Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
jl 0x1400a0852
rcr dword [rdi], 1
sahf
in al, 0x7f
jnp 0x1400a081a
std
add byte [rbx - 0x2bf3a2d3], bl
fsub dword [rdi]
xlatb
invalid
invalid
add cl, byte [rax - 0x1d8db7eb]
sbb dword [rdi + 0x26], ecx
cdq
jo 0x1400a0808
jge 0x1400a0813
invalid
fmul st(3)
mov ebx, 0x4cbff2f0
fdisi8087_nop
loope 0x1400a0824
jg 0x1400a0833
push 0xffffffffffffffde
loope 0x1400a0824
jg 0x1400a0833
push 0xffffffffffffffde
xor eax, dword [rcx + 0x460762f9]
invalid
invalid
pop rcx
mov dword [rsp + rbp*4], edx
adc al, 0xac
sahf
invalid
mov dl, 0x42
pushfq
xchg edx, eax
ja 0x1400a0854
jmp 0x1400a0877
push 0xffffffffb8a0833d
mov word [rbp - 0x69], gs
cmp eax, 0x8cb8a083
insd dword [rdi], dx
xchg edi, eax
outsb dx, byte [rsi]
invalid
adc ebx, edi
invalid
popfq
invalid
test byte [rax], ah
mov cl, byte [rsi + 0x33]
stosd dword [rdi], eax
cmp al, 0x4d
jns 0x1400a0867
mov r10d, 0x1e29bc5e
mov esp, 0x7bbd1e29
xchg ebx, eax
mov edi, 0x66a4b
std
mov ebp, 0x4bbf937b
push 6
add ch, bh
sbb al, 0x47
movsb byte [rdi], byte [rsi]
xchg esp, eax
mov esp, 0x27541648
invalid
int 0xb3
add esi, dword [rsi - 0x30]
invalid
pop rcx
invalid
mov bh, 0x29
invalid
pushfq
cmp al, 0x79
invalid
jb 0x1400a08c1
invalid
mov edx, 0x10e39f97
in al, dx
nop
mov ebp, 0xf17513cd
jp 0x1400a09c6
stosd dword [rdi], eax
sbb dword [rcx], 0xa9e38f60
outsd dx, dword [rsi]
invalid
jnp 0x1400a0991
mov bh, 0x22
mov esp, 0x3ebd62d8
pop rsi
pop rsi
test al, 0xc9
test bl, 0x82
ret
invalid
outsb dx, byte [rsi]
invalid
ret
jge 0x1400a09eb
outsd dx, dword [rsi]
adc eax, 0xff14e7bf
movabs r14, 0xdc41ed7fd7ff328b
fsub qword [rsi + rax - 0x13b7857e]
jg 0x1400a0a0c
movsb byte [rdi], byte [rsi]
invalid
sbb ebx, 0xffffff8f
xchg ebp, eax
sbb al, 0x41
invalid
fisttp dword [rdi - 0x72bee36b]
ror dh, cl
invalid
rcl dword [rdx - 0x6e0fe149], 0xb1
jp 0x1400a095a
invalid
invalid
cli
invalid
sub eax, 0x1c265f42
cmp al, 0x52
pop rdi
sbb al, 0x3c
push rdx
je 0x1400a09c8
movabs eax, dword [0x1e1817f9d3c9e3cf]
invalid
iretd
add dword [r10 + 0x69], r8d
add dword [rdx + 0x69], eax
mov esi, 0xc923eddd
mov edi, dword [rdi]
add ah, byte [rdi]
xlatb
invalid
invalid
adc byte [rdi], bh
cli
jno 0x1400a099b
push qword [rbx + 0x76]
xchg r11d, eax
add eax, 0x425aede5
fst dword [rdi + rsi*8 + 0x5d162b6e]
outsb dx, byte [rsi]
sub edx, dword [rsi]
pop rbp
outsb dx, byte [rsi]
sub edx, dword [rsi]
pop rbp
sahf
out dx, al
cli
jle 0x1400a09c8
invalid
xor esi, dword [rsi + 0x3c]
pop rsi
pop rdx
invalid
test dword [rdx], 0x9ff41a1
jp 0x1400a0a8b
scasd eax, dword [rdi]
sal byte [rbx], cl
lodsb al, byte [rsi]
jne 0x1400a0a7e
invalid
pop rsi
call 0xfdf268bc
call 0xeb4cf91a
adc ah, ch
iretd
std
invalid
jno 0x1400a0af4
inc dword [rbx + rdx*4 - 0x4f61c902]
