Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
sbb al, 0xb6
or eax, 0x16499aa0
mov cl, dl
invalid
invalid
jge 0x1400a080f
xor ebp, esp
jge 0x1400a07fe
fdivr qword [rcx + 0x49062846]
invalid
invalid
adc ebp, dword [rax - 0x50a812f]
imul esi, ecx, 0x6af92f4
scasd eax, dword [rdi]
invalid
invalid
xchg dl, cl
xor eax, 0xf1af6370
invalid
xchg ebp, eax
ret 0xeced
invalid
mov word [rdx + 0x3ffbf08e], cs
push rsp
mov cl, byte [rsi + 0x543ffbf0]
out dx, eax
invalid
int3
pop rbp
jnp 0x1400a08ad
sbb eax, edx
invalid
stosd dword [rdi], eax
std
loop 0x1400a08b3
pushfq
invalid
jne 0x1400a095f
jle 0x1400a08e8
invalid
mov dl, byte [rbp + 0x16]
movabs al, byte [0xd61d20d129c80f27]
invalid
invalid
mov bh, 0x5a
push rsi
sub al, 0xb7
clc
adc byte [rdi], dh
xor eax, 0x92668d07
xchg edx, eax
fsub qword [rdx + 0x3a]
mov ecx, dword [rcx - 0x76]
xor qword [r13 - 0x74], rbp
invalid
scasd eax, dword [rdi]
sti
jge 0x1400a09d3
mov word [rdi + 0x177c7dfb], gs
invalid
invalid
mov dl, 0x5a
pop rdx
scasd eax, dword [rdi]
hlt
test ah, ah
jae case.0x140002106.13
invalid
pop rsi
invalid
mov ah, byte [rbx + 0x3e]
lodsb al, byte [rsi]
adc dl, bh
mov dl, 0x8b
or eax, 0x1a44524b
push r10
invalid
invalid
xchg edx, eax
invalid
invalid
push r10
sbb r10b, byte [rdx - 0x4008eea0]
sub byte [rbx - 0x3d], 0x52
xor eax, 0xd98ad78b
mov bl, cl
mov bl, cl
cmc
mov edx, 0x60e0dd85
imul ecx, dword [rcx - 0x5e], 0x14
mov ebp, 0x1c408f6a
push rbx
and eax, 0xebdfe3cb
jmp 0x1400a0989
invalid
invalid
jo 0x1400a098a
lodsd eax, dword [rsi]
invalid
out dx, eax
invalid
xchg edx, eax
jns 0x1400a09f5
int 0x7c
jmp 0x1400a0a3d
jl 0x1400a09c0
clc
jb 0x1400a0979
jg 0x1400a09cf
invalid
invalid
movsb byte [rdi], byte [rsi]
ret
invalid
or dword [rdi], edi
call 0x13a744413
jle 0x1400a09c8
invalid
xor esi, dword [rsi + 0x3c]
pop rsi
invalid
jle 0x1400a0a41
sbb byte [rax - 0x29c6fe37], ah
mov es, edi
movsb byte [rdi], byte [rsi]
std
cmpsb byte [rsi], byte [rdi]
invalid
leave
add dword [rcx], edi
invalid
xchg esi, eax
fidivr word [r13 + 0x30562c1e]
in eax, dx
xor al, 0x84
pop rbp
jrcxz 0x1400a0a62
test byte [rbp - 0x1d], bl
cld
movabs al, byte [0x3e1dda3349f92e24]
invalid
sbb eax, 0x63071e3e
sti
invalid
xchg ebx, eax
invalid
loopne 0x1400a0b12
invalid
cmp esp, dword [rdi - 0x3c]
mov esi, 0xffb83d79
stosd dword [rdi], eax
invalid
invalid
jnp 0x1400a0add
std
in al, dx
pop rdi
jae 0x1400a0adb
adc qword [r14], rsp
sbb bl, byte [rsi]
in al, 0x8c
mov esp, 0xfda3deb6
cld
int 0x83
sbb dword [rbx], 0x6c
and eax, dword [rsi + 0x29328400]
leave
invalid
invalid
jg 0x1400a0b26
mov dh, 0xde
movabs dword [0x236c1b83cdf2fcfd], eax
xchg byte [rax], al
test byte [rdx], dh
sub ecx, ecx
sbb dword [rbx], 0x6c
