Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rcx - 0x5d], ebx
out 0x50, eax
invalid
mov ebx, 0xa2e21e0e
mov edx, eax
pop rax
jnp 0x1400a0871
jge 0x1400a080f
ret 0xdc81
push rbx
jbe 0x1400a0844
test al, 0x17
insb byte [rdi], dx
dec eax
jmp rcx
invalid
loope 0x1400a0824
jg 0x1400a0833
xchg ebp, eax
add byte [rbp + 0x46], bh
jg 0x1400a0843
jg 0x1400a0843
invalid
invalid
ret
sbb byte [rbx + rbp*2 + 0x14], al
invalid
std
dec byte [rdx]
invalid
invalid
add eax, 0xb0af4588
lodsd eax, dword [rsi]
invalid
invalid
popfq
rcl byte [rbx + 0x40b1bb23]
test al, 0x66
mov gs, word [rdi + riz*2]
invalid
fnstcw word [rdi]
invalid
invalid
test byte [rdi], cl
movabs eax, dword [0xb5e1fd978a958b48]
pop rcx
out dx, al
test dword [rdi + 0x621dcbc9], 0xd25b3e86
retf
sbb eax, 0x5b3e8662
shl cl, cl
pop rbx
retf
ret
mov cl, 0x33
sbb al, 0xbb
lodsb al, byte [rsi]
sub cl, byte [rdi - 0x1b]
invalid
in eax, 0x82
pop rbx
outsd dx, dword [rsi]
iretd
xchg dword [rdi + 0x14337ca7], ebp
in al, dx
nop
mov ebp, 0x2cdf92cd
in al, 0x17
cmp eax, 0xd958d43f
sub ebx, dword [rbp + 0x4b6fbf05]
outsd dx, dword [rsi]
pop r11
outsd dx, dword [rsi]
pop r11
cmp cl, cl
xchg esp, eax
scasb al, byte [rdi]
push rdx
or byte [rdx + 0x3c], cl
push sp
pop rsi
jle 0x1400a099e
std
jae 0x1400a0964
call [rcx + 0x68ada3f9]
ficomp word [rsi + 0x4a77a4af]
cdq
stc
movabs dword [0x4a77a4af9ede68ad], eax
push 0xffffffffa4af9ede
ja case.0x140002106.20
jne 0x1400a0969
mov esi, 0xdc52237e
and edx, dword [rdx - 0x24]
mov bl, 0x79
jmp 0x1400a0970
hlt
imul edx, dword [rax + 0x3f], 0xb428fc67
push rdx
pop rdi
loope 0x1400a0932
or ebx, ebp
insd dword [rdi], dx
mov dh, 0xca
or ebp, 0x6d
int 0x6d
int 0x6d
invalid
invalid
invalid
sti
invalid
int1
add ah, ch
movsd dword [rdi], dword [rsi]
sbb bh, byte [rdi + 0x4029fefe]
mov byte [rsi], al
invalid
jbe 0x1400a09be
scasd eax, dword [rdi]
invalid
cmp byte [rsi + 0x3d1e5ddf], bh
xchg edx, eax
js 0x1400a09af
jns 0x1400a09ac
jrcxz 0x1400a097b
mov cl, 0x8f
jo 0x1400a0a19
invalid
add byte [rcx + 0x111357fc], cl
push rdi
adc edx, dword [rcx]
loopne 0x1400a0a38
fist word [rsi]
popfq
imul edi, ebx, 0xffffff8e
invalid
adc al, 0x74
jg 0x1400a09c8
invalid
movabs byte [0xad4169880fb64364], al
jo 0x1400a099d
invalid
xor bl, byte [rbp + 0x106005f5]
adc dword [rsi], edx
pop rbp
sahf
out dx, al
adc ecx, esp
ret
adc byte [rcx], dl
invalid
loope 0x1400a0a6f
ret
test dword [r15 - 0x50ce0ca0], r11d
leave
jnp 0x1400a0a3f
cmp eax, 0xbf87ffc5
and eax, 0x80bd16fb
push 0x21
pop rcx
inc dword [rdi + 0x16fb25bf]
mov ebp, 0x59216a80
sbb edi, dword [rbp + 0x42b352da]
psrlq mm1, qword [rax - 0x597c3366]
invalid
ror byte [rdi], 0xb7
invalid
movzx edx, si
rcl byte [rcx - 0x61f636c2]
mov byte [rsi + rbx*8 - 0x11], cl
invalid
js 0x1400a0a25
