Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
add byte [rdi + 0x51408fd7], bpl
jge 0x1400a07ed
invalid
jbe 0x1400a07f3
xchg edi, eax
ror dword [rdx - 0x48026104], 0x6f
mov bh, ah
sahf
std
mov bh, 0x6f
ficomp dword [rbx + 6]
lodsb al, byte [rsi]
scasd eax, dword [rdi]
xchg edi, eax
sub dword [rsi + rdi*8 - 9], 0x7e
movsd dword [rdi], dword [rsi]
mov edx, 0x7aea7ffe
ror dl, 0x3c
jp 0x1400a07c0
jg 0x1400a07c4
jp 0x1400a079c
retf 0x7a3c
push 0xffffffffffffffc9
sbb ah, byte [rbp - 0x11]
invalid
out 0xa5, eax
mov eax, 0xe37bdbf0
jnp 0x1400a07d8
add al, 0x78
out dx, al
jp 0x1400a0877
outsb dx, byte [rsi]
jp 0x1400a082f
mov bl, 0x29
xchg edi, eax
adc edi, esi
loope case.0x140002106.2
invalid
movabs dword [0x977bf0e07eadfecf], eax
jle 0x1400a086d
invalid
cwde
add dword [rcx + 0x53], 0xfffffffd
sar byte [rdx], cl
and cl, dl
invalid
sbb cl, byte [rdi + 0x4a]
jae 0x1400a07f7
jae 0x1400a07f7
invalid
loope 0x1400a0824
jg 0x1400a0833
fdivr st(7)
push rsi
loope 0x1400a07cf
jl 0x1400a085c
invalid
sbb al, 0x55
out dx, al
invalid
jp case.0x140002106.9
invalid
or dl, al
and eax, 0x6e3689ac
or dword [rbx], eax
jns 0x1400a0811
leave
cdq
rol byte [rcx], 0xf6
and ecx, dword [rcx + 0x4432ae8f]
std
std
dec byte [rdx]
invalid
pop fs
mov edi, cs
pop rbp
sti
int1
invalid
jnp 0x1400a091a
sti
invalid
movsb byte [rdi], byte [rsi]
fld dword [rdx + 0x494df620]
stc
invalid
or al, 0xf9
ror dword [rdi], cl
outsb dx, byte [rsi]
rol dword [rbx + 0x50cc8c59], 0x5f
jnp 0x1400a08e9
sar dword [rdi + 0x770676e4], cl
adc al, byte [rbx + 0x4c5d375a]
cmp al, 0xf6
invalid
or dword [rax], 0x820a9b06
loopne 0x1400a091f
invalid
wait
or al, byte [rdx + 0xb530e0]
mov ch, 0
cmp eax, 0x928a90b7
sti
invalid
pop rsp
pop rsp
invalid
invalid
movsb byte [rdi], byte [rsi]
mov edi, 0x20d38ba2
mov sil, 4
jbe 0x1400a08eb
xchg dh, bh
jg 0x1400a0914
jbe 0x1400a0967
invalid
cdq
xchg edi, eax
mov edi, 0xfaa307fe
invalid
test eax, 0x717aa545
mov esi, 0x88f0047
xchg esi, eax
idiv byte [rbp + 0x64df69cd]
scasd eax, dword [rdi]
sub al, 0xf1
mov ebx, 0x4929bbc8
sub dword [rcx + 0x72], ecx
xchg ecx, eax
sub dword [rcx + 0x72], ecx
xchg ecx, eax
mov ebx, dword [rdx]
mov dh, 0x9c
hlt
loop 0x1400a09e1
invalid
loop 0x1400a09a7
invalid
invalid
adc al, 0xff
rol edx, 0xb8
sbb eax, 0x723f75e4
or ah, bl
ret 0x1db8
idiv byte [rdi + 0x3e74bcde]
cmp ah, byte [rdi + 0xad67279]
add al, dl
invalid
cmp eax, 0x167bf0b4
sub dword [rdi + 0x51], esi
xor esp, dword [rsi - 0x5e]
adc al, 0xbd
push 0xffffffffffffffa8
std
iretd
push 0xffffffffcd65fd7e
jl 0x1400a09c8
jle 0x1400a09b9
int 0x43
jl 0x1400a09c8
movabs dword [0x6dfd8ba49778eee8], eax
std
insd dword [rdi], dx
jmp 0x1400a0989
in al, 0xff
mov edi, 0x25400cad
and byte [0x1a00fe2b4], cl
jmp 0x1400a0986
push rcx
imul rbp, rbx, 0x779a4a33
ja 0x1400a09e4
jmp 0x1400a0a19
sub bh, byte [rdx]
