Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
cdq
in al, dx
xchg esp, eax
invalid
jle 0x1400a07c9
fcmove st(0), st(7)
invalid
iretd
mov dl, 0x66
in al, dx
cld
invalid
fisttp word [rbx + 0x6c]
dec eax
call [rdx]
invalid
jl 0x1400a07e6
sbb bh, byte [rdi + riz*4 + 0x68]
add esi, edi
cmpsd dword [rsi], dword [rdi]
mov eax, 0xdfa3fa0f
invalid
push 0xffffffffb8a7fe01
psubd mm4, qword [rbx + 0x13ff17df]
fild qword [rax + 0x6cdd965b]
test al, 0x5b
xchg esi, eax
invalid
insb byte [rdi], dx
jmp 0x1400a07e9
test al, 0x5b
xchg esi, eax
invalid
loop 0x1400a085d
dec dword [rcx - 0x55850f19]
mov edi, esp
invalid
stosb byte [rdi], al
jg 0x1400a0836
jle 0x1400a085c
cli
invalid
sbb dword [rcx - 0x57], ebp
pop rsp
jmp 0x15e5988b8
lahf
mov ecx, 0xb4731b59
cmc
invalid
js case.0x140002106.9
mov esp, 0x2be1ea75
mov ah, byte [rbx]
int 0xe9
sub cl, bh
invalid
imul edi, dword [rax + 0x2b], 0x63
push rdx
adc dword [rcx], edx
mov eax, 0xe535de2e
invalid
pop rsi
invalid
stosb byte [rdi], al
invalid
fidiv word [rbx]
invalid
or byte [rax], ah
mov ebx, 0x8db69781
invalid
mov dl, byte [rbp + 0x16]
movabs al, byte [0xc66e70d11f61fc9b]
invalid
cdq
xchg edi, eax
mov edi, 0xd3f2fbfe
invalid
sub esp, dword [rbp - 0x42]
and ch, ch
div byte [rdx - 0x80]
push rdx
jne 0x1400a099d
mov esi, 0x72f6ed22
adc byte [rdx + 0x75], 0x59
xchg edi, eax
xchg ecx, eax
cld
fsubp st(6)
xor al, 0xc3
retf 0x1f
jrcxz 0x1400a0939
adc eax, 0xb9931fe2
movabs byte [0x7fe216170676bd51], al
loop 0x1400a09e1
invalid
sahf
sahf
or al, 0xd
clc
xchg ebp, eax
mov ebx, dword [rdx + 0x65]
clc
mov word [rdx - 0x52e09e8e], ss
lodsd eax, dword [rsi]
xchg ebx, eax
pop rdi
add esi, dword [rbx + rbp*8 - 0x22]
je 0x1400a097f
fidivr word [rsp + rsi*2 - 0x1f14e5c2]
invalid
je 0x1400a097f
fidivr word [rsp + rsi*2 - 0x1f14e5c2]
mov bh, byte fs:[rsi + rdi]
mov bh, byte [rsi + rdi]
cmp al, 0x3e
cmpsd dword [rsi], dword [rdi]
mov edx, edi
mov bl, cl
jl 0x1400a0959
invalid
xor byte [rdx - 0x6b], al
mov bl, 0xf
invalid
invalid
or al, 0xbf
push rcx
jge 0x1400a098e
push rsp
invalid
push rbp
std
cmp al, 0xec
invalid
lea ebx, [rsi - 0x75]
xor dh, byte [rbx]
push rdx
ret
cmp dword [rcx - 0x6aa43362], edx
clc
imul edx, dword [rbp - 0x11df254d], 0x17
out 0xae, eax
invalid
std
sti
invalid
xor bh, ah
pop rcx
sbb spl, byte [r9 + 0x6b]
pop rcx
cmc
xor dword [rbx - 0x18751a59], ecx
pop rsi
stc
test eax, 0xaf7b986d
xchg ebp, eax
imul eax, edi, 0xe3bef097
test byte [rax + rcx*2], bl
add bh, byte [rsi - 4]
push rbp
lea edi, [rsi - 0x7c04f09]
push rdx
invalid
shr dword [0x17399e41c], 1
cmc
cmp esp, edi
invalid
invalid
in eax, 0xe2
in al, 0x6b
jb 0x1400a0b39
