Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
xor dword [rsi + 0x6d8ac118], ebx
jbe 0x1400a0844
ror dword [rdx - 0x57f18993], 0x17
test al, 0x17
insb byte [rdi], dx
dec eax
push rsi
idiv dl
idiv dl
wait
test al, 0xbf
invalid
invalid
jg 0x1400a0843
invalid
cmp al, 0xc8
cmc
mov ah, 0xb7
loop 0x1400a0851
movsd dword [rdi], dword [rsi]
invalid
loopne 0x1400a0877
sar dword [rsi - 0xb], 1
cli
movabs al, byte [0x7f08cf97d6c927e4]
invalid
ja 0x1400a0831
ja 0x1400a0831
xchg dword [rbp - 0x664bd6cb], edi
out 0xec, eax
add byte [rdx + 0x7ef9ec35], dl
stc
jle 0x1400a08c2
popfq
invalid
adc eax, 0x9994783b
int1
mov ebx, 0x8338dff
and al, 0x37
shr byte [rbx], cl
sbb r15, qword [r9 + 0x6a]
movabs byte [0x757e067bf0b71265], al
adc dh, byte [rdi + 0x7e067bf0]
jne 0x1400a0922
invalid
stc
jle 0x1400a08c2
popfq
invalid
adc dh, byte [rdi + 0x7e067bf0]
jne 0x1400a0922
movabs dword [0x7e9e6d60388de06b], eax
clc
imul esp, eax, 0xffffff8d
loopne 0x1400a0839
cmp byte [rax + 0x6d], ah
sahf
jle 0x1400a08aa
mov ecx, dword [rdx + rdi + 0x17b92d58]
push rax
invalid
invalid
cmp bl, byte [rax + 0x2d]
mov ecx, 0x9c625017
and eax, 0xeff370f3
jo 0x1400a08b3
out dx, eax
push rdi
jg 0x1400a08bd
int3
invalid
lahf
cdq
outsb dx, byte [rsi]
cli
pop rcx
invalid
invalid
invalid
and al, 0x8b
invalid
movsb byte [rdi], byte [rsi]
mov edi, 0x29ad8ba2
add dl, byte [rcx + 0x415d73fe]
xchg esi, eax
xor byte [rax + rax*8 + 0x1cd5ee79], 0x7f
invalid
mov ah, 0xc0
jns 0x1400a0914
invalid
pop rcx
add ebp, eax
sub eax, 0x679e9f8c
mov esp, 0x79f67ee8
invalid
jo 0x1400a08cd
xchg byte [r13 - 0x64fb359d], r15b
mov ebx, 0xa91464e3
jmp 0x189954485
adc edx, dword [rdx]
sti
jge 0x1400a09d3
invalid
loop 0x1400a09e1
invalid
invalid
add r11, r14
mov esp, 0x727f3e74
sbb ebx, 0xffffff93
invalid
lea ebx, [rax]
mov dh, byte [rsi - 0x43f25fd8]
mov edi, 0x6abd14a2
insd dword [rdi], dx
jg 0x1400a0a31
invalid
invalid
xlatb
pop rsp
invalid
in al, 0xff
mov edi, 0x2eb70ed7
invalid
cmp eax, 0xe4762b0a
jbe 0x1400a09c7
sbb esi, edi
invalid
sbb al, 0x14
xor r8, 0x2c7fee7e
push rsi
invalid
invalid
add cl, byte [rax + 0x2a]
sbb dword [rbp - 0xf213b80], esp
shl dword [rcx + rax + 0x76333863], 0x3c
xor esi, dword [rsi + 0x3c]
xor esi, dword [rsi + 0x3c]
pop rsi
std
push rcx
invalid
rol byte [rcx], cl
mov bh, byte [rsi]
cmp eax, 0x6b18c011
mov ebx, 0x7c3b7d2c
cli
invalid
pop rbp
jne 0x1400a09de
mov eax, 0xb7e8bde8
invalid
adc esp, dword [rdx + 0x37]
sbb eax, 0x645b2403
lodsd eax, dword fs:[rsi]
cmp esi, r9d
movabs eax, dword [0xfe9384ff69a943ba]
xchg ebx, eax
invalid
jp 0x1400a0aaf
xchg ebx, eax
invalid
stosb byte [rdi], al
mov esp, 0xb206ac0c
cmp bl, byte [rbx - 0x3b]
pop rsi
sbb bl, byte [rbp - 0x77c2c83b]