rcl esp, 0x27
jnp 0x1400a0a27
cmp al, cl
invalid
out 0x32, al
movsb byte [rdi], byte [rsi]
insd dword [rdi], dx
cdq
push rdx
or byte [rax - 0x10], ah
retf 0xb272
invalid
mov edi, dword [rdi - 0x4b]
sbb dword [rdx], ecx
hlt
sub eax, 0xf60522f
lodsd eax, dword [rsi]
invalid
lodsb al, byte [rsi]
cmp bh, byte [rdi]
sbb dword [rdx], ebp
outsb dx, byte [rsi]
and al, 0xd4
push rsp
mov edi, 0x65f31742
fcom dword [rbx]
mov ah, byte [rax + rdx*2 + 0x6c]
imul ebx, dword [rdi - 0x47], 0
setb byte [rcx + riz*4 - 0x2789918a]
cld
sbb esp, dword [rdi - 0x29492b19]
imul edx, dword [rdx], 0x24
sbb byte [rbp + 0x4af51d44], ah
or dl, byte [rbx]
popfq
clc
push 0xffffffff8b08092b
xor al, 0xe1
mov bl, 0xff
test byte [rbx - 0x7400e002], dl
xchg ebx, eax
invalid
invalid
invalid
invalid
invalid
xchg ebx, eax
invalid
clc
stosb byte [rdi], al
scasd eax, dword [rdi]
xchg byte [rcx + 0x44], cl
fisubr word [rax + 0x66]
sti
movabs eax, dword [0x77261089f3335b2d]
invalid
xor bh, ah
movabs eax, dword [0xa214feff3b7470dc]
fdivp st(3)
mov al, 0xbb
sub eax, 0xb15572b
mov ah, 0xa8
lodsd eax, dword [rsi]
out 0xd7, eax
invalid
jnp 0x1400a0add
std
in al, dx
adc eax, 0x7aa1ecfd
sbb cl, byte [rdx + rax + 0x3ef95ee7]
mov bh, 0x22
sub dword [rdi - 0x6d], esi
and ch, byte [rcx]
ja 0x1400a0a74
mov dh, 0xe9
add esi, dword [rcx - 0x5fd75a9b]
movsb byte [rdi], byte [rsi]
pop rbx
mov ecx, 0x1436fc5f
invalid
jmp 0xe56fbbea
in eax, 0xb9
jmp 0x1400a0b5e
xchg edi, eax
iretq
jmp 0x1400a0b55
sahf
xor eax, 0xe763036
invalid
cmp ebp, dword [rdx + rbp*8 - 0x26]
invalid
insb byte [rdi], dx
invalid
fbld tbyte fs:[rcx + 0x66]
adc dword [rcx], 0x3986a163
cmp dword [rax + 0x38765d1a], ecx
cmp dword [rax + 0x38765d1a], ecx
adc al, 0xc8
adc esi, edi
xchg edx, eax
lodsd eax, dword [rsi]
push rdx
jg 0x1400a0b9f
jl case.0x140002106.40
invalid
mov ch, byte [rbp - 0x59cd773a]
invalid
mov edi, 0x965cbee
sub byte [rsi + 0x7a7af68e], al
invalid
xchg r15, rax
jle 0x1400a0c06
in al, dx
mov esp, 0x53098472
push rbx
test byte [rcx], cl
push rbx
invalid
mov al, 0x33
invalid
fild word [rsi + rcx*4 + 0x3e]
movabs al, byte [0x3b366bc63f8ade8b]
imul esi, dword [rsi], 0x3b
invalid
test dword [rbx], edx
invalid
sub rax, 0xffffffff8bdb2e3d
mov edi, edi
sar dword [0x1546287bb], cl
vcvtss2sd xmm3, xmm12, dword [rsi + rcx*2]
ror rbx, 1
mov cl, 0x7b
pop rax
adc al, 0xc5
invalid
ror rbx, 1
invalid
mov esi, 0x79d6471f
jo 0x1400a0bdc
invalid
mov edi, 0x2affa37c
out 0x93, al
xlatb
xor cl, byte [rdi - 0x72]
int1
lodsd eax, dword [rsi]
je case.0x140002106.45
invalid
dec dword [rax]
invalid
invalid
mov ch, 0xd5
sub dword [rcx - 0x490f9606], esi
xor eax, dword [rbx + 0x462610a2]
call 0xdbe5f6c4
invalid
invalid
wait
jp 0x1400a0c1b
invalid
xchg esp, eax
shr bh, 1
jle 0x1400a0c1b
rol esp, 0xc3
movsb byte [rdi], byte [rsi]
sub al, 0xcb
xchg edx, eax
