Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [rcx + rax*4 - 0x57], ebx
lea eax, [rax + 0x4144a2f]
fisub word [rsi]
sub dword [rcx + 0x4a2f808d], 0x26de0414
rcl byte [rcx - 0x13575ea], 0xe9
add ah, ch
or cl, 0xd1
mov dl, 0x15
and eax, 0xfeaa6e36
lodsd eax, dword [rsi]
jle 0x1400a07f8
xor esi, edi
ror dh, 1
invalid
jnp 0x1400a0853
mov byte [rax - 0x17cd93ca], dl
cmp qword [rdi - 0x1f], r10
push rsi
sbb dh, byte [rsi + 0xe]
test al, 0x17
sub edi, dword [rdx - 0x191e4e2f]
loope 0x1400a0824
mov edx, 0xe6e1b1d1
loope 0x1400a0824
jg 0x1400a0833
sub bh, byte [rdi - 0x7b]
fidivr word [rbp + 0xea2fe51]
jl 0x1400a0857
xor rsi, rdi
xor esi, edi
fnstsw word [rcx + riz*8 + 0xf]
enter 0xffffffffffffff8f, 0xffffffffffffffd0
jge 0x1400a07f6
invalid
sahf
cdq
cld
ret
sbb eax, 0x2f9b56bb
pop rsi
pop rsp
in eax, 0xe1
mov cl, 0xd9
jns 0x1400a0865
wait
invalid
iretd
sub byte [rax], dl
jb 0x1400a08d0
adc byte [rbp - 0x1dd13c1e], dl
pop rbp
int1
jle 0x1400a0905
loope 0x1400a0857
jbe 0x1400a0839
invalid
xor eax, 0x41d01598
and esp, dword [rbp - 0x517ef0d5]
clc
stc
invalid
or al, 0x49
invalid
cmp eax, 0x6943dab7
push 0xffffffffffffff9d
or al, 0xcf
mov ecx, 0x177bf3ed
jnp 0x1400a08e9
sar dword [rdi - 0x4b7b3296], cl
or al, 0x9f
clc
sal al, 0x1f
invalid
out 0x3f, al
clc
ret
invalid
cdq
sub al, 0x6d
invalid
push rdi
lahf
std
xchg ebp, eax
ret
mov dl, byte [rbp + 0x16]
movabs al, byte [0x7e176a9c28540228]
invalid
leave
sub ah, byte [rsi + 0x1a03582f]
pop rax
add ebx, dword [rdx]
pop rax
add ebx, dword [rdx]
push rsp
pop rbp
invalid
insd dword [rdi], dx
wait
xchg esi, eax
jmp 0xd0f63739
xor bl, ch
cdq
ret
loop 0x1400a09e1
invalid
scasd eax, dword [rdi]
jb 0x1400a0928
scasb al, byte [rdi]
and dword [rbx], eax
je 0x1400a0907
leave
mov edx, 0xe76dfb9
xchg edi, eax
call rdi
jg 0x1400a097d
invalid
invalid
fidivr word [rsp + rsi*2 - 0x7c8d80c2]
fld xword [rax]
cmp bl, byte [rbx + rax*8 - 0x1291e7ac]
outsb dx, byte [rsi]
in eax, dx
outsb dx, byte [rsi]
in eax, dx
cmp dword [rbx - 0x2fc03ead], 0x9442e5da
hlt
fld dword [rsi - 0x41c7e851]
invalid
fistp word [rbp + 0x1e]
cmp eax, 0x56e614f9
bnd jb 0x1400a0a30
loop 0x1400a0a0d
mov cl, r9b
in al, 0xff
mov edi, 0x9d16df63
insb byte [rdi], dx
jmp 0x1400a09c0
invalid
jno 0x1400a0994
movabs al, byte [0x201297fee7ef054]
mov ch, 0x4f
out 0x63, eax
mov r10, r11
mov dl, ch
jne 0x1400a0a1b
invalid
xor al, 0xda
retf 0x746c
wait
loop 0x1400a09bd
mov bh, bh
jae 0x1400a0a8a
add dword [rbp + rbp - 0x48afaf39], 0x6d
insd dword [rdi], dx
outsd dx, dword [rsi]
pop rbx
invalid
pop rdx
add al, 0xdb
push rbx
in eax, dx
sahf
ret
xor esi, dword [rsi + 0x3c]
pop rsi
invalid
leave
stc
mov cl, ch
xor ebp, dword [0xc380dbb4]
movsd dword [rdi], dword [rsi]
sub ah, al
xchg dword [rbp + 0x61c4374d], eax
and eax, 0x5e5ee85e
pop rsi
invalid
pop rsi
pop rsi
hlt
pop rsi
call 0x156fe68bc
or ah, byte [rbx]
insb byte [rdi], dx
