Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
jg 0x1400a085b
mul dl
call rsi
mov dl, byte [rsi + 0x7e]
loope 0x1400a084d
pop rdx
and edi, dword [rdi]
invalid
sar dword [rbx - 0xd], 0x23
add eax, 0x8e51afd8
invalid
jge 0x1400a080f
jmp 0x1b1116ecc
jno 0x1400a07de
xchg ebx, eax
movsd dword [rdi], dword [rsi]
insb byte [rdi], dx
dec eax
invalid
jle 0x1400a089a
cmc
push rdx
movabs byte [0x1719af16fd7f9df2], al
scasd eax, dword [rdi]
sbb dword [rdi], edx
mov dh, 0x24
invalid
dec dword [rbx - 0x68f3c5e0]
xchg edi, eax
out dx, eax
sbb eax, 0x93663e5
je 0x1400a08c3
or eax, 0xff01f95a
invalid
stosb byte [rdi], al
jg 0x1400a0852
adc dword [rcx - 0x3c], edx
or eax, 0xe857df79
mov bpl, 0xf
jb 0x1400a08bb
and byte [rbp - 0x51], al
jp 0x1400a08b6
adc al, 0xfd
std
dec byte [rdx]
invalid
jbe 0x1400a0847
int 0xa9
pop rcx
xchg ebx, eax
jns 0x1400a0865
jo 0x1400a0860
out 0x69, al
mov edi, dword [rbx + 0x44]
jo 0x1400a08e2
js 0x1400a0834
adc ebp, dword [rsp + rdx*8]
sub al, 0xd4
pop rsp
invalid
adc dh, byte [rdi + 0x7e067bf0]
jne 0x1400a0922
loop 0x1400a0914
add eax, 0x3ae9e191
invalid
xchg ecx, eax
invalid
retf 0x7b3e
int1
popfq
clc
sahf
outsb dx, byte [rsi]
invalid
mov edi, 0x72a5ecaa
xchg edi, eax
stosb byte [rdi], al
in al, dx
movsd dword [rdi], dword [rsi]
jb 0x1400a0860
mov esi, 0x875912f0
adc eax, 0xb7385219
in al, 0x76
invalid
jrcxz 0x1400a0919
cwde
invalid
lahf
add dword [rbx + 0x6a], 0x4a
mov esi, 0xf83fe67e
invalid
clc
ret
invalid
push rax
and al, byte [rdi - 0x27]
mov edi, dword [rax]
invalid
xchg edi, eax
invalid
mov dl, 0xf5
movsb byte [rdi], byte [rsi]
xchg edi, eax
cmp eax, 0xfabe325f
mov eax, 0x7cd91f43
mov al, 0x8e
int1
repne movsb byte [rdi], byte [rsi]
movsb byte [rdi], byte [rsi]
rcl dword [rdi], cl
mov edi, 0x48fa169
push rcx
ret 0x49db
ret 0x49db
ret 0x49db
sbb al, 0x7e
lea esi, [rdi - 0x6f136c47]
mov ebp, 0x75fbc0cd
invalid
mov cl, 0xdd
sti
jge 0x1400a09d3
invalid
xor eax, 0x4a3895b4
jno 0x1400a08f8
sbb byte [rsi], bh
invalid
invalid
fldcw word [rdx]
mov byte [rax + 0x78], ch
cmpsd dword [rsi], dword [rdi]
push rbx
test esp, 0x7db89624
mov rdx, rdi
and al, 0x96
mov eax, 0xd78b487d
mov bl, cl
invalid
push 0xffffffffd2cdfd7e
jle 0x1400a09b9
int 0xd2
adc eax, 0x1e5ddf23
cmp eax, 0x8ba49778
cwde
mov ah, 0xb
pop rcx
and byte [rdx + rdx*4], ch
pop rbp
xchg ecx, eax
push rax
add byte [rdx], 7
invalid
pop rcx
mov edi, 0xb78a62cb
mov bh, 0xfb
