Function at 0x140001fb0
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x1400020c4
mov rsi, rcx
call fcn.140002160
test al, al
je 0x1400020cd
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x1400020c4
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x1400020b3
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x1400020aa
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x1400020bd
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x1400020bd
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x1400020bd
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x1400020bd
mov rcx, rbx
call fcn.1400021b0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020e0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002136
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x140002123
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001ea0
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, 0x3a
push r15
out dx, al
pop rdx
wait
cmp al, byte [rdi]
mov esi, 0x9884a1f7
lodsb al, byte [rsi]
and bl, byte [rsi - 0xe]
pop rsi
invalid
invalid
pop rsi
invalid
sbb dword [rsp + rbx], ecx
invalid
push rdi
xchg esp, eax
loopne 0x1400a29c5
insb byte [rdi], dx
or ebp, dword [rcx - 0x8f7667]
jnp case.0x140002136.8
ret 0xfebe
in al, 0xb
pop rax
idiv rbx
and eax, 0x6dfb723d
mov bl, 0xe1
invalid
or al, 0x2d
invalid
pop rdx
loopne 0x1400a2958
add al, 0x23
insd dword [rdi], dx
mov al, byte [0x22d55460]
xor cl, dl
enter 0x4c81, 0xf
invalid
invalid
movabs r10, 0x14ad0ad51df42f40
loope 0x1400a2989
mov edx, 0x1df42f40
invalid
invalid
retf 0x2728
and eax, 0x1ec19343
push rdi
invalid
mov edx, esp
mov dh, byte [rbp + 0x32]
xchg byte [rbx - 0x45], dh
inc dword [rax]
invalid
add byte [rdi], ch
xchg edx, eax
invalid
out dx, eax
ja 0x1400a2a10
jge 0x1400a2a10
fild qword [rdi - 0xcde71d5]
movabs r8, 0x70f764122b02cdb7
invalid
add byte [rdi + 0x5ecb72eb], ch
std
mov byte [rdi + 0xb964ffe], cl
loope 0x1400a29ef
invalid
mov byte [rax], cl
xor eax, dword [rbx]
out 0x7d, al
leave
or byte [rbx], dh
add esp, esi
jge 0x1400a2a36
push rdx
and edx, dword [rax]
mov bh, 0x36
mov gs, word [rdx]
push rcx
iretd
invalid
ror al, cl
invalid
test eax, 0x3bdc1615
mov dh, 0xd4
pop rcx
mov ecx, 0x9b99081f
fidiv dword [rdx + 0x33]
push rsp
lodsd eax, dword [rsi]
invalid
invalid
jae 0x1400a2a6d
jae 0x1400a2aef
lahf
int1
lea ecx, [rcx + 0x32d89de7]
popfq
fdiv dword [rdx]
stosd dword [rdi], eax
test dword [rbx], esi
adc al, 0x6e
in al, dx
scasd eax, dword [rdi]
cmp dword [rcx + rsi*4 - 0x16], edi
invalid
movabs al, byte [0xfd3dada81750fb55]
mov dl, 0xce
jno 0x1400a2af3
invalid
mov cl, byte [rdi]
sahf
invalid
mov cl, 0xfd
call 0x1531456b1
pop rbx
invalid
and edi, dword [rax + 0x50]
leave
xchg edi, eax
fxtract
sal dword [rax - 0x776bb8f], cl
adc dword [rbx], esi
invalid
in eax, dx
sub bl, byte [rdx + 0x66]
or byte [rsi - 0x4d], dh
invalid
fist word [rdi + 0x7b]
movsd dword [rdi], dword [rsi]
push rdi
jnp 0x1400a2af3
mov edi, 0xe3b608ac
ret
stc
hlt
fiadd dword [rax + 0x21]
jg 0x1400a2b4b
pop rcx
push rdx
ja case.0x140002136.24
hlt
xor al, byte [rcx + 0x573d019d]
