Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
out dx, eax
in eax, 0xab
invalid
test eax, 0x8ba47d84
mov cl, byte [rbp - 0x4ffd8c10]
mov ch, 0x7e
out dx, eax
invalid
call 0x13f24e6ba
hlt
cld
xchg byte [rdi - 0x68f88e03], dl
mov dh, 0xd5
mov esi, r15d
mov eax, 0x7fe1bcf9
inc byte [rax + rdi*4 - 7]
mov esp, 0xcbfd7fe1
invalid
loope 0x1400a08f4
std
retf
xchg dword [rdi], ecx
invalid
test eax, 0xa116fff3
movabs al, byte [0x3b97fb1613c5cbce]
adc eax, 0x16df4047
mov ch, 0xc7
jle 0x1400a091a
loope 0x1400a086e
std
in eax, dx
invalid
invalid
div ebp
cmc
je 0x1400a0918
pop rcx
invalid
cmp eax, 0x5b98d8ae
movsd dword [rdi], dword [rsi]
stosb byte [rdi], al
and ch, byte [rax]
xchg ebp, eax
loopne 0x1400a089b
cli
jle 0x1400a08b3
dec dword [rbp + 0xce7d4bf]
movabs byte [0xfe21251eb4f3eba2], al
invalid
or al, 0xa2
movabs byte [0xc5fe21251eb4f3eb], al
loopne 0x1400a0873
cld
sbb dword [rbx], edi
fscale
std
std
cli
movabs dword [0x2aaf29b1223a8ab4], eax
cmp eax, 0x5a99d5db
sub bh, byte [0x19aa3ded5]
mov bh, 0xe2
lodsb al, byte [rsi]
loope 0x1400a08a5
add ebx, dword [rbx]
xor esi, dword [rsi - 0x4f]
sbb esi, dword [rbx]
jbe 0x1400a08b5
mov ebp, 0x8a039708
invalid
movabs byte [0x86bbf57bbfb9cbf2], al
invalid
xchg byte [rdi], ah
sub ebp, dword [rbp + 0x597a5ced]
loope 0x1400a0922
mov fs, word [rdi - 0x3cb8a04]
invalid
insb byte [rdi], dx
cmp al, 0x22
xchg ecx, eax
and dword [rsi + rdi*2 + 0x69], ebx
cmp ebp, dword [rax]
xchg dword [rbx - 0xa9ebc8b], ebx
invalid
invalid
cmc
or ah, ah
shl dword [r15], 1
add al, 0xec
fstp qword [rax]
push rdx
and eax, 0x7affef
invalid
mov dh, bh
jl 0x1400a0954
mov bl, 0xe3
pushfq
imul edi, dword [rdx - 0xa], 0x29
clc
jp 0x1400a094c
sub eax, edi
int3
rol byte [rsi - 0x21], 1
or bh, ch
adc al, 0xd3
invalid
iretd
iretd
dec byte [rbx + 0x6822d6b5]
add esi, dword [rdx]
sbb ebx, dword [rax]
jmp 0x1400a09c5
pop rax
dec dword [rdx + rax*4 - 8]
pop rdi
mov bl, byte [rax]
invalid
invalid
out 0x4c, eax
xchg ecx, eax
adc eax, 0xab23d7b3
out 0x2a, eax
adc dword [rdi - 0x5b], edx
movsd dword [rdi], dword [rsi]
xor esi, edi
mov eax, 0xfbfe9bfd
mov edx, 0x20d91852
fldenv [rax]
xchg ecx, eax
mov eax, edi
scasb al, byte [rdi]
and eax, 0xf78b73c9
sti
mov cl, byte [rax + 0x24]
invalid
iretd
jp 0x1400a09e7
out dx, eax
mov al, byte [0x10c82f2a4]
or byte [rdi], ah
adc al, 0xdb
pushfq
jns 0x1400a0a80
js 0x1400a0a99
invalid
xlatb
jge 0x1400a09dc
invalid
in al, dx
or esi, dword [rsi + 0x39f58a56]
test al, 0x30
and al, 0xa9
invalid
sub bl, byte [rdi + rbp*4 - 0x38]
out dx, eax
and esi, edx
mov edi, 0x9a8497a1
jnp 0x1400a0a0b
in al, 0x98
cmp dword [rdi + 0x76], ecx
sbb dword [r9 - 0x14], r14d
sbb dword [rcx - 0x14], esi
sbb dword [rcx - 0x14], esi
jmp 0x1400a0ad4
adc eax, 0x76013d3
adc esp, dword [rax + 7]
push rsi
invalid
in eax, 0xaa
stosb byte [rdi], al
pop rdi
inc ebp
test byte [rcx + 0x45], r11b
invalid
mov esi, 0x8d65dbf6
add eax, 0x7bcfce08
