Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
xchg dword [rax + 0x3c0bdef], ecx
invalid
mov ch, 0x75
invalid
xchg esi, eax
xchg edi, eax
xchg ebx, eax
push rbp
invalid
jbe 0x1400a0841
invalid
add bl, ch
sar dword [rsi - 0xb], 1
cli
clc
cmp dword [rdi], edi
std
scasd eax, dword [rdi]
invalid
retf
pop rbp
ficomp dword [rcx - 8]
add edx, dword [rsi]
enter 0xfffffffffffff1c8, 0x71
xchg esi, eax
cmp eax, 0x61da6bbb
test al, dl
int 0xf9
fisub dword [rcx - 0x7c]
ror ch, 1
stc
mov bl, dh
and al, 0xd3
adc eax, 0xc2895342
xor al, 0x9e
sub spl, byte [rbp + 0x757e0658]
jp 0x1400a0880
or al, 0xbc
mov al, 0x5a
invalid
sbb ecx, dword [rdi + 0x50]
nop
invalid
pushfq
invalid
pop r14
out dx, eax
pop rsp
jle 0x1400a08bb
mov esi, 0x6a21ec90
mov byte [rax], 0x98
popfq
scasd eax, dword [rdi]
jl 0x1400a08ba
jle 0x1400a088e
mov ch, 0xa5
movsd dword [rdi], dword [rsi]
mov bh, 0xb5
sal al, 1
jnp 0x1400a0939
sbb dword [rcx], edi
or eax, 0x3fa35668
imul dword [rax - 0x47be50fc]
scasd eax, dword [rdi]
invalid
invalid
popfq
invalid
scasd eax, dword [rdi]
mov r8d, 0xf81e9d
cmp eax, 0x24dc90b7
xor eax, 0xb7dc0b46
xchg esp, eax
push rbp
sar dword [rdi + 8], 0xf6
invalid
invalid
test byte [rdi], 0x23
movabs dword cs:[0x91fe937bf07dfea3], eax
cmp eax, 0x558a5ea3
mov dl, byte [rbp + 0x16]
mov dl, byte [rbp + 0x16]
movabs al, byte [0xfc9788a88ba2bfa4]
add dword [rbx + 0x20], esi
call 0x11a1ed806
xor ch, byte [rax]
add dh, bl
nop
xchg esp, eax
invalid
adc ebp, dword [rcx]
invalid
invalid
invalid
cmp dword [rsi + 0x177c7dfb], edi
invalid
loop 0x1400a09e1
invalid
adc al, 0xd5
add edi, edi
add byte [rax], ch
stc
push rbp
xchg byte [rdi - 0x1dad1d90], ch
adc bh, dl
bnd jns case.0x140002106.15
invalid
mov edi, 0x61bb29b8
invalid
mov eax, 0xc761bb29
jg 0x1400a0a0c
sbb ebx, 0x4b
push rbx
and ebp, ecx
mov edx, edi
mov bl, cl
invalid
mov ch, byte [rdx - 0x73]
jns 0x1400a09fc
sbb bh, byte [rdi - 0x228b0102]
invalid
push rbp
or eax, edx
retf 0x1f2a
test eax, 0x5671001
cmp cl, al
invalid
stc
invalid
pop rdi
jb 0x1400a09b6
sub esi, dword [0x199a43ce9]
invalid
xor bl, byte [rdx + 0x7ef04159]
out dx, al
jg 0x1400a09ab
sbb eax, 0x85b03c4f
rcl byte [rdx - 0x357e50f0], cl
sub byte [r11 - 0x39ddb9ae], bl
and r8b, sil
adc byte [rdi + 0x2841ca81], ch
wait
push rdx
and r8b, sil
retf 0xf796
mov r9b, 0xea
invalid
xor dl, byte [rsi + 0x5ae90419]
adc dh, cl
invalid
invalid
jg 0x1400a09e6
fnstsw word [rdx - 0x6d932867]
mov eax, dword [rdi - 0x69]
cdq
cmpsb byte [esi], byte [edi]
jmp 0x1400a0a64
invalid
adc dh, ch
je 0x1400a0ad3
cmp byte [rsi], bh
jo 0x1400a0abe
ret 0xdb73
and dh, cl
invalid
std
invalid
xchg ebx, eax
invalid
xchg dword [rsi + 0x6f], esi
push rax
imul dword [rax - 0x4c5e5e63]
vpmaddwd xmm9, xmm10, xmmword [rbx]
jns 0x1400a0afb
