Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
push rdi
insd dword [rdi], dx
xchg ebp, eax
xchg esi, eax
or dword [rax - 0xda5e8df], 0xfffffff4
mov bh, 0x59
lodsd eax, dword [rsi]
test byte [rcx + 0x3e], 0x7d
fbld tbyte [rax + 0x65de0df9]
invalid
pop rax
push 0xffffffffffffff81
invalid
cmp byte [rbp + 0x4297718e], dl
pop rcx
mov esi, ebp
invalid
sub bh, byte [rdx + rdi - 0x1ac9a11]
scasd eax, dword [rdi]
invalid
and al, 0x3f
cdq
jae 0x1400a0890
adc ebp, dword [rsp + rax*2]
cwde
or dword [rbp + 0x4a], 0x68
mov ebx, esp
int1
jno 0x1400a0821
cmp eax, 0x3e1746f1
mov bh, 0xc3
test byte [rax + 0x47fd09c2], dl
out 0xbb, al
mov ah, 0xc8
push rbx
and dword [rdx + 0x23], esi
and eax, dword [rdi]
and eax, dword [rdi]
cli
invalid
cmpsb byte [rsi], byte [rdi]
cmp dword ds:[rbx - 0x72], 0xab1f17d
add byte [rax], al
test byte [rsi - 0x7e84e82], bl
mov cl, 0x17
clc
mov cl, 0x17
clc
cmpsd dword [rsi], dword [rdi]
or al, 0xbc
invalid
cld
invalid
invalid
sbb dword [0xd5951995], edi
mov dl, byte [rdi + 0x1ef6c090]
inc dword [rax - 0x67a1ac75]
pop rsi
cwde
pop rsi
cwde
xor dword [rdx - 0x54], esi
pop rcx
xchg edi, eax
invalid
xchg edi, eax
fbld tbyte [rbx + 0x48c7ae66]
adc esi, dword [0x17ecf1961]
mov bh, byte [rdi]
push rdi
invalid
hlt
mov edx, dword [rax + rbx*2 + 0x2f198ba7]
invalid
or esp, dword [rdi]
xchg esi, eax
je 0x1400a0964
call [rcx + 0x1a9ea3f9]
jge 0x1400a091f
cdq
stc
movabs dword [0xacffffbbb37d1a9e], eax
sub dword [rbx], ebx
sbb byte ds:[rcx - 0x63], dh
mov ebx, 0x29acffff
sbb edi, dword [rsi]
sbb byte [rcx - 0x63], dh
mov gs, word [rdi]
wait
lea edx, es:[rax + 0x69300c9f]
invalid
scasd eax, dword [rdi]
invalid
imul ebp, dword [rdi - 0x18407410], 0x913cff14
out 0xd6, eax
push rsi
push 0xffffffffffffffa1
cmp bl, dh
imul ebp, edi, 0x4d
out dx, eax
pop r11
out dx, eax
pop r11
invalid
xchg byte [rdx], bl
invalid
xor dword [0x197eda69f], 0x10
mov ecx, 0x97783931
adc byte [rcx - 0x6887c6cf], bh
movsb byte [rdi], byte [rsi]
mov edx, ebx
xor edx, ebp
in al, dx
jnp 0x1400a0963
in al, 0xff
mov edi, 0x12af11a7
movabs al, byte [0x48a68056ca16f47f]
adc qword [r10], 0xffffffffd0c246f2
invalid
adc al, 0x74
jg 0x1400a0993
xchg ecx, eax
sti
mov ecx, 0xe1ec3738
push rbx
mov cl, 0xa0
xchg edi, eax
xor esp, esp
js 0x1400a09c0
loopne 0x1400a0a70
mov esi, 0x78accdd
ja 0x1400a0a67
invalid
leave
mov ch, 0x36
je case.0x140002106.25
push 0xffffffffac086d94
cmp dword [rcx + rsi*4], edx
invalid
invalid
lea esi, [rdx - 0x3f9a47c2]
cmp eax, dword [rcx + 0x50]
jg 0x1400a09e6
fmul qword [rdx + 0x11]
add cl, byte [rdi]
pop r10
jbe case.0x140002106.27
xchg edi, eax
rcr byte [rsi - 0x1143ec00], cl
out dx, al
mov esp, 0xfb6e04cc
movabs byte [0x26d78dda6713fa4c], al
cli
adc esp, dword [rdi - 0x26]
invalid
xlatb
invalid
invalid
cli