push rbx
jne 0x1400a0ad7
mov ebp, dword [rax]
mov ch, byte [rdx]
pop rdi
test eax, 0x40182b07
invalid
fld qword [rdi]
cmc
in al, 0xad
stc
adc qword [rdx + 0xe10cd2f], 0xffffffff8bbd1940
sbb dword [rbp + 0x2897a78b], edi
int1
sbb dword [rbp + 0x2897a78b], edi
int1
mov esi, 0xc7d92f99
invalid
mov bl, byte [rdi - 0x50]
int1
cmp byte [rax], r9b
xchg edi, esp
retf 0xfd14
cmp bl, ah
invalid
out 0x75, eax
stc
popfq
cmp eax, 0x2a04f5af
cmc
xor al, 0x7f
stosd dword [rdi], eax
mov rsp, qword [r13 + 0x736a36dc]
mov esp, dword [rbp + 0x736a36dc]
mov esp, dword [rbp + 0x736a36dc]
invalid
add al, 0x64
and al, 0x1c
xor dword [rcx + 0x2b7016dd], edi
movsb byte [rdi], byte [rsi]
jae 0x1400a0b8b
invalid
invalid
movabs al, byte [0xbe38fea72707aeab]
jmp 0x1400a0bc4
in al, dx
out 0x47, al
cmpsd dword [rsi], dword [rdi]
invalid
invalid
sbb edi, eax
invalid
out dx, eax
jb 0x1400a0bdb
sbb eax, 0xa16f7801
mov esi, eax
jp 0x1400a0c19
invalid
sti
mov esp, dword [rdi - 0x63899b31]
cdq
push 0x14ae1f6b
mov edi, 0xa17bf0c1
invalid
jnp 0x1400a0b88
xchg edi, eax
pop rcx
sbb bh, bh
pop rsi
movabs eax, dword [0x1c05fd3d07af91df]
jrcxz 0x1400a0bf1
invalid
cmp eax, 0xf31c05fd
jrcxz 0x1400a0bf1
mov bh, 0x86
ret
xchg byte [rcx - 0x23], al
jg 0x1400a0c1a
invalid
pop rdx
lea edi, [rcx - 0x15eb1643]
fist dword [rsi + 0x32]
xchg ah, bh
cld
and dl, al
xor bl, byte [rsi + 0x76]
jbe 0x1400a0bdc
mov esp, 0x3711be1e
jbe 0x1400a0bdc
mov esp, 0x3711be1e
invalid
xchg ebx, eax
or al, 0x5f
jns 0x1400a0cba
movsd dword [rdi], dword [rsi]
invalid
mov esp, edi
jbe 0x1400a0ca9
invalid
scasb al, byte [rdi]
invalid
mov bh, 0xdf
sub dh, al
push rbp
add eax, 0x4d69748
invalid
add al, 0x40
mov dl, 0xea
xor dword [0x166ead086], edi
cmp eax, 0x26e0c3ff
xchg rdi, rax
invalid
cmp eax, 0x26e0c3ff
xchg esp, eax
loop 0x1400a0c7a
out dx, al
mov ebx, 0x22c11397
out dx, al
adc eax, ecx
and ch, dh
stosd dword [rdi], eax
invalid
scasd eax, dword [rdi]
invalid
invalid
xor bh, ch
fiadd dword [rsi + 0x43]
sub r11b, byte [rcx - 0x3b6ed22b]
rcl dword [rcx + 0x46], 0xfa
out dx, eax
je 0x1400a0c8b
mov bh, 0xfd
std
in eax, dx
invalid
rol byte [rdx + 0x5e9e5d65], 1
mov edi, 0xb7f30ee0
sbb dl, byte [rdi + 0x17]
stc
cli
loope 0x1400a0cd3
jnp 0x1400a0c8d
and al, 0xa5
xchg byte [rdi], bl
sti
invalid
invalid
mov ebx, 0xe538230f
cmp ch, ah
jge 0x1400a0d58
pop rdx
in al, dx
xlatb
invalid
xor al, 0x5b
pop rbx
adc dl, byte [rcx - 0x7c50dbb0]
or al, 0xf8
and al, 0xaf
or dword [rcx + 0x47], 0xc
clc
xchg bh, bh
retf
invalid
stosd dword [rdi], eax
jmp [rbx]
cli
push rbx
adc bh, bl
sal byte [rcx + 0x23], 0xb
lahf
fld qword [rcx + 0x68]
insd dword [rdi], dx
and dword [rcx + rsi*2 + 0x1d], 0x78665ce2
adc al, 0x4b
pop rax
pop rax
pop rax
or esi, dword [rdi + riz*8 - 0x5e88d812]
mov ecx, 0x250ac7d0
xchg edi, eax
jb 0x1400a0d29
cmp al, byte [rdi - 0x17cddfce]
pop rbx
movabs eax, dword [0xe6ba5d2fdbeb7424]
mov dh, 0x93
xlatb