mov cl, 0x9a
invalid
cdqe
cmp byte [rcx + 0x79], cl
mov dh, 0xf8
sbb al, 0xd5
mov ah, 0xbd
mov esi, 0xa73f68ba
sal dword [rbx - 0x36], 0x58
xor byte [rax - 0x44], al
invalid
mov esp, 0xf9fc3217
xor bh, ah
stc
mov bh, 0xef
out dx, eax
invalid
and eax, 0xcfcea8ca
int3
adc edi, ebp
mov ah, 0xf3
insb byte [rdi], dx
xchg edi, eax
invalid
jns 0x1400a0ab6
and dword [rdx - 0x10], ecx
jnp 0x1400a0ab4
jge 0x1400a0ade
jae 0x1400a0b6f
pop rcx
jno 0x1400a0a9a
out 0xd3, eax
adc al, 0
fstp qword [rdx + riz]
popfq
invalid
call [rbp - 0x65d45831]
cmp dword [rdi], edx
add ah, byte [rsi]
mov eax, esi
movabs eax, dword [0xb9cb04e93dbf1f86]
xor eax, 0xd39eaaf4
fistp word [rbp - 0x3421a0d]
jmp 0x1400a0b55
add al, 0x8b
xchg esi, eax
in eax, 0x15
invalid
lahf
cmp al, 0x81
int3
xchg ebp, eax
cmp eax, 0x3876ffeb
adc al, 0xc8
fild qword [rax + rbp*4 - 0x511a7dec]
enter 0xffffffffffffacdf, 0xffffffffffffffa8
adc al, 0x82
in eax, 0xae
stosd dword [rdi], eax
invalid
push rsi
jrcxz 0x1400a0b90
xor qword [rbx], r15
fisub dword [rdx - 0x14]
loop 0x1400a0bec
add byte [rbp - 0x37], ch
nop
pop rcx
invalid
hlt
jb 0x1400a0c12
mov eax, 0xb4a05c9b
push rbp
xchg edi, eax
mov esp, 0x49bf3f7a
jne 0x1400a0bc8
loope case.0x140002106.45
invalid
sti
out dx, eax
mov esi, dword [0x1b9e214ab]
invalid
retf 0x9808
mov dh, byte [rdi - 0x10]
jmp [rdi + 0x7237ebb1]
fild word [rsp + rbp*2 + 0x23]
pop rax
mov ch, byte [rax + 0x49]
invalid
jo 0x1400a0c34
invalid
sub eax, 0x74f1d5f2
mov dl, 0x4c
jae 0x1400a0b7b
mov cs, word [rdi + 0x14]
add bl, bh
invalid
fist word [0x186477ad6]
adc dword [rax + 0x43fd0baa], edi
jnp 0x1400a0c08
mov edi, 0xb581a188
invalid
mov ch, 0x27
or edx, dword [rdi - 0x79]
vmovupd xmmword [rdi - 0x3f865ce7], xmm8
xchg edx, eax
xor ebp, dword [rsi - 0x41]
invalid
and bl, byte [rdx]
xchg ebp, eax
jns 0x1400a0c27
xchg dword [rcx], ebx
movabs dword [0x1a22bf6e3392c079], eax
invalid
and bl, byte [rdx]
mov edi, 0x102d1a22
int1
test esi, esi
sub eax, 0xf685f110
mov bh, 0x65
loop case.0x140002106.45
loop case.0x140002106.45
test dword [rcx], 0x4018fa6f
add byte [rbx + 0x2708ff49], r11b
mov ebp, dword [rsi]
mov dl, byte [rcx + 0x30]
push rcx
xor byte [rdx - 0x5e], bl
pushfq
out dx, al
invalid
push rbp
sub al, 0xee
invalid
cmpsb byte [rsi], byte [rdi]
dec dword [rax]
invalid
push rcx
xor byte [rdx - 0x5e], bl
pushfq
out dx, al
movabs dword [0x8eb93ba6f0ee2c55], eax
rcr dword [rbp - 0x1a], 1
pop rbp
invalid
cmp edi, dword [rcx - 0x19a22e72]
pop rbp
out 0x49, al
and al, 2
and al, 2
or byte [rdi - 0x21], cl
adc dh, byte [rbp + 0x10360d44]
not dword [rdx]
test dword [rax + 0x737f7f46], ebx
jo 0x1400a0cba
or dword [0x15795cb7f], esi
invalid
mov ch, 0x5f
loopne 0x1400a0c46
