Function at 0x140001f80
Capabilities:
Parse pe header
Read file via mapping

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
test rcx, rcx
je 0x140002094
mov rsi, rcx
call fcn.140002130
test al, al
je 0x14000209d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
add rax, 1
cmp rax, 2
jb 0x140002094
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8d, 0x1000002
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov rdi, rax
add rax, 1
cmp rax, 2
jb 0x140002083
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
test rax, rax
je 0x14000207a
mov rbx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne case.default.0x14000208d
movsxd rax, dword [rbx + 0x3c]
cmp dword [rbx + rax], 0x4550
jne case.default.0x14000208d
movzx ecx, word [rbx + rax + 0x18]
cmp ecx, 0x20b
jne case.default.0x14000208d
mov edx, dword [rbx + rax + 0x50]
cmp rdx, 0x148
jb case.default.0x14000208d
mov rcx, rbx
call fcn.140002180
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
jmp 0x1400020b0
push rsi
sub rsp, 0x40
test rcx, rcx
je case.default.0x140002106
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov r8d, 1
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400020f3
add rsp, 0x40
pop rsi
ret
mov rsi, rax
mov rcx, rax
call fcn.140001e70
mov rcx, rsi
add rsp, 0x40
pop rsi
jmp qword [sym.imp.KERNEL32.dll_CloseHandle]
pop rsp
pop rdi
scasb al, byte [rdi]
xchg byte [rax + 0x1437537f], al
cli
out dx, eax
invalid
hlt
invalid
invalid
jge case.0x140002106.3
and eax, 0x7f756d56
std
retf
out dx, al
leave
pop rsi
je 0x1400a087c
call 0xe9e527f2
pop rbx
or al, 0xd1
cmp ch, byte [eax + 0x527e8adf]
or eax, 0x84a782c1
imul eax, dword [rdi - 0x42dfc171], 0xffffff96
imul edi, dword [rsi], 0x7d
loope 0x1400a086e
std
push rsi
popfq
cmp r15b, 0x98
jbe 0x1400a08ae
mov cl, 0xf4
cdq
int1
invalid
sar byte [rsi], 0xc3
loope 0x1400a08db
cwde
cwde
invalid
ja 0x1400a08b1
xchg ebx, eax
cld
cmp eax, dword [rsi]
cmp qword [r11 - 0x5aece21], rdx
jle 0x1400a08b3
invalid
jmp [rdi - 0x23]
invalid
or edi, dword [rdx]
pop rdx
out dx, eax
cmpsd dword [rsi], dword [rdi]
invalid
loopne 0x1400a092f
mov dl, 0xfd
mov dl, 0xfd
invalid
mov dword [rsi], esp
out dx, eax
mov edi, 0x9e08f2a0
jle 0x1400a08f8
outsd dx, dword [rsi]
jbe 0x1400a08b3
xlatb
movabs dword [0xffb199dd875a1d6c], eax
js 0x1400a08e9
invalid
fsub dword [rcx + 0x7cbaee4d]
insd dword [rdi], dx
cmpsb byte [rsi], byte [rdi]
stosd dword [rdi], eax
movabs eax, dword [0x51aba66d7cbaee4d]
out dx, al
mov edx, 0xaba66d7c
push rcx
shr ebx, cl
fnstcw word [rdx - 0x17]
mov eax, edi
jmp 0x1400a0913
invalid
je 0x1400a08c9
invalid
lodsb al, byte [rsi]
test al, 0x97
fistp qword [rsi - 0x2d]
push rax
jnp 0x1400a0944
sti
invalid
invalid
