Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
add byte [rax], al
adc al, 0xe3
jrcxz case.0x140002106.3
xchg edi, eax
cmp al, 0xc8
iretd
mov dh, cl
invalid
invalid
ret
add al, 0xbb
cwde
mov al, 0x3a
sub bh, byte [rax + 0x2981118f]
test byte [rbx - 0x2ab2f9ce], 0xbf
fcomi st(0)
jp 0x1400a080d
stosb byte [rdi], al
stosb byte [rdi], al
jg 0x1400a0875
in al, 0xe6
invalid
scasd eax, dword [rdi]
invalid
je 0x1400a07fe
insb byte [rdi], dx
std
dec byte [rdx]
invalid
cmpsb byte [rsi], byte [rdi]
fldcw word [rsp + rcx - 0x7af1c23e]
push qword [rcx + 0x4e]
cli
shr dword [rcx - 8], cl
cmpsb byte [rsi], byte [rdi]
mov r10d, 0x40fe74e9
invalid
insb byte [rdi], dx
mov bh, 0xa4
invalid
xchg edx, eax
invalid
loop 0x1400a08de
jns 0x1400a0869
invalid
loopne 0x1400a087b
or dword [rsi + 0x75], edx
pop rbp
sub dh, bh
jns 0x1400a08fa
add dword [rcx], esp
fcmovnbe st(0), st(3)
xchg edi, eax
invalid
invalid
call qword [rsi - 0x23e9c775]
cwde
clc
invalid
invalid
stosd dword [rdi], eax
insb byte [edi], dx
mov ecx, 0xe8381e69
mov ebp, 0xe36ad375
rcl esp, cl
invalid
invalid
invalid
mov ch, ch
movsd dword [rdi], dword [rsi]
and eax, 0xc02d92d6
lodsb al, byte [rsi]
cdq
xlatb
invalid
add byte [rcx - 0x44129af], bl
loope 0x1400a09a8
sbb al, 0x2b
jle 0x1400a0955
cmp dh, ah
invalid
hlt
invalid
ret 0x92cf
sbb al, 0x60
lea ecx, [rdi]
lodsb al, byte [rsi]
rcl dword [rdi - 0x1534f888], 0x93
jmp 0x1285b5fff
push 0xffffffffffffff99
xor edi, dword [rsi - 0x2120fd90]
push rax
idiv byte [rax - 0x69]
movsb byte [rdi], byte [rsi]
mov ebp, dword [rbx - 0x51]
invalid
imul ebp, dword [rdi + 0x72ab64ce], 3
int3
in al, 0xff
mov edi, 0xb07be70
invalid
mov eax, 0x8be72757
call 0x14b4b5b22
or byte [rcx - 7], dl
stc
movabs byte [0xa05c05a609f2ee7d], al
in al, 0x87
cmpsb byte [rsi], byte [rdi]
add eax, 0x87e4a05c
retf 0x15bd
jno 0x1400a0a84
sbb edi, esi
lea edx, [rsi + 0x3f10e7c1]
cli
jno 0x1400a09d9
or byte [r15 - 0x4a3a86fb], 0x15
invalid
cmpsd dword [rsi], dword [rdi]
cmp eax, eax
mov gs, word [rdi + 0x2d]
cli
jle 0x1400a09c8
invalid
sub dword [rbx - 9], esi
xor eax, 0x3a615a71
jnp 0x1400a0a3f
cmp eax, 0xac3bccc5
and ecx, dword [rdi + rbx*4]
jg 0x1400a09e6
cmc
jb 0x1400a0ad2
lodsb al, byte [rsi]
mov bh, 0x70
out dx, al
add dl, byte [rax + 0x21]
and ebp, dword [rbx]
and al, 0xc5
lodsb al, byte [rsi]
invalid
cld
xchg rbp, rax
xchg ebp, eax
or al, dh
cdq
push rsp
scasb al, byte [rdi]
