Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
sbb dword [rcx], eax
int1
adc eax, 0x56e81439
mov dword [rdx + rsi], esp
and eax, 0x76f9c3b3
sal bp, cl
mov bl, 0xc3
stc
jbe 0x1400a0844
sal ebp, cl
imul eax, dword [rdx - 0x5c], 0xf3b91e0f
jo 0x1400a07cd
invalid
xor edi, esi
int1
xor byte [rcx + rdi*4 + 0x75], bh
jnp 0x1400a07d9
int1
pop rsi
movabs eax, dword [0xf99cc12af389f1]
jg 0x1400a0863
invalid
retf
call 0x1bd485146
fbld tbyte [rdi - 0x7a1bd23d]
outsb dx, byte [rsi]
cmp al, 0x62
loope 0x1400a0824
jg 0x1400a0833
xchg ecx, edx
jb 0x1400a07ec
test al, 0x7f
std
jg 0x1400a0843
invalid
invalid
xchg edx, eax
pop rcx
bswap esi
invalid
jge 0x1400a08da
invalid
imul edi, dword [0x14c02a86d], 0xfffffff1
invalid
cli
or bl, byte [rax - 0x7d]
pop rsp
cmpsb byte [rsi], byte [rdi]
and al, 0x94
sub byte [rsp + rdi*2], dh
out dx, eax
sbb al, 0x8d
add eax, 0x8c8bf87e
fild dword [rcx - 0x3c]
invalid
sar byte [rbp - 0x58af9379], 1
imul byte [r9 - 0x7a]
ret
in al, 0xfa
mov dl, 0x94
sal al, 1
jnp 0x1400a0939
adc dword [rbp + rbx*4 - 0x27], edx
mov dr2, rbp
jmp qword [rdi + rsi*2]
invalid
xchg ebp, eax
invalid
cld
invalid
mov bl, 0xc8
stosd dword [rdi], eax
xchg ebx, eax
push rdi
in eax, 0xae
mov dh, byte [rax + 0x17b9fe16]
sub eax, 0xf3a398f4
push rcx
mov word [rbp + 0x7d2e58d3], fs
jno 0x1400a096f
invalid
cmp dil, byte [r14*8 + 0x1c97eefe]
cmp bh, byte [rsi*8 + 0x1c97eefe]
fsubr qword [rbx - 0x7a]
xchg edi, eax
lodsd eax, dword [rsi]
sbb al, 0x7e
movsd dword [rdi], dword [rsi]
jp 0x1400a09b0
mov esi, 0x2cf60f7e
xchg esi, eax
idiv byte [rbp - 0x3c739f33]
clc
invalid
pop rax
in eax, dx
invalid
push 0x4c431fb7
test eax, 0xcca0d489
invalid
lodsb al, byte [rsi]
invalid
jle 0x1400a0907
and al, 6
mov edi, 0x6dbfdce7
clc
add ebx, dword [rdi + 0x1d]
and al, 0x4a
call rdi
invalid
sbb eax, 0xd7ff4a24
jg 0x1400a097d
lodsd eax, dword [rsi]
cld
and eax, 0x3e74bcde
jg 0x1400a0a0c
sbb ebx, 0xfffffff3
xlatb
mov bh, byte [rdi]
movabs eax, dword [0xed29167bf0e42ee9]
in al, 0xf0
jnp 0x1400a09bd
sub ebp, ebp
in al, 0xf0
jnp 0x1400a09bd
sub ebp, ebp
add eax, 0xa914eae0
xchg ebx, eax
sbb byte [rdx + 0x2b], dh
test eax, 0x2b721893
jb 0x1400a09dd
fidiv word [rdx]
stc
mov dl, 0x30
jns 0x1400a09ad
mov ebx, 0xd1c30d21
invalid
and dword [0x15e56db83], ecx
movabs byte [0xfddba3bc4343e029], al
insd dword [rdi], dx
ror dword [rsi + rbx - 0x5e], 1
sub eax, esp
mov r12d, 0x6dfddba3
jmp 0x1400a0989
mov dh, 0x85
