Function at 0x140004cf0
Capabilities:
Parse pe header

Disassembly:
jmp 0x140006e00
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xe0
mov rax, qword [0x1400faa60]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r15d, r15d
mov qword [rbp - 0x69], r15
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
lea rax, vtable.peconv::t_function_resolver.0
mov qword [rbp - 9], rax
lea rax, vtable.peconv::default_func_resolver.0
mov qword [rbp - 9], rax
lea rax, vtable.peconv::hooking_func_resolver.0
mov qword [rbp - 9], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x61], rax
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
lea ecx, [r15 + 0x48]
call fcn.14002d9d8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 1], rax
lea rax, [rbp + 0xf]
mov qword [rbp - 0x59], rax
mov qword [rbp + 0xf], r15
mov qword [rbp + 0x17], r15
lea ecx, [r15 + 0x60]
call fcn.14002d9d8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0xf], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x39], xmm1
lea r8d, [r15 + 0x11]
lea rdx, [0x14007c510]
lea rcx, [rbp - 0x49]
call fcn.140002490
nop
lea r8, [rbp - 0x49]
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 1]
call fcn.1400094e0
mov rcx, qword [rax]
lea rax, [0x140006dc0]
mov qword [rcx + 0x40], rax
mov rdx, qword [rbp - 0x31]
cmp rdx, 0x10
jb 0x140006f41
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000724a
call fcn.14002da1c
movdqa xmm0, xmmword [0x1400f4490]
movdqu xmmword [rbp - 0x39], xmm0
mov byte [rbp - 0x49], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
mov r8d, 0x11
lea rdx, [0x14007c4f8]
lea rcx, [rbp - 0x29]
call fcn.140002490
nop
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 1]
call fcn.1400094e0
mov rcx, qword [rax]
lea rax, [0x140006de0]
mov qword [rcx + 0x40], rax
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x140006fd2
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007250
call fcn.14002da1c
movdqa xmm0, xmmword [0x1400f4490]
movdqu xmmword [rbp - 0x19], xmm0
mov byte [rbp - 0x29], 0
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rbp + 0x1f], xmm1
mov qword [rbp + 0x2f], rax
lea rcx, [rbp + 0x1f]
call fcn.140007590
nop
mov rdx, qword [rbp + 0x27]
mov rcx, qword [rbp + 0x1f]
sub rdx, rcx
lea r8, [rbp - 0x69]
call fcn.140003d40
mov rbx, rax
test rax, rax
je 0x140007052
mov rsi, qword [rbp - 0x69]
mov rdx, rsi
mov rcx, rax
call fcn.1400034f0
test al, al
je 0x14000711f
lea rdx, [rbp - 9]
mov rcx, rbx
call fcn.140003310
test al, al
jne 0x14000711f
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov ebx, 1
mov rcx, qword [rbp + 0x1f]
test rcx, rcx
je 0x14000709d
mov rdx, qword [rbp + 0x2f]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000708c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007244
call fcn.14002da1c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f], xmm0
mov qword [rbp + 0x2f], r15
lea rax, [rbp + 0xf]
mov qword [rbp - 0x59], rax
mov r8, qword [rbp + 0xf]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0xf]
call fcn.14000a870
mov edx, 0x60
mov rcx, qword [rbp + 0xf]
call fcn.14002da1c
nop
lea rax, [rbp - 1]
mov qword [rbp - 0x61], rax
mov r8, qword [rbp - 1]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 1]
lea rcx, [rbp - 1]
call fcn.14000a990
mov edx, 0x48
mov rcx, qword [rbp - 1]
call fcn.14002da1c
mov eax, ebx
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14002d6f0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov edx, 0x40
mov rcx, rbx
call fcn.140004c40
mov r14d, 0x5a4d
test al, al
jne 0x140007171
cmp word [rbx], r14w
jne 0x140007171
movsxd rax, dword [rbx + 0x3c]
cmp eax, 0x400
jg 0x140007171
lea rdi, [rbx + rax]
mov edx, 0xf8
mov rcx, rdi
call fcn.140004c40
test al, al
jne 0x140007171
cmp dword [rdi], 0x4550
jne 0x140007171
mov edx, 0xf8
mov rcx, rdi
call fcn.140004c40
mov edx, 0x40
mov rcx, rbx
call fcn.140004c40
test al, al
jne 0x1400071b6
cmp word [rbx], r14w
jne 0x1400071b6
movsxd rax, dword [rbx + 0x3c]
cmp eax, 0x400
jg 0x1400071b6
lea rdi, [rbx + rax]
mov edx, 0xf8
mov rcx, rdi
call fcn.140004c40
test al, al
jne 0x1400071b6
cmp dword [rdi], 0x4550
jne 0x1400071b6
movzx edi, word [rdi + 0x16]
jmp 0x1400071b9
mov edi, r15d
shr di, 0xd
and dil, 1
mov edx, 0xe
mov rcx, rbx
call fcn.140003940
test rax, rax
je 0x14000722e
mov r8d, dword [rax + 4]
mov edx, dword [rax]
lea rax, [rbx + rdx]
test rax, rax
je 0x14000722e
cmp rax, rbx
jb 0x14000722e
lea rcx, [rdx + r8]
cmp rcx, rsi
ja 0x14000722e
cmp rcx, r8
jb 0x14000722e
cmp rcx, rdx
jb 0x14000722e
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 8]
lea rcx, [rbx + rdx]
test rcx, rcx
je 0x14000722e
cmp rcx, rbx
jb 0x14000722e
lea rax, [rdx + r8]
cmp rax, rsi
ja 0x14000722e
cmp rax, r8
jb 0x14000722e
cmp rax, rdx
jb 0x14000722e
cmp dword [rcx], 0x424a5342
je 0x140007052
movzx r8d, dil
mov rdx, rsi
mov rcx, rbx
call fcn.140007330
mov ebx, eax
jmp 0x140007057
call fcn.140020c7c
int3
call fcn.140020c7c
int3
call fcn.140020c7c
int3