Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ah, 0xff
mov dh, 0x89
cmp bh, dh
not dword [rdi - 0x7c970e01]
sbb bh, byte [rdi - 0x4ecf574c]
std
push rcx
push 0xffffffffb4bf1a83
test al, 0x30
mov cl, 0xfd
fdiv dword [rdi + 0x5e168310]
sahf
xchg byte [rdx - 0x18], ah
stc
mov ebx, 0x1d39cb71
sub byte [rdx - 0x62227d68], al
xchg edx, eax
invalid
jl 0x1400a0803
jae 0x1400a0832
std
add byte [rdx], dl
retf
sub al, 0xa3
xor byte [rax], dh
and r10, qword [rdi + 0x759a7b04]
adc edx, dword [rdx + 0x2456135c]
and al, 4
mov ch, 0x8a
shl dword [rdi + 0x7c], cl
pop rdx
and al, 4
mov ch, 0x8a
shl dword [rdi + 0x7c], cl
pop rdx
xlatb
cmpsd dword [rsi], dword [rdi]
adc eax, 0x24b91af0
rcl byte [rdi - 0x107576c0]
jbe 0x1400a08a1
invalid
mov esi, dword ds:[rcx]
mov esi, dword [rcx]
sbb eax, dword [rbp + 0x36]
fadd dword [rdi]
push 0xffffffff99052d6a
xchg esi, eax
jrcxz 0x1400a07fb
invalid
jge 0x1400a08f5
add byte [eax + 0x45], dl
invalid
mov al, 0x44
lahf
invalid
push 0xffffffffffdf3444
cwde
jbe 0x1400a08ae
xor al, 0xdf
call [rax - 0x4940f98a]
mov edi, 0x9177eeb6
out dx, al
ja 0x1400a083e
add ebx, dword [rbx + 0xf9b3bd]
test qword [rax + rbp*8 + 0x2e], rsi
test dword [rax + rbp*8 + 0x2e], esi
wait
mov ebp, 0x4800f9b3
test dword [rax + rbp*8 + 0x2e], esi
invalid
invalid
mov dl, 0xbe
invalid
neg dword fs:[rdi]
jle 0x1400a0966
loope 0x1400a08f3
mov esi, 0x3d2acffe
fcmovnbe st(0), st(5)
or ax, 0x62e1
iretd
cmp eax, 0xd66d5db
loope 0x1400a095e
movabs eax, dword [0xcef3105973111410]
mov cl, 0x29
mov dl, byte [rdi]
sbb dword [rbx - 0x37], edi
jg 0x1400a08aa
jae 0x1400a095b
adc bl, dh
invalid
sub cl, al
pop rbp
in eax, dx
pop rdi
invalid
invalid
lodsb al, byte [rsi]
test al, 0xc8
pop rdx
lodsd eax, dword [rsi]
invalid
jmp qword [rsp + rax*8 - 0x151d126]
xchg edi, eax
and dh, byte [rdi + 0x76d4edc2]
in eax, dx
invalid
jbe case.0x140002106.13
jnp 0x1400a098d
mov edi, edi
idiv byte [rbx + 0x74]
mov bh, 0xc2
in eax, dx
invalid
mov edi, edi
idiv byte [rbx + 0x74]
mov cl, 5
cld
adc bl, byte [rdx + 0x4179c7bb]
loop 0x1400a09f6
sar ecx, cl
movsb byte [rdi], byte [rsi]
sbb eax, dword [rcx + 0x14]
mov ch, 0x16
insb byte [rdi], dx
insb byte [rdi], dx
insb byte [rdi], dx
invalid
pop rdi
jbe 0x1400a09f6
mov ebp, 0xf771edce
jno 0x1400a098b
in eax, 0xe
mov dh, 0xd5
invalid
sahf
movsd dword [rdi], dword [rsi]
xchg esp, eax
xor byte [rdi - 0x4b], dl
