Function at 0x14000f7f0
Capabilities:
Parse pe header

Disassembly:
mov r11, rsp
push rdi
push r14
push r15
sub rsp, 0x90
mov qword [r11 - 0x68], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x1402f61c0]
xor rax, rsp
mov qword [rsp + 0x80], rax
xor eax, eax
mov qword [r11 - 0x60], rax
lea rdx, [r11 - 0x60]
call fcn.1400063f0
nop
mov rax, qword [rsp + 0x48]
mov r15, qword [rax + 0x10]
add r15, rax
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x14000f895
lea rdx, [0x1402c0e28]
lea rcx, [0x141e51ee0]
call fcn.14000e700
mov rcx, rax
call fcn.14000e950
jmp 0x14000fa8a
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 4]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov r14, rax
test rax, rax
jne 0x14000f8eb
lea rdx, [0x1402c0e38]
lea rcx, [0x141e51ee0]
call fcn.14000e700
mov rcx, rax
call fcn.14000e950
xor bl, bl
jmp 0x14000fa7b
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
test rax, rax
jne 0x14000f93e
lea rdx, [0x1402c0e50]
lea rcx, [0x141e51ee0]
call fcn.14000e700
mov rcx, rax
call fcn.14000e950
xor bl, bl
jmp 0x14000fa71
mov rax, qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
mov eax, 0x5a4d
cmp word [rdi], ax
je 0x14000f965
lea rdx, [0x1402c0e68]
jmp 0x14000fa51
movsxd rcx, dword [rdi + 0x3c]
add rcx, rdi
cmp dword [rcx], 0x4550
je 0x14000f980
lea rdx, [0x1402c0e78]
jmp 0x14000fa51
mov r9d, dword [rcx + 0x28]
movzx r11d, word [rcx + 0x14]
add r11, rcx
mov r8d, ebx
movzx r10d, word [rcx + 6]
test r10d, r10d
je 0x14000fa4a
lea rdx, [r11 + 0x24]
mov ecx, dword [rdx]
cmp r9d, ecx
jb 0x14000f9b0
add ecx, dword [rdx - 4]
cmp r9d, ecx
jb 0x14000f9c2
inc r8d
add rdx, 0x28
cmp r8d, r10d
jge 0x14000fa4a
jmp 0x14000f9a1
movsxd rax, r8d
lea rcx, [rax + rax*4]
mov esi, dword [r11 + rcx*8 + 0x2c]
sub esi, dword [r11 + rcx*8 + 0x24]
add esi, r9d
je 0x14000fa4a
mov ecx, esi
add rcx, rdi
xor edx, edx
mov r8d, 0x80
call fcn.1401263b0
mov rdx, r15
lea rcx, [0x141e52010]
call fcn.14000e700
mov rcx, rax
lea rdx, [0x1402c0ec0]
call fcn.14000e700
mov rcx, rax
test rax, rax
je 0x14000fa1a
mov rax, qword [rax]
movsxd rbx, dword [rax + 4]
add rbx, rcx
and dword [rbx + 0x18], 0xfffff9ff
or dword [rbx + 0x18], 0x800
mov edx, esi
call fcn.14000b1c0
mov rcx, rax
lea rdx, [0x1402c0ea8]
call fcn.14000e700
mov rcx, rax
call fcn.14000e950
mov bl, 1
jmp 0x14000fa67
lea rdx, [0x1402c0e88]
lea rcx, [0x141e51ee0]
call fcn.14000e700
mov rcx, rax
call fcn.14000e950
xor bl, bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
nop
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rbp, rbp
je 0x14000fa8a
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x48]
mov eax, dword [rcx]
test eax, eax
je 0x14000faab
cmp eax, 0xffffffff
je 0x14000fab9
or eax, 0xffffffff
lock xadd dword [rcx], eax
sub eax, 1
jne 0x14000fab9
mov rcx, qword [rsp + 0x48]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.1400309b0
movzx eax, bl
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.140122ce0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret