Function at 0x18005e170
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x208], rax
imul r14d, r9d, 0x726
mov r13d, r9d
mov rsi, r8
mov qword [rsp + 0x58], r8
mov r15, rdx
mov qword [rsp + 0x50], rcx
mov rdi, rcx
mov r12d, r9d
mov dword [rsp + 0x48], r14d
cmp r9d, r14d
ja 0x18005eae5
xor edx, edx
cmp r12d, 0xcb68
ja 0x18005ea98
je 0x18005ea7f
mov eax, r12d
sub eax, 0xc5
je 0x18005ea64
sub eax, 2
je 0x18005e50a
sub eax, 0x54
je 0x18005e4ac
sub eax, 0x8c7d
je 0x18005eae5
cmp eax, 0x170
jne 0x18005ebfe
cmp byte [rdi], dl
je 0x18005ebfe
mov edi, 0x18
nop
mov eax, edi
sub eax, 0x18
je 0x18005e3bc
sub eax, 0x5c
je 0x18005e2ca
sub eax, 0x5c
je 0x18005e280
cmp eax, 0x5c
jne 0x18005e25e
xor edx, edx
lea r8d, [rax - 0x13]
mov rcx, r15
call fcn.180059540
xor edx, edx
add edi, 0x5c
cmp edi, 0x188
jb 0x18005e230
mov rdi, qword [rsp + 0x50]
imul eax, r13d, 0xb7
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
mov eax, dword [r15 + 0x28c]
lea rcx, [rsp + 0x30]
mov r8, r15
mov dword [rsp + 0x30], eax
mov edx, 0x116
call fcn.180041100
cmp dword [r15 + 0x290], 2
jl 0x18005e25c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, dword [r15 + 0x28c]
lea rdx, str.Check_failed:_mixer_stream_.get__.
mov rcx, rax
call fcn.180085950
jmp 0x18005e25c
mov ebx, 0x3d
nop
mov eax, ebx
sub eax, 0x3d
je 0x18005e2e1
cmp eax, 0x4d
jne 0x18005e30a
mov dword [r15], edx
jmp 0x18005e30a
mov r9, r15
mov dword [rsp + 0x38], 0x38
lea r8, [rsp + 0x30]
mov dword [rsp + 0x30], 8
mov edx, 0xeb
lea rcx, [rsp + 0x38]
call fcn.180056270
xor edx, edx
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e2d0
mov ebx, 0x3d
nop word [rax + rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e331
cmp eax, 0x4d
jne 0x18005e358
mov dword [r15], edx
jmp 0x18005e358
mov r9, r15
mov dword [rsp + 0x30], 0x50
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
mov edx, 0
cmp ebx, 0xab
jb 0x18005e320
mov ebx, 0x3d
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e383
xor edx, edx
cmp eax, 0x4d
jne 0x18005e3ac
mov dword [r15], edx
jmp 0x18005e3ac
mov r9, r15
mov dword [rsp + 0x30], 0x90
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
xor edx, edx
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e370
jmp 0x18005e25e
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3d
je 0x18005e3d2
cmp eax, 0x4d
jne 0x18005e3fb
mov dword [r15], edx
jmp 0x18005e3fb
mov r9, r15
mov dword [rsp + 0x30], 0x17
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
xor edx, edx
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e3c1
mov ebx, 0x3d
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e421
cmp eax, 0x4d
jne 0x18005e448
mov dword [r15], edx
jmp 0x18005e448
mov r9, r15
mov dword [rsp + 0x30], 0x72
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
mov edx, 0
cmp ebx, 0xab
jb 0x18005e410
mov ebx, 0x3d
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e473
xor edx, edx
cmp eax, 0x4d
jne 0x18005e49c
mov dword [r15], edx
jmp 0x18005e49c
mov r9, r15
mov dword [rsp + 0x30], PathYetAnotherMakeUniqueName
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
xor edx, edx
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e460
jmp 0x18005e25e
lea rcx, [rbp + 0x1e0]
mov byte [rbp + 0x1e0], 0
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18005e4c0
movzx eax, word [0x18009caf0]
lea rdx, str.ASocketW
mov word [rcx], ax
mov r8d, 9
movzx eax, byte [0x18009caf2]
mov byte [rcx + 2], al
lea rcx, [rbp + 0x1e2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
imul eax, r13d, 0xb7
