Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
retf
call 0x1bd485217
fbld tbyte [rdi - 0x7a74d21c]
jge 0x1400a0877
xor eax, 0xf37fe6e1
loope 0x1400a0824
jg 0x1400a0833
xchg dword [rdx - 0x280b28e], ebx
invalid
invalid
xchg edx, eax
pop rsi
bt esi, edi
sub esp, eax
adc byte [rsi - 0x50f950ca], bl
invalid
invalid
pop rdi
adc eax, 0x491df68e
mov bl, 0xf4
add dword [rsi + 0x3d6bdfbe], esi
invalid
invalid
imul edi, dword [0x12f03076d], 0xfffffff1
loopne 0x1400a0888
clc
out dx, al
int1
invalid
mov ch, 0xa7
cli
adc dword [rax - 0x3a], ebx
pop rsp
mov ecx, 0x3328db24
jl 0x1400a089e
sbb al, 0xa8
jle 0x1400a08aa
mov ecx, dword [rbx + rbx*8 + 0x7b0ec462]
invalid
invalid
sal al, 1
xchg dword [rbx + 0x50], edx
mov byte [rbp - 0x2d], al
imul ecx, ebp, 0x5191cc3
xlatb
jnp 0x1400a0935
fmul qword [rax - 0x4d541b65]
mov eax, edx
invalid
in al, 0xab
mov dl, 0x89
sal al, 1
jnp 0x1400a0939
adc dword [rbx], ebp
popfq
invalid
fld xword [rcx - 0x73]
cmp ah, byte [rbx]
popfq
add byte [0x1afbf99ad], bh
invalid
xchg ebp, eax
jns 0x1400a0939
xchg edx, eax
invalid
mov cl, al
pop rdx
stosd dword [rdi], eax
push rsi
push rdi
pushfq
scasb al, byte [rdi]
mov dh, byte [rax + 0x17b9fe16]
sub eax, 0xbca3aff4
push rcx
lahf
movsd dword [rdi], dword [rsi]
invalid
invalid
xchg byte [0x1be26b6d3], bpl
lodsd eax, dword [rsi]
sbb al, 0x7e
movsd dword [rdi], dword [rsi]
jp 0x1400a09b0
mov esi, 0x4bf6787e
xchg esi, eax
idiv byte [rbp - 0x3c929f33]
invalid
lodsq rax, qword [rsi]
invalid
push 0x4c3e1f8e
jl 0x1400a08f0
invalid
invalid
cld
cmp bl, dh
mov esp, 0x727f3e74
sbb ebx, 0xfffffff3
mov word [rdx + 0x2ed2a120], cs
test eax, 0x29167bf0
test eax, 0x29167bf0
in eax, dx
invalid
jb case.0x140002106.23
fidivr word [rdi]
stc
xchg ebp, eax
xor al, dl
hlt
and dword [rax - 0x3d], esp
int3
mov dh, 0x4c
divps xmm0, xmmword [rcx + 9]
cdq
and eax, 0x6839f6d9
jmp 0x13d18adb8
leave
invalid
sbb byte [rax], dl
and dword [rbp + 0x51a09188], eax
je 0x1400a0a8b
sahf
ret
invalid
std
invalid
invalid
jae 0x1400a0a91
mov dl, byte [rbp - 0xeee1]
push rbp
cmc
lodsd eax, dword [rsi]
jbe 0x1400a0aec
jg 0x1400a0ab3
invalid
jge 0x1400a0a74
wait
invalid
cmp dword [rcx], eax
sar dword [rcx - 0xc4d5bf], 1
add ecx, edx
mov ecx, 0xff3b2a41
invalid
jnp 0x1400a0add
std
in al, dx
invalid
or al, 0xc0
loopne 0x1400a0a8a
pop rdi
pop rdi
dec dword [rdi + rdx + 0x70]
sub byte [rcx], ah
test ecx, esi
invalid
push rcx
and dword [rcx], ebx
mov al, 0xe5
xor ebp, 0x75
int3
int 0x37
mov edi, ecx
out 0xde, eax
mov edx, 0x68c903a5
invalid
invalid
int3
mov ah, 0x2f
ret
add al, 0xa0
invalid
mov ch, byte [rbp - 0x6cd3458c]