sub eax, 0x9cb8c6d3
ret 0x55b6
sub r9d, r9d
scasb al, byte [rdi]
cmp dh, bh
push rdi
fdivr dword [rdi + 0x735472bd]
mov edi, 0x735472bd
pop rdi
not byte [rax + rax]
fiadd dword [rdx - 0x16]
retf 0x5335
popfq
movsb byte [rdi], byte [rsi]
push rbx
std
mov edx, dword [0x1ba7a009b]
out 0xbb, eax
adc ecx, dword [esi - 0x6d78ef74]
je 0x1400a0c62
jns 0x1400a0c34
mov cl, 0xa7
pop rbx
mov ch, 0xd7
invalid
pop rsi
invalid
xchg ebx, eax
invalid
insd dword [rdi], dx
sbb eax, 0x83fe6871
fstp xword [rdi - 9]
invalid
cmp byte [rdi], ah
invalid
add al, 0xb4
scasd eax, dword [rdi]
sbb dh, bh
xchg edi, eax
jle 0x1400a0d1e
pop rax
or eax, 0x428a40fd
std
mov al, byte [rdx - 0x10]
std
mov al, byte [rdx - 0x10]
jnp 0x1400a0d7c
invalid
sub esp, dword [rsi - 0x35]
invalid
jns 0x1400a0d38
sbb dh, byte [rdi - 0x47]
mov dh, 0x8a
invalid
js 0x1400a0d77
and eax, 0x120dea36
or edi, ebx
xchg edi, eax
stc
jle 0x1400a0d5b
mov ecx, ecx
mov bl, byte [rsi + 0x69fa350a]
mov ch, byte [rbx - 0x21]
invalid
xor eax, 0x6b8a69fa
fisttp word [rbp + 0x634c8c0]
invalid
push rsp
invalid
invalid
invalid
cmp dword [rdx], ebx
and eax, 0xf97dd18a
nop
outsb dx, byte [rsi]
leave
invalid
invalid
add byte [rbx], dh
jbe 0x1400a0df1
cmp dh, bh
invalid
jb 0x1400a0d66
invalid
call 0xfe3f2daf
sbb byte [rsi + 0x60], bh
jo 0x1400a0dc8
xor dword [rbx + 0x362263c9], edi
ja 0x1400a0dba
iretd
in al, 0xc4
invalid
invalid
stc
invalid
invalid
jo 0x1400a0e7b
iretd
lahf
invalid
pop rax
or eax, 0x995c8a5b
clc
sbb al, 0xb1
sub dword [rdi + 0x1c8e05b5], eax
xor ebp, dword [rsi + 9]
ficom dword [rax + rbp]
invalid
invalid
invalid
invalid
xchg edx, eax
int1
adc dword [rdi], eax
fsub dword [rdx + 0x209417de]
cdq
mov r13b, 0xef
loope 0x1400a0f09
invalid
mov ch, bl
cmp byte [rax], dl
add eax, 0xeeb7fca6
stosd dword [rdi], eax
invalid
out dx, al
mov bl, 0xdb
invalid
outsd dx, dword [rsi]
test dword [rsi + 0x21], ebx
xchg ebp, eax
mov bh, 0xa1
popfq
or eax, 0xb9d36f79
sub eax, 0xa8e96ff2
sbb byte [rsi + 4], bl
invalid
jp 0x1400a0efe
mov edi, edx
pushfq
invalid
pop rax
mov edx, 0xe606de63
rol byte [rdi + 0x6b], cl
cld
rcl byte [rdx + 0x66]
invalid
imul r15d, r12d, 0xffffffd0
imul edi, esp, 0xffffffd0
push rdx
invalid
ficomp word [rdi + 0xf]
mov esi, 0xacbf7b39
xchg esi, eax
outsd dx, dword [rsi]
jno 0x1400a0edb
adc dword [rax], eax
retf 0xeeac
ja 0x1400a0f99
mov ebp, 0x3910414b
mov dh, 0xf7
out dx, eax
jb 0x1400a0efc
pop rax
add eax, dword [rax]
invalid
xchg esp, eax
loope 0x1400a0f0a
je 0x1400a0f64
xchg ecx, eax
xchg esi, eax
sti
rol dword [rsi + 0x73473cf2], 1
fldcw word [rdx + 0x7e]
xor edi, ecx
stc
invalid
fist dword [rdi + 0x15773af5]
push rcx
xchg edi, eax
invalid
mov ebx, 0x2386b46e
cmp dword [rbp - 0x4ff315f], esi
adc al, 0x53
push rbx
push rbx
xchg edx, eax
jmp 0xc7c547c8
cmp dh, byte [rax + 0x70fd172a]
mov qword [rax + 0x6cd3b368], r10
