Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
retf
adc eax, 0x7d3e49ea
fbstp tbyte [rsi + 0xe]
test al, 0x17
and al, 0x2e
fdivr dword [rsi - 0x1f]
loope 0x1400a0824
jg 0x1400a0833
ret 0x8b8c
loope 0x1400a0824
jg 0x1400a0833
ret 0x8b8c
or al, 0x65
pushfq
dec dh
sbb al, 0x5b
int 0x8b
insb byte [rdi], dx
iretd
scasb al, byte [rdi]
invalid
xchg esp, eax
mov ch, byte [rbx - 0x7b399337]
sub eax, dword [rsi]
loopne 0x1400a08a2
jl 0x1400a08bb
invalid
mov esi, 0x3d9671f1
cmpsd dword [rsi], dword [rdi]
invalid
add byte [rdi - 0x3619311d], ch
out 0xc9, al
mov ch, 0x58
mov ebp, 0x6d41892b
xchg ebp, eax
and dword [rax], ecx
pop rbx
cmc
fild dword [rsi + rcx*8 - 0xa]
xchg byte [rcx], dh
mov cl, byte [rsi - 0x42ea0410]
scasd eax, dword [rdi]
je 0x1400a089c
xor dword [rbx + 0x7e], ebx
mov edi, 0x16224cd2
invalid
lodsb al, byte [rsi]
cmp esp, dword [rcx - 0x42]
invalid
invalid
movabs eax, dword [0x73a86f366d2ff1c5]
push rcx
sub byte [rsi + 0x26], dh
adc eax, 0x912aface
mov ebx, 0x177b303b
xchg ebx, esp
and bh, bl
imul esp, dword [rsi], 0x3142b225
invalid
and dword [rax], eax
imul byte [rbx]
mov edx, 0xd84e7f19
rcr esi, 1
sbb ebp, dword [rdi + rdi*4 - 0x73431983]
mov esp, 0x4ea6b8c
mov esp, 0x4ea6b8c
invalid
cdq
xchg edi, eax
mov edi, 0x3907e5fe
loop case.0x140002106.19
pop rcx
sub ch, byte [rdi]
scasb al, byte [rdi]
cmp dword [rbp - 0x7b7fc], eax
in al, dx
nop
mov ebp, 0xbdf696cd
int 0xb6
mov dl, 0x70
push rcx
xlatb
invalid
invalid
cmp dword [rdi - 0x660001be], eax
stc
movabs dword [0x450ab2f774768f3e], eax
invalid
call [rcx - 0x70c15c07]
jbe 0x1400a09e0
je 0x1400a0964
div dword [rdx + 0x7117450a]
invalid
mov dl, 0xa
invalid
and rcx, qword [r11 - 0x41]
out 0x14, eax
invalid
invalid
loope 0x1400a09de
mov bl, ch
out dx, al
out dx, eax
ret
ja 0x1400a0a19
paddd mm5, mm4
push rsp
invalid
in al, 0xff
mov edi, 0xba3575dc
sbb dl, 0xe
and edx, dword [rdi]
invalid
mov edi, 0x953ae1fc
loope 0x1400a0a1c
xchg ebp, eax
jle 0x1400a096b
add dh, byte [rdx - 0x49609e1b]
scasd eax, dword [rdi]
mov dl, 0xe5
invalid
bts dword [rcx], 0xb0
push rsp
xchg ebx, eax
call 0x125287b8e
mov esi, dword [rcx + 0x27]
movsb byte [rdi], byte [rsi]
std
cld
invalid
outsb dx, byte [rsi]
mov eax, 0xa1a976f2
pop r11
js 0x1400a09e8
fist dword [rbp + 0x7673ff8a]
fsubr st(3)
stosd dword [rdi], eax
and ebp, esi
invalid
scasb al, byte [rdi]
scasb al, byte [rdi]
movabs al, byte [0x976f071b610d8c6f]
sahf
ret
xor esi, dword [rsi + 0x3c]
pop rsi
popfq
jg 0x1400a0a2f
cmpps xmm7, xmmword [rdi + rcx*4], 0x85
setge al
invalid
sub edi, ebx
invalid
jg 0x1400a09e6
fnstsw word [rdx + 0xd1c0c5e]
pop rdi
lea edi, [rcx - 0x2e51fcf7]
invalid
mov byte [rbx - 0x1c], ch
xchg ecx, eax
