Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
iretd
xchg esp, eax
pop rbx
movabs dword [0x32463440994810c4], eax
cmc
cqo
xor al, 0x46
xor dh, ch
mov eax, 0x7fe6e180
adc byte [rcx], cl
loope 0x1400a0824
jg 0x1400a0833
adc byte [rcx], cl
xor ch, dh
sbb qword [rdi], rbx
jne 0x1400a08c2
cmp al, 0xff
dec dword [rbx + 0x34911320]
push rcx
xchg ebx, eax
jae 0x1400a08ad
invalid
push rbp
cmp ah, ch
cmp bh, byte [rcx]
test dword [rsi - 0x41075e06], edi
invalid
std
dec byte [rdx]
invalid
hlt
adc dh, byte [rdi + 0x54117bf0]
invalid
sbb edi, 0xef0fe097
adc ecx, dword [rdx + 0x38fbf08e]
mov cl, byte [rsi - 0x1bc70410]
jbe 0x1400a08f5
or r9b, r15b
mov cl, byte [rsi - 0x1bc70410]
jbe 0x1400a08f5
or r9b, r15b
pop rbx
invalid
fnstsw word [rdi - 0x44e8b34]
adc al, 0x38
jl 0x1400a08a6
int3
movabs eax, dword [0x2bbfd3177bd47b82]
cld
xchg ebp, eax
out dx, al
mov ebx, 0xd0aba0ba
invalid
invalid
invalid
mov esi, 0x8b7bffc2
xchg ebp, eax
mov dl, byte [rdi + 0x3c79cd6b]
not dword [rax - 0x53]
ret 0x98ac
lodsb al, byte [rsi]
cwde
lodsb al, byte [rsi]
cwde
popfq
invalid
cdq
xchg edi, eax
mov edi, 0x97eefefe
sbb al, 0xeb
push rax
nop
pop r10
invalid
invalid
pop rbp
invalid
xlatb
cmp al, 0xd9
cmpsb byte [rsi], byte [rdi]
invalid
lea eax, [rax]
pop r10
mov ah, 0xa9
out dx, al
add esi, dword [rsi - 3]
enter 0xffffffffffffbd70, 0x14
invalid
invalid
jbe 0x1400a0999
xchg edi, eax
in al, dx
js 0x1400a09a7
pop rdi
or ah, bl
idiv byte [rdi + 0x1d91673e]
jns 0x1400a09fb
invalid
invalid
mov bl, cl
cmp al, 0xff
xchg ebp, eax
sahf
jnp 0x1400a09de
xchg esi, eax
sub edi, dword [rax]
cmpsd dword [rsi], dword [rdi]
jg 0x1400a096b
invalid
push 0xffffffffe60bfd7e
jle 0x1400a09b9
or esp, esi
adc ah, dl
je 0x1400a09cd
or edi, dword [rbx - 0x5b6887e6]
mov ebx, 0xa497781a
mov edi, ebp
insd dword [rdi], dx
jmp 0x1400a0989
cwde
sar dword [rbx], 1
in al, 0xff
mov edi, 0x9d16df63
jno 0x1400a09c1
push rsi
mov ah, 0x8a
mov fs, word [rdi]
imul edi, ebp, 0xffffffc6
retf 0x99f6
invalid
loope 0x1400a0a61
invalid
invalid
push rsp
invalid
invalid
invalid
xor esi, dword [rsi + 0x3c]
pop rsi
invalid
mov edi, 0x5589234
or esi, edi
out 0xfc, eax
invalid
pop rsi
call 0x1771e68bc
push rcx
cli
not dword [rdi - 0x253b612e]
lodsd eax, dword [rsi]
rcl al, cl
cmp byte [rdx + 0x3048aafd], ch
xor byte [0x18aff27b8], cl
xchg edi, eax
rcr byte [rsi - 0x2d52253c], cl
sar byte [rax], 1
stosb byte [rdi], al
std
stosb byte [rdi], al
xor byte [0x18aff27b8], cl
xor byte [0x18aff27b8], cl
xor byte [0x18aff27b8], cl
sub eax, 0x6d2880f1
adc ebp, dword [rdx + rdi*8]
mov ebp, 0xaf2638d8
jg 0x1400a0a07
invalid
test byte [rax + 0x1f], dh
jo 0x1400a0aa4
dec dword [rbx + 0x5077e963]