btr dword [rcx + 0xc], eax
cdq
sbb al, 0xd9
invalid
movabs al, byte [0x4efcf6cac6fd2da3]
invalid
std
retf 0xcbbf
rep lodsb al, byte [rsi]
xchg eax, esi
jle 0x1400a09e1
jg 0x1400a0a2a
pop rax
invalid
invalid
adc byte [rdi], bh
cli
jno 0x1400a0a2a
push rsi
outsd dx, dword [rsi]
xlatb
cmp dword [rcx + rsi*4], edx
invalid
sbb byte [rcx + 0x21], dh
pushfq
mov ah, cl
movabs al, byte [0x8f8a31c39e2a7464]
invalid
stosb byte [rdi], al
fisubr word [rdx + 0xae31918]
xor dword [rdx - 0x55215571], ecx
sbb byte [rcx], bl
jrcxz 0x1400a0a3e
invalid
jnp 0x1400a0a3f
cmp eax, 0xb290adc5
push rdx
add dword [rsi + 0x33], ecx
xor eax, edx
or al, 0x9f
sahf
xor edi, dword [rdi - 0x60]
jg 0x1400a09e6
ret 0x9f0c
jg 0x1400a09e6
fnstsw word [rdx - 0xbcd08c4]
stosd dword [rdi], eax
cmpsd dword [rsi], dword [rdi]
loope 0x1400a0a68
invalid
cmpsb byte [rsi], byte [rdi]
sbb ebp, 0xffffffb5
cmp ecx, dword [edi + 0x3c5f0e0a]
or esp, dword [rsi + riz*8 + 0x28]
sbb byte [rax + rdx], al
add al, 0x10
wait
pop rax
invalid
std
invalid
jae 0x1400a0af4
std
xchg ebp, eax
adc dword [rdi + r15*8 + 0x5d76ad8a], r11d
jg 0x1400a0ab3
invalid
mov ds, rcx
push 0x781e364c
clc
sbb al, 0xd5
mov ah, 0xbd
mov esi, 0x509d68ba
leave
fcmovu st(0), st(2)
out dx, al
jne 0x1400a0a6c
cmp dword [rcx + rdx*8 + 0x56], esi
je 0x1400a0a86
push rsi
push r11
cmp edi, edi
invalid
jnp 0x1400a0add
paddw mm5, mm4
std
in al, dx
invalid
invalid
pop rdi
dec dword [rsp + rax*2 + 0x70]
and dword [rcx], esp
std
test byte [rax + riz*2], dh
invalid
clc
or eax, 0x7051733e
push rcx
jo 0x1400a0b14
ret
in eax, 0x2e
cmc
je 0x1400a0acd
push rcx
jo 0x1400a0b14
ret
invalid
leave
int 0x7c
int 0x7c
int 0x7c
mov ecx, dword [rdx + 0x70baabe7]
add ebp, dword [rax + 0x68]
in eax, 0xbc
invalid
invalid
and esi, edx
pushfq
mov ebx, 0x8f492fcc
int3
invalid
invalid
invalid
xor byte [rsi + 0xe], dh
invalid
int3
mov ah, 0x2c
ret
add al, 0x5f
invalid
mov ch, byte [rbp - 0x7d33c8c]
adc qword [r9 + 0x3f], r15
adc dword [rcx + 0x3f], edi
push rbx
and eax, 0x835cb109
stosb byte [rdi], al
movabs byte [0x72c35a4ceebff3b1], al
mov edi, 0xc35a4cee
jb 0x1400a0b40
mov edi, 0xc35a4cee
jb 0x1400a0b40
in eax, dx
adc al, 0x14
jp 0x1400a0bdd
mov edi, 0x2310ee49
jg 0x1400a0ba4
invalid
invalid
or dword [rdi], esi
test dword [rdx + rcx*4 - 0xd], 0x98c21637
invalid
cli
invalid
xor ebx, dword [rbx - 0x5ac10fba]
invalid
insb byte [rdi], dx
adc al, 0x77
invalid
ror byte gs:[rax], cl
mov bl, 0xd1
cmp eax, 0xed72c69c