ja 0x1400a0a74
stc
loop case.0x140002106.27
xchg edi, eax
rcr byte [rsi + 0x7e7303eb], cl
xor dword [rax + 0x3ece7743], 0x1d44cefd
std
invalid
invalid
invalid
cmc
cmpsq qword [rsi], qword [rdi]
std
invalid
cmpsd dword [rsi], dword [rdi]
invalid
xchg ebx, eax
invalid
invalid
out 0x43, al
sbb byte [rdi + 0x2da23b07], ch
imul ebp
xor dword [rdx + 0x1e], 1
invalid
invalid
invalid
ret
invalid
cmpsd dword [rsi], dword [rdi]
outsb dx, byte [rsi]
inc dword [rsi - 0x79]
movabs eax, dword [0xf1be051249fb0bc6]
mov edi, dword [rdi]
mov dl, 0xbf
xor byte [rsi + 0xe], dh
invalid
mov eax, 0xfe6f99a7
cwde
lahf
invalid
xchg ebp, eax
cmp eax, 0xbc10ffeb
invalid
jno 0x1400a0bb0
shl ecx, 0xc4
invalid
test al, 0x46
mov ebx, ebx
fist dword [rdi + 0x2fb2f94b]
jp 0x1400a0bdd
mov edi, 0xc06cfe49
invalid
invalid
outsd dx, dword [rsi]
or eax, 0x2f73718c
push rdi
push rsi
fcom qword [rax - 0x10]
xor esi, dword [rbx + 0x7a8c8934]
mov bl, 0x34
mov dword [rdx + rdi*2 - 0x3bfb3a7b], ecx
mov bl, 0x34
mov dword [rdx + rdi*2 - 0x3bfb3a7b], ecx
push 0x77c0bd6c
scasb al, byte [rdi]
push rbp
and bh, ch
xchg ebp, eax
jb case.0x140002106.39
fild word [rsi + rbp*8 - 5]
fidiv dword [rdi]
adc qword [r11 + 0xb3ccba2], 0x48
mov byte [rax - 0x55954493], dh
push 0xffffffffffffffaa
cmp al, 0xb
mov byte [rax - 0x55954493], sil
push 0xffffffffffffffaa
lahf
invalid
xor edi, dword [rsi - 0x564e21b5]
mov ebx, 0x168b8a22
jb 0x1400a0bdf
sub bl, bl
or ebx, dword [0x10a956054]
push rsp
mov ecx, edx
push rsp
mov ecx, edx
xchg ebp, eax
invalid
std
invalid
mov esp, dword [rdx - 0x5d]
jge 0x1400a0c7d
jg 0x1400a0c37
insb byte [rdi], dx
sub byte [rsi + 0x3ba6f0b3], dh
mov ecx, 0xc02750c5
invalid
rol byte [rcx], 0x39
push 0x6f196613
fmul qword [rbx + 0x7638945e]
or byte ds:[0x19fe515a9], dl
or byte [0x19fe515a9], dl
invalid
or byte [0x19fe515a9], dl
mov dword [rsi + 0x25], esi
mov ebx, 0x4fc1bbce
xor al, 0x8a
adc al, 0x26
std
sbb dword [rdi], 0x804ae7d0
or dword [rdx + rbp*4], ecx
invalid
movabs byte [0x4635d58e97b18fbb], al
fcomp qword [rdi + rdx*4]
mov ss, ebp
xor eax, 0x971cdc46
je 0x1400a0c89
xchg ebp, eax
invalid
popfq
movsb byte [rdi], byte [rsi]
xchg ebp, eax
adc eax, 0xfe15a68f
rep outsd dx, dword [rsi]
sbb eax, 0x7ef0f727
fild word [rsi - 0x26]
clc
adc al, byte [rcx - 0x76]
mov bl, byte [rdx - 0x5b]
adc eax, 0x1d6ff3fe
invalid
mov bl, byte [rdx - 0x5b]
invalid
not byte [rcx + 0x6e]
and eax, 0x9cdc7fbd
invalid
movabs dword [0x622ea8b59b42e018], eax
xor esi, edx
jmp 0x1400a0c98
invalid
pop rax
invalid
or dword [rsi + rdi*8 - 0x264e8b85], esp
invalid
sahf
cwde
pop rsi
mov esi, eax
jnp 0x1400a0d7c
mov word [rsi + 0x69], ss
invalid
out dx, eax
invalid
invalid
push rsi