invalid
mov edi, 0xc39d4cee
test eax, 0x4914fca7
jp 0x1400a0bdd
mov edi, 0x22f9ee49
invalid
or dword [rsi], esi
test dword [rdi - 0x76], 0xc21637f3
int1
invalid
cli
invalid
xor esi, dword [rax + 0x46]
pushfq
invalid
ja 0x1400a0bf3
push rsi
push qword [rdx - 0x47c174e7]
mov eax, 0x90b30fd2
mov eax, 0x90b30fd2
cmp eax, 0xed29c65f
jbe 0x1400a0b9e
invalid
idiv byte [rsi + 0x245470fc]
jbe 0x1400a0c70
invalid
fisubr word [rcx - 0x49]
mov ch, 0x7f
pop rsp
mov cl, byte [rbx + 0x37457216]
pop rbx
mov r9b, 0x43
imul esi, dword [rdi - 0xc804a9a], 0x168b8a5c
jb 0x1400a0c4e
invalid
sub byte [rbx - 0x7c42b468], cl
invalid
cli
cli
invalid
jmp [rbx + rdi*8 + 0x2e]
invalid
mov bl, 4
jge 0x1400a0c7d
jg 0x1400a0c37
jle 0x1400a0bf2
cmpsd dword [rsi], dword [rdi]
adc eax, 0xb93ba6f0
jrcxz 0x1400a0bfd
mov esp, 0x7fa3f2cd
int 0xc3
mov al, 0x8c
in al, dx
dec dword [rbx]
pop rsi
insd dword [rdi], dx
fsub dword [r15]
invalid
int 0x6c
push rbp
mov ebx, 0x94bef74
push rsp
jmp 0x1400a0c31
jg 0x1400a0c1d
ret
invalid
cli
test esp, esi
mov byte [rbp + 0x61], ch
insd dword [rdi], dx
invalid
mov dword [r15 - 0x49e7fdb6], r9d
invalid
insd dword [rdi], dx
invalid
rcl byte [rbp + rbp*4 - 0x22], cl
mov esp, 0x83bfcc92
xchg edx, eax
int3
mov edi, 0x3adebe83
cld
nop
xchg edx, eax
int3
xchg esi, eax
inc byte [rax]
lahf
std
stc
mov eax, dword [rdx + rax]
retf
clc
push rax
xlatb
jbe 0x1400a0cf2
push rbp
jo 0x1400a0cb1
jo 0x1400a0cb1
fistp qword [rcx + 0x175cc7f8]
pop rdx
add dword es:[rdi], eax
xchg edi, eax
mov eax, 0x6ef666e2
loop case.0x140002106.61
imul byte [rsi + 0x1e]
loop case.0x140002106.61
imul byte [rsi + 0x1e]
push 9
jb 0x1400a0d37
ret 0x4e8b
invalid
test eax, 0x24aa8fd4
sub byte [rax + rax*8 - 2], ah
sbb ebx, 0x7f
enter 0xfffffffffffff1eb, 3
invalid
and al, 0x28
sar dh, 0x83
fstp xword [rdi - 0x38]
jmp 0x1400a0ce8
imul byte ss:[rbx + 0x2d]
adc eax, 0x98c06361
cwde
cwde
int 0x93
pop rcx
invalid
test eax, 0x747bfe7e
mov cl, 0xfd
sub al, 0x30
xchg ebx, eax
pop rsi
invalid
sub eax, 0xfbfa6fb6
mov dh, 0x6f
cli
sti
xchg edi, eax
invalid
jns 0x1400a0d38
and ecx, dword [rdi]
sal ch, 0x8a
invalid
lahf
test dword [rbx + 0x19bf7431], esi
in eax, 4
fisubr dword [rsi + 0x4d]
invalid
invalid
invalid
mov bl, 0xf3
jne 0x1400a0cfa
retf 0xf3ef
mov cl, 0x9f
out dx, eax
jp 0x1400a0dab
mov ebp, dword [0xf7e56daa]
mov dl, 0xc9
xor dword [rax - 0x72], esp
mov dl, cl
jge 0x1400a0d7d
out dx, al
fld dword [rbx + 0x2b]
push rbx
sahf
cmpsb byte [rsi], byte [rdi]
invalid
hlt
mov bh, 0xc6
invalid
sub ebx, r15d
sti
pop rdi
jo 0x1400a0d49
wait
sbb dl, byte [rdx - 0x877bf69]
int 0x89
push rsi