invalid
pop rax
inc dword [rdi]
movabs eax, dword [0x8b9c7bf0188a168b]
add byte [rsi + rdi*8], ah
or dword [rax + 0x4195667a], ebp
retf 0x1f06
invalid
invalid
invalid
xchg esp, eax
std
wait
invalid
push rcx
xchg esi, eax
or dword [rbp + r13*8 + 0x2f80febc], eax
ret 0xdb53
jmp 0xf3144be3
imul edx, dword [rcx], 0x3ef4e488
shr dh, cl
mov r14b, r15b
int3
cmp al, 0x97
xchg edi, eax
ret
cld
insb byte [rdi], dx
sti
dec dword [rbx + 0x39c79fc2]
sbb al, 0x7e
adc dword [rcx + 0x3c8b7bf0], esi
add al, 0x43
jl 0x1400a0ad4
invalid
jnp 0x1400a0a6a
adc byte [rax], dl
sub edx, dword ds:[rbx - 0x685e87c3]
adc byte [rsi], bh
sub edx, dword [rbx - 0x685e87c3]
loopne 0x1400a0a42
xchg esi, eax
invalid
invalid
sti
retf 0x26b1
fldenv [rbx + 0x74]
nop
cmc
in al, dx
inc byte [rax]
out dx, eax
xchg edi, eax
shl ch, 0xef
cmp al, 0x82
xchg edx, eax
cmp byte [rsi], bh
invalid
or dword [rdi + 5], ebx
push rdi
and al, byte [rcx + 0xb]
jne 0x1400a0a2b
and dword [rsp + rdi*8 + 0x2b02b447], ebx
xchg ebx, eax
add byte [rdi - 0x75], bh
sti
jo case.0x140002106.27
stosb byte [rdi], al
shl byte [rsi + 0x3115198f], 0x31
cmpsb byte [rsi], byte [rdi]
invalid
sbb dword [0x1a8443beb], edx
pop rsi
nop
jrcxz 0x1400a0ab9
cmpsb byte [rsi], byte [rdi]
invalid
push 0xfffffffffbe3905e
add eax, 0x5df5dad7
and byte [rdx + 0x58a95f2a], cl
movabs dword [0xe18819b30248604c], eax
add sil, byte [rbx - 0x5b1e77e7]
invalid
add sil, byte [rbx - 0x5b1e77e7]
ror byte [rbp - 0x29], 1
xlatb
add dword [rcx + 0x141676f7], esi
or bl, byte [rdx - 0xf]
mov al, 0xb3
xchg ebp, eax
xchg ebp, eax
xchg ebp, eax
mov esi, 0xf2391feb
jns 0x1400a0b31
invalid
invalid
jae 0x1400a0acb
invalid
invalid
or byte [rsi + 0x67], bh
test byte [rdx], ah
and eax, 0x954fd33d
cmp byte [rbx + 0x2f950356], 0x54
push rax
mov ebx, 0xb34aaf2f
invalid
mov bl, 0x1f
jnp 0x1400a0b1b
outsd dx, dword [rsi]
pop rdi
rcr byte [rcx], 0xb
in al, dx
loope 0x1400a0aec
invalid
invalid
xchg ebp, eax
pop rsp
pop rbp
jnp 0x1400a0b7a
jge 0x1400a0afa
mov esi, 0x6a6399f0
pushfq
movsb byte [rdi], byte [rsi]
push rbp
xchg dword [rsi], edx
xor al, 0xf1
adc byte [rcx + 0x77], dl
push rcx
ja 0x1400a0b84
pop rax
vdivps ymm9, ymm6, ymm4
push rcx
ja 0x1400a0b84
pop rax
vdivps ymm9, ymm6, ymm4
leave
invalid
invalid
invalid
invalid
sub dword [rax + 0x11], edi
pop rsp
or eax, 0xfbbe3867
fisttp qword [rbp + 0x27]
