Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
adc dword [0x196ddcd3e], edi
push 0x6c192c12
dec eax
push qword [rdi + riz - 0x5098837e]
mov ah, 0x27
invalid
jl 0x1400a08a8
scasd eax, dword [rdi]
mov ah, 0x27
invalid
scasd eax, dword [rdi]
push rsi
push 0x71e10d9b
invalid
invalid
stosb byte [rdi], al
jg 0x1400a0841
or dh, byte [rbx - 2]
adc al, 0x6c
ficomp dword [rsi]
and eax, 0xbf066b58
test eax, 0x3f7aafb7
adc al, 0xd6
invalid
adc al, 0xe2
xor edx, edx
xor al, bl
and al, 0xb0
stosb byte [rdi], al
adc eax, 0xffffffd8
invalid
invalid
invalid
push rax
cmp r13b, r10b
ficomp dword [0x154614893]
out 0xb, eax
insb byte [rdi], dx
invalid
movsb byte [rdi], byte [rsi]
iretd
int3
invalid
invalid
xlatb
pop rsi
test al, 0xb8
sbb byte [0x1983c401f], bh
int3
mov edx, 0x4e27d5ce
invalid
imul esi, dword [rsi - 0x10388b35], 0x9827a918
fadd st(0)
xchg edi, eax
lodsd eax, dword [rsi]
sbb al, 0x7e
cmpsb byte [rsi], byte [rdi]
ror byte [rcx + 0x1e], cl
mov bh, 0x13
push rdx
rcl byte [0xfa0e66ad], 0xa2
in eax, dx
mov ecx, dword [rcx - 0x76]
mov r15b, 0x40
mov ebx, 0x7c7dfbdc
invalid
invalid
ret
invalid
sbb al, 0x3c
and ch, byte [rax + 0x32]
xor ecx, esp
pushfq
invalid
add esi, dword [rdx + 0x29167bf0]
or eax, 0xa2bff2bc
adc al, 0xbd
push 0x44
lodsd eax, dword [rsi]
invalid
cmp eax, 0x3817afa6
mov esi, 0xb9cd22eb
js 0x1400a095d
movsb byte [rdi], byte [rsi]
mov esp, ebx
shr dword [rbp + 0x74], cl
insd dword [rdi], dx
hlt
jmp 0x1a3c4002a
jmp 0x130794dad
and byte [0x1bf6ba0ad], bl
retf
invalid
invalid
mov dl, 0xd2
mov word [rsi - 1], ss
or dword [rdx + 0x3f], edi
imul ebx, dword [rdi + 0x31], 0xffffffea
xchg edi, eax
invalid
in eax, dx
and dword [rsi - 0x39], edi
invalid
push rdx
cdq
int 0x5f
mov dword [rbx], edi
xor edi, dword [rbx]
fidiv dword [rdx + 0x44]
fsub dword [rax]
cmp ebp, esi
test dword [rbx + 0x47ec91a7], edi
jmp 0x133b64951
fistp qword [rsi]
lodsb al, byte [rsi]
invalid
fistp qword [rsi]
lodsb al, byte [rsi]
jbe 0x1400a0a52
in eax, dx
sar dword [rdi + 0x12], 0x32
mov fs, word [rbp - 0x6d5c8915]
and eax, 0x5dcbd7e4
retf
pop rbp
invalid
retf
invalid
movsb byte [rdi], byte [rsi]
out dx, eax
stc
mov bh, 0xef
invalid
invalid
invalid
pop rdi
call [rcx]
pop rbp
sar byte [rsi - 0x75], 1
jp 0x1400a0b0f
and al, 0x5e
pop rsi
jle 0x1400a0aea
push rbp
lea ebx, [rdx - 0x3e]
in eax, dx
test eax, 0xaaa6829c
enter 0xffffffffffffd48d, 0xffffffffffffff9c
invalid
pop rbx
invalid
stosb byte [rdi], al
loop 0x1400a0ab9
push rbp
adc byte [rdx], 0x59
nop
jmp 0x1a17231d0
mov dh, 0xae
sbb esp, esi
fld dword [rdx - 0x45]
or al, 0xbc
or dh, bl
fbstp tbyte [rdx - 0x20]
loopne 0x1400a0b7c
in al, 0x6f
loopne 0x1400a0b7c
in al, 0x6f
test al, 0xd3
std
jnp 0x1400a0b6f
invalid
test bh, dl
sbb eax, dword [rax]
call 0x172492172
test al, 0xd
invalid
xor ch, byte [rax + 0x72e2370d]
xor eax, 0x2c0ed539