in eax, dx
push rbx
jbe 0x1400a0b85
invalid
fidiv word [rsi]
mov bh, 0x67
mov ch, 0x88
mov cl, byte [r11 + 0x56457216]
push r14
pop rbx
mov cl, 0x46
sub byte [rdx + 0x6ebcd298], bh
invalid
cli
mov ebp, 0xcf0e88c1
invalid
mov cl, 0x67
mov word [rax - 0x31], ds
mov ch, 0x1f
jmp [rbx + rdi*8 + 0x2e]
invalid
js case.0x140002106.46
jrcxz 0x1400a0bee
mov bl, 0x31
jge 0x1400a0c7d
xor dword [rbp + 0x3f], edi
jg 0x1400a0c37
jle 0x1400a0c29
cmpsd dword [rsi], dword [rdi]
jo 0x1400a0c35
cmpsb byte [rsi], byte [rdi]
cmp edi, dword [rcx - 0x57436d1d]
mov esp, 0x7fa3f2a8
int 0xc3
stc
invalid
invalid
dec dword [rsi]
mov esp, 0x7fa3f2a8
int 0xc3
stc
invalid
invalid
pop rsi
stosq qword [rdi], rax
invalid
insd dword [rdi], dx
jb 0x1400a0c08
jge 0x1400a0c7d
or esi, dword [rsi - 0x2153ab03]
test dword [rdx - 0x417c4019], edx
xchg edx, eax
out 0xbf, eax
invalid
mov esi, 0x909d3ade
std
push rsp
lodsb al, byte [rsi]
fiadd word [rbp - 0x7c40186e]
xchg edx, eax
out 0xbf, eax
invalid
mov esi, 0x909d3ade
xchg edx, eax
out 0xbf, eax
cmp dword [rsi - 0x6f62c522], 0xffffffb3
inc byte [rax]
lahf
std
invalid
mov bl, 0xfe
add byte [rdi - 0x740fbb03], bl
mov ebp, dword [rdi]
mov ebp, dword [rdi]
add cl, byte [rsi + 0x5cf960a0]
xlatb
outsb dx, byte [rsi]
xor esp, dword [rdx - 0x8e36d9a]
add ch, dh
jb 0x1400a0c55
xchg ebx, eax
stc
invalid
loop 0x1400a0cf1
not byte [rbx - 0x74f6c8e2]
outsb dx, byte [rsi]
loope 0x1400a0c56
jno 0x1400a0d18
push rdx
ret
invalid
and al, 3
scasd eax, dword [rdi]
inc byte [rbx - 0x49378025]
int1
sub al, byte [rdi]
pushfq
or dword ss:[rbx - 0x7e], ebp
adc eax, 0x98c96362
cwde
sbb ebx, 0x7f
enter 0xfffffffffffff1b6, 0x2a
invalid
cwde
xor dl, byte [rbx + 0x34095a65]
cmp al, 0xfd
xor al, 0x3c
std
inc cl
lodsd eax, dword [rsi]
outsb dx, byte [rsi]
xchg edx, eax
xor dword fs:[r8], ebx
xor cl, cl
ficomp dword [rdx - 4]
cld
mov gs, word [rcx + 0x747bfe7e]
test eax, 0x747bfe7e
mov cl, 0xfd
jo 0x1400a0d4f
jg case.0x140002106.64
push rdx
xchg ebx, eax
xchg edi, eax
invalid
and byte [rax - 0x298440df], 0x44
mov dh, 0x6f
cli
sti
xchg edi, eax
invalid
jns 0x1400a0d38
and edi, dword [rax - 0x40]
xchg edx, eax
mov ch, byte [rdi]
jne 0x1400a0d38
cld
mov esi, 0x3931d685
mov edi, 0xd9cbe54a
sbb dword [rbp + 0x7d], ecx
jge 0x1400a0d08
invalid
clc
invalid
in eax, 0xcb
fstp dword [rcx]
jge 0x1400a0d08
invalid
mov cl, 0x9f
out dx, eax
jp 0x1400a0dab
mov ebp, dword [0xf8166daa]
lahf
leave
invalid