mov esi, 0x274dddfb
mov ch, byte [rcx]
add dl, byte [rbp + 0x74190e47]
mov ebx, 0x5e60fecb
invalid
invalid
pop rsi
fmul dword [rdx]
jle 0x1400a0b99
invalid
add eax, 0xda038f26
invalid
invalid
jl 0x1400a0bd9
in al, 0xd
cmp al, 0x8a
test eax, 0x67150097
invalid
invalid
adc byte [0x13f7e182d], bl
mov ecx, 0xf7d3adeb
add esp, dword [rdx]
cmp eax, 0x5f7b068e
invalid
out 0x1d, eax
xchg esp, eax
or dword [rdi + 0x35], 0x766f4eeb
invalid
movabs al, byte [0xdcddb3136579a0b]
mov r11d, dword [rax + 0x14]
invalid
fmul dword [rdi - 0x4e]
cmc
lodsb al, byte [rsi]
test byte gs:[rdi + rbp*2 + 0xe2f9855], 0x96
sbb ebx, dword [rcx + rdi*4]
invalid
invalid
mov ecx, 0x2700127
add esi, dword [rsi]
push rbx
push rbx
mov esp, dword [rbp + 0x1b]
invalid
outsb dx, byte [rsi]
cmp eax, 0xee4ce45a
out dx, al
je 0x1400a0ca0
invalid
mov bh, 0xdf
sub dh, al
jno 0x1400a0c66
mov ebp, 0x42241024
adc eax, 0xc4a431a
push rdx
or al, 0x52
or al, 0x52
invalid
lea edi, [rsi + 0x76af2db9]
leave
enter 0xffffffffffffd000, 0x20
adc dword [rsi - 0x32e10da0], eax
loopne 0x1400a0c84
invalid
push rcx
out dx, eax
jmp 0x1400a0c60
outsb dx, byte [rsi]
push rbp
jb 0x1400a0cd8
rcl bh, 1
movsd dword [rdi], dword [rsi]
je 0x1400a0cc1
cmp esi, dword [0xe32c09b6]
fadd qword [rbx - 0x4828b270]
mov esp, 0xef490608
out dx, eax
xchg ebp, eax
xchg ebp, eax
sbb byte [r14 - 0x401f40a2], bl
invalid
pop rbp
scasd eax, dword [rdi]
push 0xffffffffa1ca0044
pop rdi
sti
invalid
push 0x27242b8f
sub eax, 0xfbb872f7
invalid
lahf
or ah, byte [rbx + 0x5c]
mov ebx, 0xed9e2a5d
add al, 0xd8
sti
cld
jbe 0x1400a0d32
cdq
add edi, eax
xlatb
jno 0x1400a0d74
xor edi, esi
adc bh, byte [rbp + 0x5855aa67]
stosb byte [edi], al
push rbp
pop rax
stosb byte [edi], al
push rbp
pop rax
loopne 0x1400a0d8f
mov al, 0xa3
fcmovnb st(0), st(1)
jbe case.0x140002106.58
sal dword [rsi - 0x49], 0xa7
cmpsd dword [rsi], dword [rdi]
out dx, al
sti
invalid
rcl dword [rdx], cl
jne 0x1400a0d0d
jno 0x1400a0d95
jns 0x1400a0d96
adc dl, byte [rbx + 0x68286b2c]
xor ebp, dword [rsp + rax*4]
xor eax, 0xfb00ce12
scasb al, byte [rdi]
pop qword [rdx + riz*8]
enter 0xffffffffffffaf12, 0xffffffffffffffa3
out 0xb9, al
mov bh, byte [rbx + rbp*2 - 0x4502d827]
imul dword [rdi + rdx + 0x30fd4c70]
movabs dword [0x9e6ddb5aa64625e3], eax
cmpsb byte [rsi], byte [rdi]
pop rdx
fld xword [rbp - 0x62]
cmpsb byte [rsi], byte [rdi]
pop rdx