jg 0x1400a0b1a
invalid
mov cl, 0x1d
invalid
sbb eax, 0x941e6467
jne 0x1400a0baf
invalid
fild qword [rax + rbp*4 - 0x1e96bec]
push rbp
pop rsi
add eax, ecx
invalid
cmovnp ebp, dword [rbx]
add esi, eax
jnp 0x1400a0bfd
sub eax, dword [rbx]
invalid
invalid
cdq
jmp 0xf4ba5ab3
xchg dword [rdi + 0x3c], ebp
test byte [rdx - 0x2e9c80d], cl
stc
jge 0x1400a0b5c
invalid
jg 0x1400a0b93
sbb al, 0xd0
or dh, byte [rdi - 0x1a]
cli
cli
cli
invalid
in al, 0xa
movsb byte [rdi], byte [rsi]
shl byte [rbx + rcx*2 - 0x22], 0x8a
invalid
cmp dword [rbx - 0x55f330ef], esi
cli
xchg dword [rax], eax
mov word [rbx + 0x3bc754ab], ds
sbb dword [rsi + 0x2c32a47e], eax
invalid
or ebp, dword [rcx + 0xa]
pop rsp
fisttp dword [rbx + 0x76efff89]
push rsp
std
sub al, 0xca
mov dh, 6
test edi, edi
imul ecx, dword [rdx], 0x898bdb5c
invalid
invalid
test dword [rdi + 0x28df0c98], 0x1e88315e
popfq
mov bl, 0x89
sub dl, byte [rbp + rcx*4 - 6]
fbstp tbyte [rsp + rax]
in al, 0x3a
fist word [rdi]
lodsd eax, dword [rsi]
movsd dword [rdi], dword [rsi]
mov dl, byte cs:[rcx + 0x30]
push rcx
xor byte [rax], bl
iretd
invalid
push rcx
xor byte [rax], bl
iretd
invalid
mov eax, 0x50cd3955
push rcx
mov rsi, qword [rbx]
mov bh, byte [rax + 0x73]
test eax, 0xa291de6d
or ch, byte [rsi + 0x5afe9861]
scasb al, byte [rdi]
invalid
cwde
invalid
pop rdx
mov edi, 0xfff9843c
stc
jmp [rax - 0x40ebec57]
cmp al, 0xfa
cli
stc
jmp [rax - 0x40ebec57]
test eax, 0x3cbf1413
cli
invalid
adc byte [rdx + 0x33fa12d9], ch
mov byte [rsp + rbp], 0x77
invalid
or ecx, dword [rsi - 0x740c02ad]
sub eax, 0x7ab5b44
adc dword [rax + 0x6b], ebx
cmp byte [rcx - 0x69], dl
push rsp
adc dword [0xdde6f531], 0x9ad2e697
fcomp qword [rbp - 0x652d1969]
pop rbx
stosd dword [rdi], eax
invalid
fcomp qword [rbp - 0x652d1969]
add al, 0x5c
mov esi, 0x4651ea91
xchg r14, rax
pushfq
invalid
push rsp
int1
jae 0x1400a0c77
jle 0x1400a0cc1
invalid
movabs eax, dword [0x10183ae441de19b5]
mov dh, byte [rbx - 0x74b806c4]
mov bh, 0xf9
stc
stc
or eax, 0x44f30dce
xchg ebx, eax
or al, 0xf5
mov bh, 0x47
invalid
loop 0x1400a0c9a
out 0xca, eax
adc dword [rbp - 0x11bbccbd], 0xffffff97
invalid
retf 0x9583
call 0x1a2016e9b
enter 0x3281, 0xffffffffffffffb8
sahf
sbb eax, 0x206bf00d
and byte [rsp + rbx + 0x71], ch
and byte [rsp + rbx + 0x71], ch
adc dl, dl
cmp eax, 0x105e78e7
movsb byte [rdi], byte [rsi]
add al, 0x88
sub cl, al
mov dh, 0x6f
cli
sti
jl 0x1400a0d59
fimul dword [rdi]
pop rcx
invalid
invalid
cmc
in eax, dx
loop 0x1400a0d53
mov dh, 0x5c
pop rsp
cmpsb byte [rsi], byte [rdi]
sbb eax, 0xb9c2569c
stosd dword [rdi], eax
sbb byte [rbp - 0x60c598a2], dl
xchg ecx, eax
jrcxz 0x1400a0cff
vdivss xmm12, xmm9, dword [rcx]
xchg edi, eax
shl byte [rax + 0x2e], cl
invalid
invalid
invalid
invalid
push 0x65
insb byte [rdi], dx
insd dword [rdi], dx
invalid
xlatb
movabs al, byte [0xfbef501ca58399b8]