jb 0x1400a0d66
invalid
invalid
xchg edi, ebp
stc
mov esi, 0x4298edb0
pop rbp
mov edx, 0x85648b4d
imul ebp, dword [rcx + rcx + 0x49], 0xffffffd2
xchg ecx, eax
fisubr word [rdi + 0x6e]
jb 0x1400a0e36
in al, 0xeb
jp 0x1400a0e4c
cmp dword [rsi], edx
fisub word [rdx]
fdivrp st(2)
pop rbp
xchg edi, eax
mov byte [rsi - 6], cl
clc
invalid
xchg esi, eax
cmp al, 0xe8
push rdi
hlt
scasb al, byte [rdi]
invalid
cmp al, 2
out dx, eax
push rsi
or eax, 0x8a0864ac
invalid
scasb al, byte [rdi]
invalid
ficomp word [rcx - 0x1b]
in al, 0x12
mov ebx, esp
invalid
xchg esi, eax
not byte [rdi]
in eax, 0x22
neg byte [rsi + 0x30]
test byte [rax], ch
stosd dword [rdi], eax
mov al, 0x23
jl 0x1400a0ebd
mov gs, word [rbp + 0x449a0bf4]
movsd dword [rdi], dword [rsi]
in al, 0x46
push 0xffffffffffffffc1
stosd dword [rdi], eax
sub eax, 0xcd5ee213
adc esp, edx
pop rsi
int 0x20
push rax
lodsd eax, dword [rsi]
hlt
adc esp, edx
pop rsi
int 0x20
push rax
sbb al, byte [rdx]
adc eax, 0x4f628810
and eax, dword [rbx - 0x777ad2db]
and eax, 0x8b88852d
cmpsd dword [rsi], dword [rdi]
push rdx
xchg edi, eax
test dword [rdi - 0x2b], edx
and eax, 0x8b88852d
cmpsd dword [rsi], dword [rdi]
push rdx
xchg edi, eax
test dword [rdi - 0x2b], edx
invalid
mov esp, 0x18001406
xchg ebx, eax
invalid
and eax, 0x2f5955
invalid
lahf
push qword [rsi + 0x7f]
jg 0x1400a0f17
jg 0x1400a0f17
mov eax, 0x36fb6ffe
out dx, al
stosd dword [rdi], eax
invalid
out dx, al
mov bl, 0x24
fnstenv [rdi]
shr bl, cl
jrcxz 0x1400a0ed1
invalid
test al, 0x2a
cmp dl, bl
or byte [rbp - 0x3815c512], dh
enter 0xffffffffffffd2e5, 0x59
sti
fsubr qword [rsi + rdi*8]
jg 0x1400a0f22
invalid
push rbx
pop rcx
retf
adc r13d, dword [r15 - 9]
cmc
div ebp
in al, 0xfe
retf
hlt
invalid
sub esp, dword [rdx + rsi]
invalid
invalid
or dword [rdx + rbp*4 - 0x4d], ebx
pop rdx
jmp 0x1400a0fdf
pop rsi
jno 0x1400a0fd7
lea edi, [rax]
mov ebx, 0xd4d8fd87
lahf
invalid
invalid
loopne 0x1400a0fad
sub byte [rbx], cl
call 0x192015899
xchg edx, eax
or ebp, eax
lock not qword [rcx - 0x6e]
ror dword [rbp - 0xf], 0x99
int1
cdq
jbe 0x1400a0fa3
pop rcx
out dx, al
cmp byte [rsi], bl
pop rdi
pop qword [rsi + 0x75f44691]
ret 0x2414
je 0x1400a0fab
mov word [rax - 0x169f7c69], gs
retf
xor rax, 0xffffffffee3c802f
xor eax, 0xee3c802f
ret 0xfa3
btc dword [rcx], ebp
cmpsb byte [rsi], byte [rdi]
or ebx, dword [rcx]
insb byte [rdi], dx
jbe 0x1400a0ffe
clc
wait
mov edx, dword [rdx + 0x1b]
leave
add eax, 0x7da55339
stc
mov esi, 0x6c026de4
invalid
invalid
or al, 0x81
out dx, al
jb 0x1400a1001
jg 0x1400a1006
adc dword [rdi], ebx
sbb eax, 0x685db1fd
test byte [eip - 0x244ca5c5], al