xor eax, 0x8bcc8dfe
mov dword [rdx + 0x2fdbff8b], ecx
outsd dx, dword [rsi]
ret
push rcx
fstp dword [rsi + 0x7b]
invalid
push rcx
rcl dword [rax + 0x3b826bc3]
test byte [rcx - 0x18c0ce5c], bl
and byte [rax + rax*4 - 0x43c7f368], ch
sbb byte [rax + 0x14bc380c], 0x6a
sbb byte [rax + 0x14bc380c], 0x6a
push rsi
jb 0x1400a09fc
wbinvd
out dx, al
xor al, 0x4c
add edx, dword [rbx + 0x3f]
sbb byte [r15 - 0x1e2790b5], r8b
add cl, al
jle 0x1400a094f
jge 0x1400a0962
in al, dx
invalid
push rax
push rcx
push rcx
invalid
invalid
pop rax
inc dword [rdi]
movabs eax, dword [0x42edcbf6f6ed168b]
jmp 0x122dd84e4
div dword [rsi + 0x38]
jg 0x1400a0a31
jp 0x1400a0971
jg 0x1400a09a5
invalid
add al, byte [rax]
mov sil, byte [rcx + 0x1f]
push rsi
sbb byte [rcx - 0x24a22783], bl
jbe 0x1400a0a1a
jmp [rdi + 0x181cc717]
scasd eax, dword [rdi]
invalid
hlt
invalid
jne 0x1400a09a6
xor dword [rcx + 0x77d87d5c], esi
vpmaddwd xmm2, xmm6, xmmword [rcx]
xor ecx, dword [rsi + 0x216f86b2]
mov dl, 0x86
outsd dx, dword [rsi]
and dword [rax], ebp
sbb al, 0xaf
mov dl, 0x86
outsd dx, dword [rsi]
and dword [rax], ebp
sbb al, 0xaf
scasb al, byte [rdi]
invalid
inc dword [0x12021492c]
invalid
insb byte [rdi], dx
sti
dec dword [rbx - 0x220268c1]
retf
cli
loopne 0x1400a0a38
out dx, eax
and esi, edx
mov edi, 0x209f5c72
invalid
xor al, ch
lea ebp, [rbp + 0x7d20a3e5]
cmpsb byte [rsi], byte [rdi]
cmpsb byte [rsi], byte [rdi]
invalid
cmc
add dh, byte [rsi + rdi*8 - 0x6b]
mov edi, 0xcef76f8a
sub ebx, ecx
xor dh, byte [rbx - 0x43]
and al, 0xc8
lodsd eax, dword [rsi]
ja 0x1400a0a38
sbb eax, 0x5faae51b
in eax, 0xaa
pop rdi
jmp rsi
jmp 0x16dfc2225
invalid
cwde
invalid
invalid
pop rdi
and dword [rcx + rdi*4], edi
out dx, eax
pushfq
mov edi, ecx
cmc
mov edi, ecx
jns 0x1400a0b6f
outsd dx, dword [rsi]
adc eax, 0x1211a224
loope 0x1400a0a91
mov bl, cl
xor bl, byte [rbp - 0x13bc7ee9]
invalid
sbb al, 0x3b
adc dword [rsi - 0x7b], ebp
jnp case.0x140002106.31
ret 0x7b06
xchg ebp, eax
stc
popfq
cmp eax, 0xbc75edaf
mov bl, 0x18
fsubr dword gs:[rcx]
sbb al, 0x51
test al, 0xf7
loop 0x1400a0b14
cmp eax, 0xa23d08fc
invalid
xchg edi, eax
pop rcx
sbb byte [rbp - 0x6d], ah
sbb bh, byte [rbp + 0x6f3820fd]
xchg esi, eax
loope 0x1400a0ae7
sbb ebx, dword [rbx + 0x11]
jno 0x1400a0ae8
sub eax, ebp
ret
call 0x13b63ceb8
stc
jbe 0x1400a0be5
jne 0x1400a0b7f
invalid
movabs byte [0xd92e62ed509c3fd], al
push rsi
mov ecx, 0x21368608
and dword ss:[rsi - 0x3e], eax
invalid
invalid
and dword ss:[rsi - 0x3e], eax
and dword [rsi - 0x3e], eax
or bh, byte [rbx - 0x7f]
invalid
cmp al, 0xff
out 0xf6, eax
loopne 0x1400a0b53
mov dword [rdi - 0x75ff9156], 0xea2aab31
add byte [rdx - 0x15d554cf], cl
sal dh, 0x57
cmpsd dword [rsi], dword [rdi]
