Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
pop rdx
sbb eax, 0x8cb9f0af
wait
pcmpgtb mm3, qword [rdi + 0x60f71198]
mov word [rbp + 0x5cda5825], gs
movsb byte [rdi], byte [rsi]
movsd dword [rdi], dword [rsi]
sar byte [rcx + 0x6c], cl
in al, 0x7f
cli
invalid
in al, 0x19
jmp 0x1400a086c
sbb ebx, ebp
cmp bl, byte [rdi]
imul eax, dword [rcx + 0xeef8ea8], 0x7f6eda4e
jg 0x1400a082f
jg 0x1400a082f
invalid
ret 0x641b
lodsb al, byte [rsi]
sub edx, edi
sub cl, byte [rax]
fbstp tbyte [rcx + 0x10]
mov edi, 0xaf06af46
invalid
scasd eax, dword [rdi]
invalid
jp 0x1400a080e
xor eax, 0xe1ed2ae8
invalid
invalid
mov cl, 0x5f
xchg ebp, eax
out 0x4e, eax
mov dword [rax], eax
movabs al, byte [0x58a78200d7e710f4]
fisub dword [rax + 0x28]
pop rbx
mov cl, byte [rsi + 0x6cfcfbf0]
invalid
std
outsd dx, dword [rsi]
jg 0x1400a08c2
jrcxz case.0x140002106.11
invalid
push rsi
fimul word [rdx + riz*4 + 0x6e]
sub ch, byte [rcx - 0x3a]
add al, bh
push rcx
invalid
invalid
cmp byte [rbx], dl
mov esi, edi
mov edx, dword [rbp - 0x42e76876]
jmp 0x1b047fe8a
mov dl, byte [rbp + 0x16]
movabs al, byte [0xec3be43e8ba2bfa4]
adc ch, ah
push rbp
invalid
xchg esp, eax
sbb eax, 0x83799268
fidiv word [0x196d76ba1]
xor bh, dl
xchg esi, eax
or ah, byte [rdi + 0x6d2f28c6]
sbb dword [rdx], edx
xor al, 0x1e
sub bpl, byte [r10 - 0x45a9a34]
mov ecx, dword [rcx - 0x76]
stosb byte [rdi], al
push 0x61
invalid
xor al, 0xfb
jge 0x1400a09d3
invalid
jl 0x1400a096f
invalid
xor byte [0x14680f9b3], bl
invalid
cmp esi, esp
pop rbx
jmp 0x17edc5d09
mov ebx, dword [rcx + rdx*2 - 0x6e]
mov ecx, esp
push rsp
sub edx, edi
push rbp
invalid
ud2
jmp rdi
ror dword [0xfce85627], 1
je 0x1400a09d6
xchg ecx, eax
fidivr word [rsp + rsi*2 + 0x386c793e]
adc esi, dword [rax - 0x48]
jns 0x1400a0a06
cmp byte [rbx], dl
jo 0x1400a0956
int3
mov bl, cl
imul edx, eax, 0xbc0d9c55
mov edi, 0x75f0bec3
sbb bh, byte [rdi - 0x31d20102]
xchg edi, eax
and byte [rbx - 0x506fe596], al
invalid
nop
scasd eax, dword [rdi]
invalid
sbb dl, byte [rax - 0x41c7e851]
fistp word [rbp + 0x1e]
cmp eax, 0x210c49af
std
insd dword [rdi], dx
jmp 0x1400a0989
in al, 0xff
mov edi, 0x9d16df63
movabs al, byte [0xfdb81a520716f47f]
invalid
invalid
inc dh
pop rdi
jb 0x1400a0a2b
sbb al, byte [rdx - 0x12923ad1]
jl 0x1400a0990
vpaddsw ymm15, ymm2, ymmword [rdi + rbx*4 + 0x27]
add dword [rcx], edx
jle 0x1400a09e4
invalid
invalid
mov eax, 0x6e290ade
or ch, byte [rcx]
outsb dx, byte [rsi]
mov dl, 0x58
invalid
xlatb
std
invalid
shl byte [rbx - 0x5a], cl
xor dword [rdi], ecx
invalid
invalid
jg 0x1400a09e6
fnstsw word [rdx - 0x4eca8889]
mov eax, dword [rdi - 0x69]
cdq
jp 0x1400a0a30
invalid
invalid
out dx, al
insb byte [rdi], dx
sti
pushfq
pop rdx
leave
or dword [rsi - 0x30736ff7], ebx
jae case.0x140002106.25
invalid
mov bh, byte [rbx + 0x1f]
dec dword [rbx + 0x27bb0863]