mov dword [rax + 0x6cd3b368], edx
mov dword [rax + 0x6cd3b368], edx
fsub qword [rdi - 0x65]
fld qword [rsi + r11*2 - 0x78722711]
call [rcx - 0x3e6c7c84]
movabs dword [0x8e4b26965839afaf], eax
mov ds, r11
mov ds, r11
invalid
idiv dl
invalid
outsd dx, dword [rsi]
mov edi, 0x6db28abe
stosb byte [rdi], al
fistp dword [rsi + 0x601bcb7a]
movabs byte [0xae81c8642ed158b9], al
movabs byte [0xae81c8642ed158b9], al
movabs byte [0xae81c8642ed158b9], al
invalid
push rsp
invalid
jmp 0x1400a0fd3
invalid
mov cl, 0xce
xlatb
outsd dx, dword [rsi]
cdq
outsd dx, dword [rsi]
invalid
test eax, 0x28ec00ce
cmp dword [rax], 0x155f48d4
rol byte fs:[rdx + 0x149fcfe5], 0x67
adc al, 0x67
xchg ebp, eax
push 0x4e5bea9b
pop rsp
invalid
stc
mov dword [rcx - 0xf], 0x98dabd6
test byte [rsi + 0x1c], bl
je 0x1400a111c
scasd eax, dword [rdi]
cmc
invalid
invalid
in al, dx
invalid
pop rbx
invalid
rcr dword [rsp + rax*8 - 0x5bf8d00], 0x35
shr byte [rax - 1], 1
xchg edi, eax
pop rsp
test bl, bh
invalid
pop rdx
and edx, edi
rol dword [rbp - 0x10f09b1], 1
test dword [rdi - 0xa], ecx
invalid
invalid
fist dword [rbp + 0xc16ff7f]
cld
int1
int1
test dword [rdi - 0xa], ecx
invalid
int1
mov ecx, dword [rdi + 0x31c99522]
pop rcx
invalid
out dx, eax
xchg edi, eax
invalid
mov dl, 0x1c
scasd eax, dword [rdi]
jle 0x1400a1183
adc al, 0x77
pop rsi
invalid
xchg dword [rdi], edx
invalid
pop rsp
add eax, 0x3e487ad3
clc
clc
sahf
out 0x57, eax
and dword [rax + 0x46], ebx
invalid
invalid
xor al, 0x3a
int3
scasd eax, dword [rdi]
add byte [rdi - 6], ch
mov edi, 0xed7d517
invalid
xlatb
invalid
mov ss, word [rsi]
push 0x17aff7df
fistp qword [rax]
invalid
invalid
not dword [rcx + 0x56]
vmaxps ymm15, ymm1, ymm6
fisub word [rdx - 0x34]
jg 0x1400a1232
mov bh, 0xf9
push rsi
pop rbp
pushfq
in al, dx
or ebx, esi
and dword [rbx + rbp*4 + 0x7e], edx
loopne 0x1400a11aa
jp 0x1400a119c
invalid
outsd dx, dword [rsi]
sbb al, 0x6b
sbb dword [rdi - 0x18621d46], 0xffffff96
adc dword [rax - 0x46296979], ebx
insb byte [rdi], dx
mov ah, 0x75
invalid
in eax, dx
invalid
xor eax, 0x76aff562
cmp ch, byte [rax]
stosb byte [rdi], al
push 0xffffffffd9fe8eb9
invalid
loope 0x1400a121b
xor al, 0xb6
outsb dx, byte [rsi]
fisubr word [rdi - 0x5d310d55]
add ah, cl
cmp dword [rdx + rdx*2 - 0x71e9cb97], esp
movsb byte [rdi], byte [rsi]
push rdx
imul esi, dword [rsi + rdx], 0xe0ea7b8e
jnp 0x1400a1224
loopne 0x1400a129f
jnp 0x1400a1224
loopne 0x1400a129f
invalid
invalid
pop rdx
jle 0x1400a123e
sbb dl, bh
add ecx, dword [rbx - 0x2de1b285]
invalid
popfq
adc byte [rax + 0x63], 0xf6
push 0x5c6b4c90
scasd eax, dword [rdi]
invalid
mov dl, 0x11
test al, 0x98
jg 0x1400a12f0
invalid
clc
invalid
jne 0x1400a12cc
sub al, 0x43
call [rsi + 0x53]
call [r14 + 0x53]
invalid
invalid
test al, 0x54
and dword [rsi - 0x57a17eb5], edx
mov esi, dword [rdi]
call 0x13e1e8e49
invalid