xchg byte [rax - 0x71], ah
mov dl, cl
jge 0x1400a0d7d
out dx, al
out 0x43, al
add al, 0x53
jge 0x1400a0d31
adc bl, dh
jnp 0x1400a0e0e
in eax, 0xd8
adc byte [rdx - 0x52], 0xa0
adc al, 0x37
hlt
hlt
hlt
mov edx, 0x7ac641c6
out 0x6a, al
mov ch, 0xee
clc
invalid
sar bl, cl
in al, dx
or al, 0x70
or al, 0x70
xchg esi, eax
wait
pop rbx
xchg edx, eax
invalid
in eax, dx
add ecx, dword [rdx - 0x10]
pop rbx
out dx, al
div eax
jnp 0x1400a0dbb
mov dword [rax - 0x1375154f], 0x255586e
jb 0x1400a0d78
invalid
xchg edi, ebp
out dx, eax
stc
mov esi, 0x3d98c8b0
pop rbp
mov edx, 0xda648b4d
imul ebp, dword [rbp + 9], 0x40
sal byte [rsi + rbx*8 + 0x2d726e6f], cl
fisubr word [rdi + 0x6e]
jb 0x1400a0e36
fisubr word [rdi + 0x6e]
jb 0x1400a0e36
in al, 0xeb
jp 0x1400a0e4c
cmp dword [rsi], edx
fisub word [rdx]
invalid
invalid
xchg esi, eax
pop rcx
cmp al, 0x23
push rdi
invalid
scasb al, byte [rdi]
invalid
cmp al, 0xf3
out dx, al
or dword [0xca537303], 0xffffffdd
dec byte [rdx + 0x172316ad]
cmpsb byte [rsi], byte [rdi]
scasb al, byte [rdi]
scasb al, byte [rdi]
scasb al, byte [rdi]
hlt
invalid
xchg esi, eax
add dword [rax], ebx
invalid
lodsd eax, dword [rsi]
hlt
adc esi, dword [rbp + 0x1d20b05e]
push rax
sbb eax, dword [rdx]
sbb al, 0x10
cmc
invalid
and eax, 0x8bf7854e
cmpsd dword [rsi], dword [rdi]
push rdx
xchg edi, eax
test dword [rsi - 0x2b], ebp
jne case.0x140002106.71
movabs rcx, 0x187514d3bc3915ff
mov esp, 0x187514d3
mov dl, 0x40
invalid
and eax, 0x4a5952
outsb dx, byte [rsi]
xor eax, dword [rcx + 0x36da6564]
popfq
invalid
or al, 0x9f
push qword [rsi + 0x7f]
jg 0x1400a0ee0
jg 0x1400a0ee0
pop rbp
invalid
out dx, al
mov bl, 0x24
and byte [rax], bh
std
jmp 0x1400a0ebc
scasd eax, dword [rdi]
invalid
test al, 0x57
cmp cl, ah
or byte [rsi + rbp*8 + 0x7d], dh
invalid
push rbx
retf
test edx, 0x12cbc9e4
lodsb al, byte [rsi]
sal esp, cl
sahf
xchg esp, eax
invalid
invalid
sub edi, dword [rcx + 0x32]
adc al, 0x2c
loopne case.0x140002106.88
mov dh, 0x54
stc
invalid
invalid
or dword [0x11e64e830], esp
pop rax
invalid
pop rsi
jbe 0x1400a0fd7
jle 0x1400a0fc9
mov ebx, 0x91d8fd87
lahf
invalid
loopne 0x1400a0fc4
sub byte [rsi - 0x18], al
lock not qword [rcx - 0x6d]
call 0x192015899
xchg ebx, eax
ror dword [rdx - 0xf], 0x99
int1
cdq
jbe 0x1400a0fa3
pop rcx
xchg ebp, eax
cmp byte [rcx], ch
pop rdi
lodsb al, byte [rsi]
xchg byte [rdx + 0x6f75e546], bh
adc al, 0x24
je 0x1400a0fab
mov edi, ds
xchg edi, eax
fisub word [rax - 0x64]