cmp al, 0xb8
cmp bh, byte [rdx - 0x214faa3]
pop rbp
add eax, 0xa48afdeb
xchg ebx, eax
call 0x11db154bc
xchg ebx, eax
invalid
lahf
mov esp, 0xda0cbe2e
pop r10
xchg ebx, eax
call 0x11db154bc
xchg ebx, eax
invalid
popfq
movsb byte [rdi], byte [rsi]
fild qword [rsi + rbx*2]
ja 0x1400a0cb1
invalid
movabs eax, dword [0x7048fb728eff8c63]
invalid
jo 0x1400a0cb1
invalid
mov ecx, 0xd9fd8f8c
cmp ch, byte [rax + 0x7ee75cd6]
test al, 0xd6
pop rsp
out 0x7e, eax
test al, 0xd6
pop rsp
out 0x7e, eax
sti
invalid
xchg edi, eax
cmp dword [rax - 0x403862b9], ebx
invalid
mov cl, al
in al, 0x95
mov bl, 0x68
adc ecx, ebp
mov ecx, 0xd6e431d5
invalid
invalid
jnp 0x1400a0d01
loop 0x1400a0cf4
invalid
or dword [rcx], ebp
invalid
std
mov al, byte [rdx + 0x30]
in eax, dx
invalid
mov ch, 0x29
add eax, 0xef15ccae
sub ebx, dword [rbp - 0x7a]
rcr byte [rbx], cl
cli
sbb byte [rcx], bh
ficom word [rax - 0x61b3ace2]
sal ebp, cl
cmc
in eax, dx
loop 0x1400a0d53
fisubr word [rdx + 0x530e8a5d]
xor esp, dword [0xcad3995e]
add eax, 0x8a696316
imul ebx, edi, 0xffffffa3
xchg esp, eax
movabs dword [0xbc41adb088409b46], eax
wait
mov byte [rax + 0x5ebc41ad], sil
wait
mov byte [rax + 0x5ebc41ad], sil
int 0x2d
std
popfq
pop rbp
sal edi, cl
add cl, byte [rdx + 0x43f97dd1]
mov ebp, 0xf950781a
stc
mov r13d, 0xf950781a
lodsd eax, dword [rsi]
xor eax, 0x45daddc1
movsq qword [rdi], qword [rsi]
movsd dword [rdi], dword [rsi]
mov esp, dword [rax - 0xbc1c8ec]
hlt
mov edi, dword [rcx]
invalid
hlt
add byte [rbx], dh
int3
jno 0x1400a0d83
cld
nop
mov esi, 0x7f3f97c5
invalid
jg 0x1400a0dc6
retf 0x7c10
invalid
invalid
xchg edi, ebp
stc
mov esi, 0x572cc6a9
pop rax
test byte [rcx], 0x52
cmpsb byte [rsi], byte [rdi]
jmp 0x1400a0d8b
xchg esi, eax
lea esp, [rcx + 0x5c9af61b]
invalid
lahf
invalid
jg 0x1400a0dd2
invalid
cmp ebx, dword [rcx]
xor edx, dword [rbx]
adc ecx, dword [rdi]
push rdx
mov edx, 0x9c3568bb
hlt
mov ecx, 0xaefe5ff7
and eax, 0x6ecb1cca
invalid
xor byte [rdi + 4], dl
xchg edi, eax
adc ch, byte [edx - 0x42]
invalid
outsd dx, dword [rsi]
mov gs, word [rdi + 0x78315c9]
invalid
fcomp dword [rcx + 0x6c]
invalid
xor al, byte [rbx]
invalid
lodsd eax, dword [rsi]
push 0xffffffffc0732849
cli
sub al, 0x6f
in eax, dx
invalid
iretd
mov dh, 7
or esp, esi
jmp 0x10fcfe9dd
cmp ebx, ebp
hlt
push rbx
push rax
mov bl, 0x32
invalid
cmp esi, dword [rcx + 0x7b39be0f]
int 0xde
fst dword [rbp + 0xa8abfff]
add dword [rdx], ebx
scasd eax, dword [rdi]
std
invalid
invalid
cmp byte [rcx + rbx], al
add al, 0x6e
sbb ch, byte [rdi - 7]
invalid
fist dword [rdi - 0x533b9005]
cmp ebp, 0x958fe88c
invalid
sahf
mov eax, 0x50170be0
invalid
invalid
pop rdi
invalid
cmp dh, ah
invalid
xchg ebp, eax
adc al, 0xdd