pop rsp
invalid
movabs byte [0x753f97e9b22ffed6], al
jl 0x1400a2bea
cmp al, 0xde
or rax, 0xffffffffff04bcb6
cmp eax, 0x795c3f8a
mov bh, byte [rdi]
pop rsp
jns 0x1400a2b42
mov bh, byte [rdi]
pop rsp
jns 0x1400a2b42
ja 0x1400a2c16
cmp ch, bl
fst qword [rsi + 0x3e]
xchg edi, eax
scasb al, byte [rdi]
and eax, 0x8c97bc7
sbb dword [rbp + 0x32], esp
scasd eax, dword [rdi]
adc al, 0xd
jbe 0x1400a2c41
invalid
js 0x1400a2bbb
cld
fdivr qword [rdi + 0x2d]
push rbx
invalid
jmp 0x1400a2c2b
push rbp
ret
mov ecx, 0x48585856
shr byte [rbx + 0x23], cl
pop rax
shr byte [rbx + 0x23], cl
int3
mov dl, 0xef
invalid
invalid
scasd eax, dword [rdi]
add dword [rax + rbp - 9], 0x48bd679c
invalid
jg 0x1400a2cbc
and rax, 0xffffffff99914f30
or eax, 0x2a270380
sti
jl 0x1400a2c11
cmp r15, qword [0x1b51544f0]
movsb byte [rdi], byte [rsi]
mov bl, byte [rax]
or esi, dword [rbp - 0x5c]
adc ch, byte [rbp - 0x1a]
jbe 0x1400a2c9d
xor dword [rdx - 0x72384a02], edi
mov edx, 0x8dc7b5fe
lea edi, [rdi + 0x11]
jg 0x1400a2c84
scasb al, byte [rdi]
adc dl, al
or eax, esp
movabs dword [0x9f30c4b7918af78b], eax
lahf
lahf
invalid
jbe 0x1400a2cef
mov bl, 0x1a
ja 0x1400a2c4e
and byte [0x150169c21], r10b
invalid
push rdx
enter 0x5e52, 0xffffffffffffffa9
invalid
rcl dword [rax + 0x33d985ec]
mov ch, 0x28
jg 0x1400a2c6b
push rsp
enter 0xffffffffffffc14c, 0xffffffffffffff92
invalid
xchg edx, eax
stosb byte [rdi], al
int3
rcl dword [rdx + 0x2bcc42aa], 0x15
mov ah, 0x41
fcmovne st(0), st(5)
mov esi, 0x36c821ff
cmp al, 0x5c
cmpsd dword [rsi], dword [rdi]
invalid
sub dword [rcx + 0x25], r13d
mov ebp, 0xf1fc551e
cmp al, 0x41
sub eax, 0x6a7f66da
xchg esp, eax
mov al, cl
push rsi
adc esp, ebx
xor byte [rdi], 0x9b
fadd qword [rsi]
lahf
fcom qword [rdi + 0x45]
and al, 0xc
pop rax
mov edx, esi
mov ah, cl
stosb byte [rdi], al
cli
int3
mov al, 0xc7
in al, dx
cmp cl, byte [rcx]
add esp, eax
std
push qword [rax + 0x37f11fdb]
xchg esp, eax
insb byte [rdi], dx
adc eax, 0x4256563
fld dword [rcx]
cmp esi, edi
or dh, byte [rsi]
sub bh, dl
xor ecx, ecx
mov dh, 0x3b
retf 0xb1b8
jmp [rax - 0xa99223e]
loop 0x1400a2d1a
retf
sbb ch, byte [rax - 0x4c16d2b2]
test eax, 0xe8b20f09
shr byte [rdx + rbx + 0x5e358ec8], 0x3c
invalid
xor eax, 0x6a473c5e
cli
mov word [rax + rcx*2 - 0x3d], ss
invalid
invalid
mov byte [rcx + rsi*8 - 0x7c], dl
jbe 0x1400a2da5
invalid
invalid
not dword [rbp - 0x6fb0a2eb]
invalid
jge 0x1400a2df0
adc al, 0xb5
invalid
mov ch, 0x72
adc al, 0x79
invalid
jns 0x1400a2dbc
or al, 0xa7
cmpsd dword [rsi], dword [rdi]
jmp 0xf3d72248
test dword [rsi - 0x45], ecx
pop rbx
cmc
adc al, 0xfd
mov ebx, 0xfd14f55b
invalid
fisttp word [rdx + 0x36]
cmp dword [rcx + rbp - 0x4a], ebx
imul ebp, dword [rsi + 0x4a], 0x1dc7c1a6
and ch, byte [rcx]
ror dword [rbx + 0x4d], 0xdc
scasd eax, dword [rdi]
invalid
jnp 0x1400a2dab
out 0xef, al
std
sbb dh, byte [rdx - 0x2fcb80f4]
hlt
mov edx, dword [rbp + 0x27]
invalid
invalid
div byte [r12 + r11*4]
xchg esi, eax
popfq
cld
invalid
invalid
popfq
push rbp
outsd dx, dword [rsi]
loopne 0x1400a2e57
invalid
pop rax
test dword [0x1377973c2], ebx
sub al, 0x99