test eax, 0x1a1db23
fild qword [rdi]
cmp eax, 0xa8d649a1
mov ebx, ss
mov ebp, 0x3d944cfd
mov eax, 0x242cabff
add byte [rdx - 0x47], 0x8d
invalid
sub byte [rcx - 0x3299cf17], 0xa3
adc al, 0xec
xlatb
jmp 0x1400a0a54
xchg ebp, eax
invalid
invalid
in eax, dx
ret 0xff5c
leave
xor edi, dword [rsp + rcx - 0x2c0b043d]
jge 0x1400a0a85
add cl, dh
invalid
movabs r13, 0x44a845531b4c8ee2
mov cs, word [rbx + rbx + 0x53]
test al, 0x44
sbb byte [rbx - 0x28], bh
stosb byte [rdi], al
cld
movabs byte [0xfe7893399bb72cc6], al
stc
invalid
hlt
js 0x1400a0b93
jbe 0x1400a0b76
mov esp, 0x13ea07f8
mov ebp, 0x72df66de
mov edi, dword [rdi]
mov dl, 0xbf
mov byte [rax], 0xf6
push 0xffffffffffffffd8
xor dh, byte [rcx - 0xe]
movabs eax, dword fs:[0x690fd0b885daaec0]
fiadd dword [rbp + 0x690fd0b8]
fiadd dword [rbp + 0x690fd0b8]
adc byte [r15 - 0x677455ea], dil
imul esi, edx, 0x52
mov ebp, 0xa9549cb0
test eax, 0x11048e86
iretd
invalid
fild qword [r8 + rbp*4 - 0x1e96bec]
push rbp
mov bh, 0x5d
cmc
sub al, 0x3a
sbb byte [rax - 2], dh
jo case.0x140002106.40
test eax, 0x11048e86
iretd
invalid
jo case.0x140002106.40
sbb dword [rax - 0x73d3d5c], esi
test byte gs:[rbp - 0x39ab1ea9], 0x1b
mov dl, 0x84
mov cl, 0xf3
test byte [rcx + 0x65eebff3], dh
and al, 0x94
mov edi, 0x942465ee
out dx, al
and al, 0x94
insd dword [rdi], dx
invalid
cmp ch, dl
invalid
wait
mov dh, bl
invalid
invalid
fild word [rbx + rbp*4 - 0x40]
movsb byte [rdi], byte [rsi]
push rdi
fimul word [rdx + 0x2dbbc63f]
xor r9b, sil
scasd eax, dword [rdi]
adc dh, ch
imul ecx, eax, 0x6b
invalid
rcr byte [0x153a578f0], 0x44
jne 0x1400a0b8f
mov edx, dword [rsi]
jb 0x1400a0bab
lodsd eax, dword [rsi]
or bh, bh
in al, 0xff
call qword [rdx + rbp*2]
call qword [rdx + rbp*2]
test dword [rcx + 0x7a3e670f], ecx
mov cl, 0x8b
mov esp, 0x97f0be8a
std
invalid
std
invalid
fidivr dword [rcx]
movsd dword [rdi], dword [rsi]
xor dl, al
or al, 0x6a
push 0xffffffffffffff93
push 0xffffffffffffff93
or dword [rdi + 0x2c], 0xffffffee
invalid
or byte [0xca510beb], dl
test al, 0xcc
ja 0x1400a0c44
xor eax, 0xc28bbf16
pop rdi
invalid
add dword [0xde9a5169], edx
jno 0x1400a0c69
sub bl, byte [ebx - 0x356dcf4e]
invalid
retf 0x282
xor bl, ah
idiv byte [rdx + 0x25c45ba]
invalid
hlt
and al, 0x2d
push rax
invalid
invalid
push rdi
invalid
test dword [rcx + 0x20], ebp
stosb byte [rdi], al
sbb al, 0x8b
xor al, 0x3c
std
invalid
sahf
xchg esp, eax
add dword [rcx - 0x49169c3d], esi
xchg dword [rsi + 0x2c], edx
out dx, al
out dx, eax
mov dh, 0x12
adc ch, dh
adc ch, dh
sbb qword [r12 + rax*2 + 0x443c38b5], r15
hlt
or byte [0x12d429afa], 0xf3
sahf
mov bl, 0x24
mov eax, 0x54ef1ecf
invalid
iretd
jg 0x1400a0d4a
cmc
in eax, dx
loop 0x1400a0d53
add byte [rax + 0x79], ch
push rsp
in al, dx
or eax, 0x8bfa765e
leave