and eax, dword [rsi + 0x29328400]
leave
invalid
push rcx
invalid
ret
xlatb
invalid
test byte [0x12628446e], bl
xchg edi, eax
std
std
je 0x1400a0afa
invalid
cmpsd dword [rsi], dword [rdi]
and edx, dword [rsi + 0x49]
xchg esi, eax
jbe 0x1400a0b03
sbb al, 0xa4
jnp 0x1400a0aa3
test dword [rdi], esp
mov ebx, 0x9855e865
invalid
push rbp
cwde
lodsd eax, dword [rsi]
xor edi, edi
or al, byte [rbx - 0xbbc5686]
stosb byte [rdi], al
sahf
sal dword [rdx - 0x2f], cl
int 0x44
rcl dword [rsi]
dec dword [rdx]
cmp dword [rdx - 0x57], 0x43
hlt
xlatb
sbb eax, 0x6f05f72a
add dword [rsi - 0x61ae06fa], ecx
push rcx
sahf
ret
mov cl, 0x58
add eax, 0xadf410c9
or ebx, 0xffffffeb
loopne 0x1400a0b1d
cmp al, 0xfc
jg 0x1400a0b53
invalid
mov eax, 0x8b6f99a7
cld
mov bh, dh
cdq
movabs eax, dword [0xa1b15def8aed2170]
invalid
mov dl, 0x72
invalid
jo 0x1400a0b03
leave
jle 0x1400a0b40
invalid
rol ebx, 0x6d
invalid
ret
sub dword [rcx - 0x75], esi
fcmovnu st(0), st(3)
xchg edi, eax
insd dword [rdi], dx
cld
cld
loopne 0x1400a0b22
mov ebp, esp
xchg edx, eax
xchg rsi, rax
ud0
pop rax
jb 0x1400a0b7a
and dword [rdx - 0x14e9c80d], ecx
or byte [rdi - 0x752974bb], bl
fsub st(1)
jno 0x1400a0bd7
fadd st(1), st(0)
fadd st(1), st(0)
cmp eax, 0x7d453963
jbe 0x1400a0c22
test byte [rcx], dl
pop rcx
retf
fild word [rdx + rcx*2 - 0x61]
or al, 0x7e
or al, 0x7e
cdq
fdivr dword [rdi + 0x33]
sbb r11b, byte [r9]
mov ah, 0xa
ja 0x1400a0c4f
invalid
push 0xffffffffffffffaa
stosb byte [rdi], al
lahf
int 0x6b
mul r10
int 0x9f
sahf
js 0x1400a0c66
cmp eax, 0x2a2ac31b
jbe 0x1400a0c00
cli
invalid
invalid
cmp r13b, bpl
push rdi
mov cl, byte [rbx + 0x7cfe7216]
add eax, 0xffe4ffbd
call qword [rdi + rbx*4]
call qword [rdi + rbx*4]
scasd eax, dword [rdi]
invalid
std
invalid
mov dl, 0xa4
invalid
lahf
xchg ah, bh
in eax, dx
xchg byte [rsi], dh
lodsd eax, dword [rsi]
add ecx, dword [rsi + rdi*2 + 0x7c]
iretd
in eax, dx
mov dh, 0xf2
movabs dword [0xe2fff8890e2acd7f], eax
nop
and bl, byte [rbx + 0x379ed996]
xchg esi, eax
fstp dword [rsi + 0x50015337]
mov r11b, byte [rbp + 0x35]
int 0x2a
invalid
xchg esi, eax
fstp dword [rsi + 0x50015337]
mov r11b, byte [rbp + 0x35]
invalid
mov edi, 0xbd17338b
jle 0x1400a0c93
invalid
std
sbb dword [rdi], 0xe49e4b5a
xchg edi, eax
invalid
or eax, edi
invalid
popfq
movsb byte [rdi], byte [rsi]
push rbx
std
mov edx, dword [0x15d7a009b]
invalid
invalid
in eax, dx
xor al, 0xcb
jb 0x1400a0d43
sti
invalid
invalid
xor ecx, dword [0x1922ae8e1]
xchg byte [rcx - 0xb], bh
mov edi, dword [rdi - 0x4a]
stosb byte [rdi], al
rcr ebx, 1
adc eax, 0xe24ed38a
cmp esp, esp
sbb al, 0xdf
mov ebx, dword [rdi + 0x7d]
invalid
add al, 0xbe
invalid
std
mov al, byte [rdx - 0x7c]
sbb esi, esp
invalid