mov ecx, 0xae61bbfa
cld
invalid
invalid
invalid
invalid
pop rax
sbb eax, dword [0x101bca4d6]
sbb esp, dword [rax + 0x26]
jne 0x1400a0b06
mov edi, edx
not dword [0xf4d4d4a1]
pop rsi
xchg esi, eax
mov word [ebp + ebp*2 + 0x7db57bf0], fs
stc
mov ebx, 0x676f65d
stosb byte [rdi], al
invalid
pop rdx
scasb al, byte [rdi]
mov bh, 0x83
cmc
mov ecx, 0xa2da5753
hlt
invalid
outsd dx, dword [rsi]
shl ah, 0x6b
jb 0x1400a0b39
imul esi, dword [rdx - 3], 0x52
push rdx
movsb byte [rdi], byte [rsi]
cmp byte [rdi + 0x72df66de], ch
adc ecx, dword [rax + 0x31ce0ef9]
add eax, 0x3cac60ee
pop rbx
cmp al, 0xfc
jg 0x1400a0b53
dec dword [rbx + rcx - 9]
or r14, rdi
shl dl, 1
xlatb
invalid
xchg ebp, eax
cmp eax, 0x78abffeb
iretd
mov ch, byte [rbp - 0x214843ea]
add ecx, 0x22
mov ch, 0x31
invalid
xchg esi, eax
imul ecx, dword [rbx + 0x7d97dbdb], 0xffffffbc
jl 0x1400a0bc5
cli
jne case.0x140002106.46
test ecx, eax
outsd dx, dword [rsi]
mov dh, 0x88
in eax, 0x22
push rdx
add eax, 0xaf100b22
and cl, byte [rbx]
invalid
scasd eax, dword [rdi]
jle 0x1400a0b2f
and cl, byte [rbx]
adc byte [rdi + 0x18fa817e], ch
invalid
cli
sbb byte [rsi], bl
cld
invalid
cli
invalid
invalid
int3
invalid
invalid
invalid
mov word gs:[rbx], ds
and al, 0x99
push rdi
out dx, eax
ror dword [rbx + 0x69b3cc87], cl
invalid
mov ebp, dword [rsi]
mov dl, byte [rcx + 0x30]
push rcx
xor byte [rbp + 0x3f], bh
push rcx
xor byte [rbp + 0x3f], bh
jg 0x1400a0c37
sahf
invalid
movabs dword [0xe2fff369d0f0cd7f], eax
nop
jbe 0x1400a0c98
or byte [0x1229e3aab], dl
jns 0x1400a0c66
pop rdx
xor byte [0x16695cb7f], dh
cmpsb byte [rsi], byte [rdi]
jmp 0x1931c056e
clc
invalid
push rbx
mov edi, 0xe9a6268b
invalid
retf 0xe464
imul ebp, dword [rax], 0xf65f73cb
adc al, 0xc4
not byte [rsp + rax*8]
wait
adc dword [rsi + 0xf5fab11], 0xfffffffe
add byte [rdi - 0x62a5b203], bl
popfq
popfq
movsb byte [rdi], byte [rsi]
push rbx
std
mov edi, dword [rsi]
add esp, dword [rdi - 0x8d8e23f]
add esp, dword ds:[rdi - 0x8d8e23f]
invalid
pop rdi
push rsi
outsb dx, byte [rsi]
jmp [rdi + rdx*8 + 0x3e]
pop rsi
invalid
jl 0x1400a0d5b
ja 0x1400a0d4a
xchg byte [rdi], dh
pop rbx
push 0x1bb8df0c
stc
mov r14d, dword [r15 - 0x12e9d508]
clc
sub dl, byte [rsi]
in eax, dx
mov bl, 0xe7
not dword es:[rsi]
invalid
add eax, dword [rsi + rcx + 0x398a6c8f]
cmpsb byte [rsi], byte [rdi]
fistp dword [rcx - 0xa]
in al, dx
and edi, dword [rcx - 0x35]
int 0x88
sub ch, al
nop
push rbp
push rdi
or eax, 0x63b8eebf
out dx, al
mov eax, 0xb6a963
invalid
xchg edi, eax
jle 0x1400a0d1e
out dx, al
mov eax, 0xb6a963
mov dh, 0
not dword [rdi - 0x7c790582]
invalid
xchg byte [rbx + 0x40fd93d5], al
mov al, byte [rdx + 0x5a]
std
mov al, byte [rdx + 0x5a]
mov gs, word [0x118825153]
pop rdi
stosd dword [rdi], eax
