Function at 0x180004d48
Capabilities:
Parse pe header

Disassembly:
mov r15, 0x2a
add r15, 0x16
push rax
xor rax, rax
ror byte [rax - 1], 0xc0
test rax, rax
je 0x180006122
pop rax
push rcx
xor rcx, rcx
xor ecx, ecx
test rcx, rcx
jne 0x180006724
inc rcx
test rcx, rcx
je 0x180004c39
pop rcx
mov rdx, qword [rbx + r15]
mov r15, 0x22
add r15, 0x23
cmp byte [rdx + 0x30], r15b
je 0x180004bc2
mov r15, 0x5c
add r15, 9
cmp byte [rdx + 0x30], r15b
je 0x180004bc2
jmp 0x180004c88
mov r15, 0x23
add r15, 0x29
sub dword [rax + rdi + 0x7a], eax
invalid
je 0x180004be9
mov r15, 0x32
add r15, 0x3a
cmp byte [rdx + 0x32], r15b
je 0x180004be9
jmp 0x180004c88
mov r15, 0x20
add r15, 0x12
cmp byte [rdx + 0x36], r15b
je 0x180004bff
jmp 0x180004c88
push rdx
mov r15, 0x27
mov rbx, qword [rbx]
cmp r12, rbx
jne 0x180004b3a
mov qword [rbp - 8], rbx
xor r8, r8
mov r10, 0x33
add r10, 9
mov r8d, dword [rbx + r10]
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180004d2e
pop rax
push rcx
inc rcx
xor rax, rax
mov eax, dword [rsi + rcx*4]
push rdx
xor rdx, rdx
test rdx, rdx
jne 0x180006587
inc rdx
test rdx, rdx
je 0x180006915
pop rdx
add rax, rbx
cmp qword [rax], r9
jne 0x180004d2e
xor rsi, rsi
mov r10, 0x15
add r10, 0xf
mov esi, dword [r8 + r10]
add rsi, rbx
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180005ef8
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180004c39
inc rcx
test rcx, rcx
je 0x18000617a
pop rcx
mov cx, word [rsi + rcx*2]
xor rsi, rsi
mov r10, 0xd
add r10, 0xf
mov esi, dword [r8 + r10]
add rsi, rbx
xor rdx, rdx
push rdx
xor rdx, rdx
test rdx, rdx
jne 0x180004b3a
inc rdx
test rdx, rdx
je 0x180004b3a
pop rdx
mov edx, dword [rsi + rcx*4]
invalid
invalid
add rsp, 0x20
mov r12, rax
mov al, 0x40
add al, 0xf
mov byte [rdi], al
mov al, 0x54
add al, 0x1c
mov byte [rdi + 1], al
mov al, 0x2c
add al, 0x39
mov byte [rdi + 2], al
mov al, 0x5a
add al, 0x14
mov byte [rdi + 3], al
mov al, 0x37
add al, 0x1d
mov byte [rdi + 4], al
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180006c52
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180006a73
inc rcx
test rcx, rcx
je 0x180006c0f
pop rcx
mov al, 0x65
add al, 3
mov byte [rdi + 5], al
mov al, 0x12
add al, 0x60
mov byte [rdi + 6], al
mov al, 0xc
add al, 0x59
mov byte [rdi + 7], al
mov al, 6
add al, 0x5b
mov byte [rdi + 8], al
mov al, 0x20
add al, 0x44
mov byte [rdi + 9], al
mov byte [rdi + 0xa], 0
mov rcx, qword [rbp - 8]
mov rdx, rdi
sub rsp, 0x20
lea rax, [0x180005f8c]
push rax
mov rax, qword [rbp - 0x10]
jmp rax
sub rsp, 0x20
push r15
xor r15, r15
inc r15
test r15, r15
je 0x18000666b
pop r15
lea rax, [0x18000617a]
push rax