mov eax, edi
mov r11b, 1
sbb al, 0xfc
ret
stosb byte [rdi], al
or al, 0xd1
jmp 0x11efea781
invalid
push rdx
cmp al, 0x14
cmp al, 0x14
test dh, cl
movabs al, byte [0x8c6cac29349226f0]
enter 0xffffffffffffc79a, 0x7b
sub ebx, r14d
lodsd eax, dword [rsi]
out 0xd7, eax
invalid
mov bl, 9
in eax, dx
mov word [rsi + 0x59], cs
pop rcx
jne 0x1400a0b4e
mov al, 0xd1
movabs al, byte [0xc2dafdf985f02de3]
sbb ch, byte [rcx - 0x1c00a0ca]
pop rdi
jmp rbx
cdq
invalid
pop rdi
jmp rbx
nop
outsb dx, byte [rsi]
pop rsp
out 0xf0, eax
jnp 0x1400a0ab4
jge 0x1400a0afa
mov ebx, 0x68cf65d
insd dword [rdi], dx
jmp 0xd9302fe6
invalid
mov edx, 0x723cc7dd
mov bl, 0xc6
mov ah, 0x64
fisub word [rsi - 0x21]
jb 0x1400a0ad0
invalid
mov edi, dword [rdi]
mov dl, 0xbf
mov gs, word [rdx + 0x217b20d8]
invalid
invalid
invalid
movabs eax, dword [0x25f2fd56743edffe]
in al, dx
je 0x1400a0bc1
std
and eax, 0xf4a744ec
xchg cx, ax
xchg esp, eax
invalid
cmpsd dword [rsi], dword [rdi]
hlt
invalid
xor ebx, dword [rbx - 0x75]
fcmovnu st(0), st(3)
xchg edi, eax
int 0x3b
mov edx, 0x62e57ff4
fucomp st(7)
fdivr dword [rdi]
push rbx
invalid
mov cl, 0x41
cmp edi, dword [rcx]
sti
mov esi, 0x7e72b19c
sub byte [rcx + 0x22], dh
invalid
cwde
wait
add ebp, ebp
dec byte [rbp + 0x63d640ff]
jb 0x1400a0b65
invalid
js 0x1400a0b6f
invalid
mov word [rsi - 0x22], ss
lodsb al, byte [rsi]
adc bpl, spl
adc eax, 0x3f3269d3
and eax, 0x83111f2f
imul ecx, dword [rax - 0x72], 0x9b2fecfe
invalid
invalid
invalid
in al, dx
invalid
wait
scasd eax, dword [rdi]
or al, 0xed
pop rax
sbb dword fs:[rdi - 0x721f9e21], 0xfb0045f8
invalid
invalid
adc byte [rdx + 0x7f], al
movabs r9, 0x7b29000c317fa16e
invalid
in al, 0xff
adc al, 0x32
call qword [rdx + rsi]
jl 0x1400a0c0d
invalid
std
invalid
xor byte [rax + 0x7d], dl
invalid
test byte [rbp - 0x32805c0e], bl
stosd dword [rdi], eax
lea ecx, [rax + 0x60]
xchg ebx, eax
or eax, 0xcfb4345b
iretd
retf 0xbedc
iretd
pop rsp
xor al, 0xf1
cmp r14b, r15b
push rdi
fcom st(6)
invalid
mov cl, 0x18
and r13, qword [r8 + 0x63]
invalid
movsb byte [rdi], byte [rsi]
invalid
invalid
mov edx, 0x8abe8326
sti
invalid
mov r13b, 0x88
sbb ah, byte [rsi - 0x50]
in al, 0xf4
invalid
pop rsi
invalid
invalid
sub al, 0x8a
fst st(4)
sbb eax, 0x9baf3440
popfq
xor byte [rcx + 0x51], al
invalid
popfq
invalid
hlt
std
mov al, byte [rdx - 0x10]
jnp 0x1400a0d7c
mov word [rbp - 0x80], cs
movabs al, byte [0x22a57b47c0408821]
pop rsp
invalid
cmp byte [rdi - 0x4f], dl
out 0x8b, eax
jae 0x1400a0d77
invalid
invalid
call 0x1766f9d5b
mov ebp, dword [0x196d1dcaa]
invalid
invalid
invalid
jmp 0x1400a0da0
add al, 0x48
cmp bl, bh
pop rcx
call 0xfe250c8d
invalid
sbb bh, byte [rsi - 0x4afb0039]