leave
lodsd eax, dword [rsi]
jbe 0x1400a0aec
jg case.0x140002106.29
pushfq
movabs byte [0xf6135b01bc610c2e], al
pop rbx
adc esi, esi
pop rbx
adc esi, esi
sbb eax, 0x9dd3ae71
fcom qword [rax]
invalid
fidiv word [rcx]
mov dword [rdx - 0x2a7ce425], edi
mov ch, 0xd2
sbb eax, 0xe1146b30
invalid
shl byte [rsi + rax*8 - 0x7d], 1
adc eax, 0x93a1ecfd
imul edi, esi, 0x736deb9
pop rax
fldenv [rax]
cld
mov al, 0x73
xor edi, dword [rdx + 6]
jp 0x1400a0aea
jp 0x1400a0aea
xchg edi, eax
invalid
int 0x88
mov ch, 0xcc
sbb bh, byte [rsi + 0x453fb0f7]
int 0xa
mov byte [rbp - 0x841e534], dh
mov al, 0x3f
int 0xa
invalid
ret
invalid
invalid
add eax, 0x1c9f511b
test dword [rax + 0x74], ecx
push rsi
pop rax
invalid
std
shl ah, cl
imul esi, dword [rdx - 3], 0xffffffc6
or edi, ebx
lahf
pop rdi
add byte [rdi + 0x3055350e], bh
mov edi, 0x3055350e
mov edi, 0x3055350e
jbe 0x1400a0b59
invalid
jb 0x1400a0b12
mov ebp, 0x830a9edc
add bh, byte [rdi - 0x3a7455ea]
or al, byte [rbx - 0x55e940fe]
mov eax, ebp
cmp byte [rdi], bl
and eax, 0x3953d534
invalid
loope 0x1400a0b28
sub al, 0xe3
test byte [rbx], bl
invalid
mov edi, 0x4a012eee
adc ebp, dword [rbp + 0x49]
cld
cld
pushfq
adc edx, dword [rdx + rdi*8 + 0xed287ec]
xchg ecx, eax
clc
invalid
in al, dx
xchg edx, edx
invalid
ja 0x1400a0ba0
lodsd eax, dword [rsi]
xchg esi, eax
mov dh, bl
invalid
cli
invalid
invalid
invalid
jo 0x1400a0bd4
imul ebp, dword [rdx - 0x78], 0xe205af59
int 0x9f
sahf
imul edx, dword [rsi + 0x1ffe2cd7], 0x4a
scasd eax, dword [rdi]
insd dword [rdi], dx
jrcxz 0x1400a0bf3
sub al, 0xfe
invalid
invalid
push rsp
stc
mov esi, dword [rsi + rax*8]
mov word [rsp + r12*8 + 0x5f], es
or al, 0x37
invalid
stosb byte [rdi], al
movups xmmword [rdi], xmm4
push rdi
lodsd eax, dword [rsi]
invalid
movabs eax, dword [0x7e47ea9ebd3898e3]
mov bl, 0x7b
add dword [rbx - 0x65], ebp
adc edi, dword [rcx + 0x7077cfd5]
mov ecx, 0x7077cfd5
mov ecx, 0x7077cfd5
inc dword ds:[rbp + 0x45]
jp 0x1400a0c54
jmp rdx
loop 0x1400a0c7d
nop
jmp 0xcb92cfe1
ret
invalid
invalid
ret
push rbp
sbb dh, dh
lahf
invalid
leave
sbb byte [rdx], bh
jae 0x1400a0ce1
not byte [rdi + riz*2]
outsd dx, dword [rsi]
shr byte [rdx - 0x69], cl
je 0x1400a0c89
xchg ebp, eax
adc edi, edx
insb byte [rdi], dx
rep lodsb al, byte [rsi]
movabs byte [0x65b7b26b84c1df7d], al
invalid
adc esi, edx
push 0xffffffffffffffd6
retf
sub byte [rax - 0x25], cl
pop rbp
int 0x75
push rdi
mov bh, byte [rbx - 0x79]
sub al, 0xed
in al, 0x68
insd dword [rdi], dx
invalid
push 0x3b593f6d
mov esi, 0xcc7af0fc
adc eax, 0x4a0a005
invalid
add al, 0xe6
sub al, 0xea
movabs al, byte [0x10cfd2a3ea2ce604]
invalid
movabs dword [0x47f92d78c710cfd2], eax
mov esi, dword [rdi - 0x22d175d4]
sub al, 0x8a
invalid
invalid
inc byte [rbx + 0x16f77fdb]
invalid
sub al, 0x8a
invalid
jmp 0x1ac991bd3
test byte [rdx], dl
sub bh, cl
invalid