mov bh, 0xfb
push rdx
cmpsd dword [rsi], dword [rdi]
push rbx
movsd dword [rdi], dword [rsi]
loopne 0x1400a0a57
add byte [rsi + 0x665bd211], 0x13
xor edi, dword [rbx - 0x1e49e497]
insb byte [rdi], dx
cmp eax, 0x64a0210
adc byte [rdx], al
invalid
invalid
adc dl, byte [rdx]
enter 0x3f10, 0xfffffffffffffffa
jno 0x1400a099b
adc byte [rdx], al
invalid
push qword [rbx + 0x76]
xor al, 0x78
invalid
invalid
jl 0x1400a0a54
ja 0x1400a0a66
test qword [rbx + 0x77], rcx
invalid
jg 0x1400a09e6
fnstsw word [rdx - 0x443b1c6a]
ror byte [rbx + rax + 0x2d461a25], 0x79
lea ecx, [rdi - 0x67]
push rbx
jns 0x1400a0a70
mov bl, 0xe8
mov ebp, 0xd6d6b7e8
invalid
pop rbp
test al, 0x93
jns 0x1400a0a8f
invalid
sbb eax, dword [rax + 0x4af51d44]
mov edx, 0xbbebf6ce
cmpsb byte [rsi], byte [rdi]
invalid
sbb eax, 0xceba4af5
imul bl
mov ebx, 0x5e69d6a6
and esp, edi
stosb byte [rdi], al
invalid
and byte [rdx + 7], cl
cmp byte [rbx - 0x2958672e], dh
invalid
invalid
invalid
xor dword [rsi - 0x6b], eax
sar byte [rsi + 0x1452fe70], 1
cmpsb byte [rsi], byte [rdi]
hlt
mov ch, 0x9c
insb byte [rdi], dx
mov esp, 0x940b5925
test esp, ebp
cmp eax, 0x4dbc175e
or esp, eax
or r12, r8
invalid
pop r13
xchg edi, eax
invalid
test al, 0x4c
adc al, 0xf8
xchg byte [r10 + 0x19255a9b], r14b
popfq
invalid
outsb dx, byte [rsi]
jae 0x1400a0b77
adc ch, byte gs:[rax - 0x54]
xchg esi, eax
pop rbx
in eax, 0x42
fnstenv [rsi + 0x75]
movabs dword [0x5baec9d79381fdf4], eax
mov ds, esp
xchg ebx, eax
xor byte [r11 + 0x67], dl
jrcxz 0x1400a0b0b
int1
push r12
push rsp
adc bl, byte [rsi - 0x7b]
invalid
test dword [rdi], eax
js 0x1400a0ada
or esp, ecx
sub ah, ah
imul esi, dword [rdx - 3], 0xffffff8a
jnp 0x1400a0b2e
int3
ja 0x1400a0b14
retf 0x9e13
sahf
push 0xffffffffffffffa8
push rcx
cmovb ebp, dword [rcx - 0x3d4e9811]
ret 0x15ec
mov eax, 0xea6f99a7
jb 0x1400a0b43
add dword [rdi + 0x69], ebp
add dword [rdi + 0x69], ebp
sub byte [rbp + 0x7d], bl
push rbp
rol edx, 1
mov esi, 0xc59c3325
invalid
pushfq
invalid
jns 0x1400a0b5c
xor ebx, dword [rbp + rax*8 + 0x423ef79]
invalid
and eax, dword [rcx*4 + 0x14a8acdf]
invalid
in al, dx
leave
cmp al, 0x65
test dword [rbx - 0x62527555], ecx
mov ch, byte [rbp - 0x79e12063]
add byte [rdx - 0x103f6852], cl
invalid
mov ch, byte [rbp - 0x79e12063]
add byte [rdx - 0x103f6852], cl
sbb dl, byte [rcx]
fcomi st(7)
div dword [rax + riz*4 - 0x3b]
xchg edi, eax
shr bh, 0x1a
adc ebx, ebx
div edi