mov cl, bl
invalid
invalid
stosb byte [rdi], al
invalid
hlt
je 0x1400a0d46
stc
xchg esi, eax
adc ecx, dword [rdx]
invalid
jmp 0x1400a0d69
jne 0x1400a0e01
jne 0x1400a0d6f
or al, 0xca
mov eax, cs
mov eax, 0xdc4e244f
mov esp, dword [rdx - 0x38ea5494]
rol byte [rdi + 0x36], 0x87
xchg edi, ebp
xchg edi, ebp
stc
mov esi, 0x5c568d39
cmp dword [rbx - 0x7d], ecx
mov bh, 0x4e
add eax, dword [rcx + 0x1b1874d1]
sbb byte [rbx], bl
cli
push 0xffffffffffffffbd
jae 0x1400a0dcb
int3
mov es, ecx
pushfq
mov cl, 0xa9
insb byte [rdi], dx
cmc
pop rdx
xor eax, 0x1441c635
push si
retf 0x7b8b
xchg edx, eax
cmp eax, 0x8f090f32
neg byte [rdx - 0x49]
sbb eax, 0x16ad29b3
and edx, dword [rdi]
invalid
call 0xe8f9e1e2
jmp 0x1400a0ecf
imul esi, dword [rdi + rax*8 + 0x17], 0xb2fe61d6
add bl, byte [rbp + rsi*4 - 0x58e5be8b]
adc byte [rbp - 0x3c65f40c], ch
lodsd eax, dword [rsi]
hlt
invalid
invalid
ret
stosb byte [rdi], al
invalid
lodsd eax, dword [rsi]
hlt
invalid
cli
fnstsw word [rcx + 0x2e16f01d]
invalid
sbb al, 0xa5
invalid
invalid
adc esi, dword [rdi - 0x3dc26c55]
jnp 0x1400a0f2a
mov r8d, 0xa86b10f2
add eax, 0x6d0a114f
sub edx, dword [rdx - 0x110fcec8]
xor eax, esi
out dx, al
xor eax, esi
out dx, al
mov ebx, 0xde6dee86
push rbp
out dx, eax
out dx, al
insd dword [rdi], dx
ficom word [rbp - 0x11]
test al, 0xd6
pop rdi
push rsp
push rsp
push rsp
push rsp
out 0xd5, al
adc al, 0xd4
jb 0x1400a0f14
adc eax, 0xffa5ffa0
outsd dx, dword [rsi]
scasd eax, dword [rdi]
punpcklwd mm5, dword [rdi - 0x527e3a4c]
sbb byte [rax], ah
lea esp, [rsi - 0x1d18b525]
invalid
fisttp dword [rdx - 0x19]
loop 0x1400a0e79
jp 0x1400a0f36
imul ebx, ebx, 0xe4fb1fa3
sub ebx, dword [rdi + 0x373a0e23]
add edx, 0x2dc87d96
or bh, bh
push qword [rcx - 0x6b]
push qword [rcx - 0x6b]
leave
invalid
invalid
sub dword [rdi + 0xf], esi
mov esi, 0x3f667b39
movabs dword [0x3938bb83eb3d6a32], eax
jns 0x1400a0f30
movsx edi, byte [rcx]
jnp 0x1400a0f87
invalid
cmp dword [rcx + 3], edi
jl 0x1400a0f1c
insb byte [rdi], dx
sbb dword [rbx], eax
invalid
jbe 0x1400a0ec5
jnp 0x1400a0ee8
invalid
invalid
and eax, 0xc46ffb12
lodsb al, byte [rsi]
xchg ebp, eax
invalid
sbb dword ss:[rsi + rsi*4 + 0x225664b2], ebp
loop case.0x140002106.85
push rsi
and ah, dl
int 0xc5
jnp 0x1400a0f7b
invalid
jnp 0x1400a0f7b
int3
invalid
cmp eax, 0x77c5325c
invalid
ret
outsd dx, dword [rsi]
mov edi, 0x79948abe
fsubr st(1)
xor eax, 0x466f6725
jl case.0x140002106.93
invalid
bswap ebx
sahf
mov edx, 0x29c5570f
invalid
retf
out dx, al
jrcxz 0x1400a1042
invalid
invalid
in al, dx
xchg ebx, eax
cmpsb byte [rsi], byte [rdi]
insb byte [rdi], dx
test al, 0x7a
xor bh, byte [rcx]
mov fs, eax
retf 0xf687
invalid
sub al, 0xdb
pop rsi
insb byte [rdi], dx
and byte [rax - 0x68], bh
xor byte [rdx + 0x183dca5], bl
and al, 0xb0
