Function at 0x1800048e0
Capabilities:
Check os version
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r14
sub rsp, 0xb0
cmp qword [0x18000eb30], 0
jbe 0x180004902
mov eax, 1
add rsp, 0xb0
pop r14
ret
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x78], r15
call fcn.180005b30
test eax, eax
je 0x180004fb0
mov rax, qword gs:[0x30]
xor r15d, r15d
mov ebx, r15d
mov rax, qword [rax + 0x60]
test rax, rax
je 0x18000497e
cmp dword [rax + 0x118], 0xa
jne 0x18000497e
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov rax, qword [rcx]
mov rbx, qword [rax + 0x20]
mov qword [rsp + 0x38], rbx
test rbx, rbx
jne 0x18000498f
call fcn.180005d50
test rax, rax
cmovne rbx, rax
mov qword [rsp + 0x38], rbx
movsxd rax, dword [rbx + 0x3c]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
cmp dword [rax + rbx], 0x4550
jne 0x1800049da
cmp dword [rax + rbx + 0x8c], r15d
jbe 0x1800049da
mov eax, dword [rax + rbx + 0x88]
add rax, rbx
mov qword [rsp + 0x30], rax
mov edi, dword [rax + 0x1c]
add rdi, rbx
mov qword [rsp + 0x48], rdi
mov edi, dword [rax + 0x24]
add rdi, rbx
mov qword [rsp + 0x40], rdi
lea rcx, [0x18000eb38]
call fcn.180005f2d
mov r13, qword [0x180014b38]
mov eax, 0x5a4d
cmp word [r13], ax
jne 0x180004fb0
mov rax, r13
mov r14d, 1
nop word [rax + rax]
movsxd rbx, dword [rax + 0x3c]
add rbx, r13
cmp dword [rbx], 0x4550
jne 0x180004fb0
mov qword [0x18001ab50], r14
mov qword [0x18001ab58], r13
mov rax, qword gs:[0x30]
mov edi, dword [rbx + 0x8c]
mov rcx, qword [rax + 0x60]
mov rax, qword [0x18001cb58]
mov rcx, qword [rcx + 0x30]
test rax, rax
jne 0x180004a73
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8d, edi
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x20], rax
mov rdi, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x180004a85
mov r8, rdi
mov edx, 8
call rax
mov rdi, rax
mov qword [rsp + 0x20], rax
test rdi, rdi
je 0x180004fb0
mov edx, dword [rbx + 0x88]
mov rcx, rdi
mov r8d, dword [rbx + 0x8c]
add rdx, r13
mov qword [rsp + 0x28], rdx
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x28]
mov esi, r15d
mov r8d, dword [rdi + 0x1c]
movzx eax, r15w
mov r9d, dword [rdi + 0x20]
sub r8, rdx
mov r10d, dword [rdi + 0x24]
sub r9, rdx
add r8, rdi
mov byte [rsp + 0xc0], sil
add r9, rdi
mov dword [rsp + 0xd8], 0x775a744e
sub r10, rdx
mov word [rsp + 0xc8], ax
add r8, r13
add r9, r13
add r10, rdi
mov qword [rsp + 0x50], r8
add r10, r13
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x60], r10
nop dword [rax + rax]
mov ecx, dword [rdi + 0x18]
movzx r12d, r15w
test ecx, ecx
je 0x180004f65
movzx eax, ax
movzx eax, word [rsp + rax*2 + 0xd8]
mov word [rsp + 0xd0], ax
movzx eax, r12w
xor bpl, bpl
mov ebx, dword [r9 + rax*4]
sub rbx, rdx
lea rdx, [rax + rax]
movzx eax, word [rdx + r10]