outsd dx, dword [rsi]
out dx, al
loopne 0x1400a0d9c
sub dh, byte [rbp - 0x4e25d4d1]
out 0x8b, eax
jae 0x1400a0ce3
sub ebx, edx
mov cl, 0xe7
mov esi, dword [rbx - 0x62]
cmpsb byte [rsi], byte [rdi]
jne 0x1400a0d09
jnp case.0x140002106.63
jge 0x1400a0d42
invalid
invalid
mov edi, 0xf571d4b7
xor byte [rdx], dh
and al, 0xcb
invalid
mov ah, 0xef
outsb dx, byte [rsi]
invalid
sal byte [rdx + 0x1daa50f3], cl
retf 0x8279
stosb byte [rdi], al
sbb eax, 0x28279ca
mov edi, 0xbe8424a8
adc byte [rsi + rsi*2 - 0x30], cl
mov cl, 0xa3
wait
invalid
popfq
pop rdi
mov esi, ebx
xor byte [rcx], al
sbb al, 0x50
out dx, eax
sti
out dx, eax
cmp byte [rsi - 0xd28d1e3], bh
add eax, 0x427b836e
sbb al, 0x20
invalid
and byte [rbx + 0x2a], ah
add esi, ecx
lahf
invalid
cwde
ficom word [rsi + 0x75]
in eax, dx
cmp esi, edi
pop rsi
sti
xchg esi, eax
lea esi, [rsi - 0x33]
scasb al, byte [rdi]
adc r8, rsi
iretd
movabs al, byte [0x5d9b533f1c13c31c]
mov edx, 0x7f4d8b4d
mov ecx, esi
movabs al, byte [0x59bff6fb8ee40e71]
invalid
sti
idiv byte [rdi + 0x7c470159]
jle 0x1400a0e84
invalid
jb 0x1400a0de4
invalid
movabs eax, dword [0x73261b83c897ea9f]
or esi, dword [rax + rsi*8 - 0x77dee1c1]
jne 0x1400a0dcd
movsd dword [rdi], dword [rsi]
sbb eax, 0x8e17aef6
invalid
mov gs, edx
sti
push rsi
out dx, eax
movabs dword [0x46ed2cf8e2ecf98b], eax
xchg ebp, eax
neg byte [0x113f51ada]
or al, 0xeb
shr edi, cl
or al, 0xeb
shr edi, cl
test al, 0xeb
or dword [rdx + 0x14], eax
stosd dword [rdi], eax
jne 0x1400a0eb3
iretd
sti
invalid
push 0xffffffffe744b200
retf
scasd eax, dword [rdi]
mov bh, 0x7d
invalid
fnstcw word [rdi - 0x55853ab7]
jp 0x1400a0e34
stosb byte [rdi], al
je 0x1400a0e8e
mov dh, 0xcf
mov ebx, 0x5820d8d8
or dword [rdi - 0x75], edi
adc al, 0xf7
iretd
invalid
adc esi, dword [rdi - 0x6d55bf99]
push rax
adc eax, 0x81f34eea
scasd eax, dword [rdi]
iretd
sub dword [rdi - 0xcc3f131], 0x7560be33
xor byte [rdx + 0x53], 0xc9
jb 0x1400a0f15
leave
jb 0x1400a0f15
leave
mov eax, 0xbd4ec81e
invalid
lodsd eax, dword [rsi]
push r10
imul ebp, dword [rsi - 0x67], 0xbb38d5db
outsb dx, byte [rsi]
cdq
fcmovnbe st(0), st(5)
cmp byte [rbx + 0x3fa6eea1], bh
adc al, 0x1f
invalid
mov word [rdx], fs
jns 0x1400a0f5d
outsb dx, byte [rsi]
cdq
fcmovnbe st(0), st(5)
cmp byte [rbx + 0x3fa6eea1], bh
adc al, 0x1f
or byte [rdx + riz + 0x1a4b7e79], 0xb
sbb cl, byte [r11]
movabs al, byte [0xc992a85d640061b9]
outsd dx, dword [rsi]
inc esp
push 0x21
fisubr dword [rcx + 0x3c]
invalid
invalid
retf
cli
je 0x1400a0efa
jbe 0x1400a0f03
invalid
mov ecx, 0x22bc5ee7
and byte [rsi - 0x11bc7941], dl
mov ebp, dword [rbx + 0x375dcd6e]
in al, 0x71
in al, 0x26
sal byte [rax + 0x1face3dc], 0x85
mov al, 0xdc
jrcxz 0x1400a0eca
invalid
test esi, esp
loop 0x1400a0f88
loopne 0x1400a0fa2
mov al, 0xdc