and eax, 0x89bee2e9
lodsd eax, dword [rsi]
jbe 0x1400a0aec
xchg ebx, eax
invalid
mov dword [rbp - 0x7c80a28a], ebp
jg 0x1400a0a14
cmc
rcl byte [rdi + 0x60363ce0], 0x7f
jg 0x1400a0b12
pop rsi
jg 0x1400a0b12
pop rsi
push r15
mov ebx, 0xa839459d
xchg esp, eax
sbb edi, dword [rbp + 0x3d68babe]
mov eax, 0xda1babff
mov fs, word [rbp + 0x7b15978b]
adc eax, 0xaa0c907b
adc eax, 0xaa0c907b
insd dword [rdi], dx
cmp edi, edi
invalid
push 0xffffffffffffffe0
sbb edi, ebx
push rsi
xor dl, ch
xlatb
sub eax, 0x129c07
in al, dx
xor esp, edi
sti
pushfq
sbb byte [rbp + 0x78], ah
ficomp dword [rbp + rsi - 0x69]
pop rsp
invalid
xchg edi, eax
invalid
pop rsp
xor eax, 0xe3bef097
adc byte [rsi], dh
invalid
jle 0x1400a0aea
push rbp
lea edi, [rsi - 0x12c04f09]
in eax, dx
jnp 0x1400a0ae8
int1
pop rbx
sub dl, byte [rdi]
and bl, byte [rcx]
pop rsi
stc
sub ebx, esi
add r9d, dword [rbx - 0x65]
leave
jle 0x1400a0af6
invalid
mov esi, esp
xchg edi, eax
std
std
popfq
std
std
iretd
sar byte [rsi + riz], cl
cdq
cmp ebp, dword [rbp - 0x36d22c7]
sti
stc
movabs dword [0x9ad8e98bb5041032], eax
add ebp, esi
and ch, byte [rbx + rsi]
sub eax, 0xa52f5453
and ebx, dword [rdi + 0x6d]
adc ah, dl
loop 0x1400a0aec
scasb al, byte [rdi]
loop 0x1400a0aec
scasb al, byte [rdi]
mov esi, 0xe8463e39
push rax
jnp 0x1400a0b0c
stc
test dh, ah
movabs dword [0x217b47f7d1240b2f], eax
invalid
invalid
in al, dx
popfq
cmp ch, dh
xlatb
movabs eax, dword [0x158f2714a8acdf60]
invalid
mov ch, byte [rbp + 0x4d113a38]
cmpsd dword [rsi], dword [rdi]
or al, 0x92
xor eax, 0x8527c102
fcomi st(7)
div dword [rdi + riz*2 + 0x3e]
or al, 0x3d
sahf
invalid
sti
out dx, eax
mov esi, dword [0x15641ff3a]
or esi, edi
jrcxz 0x1400a0bf1
sub dl, bl
xor eax, 0x524f216b
nop
invalid
invalid
push 0xffffffffffffffaa
lahf
test qword [r13 - 0x4c], rbx
mov ch, 0x49
invalid
retf
jo 0x1400a0b95
movabs r14, 0x72168b8a1468bbb7
add byte [rax - 0x7571dcf8], ch
jno 0x1400a0c67
in eax, 0xa9
or dword [rcx - 0x13dd8085], edi
scasd eax, dword [rdi]
invalid
mov eax, 0xcc3dcfa4
mov edx, 0x31aba8e6
imul esp, dword [rbx - 0x615ca00c], 0xff1f7a57
insb byte [rdi], dx
sti
push rcx
int 0x34
insb byte [rdi], dx
xor byte [0x17f87b702], dh
invalid
stosb byte [rdi], al
jge 0x1400a0c7d
jg 0x1400a0c37
invalid
invalid
invalid
push rbp
invalid
out 0xb5, al
adc ebp, edx
xchg esi, eax
std
sbb dword [rdi], 0x8293db30
add bl, byte [rcx - 8]
rol byte [rdx], cl
test byte [rbx - 0x4b], dl
movsb byte [rdi], byte [rsi]
fimul word [r10 + 0x13c9d579]
push rdx
mov edi, 0x866859be
jnp 0x1400a0c7d
leave
adc edx, dword [rdx - 0x41]
mov esi, 0x7b866859
int1
sbb byte [rbp + 0x5a4da968], ah
popfq
movsb byte [rdi], byte [rsi]
pop r11
imul edi, dword [rdi + 0x15], 0xd96ff3fe
invalid
out 0xf0, eax