adc esp, dword [rdi - 0x26]
invalid
or esp, dword [r9 - 0x4413d896]
fadd dword [rdi - 0x54]
lodsd eax, dword [rsi]
jbe 0x1400a0aec
invalid
clc
test dword [rdx + 0x77], esi
sbb al, 0x3c
fild word [rbp - 7]
stc
stc
mov edx, 0xddc0c4e2
jnp 0x1400a0a97
invalid
xor edi, dword [rdi + rbx - 0x1302ea40]
movabs eax, dword [0x99efed64cfbb8b3f]
invalid
pop rdi
call qword [rdi - 0xb1c4110]
dec dword [rdx]
adc dl, al
sal ch, 1
cmpsd dword [rsi], dword [rdi]
movabs al, byte [0x495be911e09e29a2]
in al, dx
adc ebx, dword [rdx + 0x24]
in al, 0x19
out 0x97, al
std
std
invalid
invalid
call [rbp + 0x2efc5531]
jrcxz 0x1400a0aaa
and dword [rcx + 0x676ed3f], 0xffffff96
invalid
movabs rsp, 0xd2f2958b78dba30e
mov bh, 0xd3
fucom st(5)
push rcx
invalid
mov eax, 0xb96f99a7
cmp al, 7
invalid
jb 0x1400a0b13
add byte [rbp + 0x4324abc], bl
sbb dl, byte [rbp + rbp*4 - 0x64]
invalid
retf
invalid
invalid
mov edi, 0x68722ca5
js 0x1400a0b94
pushfq
cmp dh, dh
and byte [rbx - 0x7027752a], cl
sbb byte [rbp + 0x51], bh
cmpsd dword [rsi], dword [rdi]
lodsb al, byte [rsi]
mov bl, 0xf4
dec byte [rbp - 0x22bbf01]
hlt
cmp byte [rdx + 0x5c88d52c], bl
invalid
frstor dword [rbx]
sbb edi, dword [rbx + 0x43]
invalid
invalid
imul edx, dword [0x18d21bbb7], 0xd85867aa
mov bl, 0x33
or dword [rcx], esp
invalid
std
invalid
push 0xffffffff81b3c4cd
sbb ebx, dword [rsi - 0x3c81b816]
fnsave dword [rsi]
push rsp
in eax, dx
in eax, dx
in eax, dx
int1
invalid
lodsb al, byte [rsi]
test byte [rbx + 0x1b8a46ff], cl
invalid
test byte [rdx], cl
sub al, 0x81
loope 0x1400a0cb9
invalid
repne cmpsb byte [rsi], byte [rdi]
xor al, 0x5c
xor al, 0x5c
add byte [rdi - 0x16a018c], dl
add byte [rdi + 0x2618e2fd], bl
outsb dx, byte es:[rsi]
lahf
std
loop 0x1400a0caa
outsb dx, byte es:[rsi]
cld
sahf
lahf
outsd dx, dword [rsi]
in al, dx
sar dword [rbx + rax*2], 1
invalid
out dx, eax
invalid
invalid
rcl dword [rdi], cl
pop rdx
add dword es:[rdi], eax
xchg edi, eax
mov eax, 0x6c7c0303
add eax, dword [rbx]
jl 0x1400a0d30
add eax, dword [rbx]
jl 0x1400a0d30
add edi, dword [rsp + rbp*2 - 1]
nop
jns 0x1400a0c8e
call qword [rax + 0x79eec679]
mov edx, 0xfd3f06b2
js 0x1400a0cb7
out dx, al
jns 0x1400a0c85
mov dl, 6
invalid
xchg edi, eax
outsb dx, byte ds:[rsi]
pop rbx
sub eax, 0x1066fcee
dec dword [rbp - 0x4c0b21e2]
invalid
fdivrp st(4)
mov bl, 0x19
sti
xor eax, 0x778ff79f
stc
mov r14d, dword [r15 + 0xb4c2383]
and dword [rbx], 0x4c
or edi, esi
sbb ebx, 0x7f
add qword [r10], r9
xchg dword [rdx], ecx
sbb edx, dword [rsi - 0x620a5194]
invalid
and dword [rbx], 0x4c
or edi, esi
sbb ebx, 0x7f
add qword [r10], r9
xchg dword [rdx], ecx
sbb edx, dword [rsi - 0x620a5194]
movabs eax, dword [0x8a6c8f0e4bf183e7]
push rsp
xchg dword [rax - 0x87408e2], ebx
movabs dword [0x8b2a6c152fc8685e], eax
cld