invalid
jno 0x1400a0f9c
push rax
cmp bl, ch
int 0xb4
imul eax, dword [rcx], 0x62
div bh
sbb eax, 0xaa4347af
pop rsi
test al, 0x5d
invalid
invalid
loope 0x1400a1081
cmp eax, 0xa947ff05
jge 0x1400a0fdd
test eax, 0x95079b7d
je 0x1400a1039
invalid
mov esi, 0x6d6e2bf3
fcomp dword [rcx - 0x18685591]
out 0x60, eax
sub ch, byte [rdi - 0x7f548901]
div dword [rax - 0xd1035c]
movsb byte [rdi], byte [rsi]
cld
jmp qword cs:[rbx - 0x6af016f4]
xchg ebp, eax
mov byte [rdx - 8], bh
adc dh, dh
cmp bh, byte [rdx]
invalid
fsubr dword gs:[rbx + 0x59]
invalid
invalid
fdiv st(3), st(0)
sbb al, 0x83
out 0xff, eax
invalid
std
js 0x1400a10ca
jmp 0x10f780054
sar r9b, 1
jne 0x1400a10ad
in al, dx
lahf
sub edi, dword [rsi]
rcr byte [rdi + rax*4], 0x77
jb 0x1400a10b9
invalid
loopne 0x1400a111c
je 0x1400a1149
je 0x1400a1149
invalid
and edi, ebp
sbb dword [rax], 0xcc600a2e
mov al, 0x6e
ret 0x3986
jbe 0x1400a112f
pop rdi
lahf
push rcx
fldenv [rdx]
outsd dx, dword [rsi]
xchg edi, eax
invalid
xchg byte [rbp - 0x41], ch
enter 0x4a96, 0xffffffffffffff80
and eax, 0x7e50550b
popfq
jmp 0x15720c119
movabs al, byte [0xbd3aa49f8f7a0cec]
jrcxz 0x1400a10aa
invalid
mov eax, ds
movabs dword [0x6f76390a78743f4c], eax
or bh, byte [rcx]
jbe 0x1400a11a1
or bh, byte [rcx]
jbe 0x1400a11a1
cmp dword [rsi + 0x6f], esi
std
invalid
add eax, 0x9fef91af
sti
out dx, eax
xchg edi, eax
invalid
invalid
out 0x30, eax
sub al, 0x87
or eax, ecx
jae 0x1400a1136
xor byte [rbp + 0x2c], ah
xchg dword [rbx], ecx
sal dword [rbx - 0x2a], 0x33
iretd
xor ecx, edi
mov cl, 0x87
je 0x1400a1164
cmp al, byte [rbx]
fbld tbyte [rdx + 0x7c512e33]
xor ebp, dword [rsi]
push rcx
invalid
xor ebp, dword [rsi]
push rcx
jl 0x1400a116e
dec edi
invalid
iretd
retf 0xd36d
invalid
invalid
test dword [rcx], ecx
lahf
xor al, 0xe2
movabs eax, dword [0x63c324c11bc26467]
xchg edx, eax
test byte [rdx + 0x21], dl
push rdx
and dword [rsi - 0x71], ebx
cmpsd dword [rsi], dword [rdi]
loop 0x1400a1157
ret 0xc11b
push rdx
and dword [rsi - 0x71], ebx
cmpsd dword [rsi], dword [rdi]
outsd dx, dword [rsi]
invalid
add eax, dword [rax - 0x4b]
push rax
add al, 0x7f
add dl, cl
xor ecx, dword [rdx]
movabs dword [0x701ceb8bff5d6617], eax
dec dword [rbx + 0x19701ceb]
invalid
invalid
invalid
dec dword [rbx + 0x19701ceb]
invalid
invalid
rcr byte [rdx - 0x11], cl
jne 0x1400a11b4
int 0xdd
mov bl, 0x7e
invalid
scasd eax, dword [rdi]
invalid
invalid
invalid
stc
enter 0x7359, 3
rcl byte [rdi + rdi*2], cl
adc cl, byte [0x182949860]
mov edi, 0x44988af2
xor dword [rdx - 0x77], ebp
invalid
invalid
invalid
mov ch, 0x1d
fstp qword [rax]
sub cl, dl
invalid