jb 0x1400a0f8b
jl 0x1400a0fcb
mov esp, r9d
je 0x1400a0f84
sti
iretd
invalid
xlatb
adc al, 0x88
invalid
popfq
movsb byte [rdi], byte [rsi]
invalid
ret 0x939b
invalid
js 0x1400a108b
xlatb
outsd dx, dword [rsi]
cdq
outsd dx, dword [rsi]
je 0x1400a0fd5
mov esi, 0xd3e2d2f7
cmp al, 0xa2
sar dword [rdx + riz*4], cl
mov word [rsi + 0x74], gs
mov esi, 0x8c0c46f3
movabs byte [0x8fd1dd8f733dd758], al
jae 0x1400a0fe1
fst st(1)
invalid
invalid
xchg cl, cl
leave
sbb al, 0x66
add al, 0x1f
invalid
xlatb
invalid
wait
jo 0x1400a1083
invalid
invalid
mov dl, 0xd8
jle 0x1400a1147
push qword [rsi - 0x62]
insb byte [rdi], dx
sub bl, byte [rbx - 0x60]
push rdx
wait
or al, 0x2e
lea esp, [rsi + 0x4d604e8c]
mov r8b, 0x26
mov r8b, 0x26
ficom word [rbx]
sbb eax, dword [rax - 0x1a]
test byte [rsi], al
call qword [rdi + 0x45e3e5c]
pop rsp
pop rsi
add al, 0x9c
out 0x84, al
invalid
pop rsp
pop rsi
add al, 0x9c
nop
pop rsp
push 0xffffffffb3b0edf4
in eax, dx
mov al, 0xb3
in eax, dx
mov al, 0xb3
in eax, 0x32
mov ah, 0xe
call qword [rsi]
or al, 0xfc
cmpsd dword [rsi], dword [rdi]
test al, 0x8b
mov ebx, dword [rax + 0x14]
invalid
cmp dword [rbx + riz*2 - 0x21], ebp
std
je 0x1400a11b8
mov ebx, dword [rax + 0x14]
invalid
and bl, dh
adc al, 0xfd
std
std
push 0xffffffff973ce317
cbw
invalid
stc
push rdx
or eax, 0xf
jnp 0x1400a1111
lea ebp, [rcx + rbp*8 + 0x74]
invalid
cmpsb byte [rsi], byte [rdi]
mov ecx, 0xd6e3fdfa
mov ch, 0x45
invalid
xchg dword [rdi], edx
sbb al, 8
cwde
jmp 0x1400a11ae
invalid
mov r10, rdx
sti
or ebx, dword [rdi + 0x2a]
js 0x1400a116c
pop rdi
xchg edi, eax
cmp esi, edi
invalid
invalid
mov edi, 0xbd599a17
imul edx, dword [rsi], 0x15f7df68
xor dword [rdi + 0x54c09ebc], 0xffffffb8
invalid
adc eax, 0x9ebcb783
rcl byte [rax + rdi*4 - 0x46], 0x6e
invalid
outsb dx, byte [rsi]
mov edx, 0x79eb566e
invalid
outsb dx, byte [rsi]
push rsi
jmp 0x1400a123e
or ebx, esi
push r14
and cl, byte [rax + 0x29270aed]
mov dword [rbp + 0x3b295782], esi
sub dword [rbx], edi
sub dword [rbx], edi
invalid
invalid
jl 0x1400a118a
xchg dword [rdx - 0x40], esp
retf
in al, 0x7c
sub al, 0x3c
lea edx, [rbp - 0x18712592]
push rax
fsubrp st(2)
or dword [rax + 0x634a7b7a], esp
jnp 0x1400a1272
invalid
jne 0x1400a11c1
jnp 0x1400a1272
invalid
xchg ebx, eax
out dx, al
xchg edi, eax
mov esp, 0x4ffa254e
imul byte [rbx]
lahf
push 0xffffffffb16207dc
invalid
invalid
mov cl, 0xec
or byte [0x1bb455e6d], ch
invalid
sub eax, 0x7b3b4c2a
out dx, eax
adc ebp, dword [rdi + rcx*2 + 0x46345f43]
push 0x1434531e
xor al, 0x14
push rbx
xor al, 0x14
xor eax, 0x2be11c2f
and dword [rcx + 0x6b8af411], edi
invalid
jge 0x1400a124d
push rsp
in eax, dx
mov bh, dh
lea esi, [0x162d62bd8]
invalid
invalid
invalid
invalid