retf
invalid
enter 0x3071, 0xffffffffffffffc6
jle case.0x140002106.97
pop rcx
movabs byte [0x3552df2edae9e3ce], al
xor eax, 0xee2f7fde
push rdx
xor eax, 0xee2f7fde
mov bh, 0xa3
xor byte [rbx + 0x1910a652], bh
sbb dword [rsi + 0xf], esi
jbe 0x1400a0ff7
jbe 0x1400a0ff7
cmp dword [rax + rcx*8 + 0x16c94052], ebx
cmp dword [rdx], edi
movsd dword [rdi], dword [rsi]
enter 0x5667, 0xffffffffffffffbf
invalid
mov edi, 0x6c536d4d
insd dword [rdi], dx
push rbx
insb byte [rdi], dx
adc eax, 0xfb72d381
jb 0x1400a1001
jg 0x1400a1006
adc dword [rsi + 0x1d], edi
cwde
mov cl, 0x58
push 0x3a8c8456
mov r11b, 0xdb
invalid
jno 0x1400a102d
sbb rax, 0x6c47b638
mov ah, 0xd4
add dword [rdi - 0x50e2080a], esp
stosb byte [rdi], al
pop rbx
test al, 0xf8
clc
invalid
invalid
rol byte [rsi + 0x6a], cl
add eax, 0x7da947ff
test eax, 0xf007d27d
test eax, 0xf007d27d
je 0x1400a1039
mov esi, 0x6d4f2bf3
mov ebp, 0x97aa6f99
cld
popfq
and esp, dword [rsi]
invalid
jbe case.0x140002106.108
pop rdi
outsb dx, byte [rsi]
fnstenv fs:[rdi + 0x6f]
cwde
invalid
xchg byte [rbp - 0x41], ch
int 0x96
cmp eax, dword [rax + 0x504a0b1c]
mov ebx, 0xaffd329d
popfq
xor bh, ch
scasd eax, dword [rdi]
popfq
xor bh, ch
invalid
or ch, byte [rax + 0x76]
outsd dx, dword [rsi]
std
invalid
out dx, eax
xchg edi, eax
invalid
hlt
xor byte [rsi], dh
sub al, 0x92
xor ebp, ebx
push rcx
jl 0x1400a116e
dec edi
invalid
iretd
mov ch, 0x94
invalid
retf 0xd36e
invalid
test dword [rax - 0x61], esi
cmp edx, esp
mov esi, 0xcc20d67
rcl ecx, 0xc3
jle 0x1400a1151
loop 0x1400a1174
or eax, 0xd1c10cc2
ret
invalid
push rdx
fcomp dword [rbp + 0x6a]
hlt
add edx, dword [rbp + 0x760453b5]
add byte [rbx + 0x60a39733], bl
jle case.0x140002106.119
invalid
dec dword [rbx - 0x398fe315]
invalid
mov ebp, ebx
sbb al, 0x70
invalid
invalid
sar byte [rdi - 0x11], cl
jne 0x1400a11b4
int 0xdd
mov bl, 0x7e
invalid
scasd eax, dword [rdi]
invalid
sub edi, edx
movsb byte [rdi], byte [rsi]
sub dword [rdi + 0x6147d184], edx
invalid
push qword [rdx + 0x2efe4fdf]
push rdx
pop r14
mov edx, 0x71411340
outsb dx, byte [rsi]
std
mov edx, 0x8f6cc41d
invalid
insb byte [rdi], dx
invalid
sbb ch, cl
out dx, eax
invalid
invalid
stc
jno 0x1400a1219
and byte [rbx - 0x52], dh
rcl byte [rdi], cl
jg 0x1400a1261
or eax, 0x42978654
invalid
out dx, eax
sub al, 0x6a
fcomp qword [rsi]
invalid
mov cl, 0x80
pop rbx
mov edx, 0xaa165057
invalid
invalid
invalid
invalid
mov ch, 0x3c
fstp qword [rax]
sub cl, dl
invalid