cdq
jnp 0x1400a0d17
xlatb
jne 0x1400a0d2d
mov esp, 0x46d80550
mov ebx, 0xd65f39ff
add eax, 0xffbb46d8
cmp dword [rdi - 0x2a], ebx
movabs eax, dword [0xf3743ff21b960ad]
invalid
adc dword [rdx + 0x76], ebx
mov ebx, 0x76e4fbdb
insb byte [rdi], dx
jnp 0x1400a0d56
and dword [rcx + rcx*8 + 0x3e1a083e], ebx
adc eax, 0xb772fcff
jb 0x1400a0ded
invalid
loope 0x1400a0e30
vpcmpgtb xmm7, xmm3, xmmword [rcx]
adc edi, dword [rdi - 0x38d36bd1]
invalid
insd dword [rdi], dx
cld
mov ah, 0xfc
cdq
invalid
invalid
test eax, 0xb28d4a91
jle 0x1400a0d9d
lea esi, [rdx - 0x3a715682]
mov es, ebp
test dword [rcx - 0x42715d6e], esp
ffree st(3)
mov esp, 0x6c6679fe
loopne 0x1400a0e24
invalid
invalid
xchg ecx, eax
or al, 0x4c
scasb al, byte [rdi]
imul esi, dword [rcx + rbp*4], 0xe2e8cb1e
mov cl, 0xc7
add edi, r13d
out dx, eax
invalid
cmc
in eax, dx
cmp al, 0xc8
out dx, al
invalid
sub byte [rbx + 0x515145d0], ah
rol byte [rbp + 0x51], 1
push rcx
sub al, 0x5b
jbe 0x1400a0dc9
xchg ecx, eax
cmp dword [rbx], 0x47
insd dword [rdi], dx
invalid
mov dh, dl
invalid
ret 0x31dd
lahf
int 0x63
or byte [rdx + 0x58], bl
push 0xffffffffb04fdd63
sub al, 0x3d
add ah, byte [rcx - 2]
mov al, byte [rbx - 0x181cd345]
in eax, 0xa9
test eax, 0x7efdc6b4
scasd eax, dword [rdi]
test eax, 0x7efdc6b4
scasd eax, dword [rdi]
call rdi
js 0x1400a0ebd
jb 0x1400a0e37
mov dh, 0xe4
sbb eax, 0xdd7af044
invalid
jp 0x1400a0e68
jne 0x1400a0f09
invalid
imul edi, dword [rcx + 0x1adb433], 0x9ce03677
fdiv st(1), st(0)
invalid
popfq
stosd dword [rdi], eax
mov edx, dword [0x15db587d5]
ret 0x9565
cmpsb byte [rsi], byte [rdi]
push 0xffffffffffffffc9
pop r14
add byte [rcx - 0x7b], ch
add al, 0xfc
invalid
xchg edi, eax
invalid
jp 0x1400a0e60
int 0xb9
outsb dx, byte [rsi]
lahf
invalid
fdivr qword [0x13ad14f98]
div dword [rcx + 0x67]
mov bh, 0x37
jg 0x1400a0efd
invalid
lodsb al, byte [rsi]
xor byte [rax + 0x3b], bl
mov eax, 0x3d50cacf
cmp eax, 0x6076f9ec
cmp eax, 0x6076f9ec
test al, 0x31
cmp ah, byte [0xc7786018]
adc dh, 0x34
invalid
fsub qword [r8 - 0x73b180da]
int1
jg 0x1400a0f55
invalid
dec dword [rsi]
std
test dword [rsi + 0x3a7673ed], 0xd13c8a36
invalid
std
cqo
je 0x1400a0edc
invalid
invalid
jbe 0x1400a0fa1
jp case.0x140002106.83
lodsd eax, dword [rsi]
stosb byte [rdi], al
shr byte [rax + 0x3f00ddd7], 1
xlatb
fld qword [rax]
invalid
insd dword [rdi], dx
cmpsb byte [rsi], byte [rdi]
inc bh
cmp eax, 0xeb84ac40
pushfq
stosb byte [rdi], al
pushfq
invalid
xlatb
fld qword [rax]
invalid
scasb al, byte [rdi]
fcompi st(3)
mov ch, byte [rbp - 0xb]
sar dword [rbp + 0x51], 1
push rcx
push rcx
mov edi, 0x7ca01eba
test eax, 0x5996af2f
add dword [rdx - 0x21], ebp
add dword [rsi + 0x50], ebp
jbe 0x1400a0f66
invalid
in eax, 4
add al, byte [rdi + 0x60]
invalid
add al, 2
invalid
invalid
jg 0x1400a0fe8
invalid
invalid
xchg dword [rdi - 0x64], esi
mov esp, 0xdf4f26de
adc bl, byte [rsi + 0x4e]
fist word [rsi]
invalid
ror cl, cl
mov dh, 0x58