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
mov ecx, dword [r15 + 0x6c]
test ecx, ecx
jle 0x18005e5d6
mov r14d, 0x4f
nop dword [rax]
mov eax, r14d
sub eax, 0x4f
je 0x18005e5b9
sub eax, 1
je 0x18005e556
cmp eax, 1
jne 0x18005e5c0
xor r9d, r9d
mov dword [rsp + 0x20], 0x7f
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.1800760d0
xor edx, edx
jmp 0x18005e5c0
mov ebx, dword [r15 + 0x28c]
mov edi, dword [r15 + 0x288]
mov esi, dword [r15 + 0x294]
rol ebx, 1
xor ebx, edi
mov dword [r15 + 0x28c], ebx
cmp esi, 1
jle 0x18005e57f
mov dword [r15 + 0x74], edx
cmp dword [r15 + 0x290], 2
jl 0x18005e5c0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, edi
lea rdx, str.WMI_CompleteIntelSession:_enumed_intel_service_object:_0x_08x
mov rcx, rax
mov r8d, esi
mov eax, dword [r15 + 0x6c]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ebx
call fcn.180085950
xor edx, edx
jmp 0x18005e5c0
not dword [r15 + 0x288]
inc r14d
cmp r14d, 0x52
jb 0x18005e520
mov ecx, dword [r15 + 0x6c]
mov r14d, dword [rsp + 0x48]
movsxd rax, ecx
add rax, qword [r15 + 0x20]
cmp dword [r15 + 0x294], 1
mov qword [r15 + 0x50], rax
jne 0x18005e792
mov esi, SHSetInstanceExplorer
jmp 0x18005e602
xor edx, edx
mov eax, esi
sub eax, 0xad
je 0x18005e769
cmp eax, 1
jne 0x18005e780
mov ebx, 0x3d
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e631
cmp eax, 0x4d
jne 0x18005e658
mov dword [r15], edx
jmp 0x18005e658
mov r9, r15
mov dword [rsp + 0x30], 0x42
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
mov edx, 0
cmp ebx, 0xab
jb 0x18005e620
mov ebx, 0x3d
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e683
xor ecx, ecx
cmp eax, 0x4d
jne 0x18005e6ac
mov dword [r15], ecx
jmp 0x18005e6ac
mov r9, r15
mov dword [rsp + 0x30], 0x5a
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
xor ecx, ecx
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e670
mov ebx, 0x3d
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e6d1
cmp eax, 0x4d
jne 0x18005e6f8
mov dword [r15], ecx
jmp 0x18005e6f8
mov r9, r15
mov dword [rsp + 0x30], 0x68
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
mov ecx, 0
cmp ebx, 0xab
jb 0x18005e6c0
movzx edi, byte [r15 + 0x298]
mov ebx, 0x3d
add dil, 0x30
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e735
cmp eax, 0x4d
jne 0x18005e75c
mov dword [r15], 0
jmp 0x18005e75c
movzx eax, dil
lea r8, [rsp + 0x38]
mov r9, r15
mov dword [rsp + 0x30], eax
mov edx, 0xeb
mov dword [rsp + 0x38], 8
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e720
jmp 0x18005e780
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov edx, 0xa2
mov r8, r15
xor ecx, ecx
call fcn.180018c40
inc esi
cmp esi, 0xaf
jb 0x18005e600
mov ecx, dword [r15 + 0x6c]
test ecx, ecx
jle 0x18005ea48
mov edi, 0xb9
nop
cmp edi, 0x894e
ja 0x18005e9de
je 0x18005e9af
cmp edi, 0xb9
je 0x18005e95e
cmp edi, 0x2e40
je 0x18005e8c0
cmp edi, 0x5bc7
jne 0x18005ea36
mov ebx, 0x3d
nop dword [rax + rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e7f3
xor esi, esi
cmp eax, 0x4d
jne 0x18005e81c
mov dword [r15], esi
jmp 0x18005e81c
mov r9, r15
mov dword [rsp + 0x30], 0x26
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
xor esi, esi
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e7e0
mov ebx, 0x3d
nop dword [rax]
mov eax, ebx
sub eax, 0x3d
je 0x18005e841
cmp eax, 0x4d
jne 0x18005e868
mov dword [r15], esi
jmp 0x18005e868
mov r9, r15
mov dword [rsp + 0x30], 0x53
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e830
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3d
je 0x18005e889
