Function at 0x140355975
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
xor r9, rsp
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
add r9w, bx
cmovae r9d, ecx
mov qword [rsp + 0x20], rdi
push r12
rol r8, cl
sar r12d, 0x35
push r14
push r15
sub rsp, 0x40
xor ebx, ebx
lea r8, str.lmfao
mov r9b, r14b
dec r9
mov r15, rcx
movzx rcx, r13w
mov r12b, 0x75
adc ecx, 0x15bd3de1
mov dword [rsp + 0x28], ebx
bts r12d, esi
neg rcx
rol r12w, 0xfb
mov r12, 0xffffffffffffffff
mov qword [rsp + 0x20], rbx
neg ecx
mov r9d, r12d
shrd cx, dx, 0xb6
sub edx, edx
not cl
movsx cx, bpl
jmp 0x1403559f8
mov ecx, 0xfde9
call 0x1400e1840
mov ecx, eax
cwd
movsxd rdi, ecx
lea edx, [rbx + 2]
add ecx, 1
bswap di
mov edi, eax
cmovb rcx, r12
jmp 0x140355a1e
call 0x140186cb5
mov r8, qword [0x1400056e0]
mov r9d, r12d
shr ecx, 0x68
btr ecx, 0xad
sub edx, edx
movzx rcx, si
mov dword [rsp + 0x28], edi
mov cx, 0x56ca
mov ecx, 0xfde9
jmp 0x140355a4d
mov qword [0x1400056d8], rax
jmp 0x140355a59
mov qword [rsp + 0x20], rax
call 0x14004c2e7
mov rcx, qword [0x1400056d8]
cqo
movzx dx, bh
jmp 0x140355a76
lea rdx, [0x1400056cc]
call 0x1401ee1c5
mov ecx, dword [0x1400056cc]
rcr bpl, cl
mov ebp, ebx
movzx di, r9b
and dil, 0x93
mov qword [0x1400056d0], rax
lea edi, [rcx*8]
cmp bp, 0xcd2
test ecx, ecx
jmp 0x140355ab1
jle 0x140355b4e
mov esi, ebx
btr cx, r12w
bsf r8d, ecx
nop word [rax + rax]
mov r8, qword [rsi + rax]
ror r9w, 0xe3
clc
mov r9d, r12d
shl cl, 0xc2
jmp 0x140355ae4
mov qword [rsp + 0x38], rbx
xadd ch, ch
rol cl, 0xa2
xor edx, edx
not cx
mov qword [rsp + 0x30], rbx
movsx rcx, r12w
mov ecx, 0xfde9
jmp 0x140355b07
mov dword [rsp + 0x28], ebx
jmp 0x140355b10
mov qword [rsp + 0x20], rbx
jmp 0x140355b1a
call 0x14019d1f3
inc ebp
clc
lea rsi, [rsi + 8]
cmp r15b, r14b
add edi, eax
cmp ebp, dword [0x1400056cc]
jmp 0x140355b37
jge 0x140355b4e
mov rax, qword [0x1400056d0]
jmp 0x140355b49
jmp 0x140355acd
movsxd rdx, edi
sub ecx, ecx
jmp 0x140355b58
call 0x1401d6a5c
movsxd rdx, dword [0x1400056cc]
xadd r14, r14
adc r14w, 0x2398
sbb cx, 0x4a37
mov r14d, ebx
cmp r15d, 0x50b945ae
btc cx, 0xb0
bts rcx, rdx
mov qword [0x1400056c0], rax
test r11, rsi
bsf bp, r12w
lea ecx, [rdx*8]
rol bpl, cl
cmp r13b, 0xfc
sub edi, ecx
lea rbp, [rax + rdx*8]
test edx, edx
jmp 0x140355bb1
jle 0x140355c5f
mov rsi, rbx
cmovs r8d, eax
shr ch, cl
mov r8, qword [0x1400056d0]
movsxd rcx, ebp
mov r9d, r12d
cmc
rcl cx, cl
mov qword [rsp + 0x38], rbx
xor edx, edx
mov qword [rsp + 0x30], rbx
movsx ecx, si
cmovns rcx, r10
movzx rcx, si
mov ecx, 0xfde9
jmp 0x140355bf2
mov dword [rsp + 0x28], edi
jmp 0x140355bfb
mov r8, qword [rsi + r8]
jmp 0x140355c04
mov qword [rsp + 0x20], rbp