mov al, 0xa1
loopne 0x1400a0ffd
ret
mov edi, 0x97ce63c2
jnp 0x1400a10d5
sti
invalid
scasd eax, dword [rdi]
and eax, 0x7d698d77
invalid
xchg edi, eax
pop sp
and dword [rsi], 0xfffffff0
xchg edi, eax
jnp 0x1400a1095
invalid
mov dh, 0xc2
movabs al, byte [0x14947889d7cddccb]
mov dword [rax - 0x6c], edi
adc al, 0xb5
invalid
cdq
push rdx
js 0x1400a102b
vorps xmm6, xmm1, xmmword [rcx - 0x22ae8eb4]
retf
mov cl, 0x4c
jno 0x1400a112d
invalid
or eax, edi
sub esp, edx
invalid
invalid
xchg byte [rbp - 0x69], ch
xchg edi, eax
pop rsp
pop rcx
invalid
pop rbx
dec dword [rdi]
invalid
invalid
adc dword [rcx], edi
adc edx, dword [rbp - 0x69]
ficomp word [rbp + 0x28c9398b]
std
ror byte [rcx - 0x351187ee], 0xec
adc bh, byte [rax - 0x12]
retf 0x76ec
invalid
adc bh, byte [rax - 0x12]
retf 0x76ec
outsd dx, dword [rsi]
add ch, byte [0x150c8bae6]
sbb al, 0x17
pushfq
test eax, 0x171c10be
lodsd eax, dword [rsi]
invalid
enter 0x1c1a, 0xffffffffffffffc8
rcl dword [rcx + 0x3f1796e0], 0x6c
int1
xlatb
invalid
jo 0x1400a1146
xchg ebx, eax
mov eax, 0xd470116e
pop rsp
or eax, 0x5f43b41
mov dl, 0x45
cmp al, 0xbb
cmp byte [rcx], dl
invalid
invalid
in eax, dx
in al, 0xbf
cmc
popfq
invalid
fld qword [rax + 0x18]
mov bl, 0x63
fsubrp st(7)
pop rcx
invalid
in al, 6
jns 0x1400a1255
sub al, 0x21
pop rbp
js 0x1400a1237
iretd
jnp case.0x140002106.122
mov esi, 0xf74f8aae
jne 0x1400a1246
int 0xd
jg 0x1400a125d
pop rbx
sar edi, cl
invalid
call [rsi - 0x5c]
in eax, 0x12
mov bh, 0x66
lea edx, [r11]
pop rbp
cmc
ret 0xe342
invalid
sbb esi, dword [rcx]
pop rbx
cmpsd dword [rsi], dword [rdi]
mov al, 0x7c
cmp al, 0x19
jae 0x1400a1255
je 0x1400a11d9
xor eax, ebp
push 0xffffffffd828b67e
ror dword [rdx], 1
invalid
sub eax, 0xf80257d
in eax, 0xc3
sub al, 0x50
mov dl, 0xd6
invalid
sbb eax, 0xa3d2b71a
leave
mov ebp, 0x9fa25682
sbb al, byte [rbx]
not byte ds:[rdi]
mov dh, 0xbb
cmp ch, ah
invalid
sbb dh, byte [rdi - 0x42365c2e]
invalid
invalid
invalid
mov ch, 0xbb
sub eax, 0x591dbe77
fnstsw word [rax + 0x2f]
js case.0x14001b157.0
sbb dword [rsi], edi
add al, 0xe4
mov bl, 0x2c
invalid
cmp byte [rsi - 0x62], cl
mov eax, 0x16509d0e
stosb byte [rdi], al
invalid
out dx, eax
call qword [rdi - 0xf91802b]
jnp 0x1400a12e7
cmc
xchg edi, eax
add edi, dword [rbx + 0x73]
jnp 0x1400a12fd
jnp 0x1400a12fd
sbb esi, dword [rbx]
jrcxz 0x1400a1307
adc ecx, eax
cmp dh, byte [rdx + rcx]
xchg ebx, eax
pop rcx
movabs al, byte [0x8e86608ef974e8b5]
or cl, byte [0xfe41bf95]
and eax, 0x71e51efa
in eax, 0x71
push qword [rbx + 0x7a]
imul edi, dword [rdi - 0x5a4cd99e], 0xffffffe3
call 0x10a7d719a
loopne 0x1400a1316
jae 0x1400a1284
invalid
mov esi, dword [rdi + 0xed6ed79]
invalid
invalid
enter 0xffffffffffffacbd, 0xffffffffffffffd0
sbb bl, al
fadd st(6)
invalid
fcom st(5)
invalid