cmp eax, 0x4d
jne 0x18005e8b0
mov dword [r15], esi
jmp 0x18005e8b0
mov r9, r15
mov dword [rsp + 0x30], 0x59
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e878
jmp 0x18005ea36
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3d
je 0x18005e8d8
xor ecx, ecx
cmp eax, 0x4d
jne 0x18005e901
mov dword [r15], ecx
jmp 0x18005e901
mov r9, r15
mov dword [rsp + 0x30], 0x41
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
xor ecx, ecx
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e8c5
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3d
je 0x18005e922
cmp eax, 0x4d
jne 0x18005e949
mov dword [r15], ecx
jmp 0x18005e949
mov r9, r15
mov dword [rsp + 0x30], 0x59
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
mov ecx, 0
cmp ebx, 0xab
jb 0x18005e911
jmp 0x18005ea36
mov ebx, 0x3d
mov eax, ebx
sub eax, 0x3d
je 0x18005e978
cmp eax, 0x4d
jne 0x18005e99f
mov dword [r15], 0
jmp 0x18005e99f
mov r9, r15
mov dword [rsp + 0x30], 0x31
lea r8, [rsp + 0x38]
mov dword [rsp + 0x38], 8
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add ebx, 0x37
cmp ebx, 0xab
jb 0x18005e963
jmp 0x18005ea36
mov eax, dword [r15 + 0x288]
lea rcx, [rsp + 0x38]
mov r8, r15
mov dword [rsp + 0x38], eax
mov edx, 0x116
call fcn.180041100
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x38], 1
jmp 0x18005ea1f
cmp edi, 0xb6d5
je 0x18005ea0f
cmp edi, 0xe45c
jne 0x18005ea36
mov edx, 0xd1
mov rcx, r15
call fcn.180072ad0
xor r9d, r9d
mov r8, r15
xor edx, edx
mov ecx, 0xf6
call fcn.180060e10
jmp 0x18005ea36
mov eax, dword [r15 + 0x30]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x38], 0x18
mov r9, r15
lea r8, [rsp + 0x38]
mov edx, 0xeb
lea rcx, [rsp + 0x30]
call fcn.180056270
add edi, 0x2d87
cmp edi, 0x1112a
jbe 0x18005e7a0
mov rdi, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
imul eax, r13d, 0xb7
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0x40], rax
imul eax, r13d, 0xb7
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
imul eax, r13d, 0xb7
mov word [rbp + 0x1f0], dx
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
cmp r12d, 0x195b5
je 0x18005ebe4
cmp r12d, 0x26002
je 0x18005eb9a
cmp r12d, 0x32a4f
je 0x18005eb1a
cmp r12d, 0x3f49c
jne 0x18005ebfe
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 0x35]
call fcn.180074260
mov byte [rsp + 0x40], 1
test al, al
jne 0x18005eae5
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x208]
xor rcx, rsp
call fcn.1800864a0
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov word [rbp + 0x204], dx
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1f0]
mov ecx, 0x3d
call fcn.18004d9b0
mov ecx, dword [rsi]
lea r9, [rsp + 0x38]
mov dword [rsp + 0x38], ecx
lea r8, [rsp + 0x60]
mov ecx, dword [rdi]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], ecx
mov rbx, rax
mov ecx, 0xc
call fcn.180073260
test al, al
je 0x18005eae0
xor eax, eax
mov dword [rsp + 0x28], 1
lea r9, [rsp + 0x60]
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov qword [r15], rax
imul eax, r13d, 0xb7
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
movzx eax, word [0x18009cbca]
movsd xmm0, qword [0x18009cbc2]
mov word [rbp + 0x1fc], ax
mov eax, dword [0x18009cc1e]
mov dword [rbp + 0x1fe], eax
movzx eax, word [0x18009cc22]
mov word [rbp + 0x202], ax
imul eax, r13d, 0xb7
movsd qword [rbp + 0x1f4], xmm0
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0
mov r8d, 2
lea rdx, [0x18009cb7a]
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
imul eax, r13d, 0xb7
add r12d, eax
cmp r12d, r14d
jmp 0x18005e1d0