test dword [rcx], 0x7bb3968d
push 0xffffffffffffffc8
invalid
add byte [rbx], dh
jbe 0x1400a0df1
cmp dh, bh
sahf
lodsd eax, dword [rsi]
pop rcx
xchg esi, eax
xor byte fs:[rbx], bl
cmp al, ah
cmp byte [rsi - 0x638d09], bh
jmp 0x1400a0e08
mov esp, 0x1d746460
out dx, al
div eax
jnp 0x1400a0e58
cmp byte [rdx], al
push 0x34
ror ecx, 0xc8
jbe 0x1400a0d88
cli
test byte [rsi + 0x1e], bl
mov ebp, 0x1b8eb650
ror bl, 1
adc rax, 0x640f8cb8
add dl, byte [rbx + rax*4]
mov word [rax + 0x57], gs
invalid
push rdi
push 0x31
pop rsi
invalid
push 0xe316a57
invalid
invalid
adc ebx, eax
mov dl, 0x14
dec dword [rbx - 0x3c836ef9]
invalid
xchg ecx, eax
jl 0x1400a0de7
test ecx, ebx
pop rax
iretd
invalid
xor dword [rcx], 0x9a6d397d
mov dl, 0xeb
out dx, eax
movabs dword [0x826d096838dff98b], eax
insb byte [rdi], dx
cmc
outsd dx, dword [rsi]
push rbp
insd dword [rdi], dx
invalid
jb 0x1400a0e34
movsb byte [rdi], byte [rsi]
insb byte [rdi], dx
int1
adc al, 0xd6
ror byte [rcx + rcx*4], cl
mov cl, 0x33
out dx, eax
scasb al, byte [rdi]
scasb al, byte [rdi]
sub al, 0xfd
je 0x1400a0ea0
invalid
std
std
fnstenv [rbx + 0x7eafa9e3]
in al, 0xb7
jb 0x1400a0e1a
mov esi, edx
mov cl, bl
xchg edx, eax
and dword [rdx + 0x14], eax
sub byte [rsi - 0x73a36650], cl
in eax, dx
retf
movsb byte [rdi], byte [rsi]
xchg r10, rax
sbb bl, byte [rax + 0x1a80c9a7]
invalid
mov ch, 0x25
mov dh, 0x9b
lodsd eax, dword [rsi]
xchg esi, eax
push rsp
wait
cmpsb byte [rsi], byte [rdi]
invalid
mov bl, 0x54
mov ecx, 0x914f2df
lodsb al, byte [rsi]
pop rdx
invalid
or dword [rdx + rbx*2 + 0x21de9f2f], ebp
xchg ebp, eax
insb byte [rdi], dx
jle 0x1400a0ebe
invalid
adc esi, dword [rdi + 0x3926fef6]
jp 0x1400a0eb5
mov bh, 0xf6
invalid
adc eax, 0x88f44555
test eax, 0xb429f03e
retf 0xa868
hlt
test al, 0xa6
pop rcx
js 0x1400a0e6b
sub byte [rbx - 0x24], 0x73
in eax, dx
out dx, al
stosd dword [rdi], eax
invalid
sti
invalid
invalid
jbe 0x1400a0f03
dec dword [rcx + 0x25]
mov eax, 0x33c2ce4c
and cl, byte [rdx]
mov dl, 0xad
in eax, 0x31
add dword [r14], r15d
and rax, 0xffffffffc2ce4cb8
xor esp, dword [rdx]
or dh, byte [rdx + 0x4531e5ad]
add dword [rsi], edi
xchg edx, eax
push rbx
mov r14d, ecx
invalid
invalid
loop 0x1400a0f73
xchg edi, eax
xchg ebp, eax
invalid
mov dword [0xe906e796], ebx
sti
invalid
and al, 0x75
mov esi, dword [rcx]
stc
stc
xchg ebp, eax
invalid
lea ebx, [rbp - 0x1b45e004]
mov eax, 0xfbef85a5
invalid
fld dword [rdx + rbx*2]
cdq
movabs al, byte [0x27cffa3ff4c6b6b]
mov bl, bh
adc r12b, byte [rdi]
lodsd eax, dword [rsi]
fdivr st(5)
std
std
invalid
jmp qword [rbp - 0xd20125]
push rsp
and byte [rdx + 0x25], dl
jmp 0x1400a1042
movabs byte [0x7c7079600df36ff3], al
and esp, eax