fld xword [rbp - 0x62]
insd dword [rdi], dx
sahf
xchg edx, eax
pop rax
push rcx
in eax, dx
outsd dx, dword [rsi]
add eax, 0x837c9987
xlatb
mov dword [rdi + 0x74c6e562], eax
mov bh, 0xe
invalid
jbe 0x1400a0dad
in al, dx
xor eax, 0xe6b2ef2e
mov dl, 0xe6
out 0x3b, al
cmp edi, dword [rbp + 0x57211dfa]
mov ebp, 0x57211dfa
invalid
invalid
fimul word [0x13be5c932]
outsd dx, dword [rsi]
lodsb al, byte [rsi]
invalid
sbb eax, 0x766f99d3
mov bl, 0xc7
mov edi, 0x2b8af70f
cld
in eax, dx
scasd eax, dword [rdi]
scasd eax, dword [rdi]
invalid
invalid
cmp dword [rdx - 0x37], esp
mov word [rsi + riz - 0x4b], ss
insd dword [rdi], dx
or cl, byte [rbp + riz + 0x5c]
cwde
loopne 0x1400a0e2d
invalid
invalid
xchg esi, eax
ja 0x1400a0ddf
invalid
invalid
invalid
fild word [rsi]
outsd dx, dword [rsi]
fidivr dword [rax + 0x15978ffd]
and esi, dword [rdi]
xchg edx, eax
jne 0x1400a0edd
invalid
xor byte [rdi], ch
js case.0x140002106.69
xchg edi, eax
xchg edi, eax
lodsd eax, dword [rsi]
jle 0x1400a0e5b
mov esp, 0x78bf8510
cmp byte [rbx - 0x62df26da], dh
fldenv [rax]
popfq
fldenv [rax]
popfq
invalid
invalid
mov dword [rsi + 0x1e9a8e4c], 0xd7ad3dbe
imul edx, dword [rdi + 0x33], 0x397bffdc
cmp esi, ecx
cmp esi, ecx
mov ebp, 0x78448c1f
invalid
movabs eax, dword [0xb76620eeb5743cba]
sub al, 0x92
invalid
mov al, 0x11
sbb eax, 0xa7ce413b
jge 0x1400a0f4b
insd dword [edi], dx
invalid
pop rbx
jl 0x1400a0eb5
add eax, 0x5d5346a9
pop rbp
push rsp
push rdi
lodsb al, byte [rsi]
call 0x133dad51d
sal bl, 1
invalid
and al, 0xe6
mov byte [rax - 0x2f1fff0], bl
test dword [rsi - 0x2c6525e6], 0x6a1e9efc
std
out 0x68, eax
rcr byte [rsi + rbx], 0x6f
outsd dx, dword [rsi]
outsd dx, dword [rsi]
mov edi, 0xe5a35beb
out dx, eax
invalid
fiadd word [rbx]
fst qword [rcx + 0xf9513ca]
jmp 0xfeedaf37
movabs byte [0x75a8cacd449bcc84], al
sbb bl, byte [rdx]
pop rbp
add bh, bh
stc
iretd
jmp qword [rbp + 0x13]
mov bh, 0xce
xchg ecx, eax
jns 0x1400a0eeb
push rsp
sahf
invalid
mov dl, dl
clc
invalid
popfq
sbb spl, byte ss:[rax + 0x48]
invalid
invalid
jmp 0x1400a0f27
add byte [rsi + rcx*4 + 0x200f09db], dl
and dword [rsi], ebp
out 0x19, al
invalid
cmp al, 0x16
mov ebp, 0xc2e203c1
xchg byte [rdi + 0x4eb51c0c], cl
push rax
add dword [rcx], ecx
stosb byte [rdi], al
sbb eax, 0xffffd065
invalid
xor eax, 0xeffff372
in eax, dx
mov ecx, 0x740528c3
mov ecx, 0x58e80ed2
call 0xff649a61