scasb al, byte [rdi]
mov esi, 0x6166e04b
cdq
invalid
sub eax, 0xebfe21db
and byte [rax], bl
cmp esi, ebx
nop
invalid
jmp 0x13becfb4d
cmc
in eax, dx
loop 0x1400a0d53
sti
int 0x8b
invalid
adc bl, al
xchg edi, ecx
and edx, dword [rax + 0x5a]
lahf
push rbp
push rsp
invalid
pushfq
fisttp qword [rcx]
jge 0x1400a0d45
movsb byte [rdi], byte [rsi]
enter 0x1a27, 0xffffffffffffffbe
invalid
stc
cmp al, ah
mov ah, 0x88
sbb al, 0x50
out dx, eax
sti
invalid
loop 0x1400a0dfa
jne 0x1400a0e11
or al, 0xfc
pop rdx
xor bh, ch
retf
mov dword [rcx - 0x55], esi
cmp al, byte [rsp + rdx]
retf
mov r9, qword [r13 + 0x7f]
mov ecx, esi
mov dl, al
in eax, dx
invalid
fdiv st(1)
pop rdi
invalid
or eax, 0xcb0bc3e6
notrack call rdi
mov al, byte [rsi - 0x1b]
and byte [rdx + 0x5d], ah
pop rbp
pop rbp
lodsb al, byte [rsi]
in eax, dx
rol byte [rbx - 0x24], 0xce
invalid
or ebp, dword [rdi]
lodsb al, byte [rsi]
or al, 0xb8
int1
xor ebx, dword [rdi - 0x1e5e74de]
test al, 0x18
invalid
push rcx
cmc
rcl dword [rax + rdi], 0x15
rol dword [rax], cl
invalid
fsubp st(1)
stc
or bh, cl
mov ebp, 0x3fcf9203
invalid
push rsp
and al, 0xf
jae 0x1400a0ebf
cld
leave
xchg ebp, eax
xor bl, byte [rdi + 0x3026ebae]
xor bh, cl
xor bh, cl
movsb byte [rdi], byte [rsi]
mov ecx, 0x2e16f01d
invalid
jp 0x1400a0ed2
mov eax, 0x122dab9e
invalid
stosb byte [rdi], al
invalid
adc esi, dword [rdi + 0x3324f143]
push rax
fmul dword [rcx]
jb 0x1400a0f14
cmp eax, dword [rsi - 0x66cd2c74]
and eax, 0x64e62489
invalid
invalid
out dx, al
mov bl, 0x91
pop rbx
fcom qword [rcx + 0x41]
xor byte [rdx], r14b
int3
ror byte [rsi], 0xcc
fld xword [rbx - 0x57]
xchg edx, eax
adc ah, byte [rax + 0x34806180]
jnp 0x1400a0f63
outsd dx, dword [rsi]
sub al, 0xfe
jg 0x1400a0f22
invalid
sar byte [rbx - 0x26], 1
add dword [rcx + rax*4 + 0x74eff9f2], 0x1a
xor al, byte [rcx + 0x49]
push rcx
push rbx
invalid
lahf
sub byte [rsi + 0x2f9efef2], ch
invalid
lea esp, [rbp - 0x569a1022]
invalid
invalid
lea esp, [rdi - 0x164dcd33]
mov bl, cl
hlt
invalid
jnp case.0x140002106.85
lahf
jbe 0x1400a0f11
sti
invalid
out dx, eax
leave
sbb dword [rsi + 0x76], ebp
movsb byte [rdi], byte [rsi]
invalid
invalid
shl byte [rdx - 0x5e03e3d7], 1
scasd eax, dword [rdi]
xor al, 0xe5
iretd
add r11, qword [r10 + 0x61554cb3]
invalid
test byte [rsi - 0x65], bl
invalid
cmp ebp, dword [rsp + rbx*2]
invalid
sub eax, ecx
xchg ecx, eax
or byte [rbp - 0x7f], al
invalid
in eax, dx
pop rcx
mov ebx, 0xd2a99b0c
jo 0x1400a0f63
mov dl, 0xf7
invalid
sti
or eax, 0x7623a7d4
invalid
pushfq
wait
invalid
lahf
invalid
jb 0x1400a1001
jg 0x1400a1006
movsq qword [rdi], qword [rsi]
retf
movabs eax, dword [0x8217afedfc7816ed]
jnp 0x1400a0fc8
in eax, dx
invalid
js 0x1400a1019