cmpsd dword cs:[rsi], dword [rdi]
nop
mov ah, 0x3d
cmp edx, ebx
add al, 0x2a
invalid
and byte [rcx + 0x30], ch
outsb dx, byte [rsi]
and al, 0x8a
sub cl, byte [rax]
jae 0x1400a0ccf
push 0x39d96798
ficom word [rax - 0x137ce1e2]
cmc
cmc
in eax, dx
loop 0x1400a0d53
invalid
sbb eax, 0x939b0659
or cl, bl
push 0xffffffffffffffec
xchg edi, eax
cwde
invalid
add al, 0x53
invalid
sbb dword [rdi - 0x709f6476], 0xfbef501c
out dx, eax
cmp byte [rsi - 0xd579ce3], bh
mov ah, 0x72
pushfq
invalid
loop 0x1400a0dfa
and dword [rdi], esp
in eax, dx
sub esi, ebp
div eax
jnp 0x1400a0e09
fmul qword [rbx + 0x4af85b17]
pop rdx
xchg esp, eax
invalid
or byte [rdi + 0x7efbd1f5], dh
push rsi
xor eax, dword [rbp - 0xab102a]
invalid
invalid
int3
sub esi, dword [rsi]
wait
fst qword [rdx - 0x16]
mov dl, 0x1a
xchg dword [rbp + rax*4 - 0x61], edx
adc dword [rsi + 0x1f], 0x171a8d6a
shr esi, 0x20
movabs eax, dword [0x1403e16d6397ea9f]
invalid
mov edi, dword [rbx - 0x10]
adc al, 0x13
fdiv dword [rax]
mov edx, 0x563a9f44
lahf
cmp dl, byte [rsi - 0x11]
lahf
cmp dl, byte [rsi - 0x11]
movabs dword [0x16ad8afedd8af98b], eax
and edx, dword [rdi]
loope 0x1400a0e0b
mov al, 0xb1
shr edi, cl
test al, 0xeb
xchg ecx, eax
sbb al, 0x22
add dword [rdi], ebp
pop rax
pop rax
pop rsi
scasb al, byte [rdi]
pop rbx
add edi, dword [0x1593f7306]
cmpsb byte [rsi], byte [rdi]
invalid
invalid
sbb ebx, esp
invalid
cmpsb byte [rsi], byte [rdi]
xor eax, 0xafa9e319
scasd eax, dword [rdi]
jle 0x1400a0e30
outsb dx, byte [rsi]
invalid
jne 0x1400a0ed6
fbld tbyte [rcx - 0x1d3e6dd5]
rcr byte [rbp - 2], cl
fdiv dword [rax]
xor bl, bh
xor bl, bh
sub esp, edi
shr byte [rbp + 0x59], 1
fild qword [rax - 0x1d2db]
cmp esi, edi
call rsp
invalid
push 0xffffffffa78b3e8d
push rdx
xchg edi, eax
sub al, 0xa8
adc eax, 0x3351226c
and bh, byte [rsi + 0x6b9988d8]
invalid
invalid
cdq
invalid
invalid
invalid
fmul dword [rax + 0x67d56b99]
xchg esp, eax
cmp eax, 0xce7f4df2
cld
invalid
pop rdx
invalid
movabs eax, dword [0xb8d521f6e09a9240]
hlt
invalid
invalid
invalid
adc al, 0x9e
invalid
add byte [rdi], ah
retf
cmp ebx, ebp
hlt
invalid
pop rbp
jns 0x1400a0eda
jl 0x1400a0eb2
or dword [rbp + 0x4bc6619e], 0
mov bh, 0x2f
mov bh, 0xbf
not dword [rsp + riz*2 + 0x37]
add edx, dword [rsi + 0xf4bbdc3]
mov ebp, 0x39be0f4b
jnp 0x1400a0ec7
fstp xword [rdi - 0x28]
mov ebp, 0x39be0f4b
jnp 0x1400a0ec7
fstp xword [rdi - 0x28]
jmp 0x1400a0f6a
invalid
invalid
out dx, al
sbb dh, byte [rdi + rbp*8 + 0x7954a9a9]
out dx, eax
test eax, 0xe7954a9
out dx, eax
test eax, 0xe7954a9
invalid
pop rcx
add bh, byte [rbx]
xchg esi, eax
invalid
jrcxz 0x1400a0feb
sal dword [rdi + 0x3852bdf6], cl
mov ebx, 0x795afd87
outsb dx, byte [rsi]
mov bh, 0xf6
mov ebp, 0x87bb3852
std
pop rdx
jns 0x1400a1005
clc
cmp ch, bh
mov edx, 0xe255ffac
neg esi
invalid
cdq
xlatb
ficomp word [rcx - 0xd572a29]