call 0xff649a61
jg 0x1400a0fb5
add al, 0x76
scasd eax, dword [rdi]
sbb al, 0xf0
or eax, 0x1465c6ef
invalid
invalid
xchg edi, eax
cld
pop r14
invalid
invalid
push 0xffffffffd5cf342a
mov bh, 0x2e
lahf
nop
invalid
pop rdx
and dh, cl
out 0x23, al
mov esp, 0xd5f5c9e
pop rdi
or eax, 0x8ca47a8d
or esi, esi
test byte [rdi - 0x39], dl
mov al, 0x29
invalid
invalid
rcl dword [rsi], cl
ja 0x1400a112c
add ebp, esp
xor dword [0x1237647c4], 0xe303ec5b
adc cl, byte [rdi - 0x2d41e364]
fidiv dword [rcx + 0x6180b2b4]
loope 0x1400a1113
sub rax, 0x3dca4ef2
hlt
in al, dx
pop rsi
ret 0xd6f4
iretd
movsd dword [rdi], dword [rsi]
ror byte [rbx + 0x77], 1
sti
ja 0x1400a1111
pushfq
adc edi, edx
invalid
insb byte [rdi], dx
not dword [rdi]
sar dword [rdi - 0x48], 1
int1
mov al, 0xd4
mov dl, 0x92
xchg edx, eax
or edx, dword [rbp - 0x2e]
mov ch, 0x42
push rbp
sal dl, cl
mov ch, 0x42
jnp case.0x140002106.111
pop rsp
invalid
invalid
invalid
std
invalid
jae 0x1400a116b
xchg edi, eax
mov bl, 0x57
add qword [rdi], r8
and eax, 0xc88fce9d
jge 0x1400a11a3
fnop
loopne 0x1400a1203
sub eax, 0x736b13a9
adc ebp, edi
or eax, eax
scasb al, byte [rdi]
mov edx, 0x4432167a
cli
test dword [rcx + 0x12], esp
stosb byte [rdi], al
leave
invalid
adc ch, byte [rdx + 0x1570f0c9]
invalid
sahf
scasd eax, dword [rdi]
mov ah, 0xae
cmpsd dword [rsi], dword [rdi]
out dx, al
mov edi, 0xda7dffdd
xchg edi, eax
int3
out dx, al
jp 0x1400a11b5
jbe 0x1400a120d
ja 0x1400a11cf
mov esp, 0xa43544d2
add eax, 0x89a00a0b
invalid
movabs al, byte [0x5c5429b10dc76689]
cmp ah, byte [rdx + 0x13]
xor eax, esi
jnp 0x1400a1203
invalid
popfq
jmp 0x1400a120c
adc dh, cl
invalid
insb byte [rdi], dx
push rdi
sar dword [rdx], 1
movabs dword [0x654638d48dd92e19], eax
cmp byte [rsi + 0x65], al
adc dl, byte gs:[0x15f3ebf81]
adc dl, byte [0x15f3ebf81]
out dx, al
call qword [rcx]
invalid
pop rdi
call qword [rdi - 0x104d115]
invalid
in al, 0x69
retf
or al, 0x4b
sbb ecx, ecx
xor al, 0x6f
sahf
invalid
mov bl, 5
mov edx, 0x1799f183
mov ebx, 0x2f9c816d
rol byte [rbx - 0x41cca4b7], 0x8f
hlt
xchg edi, eax
in eax, 0xec
invalid
or al, 0xfe
not dword [rdi - 0x1398037f]
in al, dx
jmp case.0x140002106.125
insb byte [rdi], dx
and byte [rax - 0x77b86041], cl
xchg byte [rbx], dl
cwde
adc ebx, dword [rax - 0x3435130]
xor byte [rsi + rsi*4 - 0x6e], ah
shr byte [rsi + 0x6430fcbc], 1
mov dh, 0x92
loop 0x1400a12a6
invalid