outsd dx, dword [rsi]
in eax, 0xb9
adc eax, 0x4d14fbaf
push rax
add dword [rcx], ecx
movsd dword [rdi], dword [rsi]
xor dword [rax + rdi + 0x14d544a1], esp
retf 0x5818
or dword [rbp - 0x46], ecx
xchg dword [edi - 0x23], edx
invalid
xchg byte [rax - 0x65de9326], dl
sub dword [rsi], esp
fcom dword [rdx]
mov eax, 0x4d137b45
clc
enter 0xffffffffffffbe2f, 0
pop rsp
in eax, dx
cmp esp, edi
xor cl, byte [rdi]
invalid
jne 0x1400a1055
or eax, 0x1b6cedf8
xchg bh, bl
movabs eax, dword [0x7a5049418b54862b]
invalid
adc dword [rcx - 0x16], edx
xchg ecx, eax
jnp 0x1400a10e3
in eax, dx
hlt
jnp 0x1400a1108
sbb cl, cl
adc byte [r14 + 0x27], r11b
adc al, 0xb4
invalid
xor al, 0x95
nop
invalid
sub rax, 0xffffffffb5034ef2
std
invalid
pop rcx
jne 0x1400a10c4
or ch, byte [rbx]
rcr dword [rcx], 0xb4
fmul dword [rax]
idiv esp
sbb al, 0xea
pop rdx
xchg byte [r10], r12b
int1
imul ebp, dword [rsi - 0x6e8ed290], 0xffffffed
in eax, dx
in eax, dx
and dword gs:[rdi - 0x3edeeca4], esi
add al, 0x5b
invalid
jnp 0x1400a11c1
cli
mov al, 2
or dl, dh
sub ah, ah
invalid
and eax, 0xe0912b45
xchg rdi, rax
fnstsw word [rbx]
invalid
invalid
in eax, 0xb
jb case.0x140002106.115
invalid
mov byte [rcx], ah
or al, 0xdd
invalid
out dx, al
jp 0x1400a11b5
jbe 0x1400a1204
invalid
retf 0x94a3
retf 0xa50f
jmp 0x1400a120c
out 0x5b, al
xor dword [rsi + 0x2c], ebp
imul dword [rax - 0x6ca034]
call qword [rsi]
call qword [rsi]
push rbp
and al, 0x8b
sub edi, dword [rsi - 0x20]
cmc
mov al, 0x4d
cld
jne 0x1400a11ad
movabs byte [0xd3d8e669b7e27ae0], al
lodsb al, byte [rsi]
xor ch, ch
jp 0x1400a11e6
mov bh, 0x69
out 0xd8, al
shr dword [rdx + rsi - 0x74db8413], cl
cld
jnp 0x1400a1232
mov edi, esp
insb byte [rdi], dx
movsd dword [rdi], dword [rsi]
mov dh, 0xcd
xor al, 0x1f
out dx, al
invalid
push rdx
pop rax
jge 0x1400a11da
invalid
hlt
invalid
pushfq
test eax, 0xcdc86e29
pop rdx
pop rdx
xchg esi, eax
or byte [rax - 0x32f53d82], dh
mov edi, 0x79e2de29
loop 0x1400a12db
fld xword [r13 - 0x560786d8]
xor byte [rdx], dl
shr byte [rbx + rbp + 0x641e0b11], cl
invalid
jns 0x1400a1260
test eax, 0xacd21230
sub edx, dword [rcx]
or ebx, dword [rsi]
invalid
push 0x680f34d
pop rdx
xchg edi, eax
in eax, 0xec
adc al, 0xcb
xchg rbp, rax
invalid
or al, 0xfe
not dword [rdi - 0x76505e7]
invalid
clc
jg 0x1400a12e4
retf
jrcxz 0x1400a12ac
sub eax, 0xa4443210
push rdi
and al, 0xae
scasb al, byte [rdi]
push rsi
and edi, dword [rsp + rdi]
xchg byte [rax + 0x2cdeff4e], cl
push rdi
add al, 0xca
invalid
invalid
cmp al, 0x86
mov byte [rsi - 1], cl
fisubr word [rdi + rdi*8]
test dword [rdx + rcx*8], 0x1783cd07
retf 0xcd07
adc dword [rdi], 0xffffff90
push rax
jnp 0x1400a1276
mov edi, 0xf0000002
jp 0x1400a12ed
adc eax, dword [rsi - 0x2c]
loop 0x1400a1318
invalid
movsq qword [rdi], qword [rsi]
enter 0x2c06, 0xb
mov edi, 0xbfdf5481
invalid
fistp qword [rdi - 0x292f45e9]
push rcx
popfq
invalid
lea esp, [rbp - 0x73c368cb]
invalid