xchg edi, eax
invalid
invalid
pushfq
int1
cdq
jbe 0x1400a0fa3
test al, 0x60
add byte [rax + 0x62a75178], dl
stosb byte [rdi], al
jb 0x1400a0f89
adc al, 0x24
je 0x1400a0fab
invalid
test dword [rcx], ecx
push 0xffffffffafac0617
invalid
or eax, 0xdc1c871
xor dh, byte [rsi - 1]
mov ebx, 0xae3d2edb
mov bl, 0x55
and edi, esp
cld
cld
invalid
in al, 0x70
in al, 0x70
add ah, ah
invalid
invalid
or al, 0x63
and cl, cl
mov edi, 0xac2a1697
pop bx
fldcw word [rdi + 0xb]
outsd dx, dword [rsi]
invalid
lahf
jmp rdi
outsd dx, dword [rsi]
or ebx, dword [rdi + 0x2ffee7ff]
invalid
jp 0x1400a10b1
mov ah, 0x60
iretd
xchg r11d, eax
ret 0xf026
invalid
loop 0x1400a112b
mov ah, 0xf4
out 0xd4, al
int1
xchg edi, eax
xor eax, 0xff89de09
enter 0xffffffffffffe65e, 0x2b
cwde
sub eax, 0x37529ef9
push rdx
invalid
mov al, byte [rsi + 0x63]
adc dword [rcx + rdx], esp
push rdx
invalid
adc al, 0x99
imul esi, dword ss:[rbp - 0xdb999da], 0xffffffad
pop rax
fist dword [rdi]
retf
pop rbx
invalid
test byte [rbx + rsi*8], 0xd6
xor al, 0x41
outsb dx, byte [rsi]
cli
invalid
jbe 0x1400a10b5
pop rbp
ret 0x6c53
or al, dh
jbe 0x1400a1165
invalid
add eax, 0x3a790301
add eax, 0x3a790301
ret 0x4e6b
in eax, dx
sub ecx, dword [rsi - 0x52]
sti
ja 0x1400a11a1
or dword [rcx], edi
wait
invalid
sub al, 0x9d
psubusw mm4, qword [rsi]
adc al, 0x77
pop rsi
invalid
and eax, dword [0xc7821165]
invalid
xchg dword [rdi], edx
mov dword [rax - 0x63449761], edx
add al, 6
adc al, 0xff
js 0x1400a1119
invalid
cmc
jb 0x1400a11c3
xchg byte [r11 - 0x6b67d131], r10b
cwde
xchg esp, eax
imul esp, dword [rbp + 0x19], 0xffffffa9
pop rdx
sbb bh, byte [rsi + 0x7b]
movabs al, byte [0x92c9f73b975f19a9]
test eax, 0x3b975f19
test ecx, 0x52d7bd92
mov ebp, 0x18e952d7
pop rbx
mov fs, edx
mov ebp, 0x18e952d7
pop rbx
mov fs, edx
out dx, eax
sbb byte [rbx - 0x72], bl
loop 0x1400a1192
out 0x54, al
mov edi, 0xd2744a7c
outsb dx, byte [rsi]
fdecstp
fsubr st(5)
enter 0xffffffffffffe4ed, 0xffffffffffffffbf
in eax, dx
in al, 0xbf
in eax, dx
in al, 0xbf
cmc
invalid
invalid
invalid
or ebx, esi
out dx, eax
xchg edi, eax
stosd dword [rdi], eax
jns 0x1400a1186
cli
je 0x1400a119e
adc dword [rdi + 5], ebx
dec dword [rbx + 0x4f8a1ceb]
div dword [rbp - 0x2e]
mov ebx, 0x4312815a
out dx, eax
invalid
nop
cmpsb byte [rsi], byte [rdi]
nop
in al, dx
stc
sahf
in al, dx
cmp eax, edi
xchg bp, ax
or rax, 0x63a8dd
mov eax, 0x3959bb80
xlatb
or byte [rbx + riz*4 + 0x3b], bl
sub al, 0x10
out 0x43, al
scasd eax, dword [rdi]
invalid
invalid
cmp dword [rsp + rax], esp
neg byte [rbx - 0x4e7b57d3]
invalid
cmp al, 0x65
popfq
retf 0x752f
scasd eax, dword [rdi]
invalid
jge 0x1400a124d
adc dh, al
add esi, edi
rol byte [rsi + 0x41], cl
and al, 0x90
movabs byte [0x74a9e35ff9fbc455], al
out 0x11, eax
invalid
xor esi, dword [rdi]
invalid
imul esp, edx, 0x3da914f7
invalid