mov gs, word [rcx + 0x5406ff7e]
test eax, 0x5406ff7e
int1
invalid
test eax, 0x5406ff7e
adc edx, esi
jmp 0x14118da49
mov bh, 0xca
jb 0x1400a0cf7
xor ebx, dword [rbx - 0x37]
push rcx
and byte [r8 + 0x2ef8df21], 0xf6
jbe 0x1400a0cc1
invalid
invalid
pop rsi
invalid
push 0x3807ca13
push rcx
sub dword [rcx - 0x73], esi
and byte [rdi - 0x1b57ff93], ah
invalid
pop rbp
or ecx, dword [rsi]
not dword [rdx - 0x66534856]
fisttp dword [rcx - 0xc]
mov bh, 0xb6
fadd qword [rax]
pop rdi
insb byte [rdi], dx
push rdx
invalid
or al, 0x98
cmp ebp, ebp
leave
xor al, 0x6d
invalid
loop 0x1400a0dfa
in al, 0x2b
push rbx
sbb byte [rbx + 0x7c], bl
mov ebx, 0x45bfcc9f
mov bh, 0x53
je 0x1400a0e3e
out dx, eax
iretd
invalid
adc eax, dword [rdx]
push rcx
lahf
in eax, 0x63
mov dl, al
in eax, dx
invalid
int1
clc
adc byte [0x14784f9f1], ch
jp 0x1400a0e10
cld
scasd eax, dword [rdi]
out dx, al
xchg ebp, eax
xor dword [rdi + 0x32fa4e88], edx
nop
cmp dword [rcx], ebp
mov dl, 0x14
dec dword [rbx + 0x35555a53]
push rbx
pop rdx
push rbp
invalid
invalid
push rbx
pop rdx
push rbp
xor eax, 0xe789cfc5
iretd
out 0xcf, eax
cli
invalid
cmp byte [rdx], 0xac
cli
out dx, eax
movabs dword [0x16ad8afedd8af98b], eax
and edx, dword [rdi]
mov edi, ecx
mov bl, ch
dec byte [rdx + 0x172316ad]
mov ecx, dword [rbp - 0x66c8dd62]
sahf
and dh, byte [rdi]
cdq
xor ch, ah
push rax
push rsi
jae 0x1400a0e27
xor eax, 0x8c39c036
invalid
pop rsi
add ebp, ebp
invalid
sbb al, 0xed
cmp eax, 0x415c432f
sub byte [rbx], bh
mov dl, 0x22
push rax
invalid
invalid
invalid
in al, dx
xchg esp, eax
invalid
in al, 0x7a
int1
out 0xfb, al
wait
dec cl
or byte [rax], cl
ret
invalid
sub eax, 0x38d5dbf9
mov ebx, 0xb3d16cef
jl 0x1400a0ef0
jmp 0x191d49ba7
cmp ebx, ebp
hlt
je 0x1400a0f5f
push rcx
rol dword ds:[rbx + 0x4a], cl
mov bh, 0x6c
sbb eax, 0x9b141bf7
invalid
invalid
jo 0x1400a0ea4
invalid
or eax, dword [rsi + 0xd]
out 0x4b, al
sti
invalid
xor eax, 0xa15fbe31
jg 0x1400a0f62
sahf
pop rdx
jo 0x1400a0f73
invalid
jnp case.0x140002106.85
lahf
jbe 0x1400a0f11
leave
invalid
xchg bl, ch
xor edi, 0x59fdc1ef
imul edi
sar ebp, 0x59
sti
push 0xffffffff85479d20
invalid
test dword [rbp - 0x18], ebp
push rsi
cmp byte [0x165e7fe13], dl
insd dword [rdi], dx
call 0xdb1f47cb
out dx, al
frstor dword [0x13ed35116]
sbb dword [rbx + 0x12], edi
pop rsp
pop rsp
adc eax, 0x25ddee9b
invalid
pop rsp
sub byte [rdi + 0x54d25944], ah
movabs byte [0x1d064da3a6cb5ae1], al
cmpsb byte [rsi], byte [rdi]
movabs dword [0x12b11dc8641d064d], eax
cmpsb byte [rsi], byte [rdi]
movabs dword [0x12b11dc8641d064d], eax
push 0xffffffffffffffac
invalid
in al, 0x4b
scasb al, byte [rdi]
out dx, eax
call 0x148015899
add dh, bh
ja 0x1400a0fc0
and byte [rcx], bh
add dword [0xc3ae04f0], eax
xchg ebx, eax
shl dword [rbx + 0x77a0a4ff], 0x8d
lahf
mov cl, 0xad