invalid
mov ecx, dword [rdx + riz*8 - 0x449fcee0]
invalid
movsd dword [rdi], dword [rsi]
xor al, 0x98
mov r15d, dword [rdi - 0xf74754c]
mov edi, dword [rdi - 0xf74754c]
jp 0x1400a0c19
leave
adc al, 0xf8
cld
pop rsi
invalid
ret 0xd2be
or ebx, dword [rdi + 0x41]
invalid
jnp 0x1400a0b88
xchg edi, eax
movsd dword [rdi], dword [rsi]
cli
hlt
xchg byte [rcx - 0x23], al
js 0x1400a0c0d
je 0x1400a0c41
mov edx, dword [rbx + rcx*4]
out 0xfa, al
jne 0x1400a0bc0
cmp eax, 0x87add3c4
sbb ebp, dword [rdi]
jns 0x1400a0c50
invalid
shr dword [rbp + 0x792f1b87], cl
cmp ebx, dword [rbx + 0x17]
movsd dword [rdi], dword [rsi]
movabs eax, dword [0xe0df319c5fa18d69]
xor edi, ebx
loopne 0x1400a0c58
jb 0x1400a0be1
pop rbx
invalid
imul ecx, dword [rbp + 0x319c5fa1], 0x7236e0df
mov ebp, 0x30953fa
xor edi, ebx
loopne 0x1400a0c58
jb 0x1400a0be1
cli
push rbx
or dword [rbx], eax
invalid
invalid
add eax, 0x588b56a4
adc al, 0x3f
cmp ebp, dword [rdi + 0x5d81e78b]
mov esp, edi
invalid
pop rbp
mov bh, 0x34
mov esp, edi
sbb dword [rbp - 0x49], 0xfd1fda34
ficomp dword [rdi]
std
invalid
xor dword [rcx], esi
invalid
mov bh, 0xdf
sub dh, al
sbb al, 0xe4
sbb al, 0xc0
invalid
retf
jmp 0x1400a0cdd
rcl dword [rcx], 0x54
add dword [rdi], ebp
sar byte [rsp + rdi*8], cl
push rbp
fcmovnb st(0), st(5)
cmpsb byte [rsi], byte [rdi]
dec esp
test byte [rax + rax*2 - 0x21], 0xff
int1
out dx, eax
invalid
xor al, 0xc1
fisttp qword [rax - 0x35efc53]
mov cl, 0x8f
outsd dx, dword [rsi]
push rdi
scasd eax, dword [rdi]
or esp, dword [rbx + 0x74effacb]
mov bh, 0xff
mov ah, byte [rdi]
fidivr dword [rdi - 0x41]
div dword [rsi + 0x15]
invalid
adc eax, 0xb9ef2608
mov ah, 0x91
invalid
or byte [rsi], ah
out dx, eax
mov ecx, 0x771691b4
adc al, 0xa9
int1
invalid
mov edi, 0xa8abf
retf 0x5fa1
invalid
invalid
je 0x1400a0da7
xor al, 0x48
invalid
add bh, bh
invalid
adc al, 0xd9
not byte [rdi - 0x41]
call [rcx + 0x71f3ab38]
mov ebp, edi
cmp byte [rdx - 0xf], bh
std
mov edx, 0x6ba2acf7
xor eax, ecx
push 0xfffffffffffffff7
add byte [rsi - 0x10c8bd86], cl
invalid
jp 0x1400a0db5
invalid
out dx, eax
add byte [rsi - 0x10c8bd86], cl
invalid
invalid
invalid
cwde
mov ebx, ecx
jp 0x1400a0d6f
push rsi
xchg ah, bl
cwde
push rdi
xchg edi, eax
test dword [rax - 0x401057a9], esi
iretd
out dx, eax
mov edi, 0x3ffa4dcf
invalid
sti
mov al, 0x2c
add cl, byte [rax - 0x244489a3]
mov byte [rbp + 0x76], bl
mov ebx, 0xac6ffbdb
mov byte [rbp + 0x76], bl
mov ebx, 0xac6ffbdb
invalid
invalid
mov bl, 0xf5
retfq
ja 0x1400a0e4c
sar dword [rbx], cl
pop rdi
pushfq
mov dword [rcx - 0x42715d6e], ebx
loopne 0x1400a0d8c
in eax, 0x3c
cmpsd dword [rsi], dword [rdi]
add eax, 0x764460e1
jbe 0x1400a0db1
jbe 0x1400a0db1
mov ah, 0x3b
or dword [r13 - 0x50], edi