jrcxz 0x1400a0eca
invalid
mov ebx, edx
fisttp qword cs:[rax + 0x29]
adc ebx, edx
adc eax, 0xb1a197c
std
insd dword [rdi], dx
invalid
invalid
jnp case.0x140002106.85
retf 0x1833
xchg rcx, rax
jl 0x1400a0eff
iretd
invalid
imul ebx, dword [rdx + 0x31], 0xfffffffe
mov cs, word [rsi + 0xf963a02]
mov esi, 0xfcc42914
sub esp, eax
cld
sub esp, eax
cld
invalid
sal dword [rcx - 0x4d], cl
push rdi
mov bl, 0x57
cld
sbb al, 0xaa
invalid
mov ch, 0x17
fstp xword [rbx - 0x660078c5]
jl 0x1400a1000
xor al, cl
insd dword [rdi], dx
test dword [rcx - 0x22], ebx
fst dword [rsp]
je 0x1400a0fab
pop rdi
adc cl, byte [rcx + 0x41057c4a]
mov ecx, dword [rbx - 0x22]
jae case.0x140002106.91
pop rbx
invalid
jae 0x1400a0ff4
out dx, eax
invalid
insd dword [rdi], dx
scasb al, byte [rdi]
xor al, 0xeb
push rdx
push rsp
invalid
ret
adc eax, 0xbf36463
invalid
jb 0x1400a1001
invalid
sti
insd dword [rdi], dx
invalid
invalid
imul edx, edi, 0x746f996f
push rsi
invalid
pop rcx
jo 0x1400a10c9
invalid
stc
invalid
clc
movsd dword [rdi], dword [rsi]
div byte [rsi]
xor dword [rdi - 0x2da3b2b8], edx
cwde
sub eax, 0x56d59ef9
invalid
push rsi
and byte [rbp + 0x57b568bf], 0xb0
mov al, 0x2c
mov edi, 0xa63eb103
xor al, 0xf2
invalid
mov al, 0x2c
mov edi, 0xa63eb103
xor al, 0xf2
lodsd eax, dword [rsi]
pop rax
fisttp dword [0x157d546db]
out dx, eax
xlatb
add edi, eax
xchg edi, eax
pop rbx
invalid
std
idiv word [rsi]
xchg esi, eax
and al, ch
invalid
movabs al, byte [0xa278e7224c0cf4ca]
jbe 0x1400a10f8
invalid
sbb byte [rdi], ch
or al, 0x9e
and dword [rax], 0xcbce3e3d
test dword [rdi - 0xa], ecx
invalid
invalid
pop rbp
pop rdi
lea edx, [rbx - 0xf0e0186]
lodsd eax, dword [rsi]
cmp dword [rax - 0x515d04cc], edx
jmp [rax + 0xfba2c53]
stosb byte [rdi], al
rol dl, cl
xor cl, byte [rax + rbx*2 + 0x7d4915f4]
invalid
invalid
push rbp
invalid
sbb dword cs:[0x14e58056f], eax
ficom word [rsi - 0xc5ee03f]
invalid
in eax, dx
in al, 0xbf
cmc
adc cl, byte [rdi + rdi*4 - 0x66]
push rax
invalid
invalid
add eax, 0xab97efc2
mov r10b, 0x28
xor byte [rsi + rsi*8 - 0x12e384a1], 0xca
in eax, dx
retf 0xf600
invalid
in eax, dx
retf 0xf600
fmul dword [rsp + riz*2]
or eax, ecx
invalid
invalid
pop rbp
mov edi, 0x70a60e26
xor al, 0xc0
invalid
ror dword [rbx + 0x63], cl
mov dh, 0xed
mov spl, byte [r11 + 0x1f]
jo 0x1400a124c
sub al, 0xd
xor byte [rsi - 3], ch
mov edx, 0x9c64161d
invalid
pushfq
jmp 0x1400a126c
invalid
invalid
scasd eax, dword [rdi]
invalid
jge 0x1400a124d
mov dword ss:[rsi], esp
invalid
out dx, eax
call qword [rdi + 0x1b437ed5]
and al, 0x64
push 0x78d9f5dd
fnstcw word [rax - 0x49]
xchg esp, eax
fnstcw word [rax - 0x49]
xchg esp, eax
popfq
scasb al, byte [rdi]
and dl, bh
insb byte [rdi], dx
mov byte [rcx], bl
invalid
mov dword [rdi], ebp
invalid