Function at 0x1400071cb
Capabilities:
Allocate or change rwx memory
Parse pe header

Disassembly:
mov qword [rsp + 0x20], rsi
cmc
or sil, spl
sar si, 0xb2
push rbp
xadd bpl, sil
push rdi
btr si, r15w
push r15
ror bpl, 0xad
clc
lea rbp, [rsp - 0x47]
shl esi, cl
sub rsp, 0x90
mov r15d, 0x5a4d
or sil, 0x5a
btr esi, 0xa7
mov rsi, rdx
mov rdi, rcx
jmp 0x140007212
cmp word [rcx], r15w
jmp 0x14000721b
jne 0x1400077d8
sub r8d, r8d
clc
cmp rcx, 0xffffffffffffffff
jmp 0x14000722e
je 0x140007249
mov eax, dword [rcx + 0x3c]
add rax, rcx
cmp dword [rax], 0x4550
jmp 0x140007245
cmove r8, rax
cmp dword [r8], 0x4550
jne 0x1400077d8
mov ecx, dword [r8 + 0x38]
add r9, r10
xadd al, r9b
seto al
sub edx, edx
jmp 0x14000726b
mov r8d, dword [r8 + 0x50]
mov r9b, al
cdqe
movsx r9w, al
dec r8d
mov qword [rsp + 0xb8], rbx
xadd rax, rax
shl ah, cl
shl r9w, 0x3d
add r8d, ecx
xchg r9d, eax
mov eax, r8d
test r10d, 0x72357e23
bts r9w, si
div ecx
movsx r9, r8w
xor ecx, ecx
shr r9w, cl
sub r8d, edx
mov edx, r8d
movsx r8, si
movsxd r8, r13d
movzx r8, di
mov r8d, 0x1000
bswap r9w
mov dword [rbp + 0x67], edx
not r9
mov r9b, r9b
lea r9d, [rcx + 4]
jmp 0x1400072dc
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test di, r13w
test rax, rax
jmp 0x1400072f1
jne 0x14000748f
movabs rax, 0x509062a7a620ddc8
test r14b, r10b
lea r8, [0x1400030f0]
mov qword [rbp - 0x19], rax
lea rdx, [rbp - 0x19]
setnp ah
sar ah, cl
rol cl, cl
movabs rax, 0x2254a3bbf66bb34f
dec cx
add ch, ah
movabs rcx, 0x9a131b1ffeb8fd5
mov qword [rbp - 0x11], rax
cmp r13d, r13d
sub r9d, r9d
jmp 0x140007342
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x18005ca91a7bdd3a
jmp 0x140007356
mov qword [rbp + 0x17], rcx
movabs rcx, 0x7327284cf64b3e6a
jmp 0x140007369
mov qword [rbp - 9], rax
movabs rax, 0xd5389ea3d6f07bfb
jmp 0x14000737c
mov qword [rbp + 0x1f], rcx
jmp 0x14000738e
movabs rcx, 0x89cd377b7d3b48d7
jmp 0x14000739d
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movsx eax, bx
movabs rax, 0x47e226ed2e2a2bae
jmp 0x1400073b7
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
movzx cx, r12b
movsxd rcx, r8d
movabs rcx, 0x5eedcf2e82fe2fd4
jmp 0x1400073d7
mov qword [rbp + 7], rax
movsx eax, cx
movabs rax, 0xc3f14d583ab52ede
jmp 0x1400073ed
mov qword [rbp + 0x2f], rcx
movabs rcx, 0x47e226ed2e2a2b99
jmp 0x140007400
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0xf], rax
jmp 0x14000740d
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x37], rcx
cmp rax, r11
test spl, 0x2c
test r13d, ebp
xor ecx, ecx
jmp 0x14000742c
mov qword [rbp + 0x3f], rax
jmp 0x140007435
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
and ebp, 0x51787cc2
shr esi, cl
mov rbx, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0xc8]
rol r15b, 0xb8
add rsp, 0x90
not bpl
movzx bp, r11b
movzx rdi, cx
pop r15
pop rdi
movzx bp, r12b
mov bpl, 0xee
xchg bpl, bpl
pop rbp
jmp 0x14000748e
ret
mov r8, rbx
cwd
lea rdx, [rbp + 0x67]
mov cx, r11w
mov rcx, rdi
call fcn.140006ac8
test al, al
jmp 0x1400074ab
jne 0x140007647
movabs rax, 0x509062a7a620ddc8
adc dl, 0x7a
shld dx, ax, 0x23
lea r8, [0x1400030f0]
cwd
cmp r14b, r12b
mov qword [rbp - 0x19], rax
rol edx, cl
lea rdx, [rbp - 0x19]
and eax, 0x4dfe7e74
movabs rax, 0x2254a3bbf66bb34f
cmp r11d, 0x6cc62136
btr cx, r9w
shl cx, cl
movabs rcx, 0x9a131b1ffeb8fd5
jmp 0x140007507
mov qword [rbp - 0x11], rax
cmp r15d, ebx
stc
xor r9d, r9d
jmp 0x140007517
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x18005ca91a7bdd3a
jmp 0x14000752b
mov qword [rbp + 0x17], rcx
mov cx, 0x2901
setp cl
movabs rcx, 0x7327284cf64b3e6a
jmp 0x140007545
mov qword [rbp - 9], rax
sete ah
movabs rax, 0xd5389ea3d6f07bfb
jmp 0x14000755b
mov qword [rbp + 0x1f], rcx
movsx cx, al
movabs rcx, 0x89cd377b7d3b48d7
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movzx ax, r10b
cdqe
movabs rax, 0x47e226ed2e2a2ba1
jmp 0x14000758b