invalid
jg 0x1400a0aba
movabs dword [0xd51cf8def49ce1f8], eax
mov ah, 0x1f
mov edx, 0xb83d0668
jmp [rbx - 0x32646567]
xor bh, ah
stc
mov bh, 0xef
invalid
xor eax, edi
mov ebx, 0xa55e3c0e
and ecx, dword [rdi]
cmp byte [rbp + 0x583edec0], cl
adc al, 0xdf
invalid
jnp 0x1400a0add
std
in al, dx
invalid
invalid
movabs dword [0x31b9ff5f36a9fcfd], eax
rcl dword [rbp - 0x60], 0xa4
pop rbx
mov ecx, 0x3f6c9fcb
mov edx, 0xf8066849
or eax, 0xa136733e
movabs eax, dword ss:[0x27e6d2e8b19058b3]
pop rdi
invalid
movabs eax, dword ss:[0x27e6d2e8b19058b3]
sub cl, byte [rdx]
mov dl, 0x8f
test byte [rdi - 0x202681a], cl
and dword [rbx - 0x6b], 0x3f89dd9d
hlt
invalid
fiadd dword [rdx + 2]
movabs byte [0x390cfea1c058dc7f], al
imul ebp, dword [rsi], 0x72
invalid
shl byte [rcx + 0x6b390cfe], 0x2e
jb 0x1400a0b2d
sbb eax, 0x916b5e0b
push 0xffffffffd67fae73
jae 0x1400a0add
jg 0x1400a0b07
invalid
stosd dword [rdi], eax
jnp 0x1400a0b1d
imul esi, dword [rdx - 3], 0x5e
invalid
jmp 0x1400a0b87
mov eax, 0x206f99a7
mov ah, 0x9a
shr byte [rdx + rbx*2 + 0xd6886d6], 0x73
push rdx
or dword [rsi], ebx
ret
push rcx
add edx, ecx
xchg ebp, eax
cli
mov esp, 0xc94acc76
ret 0xf423
mov ch, byte [rbp - 0x49c16e44]
add byte [rdx - 0x4b56852], cl
xchg edi, eax
sti
mov ebx, dword [rbx + 0x74f7f7db]
sub bl, byte [rsi]
pop rbx
imul ebx, esi, 0x31
movsb byte [rdi], byte [rsi]
jno 0x1400a0c06
cld
cld
mov esp, 0x4453b77d
invalid
invalid
invalid
xor byte [0x18c82caa0], dl
xor dword [rdx + 0x1f], edx
invalid
std
and ebx, edi
or eax, 0xe28de78a
int 0x9f
sahf
mov r11b, 0x14
invalid
invalid
xchg esp, eax
and edi, dword [rbx]
jl 0x1400a0c64
invalid
call qword [rdi + rbx*4]
scasd eax, dword [rdi]
invalid
and dword fs:[rdi + 0x5c455da6], 0xff4cb9ed
invalid
mov ebp, dword [rsi]
mov dl, byte [rcx + 0x30]
push rcx
xor byte [rdi], ah
push rcx
xor byte [rdi], ah
in al, dx
invalid
jle 0x1400a0c02
sub dword [0x1472ad7a6], 0x7e
adc dword [rdi], edx
movsd dword [rdi], dword [rsi]
mov bh, 0x48
invalid
invalid
invalid
lodsb al, byte [rsi]
sbb rax, 0x368a34be
adc al, 0xdf
fistp qword [rax + 0x66]
sahf
outsb dx, byte [rsi]
sub al, 0x89
in al, dx
jb 0x1400a0c65
sbb eax, 0x57fe38d7
fdiv dword [rdx]
invalid
jge 0x1400a0c37
scasd eax, dword [rdi]
jge 0x1400a0c7d
mov ebx, 0x53fb16fb
cmp byte [rsi], al
or bl, byte [rdx - 0x1b]
add ebx, ecx
ja 0x1400a0c42
pop rbx
push rbx
and bh, byte fs:[rax + rdi*4]