je 0x1400a0b31
invalid
xor ch, byte [rbp + rsi*4 + 0x6d9b9e36]
cld
cld
loopne 0x1400a0bd8
invalid
sal dword [rax], 0x1d
cli
jl 0x1400a0c20
sar ebp, cl
cmp al, bh
add byte [rbx], cl
stc
add qword [rax + 0x75], r13
sahf
invalid
movsb byte [rdi], byte [rsi]
enter 0x4518, 0xffffffffffffff88
cmp al, 0xff
nop
retf
fst qword [rdi + 0x5ab727d]
cmc
jo 0x1400a0b87
sbb al, 0xdf
idiv dword [rsi]
cli
invalid
push 0xffffffffffffffaa
lahf
xor rdx, qword [r13 - 0x3a]
adc dl, ah
int 0x9f
sahf
or bl, ah
adc eax, 0x4a1ffe78
scasd eax, dword [rdi]
add bl, bh
invalid
push r12
cmpsd dword [rsi], dword [rdi]
invalid
fstp qword [rbp + 0x4d17af9f]
mov eax, 0x336ece5e
jno 0x1400a0c5f
mov bl, 0xf0
xchg edi, eax
std
invalid
xchg dword [rdi - 0xb4ca43e], ebp
add al, 0xe
invalid
push rcx
xor dl, ah
test ebp, esi
push rsi
enter 0xfffffffffffff0a5, 0xffffffffffffffa6
cmp edi, dword [rcx - 0x7a3d0a9b]
ret 0xf285
movabs dword [0xd31dfeab08d2cd7f], eax
mov edx, 0x5d9c0d44
pop rbp
ret 0xf285
pop rbp
fbstp tbyte [rcx + 0x485c44f9]
mov esi, dword [rbx]
pop rsp
mov rsi, qword [rbx]
mov cl, byte [rcx - 0x38cc7886]
pop rsp
invalid
stc
jmp [rax + 0x57fe38a9]
lahf
ret 0x6285
xchg ecx, eax
clc
adc ebx, dword [rdx - 0x78]
jmp 0x1715eb4e9
jmp [rdi]
pop rsi
invalid
mov ch, 0x2e
cmp dl, byte [r14]
or eax, 0x4e07db1f
push rdx
scasd eax, dword [rdi]
stc
mov r14d, dword [r15 - 0x22d175d4]
sub al, 0x8a
fstp st(1)
int1
sub al, 0x8a
fstp st(1)
int1
jne 0x1400a0c8d
not dword [rsi]
invalid
push 0x4e
invalid
invalid
mov dil, 0xd9
mov esi, 0x1af812d3
sub ebx, dword [rdi + 0x1d]
stc
jnp 0x1400a0d05
or eax, 0x6bbce6de
idiv dword [rbx + 0x433efcbd]
rcr dword [rdi], 1
push r10
mov dh, 0x6f
cli
sti
wait
push 0xffffffffffffffb1
mov cl, 0x59
mov cl, 0x59
mov cl, 0xe7
mov esi, dword [rbx - 0x34]
ret 0xb3be
lahf
cmc
in eax, dx
loop 0x1400a0d53
ret
mov cl, 0x9f
out dx, eax
jp 0x1400a0da4
add byte [rax], cl
lodsd eax, dword [rsi]
mov ch, 0x8b
retf 0xae0c
invalid
je 0x1400a0d45
ficomp dword [rbx]
sti
invalid
push rsi
mov ah, 0x76
invalid
invalid
and al, 0x34
cmp dword [rcx], esp
in eax, 0xef
and ebp, esp
out dx, eax
lea esi, [rcx]
pop rbx
and dword [rdi], edx
cmp byte [rcx + 0xf], dh
imul esp, dword [rdx], 0xe4ecf1eb
punpckhwd mm4, qword [rdx]
jmp 0x1400a0df3
and al, 0x83
mov bh, 0xf
pop rsp
mov ebp, dword [rbx + rax]
invalid
cmp eax, 0x43f592fd
fmul st(6), st(0)
dec bh
cli
invalid
mov cl, 0xe8
pop rbp
invalid
call 0x19898dc9a
invalid
and edx, dword [rdi]
cld
push rbp
mov edx, 0xd2f1e478
xor dword [rsi + rbp*8 + 0x41d586f0], eax
or al, 0xb1
mov ebp, 0xf7b999b6
invalid
neg dword [rdi - 2]
mov ecx, 0xeafe5ff7
invalid
invalid
and byte [0xce322328], cl
mov al, 0x26
cmp al, byte [rdx]
mov cl, 0xe2
loop 0x1400a0e8b
jbe 0x1400a0dfd
loop 0x1400a0e8b
jbe 0x1400a0dfd
mov ebx, 0x974e55e2
jb 0x1400a0e46
int3
lodsb al, byte [rsi]
jne 0x1400a0e37
out 0x7b, eax
sub al, 0x66
cmp al, 0xcb
int3
invalid
adc esi, dword [rdi + 0x72374d63]
in al, dx
mov bl, 0x6c
push rdi
pushfq
idiv bl
pop rsp
jo 0x1400a0ebc
jne 0x1400a0e67
stosb byte [rdi], al
in eax, 0xf0
sbb esp, dword [rbp + 0x70]
jo 0x1400a0ef2
jo 0x1400a0ef2
jo 0x1400a0ef2
ja 0x1400a0ec1
invalid
jp 0x1400a0ec5
pop rdi
cmp byte [rdi + 0x53ce357a], 0x42
push qword [rdi + rax*2 - 0x26]
rcr byte [rsi], cl
xchg esp, eax
and cl, bl
ror byte [rcx - 0xb22c405], 1
cmp ebx, ebp
hlt
cmp byte [rsi - 0xbab8d78], cl
je 0x1400a0f33
cmp ebx, ebp
hlt
mov esp, 0x2c3be718
invalid
out 0x3b, eax
sub al, 0xfe
jg 0x1400a0f22
insd dword [rdi], dx
leave
push 0xffffffff8cfdc7ea
sbb al, 0xdf
call 0x1178da305
call qword [rbx + 0x3b83d783]
xchg ebp, eax
call qword [rbx + 0x3b83d783]
xchg ebp, eax
jp 0x1400a0f4b
neg dword [rcx]
and esp, dword [rbx - 0x55]
invalid
jg 0x1400a0f29
pop rax
sub al, 0x63
rol dword [rdi*8 - 0x482b382c], 0x3a
invalid
invalid
mov bh, 0x3a
in al, dx
xchg esp, eax
push 0x48
invalid
invalid
xor bl, byte [0x11b054544]
add byte [rcx + 0x2ae6ff45], dh
out 0x2a, al
outsd dx, dword [rsi]
retf 0xdf5a
invalid
invalid
cwde
cmp bl, byte [rdi - 0x15]
sbb al, 0x3a
mov esi, 0x9f3eb416
invalid
mov ah, 0x3e
lahf
jbe 0x1400a0f11
jmp 0x1400a0f6c
invalid
invalid
out dx, eax
cwde
cmp al, 0xbd
sti
outsd dx, dword [rsi]
invalid
loopne 0x1400a0fbb
cwde
cmpsb byte [rsi], byte [rdi]
cmc
mov esp, 0x652512ce
pop rsp
cmp ecx, ebx
fld dword [rdx + rbx*2]
fld dword [rdx + rbx*2]
cdq
sbb esi, edi
push 0xffffffffffffff9d
outsb dx, byte [rsi]
jp 0x1400a0f4e
cmp ch, bh
mov edx, 0x647d43ac
xlatb
mov eax, 0xe83f7d05
invalid
test dword [rcx], 0x55ffe78d
invalid
mov r15b, byte [r11 - 0x345401ea]
rcl dl, 1
invalid
invalid
sti
jae 0x1400a0fa7
and al, 0x3d
jbe 0x1400a0fed
invalid
mov ebx, 0x3aa54fdb
int1
push rbp
and edi, esp
cld
cld
invalid
neg byte [rsi]
call 0x139e03f69
sub eax, 0xb3ba1cf2
cmc
scasd eax, dword [rdi]
cld
in eax, dx
scasd eax, dword [rdi]
