Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
neg dword [ebx + 0x182de34d]
xlatb
sub byte [rax - 0x2a], cl
invalid
jle 0x1400a077b
mov edx, 0x9a4d4efe
mov esp, 0x7b7ffd7e
test al, 0xbc
mov ah, ah
hlt
invalid
fdivr dword [rdx + 0x7a]
jge 0x1400a0869
insb byte [rdi], dx
jb 0x1400a07d4
je 0x1400a07f5
mov edi, 0xaf15d6ab
pop rbx
cmp bh, bh
pop rbp
test dword [rbx + 0x6ca19e56], 0x523f37b
insb byte [rdi], dx
or eax, 0x8fba32a6
mov dh, 0xe5
invalid
retf
invalid
test rax, 0xffffffffa248a653
invalid
loope 0x1400a0824
jg 0x1400a0833
pop rbp
pop rbp
add cl, al
sub dword [rbx], edx
shl dword [rbx], 0xec
invalid
outsd dx, dword [rsi]
mov r8b, 0xae
jo 0x1400a083f
jmp 0x1400a0854
call rax
jge 0x1400a07f6
fnstcw word [rax - 0x1da39a]
mov edi, esp
repz ret
add al, 0xab
sar ch, 1
jb 0x1400a0883
invalid
pop rbp
invalid
nop
stosd dword [rdi], eax
cmpsd dword [rsi], dword [rdi]
sbb dword [0x11a7d03c3], esi
invalid
push 0xffffffffffffff97
xchg dword [rbp - 0x82f4edc], ecx
lea esp, [rcx + rsi*4]
sal bh, 1
lea esp, [rcx + rsi*4]
sal bh, 1
invalid
fisttp word ss:[rdi]
push rbx
out dx, ax
shl byte [rcx + 0xe0ae89c], 0x3a
clc
rcr byte [rax], 1
hlt
mov ebx, 0x662b246b
push 0xffffffffffffff85
xlatb
mov cl, 0xa
add byte [rax], al
insb byte [rdi], dx
hlt
fisttp dword [rbp + 0x6d5569d1]
jrcxz 0x1400a08dc
fld qword [rcx - 2]
fisttp dword [rsi + rdx]
jae 0x1400a0915
invalid
stosb byte [rdi], al
invalid
sal al, 1
jnp 0x1400a0939
cmp ah, byte [rbp - 1]
invalid
invalid
invalid
xchg edi, eax
shr byte [rax + 0x2bdaf71c], cl
fisubr dword [rbx]
jb 0x1400a0949
fistp qword [rdx - 0x14]
movabs eax, dword [0x8a7bf753c43536ba]
invalid
xor eax, 0x7bf753c4
mov dh, byte [rdi]
mov ch, 0x37
lodsd eax, dword [rsi]
invalid
imul esi, esi, 0xf
in al, 0xfe
out dx, al
xchg edi, eax
sbb al, 0x40
adc dh, byte [rsi + rbx*2]
xchg edi, eax
lodsd eax, dword [rsi]
sbb al, 0x7e
rol ebx, 0x8c
xchg esp, eax
push rdi
cmp byte [rbp + rdx - 0x54d58ad6], bh
invalid
invalid
nop
int 0x40
sar byte [r12 + r12 - 0x6b], 1
invalid
loop 0x1400a09e1
invalid
xchg ebp, eax
invalid
mov bh, 0x98
invalid
xchg dword [rbp + rdi*2 + 0xa], esp
mov r12b, 0x7f
jb 0x1400a091e
invalid
jrcxz 0x1400a0a07
xor ebp, dword [rdi]
invalid
push 0xffffffffa0effd7e
jne 0x1400a0a2a
jle 0x1400a09b9
out dx, eax
movabs al, byte [0x40d89c4780ea6a75]
idiv r13b
insd dword [rdi], dx
jmp 0x1400a0989
invalid
invalid
push rax
outsb dx, byte [rsi]
js 0x1400a0a13
sbb al, 0xe9
pop rcx
mov edi, 0x648a62cb
adc al, 0x74
adc al, 0x74