ficomp dword [rbx - 0x3c]
jns 0x1400a0dd6
invalid
leave
sbb bl, al
pop rsi
fcom qword [rbx - 0x79]
lahf
cmp al, 0xc7
and byte [rcx + 0x3c], dl
mov ah, 0xf6
mov al, 0xc8
test al, 0x59
jne 0x1400a0e7e
cld
xchg ecx, eax
dec edi
lahf
xchg edi, eax
retf 0xae7a
scasd eax, dword [rdi]
scasd eax, dword [rdi]
sti
movabs dword [0xa80123c5bca280fc], eax
test byte [rsi + 0x3af5ce01], dl
test al, 0x84
xchg esi, eax
add esi, ecx
cmc
cmp al, dl
ret 0x31dd
jg 0x1400a0e77
ret 0x31dd
invalid
call 0x158a9a350
sahf
fld qword [0x187a40d6d]
cdq
sbb r13d, r10d
cdq
sbb r13d, r10d
lahf
int3
invalid
pop rbx
js 0x1400a0e72
cld
jle 0x1400a0e2d
call rdi
mov cl, 0xbf
xchg ebp, eax
mov cl, 0xc5
outsd dx, dword [rsi]
scasd eax, dword [rdi]
std
cwde
cmc
or cl, dh
retf
popfq
test byte cs:[rsi - 0x5be61a89], bl
invalid
or byte [0x11be608dd], 0x7c
imul ebx
movabs byte [0x4f4d93e2b77e0369], al
out 0x47, al
invalid
or eax, 0xdbdbfa2d
jl 0x1400a0ea8
jmp 0x1400a0e55
jp 0x1400a0e60
int 0xb9
sub al, 0x49
pop rax
mov eax, 0xfe4c3a80
add eax, 0x274a1c77
ja 0x1400a0eec
invalid
invalid
cmpsd dword [rsi], dword [rdi]
rcl dword [rax]
sbb al, 0x41
ja 0x1400a0f46
ja 0x1400a0eec
invalid
invalid
wait
invalid
and edi, dword [rbx + rbx*4]
push rcx
jl 0x1400a0f3f
mul dword [rbx + 0x532032cd]
sub al, 0x63
cmp dword [rbx], esp
movabs al, byte [0x100df9254babb521]
stc
or eax, 0x84f24110
pop rax
invalid
adc dword [rdx], 0xffffff97
stc
or eax, 0x84f24110
pop rax
rol dword [rbx - 0x37da68ee], cl
mov ecx, 0x14005421
invalid
xchg edi, eax
and eax, 0x5421b9c8
add byte [rdx + rbp*8], dl
lea ebp, [rbx - 0x47]
invalid
jnp 0x1400a0f91
mov ch, 0x6e
invalid
invalid
cmc
push rcx
or eax, 0xd2bf572e
adc dword [rbx - 7], edx
iretd
jrcxz 0x1400a0f0c
push rbp
rep lodsd eax, dword [rsi]
lodsd eax, dword [rsi]
mov esi, 0x6fdd4fa5
add eax, 0xa2789e84
js 0x1400a0f03
add esp, dword [rsi]
hlt
movabs al, byte [0x75d6c358b7c03f7b]
ja 0x1400a0f88
invalid
adc ebx, eax
invalid
vpavgb ymm1, ymm12, ymm3
rcl byte [rsi], 0xdd
sub al, 0xc2
mov edi, 0x2cae75ec
sbb eax, 0xe6353fe5
invalid
mov ebx, eax
sub dword [rbp + 0x20a1fbd5], 0x73
mov dl, 0xc3
or edi, dword [rcx]
add al, 0xdc
ret 0xf855
movabs eax, dword [0xf09f035273a11df4]
jp 0x1400a1008
add ebx, dword [rdi + 0x5457af0]
fist word [r10]
pop rsi
add eax, 0x5e12df4f
jns 0x1400a0f5f
sub eax, 0x9e97b91f
loope 0x1400a0f56
invalid
cmp al, 0x16
mov ebp, 0xb44805c1
mov dh, 0xc1
and al, 9
mov dh, 0x4e
push rax
add dword [rcx], ecx
pop rcx
shr dword [rdi + 0x46534ded], 1
jb 0x1400a1001
insd dword [rdi], dx
invalid
int1
mov dh, byte [rdi - 0x22e384ef]
invalid
push rcx
pop rbx
sbb cl, dh
invalid
lahf
idiv byte [rdi + 0x34913767]
xor byte [rcx + rsi], dh
invalid
invalid
jmp 0x1400a0fb8
invalid