in eax, dx
scasd eax, dword [rdi]
invalid
jl 0x1400a101b
neg dword [0x11aab32da]
fnclex
popfq
sahf
sti
je 0x1400a105d
fdiv qword [rbx + 0x1c]
jmp fcn.1400a1099
mov esi, 0xabeeac68
stosd dword [rdi], eax
std
clc
invalid
mov ebx, 0x7d698d77
movabs byte [0x652144a41adaf460], al
clc
cmc
movabs eax, dword [0x7de3919a70f06079]
insb byte [rdi], dx
je 0x1400a1042
cmpsb byte [rsi], byte [rdi]
push rbx
add edx, edx
invalid
sar byte [rdi + rdx*4 + 0x7c], cl
scasb al, byte [rdi]
pop rcx
xchg edx, eax
adc edi, esi
invalid
ja 0x1400a10e8
int 0x1c
lahf
push rax
out 0x37, eax
retf 0x48e4
invalid
add byte [rbx - 0x4d347cfe], ch
sbb al, 0xde
hlt
jnp 0x1400a110b
call rbx
sbb dword [rcx], 0x6a
outsb dx, byte [rsi]
cli
rol dword [rbx - 0x59195e7], cl
invalid
invalid
mov edi, 0xec741f97
stc
jae 0x1400a10bc
call qword [rsi]
or al, 0xfc
push rax
sub dword [rbp + 0x4915e7db], esi
movabs dword [0x110f0cdd34ac60b2], eax
or al, 0xf
invalid
or al, 0xf
adc dword [rax - 0x7e], edi
xor edi, dword [rdi + 0x709a76ee]
jnp 0x1400a1199
mov al, 1
mov ebx, ebx
sbb esi, ebp
jle 0x1400a11b6
mov dh, 0x48
adc dl, byte [rax]
popfq
rcr esi, cl
sbb eax, 0xf44d4545
sahf
push rbx
mov fs, edx
out dx, eax
out 0x18, al
and bl, byte [rbp + 7]
hlt
jns 0x1400a11f4
out dx, eax
invalid
js 0x1400a11cd
pop rbp
pop rax
invalid
sbb dh, byte [rcx + rdi - 0x6c]
outsd dx, dword [rsi]
lea ebp, [rdi + 0x2065e6b8]
and byte [rdi + 0x2b], dh
and byte [rdi + 0x2b], dh
in al, dx
sub al, 0x15
invalid
push rdx
xchg ebp, eax
call 0x15d433d7a
invalid
invalid
invalid
cmp dword [0xec4f413f], ebx
jns 0x1400a1186
cli
je 0x1400a1163
pop rdi
movsb byte [rdi], byte [rsi]
sub ebx, ebp
jmp 0x1400a11a8
jmp 0x1400a11a8
fstp qword [rdi + 0x200c61f1]
int1
invalid
mov al, 0x99
sub ebx, dword [rdx - 0x1a4287ab]
push rdi
lea ecx, [rcx + 0x5d]
sbb eax, 0xc7dded4a
in eax, dx
ffree st(7)
in eax, dx
ffree st(7)
jmp 0x1400a1227
xchg ebx, eax
push 0xfffffffffffffff5
scasd eax, dword [rdi]
jbe 0x1400a1256
cmp eax, 0xede95e2
mov ah, 0x77
invalid
invalid
fldenv [rdi + rbp*4 - 0x68115add]
mov esp, 0x7dc4d64e
mov ch, byte [rsi - 3]
mov edx, 0x4ca8931d
xchg ebx, eax
test al, 0x4c
xchg ebx, eax
test al, 0x4c
movabs eax, dword [0xbb090d0d9ac02078]
invalid
push rcx
adc byte [rsi + 0x7fd4c275], dh
fmul dword [rdx]
mov edi, 0x9f36bc3f
or bh, byte [rdi - 0x60c943c1]
stc
out dx, al
xchg bh, dh
invalid
cmp dword [rax - 0x4eb6e787], esp
add dh, byte [rcx - 0xb]
mov bl, 0xc
pop rsi
ja 0x1400a127e
add ecx, dword [rbp - 0x1f]
lahf
test eax, 0xffefcf8a
out dx, eax
invalid
out dx, eax
call qword [rdi - 0xf91802b]
jnp 0x1400a12f9
xchg edi, eax
invalid
xchg ecx, eax
push 0xffffffffffffffcf
wait
invalid
mov ebx, 0xb3dc8f2b
invalid
invalid