add rbx, rdi
add rbx, r13
mov edi, dword [r8 + rax*4]
mov rax, qword [rsp + 0x30]
add rdi, r13
test rax, rax
je 0x180004b8e
mov r8, qword [rsp + 0x38]
cmp r13, r8
je 0x180004b8e
cmp ecx, dword [rax + 0x18]
jne 0x180004b8e
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
movzx eax, word [rdx + rax]
mov ecx, dword [rcx + rax*4]
add rcx, r8
cmp rdi, rcx
setne byte [rsp + 0xc0]
lea rdx, [0x18000a8f8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x180004ba9
mov qword [0x18001cb58], rdi
movzx eax, word [rsp + 0xd0]
cmp word [rbx], ax
jne 0x180004f16
movsx eax, byte [rbx + 2]
lea rcx, [rbx + 2]
movabs rdx, 0x7734773477347734
test eax, eax
je 0x180004cbb
nop dword [rax]
nop dword [rax + rax]
imul rdx, rdx, 0x21
cdqe
lea rcx, [rcx + 1]
add rdx, rax
movsx eax, byte [rcx]
test eax, eax
jne 0x180004be0
movabs rax, 0x66c71bd1b0714d3e
cmp rdx, rax
je 0x180004f16
movabs rcx, 0x8ad1c604a65844a5
mov rax, rdx
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0x7af7191d67000db5
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0x852e6b87b62c2cf0
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0xf4ce15c0758b33f
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0x989246e5a13fcbd9
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0x8599a0e7f8a94577
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0xeda779755029a0a
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0xdcaa9bf058531500
cmp rdx, rcx
je 0x180004cb7
movabs rcx, 0xb1c15967b96c5e5d
cmp rdx, rcx
je 0x180004cb7
movabs rax, 0xe6ebb45b4d604b1d
cmp rdx, rax
je 0x180004cb7
movabs rax, 0x172ecad8537a0f66
cmp rdx, rax
jne 0x180004cbb
movzx ebp, r14b
cmp byte [rdi], 0x4c
jne 0x180004cf0
cmp byte [rdi + 1], 0x8b
jne 0x180004cf0
cmp byte [rdi + 2], 0xd1
jne 0x180004cf0
cmp byte [rdi + 3], 0xb8
jne 0x180004cf0
cmp byte [rdi + 6], r15b
jne 0x180004cf0
cmp byte [rdi + 7], r15b
jne 0x180004cf0
movzx r9d, byte [rdi + 5]
movzx eax, byte [rdi + 4]
shl r9, 8
jmp 0x180004d9f
movzx r8d, r14w
nop dword [rax]
nop dword [rax + rax]
movzx r10d, r8w
mov eax, r10d
shl eax, 5
cmp byte [rax + rdi], 0x4c
jne 0x180004d33
cmp byte [rax + rdi + 1], 0x8b
jne 0x180004d33
cmp byte [rax + rdi + 2], 0xd1
jne 0x180004d33
cmp byte [rax + rdi + 3], 0xb8
jne 0x180004d33
cmp byte [rax + rdi + 6], r15b
jne 0x180004d33
cmp byte [rax + rdi + 7], r15b
je 0x180004d78
mov eax, r10d
neg eax
shl eax, 5
movsxd rcx, eax
add rcx, rdi
cmp byte [rcx], 0x4c
jne 0x180004d64
cmp byte [rcx + 1], 0x8b
jne 0x180004d64
cmp byte [rcx + 2], 0xd1
jne 0x180004d64
cmp byte [rcx + 3], 0xb8
jne 0x180004d64
cmp byte [rcx + 6], r15b
jne 0x180004d64
cmp byte [rcx + 7], r15b
je 0x180004d8f
inc r8w
mov eax, 0x1f4
cmp r8w, ax
jbe 0x180004d00
jmp 0x180004f16
movzx r9d, byte [rax + rdi + 4]