adc eax, 0x236ff3fe
invalid
add al, al
cwde
pushfq
and dword [rsi - 0x6890d7aa], 0x7c
xor al, 0x81
mov ch, 0x40
test byte [rsi + 0x71], ch
invalid
sar bl, 0x4f
jrcxz 0x1400a0cf5
xchg edx, eax
cli
mov edi, 0xa2de2afc
sub byte [rdi - 0x681981e2], dh
outsb dx, byte ds:[rsi]
invalid
push rsp
pop rdx
mov al, 0x5a
fcmovnbe st(0), st(1)
push rdi
invalid
sub al, 0x8a
fst qword cs:[rsi - 0x6d]
adc esi, ecx
not dword [rsi]
invalid
invalid
add eax, 0x38170cc3
and dword [rsp + rdi], esi
std
invalid
invalid
test eax, 0x8b5267e
not dword [r15 - 0x6e20582]
jnp 0x1400a0d05
sbb ebx, eax
out dx, eax
mov bl, 0x54
sbb esi, 0x2b
sbb cl, byte [rbp + 0x65dee32f]
sub dword [rdx - 0x3c], 0x11
test ecx, 0xd2fc04c7
cld
shl byte [rdx + 0xdf2d841], cl
jrcxz 0x1400a0d62
invalid
invalid
cld
shl byte [rdx + 0xdf2d841], cl
jrcxz 0x1400a0d62
fdiv st(2)
or eax, 0x7b401be3
jnp case.0x140002106.63
or bh, byte [rbp - 0xa]
jge 0x1400a0d42
out 0xda, eax
outsb dx, byte [rsi]
sahf
and ecx, dword [rbx]
add dword [rbx - 0x51904a55], ebp
stosd dword [rdi], eax
mov ch, 0x6f
scasb al, byte [rdi]
stosd dword [rdi], eax
mov ch, 0x6f
scasb al, byte [rdi]
stc
xor cl, byte [rsi - 0x159ea5d4]
invalid
repne movsb byte [rdi], byte [rsi]
insb byte [rdi], dx
stc
adc al, 0x47
invalid
mov cl, 0x9f
out dx, eax
jp 0x1400a0db3
sub esi, dword [rsi - 0x15]
int 0x2d
std
popfq
mov ecx, 0x78f9c2d0
jge 0x1400a0d7d
rol dl, 1
stc
js 0x1400a0dff
cli
or dword [rbx + 0x7dad941f], edi
adc byte [r13 + 0x22d12b0c], 0x6c
insd dword [rdi], dx
and dword [rdi - 0xb21a0b6], eax
hlt
mov edi, dword [rcx]
fild qword [rdx - 0x598635e3]
invalid
hlt
sbb eax, 0xcea679ca
invalid
jo 0x1400a0d9d
mov ebx, 0x6aefaa6b
mov al, 0x98
mov byte [rbp - 0x44103b47], 0xf0
imul ebp, dword [rdx - 0x674f9511], 0xffffffc6
test dword [rcx - 0xf44103c], edi
invalid
push 0x1f
or eax, 0x6049bb61
adc ch, ah
mov edx, 0x897cc9e2
push rdx
invalid
invalid
invalid
pop rbp
loope 0x1400a0db3
invalid
ja 0x1400a0e6e
sbb edx, dword [rbx + rax*2 - 0x24]
invalid
pushfq
call 0x12b2a92a9
stosb byte [rdi], al
mov bl, ch
dec byte [rdx + 0x172316ad]
or byte [rbx], ch
and byte [rdi - 8], cl
test byte [rsi + 0x14], bl
scasd eax, dword [rdi]
stosb byte [rdi], al
test eax, 0xf9c0f70d
add eax, 0x98b06ae6
cwde
cwde
push rsi
pop qword [rsi]
add al, 0x84
mov edx, 0x2a99fbb3
mov cl, 0x8b
mov bl, dl
fimul dword [rcx]
test byte [rsi], dh
cld
invalid
or edx, dword [rsi + rbp*8]