invalid
push rbx
add dword [rax], edx
movabs byte [0xcd459af7be9b744d], al
invalid
int 8
pop rbp
scasd eax, dword [rdi]
jg 0x1400a108d
sar dl, 0xa9
push r15
leave
xchg dword [rsi - 0x22], esi
insd dword [rdi], dx
cmp edx, dword [rsi - 0x48a6c428]
int1
std
stc
invalid
fist word [rsi - 0x27]
invalid
in al, dx
invalid
pop rbx
invalid
xchg byte [rbp + 0xf], ch
invalid
js 0x1400a1123
stosd dword [rdi], eax
xchg ebx, eax
fstp qword [rsi]
xchg dword [rcx], ebp
stosd dword [rdi], eax
invalid
mov al, dl
movabs dword [0x60880faf8b7aab55], eax
add dh, ah
xor al, 0x18
sbb byte [rsi - 0x2519b02d], bh
push rbp
stosd dword [rdi], eax
jp 0x1400a10b2
scasd eax, dword [rdi]
js 0x174fe138e
sbb byte [rsi - 0x2519b02d], bh
movabs dword [0x43fb9fef91d0966e], eax
invalid
invalid
mov ebp, dword [rsi + 4]
stosd dword [rdi], eax
adc al, 0x77
pop rsi
add ch, dh
invalid
xchg dword [rdi], edx
insb byte [rdi], dx
push rsi
cmp byte [0x127f76b8b], bl
lodsb al, byte [rsi]
invalid
push rbp
invalid
jmp 0x1a6d3fb18
nop
insb byte [rdi], dx
invalid
invalid
invalid
dec dword [rbx - 0x2beae315]
idiv dword [rbp + 0x388a2a2f]
add al, 0xd1
push rsp
cmp dword [rsp - 0x62], ebx
pop rsp
and al, 0x9e
pop rsp
and al, 0x9e
cmp edx, dword [rcx + 0x633bee75]
invalid
in eax, dx
sbb eax, 0xb4787d13
lodsb al, byte [rsi]
mov ebx, 0x7bf0a399
sbb cl, byte [rbp + 0x1c]
in eax, dx
pop rdx
jge 0x1400a1284
mov esp, dword [rdx - 0x1a]
cmc
scasd eax, dword [rdi]
jbe 0x1400a1256
invalid
invalid
invalid
jo 0x1400a1211
outsb dx, byte [rsi]
and ebx, dword [rax]
xor eax, 0xdc3490c4
and bh, byte [rsi]
not byte [rdi]
mov dh, 0xb4
or al, 0x4d
imul ecx, dword [rbp + 0x24], 0xb
or ecx, esi
or ecx, esi
adc al, 0xf9
imul r9, qword [rax + r10*2 - 0x7917de7c], 0xfffffffffb0d91fd
test byte [rcx], ah
call 0x14d9c0fe3
sti
mov bh, 0xf0
push rdx
push rbx
in eax, 0x39
add dword [rcx - 0x4c8235a2], 0x7a
sbb dword [rsi - 0x36], 0xa07ab37d
invalid
outsb dx, byte [rsi]
invalid
scasd eax, dword [rdi]
invalid
cli
invalid
std
popfq
movabs al, byte [0xae0085ac318b5ba6]
test dword [rax], eax
scasb al, byte [rdi]
sbb dword [rsi - 0x36], 0xa07ab37d
invalid
test dword [rax], eax
scasb al, byte [rdi]
pop qword [rsi - 0x12]
ret
insb byte [rdi], dx
push rsi
push rdx
jle 0x1400a12d6
invalid
sub r11, qword [r11 + 7]
sub ebx, dword [rbx + 7]
invalid
or eax, 0x2a18dd23
retf 0x9716
test al, 0xc0
add bl, byte [rbx]
fisttp dword [rbx - 0x3f]
retf