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
movabs rcx, 0x5eedcf2e82fe2fd4
jmp 0x1400075a3
mov qword [rbp + 7], rax
setno ah
movsx rax, r10w
nop
movabs rax, 0xc3f14d583ab52ede
jmp 0x1400075be
mov qword [rbp + 0x2f], rcx
movabs rcx, 0x47e226ed2e2a2b99
jmp 0x1400075d1
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0xf], rax
jmp 0x1400075de
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x37], rcx
test rax, 0xcbe7ab8
cmp r9b, 0xbb
test r11, rdx
sub ecx, ecx
jmp 0x140007600
mov qword [rbp + 0x3f], rax
jmp 0x140007609
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
xor edx, edx
mov r8d, 0x8000
movsx rcx, bx
xchg cl, cl
cmovbe cx, r14w
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
sub ebx, ebx
mov eax, ebx
jmp 0x140007642
jmp 0x140007453
test rsi, rsi
je 0x140007655
mov eax, dword [rbp + 0x67]
mov dword [rsi], eax
xor edx, edx
xchg rcx, rcx
movsxd rcx, ecx
mov rcx, r13
mov rcx, rbx
jmp 0x140007668
call fcn.1400063a0
test eax, eax
jmp 0x140007674
jne 0x14000761d
mov rcx, rbx
jmp 0x140007682
call fcn.140006db0
test eax, eax
je 0x14000761d
mov r8d, 3
movzx ecx, r15w
movsx cx, dh
xchg r9b, r9b
mov dword [rbp + 0x67], 0
cmovge r9w, sp
movzx cx, bl
lea r9, [rbp + 0x67]
mov ch, 0x4b
movzx cx, dil
setbe ch
mov rcx, rbx
jmp 0x1400076c7
call section..code0
mov r9, rax
test dl, 6
test rax, rax
jmp 0x1400076da
je 0x14000773e
mov ecx, dword [rbp + 0x67]
cmp r12b, 0x7f
cmp al, r11b
test ax, bx
test ecx, ecx
jmp 0x1400076f4
je 0x14000773e
movabs rax, 0xaaaaaaaaaaaaaaab
sbb r8w, bp
neg r8w
sub dx, r15w
mov r8, rbx
bswap rdx
mul rcx
and cx, cx
xor ch, 0x1d
mov rcx, r9
shr rdx, 3
jmp 0x14000772b
call qword [sym.imp.KERNEL32.dll_RtlAddFunctionTable]
test al, al
jmp 0x140007738
je 0x14000761d
sub eax, eax
test bh, 0x87
test bp, r12w
cmp rbx, 0xffffffffffffffff
jmp 0x140007750
je 0x140007787
cmp word [rbx], r15w
jmp 0x14000775f
jne 0x140007787
mov ecx, dword [rbx + 0x3c]
clc
jmp 0x140007771
add rcx, rbx
cmc
cmp dword [rcx], 0x4550
jne 0x140007787
mov rax, rcx
setnp dh
mov dword [rbp + 0x77], 0
cqo
lea r9, [rbp + 0x77]
movzx r8, r13w
mov edx, dword [rax + 0x50]
movsx r8d, cx
movsx rcx, r14w
mov r8d, 0x40
movsx ecx, r14w
movsxd rcx, r12d
mov rcx, rbx
jmp 0x1400077b8
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rcx, rbx
jmp 0x1400077c6
call fcn.140006f65
mov rax, rbx
jmp 0x1400077d3
jmp 0x140007453
movabs rax, 0x509062a7a620ddc8
sar cx, cl
movsx cx, al
neg r8d
lea r8, [0x1400030f0]
adc edx, 0x7c1623da
cmc
btc rdx, rbx
mov qword [rbp - 0x19], rax
mov cx, r11w
lea rdx, [rbp - 0x19]
btc ax, r13w
or ax, di
movabs rax, 0x2254a3bbf66bb34f
ror cx, cl
clc
movabs rcx, 0x9a131b1ffeb8fd5
cmc
mov qword [rbp - 0x11], rax
sub r9d, r9d
jmp 0x140007837
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x18005ca91a7bdd3a
jmp 0x14000784b
mov qword [rbp + 0x17], rcx
movzx ecx, r15w
movabs rcx, 0x7327284cf64b3e6a
jmp 0x140007862
mov qword [rbp - 9], rax
movabs rax, 0xd5389ea3d6f07bfb
mov qword [rbp + 0x1f], rcx
movzx rcx, r15w
mov cl, 0x9d
movabs rcx, 0x89cd377b7d3b48d7
jmp 0x140007889
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movsx eax, r13w
movsxd rax, ecx
mov al, 0xbe
movabs rax, 0x47e226ed2e2a2baf
jmp 0x1400078a9
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
movsxd rcx, ebp
movabs rcx, 0x5eedcf2e82fe2fd4
jmp 0x1400078c4
mov qword [rbp + 7], rax
movzx ax, r12b
setae al
bswap ax
movabs rax, 0xc3f14d583ab52ede
jmp 0x1400078e2
mov qword [rbp + 0x2f], rcx
movzx rcx, r13w
mov ecx, ebp
movsx ecx, r12w
movabs rcx, 0x47e226ed2e2a2b99
jmp 0x1400078ff
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0xf], rax
jmp 0x14000790c
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x37], rcx
xor ecx, ecx
jmp 0x140007921
mov qword [rbp + 0x3f], rax
jmp 0x14000792a
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
sub eax, eax
jmp 0x140007945
jmp 0x14000745b