movzx ecx, byte [rax + rdi + 5]
sub r9, r10
shl rcx, 8
or r9, rcx
jmp 0x180004da2
movzx r9d, byte [rcx + 4]
movzx eax, byte [rcx + 5]
add r9d, r10d
shl rax, 8
or r9, rax
cmp r9, 0xffffffffffffffff
je 0x180004f16
mov ecx, r15d
nop
mov r8d, ecx
add r8, rdi
inc ecx
cmp byte [r8], 0xf
jne 0x180004dc4
cmp byte [rcx + rdi], 5
je 0x180004dd1
cmp ecx, 0x200
jbe 0x180004db0
jmp 0x180004f16
test r8, r8
je 0x180004f16
mov r11, qword [0x18000eb30]
xor cl, cl
mov r10d, r15d
test r11, r11
je 0x180004e26
mov rax, r15
lea rbx, [0x18000eb30]
nop word [rax + rax]
lea rax, [rax + rax*2]
movzx ecx, cl
add rax, rax
cmp qword [rbx + rax*8 + 0x10], rdi
cmove ecx, r14d
inc r10d
mov eax, r10d
cmp rax, r11
jb 0x180004e00
test cl, cl
jne 0x180004f16
lea r10, [0x18000eb30]
mov eax, esi
lea rcx, [rax + rax*2]
add rcx, rcx
mov qword [r10 + rcx*8 + 0x10], rdi
mov qword [r10 + rcx*8 + 8], r9
mov qword [r10 + rcx*8 + 0x18], r8
mov qword [r10 + rcx*8 + 0x28], rdx
test bpl, bpl
jne 0x180004e67
cmp byte [rsp + 0xc0], r15b
jne 0x180004e67
cmp byte [rdi], 0xe9
je 0x180004e67
cmp byte [rdi + 3], 0xe9
mov eax, r15d
jne 0x180004e6a
mov eax, r14d
mov dword [r10 + rcx*8 + 0x30], eax
movabs rax, 0x8ad1c604a65844a5
cmp rdx, rax
jne 0x180004e85
xor ecx, ecx
jmp 0x180004f05
movabs rax, 0x7af7191d67000db5
cmp rdx, rax
jne 0x180004e99
mov ecx, r14d
jmp 0x180004f05
movabs rax, 0x852e6b87b62c2cf0
cmp rdx, rax
jne 0x180004eaf
mov ecx, 2
jmp 0x180004f05
movabs rax, 0xf4ce15c0758b33f
cmp rdx, rax
jne 0x180004ec5
mov ecx, 3
jmp 0x180004f05
movabs rax, 0x989246e5a13fcbd9
cmp rdx, rax
jne 0x180004edb
mov ecx, 4
jmp 0x180004f05
movabs rax, 0x8599a0e7f8a94577
cmp rdx, rax
jne 0x180004ef1
mov ecx, 5
jmp 0x180004f05
movabs rax, 0xeda779755029a0a
cmp rdx, rax
jne 0x180004f0c
mov ecx, 6
mov edx, esi
call fcn.180005f13
inc esi
cmp esi, 0x200
je 0x180004f44
mov rdi, qword [rsp + 0x20]
inc r12w
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov ecx, dword [rdi + 0x18]
mov r10, qword [rsp + 0x60]
movzx eax, r12w
cmp eax, ecx
jb 0x180004b32
jmp 0x180004f49
mov rdi, qword [rsp + 0x20]
movzx eax, word [rsp + 0xc8]
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x60]
mov ebx, esi
mov qword [0x18000eb30], rbx
cmp esi, 0x200
je 0x180004ff5
inc ax
mov word [rsp + 0xc8], ax
cmp ax, 4
jb 0x180004b10
cmp esi, 7
jae 0x180004ff1
call fcn.180005d50
test rax, rax
je 0x180004ff1
cmp rax, r13
je 0x180004ff1
mov ecx, 0x5a4d
mov r13, rax
cmp word [rax], cx
je 0x180004a10
xor eax, eax
mov r13, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
mov r15, qword [rsp + 0x78]
add rsp, 0xb0
pop r14
ret
test esi, esi
je 0x180005008
lea rcx, [0x1800055e0]
call fcn.180005e7a
mov rbx, qword [0x18000eb30]
test rbx, rbx
setne r15b
mov eax, r15d
jmp 0x180004fb2