jg 0x1400a0a5a
call 0x15577ee75
invalid
adc esi, esi
scasb al, byte [rdi]
jg 0x1400a0a80
pop rbp
leave
mov ch, 0x9e
cmpsd dword [rsi], dword [rdi]
cmp dword [rcx - 0x38], 6
jg 0x1400a09bd
test eax, 0xd519e469
cmpsd dword [rsi], dword [rdi]
stosd dword [rdi], eax
imul esp, esp, 0xaba7d519
mov al, 0xbc
jle case.0x140002106.28
invalid
fsub qword [rsi - 0x4d]
mov edx, 0x33117357
xor esi, dword [rsi + 0x3c]
jae 0x1400a0a3d
xor esi, dword [rsi + 0x3c]
pop rsi
mov dl, 0x55
jbe 0x1400a0a70
movsb byte [rdi], byte [rsi]
ficom dword [rbp - 0x79c311f2]
xchg byte [rcx - 0x4176f0c5], ah
invalid
invalid
shl dword [rbx], cl
jns 0x11397ac01
and ebp, ebx
pop rdx
and eax, 0x31ec3d2d
pop rdi
leave
jmp 0x1400a0aa0
pop rsi
call 0x12e2668bc
pop rsi
pop rsi
sbb al, 0xee
mov bl, 0xf2
cdq
cmp dword [rsi + rdi*2], edx
loop 0x1400a0a77
invalid
test esi, ecx
std
std
std
invalid
movabs byte [0x40e0318a7bbfd4cc], al
invalid
xor eax, esp
invalid
sbb esp, dword [rsi + 0xc]
subps xmm5, xmmword [0x14b4bcd43]
or al, 0xf
pop rsp
sub eax, 0xb41c2b9
jg 0x1400a0a84
lodsd eax, dword [rsi]
jbe 0x1400a0aec
jg 0x1400a0ac9
movabs dword [0xb04ba78ee2e2705b], eax
loopne 0x1400a0ad2
jo 0x1400a0a77
loop 0x1400a0a25
cmpsd dword [rsi], dword [rdi]
mov r8b, 0xe0
sub bl, byte ss:[rax]
sub bl, byte [rax]
pop rbp
or eax, 0xb4d51cf8
xchg esp, eax
clc
sbb al, 0xd5
mov ah, 0x94
loopne 0x1400a0a93
cmp eax, 0x5dabffb8
invalid
xor bh, ah
jle 0x1400a0ac7
pop rbx
lea ebx, [rdi - 0x5d22e4c4]
fdivp st(3)
mov al, 0xfe
lahf
cld
je 0x1400a0ab4
jbe 0x1400a0b05
add byte [rbp - 0x230f2819], ch
xchg edi, eax
fdivr st(6)
outsb dx, byte ds:[rsi]
out 0xd7, eax
invalid
fcom qword [rdi + 0x6e3efed8]
jne 0x1400a0b3e
int1
cmp edi, esp
invalid
pop rdi
call [rbx + 0x15]
push rdi
cmp byte [rbx], dh
jno 0x1400a0ab7
add eax, 0xcc76386c
insb byte [rdi], dx
cmp byte [rsi - 0x34], dh
invalid
cmp bh, 0x6f
movabs byte [0xf65dbbf9273107ce], al
invalid
invalid
push rax
xchg esi, eax
mov r11d, 0xdd33740d
mov dword [rdi], edi
hlt
invalid
jmp 0x1400a0b55
xchg esi, eax
adc eax, dword [edi]
jl 0x1400a0b09
stosb byte [rdi], al
imul esp, dword [0x122c0416b], 0x5e1e217b
push rax
movabs al, byte [0xfc8b6c4a0931dc92]
xor dword [rcx], ecx
insb byte [rdi], dx
mov edi, esp
xor dword [rcx], ecx
insb byte [rdi], dx
or dword [rdx + 0x6c], ecx
mov edi, esp
mov bh, dh
mov edi, 0x778baa16
add r14b, r10b
invalid
xchg ebp, eax
cmp eax, 0x52beffeb
in al, dx
out 0xdf, eax
lodsb al, byte [rsi]
test al, 0x14
push rcx
ror dword [rcx], 0x31
sbb al, 0x56