imul esi, dword [rdx - 3], 0xffffffa1
movsd dword [rdi], dword [rsi]
jb 0x1400a0b00
movabs eax, dword [0xd5a38fda3cc072a5]
invalid
cmp al, 0xda
invalid
invalid
shl dword [0xee3594e0], cl
invalid
fistp qword [rdi]
jnp 0x1400a0bb1
movabs eax, dword [0xc6c4f918d931f38c]
mov esi, 0x7849c7a4
imul edx, dword es:[rdx], 0x7b
xor ecx, ebx
sbb cl, bh
invalid
scasb al, byte [rdi]
scasb al, byte [rdi]
invalid
xchg esi, eax
jp 0x1400a0b6f
sub edx, dword [rax + 0x77b36e61]
movabs al, byte [0xa0398f6f05f2b6c]
adc eax, 0x91ad2186
xchg ecx, eax
xchg ecx, eax
insd dword [rdi], dx
sbb byte [rdx + rcx*4 - 0x7fe9c80d], dl
shr byte [rbp + rax*4 + 0x3e], cl
sub dword [rax], eax
sti
xchg edi, eax
and bl, byte [rsi - 0x5b8de906]
cli
invalid
jb 0x1400a0b64
sbb dword [rdx - 0x1b], edi
int 0x60
sahf
add byte [rdx - 0x5f], 0x83
or edi, dword [rbx - 0x57]
jbe 0x1400a0c01
cli
invalid
in eax, dx
cmp ebx, dword [rdx]
sbb bl, dl
retf
xchg esp, eax
pushfq
sbb bl, dl
retf
ja 0x1400a0bd7
cli
insd dword [rdi], dx
cmp bh, bl
idiv dword [rsi]
cli
ret
push 0xffffffffffffffaa
lahf
test rax, 0x167678ca
adc dword [rbp + rcx*4 - 0x5c], 0xcbff8270
sahf
adc r11b, al
and ebx, eax
push rdx
adc byte [rbp + 0x54], r10b
fisttp dword [rbx - 0x74750077]
invalid
mov ecx, dword [rcx + 0x168b8aff]
jb 0x1400a0c84
invalid
xlatb
lahf
scasd eax, dword [rdi]
invalid
mov ebp, 0x899d000b
sbb ch, byte [rdi]
add eax, 0x2cde71ee
jne 0x1400a0c6a
invalid
push rcx
xor byte [rsi + 0xa6ca7a5], al
adc al, 0x9d
sbb byte [rsi - 0x342a80b0], 0x20
invalid
sub ah, ah
mov edi, edi
mov r9b, byte [rax - 0x75]
xor ecx, dword [rdx - 0x7440e9cb]
xor al, 0x8a
adc al, 0x1b
invalid
stc
jmp [rax - 0xb962357]
not byte [rsp + rax]
or eax, 0x18b35a4a
add al, 0xd
pop rdx
mov bl, 0x18
or ebx, dword [rdi + rax*2 - 0x4d]
mov edi, 0x5219cb64
push rdx
push rdx
imul esi, dword [rdx + 4], 0xffffffa3
invalid
xchg edx, eax
insd dword [rdi], dx
invalid
pop rsi
invalid
invalid
xchg edx, eax
shl byte [rsi - 0x16], 0xe1
sahf
and eax, edi
pop rax
clc
retf 0xb1fe
int1
invalid
fnstcw word [rdx - 0x665442ec]
int1
mov bh, 0x52
outsd dx, dword [rsi]
jrcxz 0x1400a0c93
mov byte [rdi - 0x76], ch
movsd dword [rdi], dword [rsi]
out dx, eax
std
and dh, byte [rdx]
in eax, 0x94
xor dword [rdi + rsi*2 - 0x52], 0xfffffffe
ja 0x1400a0cca
invalid
scasd eax, dword [rdi]
movabs al, byte [0x47e9c43a39d9b868]
invalid
ja 0x1400a0cca
invalid
lea edx, [rcx - 0x77]
scasd eax, dword [rdi]
invalid
invalid
sub eax, 0xa3681a7f
sbb esi, dword [rdx - 0x7f]
jg 0x1400a0dc6
push rax
jae 0x1400a0d64
or bl, bh
sti
xchg edi, eax
stc
jle 0x1400a0d5b
mov ecx, ecx
mov bl, al
clc
fdivr st(0)
invalid
push rax