invalid
jbe 0x1400a0f6f
and al, 0x7a
and dl, byte [rdi + 0xf1f0454]
xor byte [rdx - 0x48], ah
xlatb
mov esi, 0x86cb8381
in al, 0x76
invalid
invalid
xchg esi, eax
jb 0x1400a0fdc
xor ebp, dword [rdi]
invalid
invalid
stc
invalid
mov ecx, 0xe7ff9f45
invalid
ficomp word [rax]
sbb eax, 0x97f026a8
jnp 0x1400a1031
movsb byte [rdi], byte [rsi]
invalid
mov al, byte [rcx + 0x6d9843b3]
xchg ebp, eax
invalid
invalid
imul edi, dword [rbx + 0x7d], 0xfffffffc
jge 0x1400a10d2
invalid
jnp 0x1400a115b
jrcxz 0x1400a1099
stc
imul ecx, edi, 0xfffffffa
mov edx, 0xf77df237
jno 0x1400a1180
invalid
imul esp, dword [rbx + 0x1716affd], 0x4abb965d
movabs dword [0x4abb965d1716affd], eax
je 0x1400a10d4
invalid
ret
xor edi, dword [rdi - 0x31258912]
pop rdi
mov ecx, 0xbe2867d6
xlatb
invalid
jbe 0x1400a1137
invalid
sub byte [esi + 0x7c4817d7], bh
pop rdi
loop 0x1400a10f7
invalid
mov eax, ss
push rcx
jl 0x1400a116e
rcl byte [rcx + 0x7c]
dec edi
add bl, byte [rcx - 0x34]
invalid
iretd
jp 0x1400a111d
pushfq
invalid
out 0x57, eax
fcomp qword [rbx]
add eax, 0x70e064f3
sub byte [rcx], dl
sbb byte [rbx], ah
fidiv dword [0x18b2c3216]
movabs r15, 0xd21b725988e793d
mov dl, 0xd3
adc dword [rax + 0x68d4abcd], edi
outsd dx, dword [rsi]
cli
mov edi, 0xd6592017
and byte [rcx - 0x2a], bl
and byte [rcx - 0x2a], bl
add ch, ch
rol dword cs:[rax], cl
or eax, 0x33defa23
cmp eax, 0xaf67c08c
shl byte [rdi - 0x51], 0x5f
shl byte [rdi - 0x51], 0x5f
je 0x1400a1225
invalid
or ebx, esi
sbb ebx, dword [rcx + 0x1a]
insb byte [rdi], dx
jns 0x1400a1186
cli
je 0x1400a1161
invalid
add byte [rax + 0x2abe66f8], spl
int 0x96
invalid
lodsd eax, dword [rsi]
adc byte [rbx + 0x62], cl
or dword [rax], esp
je 0x1400a1212
loopne case.0x140002106.116
mov dh, 0xe3
insb byte [rdi], dx
jrcxz 0x1400a1268
insd dword [rdi], dx
invalid
in eax, dx
fucom st(0)
mov r9d, 0x7eb3ddb5
ficom dword [rsi + 0x37]
std
mov word [rdx], es
jg 0x1400a1234
and dword [rdi - 0x3150ff02], esp
jnp 0x1400a11f9
cmpsd dword [rsi], dword [rdi]
inc byte [rax]
scasd eax, dword [rdi]
invalid
invalid
enter 0xd41, 0xffffffffffffffdf
invalid
or eax, 0x2efe4fdf
push rax
push rbx
mov esi, 0x99ba8da8
cmpsd dword [rsi], dword [rdi]
pop rbp
retf
clc
ror byte [rbx], 0x66
invalid
out 0x75, eax
rcl dword [rbx], 0x5b
sub edi, dword [rbx + 0x1b430d84]
mov edx, 0x50feae3
xor dword [rbx + 7], edi
retf 0x67d
mov dl, 0x87
cmp byte [rax], bl
and al, 0x6d
jns 0x1400a1239
lahf
mov cl, 0xa8
insb byte [rdi], dx
invalid
or al, 0x2b
js case.0x14001b157.4
xchg ebx, eax
stosb byte [rdi], al
and byte [rsi - 0x7fb727b4], cl
outsb dx, byte [rsi]
push rsp
retf 0xef31
mov ch, 0xe5
invalid
mov ah, 0x42
xor bh, byte es:[rdi + 0x4c]
jge 0x1400a1335
jns case.0x140002106.128
pushfq
jmp 0x140e18ed4
cmp eax, 0x3714275c
fstp qword [rdx + 0x1a]
invalid