out 0xf0, al
call 0x13458c143
hlt
invalid
hlt
adc byte [rdx], r11b
shr ebp, cl
pushfq
xchg esi, eax
pushfq
invalid
cmp ah, byte [rdx - 0x60]
loope 0x1400a1019
invalid
in eax, dx
scasd eax, dword [rdi]
invalid
inc byte [rcx + 0x38]
fild word [rdx - 0x12]
sub bl, byte [rcx - 0x3d]
mov byte [0x146b35840], al
test eax, 0x35c70a06
invalid
invalid
mov bh, 0x7a
pop rsp
ja 0x1400a0fff
test eax, 0x35c70a06
invalid
invalid
scasd eax, dword [rdi]
cdq
outsd dx, dword [rsi]
stosb byte [rdi], al
xchg edi, eax
adc edi, dword [rbp - 0x28]
ret
fadd qword [rbx]
invalid
sbb dh, byte [rbx - 0x1f]
mov edi, 0x567c16fe
jno 0x1400a10ff
idiv edx
push rbx
sbb al, 0xf8
invalid
stc
invalid
fnsave dword [rcx]
retf
mov edi, 0xdd4f6653
retf
fucomp st(7)
jle 0x1400a10cb
mov word [r10d + r14d*8 + 0x17db58ad], es
retf
sbb al, byte [rcx + rbx*4]
and esi, dword [rdi + 0x18d24eda]
cmp dword [rbp - 4], edi
jge 0x1400a10b5
in al, 0xb3
fisttp dword [rcx + riz + 0x6c]
insb byte [rdi], dx
insb byte [rdi], dx
scasd eax, dword [rdi]
int1
mov ebx, 0x37486be9
pop rsi
add edi, edi
xchg edi, eax
pop rsp
movsb byte [rdi], byte ds:[rsi]
xchg edx, eax
xchg byte [rbx + rsi*8 + 0x2f], bl
push rbp
invalid
and edi, dword [rsi + rbp - 0x748554a4]
scasd eax, dword [rdi]
call qword [rsi]
or al, 0xfc
int1
int1
int1
mov esi, dword [rsi + 0x6f]
std
invalid
loop 0x1400a11bd
push rsi
nop
jp 0x1400a1140
int1
invalid
xor edi, dword [rdi + 0x669876ee]
invalid
stc
out dx, al
push 0xffffffffffffffc4
pop rdx
xchg ecx, eax
invalid
invalid
insb byte [rdi], dx
jge 0x1400a1112
loop 0x1400a11ff
std
retf
jne 0x1400a1143
idiv byte [rbx]
ror dl, cl
mov fs, edx
out dx, eax
out 1, al
nop
mov esp, 0xa5a0248
cmc
jge 0x1400a1176
call 0x1565c32e5
push 0x17aff7df
fistp qword [rax]
or eax, dword [rbp + 0x62]
sub al, 0x24
and al, 0xba
cmp byte [rcx + 0x74], al
pop rdi
scasd eax, dword [rdi]
invalid
invalid
and al, 0xba
cmp byte [rcx + 0x74], al
pop rdi
invalid
or ebx, esi
out dx, eax
xchg edi, eax
stosd dword [rdi], eax
test al, 0x34
pop rax
invalid
dec dword [rbx + 0x370d1ceb]
out 0x7f, eax
out dx, eax
and dword [rdi + rdi*8], ebp
invalid
or al, 0x4e
mov ecx, 0xef3bfcd7
and eax, 0xbae00dd8
movabs byte [0x5747838e95f7cd7e], al
invalid
push r15
not dword [rbp + 0x5747838e]
add dword [rdi + 0x57], 0x51
push rcx
sub edx, esi
pop rsi
cmp bx, word [rsi + 0x4b]
or bl, bh
invalid
xchg dword cs:[rcx + rdi*2 + 0x17bb1372], edi
mov cl, byte [rdi]
mov eax, 0x63f60698
jle 0x1400a11b8
xchg ecx, eax
xchg ecx, eax
jle 0x1400a1208
invalid
cmc
adc edx, dword [rbx - 0x80]
invalid
invalid
movabs dword [0x837128fe8aed5449], eax
invalid
in al, 0xb5
dec dword [rdx]
invalid
adc al, 0xf4
ret 0x49bb
pop rdi
invalid