0x8a
lahf
out dx, al
invalid
invalid
std
xchg edi, eax
pop rbx
fcomp dword [rdi]
jnp 0x140051dc4
std
adc esi, dword [rax - 0x3a]
invalid
cmp ebx, edx
xchg ecx, eax
movsd dword [rdi], dword [rsi]
je 0x140051d8f
xchg ebp, eax
pushfq
mov ch, 0x6c
mov eax, 0xf5e3d059
jb 0x140051dde
stc
invalid
sbb dword [r8 + 0x5e6d4603], r13d
test al, 0xb5
invalid
insd dword [rdi], dx
invalid
and dword [rbx], edi
add dword [rax + 0x6d], ebx
fistp dword [rdi]
mov ebx, edi
add ebp, dword [rcx + 0x70]
or esi, edx
adc eax, dword [0xec89559a]
sahf
clc
xchg edi, eax
jmp 0x126a9a428
sbb edi, dword [rdx - 0x58]
invalid
add eax, 0x7e922159
mov ss, word [rsp + rbp + 1]
sti
ja 0x140051e94
xor eax, 0x97e31e9c
in eax, 3
or bl, byte [rax]
or al, 0xde
push rdx
int1
pop rdi
out dx, eax
sub esi, dword [rdx + 0x4c]
enter 0x6a20, 0x32
xor rax, 0xffffffffde54acd9
lodsb al, byte [rsi]
push rsp
fidivr word [rsi - 0x48608f19]
lahf
invalid
lahf
mov bh, 0x5e
xlatb
jnp 0x140051f16
pop rcx
invalid
xchg ecx, eax
cdq
invalid
mov r10b, byte [r12 + r12*4]
invalid
pop r10
pop rax
pop rbx
sub dword [0x10a3102b7], ebp
invalid
push 0x52
sub dword [rdx], ebx
pop rdi
cmp ecx, dword [rbp - 0x131e7aaa]
jmp 0x140051f9d
cmp eax, 0xb97d70f8
lahf
or eax, dword [rcx]
mov ecx, 0xffef394a
loopne 0x140051ecd
out dx, eax
jmp rax
xchg ebp, eax
loop 0x140051f6e
mov esi, 0x13e5ffc3
sti
cmp eax, 0x1dd3fb9d
mov cl, 0xb3
cmp byte [rax], ah
mov edi, 0x8e1ea4c9
invalid
invalid
invalid
invalid
jl 0x140051f81
lodsd eax, dword [rsi]
mov dword [rsi], edx
test byte [rdi - 8], ch
scasd eax, dword [rdi]
int 0x2c
sub al, 3
xor cl, bl
push rbp
invalid
and al, 0x1e
test al, 0xb1
jbe 0x140051f33
invalid
invalid
invalid
sbb eax, 0xc17b639a
cmp ecx, dword [rbp - 0x100a410d]
invalid
adc rbp, qword [r10 - 0x4107c9]
idiv dword [rsi - 0x3c580901]
int 0xc
int3
invalid