invalid
fimul dword [rcx]
test byte [rsi], dh
cld
invalid
add byte [rbx + 0x1db9c4a4], dl
invalid
invalid
invalid
test dword [rbx - 0x47], esp
fcompi st(2)
adc al, 0x40
invalid
adc esi, dword [rdi + 0x4d590a18]
cli
sub al, 0x6f
in eax, dx
invalid
jb 0x1400a0e95
sbb al, 0xf1
jge 0x1400a0f21
invalid
out dx, al
mov bl, 0xc8
add al, 0x26
js 0x1400a0eb0
invalid
adc eax, 0xb98e8b1c
sub eax, 0x4c556ff2
mov qword [rbp + 0x2c4af99d], r11
invalid
add dword [rbx], eax
outsd dx, dword [rsi]
scasb al, byte [rdi]
iretd
mov bh, 0xbf
test dword [rax - 6], 0xd58af0f1
cmc
outsb dx, byte [rsi]
imul ebx, dword [rdx - 0x5cd8af5d], 0xf207923d
invalid
invalid
invalid
and al, 0x15
lahf
jbe 0x1400a0f11
mov al, 0xe1
in eax, 0x80
xchg edx, eax
and ch, bh
xchg ebp, eax
push 0x16
imul eax, eax, 0x71
cmpsb byte [rsi], byte [rdi]
push rbx
and ch, 0xb3
sub ch, dl
xchg ebp, eax
outsd dx, dword [rsi]
cmc
cmpsb byte [rsi], byte [rdi]
mov al, 0x87
lodsd eax, dword [rsi]
sub ah, byte [rdx]
or al, 0x72
mov dl, 0xf3
movsb byte [rdi], byte [rsi]
insb byte [rdi], dx
lodsb al, byte [rsi]
invalid
sal dword [rdi - 0x48], 0x96
cmc
mov esp, 0x8db712ce
mov dl, 0xd9
fld dword [rdx + rbx*2]
fld dword [rdx + rbx*2]
cdq
movabs dword [0x389a8049aa5c9356], eax
std
mov edx, 0x5c01fac
push rcx
xchg esp, eax
insb byte [rdi], dx
scasb al, byte [rdi]
call 0xf7015899
adc al, 0x5d
sahf
sbb al, byte [rdx + 0x54]
xchg di, di
cdq
jl 0x1400a0ff8
mov esi, 0xe5cfa96e
jns 0x1400a1036
sub ecx, esi
cli
invalid
mov ch, 0x45
movabs byte es:[0x63e180c9eb5b249c], al
mov esp, 0xa01a277f
invalid
sbb eax, 0x9d2d11a0
jg 0x1400a0ffe
sbb ah, byte [rax + 0x2d11a01d]
popfq
movabs al, byte [0x440d499d2d11a01d]
and ebp, dword [rdi]
cmp ebx, dword [rax]
invalid
or rax, 0x3b2f2344
sbb byte [rsi], bl
invalid
xchg eax, ebp
sub al, 0x4e
invalid
call 0x15afa5e29
adc eax, 0xe60ff1fc
adc eax, 0xe60ff1fc
sar byte [rbx], cl
retf
cmp ecx, ebx
adc dl, al
wait
out dx, eax
add eax, 0xbffaff9b
clc
mov bl, 0xf5
cdq
jbe 0x1400a0fc8
fcmovnb st(0), st(7)
mov edi, 0xf3211642
invalid
invalid
and ebx, esi
jmp [rsi]
invalid
invalid
cdq
outsd dx, dword [rsi]
je 0x1400a0fd5
mov esi, 0x782c9ff7
insd dword [rdi], dx
js 0x1400a10ad
lahf
jmp rdi
neg edi
adc eax, 0xaf45fc87
push qword [rbp - 0x3ca9fab0]
mov ch, 0x50
add eax, 0x9808c356
test al, 0x40
xlatb
jnp 0x1400a1072
and edx, ebp
xchg byte [rbx + 0x69], ch
cmp esp, 0xd3a9d622