jns 0x1400a0d89
sar dword [rdx + 0x3ae01c23], 0x94
adc byte [rcx*4 - 0x3548c821], ah
lea ebp, ss:[rsi]
nop
outsb dx, byte [rsi]
leave
invalid
invalid
invalid
push rax
xor eax, 0x1daaf32a
retf 0x4c79
or al, 0x93
invalid
ficom dword [rbp - 0x69]
invalid
and dword [rbx], ebx
std
mov ebp, esp
mov dh, al
or dword [rdi - 7], ebp
pop rsp
mov dh, byte [rcx]
sbb al, 0x36
loopne 0x1400a0e17
retf
mov ebp, 0xf458dd22
mov ds, word [rdx + rbp*2]
cli
in al, dx
push rsp
and bh, byte [rdx]
jae 0x1400a0e1f
and cl, byte [rdx - 0x7de91230]
cmp dword [rax - 0x80], esp
sbb byte [rcx - 0x6c], ch
invalid
xchg esp, eax
loopne 0x1400a0dce
sub dword [rcx + 0x76ebee7c], esi
ja 0x1400a0e6b
invalid
ret
fmul dword [rsi + 0x79]
sbb dl, dl
test eax, 0xfacffa41
invalid
adc bl, al
out 0xeb, eax
and byte [rax + 0x1d], dl
xor eax, dword [rax - 0x100553c6]
cmp byte [rdx], 0xac
cli
out dx, eax
cmp byte [rdx], 0xac
cli
out dx, eax
movabs dword [0x16ad7a4f38b9f98b], eax
and edx, dword [rdi]
enter 0xffffffffffff9756, 0xd
xchg edi, eax
invalid
invalid
xchg edi, eax
or eax, 0x7b862507
sbb ch, ah
xchg edx, eax
adc al, byte [rdx - 0x35]
movabs r10, 0x9c81dca6bb47af78
cmpsb byte [rsi], byte [rdi]
invalid
invalid
pushfq
jrcxz 0x1400a0e0b
cmpsb byte [rsi], byte [rdi]
fadd qword [rcx - 0x50561c64]
scasd eax, dword [rdi]
jle 0x1400a0e30
outsb dx, byte [rsi]
invalid
add byte [rbp + 0x149a0bf4], ch
sub byte [rsi - 0x3e74b450], cl
pop rsi
lodsd eax, dword [rsi]
hlt
invalid
sbb al, byte [0x1a3cede82]
xchg ecx, eax
in eax, dx
jno 0x1400a0ede
and eax, 0x2ebed1a0
mov cl, 0x9c
or dword [rsi - 0x65], esi
sbb edx, ebp
invalid
or edx, dword [rdx - 0xe0dd46c]
invalid
xor eax, esi
out dx, al
mov ebx, 0x7b7c3c49
out dx, al
stosd dword [rdi], eax
invalid
sbb r11b, bl
invalid
and eax, 0x4e28a21a
cld
cmp ebx, ebp
hlt
sub dword [rsi - 0x12e3113], esp
invalid
fsubr st(2), st(0)
invalid
loop case.0x140002106.82
jb 0x1400a0ef3
movabs byte [0x988cc952755a91f], al
invalid
movsd dword [rdi], dword [rsi]
mov bl, 0x1f
insd dword [rdi], dx
mov dl, 0xd4
xchg edi, eax
mov dh, 0xd2
push rsi
sub cl, byte [rdx - 0x5335ff2b]
out dx, al
invalid
add al, 0xb9
loope 0x1400a0f00
in al, dx
cli
jbe 0x1400a0ef9
stc
jnp 0x1400a0f6d
lodsb al, byte [rsi]
fadd qword [rsi - 0x71]
add dh, bh
invalid
mov r10d, 0xb9769f3e
mov es, esi
invalid
xor dword [rdi + rdi*8], ebp
sub al, 0xff
movsb byte [rdi], byte [rsi]
invalid
push rsi
movabs al, byte [0xce1eb0ae00b4e45f]
test byte [rdi + 0x1d], ch
sbb eax, 0xea195bdc
sbb eax, 0xea195bdc
sbb edx, dword [rax - 0x5c00ab]
jl 0x1400a0fb7
hlt
invalid
sub eax, 0x1913bd4c
cdq
invalid
xchg dword [rbp - 0x63], eax
adc al, 0x97
xchg edi, eax
mov esi, 0x69a7b66a
jp 0x1400a1045