invalid
invalid
invalid
sub al, 0x8a
fnstsw word cs:[rbx]
pop rax
jns 0x1400a0d18
cmp ebx, dword [rax + 0x79]
and al, 0x51
push rcx
in eax, dx
jbe case.0x140002106.60
jg case.0x140002106.55
fst qword [0x139f8cd07]
nop
cmpsb byte [rsi], byte [rdi]
mov edi, 0x672737bd
mov esp, 0xf71bb6d2
mov esi, edi
movabs dword [0xb75f3c49ef9fec9c], eax
invalid
invalid
cmp eax, 0x7dbe3929
pop rbx
sahf
mov esi, 0x56497eee
invalid
jrcxz 0x1400a0cf0
invalid
or byte [0x1b395f4f5], cl
shrd dword [rcx], edi, 0x47
adc dword [rbx + rax*8 - 0x23054dc5], ebx
invalid
mov ebp, 0x96f455b2
pop rsp
mov ebx, 0x9e2739d3
stosd dword [rdi], eax
jbe 0x1400a0d06
invalid
test al, 0xf6
push rax
invalid
hlt
mov ecx, 0x4037df93
invalid
mov ecx, 0x7351aeaf
js 0x1400a0e09
jrcxz 0x1400a0e00
mov dh, 0xe3
and ax, 0x6a29
movabs dword [0x8347caab3576896], eax
stosb byte [rdi], al
jl 0x1400a0e27
or byte [rsi], cl
stosb byte [rdi], al
jl 0x1400a0e27
or byte [rsi], cl
scasd eax, dword [rdi]
or dword [rdi + 0x60], eax
invalid
mov dl, al
in eax, dx
invalid
fisubr word [rdi + 0x6e]
jb 0x1400a0e36
in al, 0xeb
jp 0x1400a0e4c
cmp dword [rsi], edx
fidiv word [rcx - 0x1c141184]
invalid
movabs eax, dword [0xcffecedc4397ea9f]
dec bh
cli
invalid
cdqe
invalid
jle 0x1400a0eb7
mov al, 0x2f
invalid
invalid
invalid
sub ah, byte [edx]
pop rdx
pop rsi
out dx, al
jge 0x1400a0ec6
retf
mov ecx, 0xfafe5ff7
jl 0x1400a0e39
invalid
lodsd eax, dword [rsi]
hlt
invalid
mov ch, 0x90
and al, 0xff
mov esp, dword [rdi - 0x7b2168ae]
invalid
out 0x7f, al
js 0x1400a0e3e
jno 0x1bf20afe9
invalid
adc esi, dword [rdi + 0x254c499a]
int 0xac
push 0xffffffffffffff99
in al, dx
scasb al, byte [rdi]
popfq
invalid
int3
cmc
invalid
sub dword [rax + rdx*4], esi
pop rcx
mov dword [rsi + 0x3eb6657d], edi
sbb byte [rdi], dl
xor eax, 0x2060edb6
jb 0x1400a0f5f
fist dword [rbx + rbp*4]
cmp ebx, ebp
hlt
xor dword [rdx - 0x12c5627a], edx
stc
xchg byte [rbp - 0x60d12c6], bl
stc
out dx, eax
je 0x1400a0f04
mov bh, 0xfb
jbe 0x1400a0f0b
movsb byte [rdi], byte [rsi]
push rdx
cmp dword [rdi + 0x78], ebp
push rbx
pop rbx
rcl dword [rdx - 0x5e], 0x13
invalid
adc edi, dword [rax + 0x52]
movabs byte [0x4c03f6fec2527813], al
stosd dword [rdi], eax
call 0x1640e88b5
fistp word [rbp + 0x68]
jp 0x1400a0f09
ret 0xf6fe
invalid
mov bl, 0x30
xchg esp, eax
invalid
scasd eax, dword [rdi]
cwde
out 0xa6, al
stc
sti
invalid
cwde
adc al, byte [rax + 0xa]
mov gs, word [rdi + 0x4e39f4c1]
invalid
ficom dword [rax - 0x533b9005]
hlt
sti
outsd dx, dword [rsi]
invalid
wait
sbb byte [rdi + 0x71d9b26c], cl
mov edx, 0xace0b7ff
fld dword [rdx + rbx*2]
cdq
loopne 0x1400a1008
sub bh, byte cs:[rsi]
stosb byte [rdi], al
sub ecx, dword [rax + 0x6b]
pop rbp
add al, 0x2f
cmp ch, byte [rax - 0x30]
and eax, 0xe88dee74
invalid