fild dword [rdi + 0x2d]
fld st(4)
cmp byte [rsi + 0x79226cf7], bh
and bl, byte [rbp - 0x6a039c2c]
xor eax, dword [rbp + 0x3cf1f6ca]
or eax, 0x1ee21fa1
loop 0x1400a0dfa
loop 0x1400a0dfa
fdivr qword [rbx + 0x2a]
shr esi, 0xf7
invalid
xchg edi, ebp
stc
mov esi, 0x9d2e36a6
lodsb al, byte [rsi]
push rdx
cdq
pop rbx
add al, 0x80
out dx, al
sbb al, 0x5d
je 0x1400a0e48
invalid
or al, 0x82
invalid
and bh, byte [rdx]
retf
sbb bh, al
test byte [rdx + rsi - 0x3a], bl
js 0x1400a0ea4
mov bl, 0xc0
xchg esp, eax
invalid
xchg ebp, eax
mov edi, 0xb7233efe
invalid
invalid
invalid
mov bh, 0x1f
invalid
cwde
mov esp, 0x75b9af14
pop rbp
iretd
fdiv dword [rcx - 0x7c]
jb 0x1400a0e4f
invalid
push 0xffffffffdc73d133
call 0x16d638753
mov edx, edi
pop rcx
sub eax, 0xf959d78b
pop rcx
stc
pop rcx
stc
add r10d, ebx
invalid
leave
mov ch, 0x72
outsb dx, byte [rsi]
loopne 0x1400a0e84
invalid
cmp esi, edi
jmp rax
invalid
loopne 0x1400a0e7f
add eax, 0x52a78bba
xchg edi, eax
invalid
add al, 0xbc
outsd dx, dword [rsi]
movsb byte [rdi], byte [rsi]
sahf
invalid
jg 0x1400a0e74
cld
invalid
adc esi, dword [rdi + 0x7e27f3ce]
popfq
xchg byte [rdi - 2], ah
invalid
jns 0x1400a0f11
add dh, byte [rax - 1]
fcomi st(5)
invalid
and bh, byte [rcx]
xchg ebx, eax
movabs al, byte [0x532f447ddea0e36c]
in al, dx
fcompi st(5)
out dx, eax
scasd eax, dword [rdi]
invalid
jne 0x1400a0f56
invalid
jp 0x1400a0efe
mov edi, edx
cmp al, 2
int 0x4a
mov ecx, 0xf9bc5ee7
mov eax, 0x651cd9b6
loop 0x1400a0e9c
invalid
invalid
and ah, byte [rsi - 0x44]
xchg ebp, eax
sbb eax, 0xeff79940
jb 0x1400a0efc
invalid
clc
push rbx
invalid
mov dh, 0x98
invalid
mov edx, 0xc46ffb60
lodsb al, byte [rsi]
xchg ebp, eax
invalid
lea ebx, [rbp + 0x40be1ffc]
cmp al, 0x93
cmp al, 0x93
sub bh, bh
push 0xffffffffffffffcd
stosb byte [rdi], al
xchg ebp, eax
test byte [0xc6b1ea68], cl
mov edi, cs
mov word [rbp + 0x546e9902], es
cdq
outsb dx, byte [rsi]
push rsp
invalid
std
invalid
mov eax, gs
invalid
sahf
int1
cdq
jbe 0x1400a0fa3
xchg esp, eax
idiv byte [rsi + 0x2b]
xchg dword [rax], esp
out 4, al
jp 0x1400a0f85
cmp ebp, dword [rcx + 0x14]
and al, 0x74
je 0x1400a0fab
invalid
je 0x1400a0fab
invalid
inc dword [rcx + rdi*8]
outsd dx, dword [rsi]
mov edi, 0x36108abe
xor byte [rsi + rdi*8 + 0x14ad8bb0], 0x67
mov ch, 0xd5
adc r11b, byte [rcx - 0x4c]
insb byte [rdi], dx
pop rdx
jg 0x1400a105e
adc dword [rsi + 0x7b2f9014], edi
bnd ret 0x5b65
invalid
in al, 0x9f
sti
invalid
rcl dword [rax + 7], 0xb1
cmp al, cl
je 0x1400a0fd5
mov esi, 0xba0f90f7
invalid
mov edx, 0xebb05dc6
scasd eax, dword [rdi]
cmpsb byte [rsi], byte [rdi]
invalid
enter 0xffffffffffff8ffb, 0xffffffffffffffcf
xchg edi, eax
cmpsb byte [rsi], byte [rdi]
retf 0x4dea
pop r13
sal dword [rax - 0x6d2b5d60], 1
jp 0x1400a10eb
fidivr word [rdx - 0x31]
cmp al, 0xca
invalid
mov ebx, 0x9289379b
xchg ecx, eax
sar byte [rdi], 0x1a
