Function at 0x1400071e2
Capabilities:
Allocate or change rwx memory
Parse pe header

Disassembly:
mov qword [rsp + 0x20], rsi
shr si, 0x98
push rbp
sbb esi, 0x21661633
or bp, 0x27ed
rol sil, cl
push rdi
shr ebp, 0x14
setae sil
push r15
or r15b, 0xfa
shrd r15w, r8w, 0xa6
btc bp, 0x81
lea rbp, [rsp - 0x47]
sub rsp, 0x90
bts di, r13w
movzx r15d, r8w
sal r15b, cl
mov r15d, 0x5a4d
rcr rdi, 0x68
clc
mov rsi, rdx
bsf edi, r12d
movzx di, r13b
rcr di, 0x32
mov rdi, rcx
cmp r9b, 0x15
cmp word [rcx], r15w
jmp 0x140007256
jne 0x1400077e6
sub r8d, r8d
cmp rcx, 0xffffffffffffffff
jmp 0x140007268
je 0x14000728a
mov eax, dword [rcx + 0x3c]
stc
lea rax, [rax + rcx]
cmp dword [rax], 0x4550
jmp 0x140007281
cmove r8, rax
jmp 0x14000728a
cmp dword [r8], 0x4550
jmp 0x140007296
jne 0x1400077e6
mov ecx, dword [r8 + 0x38]
bsf r9w, r10w
sub edx, edx
setno r9b
cwde
mov r8d, dword [r8 + 0x50]
movzx ax, r15b
dec r8d
add al, r9b
cmp bh, 0x59
movsxd rax, r11d
mov qword [rsp + 0xb8], rbx
shld r9, r12, 0x34
add r8d, ecx
mov eax, r8d
rol r9b, cl
div ecx
cmp r10, 0x2ee42d7c
sub ecx, ecx
bsr r9d, r14d
sub r8d, edx
bswap edx
mov edx, r8d
mov r8d, 0x1000
movsx r9, r14w
mov dword [rbp + 0x67], edx
movzx r9, r8w
cmovs r9, rax
bswap r9d
lea r9d, [rcx + 4]
jmp 0x14000730f
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
cmp r10b, 0xee
test rax, rax
jmp 0x140007324
jne 0x1400074c4
movabs rax, 0xe667b8e6219f1f2a
lea r8, [0x1400030f0]
mov qword [rbp - 0x19], rax
sar al, 0x8b
bts ecx, eax
lea rdx, [rbp - 0x19]
movabs rax, 0x340bb46ed95e8711
test rbp, r11
xor cx, 0x6d16
movabs rcx, 0xbf56ebf078544d37
clc
test spl, bpl
mov qword [rbp - 0x11], rax
stc
sub r9d, r9d
jmp 0x140007376
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x3f8b9b6c6b8daf0c
jmp 0x14000738a
mov qword [rbp + 0x17], rcx
movsx ecx, r12w
movabs rcx, 0x65783f99d97e0a34
mov qword [rbp - 9], rax
movzx eax, ax
movsx rax, di
movabs rax, 0x93e30bf278799669
jmp 0x1400073b6
mov qword [rbp + 0x1f], rcx
mov ecx, 0x345f34ae
movsx rcx, dx
movabs rcx, 0xae46f0be0ccd3ae1
jmp 0x1400073d2
pxor xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
jmp 0x1400073e3
movabs rax, 0x914116c46fa9000c
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
jmp 0x1400073fe
movabs rcx, 0x18365a7f2c77c246
jmp 0x14000740d
mov qword [rbp + 7], rax
setg al
lahf
jmp 0x14000741a
movabs rax, 0xba2e94edbbf49fc8
mov qword [rbp + 0x2f], rcx
movabs rcx, 0x914116c46fa9003b
jmp 0x140007437
pxor xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0xf], rax
jmp 0x140007445
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x37], rcx
cmp cx, cx
sub ecx, ecx
jmp 0x14000745d
mov qword [rbp + 0x3f], rax
jmp 0x140007466
pxor xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
sub eax, eax
dec r15w
mov rbx, qword [rsp + 0xb8]
sal bpl, cl
bt rbp, rbx
mov rsi, qword [rsp + 0xc8]
add rsp, 0x90
jmp 0x1400074aa
pop r15
mov dil, al
xchg bpl, dil
movzx bp, r9b
pop rdi
movsx bp, r12b
pop rbp
jmp 0x1400074c3
ret
mov r8, rbx
movsx cx, r11b
lea rdx, [rbp + 0x67]
bswap ecx
mov rcx, rdi
jmp 0x1400074da
call fcn.140006a70
test al, al
jmp 0x1400074e6
jne 0x14000766f
movabs rax, 0xe667b8e6219f1f2a
bswap ecx
add ecx, 0x4f171509
lea r8, [0x1400030f0]
mov qword [rbp - 0x19], rax
inc dx
xchg dx, ax
clc
lea rdx, [rbp - 0x19]
add eax, 0x574b21c7
movabs rax, 0x340bb46ed95e8711
movzx cx, r9b
neg ecx
cmc
movabs rcx, 0xbf56ebf078544d37
clc
mov qword [rbp - 0x11], rax
xor r9d, r9d
jmp 0x140007541
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x3f8b9b6c6b8daf0c
jmp 0x140007555
mov qword [rbp + 0x17], rcx
movsxd rcx, r9d
movzx ecx, r11w
movabs rcx, 0x65783f99d97e0a34
jmp 0x14000756f
mov qword [rbp - 9], rax
movzx ax, dh
movsx ax, ch
movzx eax, bx
movabs rax, 0x93e30bf278799669
jmp 0x14000758d
mov qword [rbp + 0x1f], rcx
movabs rcx, 0xae46f0be0ccd3ae1
jmp 0x1400075a0