mov edi, 0xe927bf17
xchg byte [rcx], cl
push 0xffffffff83bd7972
leave
invalid
push rdx
jge 0x1400a0a22
sub eax, 0x658a985e
invalid
xor edx, eax
push rbx
mov word [rcx + rdx*2 + 0x1cf8cad6], ds
invalid
xor bh, ah
xor al, 0xbe
jle 0x1400a0ae6
cmp edi, edi
invalid
or cl, dh
movsb byte [rdi], byte [rsi]
mov dh, 0x15
std
in al, dx
movabs eax, dword [0xd8aedadffdd165b]
fisub word [rbx + 0x36a9fcfd]
pop rdi
invalid
xchg esi, eax
jrcxz 0x1400a0b28
fisubr word [rcx + 0x55fc7e11]
lea eax, [rbx + 0x3f1f421d]
jmp 0x1400a0af6
inc dword [rax + 0x3f10ee52]
push rdx
out dx, al
adc byte [rdi], bh
cmpsd dword [rsi], dword [rdi]
or dword [rcx + rax*4 - 0x9a24407], esi
jmp 0x1659439a6
call [rbp + 0x29eb5fc9]
js 0x1400a0ae9
leave
pop rdi
jmp 0x1400a0b45
cdq
invalid
mov bl, 0x9c
movsd dword [rdi], dword [rsi]
or al, 0x43
invalid
jmp 0x1400a0b18
mov edi, dword [rdi]
mov dl, 0xbf
call 0xe52b11ec
invalid
invalid
invalid
xchg edx, eax
xchg esi, eax
and ecx, ebx
or eax, 0xf9779d9
test al, 0xed
push rsp
not dl
invalid
cmc
ret 0x9357
invalid
nop
and eax, dword [rcx - 0x1b]
pop rsp
and al, 0xa2
adc al, 0x1e
cld
invalid
pop rbx
wait
wait
wait
call 0x1387e300b
sub eax, 0x8b07765b
jne 0x1400a0b66
xchg esp, eax
pop rbx
pop rsi
sbb eax, 0x96725552
fild word [rcx + rsi*4 + 0x5f]
adc byte [rbx], bh
fimul word [rdx + 0x7415c63f]
invalid
jg 0x1400a0c5f
int1
out dx, eax
invalid
add al, byte [rsi - 0x62]
or byte [rdx - 0x758bcb52], bl
mov edx, dword [rsi]
jb 0x1400a0c76
invalid
movsb byte [rdi], byte [rsi]
int1
shr dword [rdx + 0x5a], 0xe2
invalid
fisubr word [rdx]
push rsi
jp 0x1400a0bba
invalid
cmp qword [r13 + 0x3f], 0xffffffff9521f77f
mov edx, 0xd9a84ca6
cwde
shl byte [rbx + 0x5340e918], cl
sbb cl, ch
push rbx
sbb cl, ch
push rbx
invalid
sahf
jmp rdx
cmp byte [rax], bh
stosb byte [rdi], al
jae 0x1400a0ca6
adc eax, 0xb094adf5
add esp, dword [rsi - 0x33]
lodsd eax, dword fs:[rsi]
int 0x38
cmp byte [rdx], ah
push rdi
std
push 0xffffffffffffffa2
sbb byte [rdi - 7], bh
stc
stc
jmp [rax + 0x2510eda9]
test al, 0xa9
in eax, dx
adc byte [0x1597b44d0], ah
cmp byte [rcx + 0x19], dh
sub byte [rbx - 0x56], al
invalid
invalid
sub ebp, dword cs:[rsi + rax*2]
sub al, 0x46
xor dh, bh
xor bh, cl
stc
xchg edi, eax
invalid
xor esp, esi
push rdx
fimul dword [rbx - 0x789da3d0]
movsb byte [rdi], byte [rsi]
jrcxz 0x1400a0c53
lodsd eax, dword [rsi]
in eax, dx
out 0x97, al
outsb dx, byte ds:[rsi]
nop
invalid
jb 0x1400a0ce1
cmpsd dword [rsi], dword [rdi]
int1
invalid
or eax, 0xf79fdb1f
invalid
sub al, 0x8a
fld qword cs:[rdx]
invalid
iretd
invalid
invalid
jmp [rbx - 0x4f]
xchg edi, eax
push rbx
sbb byte [rax], ah
sti
int 0x8b
invalid
stc
fcmovu st(0), st(4)
push 0x40
mov cl, 0x38
xchg ecx, eax
xor byte [rax + rsi*2 - 0x49], ah
adc rsp, qword [rdx]
cqo
push rcx
mov cl, 0x42
invalid
hlt
invalid
add byte [rbx], dh
pop rbx
xchg esi, eax
invalid
clc
xor al, 0x9b
xchg bh, ah
xchg esi, ebp