lodsb al, byte fs:[rsi]
adc al, 0xf0
and esp, ebx
push rax
xchg dword [rsi], esp
retf 0xed56
push rsi
in eax, dx
push rsi
in eax, dx
invalid
fdivr qword [rax - 0x7d97c5b6]
insd dword [rdi], dx
leave
imul esp, esi, 0x25
popfq
cli
xchg edi, eax
movabs byte [0xecb17a3168ea35e], al
invalid
pop rbx
invalid
xchg byte [rbp - 7], ch
imul ecx, edi, 0xfffffffa
adc al, 0x4c
pop rcx
pop rsp
mov eax, 0xfdd3c848
enter 0xfffffffffffffdd3, 0xffffffffffffffaf
enter 0xfffffffffffffdd3, 0xffffffffffffffaf
invalid
test dword [rdi - 0xa], ecx
invalid
cmp ch, byte [rcx + rsi*8]
popfq
shr ah, cl
invalid
outsd dx, dword [rsi]
xor al, 0x5e
mov ecx, ds
sub dh, byte [rdx + 0x75]
sbb al, 0x76
mov bl, 0xfb
movabs byte [0x73bd5071f5a5ffae], al
invalid
xor dword [rax - 0x15], eax
mov al, 0x87
loop 0x1400a11c3
in al, 0xf5
fld st(3)
sbb eax, 0x8f47de6
jle 0x1400a11c3
or ecx, dword [rax - 0x3cc69518]
invalid
sub eax, 0xcfd621d9
invalid
jne 0x1400a11dc
sub dword [rdx + rbp*8 - 0x2d], esi
cmpsb byte [rsi], byte [rdi]
sub bh, ah
mov dh, 1
sub eax, 0xc7c86e40
pop rdx
and eax, 0x16fe4c2f
invalid
invalid
add eax, 0x324df3ce
stosb byte [rdi], al
push qword [rdx + rsi*8 + 0x652df4f9]
invalid
invalid
xor al, 0xa5
sub dword [rbp - 0x1a72ad2e], ebx
mov dh, 0x8a
or dword [rsi + 0x33], ebx
sbb eax, 0x2c2f5ac2
invalid
sub al, 0xee
invalid
fnsave dword [rdi + rbx*2 - 2]
fdivrp st(4)
invalid
push rsp
jae 0x1400a1186
pushfq
in al, dx
or ebx, esi
in al, 5
jae 0x1400a123c
mov r10d, dword [r9 - 0x37]
lodsd eax, dword [rsi]
sub rax, 0xffffffffea7c4f6c
jl 0x1400a11cd
jl 0x1400a11cd
sbb dword [rax + rcx*8 + 0x61], edi
lahf
or eax, 0xf35bcb90
ficomp dword [rbp + 0x32]
invalid
invalid
sbb r13, qword [rbx + rdi*8 + 0x6f]
invalid
invalid
invalid
cmp esp, dword [rsi + 0x4f]
test byte [rdi + rcx*2 + 0x77], 0xa6
ja 0x1400a11e6
lahf
pop rbx
xchg edi, eax
mov cl, 0x3e
not byte [rdi]
mov dh, 0xc0
add ebp, dword [rbx]
sahf
int 0xc4
ja 0x1400a125f
xchg edx, eax
invalid
adc al, 0x6c
movabs al, byte es:[0x8aed547da7fad5b4]
cmpsd dword [rsi], dword [rdi]
jge 0x1400a12bd
in eax, dx
mov bh, dh
cmpsd dword [rsi], dword [rdi]
jge 0x1400a12bd
in eax, dx
mov bh, dh
invalid
out dx, eax
call qword [rdi - 0x6020c62b]
leave
invalid
and dword [rdx], 0xcf220817
sal byte [rsi + 0x311f42f9], cl
invalid
pop rdi
invalid
scasd eax, dword [rdi]
adc rax, 0x311ac3a4
add bh, byte [rcx]
mov edi, dword [r11 - 0x49]
in eax, dx
invalid