imul eax, dword [rdx + 0x3cb1c265], 0x47745a28
ret 0x3cb1
sub byte [rdx + 0x74], bl
mul byte [r9 + 0x54]
invalid
ret 0x3cb1
adc esp, dword [rcx + rbp*2 - 0x17]
xor dh, al
mov dh, 0x7c
outsd dx, dword [rsi]
jp 0x1400a0bdd
mov edi, 0x3fd8ef49
push rbx
invalid
sti
out dx, eax
mov esi, dword [0xd92acb91]
test al, 0xee
outsb dx, byte [rsi]
invalid
cli
invalid
movsb byte [rdi], byte [rsi]
add byte [rdx], 0xe6
shr dword [rax - 0x23], 0x7f
pop rsp
push rdx
fcom qword [rax + 0x76a97b41]
xor dword [rdx - 0x6a], esi
fild word [rsi + rcx*4 + 0x3e]
movabs al, byte [0x3ef7dfb6d5acef8b]
idiv dword [rsi]
cli
ret 0x2c6
adc al, 0x46
xor eax, 0x993f7c8a
adc esp, edi
mov dl, 0x46
mov esi, 0xfe9e8316
invalid
scasd eax, dword [rdi]
add bl, bh
invalid
invalid
xchg ebx, eax
lahf
scasd eax, dword [rdi]
invalid
mov ebp, 0x6a6a387e
mov cl, 0x2f
add eax, 0x173effee
loopne 0x1400a0bbf
jo 0x1400a0beb
push rsp
cli
jge 0x1400a0bf7
outsd dx, dword [rsi]
and byte [rcx + 0x27], bl
invalid
add eax, 0xf77f3f7d
push rsp
invalid
fdiv st(5), st(0)
invalid
xchg ebx, eax
scasd eax, dword [rdi]
mov edi, edi
mov r9b, byte [rbx + 0x32]
popfq
pop rsi
xor al, 0x95
cmp byte [rdx - 0x33], ch
js 0x1400a0c88
cmc
fdiv st(6), st(0)
push rax
out 0x1f, al
or byte [rdi + rbx*4 + 0x1b], 0x55
lodsb al, byte [rsi]
pop rdx
invalid
push rbx
invalid
xlatb
invalid
out 0x76, al
rol byte [rdx], 1
ja 0x1400a0d0d
pop rdx
out 0x9d, al
sbb eax, 0xcef0f727
hlt
mov ecx, 0x10c8ead
invalid
sahf
fadd st(7), st(0)
add byte [r15 + 0x447725b8], r10b
invalid
ja 0x1400a0d07
invalid
and eax, 0x29604477
invalid
dec byte [rbx - 0x6cf86a5f]
xor al, 0x39
jle 0x1400a0cb9
xor ch, bl
hlt
invalid
sub al, 0x8a
invalid
sbb dword [rbx - 0x589ad64], esi
mov bl, 0x9c
push rdx
jbe 0x1400a0d01
retf 0x3c34
in eax, dx
invalid
add dword [rcx + riz*4 - 0x344f2608], 0x80f86a3b
jno 0x1400a0cce
invalid
invalid
test byte [rdx + 0xa], bl
mov r13b, byte [r11 - 0x778cc3ca]
std
clc
stc
add byte [rdi], 0xeb
push rbx
push 0x15
ja 0x1400a0d6e
pop qword [rsi - 0x29]
xlatb
imul ebx, dword [rax + 0x2ad267f0], 0x8b8f8f4
cli
mov ecx, ecx
leave
mov dh, byte [rdx + rdx*2]
fbstp tbyte [rsi - 3]
mov esp, 0xdddd2ba0
sbb dword [rcx - 0x4f], 0x367aef9f
mov cl, 0x9f
out dx, eax
jp 0x1400a0dab
mov ebp, dword [0x189ec41aa]
insd dword [rdi], dx
invalid
hlt
adc ecx, dword [rdx]
invalid
jnp 0x1400a0d62
jbe 0x1400a0df1
cmp dh, bh
pop rsp
out 0xa2, eax
invalid
adc ah, byte [rdi - 0x51eed3f7]
cmpsd dword [rsi], dword [rdi]
or dword [rcx + rdx], ebp
scasb al, byte [rdi]
push rax
cld
invalid
sal byte [rdi + 0x74], cl
ja 0x1400a0e67
movsd dword [rdi], dword [rsi]
invalid
and eax, 0x2d891c77
in al, 0xeb
jp 0x1400a0e7c
lodsd eax, dword [rsi]
or eax, 0x34e285f3
or esi, dword [rax + 0x7c]
test eax, 0xe758378d
rep movsb byte [rdi], byte [rsi]
cmp esp, dword [rcx - 0x46681561]
invalid
lahf
invalid
xchg edi, eax
invalid
jle 0x1400a0e30
movabs eax, dword [0xeb2c097eb997ea9f]
sub al, 0xeb
outsb dx, byte [rsi]
jne 0x1400a0e3d
cmp ebp, ebx
mov edx, 0x5d90c736
fadd dword [rdx]
out dx, al
and edi, dword [rbp + rdi*2 + 0x47d2c29f]
jge 0x1400a0dd9
ret 0x47d2
invalid
jge 0x1400a0dd9
ret 0x47d2
invalid
lodsd eax, dword [rsi]
pop rdi
and edi, 0xe702f6b9
popfq
jl 0x1400a0e73
invalid
mov r12b, 0x3c
lodsb al, byte [rsi]
lea eax, [rdi]
imul ebx, dword [rsi - 0x1c6c889d], 0xf8874546
jrcxz 0x1400a0eaf
xchg r8d, r15d
lodsd eax, dword [rsi]
hlt
push rbx
out dx, eax
jge 0x1400a0eef
invalid
cmpsb byte [rsi], byte [rdi]
sbb esi, dword [rax + 0x2e]
retf 0x6f08
or eax, 0x8b6de4b9
cmpsd dword [rsi], dword [rdi]
push rdx
xchg edi, eax
lahf
xor edx, dword [rcx + 0x6f]
invalid
ret
adc esi, dword [rdi + 0x7bd78ede]
cli
mov bh, 0xde
mov ss, edi
jnp 0x1400a0eab
sub al, 0x6f
in eax, dx
ja 0x1400a0f27
pop rsi
cmpsb byte [rsi], byte [rdi]
cmp dword [rsi + rbx], edi
cmp ecx, dword [rdi + rbx*4]
push qword [rsi + 0x31]
xor eax, esi
xor eax, esi
out dx, al
mov ebx, 0xf0f5dbff
out dx, al
stosd dword [rdi], eax
invalid
out 0x37, al
invalid
mov bh, 0x28
and ebx, esp
sub bh, al
sal esi, cl
in al, 0x57
invalid
clc
jbe 0x1400a0f03
inc dword [rbx]
test byte [rdx - 0x7bc1fb5e], dh
add eax, dword [rdx + rsi*4 - 0x7bc1fb5e]
int3
ja 0x1400a0f62
outsb dx, byte [rsi]
fistp qword [r13 - 0x5d5c3a]
mov edi, 0xca000a8a
lodsb al, byte [rsi]
out dx, al
sal byte [rbp - 0x29], 1
js 0x1400a0f01
or al, byte [rax]
retf 0xeeac
insd dword [rdi], dx
invalid
invalid
xchg esi, eax
invalid
sbb byte [rsi + rax - 0x6b], ah
sub dword [rbx - 0x41203e25], esp
invalid
and al, 0x18
sti
outsd dx, dword [rsi]
invalid
lahf
invalid
add eax, 0x505da9a6
cwde
push r13
cmc
and byte [rdi], cl
or esp, dword [rsi + 0x173f3a02]
std
jo 0x1400a0fec
std
invalid
invalid
je 0x1400a0fab
movsd dword [rdi], dword [rsi]
jno 0x1400a0ff7
jle 0x1400a1027
invalid
pop rsi
js 0x1400a1031
invalid
fcom dword [rax + 0x3df7a7bc]
push 0xfffffffffb039656
outsd dx, dword [rsi]
lodsb al, byte [rsi]
invalid
cld
invalid
mov ecx, 0x2f3aa63d
invalid
add r13d, dword [r11 - 0x10dc6150]
lodsb al, byte [rsi]
or eax, 0xf659993e
neg dword [0x15e458eda]
in al, dx
scasb al, byte [rdi]
adc byte [rsi + rdx*4 + 0x71277beb], dh
invalid
jno 0x1400a107d
mov ah, 0xf0
scasd eax, dword [rdi]
jle 0x1400a1065
invalid
jnp 0x1400a105a
invalid
jno 0x1400a107d
mov ah, 0xf0
invalid
test eax, 0x71560153
invalid
loopne 0x1400a101f
sti
invalid
cmp al, 0xfa
ror qword [rcx + 0x6e8b36a5], 1
ror dword [rcx + 0x6e8b36a5], 1
sbb cl, byte [rdx + 0x33]
test eax, 0x2b5e58b5
sub edi, dword [rax + 0x5166eaf9]
sub edi, dword [rax + 0x5166eaf9]
not byte [rbx + 0x4d1d4830]
mov ch, 0x60
invalid
jbe 0x1400a10d5
xchg ah, dl
add eax, 0xde3b472
stc
jrcxz 0x1400a10fb
xchg edx, eax
cmp al, 0xda
test dword [rdx + 8], ebx
jbe 0x1400a1095
or byte [rsi - 0x43], dh
mov ebp, 0x9a7bffae
invalid
scasb al, byte [rdi]
invalid
sub byte [rbx - 0x68055425], bl
cli
xchg edi, eax
movabs byte [0xecb17db58adf25e], al
call [rdx + 0x50702a7c]
invalid
sti
mov ebx, 0x1abe37a4
cmc
sbb dh, ch
invalid
xchg byte [rbp + 0x3c], ch
or eax, 0x7d7335fe
imul edx, dword [rbx], 0xffffff9c
add dh, byte [rdx - 0x41]
jb 0x1400a10d7
jb 0x1400a10d7
loope 0x1400a10d3
adc al, 0xec
inc dword [rdi - 0x7bc217bf]
cmp eax, 0x3601f284
cmp eax, 0x3601f284
push rdi
cmp dword [0xdd7db27f], ebp
ficom word [r14 + 0x76]
ficom word [rsi + 0x76]
ficom word [rsi + 0x76]
outsd dx, dword [rsi]
std
invalid
ja 0x1400a10e4
out 0x13, al
rcl dword [rsi - 0x10], 0x28
iretd
cmp byte [0x1bcd3c815], dl
cmp ebp, dword [rcx]
invalid
test bl, dh
push rsi
push rcx
jbe 0x1400a116e
invalid
test eax, 0xced240b1
invalid
invalid
in eax, dx
in al, 0xbf
cmc
mov bl, 0x44
popfq
in eax, 0xaf
invalid
out dx, eax
bts dword [rcx - 0x48068de6], esi
sbb dh, byte [rdx - 7]
mov bh, 0xdc
js 0x1400a11bc
sbb dh, byte [rdx - 7]
mov bh, 0xdc
js 0x1400a11bc
movabs byte [0x2d5d87ab667fcc62], al
fsubr dword [rcx]
pop rdx
pop rsi
ret 0xd64f
in eax, dx
sbb eax, 0x93a2924f
push rcx
push rsi
invalid
pop rdx
xadd byte [edx + ecx + 0x785551cc], bl
mov ebp, 0x1955be5
rcl byte [rcx - 0xc], cl
pop rsi
xchg ebx, eax
adc al, 0x71
invalid
sbb edx, ebp
invalid
ror dword [rbx], 1
sti
fstp xword [rbp + rsi*4 + 0x4ebc97ee]
invalid
add eax, 0x7676319
mov cl, 0x46
invalid
sal ecx, cl
in eax, 0x5b
invalid
invalid
jo 0x1400a12b7
enter 0xffffffffffff9b6f, 0xffffffffffffff8c
outsd dx, dword [rsi]
mov al, byte [rdi]
wait
ficom dword [rsi + 0x6c]
insb byte [rdi], dx
insb byte [rdi], dx
xchg ecx, esi
invalid
test byte [rcx - 0x23], 0x18
sub cl, dl
invalid
sbb al, 0x4f
mov ecx, 0x7f7a39e5
invalid