div eax
jnp 0x1400a0da3
mov al, 0x58
xor edi, dword [rbx + 0x69769b2]
int 0x8e
xchg r15, rbp
xchg edi, ebp
xchg edi, ebp
stc
mov esi, 0x54fb91ac
hlt
pop rbx
cmp byte [rsi + 0x2e], dh
sbb ebx, dword [rdx]
xchg esi, eax
movabs byte [0x25ebee7cb1020e9d], al
adc byte [rax + 0x1f244a9b], dl
push rdx
push rdi
clc
jae 0x1400a0e42
invalid
cmp ebp, ebx
mov edx, 0xa7d4a336
mov esp, dword [rdi]
pop rcx
idiv word [rbx]
cmp ebx, esi
invalid
invalid
xor eax, 0x2bf2b89c
wait
add dword [rbp + 0x71], 0xffffff9d
cmp ebx, esi
invalid
sub ebx, dword [rbx - 0x628eba7d]
ja 0x1400a0e2c
loope 0x1400a0e1d
shr dword [rsi], 1
fist dword [rbx - 0x38ba3428]
fist dword cs:[rbx - 0x38ba3428]
invalid
and ebx, ebp
xchg edx, eax
fadd qword [rax + 0x47df3aad]
jle 0x1400a0e70
test eax, 0x30311f87
movsb byte [rdi], byte [rsi]
adc ecx, eax
sub byte [rbx - 0x4c], 0x66
imul esi, dword [rsi + riz*2 + 0x6943bee6], 6
mov ah, 0x66
out 0xbe, al
imul eax, dword [r14], 0x6255592d
sub eax, 0x7a625559
invalid
sub eax, 0x7a625559
jo 0x1400a0ecc
test rax, 0xfffffffff831694b
test eax, 0xf831694b
jge 0x1400a0e71
sub eax, dword [rsi + rdi*4]
mov bh, 0x8a
invalid
mov esi, 0x6e068ab7
cmp esp, eax
sbb r13b, byte [0x1635b819f]
xchg ebx, eax
adc edi, eax
insb byte [rdi], dx
test esp, 0x4094d80e
invalid
lahf
adc byte [0x13ab24441], cl
sub al, 0x6f
in eax, dx
cmp eax, 0x9d09839e
invalid
invalid
cmp dword [r14], r10d
jno 0x1400a0eea
adc al, 0x95
xchg ebp, eax
fnsave dword [rdx + 0x38d5dbef]
mov ebx, 0xe3f2f80b
mov dl, 0xef
fcmovnbe st(0), st(5)
cmp byte [rbx - 0x1c0d07f5], bh
xchg ebp, eax
cmpsb byte [rsi], byte [rdi]
test ah, bl
in al, dx
fcompi st(5)
out dx, eax
scasd eax, dword [rdi]
invalid
adc eax, 0x268e60ad
push rbp
adc ebx, dword [rbx - 0xc]
je 0x1400a0f33
je 0x1400a0f33
jno 0x1400a0ec6
invalid
jbe 0x1400a0f03
jmp qword [rsi]
jl 0x1400a0ee1
sub dword [rcx], ebx
push rsi
movabs eax, dword [0xbfb72fd1685aa0d6]
div dword [rsi - 0x47]
out 0xef, eax
push rcx
invalid
cli
invalid
fild word [rbx]
in eax, dx
invalid
sahf
jg 0x1400a0f5f
add eax, 0xb976faec
push rdx
mov dl, 0x6b
or eax, 0xf28f46dc
fcom dword [rdi]
invalid
xor dh, al
loope 0x1400a0f9e
jge 0x1400a0f5d
or al, byte [rdi]
in al, dx
invalid
invalid
xchg rcx, rax
jl 0x1400a0f4c
xor edi, 0x235e51ef
add byte [0xc128e89a], dl
xor edx, dword [rsi]
invalid
mov bl, 0xcc
invalid
invalid
sub dh, byte [rbp - 0x14]
push qword [rsi]
or dl, byte [0x138436b41]
sub dx, sp
sub edx, esp
sub edx, esp
enter 0xffffffffffffd50f, 0x3a
mov dh, 0x2b
invalid
invalid
pop r11
add eax, 0xf748f0e8
fcomp dword [rdi + 0xb]
push rbp
jge 0x1400a1012
invalid
fst qword [r15 + 0x7c9cff87]
add eax, 0x97468b41
xchg edx, eax
push rdx
jle 0x1400a0f4e
xchg dword [rdi - 0xa], edx
invalid
outsd dx, dword [rsi]
mov edi, 0x2fcc8abe
invalid
xchg ebp, eax
in al, 0x94
invalid
out 0xb7, al
mov dl, 0x5b
adc dh, ch
invalid
cmp eax, edx
add eax, 0xfe7ffb72