mov bl, 0x77
jb 0x1400a106e
scasb al, byte [rdi]
mov esi, 0xaabf7bec
xor esi, dword [rdx + 0x4f]
cmp eax, 0x667a493b
popfq
ja 0x1400a1089
cmp edx, edi
invalid
mov edx, dword ds:[rdx + rdx*4 - 2]
jae 0x1400a10ef
test byte [rdx], ch
invalid
outsd dx, dword [rsi]
invalid
add edi, dword [rbp - 0x4e]
imul ebp, edi, 0x22
invalid
add eax, eax
in eax, 0xd
in eax, 0x2e
shr dword [rsi + rcx*8 - 0x78], 0x1e
fdivr qword [rsi - 0x7328a736]
sub ebx, edi
ret 0xdd0
invalid
invalid
ror byte [0x13f3ecfed], 1
stosb byte [rdi], al
invalid
rcr edi, 1
sbb rbx, r10
out 0x3c, al
adc cl, ah
loope 0x1400a117b
pop rdx
pop rdx
invalid
cmp eax, 0x27213863
mov ecx, 0x36be044b
mov edx, 0xfa4e0216
invalid
invalid
invalid
invalid
invalid
invalid
popfq
movsb byte [rdi], byte [rsi]
jl 0x1400a119b
invalid
add dh, 0xb1
push rbp
nop
int1
mov r9b, 0xf2
mov ebx, 0x82c69cd7
test dword [rcx + 0x3e588bef], 0x73ad04c4
invalid
add al, 0xad
jae 0x1400a1165
invalid
mov ebx, dword [rax + 0x3e]
invalid
mov esp, 0x32f34f74
invalid
enter 0x2ef0, 0xffffffffffffffb1
push 0xffffffffffffffe1
lodsd eax, dword [rsi]
loope 0x1400a114a
loop 0x1400a112d
loop 0x1400a1155
jne 0x1400a1138
invalid
xor eax, 0x799de78f
sahf
xchg edi, eax
paddusw mm7, mm7
jge 0x1400a1196
xchg edi, eax
int3
mov dword [rsp + rsi*8 - 0xfa06630], edx
mov cl, 0x4f
invalid
push rax
jnp 0x1400a116e
insd dword [rdi], dx
leave
sahf
pop rbp
mov esi, 0x1d41df97
pop rsi
enter 0x47ef, 0x13
cmp al, 0x90
invalid
add eax, 0x5ab6f8fe
jb 0x1400a1269
fdiv st(5)
mov al, 0x4d
cld
invalid
jmp [rsi - 0x24]
invalid
xlatb
pop rsp
rep stosb byte [rdi], al
iretd
sbb al, 0xd3
int 0xd5
pop rcx
insb byte [rdi], dx
scasd eax, dword [rdi]
add byte [rcx + rdi - 0xd621d76], dh
pop rdi
mov ah, 0x39
mov ah, dl
popfq
pop rdi
mov cl, dh
pop rdi
jbe case.0x140002106.124
jl case.0x140002106.122
jl case.0x140002106.122
fistp qword [rdx]
mov r10d, 0x9a611b86
sub byte [rbx - 0xd], 0x1e
int 0xbf
sub esi, ebx
mov bl, 0x3e
pop rsi
invalid
invalid
mov dl, 0x3c
fstp qword [rcx]
cmp ch, byte [rdx]
invalid
sub al, 0xff
lahf
xchg edi, eax
in eax, 0xec
rep outsd dx, dword [rsi]
stosb byte [rdi], al
xchg edi, eax
loope 0x1400a1241
invalid
jl 0x1400a12fc
out dx, al
invalid
lea ecx, [rsi]
jrcxz 0x1400a12c7
invalid
out dx, al
jbe 0x1400a130b
cmp eax, edx
jle 0x1400a1278
mov ss, word [rbx]
in al, 0x6c
xchg ebp, eax
retf 0x128d
lea edx, [rdx]
or dl, bl
cmp ch, bh
jmp 0x1010ed25b
or esi, dword [rbp + 0x1c784dc1]
mov eax, 0x12dcdb6f
adc eax, 0x43fdfe46
adc byte cs:[rsi + 0x6d65b795], dl
adc ecx, eax
rcr dword [rdx + rdx*2 + 0x18952d41], cl
and dword [rcx - 0x69], edx
pushfq
push rdx
sub eax, 0x51211895
xchg edi, eax
js 0x1400a1325
mov dl, byte [rdx + 3]
sub ebx, dword [rax]
ret