cmp al, 0xc7
in eax, 0x7f
add byte [eax], al
add al, dh
imul esi, dword [rbp + rdx*8 + 0x30], 0x16ce67b9
mov ecx, 0x2816ce67
invalid
movabs al, byte [0x3a22e5ad09d6ab7f]
cmp dword [rax - 0x4ca149fc], eax
push rdx
outsd dx, dword [rsi]
invalid
mov ecx, 0x2816ce67
invalid
invalid
jnp 0x1400a2f3a
invalid
mov esp, 0x87f34a38
invalid
dec dword [rdx - 0x452618dc]
invalid
xchg esp, eax
call 0x11babcae8
xlatb
invalid
mov bl, byte [rdx]
sal dword [0x14009eb30], 0x73
not dword [rcx - 0x46a745a1]
outsd dx, dword [rsi]
cmp eax, 0xb6856c03
jae 0x1400a2f29
xchg ecx, eax
pop rdi
mov edx, 0x3d6fb958
add ebp, dword [rbp + rax*4 - 0x4a]
insb byte [rdi], dx
test dword [rsi + 0xd6e58a5], esi
or esp, eax
mov ebx, 0x8a8b2c22
mov edi, edi
invalid
movsd dword [rdi], dword [rsi]
pop rax
outsb dx, byte [rsi]
or eax, 0x22bbe00b
sub al, 0x8b
mov cl, byte [rbx + 0x648b62ff]
push rsp
push rsp
hlt
mov dword [rbx - 0x7581f2d1], 0xe445262
dec byte [rdx - 0x69]
xchg edi, eax
xchg edi, eax
push rsi
and bh, dl
push rdi
or eax, 0x5f840013
jo 0x1400a2f27
pushfq
wait
jns 0x1400a2fbc
sbb cl, byte [0x186e9af0d]
jl 0x1400a2f77
xchg ebx, eax
jg 0x1400a2f58
jl 0x1400a2f77
imul dword [rdx + rcx*2 + 0x538e132]
ret 0x447f
pop rsp
push rsi
pop rax
mov dl, 0xe
ror byte [rcx], 1
jno 0x1400a2f69
sub dh, byte ds:[rcx]
invalid
push rdi
invalid
pop rsp
jmp 0x1400a300d
push 0xfffffffffffffffe
in al, 0x16
xchg edi, eax
sbb ah, dh
in al, 0x57
or eax, 0x65665ceb
xchg edx, eax
pop rsp
invalid
rcl dword [rbx], 0xeb
scasd eax, dword [rdi]
fucompi st(0)
xor cl, byte [rcx + 0x7b]
xor edi, dword [rbp - 0x18]
jge 0x1400a2fb0
jge 0x1400a2fb0
xchg esp, eax
xor bh, byte [rsi - 0x5b1091cd]
sub dword [rbx - 0x51], edi
dec byte [rbx]
xor byte [rcx + 0x7696148b], dh
mov edx, dword [rsi + rdx*4]
jbe 0x1400a2faa
mov edx, dword [rsi + rdx*4]
jbe 0x1400a2faa
invalid
jge 0x1400a302c
and dword [r15], 0x2e76c0e1
adc cl, byte [rdx]
jmp 0x1400a3055
invalid
invalid
cmp edi, esp
stosd dword [rdi], eax
or byte [rbx - 0x24], 0x48
int3
pop rdi
xor dword gs:[rax + 0x26], 0x9a972b6c
xor dword [rax + 0x26], 0x9a972b6c
xor dword [rax + 0x26], 0x9a972b6c
jge 0x1400a30b1
mov dl, 0x3c
in eax, dx
xchg edx, eax
retf
insb byte [rdi], dx
adc al, 0x40
xchg edi, eax
sbb dl, bl
sub al, 0x6e
std
invalid
invalid
or al, 0x70
mov esi, 0xcffa3d3d
mov esi, 0x294c4db
cmpsd dword [rsi], dword [rdi]
lahf
loopne case.0x140002136.82
adc cl, byte [rcx]
clc
dec byte [r11 + 0x6e2fc9f]
xor ebp, ebp
invalid
imul edi, dword [rsi + 0x725ecf98], 0xffffffd4
and eax, 0xfe16357d
xchg ebp, eax
retf
mov ecx, 0xaa1a1041
test dword [rcx + 0x248a7743], eax
invalid
retf 0x6edb
outsb dx, byte [rsi]
ret
retf 0x9200
imul eax, dword [rcx - 0x793493c6], 0x42023e09
invalid
dec dl
invalid
sub dword [0x19f9624b6], 0xca7af077
xor ah, byte [rsi]
add bh, dh
and ebx, dword [rcx + rcx*2]
and edi, dword [rax]
pop rdi
outsd dx, dword [rsi]
adc al, 0x84
cwde
add eax, 0x8f4c8d78
movabs dword [0xbe02a82814e58bf2], eax
sub byte [rax - 0x4dde41fe], ch
invalid
invalid
mov cl, byte [rax]
sub byte [rax - 0x4dde41fe], ch
invalid
lea edx, [rdi + 0x1f]