jmp 0x140355c0e
call 0x1400e4088
mov rcx, qword [0x1400056c0]
clc
lea rsi, [rsi + 8]
cmc
sub edi, eax
inc r14d
jmp 0x140355c2b
mov qword [rsi + rcx - 8], rbp
sbb cl, r10b
rol cl, cl
movsxd rcx, eax
cmp r15w, r13w
cmp r8, 0x172622f2
lea rbp, [rbp + rcx]
jmp 0x140355c4d
cmp r14d, dword [0x1400056cc]
jmp 0x140355c59
jl 0x140355bc0
mov dword [0x1400056c8], 1
test di, r8w
test r15, r15
jmp 0x140355c75
je 0x140355eb9
mov eax, 0x5a4d
cmp word [r15], ax
jne 0x140355eb9
movsxd rax, dword [r15 + 0x3c]
test r14b, cl
cmp eax, 0x400
jmp 0x140355c9b
jg 0x140355eb9
cmp dword [r15 + rax], 0x4550
cmovne rsi, rsi
mov si, bx
lea rsi, [r15 + rax]
jmp 0x140355cb9
jne 0x140355eb9
mov rdi, qword [rsi + 0x30]
shl cx, cl
bts cx, r14w
lea r14, [rsi + 0xb0]
jmp 0x140355cda
cmp dword [r14], ebx
cmovno ecx, ebx
mov cx, r8w
movzx rcx, cx
lea rcx, str.ntdll.dll
jmp 0x140355cf4
cmove r14, rbx
jmp 0x140355cfd
call 0x1401ee1bf
mov rcx, rax
movzx rdx, di
lea rdx, str.NtUnmapViewOfSection
call 0x14014e312
mov rdx, qword [rsi + 0x30]
mov rcx, r12
jmp 0x140355d23
call rax
mov edx, dword [rsi + 0x50]
jmp 0x140355d31
mov r9d, 0x40
cmovno cx, r9w
movzx r8w, dl
jmp 0x140355d46
mov r8d, 0x3000
movsx rcx, di
mov rcx, rdi
jmp 0x140355d58
call 0x14010d7b5
mov rbp, rax
cmp bp, 0x2dbb
test bx, 0x384d
test rax, rax
jne 0x140355db1
test r14, r14
jmp 0x140355d7c
je 0x140355eb9
mov edx, dword [rsi + 0x50]
lea r9d, [rax + 0x40]
not r8d
xor ecx, ecx
mov r8d, 0x3000
jmp 0x140355d99
call 0x1401d8e6d
mov rbp, rax
clc
test rax, rax
jmp 0x140355dab
je 0x140355eb9
mov r8d, dword [rsi + 0x54]
cdq
mov rdx, r15
mov rcx, rbp
jmp 0x140355dc1
mov qword [rsi + 0x30], rbp
jmp 0x140355dca
call 0x1400d79a7
cmp bx, word [rsi + 6]
jmp 0x140355dd8
jae 0x140355e3f
lea rdi, [rsi + 0x11c]
rcr r8d, cl
nop word [rax + rax]
sar dx, 0x4b
mov edx, dword [rdi]
movsx ecx, sp
shr r8b, 0x36
clc
mov ecx, dword [rdi - 8]
setle r8b
dec r8b
lea rdx, [rdx + r15]
mov r8d, dword [rdi - 4]
jmp 0x140355e16
add rcx, rbp
jmp 0x140355e1e
call 0x14018fe6c
movzx eax, word [rsi + 6]
jmp 0x140355e2c
lea rdi, [rdi + 0x28]
jmp 0x140355e35
inc ebx
cmp ebx, eax
jl 0x140355df5
mov rcx, rbp
jmp 0x140355e47
call fcn.140001380
mov edx, dword [rsi + 0x28]
adc r14w, 0x69d5
cmc
xor r8d, r8d
movsx r12, bp
lea rdx, [rdx + rbp]
xor ecx, ecx
jmp 0x140355e6c
mov rbx, qword [rsp + 0x60]
movzx rbp, di
bts rdi, rbp
mov rbp, qword [rsp + 0x68]
sal r14w, 0x1f
cmp dl, 0x8e
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
movzx r14, dx
cmc
dec r15
add rsp, 0x40
pop r15
movzx r12, si
pop r14
movzx r12w, r13b
setnp r12b
pop r12
jmp 0x140355eb4
call 0x140044ae2
xor ecx, ecx
call 0x1400f429b
jmp 0x140001a72