jmp r15
add rsp, 0x20
add rsp, 0x10
add rsp, 0x100
jmp 0x180006c55
add byte [rax], al
push rbx
push rbp
push rdi
push rsi
push rdx
xor rdx, rdx
test rdx, rdx
jne 0x1800067dc
inc rdx
test rdx, rdx
je 0x180004b9b
pop rdx
push r12
push r13
push r14
push r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x20
mov rbx, rcx
xor rax, rax
mov rcx, rbp
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180006c04
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180004b9b
inc rcx
test rcx, rcx
je 0x1800064ec
pop rcx
sub rcx, rsp
mov rdi, rsp
rep stosb byte [rdi], al
mov rcx, rbx
mov r12, qword [rcx]
mov r15, qword [rcx + 8]
mov r13, qword [rcx + 0x10]
push r15
xor r15, r15
inc r15
test r15, r15
je 0x180004c39
pop r15
mov rbx, qword [rcx + 0x18]
mov r14, rcx
mov al, 0x29
add al, 0x1e
mov byte [r14], al
mov al, 0x1f
add al, 0x46
mov byte [r14 + 1], al
mov al, 0xa
add al, 0x6a
mov byte [r14 + 2], al
mov al, 0x39
add al, 0x17
mov byte [r14 + 3], al
mov al, 0x3a
add al, 0x38
mov byte [r14 + 4], al
push rdx
xor rdx, rdx
test rdx, rdx
jne 0x180004b9b
inc rdx
test rdx, rdx
je 0x180006c55
pop rdx
mov al, 0x1d
add al, 0x52
mov byte [r14 + 5], al
mov al, 6
add al, 0x5d
mov byte [r14 + 6], al
mov al, 0x59
add al, 0xc
mov byte [r14 + 7], al
add rsp, 0x20
mov al, 0x31
add al, 0x12
mov byte [r14], al
mov al, 0x12
add al, 0x60
mov byte [r14 + 1], al
mov al, 0x32
add al, 0x33
mov byte [r14 + 2], al
mov al, 0x49
add al, 0x18
mov byte [r14 + 3], al
mov al, 0x23
add al, 0x51
mov byte [r14 + 4], al
mov al, 0xc
add al, 0x59
mov byte [r14 + 5], al
push r15
xor r15, r15
inc r15
test r15, r15
test edi, edi
je 0x180006c04
pop r15
mov al, 0x1a
add al, 0x2c
mov byte [r14 + 6], al
mov al, 0x52
add al, 0x17
mov byte [r14 + 7], al
mov al, 0x51
add al, 0x1b
mov byte [r14 + 8], al
mov al, 0x4b
add al, 0x1a
mov byte [r14 + 9], al
mov al, 0x2f
add al, 0x12
mov byte [r14 + 0xa], al
mov byte [r14 + 0xb], 0
mov rcx, r15
mov rdx, r14
sub rsp, 0x20
lea rax, [0x180006587]
push rax
push r15
xor r15, r15
inc r15
test r15, r15
je 0x18000697b
pop r15
jmp r13
add rsp, 0x40
cmp rax, 0xffffffffffffffff
mov qword [rbp - 8], rax
mov al, 2
add al, 0x50
mov byte [r14], al
mov al, 0x37
add al, 0x2e
mov byte [r14 + 1], al
mov al, 0x59
add al, 8
mov byte [r14 + 2], al
mov al, 0x19
add al, 0x4b
mov byte [r14 + 3], al
push r15
xor r15, r15
inc r15
test r15, r15
je 0x18000617a
pop r15
mov al, 7
add al, 0x3f
mov byte [r14 + 4], al
mov al, 0x45
add al, 0x24
mov byte [r14 + 5], al
mov al, 0x4f
add al, 0x1d
mov byte [r14 + 6], al
mov al, 0x2a
add al, 0x3b
mov byte [r14 + 7], al
mov byte [r14 + 8], 0
mov rcx, r15
mov rdx, r14
sub rsp, 0x20
lea rax, [0x1800066e3]
push rax
jmp r13
add rsp, 0x20
mov r12, rax
mov al, 2
add al, 0x41
mov byte [rdi], al
mov al, 0x5e
add al, 0x14
mov byte [rdi + 1], al
mov al, 0x6e
add al, 0xb
mov byte [rdi + 2], al
mov al, 0x31
add al, 0x3f
mov byte [rdi + 3], al
mov al, 0x64
add al, 0x10
mov byte [rdi + 4], al
mov al, 0x1a
add al, 0x19
mov byte [rdi + 5], al
push r15
xor r15, r15
inc r15
test r15, r15
je 0x18000697b
pop r15
mov al, 0x2d
add al, 5
mov byte [rdi + 6], al
mov byte [rdi + 7], 0x2e
mov al, 0x39
add al, 0x2b
mov byte [rdi + 8], al
mov al, 0x46
add al, 0x26
mov byte [rdi + 9], al
mov al, 8
add al, 0x64
mov byte [rdi + 0xa], al
mov byte [rdi + 0xb], 0
mov rcx, rdi
sub rsp, 0x20
lea rax, [0x180006855]
push rax
jmp r12
add rsp, 0x40
mov al, 0x33
add al, 0x13
mov byte [r14], al
mov al, 0x60
add al, 0x12
mov byte [r14 + 1], al
mov al, 0xf
add al, 0x56
mov byte [r14 + 2], al
mov al, 0x3c
add al, 0x29
mov byte [r14 + 3], al
mov al, 0x23
add rsp, 0x20
mov r12, rax
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
lea rax, [0x180006a73]
push rax
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180004d2e
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180005ef8
inc rcx
test rcx, rcx
je 0x18000697b
pop rcx
jmp r12
add rsp, 0x20
mov r12, rdi
mov byte [r14], 0xeb
mov byte [r14 + 1], 0xfe
add esi, r15d
sub rsp, 0x200
mov rdi, rsp
add rdi, 0x10
lea rsi, [entry0]
xor rcx, rcx
cmp rcx, 0x20
je 0x180006aac
mov al, byte [rsi + rcx]
mov byte [rdi + rcx], al
inc rcx
jmp 0x180006a9b
lea rsi, [entry0]
add rsi, 0x20
lea rax, [0x180006cae]
cmp rsi, rax
je 0x180006ae0
xor rcx, rcx
cmp rcx, 0x20
je 0x180006adb
mov ah, byte [rdi + rcx]
mov al, byte [rsi]
xor ah, al
mov byte [rdi + rcx], ah
inc rcx
jmp 0x180006ac6
inc rsi
jmp 0x180006ab7
mov rcx, r15
mov rdx, r13
mov r8, rdi
mov r9, r14
mov r10, r12
mov r11, qword [rbp - 0x20]
sub rsp, 0x20
push rax
xor rax, rax
inc rax
test rax, rax
je 0x180006c04
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180004b9b
inc rcx
test rcx, rcx
je 0x1800064ec
pop rcx
lea rax, [0x180006b33]
push rax
lea rax, [0x180004e47]
jmp rax
add rsp, 0x20
mov r12, rax
sub rsp, 0x10
lea rax, [rsp + 8]
mov rcx, r14
mov rdx, 0x7a120
mov r8, 0x20
mov r9, rax
sub rsp, 0x20
push r15
xor r15, r15
inc r15
test r15, r15
je 0x180004b9b
pop r15
lea rax, [0x180006c4a]
push rax
jmp r12
jmp r14
mov rsp, rbp
add rsp, 8
pop r15
pop r14
push rax
xor rax, rax
inc rax
test rax, rax
je 0x18000618e
pop rax
push rcx
xor rcx, rcx
test rcx, rcx
jne 0x180006a2e
inc rcx
test rcx, rcx
je entry0
pop rcx
pop r13
pop r12
pop rsi
pop rdi
pop rbp
pop rbx
mov rax, 1
ret