pxor xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
jmp 0x1400075ae
movabs rax, 0x914116c46fa90003
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
movsx cx, cl
movabs rcx, 0x18365a7f2c77c246
mov qword [rbp + 7], rax
mov rax, 0x1da966cc
setle al
movabs rax, 0xba2e94edbbf49fc8
jmp 0x1400075ec
mov qword [rbp + 0x2f], rcx
mov ecx, 0x15ca176d
movabs rcx, 0x914116c46fa9003b
jmp 0x140007604
pxor xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0xf], rax
jmp 0x140007612
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x37], rcx
sub ecx, ecx
jmp 0x140007627
mov qword [rbp + 0x3f], rax
jmp 0x140007630
pxor xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
sub edx, edx
mov r8d, 0x8000
mov rcx, rbx
jmp 0x140007655
call qword [sym.imp.KERNEL32.dll_VirtualFree]
sub ebx, ebx
movzx rax, r11w
xchg al, al
mov eax, ebx
jmp 0x14000766a
jmp 0x140007481
test rsi, rsi
je 0x14000768b
mov eax, dword [rbp + 0x67]
test ebp, r13d
xadd cx, cx
mov dword [rsi], eax
cmp dil, cl
movsx rcx, r13w
xor edx, edx
movsx rcx, cx
cmovb cx, r10w
mov rcx, rbx
jmp 0x14000769e
call fcn.14000638d
test eax, eax
jmp 0x1400076aa
jne 0x140007645
mov rcx, rbx
call fcn.140006dc4
test eax, eax
jmp 0x1400076bf
je 0x140007645
mov r8d, 3
mov cl, r9b
movsx rcx, bp
mov cl, 5
mov dword [rbp + 0x67], 0
movsx cx, r9b
movzx r9w, r9b
mov cl, ch
lea r9, [rbp + 0x67]
mov cl, r13b
bswap rcx
movsxd rcx, esi
mov rcx, rbx
jmp 0x1400076fc
call section..code0
mov r9, rax
test cl, 0x99
test rax, rax
jmp 0x14000770f
je 0x140007766
mov ecx, dword [rbp + 0x67]
cmc
jmp 0x14000771e
test ecx, ecx
je 0x140007766
movabs rax, 0xaaaaaaaaaaaaaaab
mov r8, rbx
setae dl
mul rcx
sub ch, 0xa7
mov rcx, r9
test r9d, 0x2f260ff2
shr rdx, 3
jmp 0x14000774f
call qword [sym.imp.KERNEL32.dll_RtlAddFunctionTable]
movzx eax, al
clc
test eax, eax
jmp 0x140007760
je 0x140007645
xor eax, eax
cmp esp, 0x33eb19e9
clc
cmp rbx, 0xffffffffffffffff
jmp 0x140007778
je 0x1400077ac
cmp word [rbx], r15w
jmp 0x140007787
jne 0x1400077ac
mov ecx, dword [rbx + 0x3c]
test bpl, r15b
cmc
add rcx, rbx
cmp dword [rcx], 0x4550
jmp 0x1400077a2
jne 0x1400077ac
mov rax, rcx
cdq
mov dword [rbp + 0x77], 0
lea r9, [rbp + 0x77]
mov edx, dword [rax + 0x50]
mov r8d, 0x40
not cx
mov rcx, rbx
jmp 0x1400077cb
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rcx, rbx
call fcn.140006f88
mov rax, rbx
jmp 0x1400077e1
jmp 0x140007481
movabs rax, 0xe667b8e6219f1f2a
lea r8, [0x1400030f0]
movzx rdx, di
cwd
mov qword [rbp - 0x19], rax
btr dx, 0x93
rcl rdx, 0xd3
lea rdx, [rbp - 0x19]
xor al, r11b
or ax, 0x4473
bsr rax, r9
movabs rax, 0x340bb46ed95e8711
movsx ecx, r12w
rcl cx, 0x37
movsx cx, cl
movabs rcx, 0xbf56ebf078544d37
cmp dl, r12b
test r14, r8
mov qword [rbp - 0x11], rax
clc
sub r9d, r9d
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x3f8b9b6c6b8daf0c
mov qword [rbp + 0x17], rcx
jmp 0x140007862
movabs rcx, 0x65783f99d97e0a34
jmp 0x140007871
mov qword [rbp - 9], rax
movabs rax, 0x93e30bf278799669
jmp 0x140007884
mov qword [rbp + 0x1f], rcx
movabs rcx, 0xae46f0be0ccd3ae1
jmp 0x140007897
pxor xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
mov ah, 0x9e
movabs rax, 0x914116c46fa9000d
jmp 0x1400078b2
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
mov cx, r10w
movabs rcx, 0x18365a7f2c77c246
mov qword [rbp + 7], rax
bswap eax
movabs rax, 0xba2e94edbbf49fc8
jmp 0x1400078de
mov qword [rbp + 0x2f], rcx
not rcx
mov rcx, 0x510570e8
movzx rcx, di
movabs rcx, 0x914116c46fa9003b
jmp 0x1400078ff
pxor xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0xf], rax
jmp 0x14000790d
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x37], rcx
sub ecx, ecx
jmp 0x140007922
mov qword [rbp + 0x3f], rax
pxor xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp + 7], xmm0
movdqa xmmword [rbp - 9], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
sub eax, eax
jmp 0x140007942
jmp 0x140007490