sar byte [rdi + 0x72e500e4], cl
ficom word [rcx + 0x1fd8f50e]
jbe 0x1400a0d4f
sbb bh, dl
jbe 0x1400a0d5f
invalid
movsd dword [rdi], dword [rsi]
shr dword [rdx], 1
invalid
adc edx, esi
invalid
ja 0x1400a0dfd
hlt
std
mov ebp, 0xfa92bf59
adc eax, 0xff9c0ecf
or eax, 0xe34d2ec1
invalid
mov edi, 0xcf15fa92
invalid
sub edi, dword [rbx - 0x14]
clc
jbe 0x1400a0e29
cmp eax, 0x2157dc85
fcom st(6)
xor dh, dh
invalid
nop
cmp al, 0x99
push rcx
mov dl, 0x61
neg esi
out dx, eax
push rdi
invalid
fstp xword [rax]
jae 0x1400a0dc3
outsb dx, byte [rsi]
or eax, dword [0xf283a3b9]
mov cl, 0x95
jns 0x1400a0dba
mov cl, 0x95
jns 0x1400a0dba
hlt
in eax, 1
xchg esi, eax
invalid
cli
invalid
hlt
jge 0x1400a0eb4
scasd eax, dword [rdi]
clc
scasd eax, dword [rdi]
je 0x1400a0e65
invalid
cmp eax, 0xbe27d13e
push rcx
pop rsi
out dx, al
jge 0x1400a0ec6
jne 0x1400a0eb3
iretd
movabs rbp, 0x847eafa9e3ecb2
movsb byte [rdi], byte [rsi]
outsb dx, byte [rsi]
jge 0x1400a0e73
add byte [rsi + rbp*2 + 0x6cb6097d], ah
mov dh, 0x6c
lodsd eax, dword [rsi]
hlt
mov al, 0xd2
pop rbp
invalid
xchg dword [rdi - 0x39], ecx
jns 0x1400a0e89
mov bh, 0x4a
out dx, eax
xor byte [rbx - 0x1c60059], cl
inc dword [rbp - 0x745c92e4]
test dword [rbp*2 + 0x52a78ba3], ebx
test dword [rbp*2 + 0x52a78ba3], ebx
sbb al, 0x6d
movabs dword [0xdcf68ca69752a78b], eax
ja 0x1400a0e2f
xchg edi, eax
cmpsb byte [rsi], byte [rdi]
invalid
or eax, 0x44d1c2ef
jno 0x1400a0e56
jno 0x1400a0e56
fcompi st(2)
adc al, 0x85
pop rsi
vmaxsd xmm11, xmm4, qword [rdx - 0x50]
outsb dx, byte [rsi]
imul esi, dword [rbp + 0x61c66e66], 0x2cfaf634
outsb dx, byte [rsi]
invalid
invalid
xor al, 0xf6
cli
sub al, 0x6f
outsb dx, byte [rsi]
invalid
in eax, dx
push rax
cli
sti
popfq
invalid
xor eax, esi
out dx, al
mov ebx, 0x84678327
pop rdx
invalid
test byte [edx - 0x3c], bl
ror byte [rax - 0x34], 1
sub dword [rdi - 0x5c], ebp
outsd dx, dword [rsi]
movsb byte [rdi], byte [rsi]
outsd dx, dword [rsi]
movsb byte [rdi], byte [rsi]
xchg edi, eax
invalid
cmp ebx, ebp
hlt
cld
iretd
ficomp word [rdi + 0xf]
mov esi, 0xfefb7b39
idiv dword ds:[rdx + 0x57f9ad6a]
rcr dword [rcx + 0x17fdaf9f], 0xe5
mov ebp, ds
sti
jbe 0x1400a0fa7
cmp al, 0xe3
adc al, 0xdf
invalid
stc
invalid
invalid
invalid
cmp al, 0x6e
mov ebp, 0xc72cdd55
push rsi
and r13d, dword [r13 + 0x28]
sub dh, byte [rbp - 0xf]
invalid
test al, 0x14
and dword [rsi - 0x3a5c2aa5], esi
push rdx
outsb dx, byte [rsi]
invalid
fld dword [rdx + rbx*2]
cdq
cli
scasb al, byte [rdi]
imul ebp, dword [rsi - 0x5c754bad], 0xcff0b8ff
insd dword [rdi], dx
lodsd eax, dword [rsi]
in eax, dx
call 0x16cdb184f
cmp byte [rcx + 0xb], 0xd9
shr dword [rax + rax*4], 1
jns 0x1400a0fb3
or ebx, ecx
fst dword [rcx]
push rdx
adc dword [rdx - 0x72], edx
int1
cdq
jbe 0x1400a0fa3
invalid
invalid
or byte [rsi], dh
insb byte [rdi], dx
pop r13
mov ebp, dword [rbx]
invalid
je 0x1400a0fab
cmp al, 9
mov bh, 0xf
pop rdx
movabs al, byte [0x465b0fbaa3eb6a8e]
invalid
insd dword [rdi], dx
invalid
sti
jmp 0xc2ace71f
xchg edi, eax
movabs al, byte [0x5336dd6176ba8d7a]
jb 0x1400a1001
invalid
sti
insd dword [rdi], dx
jb 0x1400a1001
jg 0x1400a1006
invalid
fimul word [rcx - 0x3d]
enter 0x6f3c, 0xffffffffffffffef
fpatan
call 0x1380102a2
sbb eax, 0x25dbf0af
jns 0x1400a104e
push rcx
or ebp, dword [rbx]
invalid
lahf
xor cl, byte [rbx]
add dword [0x13c0e2a47], edi
mov bh, 0x6a
xchg ecx, eax
and dword [rbx], ecx
and al, 0x9d
jno 0x1400a1102
loope 0x1400a105c
and byte [rdi + r14*8 - 0x57d4818b], dil
fsub st(2)
iretd
stc
mov dword [0xde95a099], 0xd46c9b59
insd dword [rdi], dx
iretd
scasb al, byte [rdi]
invalid
test ch, dh
cmp dword [rbx - 0xc], ecx
adc bl, byte fs:[ecx + ebp]
sub esp, edi
sub esp, edi
loope 0x1400a10b3
mov al, 0x18
outsb dx, byte [rsi]
cli
invalid
test al, 0x6c
sub ah, byte [rdx]
ret 0x3643
int1
mov eax, dword [rbx - 0xb2c918e]
jrcxz 0x1400a11ae
xor dword [rdx + 0x6e], 0xffffffd3
hlt
sub al, 0x65
imul esp, esi, 0x9000683b
invalid
invalid
nop
invalid
push 0x16f39000
cmp al, 0x39
invalid
lodsb al, byte [rsi]
xchg esi, eax
invalid
and ah, byte [rbp - 9]
test byte [rcx + 0x7c0c1111], ch
or dh, byte [rbx - 0x20]
loopne case.0x140002106.110
loopne case.0x140002106.110
rcl dword [rax - 0x54]
xchg esi, eax
pop rsp
invalid
sub word [rax + 0xc], bp
xacquire xchg byte [rsi + 0x69e6efe2], cl
jrcxz 0x1400a1130
imul esp, ebx, 0xd693ac89
mov ah, 2
movabs al, byte [0x7a53f30de9af6165]
jmp 0x1ba5e04c2
pushfq
lodsb al, byte [rsi]
xchg ebx, eax
invalid
invalid
jmp 0x1ba5e04c2
sbb ch, byte [rdi + 0x330d0496]
jg 0x1400a1173
invalid
sbb byte [rsp + rsi], ch
insb byte [rdi], dx
pop rsi
out 0x57, eax
jmp 0x196d9a7e3
or edi, dword [rsi]
or byte [rdi + 0x48040dba], 0xa0
cmp eax, 0xdd3ee9a
movsd dword [rdi], dword [rsi]
cmp byte [rdi - 0x25], dl
jo 0x1400a11a4
and byte [rax], cl
invalid
or dl, ch
xor ah, ah
mov esi, 0x93aecad1
mov ah, 9
sbb al, 0xb0
adc eax, 0xdf0e7ebd
jle 0x1400a1236
invalid
invalid
jle 0x1400a1236
fisttp word [rdi - 2]
jle 0x1400a129d
invalid
pop rbp
clc
add eax, 0x6f8d4ff4
movabs byte [0x7be49b896ee6752], al
stosd dword [rdi], eax
xlatb
invalid
pop rdx
push rbp
sub eax, 0x8babf92c
cmpsd dword [rsi], dword [rdi]
je 0x1400a1217
push 0xffffffffffffffcf
in al, 0xea
jns 0x1400a124f
out dx, eax
scasb al, byte [rdi]
invalid
invalid
pop rdi
invalid