mov dl, 0x75
and dword [rax + rbx*4], 0xfffffff6
invalid
mov edx, 0x12de144e
invalid
sti
mov al, 0x13
cmp esi, dword [rcx - 0x2444008a]
invalid
pop rax
or byte [rcx + 0x57], 0xd0
xchg esi, eax
pop rbp
invalid
invalid
xchg edx, eax
loop 0x1400a0fc2
add eax, 0x6da947ff
cmp eax, 0xf3743316
test eax, 0x33163d6d
je 0x1400a1039
mov esi, 0x57748df3
mov esi, 0x57748df3
shr byte [rdx - 0xb], cl
mov ebp, 0x39c98a49
mov cl, cl
cmp ecx, edi
mov ss, edi
retf 0x9b1a
sub bl, dl
push 0xffffffffaf45fc75
dec dword [rbx + 0x3d7faf64]
mov esp, dword [rdi + rbp*4 + 0x7f]
cmp eax, 0xc60ea91b
invalid
sar byte [rdi - 0x151a18ad], 1
push 0x3ea44b5a
std
fld xword [rcx + 0x77430c54]
imul dword [rsp + rcx - 0x67e39e60]
sub eax, 0xdc9d9ef9
popfq
fdiv qword [rdx]
adc al, 0x60
popfq
fdiv qword [rdx]
adc al, 0x60
or eax, 0xaf617f22
or al, 0xca
invalid
invalid
invalid
retf
wait
invalid
stosd dword [rdi], eax
out 0xe2, eax
sub byte [rbx], ah
pop rdi
xchg esi, eax
or eax, 0x35d8ce9c
int1
int1
int1
mov ebp, dword [rbp - 0x7a]
push rbx
jmp 0xe87a7fea
mov edx, 0x7a7f522a
invalid
xor edi, dword [rdi - 0x16c08912]
retf 0xcc2c
xchg dword [rdi], edx
invalid
movabs byte [0xe79ef8e9c28d8196], al
push rdi
invalid
xchg esi, eax
or dword [rbp - 0x6107163e], 0xec3f57e7
invalid
mov ebx, 0x4df3ce05
fsubr dword [rbx - 0x7c]
add eax, 0x19c652ab
pop rsp
stosb byte [rdi], al
pop rdi
xor dword [rdi + 0x64], esi
add ch, byte [rax - 0x13]
in eax, dx
in eax, dx
in al, 0xbf
cmc
fld dword [rdi - 0x6d4431d2]
invalid
out dx, eax
xor eax, 0x10a197a9
mov al, 0x44
invalid
or ebx, esi
push rax
mov ebp, 0xada713a0
or ch, al
pop rbp
movabs eax, dword [0x8bf2587475dfaf7a]
fbstp tbyte [rbp + 0x74]
pop rax
mov ebx, dword [rdx]
loop 0x1400a11da
fbstp tbyte [rbp + 0x74]
pop rax
mov ebx, dword [rdx]
loop 0x1400a11da
pop qword [rcx]
jl 0x1400a117f
invalid
adc r15b, byte [r8 + 0x73]
or dword [rbp + 0x70], edi
add ch, byte [rdi]
in eax, 0xc7
xor byte [rbp + 0x62], ah
xchg ebx, eax
sbb eax, 0x71dded4a
in eax, dx
fnsave dword [rcx + 0x33]
and dword [0x17506610f], esp
in eax, dx
fnsave dword [rcx + 0x33]
and dword [0x17506610f], esp
cwde
popfq
mov ebx, 0x5aed1cba
jge 0x1400a1234
push qword [rbp + 0x5b6b1d23]
sbb al, 0x10
mov ch, 0x23
sbb eax, 0x101c5b6b
jmp 0x18693525c
stc
invalid
iretd
clc
ror byte [rbx], 0x66
invalid
movabs eax, dword gs:[0x1050388af360fd60]
movabs eax, dword [0x1050388af360fd60]
mov fs, word [rcx]
xchg esp, eax
or al, 0xb3
push rdx
fldcw word [rcx]
stosb byte [rdi], al
jnp 0x1400a1269
retf 0xe57d
jge 0x1400a124d
add eax, 0x50746365
invalid
invalid
and eax, 0x7f16a023
outsb dx, byte [rsi]
invalid
sti
pop rbx
add ebp, dword [rdi]
invalid
jge 0x1400a12e0
invalid
invalid