mov ebp, 0x1b9ffc46
and dword [rsi], edx
cwde
mov edx, 0xa0ed7fba
xor al, 0x9e
mov ch, byte [rdi]
invalid
jp 0x1400a1081
xchg edi, eax
jl 0x1400a1075
pop rdi
mov esp, dword [rsi]
pop rbx
cmp ah, dl
invalid
imul ebx, ecx, 0xffffff9e
mov bl, 0xb5
jmp 0xedfc668a
fcmovnb st(0), st(2)
out dx, al
invalid
xor byte [rbx + 0x7e], dh
push qword [r14 + 0x1c]
jle 0x1400a1147
push qword [rsi + 0x1c]
fdivrp st(4)
stosd dword [rdi], eax
adc al, 0x60
sub dh, byte [rdx + 0x75]
out dx, al
jmp 0x1400a10fa
fldenv [rcx - 7]
imul ecx, edi, 0xfffffffa
pop rsi
invalid
je 0x1400a10ac
loopne 0x1400a10f8
jnp 0x1400a1100
mov edi, 0xf3ffc986
jp 0x1400a1163
jp 0x1400a1163
test al, 0xab
mov es, word [rax]
sbb dword [rsi], ebx
xchg esi, eax
invalid
invalid
out dx, eax
lahf
sti
add al, 0x4b
mov ah, 0xc8
nop
fild qword [r14]
fld xword [rdi - 0x3b]
lodsd eax, dword [rsi]
and byte [rbx + rsi - 0x3e], dl
jnp 0x1400a1111
lea ebp, [rbp + rdi*4 + 0x1f]
invalid
jle 0x1400a11c5
xchg r9d, eax
invalid
neg dword [rbx + 0x13]
invalid
test eax, 0x9bb2c5fa
imul edi, edx, 0x69c68e73
push 0xffffffffffffffee
invalid
in al, 0x5d
sar dword [rdx + 0x48], cl
movabs byte ds:[0x51f25251cd06e98e], al
int1
invalid
stosd dword [rdi], eax
movsb byte [rdi], byte [rsi]
xor al, 0x6e
invalid
jno 0x1400a1139
push rbp
pop rbx
invalid
wait
ror dword [rdx - 0x20], 1
je 0x1400a1225
pop rdi
invalid
invalid
dec dword [rbx + 0x6da01ceb]
loopne 0x1400a1267
invalid
invalid
sub al, 0x8f
retf 0x45fa
invalid
push r8
cmp eax, 0xfb20d598
sub byte [rsi], dl
fdivr st(0), st(0)
jnp 0x1400a1229
fstp xword [r8 - 0xb]
test al, 0x35
invalid
jne 0x1400a11fe
cmc
scasd eax, dword [rdi]
jbe 0x1400a1256
mov ebx, 0xd30f8a17
push r13
cmp dword [rcx + 0x3d], ebx
cmp eax, 0xd7c4616c
insb byte [rdi], dx
invalid
xlatb
fcom qword [rdi]
test al, 0xc6
adc eax, 0x7dc4d6ea
mov ch, byte [rsi - 3]
mov edx, 0x2571a21d
invalid
jno 0x1400a1260
int1
hlt
movabs byte [0x9e6004f4f2f12571], al
cld
cmp esi, ebx
jl 0x1400a1299
pop rbx
fucom st(6)
out dx, eax
clc
idiv byte [rax]
cmp byte [rbx + 0x31cf8399], dl
cmp byte [rbx + 0x31cf8399], dl
jg 0x1400a122e
or bh, byte [rdi + 0x417669b9]
insb byte [rdi], dx
jge 0x1400a12cb
jl 0x1400a12b7
add ecx, dword [rbp - 7]
xor esp, esp
invalid
in al, 0x1e
invalid
invalid
jno 0x1400a12ce
xor byte [rcx + 0x72d2cd29], dl
add byte [rsi], ch
popfq
sbb byte [rcx + 0xa], 0x64
out dx, al
outsb dx, byte [rsi]
loopne 0x1400a12f9
xchg ecx, eax
push 0xffffffffffffffcf
invalid
outsb dx, byte [rsi]
xchg esp, eax
test al, 0x9e
mov ecx, 0x18dd1009
or dword [rax], edx
fstp qword [rax]
or dword [rax], edx
fstp qword [rax]
sub cl, dl
invalid
xchg bl, ch
jp 0x1400a12bb
invalid
outsb dx, byte [rsi]
jb 0x1400a12e7
out dx, al
jo 0x1400a1272
mov word [rsi], ds
xor dword [rcx - 0x157fa30b], edi
ret 0xffc4
invalid
or edx, ecx
test byte [rbx + 0x14], bh
invalid