mov bh, 0x1f
xor dword [rbx + rax*8 - 0x40095787], esp
mov edi, 0x97998b5f
invalid
pushfq
outsb dx, byte [rsi]
invalid
mov edi, 0x97998b5f
and bl, byte [rsi + rbp*2 - 0x7a8f52c1]
mov eax, 0x76530e18
movabs byte [0x7f1d83cb3fcae23], al
and ebp, dword [rsi - 0x27c34c04]
int1
invalid
mov dl, 0x16
shl dword [rdx + 0x338a2231], cl
loopne 0x1400a31d1
cld
mov bl, 0x3c
fdiv st(1)
invalid
invalid
enter 0x72ed, 0xffffffffffffff87
cld
int 0x7e
cld
xchg rsp, rax
retf
jae 0x1400a318d
retf 0x3019
jns case.0x140002136.104
lea rdx, [rdi + 0x28]
xchg esi, eax
cwde
adc al, 2
push 0x63
sub esi, esp
sar dword [rdx + 0x20], cl
and al, dl
adc al, 0x7a
invalid
jp 0x1400a325e
cdq
mov cl, byte [rdx]
sar byte [rdi], 1
sti
movq qword [rbp - 0x22], mm4
inc byte [rsi - 0x5e3e0d85]
invalid
jnp 0x1400a3237
invalid
jmp 0x114196f75
invalid
add byte [rcx - 0x5d73aa5b], 0x7b
mov dh, byte [rdi - 0x207c6ff2]
pop rbx
stosd dword [rdi], eax
fist dword [rbp - 0x4affd2a9]
out dx, al
add rax, 0x25c4f1c3
sub eax, 0x4feeb500
add eax, 0x25c4f1c3
add ch, byte [rbp - 0x5d]
and dword [rbp - 0x37930091], esi
invalid
out 0xa8, al
je 0x1400a32cf
mul byte [rcx]
je 0x1400a3308
pop rbp
invalid
and eax, 0xd05aeef4
adc ebx, ebx
out 0x8b, eax
clc
mov eax, edx
scasb al, byte [rdi]
adc byte [rdi - 4], ch
sti
lodsb al, byte [rsi]
invalid
mov ch, 0
pop rcx
invalid
mov esi, dword [rbp + 0x7aebf7bf]
invalid
adc byte [rcx - 0x78460104], al
pop rdi
invalid
pop rsi
xor al, 0x41
push rbx
fcmovnu st(0), st(7)
scasd eax, dword [rdi]
xchg edi, eax
lea esp, [rdx + 0x36704419]
push rsi
jmp 0x11b848ee0
invalid
invalid
imul ecx, dword [rdi + rbp*4 + 0x38], 0x397bd75b
imul edi, dword [rax - 0x44c62779], 0x6415fedb
cmp dword [rbx + 0x6415fedb], edi
cmp dword [rbx + 0x6415fedb], edi
add dword [rbx - 0x46], esp
add dword [rax + 0x3b], eax
sbb al, 0x95
movsb byte [rdi], byte [rsi]
stc
invalid
jne 0x1400a3354
jns 0x1400a3371
cmpsd dword [rsi], dword [rdi]
xor dh, byte [rcx]
fmul st(1), st(0)
add eax, 0x20fccaa9
adc dword [rcx - 0x1e], esi
ror byte [rdi + 0x14], cl
adc al, 0x9a
adc al, 0x9a
sub ebp, edi
cld
xchg ebp, eax
in eax, 0x16
invalid
xchg ebx, esp
adc byte [rsi - 0x69], spl
xchg di, ax
xchg di, ax
sti
and byte [rdi - 0x26d50dc0], 0x1a
push rbp
mov cl, 0xb5
push rsp
xor edx, dword [rdx + 0x1542e665]
out 0x42, al
adc eax, 0x2710449c
out 0x42, al
adc eax, 0x2710449c
invalid
pop rdx
lock xor dword [rdx], edx
imul ecx, dword [rsi - 0x2bca76bb], 0x7475108
or byte [rcx + 0x47], dl
invalid
or byte [rdx], bl
pop rcx
adc r14b, spl
jae 0x1400a3379
invalid
or byte [rcx + 0x47], dl
invalid
ja 0x1400a336f
test eax, 0x1b80d266
pop rsi
invalid
lea esp, [rdi]
xchg edi, eax
and al, 0xde
jmp 0x1623c12b0
and eax, 0xd5e2cefd
movsd dword [rdi], dword [rsi]
popfq
pop rsp
test al, 0x6d
fmulp st(1)
push rbp
jne 0x1400a33fb
invalid
ror byte [rbx - 0x38], 1
test ch, dl
invalid
mov dil, 0x9a
pushfq
mov edx, 0x9557781d
xchg ebp, eax
add esi, dword [rax + 0x6e4b1766]
lodsd eax, dword [rsi]
or byte [rbx], al
stc
in eax, 0xc
sbb ah, bl
stosb byte [rdi], al
jge 0x1400a33d2
mov bl, 0xfc
invalid
sbb al, 0x80
invalid