jb 0x1400a1001
jg 0x1400a1006
jb 0x1400a1001
jg 0x1400a1006
mov ecx, 0xb9cde988
invalid
invalid
adc al, 0x7c
frstor dword [rcx]
cwde
or ebp, dword [rcx + rbx*8]
invalid
movsb byte [rdi], byte [rsi]
and bh, dl
outsd dx, dword [rsi]
cdq
outsd dx, dword [rsi]
and ebx, dword [rsi]
fdivr qword [rcx - 0x56b800fb]
test eax, 0x261a8020
enter 0x565b, 0x5e
test eax, 0x261a8020
enter 0x565b, 0x5e
sbb bh, byte [rsi - 0x37]
cld
cdq
xchg dword [rdi - 0x594362fb], edi
popfq
invalid
cmpsb byte [rsi], byte [rdi]
cmpsb byte [rsi], byte [rdi]
mov ebx, 0xccf860b4
retf
jne 0x1400a1035
invalid
in al, dx
test eax, 0xdb72d2f5
jrcxz 0x1400a112b
cmp word [rax + 0x5e], cx
push rbp
pushfq
invalid
pop rcx
in al, 0x72
scasd eax, dword [rdi]
fstp st(7)
xchg byte [rcx + 0x25f099d], dh
or byte [rbp + rsi*8 - 0x49849410], ah
invalid
or byte [rsi + 0x35], dh
sbb al, 0xb3
adc eax, 0x17ec1765
in al, dx
invalid
mov ebx, 0xa297fa3f
pop rsi
repne lodsd eax, dword [rsi]
pop rax
in al, dx
invalid
pop rbx
invalid
cmp byte [rcx - 0x5309407], bh
outsb dx, byte [rsi]
cli
invalid
invalid
test dword [rdi - 0xa], ecx
invalid
cmpsb byte fs:[rsi], byte [rdi]
stosb byte [rdi], al
push rsp
and ebp, edx
sar byte [rsi - 0x2209c18], 0x74
invalid
fadd qword [rcx + rdx*4]
lodsb al, byte [rsi]
jp 0x1400a1140
int1
invalid
xor edi, dword [rdi + 0x142676ee]
ja 0x1400a11be
invalid
fcmovbe st(0), st(6)
push qword [rdi - 0x79]
xchg dword [rdi], edx
xchg dword [rdi], edx
mov byte [rsp + rdi*4 - 0x2773a066], bl
jo 0x1400a11eb
loopne 0x1400a11de
outsd dx, dword [rsi]
adc dh, byte [rdx]
out dx, eax
movabs byte [0x4996ace47bf2b50a], al
mov ch, 0xf2
jnp 0x1400a1166
lodsb al, byte [rsi]
xchg esi, eax
adc bpl, r8b
mov ch, 0xf2
jnp 0x1400a1166
lodsb al, byte [rsi]
xchg esi, eax
adc bpl, r8b
invalid
mov esp, 0x975f23ed
cmp esi, edi
invalid
invalid
test byte [rsi], dl
or dl, bh
invalid
out 0x65, al
invalid
or ebx, esi
out dx, eax
xchg edi, eax
stosd dword [rdi], eax
xchg r11d, eax
mov esi, 0x713bdedf
pop rcx
invalid
dec dword [rbx - 0x50a7e315]
cmp eax, 0xcc137649
int 0xbe
jnp 0x1400a1191
out 0xff, al
call [rsi - 0x5c]
sbb byte [rsi], dl
invalid
invalid
lea ecx, [rcx + 0x5d]
xlatb
mov bl, 0x45
invalid
invalid
invalid
invalid
invalid
ja 0x1400a11fd
fisttp word [rdi - 2]
out dx, al
xchg edi, eax
mov esp, 0x2a6bfe4e
adc eax, 0xf15a51d6
and al, 0xe3
mov ah, dh
wait
xchg dword [rcx], esi
xchg dword [rdx], edi
pop rdx
add eax, 0xd250a40a
push rbp
push rax
in al, dx
and byte [rbx], al
sbb ebp, dword [rbp - 0x582d112d]
lodsd eax, dword [rsi]
shr esi, cl
shl byte [rdi + 0x6eb3365d], cl
lodsd eax, dword [rsi]
shr esi, cl
shl byte [rdi + 0x6eb3365d], cl
xor esi, edi
invalid
jl 0x1400a120a
in al, 0xbd
cwde
mov esp, 0x329f201
rol ah, 1
cli
invalid
mov fs, word [rbp + 0x31ed1aea]
clc
test byte [rbx - 0x41], 0x34
pop rdi
jmp 0x17214f90b
imul ecx, dword [rdi], 0xffffffdd
sbb byte [rdx], ch
retf 0x9716