je 0x1400a0fca
and dword [rdx - 0x291b40a4], 0xa1d616aa
add al, 0xd
pop rbx
invalid
pop rdx
xor byte [rbx], dh
invalid
sti
invalid
shl word [rsi - 0x3b], 0x11
adc byte [rbp + 0x20bdad4c], dl
mul byte [rbp - 0x180048e]
jb 0x1400a1001
jg 0x1400a1006
ror sil, 1
insb byte [rdi], dx
invalid
sub edx, dword [rdx + rdi - 0x7e]
rol dword [rcx + 0x69fa5306], 1
invalid
invalid
test eax, 0x39a92160
test eax, 0x39a92160
repne insb byte [rdi], dx
scasd eax, dword [rdi]
jp 0x1400a10b1
pop rdi
sbb al, 0x24
insb byte [rdi], dx
jge 0x1400a103f
ja 0x1400a0ffb
or eax, 0x9673f266
pop rbx
push 0xffffffff8dfd06b1
invalid
leave
retf 0x5a44
adc byte [0x149894004], bl
push rsi
invalid
not dword [rsi]
mov ss, word [rcx - 0x63]
cmp byte [rbx + 0x742519fb], al
invalid
sub eax, 0xcf6bf9ad
cli
mov eax, 0xab3db997
and dword [rdi + rbx*4], ebx
sbb al, 0x9f
sbb al, 0x9f
mov gs, ecx
iretd
adc byte [rdi], al
push rbp
invalid
pop rsi
cmp eax, 0xba0e2ef9
test eax, 0xc38ebe
push 0x2b10b07c
nop
adc dh, al
invalid
in al, 0x1e
nop
cmc
invalid
invalid
sbb dl, byte [rsi - 0x58]
lodsb al, byte [rsi]
sal bh, 0xf8
sahf
out 0x57, eax
scasd eax, dword [rdi]
and al, 0x75
invalid
invalid
in eax, dx
in al, 0xbf
cmc
stosb byte [rdi], al
lodsd eax, dword [rsi]
push di
cmpsb byte [rsi], byte [rdi]
push rdi
cdq
scasd eax, dword [rdi]
mov eax, 0xaf2f65e6
invalid
scasd eax, dword [rdi]
movabs al, byte [0x87c7faeed388ce16]
xchg ebx, eax
adc dword [rdx - 0x77], edx
invalid
invalid
out dx, al
cli
mov dword [rdi - 0x76adee6d], 0xbddb76db
mov ebp, 0x835f6db5
ja 0x1400a11c7
std
mov ebp, 0x835f6db5
ja 0x1400a11c7
std
movabs al, byte [0x3d045641e57b0e59]
push rsi
add al, 0x3d
test byte [rbp - 0x1f673749], dh
mov dword [rsi*8 + 0x506b174e], ecx
shr byte [rbx + rdx*4 + 0x12], cl
mov edx, 0x68516a34
movabs byte [0x4a1df3053f3c9437], al
in eax, dx
fucomp st(7)
jne 0x1400a11b4
int 0xdd
mov bl, 0x7e
invalid
invalid
invalid
call 0x12f4f2f34
mov bl, 0x85
mov edi, dword [rdx - 0x41]
mov dh, 0x5c
imul ecx, dword [rbp - 0x23], 0xffffffe6
out dx, eax
cmp al, 0x6a
cmp edx, dword [rbp + 0x7b]
jns 0x1400a1270
cli
shl dword [0x15801fc87], 0xb6
jl 0x1400a126a
sti
mov bh, 0xf0
invalid
sub byte [rdx + 0x63], bl
jnp 0x1400a12bc
push rcx
invalid
mov al, 0xbb
or esp, ebp
invalid
jne 0x1400a1297
mov eax, 0xf06e7f1b
jnp case.0x140002106.126
or edx, edx
mov ecx, 0x1f315f14
adc al, 0x5f
xor dword [rdi], ebx
adc al, 0x5f
xor dword [rdi], ebx
out dx, eax
scasb al, byte [rdi]
invalid
stosd dword [rdi], eax
shl byte [rax], 1
sal edx, 1
lock sub byte [rbx], dh
mov bl, byte [rsp + rbp*4]
xor ecx, dword [rdx + 0x656bac1c]
invalid
imul esp, dword [rbp + 0x16], 0xffffff97
or eax, 0x4471e5de
in eax, 0x71
jmp qword [rdx + 0x30]
insd dword [rdi], dx
out dx, eax
invalid