Function at 0x140004100
Capabilities:
Parse pe header
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
mov rax, qword [0x14003c368]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x14003cee0]
mov edx, dword [0x14003cee4]
lea ebx, [rax - 1]
imul ebx, eax
not ebx
or ebx, 0xfffffffe
cmp ebx, 0xffffffff
sete byte [rbp - 1]
cmp edx, 0xa
setl byte [rbp - 2]
mov r15, rcx
mov eax, 0xd619085
lea rbx, [0x1400354d2]
mov esi, 0xe732557b
mov r14d, 0x6cd190ed
jmp 0x1400041a0
mov eax, 0x10
call fcn.140017750
sub rsp, rax
mov rcx, rsp
mov qword [rcx], 0
sub rsp, 0x20
mov rdx, r15
mov r8, rbx
call fcn.14001d870
add rsp, 0x20
mov eax, 0x14d15f3c
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0xd619084
jg 0x140004220
cmp eax, 0xe732557a
jle 0x1400042f0
cmp eax, 0x7b2318
jg 0x14000439e
cmp eax, 0xe732557b
je 0x140004164
cmp eax, 0xfb9f8931
jne 0x1400041a0
sub rsp, 0x20
mov ecx, 0x200
call fcn.14001e750
add rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov r9, qword [rcx]
sub rsp, 0x20
mov edx, 1
mov r8d, 0x200
mov rcx, rax
call fcn.14001dbf8
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14001d994
add rsp, 0x20
mov eax, 0x1c733e80
jmp 0x1400041a0
cmp eax, 0x50ceeeb5
jg 0x140004370
cmp eax, 0x14d15f3b
jle 0x1400043c1
cmp eax, 0x14d15f3c
je 0x1400043f6
cmp eax, 0x1c733e80
jne 0x1400041a0
sub rsp, 0x20
mov ecx, 0x200
call fcn.14001e750
add rsp, 0x20
mov rdi, rax
mov rax, qword [rbp - 0x10]
mov r9, qword [rax]
sub rsp, 0x20
mov edx, 1
mov r8d, 0x200
mov rcx, rdi
call fcn.14001dbf8
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14001d994
add rsp, 0x20
movsxd rax, dword [rdi + 0x3c]
add rax, rdi
movzx ecx, word [rdi]
cmp ecx, 0x5a4d
sete byte [rbp - 4]
mov qword [rbp - 0x20], rax
mov eax, dword [0x14003cee0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xfb9f8931
cmove eax, r14d
cmp dword [0x14003cee4], 0xa
mov edx, 0xfb9f8931
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, r14d
jmp 0x1400041a0
cmp eax, 0xb8218432
je 0x14000447e
cmp eax, 0xcb4fb086
je 0x14000448b
cmp eax, 0xcce3126c
jne 0x1400041a0
mov eax, dword [0x14003cee0]
mov ecx, dword [0x14003cee4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete r8b
cmp ecx, 0xa
mov rsi, rbx
setl bl
xor bl, r8b
mov ebx, 0xfb9f8931
mov edi, 0x1c733e80
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
mov rbx, rsi
mov esi, 0xe732557b
jmp 0x1400041a0
cmp eax, 0x50ceeeb6
je 0x140004498
cmp eax, 0x6cd190ed
je 0x1400044b4
cmp eax, 0x7cec1404
jne 0x1400041a0
mov eax, 0x11e15b79
mov r13d, r12d
jmp 0x1400041a0
cmp eax, 0x7b2319
je 0x1400044ca
cmp eax, 0x376aa01
jne 0x1400041a0
mov eax, 0x7cec1404
xor r12d, r12d
jmp 0x1400041a0
cmp eax, 0xd619085
jne 0x1400044e0
movzx ecx, byte [rbp - 1]
movzx eax, byte [rbp - 2]
mov edx, eax
xor dl, cl
test al, al
mov eax, 0xe732557b
mov edi, 0x14d15f3c
cmovne eax, edi
test cl, cl
cmove eax, esi
test dl, dl
cmovne eax, edi
jmp 0x1400041a0
mov eax, 0x10
call fcn.140017750
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp - 0x10]
mov qword [rax], 0
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
mov rdx, r15
mov r8, rbx
call fcn.14001d870
add rsp, 0x20
mov rax, qword [rbp - 0x10]
cmp qword [rax], 0
setne byte [rbp - 3]
mov eax, dword [0x14003cee0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xe732557b
mov edi, 0x7b2319
cmove eax, edi
cmp dword [0x14003cee4], 0xa
cmovge eax, esi
setl dl
xor dl, cl
cmovne eax, edi
jmp 0x1400041a0
mov eax, 0x7cec1404
mov r12b, 1
jmp 0x1400041a0
mov eax, 0x11e15b79
xor r13d, r13d
jmp 0x1400041a0
mov rax, qword [rbp - 0x20]
cmp dword [rax], 0x4550
mov eax, 0x376aa01
mov ecx, 0xb8218432
cmove eax, ecx
jmp 0x1400041a0
cmp byte [rbp - 4], 0
mov eax, 0x376aa01
mov ecx, 0x50ceeeb6
cmovne eax, ecx
jmp 0x1400041a0
cmp byte [rbp - 3], 0
mov eax, 0xcb4fb086
mov ecx, 0xcce3126c
cmovne eax, ecx
jmp 0x1400041a0
cmp eax, 0x11e15b79
jne 0x1400041a0
mov rax, qword [rbp - 0x18]
and r13b, 1
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.1400177b0
add rsp, 0x20
mov eax, r13d
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret