Function at 0x18005ef40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x128
mov byte [rsp + 0x44], 0xb8
mov qword [rsp + 0xa0], 0x1c
mov byte [rsp + 0x30], 0x11
mov dword [rsp + 0x58], 0x577d80dc
movabs rax, 0xc9213bf26e188
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 0x88af
movzx eax, byte [str.Eee_]
mov dword [rsp + 0x8c], eax
mov eax, 0xff8f
mov word [rsp + 0x24], ax
movzx eax, byte [0x1800c36f6]
movsx rax, al
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x34], 0x7dce13d7
mov eax, dword [0x1800c3808]
mov dword [rsp + 0x90], eax
mov qword [rsp + 0xe8], 0x34a0
mov eax, dword [0x1800c37e4]
mov dword [rsp + 0x4c], eax
mov rax, qword [0x1800c3838]
mov byte [rsp + 0x20], al
mov dword [rsp + 0xb8], 0x34b8
movzx eax, word [0x1800c377c]
movzx eax, ax
mov qword [rsp + 0xf0], rax
movzx eax, byte [str.0The_size_of_header]
mov word [rsp + 0x78], ax
movzx eax, byte [0x1800c37f4]
mov byte [rsp + 0x21], al
mov eax, 0x1423
mov word [rsp + 0x28], ax
mov eax, 0x89
mov word [rsp + 0x2c], ax
mov dword [rsp + 0x3c], 0x5148171d
mov eax, dword [0x1800c3828]
mov byte [rsp + 0x22], al
mov dword [rsp + 0xbc], 0xa257
mov rax, qword [str.yLSD]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xc0], 0xab16135b
mov eax, 0xe9ed
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c382c]
movzx eax, ax
mov qword [rsp + 0x100], rax
mov eax, 0x5435
mov word [rsp + 0x80], ax
mov eax, 0xbba
mov word [rsp + 0x84], ax
movzx eax, word [0x1800c3818]
mov word [rsp + 0x88], ax
mov eax, dword [0x180895650]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
add eax, 0x16e
mov dword [rsp + 0xc4], eax
movzx eax, word [0x1800c37f4]
mov rcx, qword [rsp + 0xd0]
cmp rax, rcx
jge 0x18005f0f4
mov dword [rsp + 0x74], 1
jmp 0x18005f0fc
mov dword [rsp + 0x74], 0
mov eax, dword [0x1800c3828]
test eax, eax
jne 0x18005f110
mov dword [rsp + 0x6c], 1
jmp 0x18005f118
mov dword [rsp + 0x6c], 0
movzx eax, word [0x1800c3804]
cmp eax, dword [rsp + 0x6c]
jge 0x18005f12f
mov dword [rsp + 0x70], 1
jmp 0x18005f137
mov dword [rsp + 0x70], 0
mov eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x74]
add ecx, eax
mov eax, ecx
mov eax, dword [rsp + 0x48]
add eax, 0x34e
mov dword [rsp + 0x60], eax
movsx eax, byte [0x1800c36f7]
test eax, eax
je 0x18005f15d
jmp 0x18005f17d
movzx eax, word [rsp + 0x24]
add eax, 0x94f5
mov dword [rsp + 0x34], eax
movsx eax, word [rsp + 0x28]
mov ecx, dword [rsp + 0x34]
imul ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x48]
add eax, 0x251
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x3c], 0
je 0x18005f28b
mov byte [rsp + 0x21], 4
movzx eax, word [rsp + 0x2c]
movzx eax, ax
add rax, qword [str.yLSD]
movzx ecx, word [rsp + 0x2c]
movzx ecx, cx
add rcx, rax
mov rax, rcx
mov word [rsp + 0x2c], ax
movzx eax, byte [rsp + 0x21]
mov byte [rsp + 0x38], al
cmp byte [rsp + 0x38], 0
je 0x18005f1f5
cmp byte [rsp + 0x38], 1
je 0x18005f219
cmp byte [rsp + 0x38], 2
je 0x18005f23a
cmp byte [rsp + 0x38], 3
je 0x18005f266
cmp byte [rsp + 0x38], 4
je 0x18005f27c
jmp 0x18005f289
mov eax, dword [rsp + 0x58]
sar eax, 1
mov word [0x1800c382c], ax
movzx eax, byte [0x1800c377e]
movsx eax, al
add eax, 0xf263
mov byte [0x1800c371e], al
jmp 0x18005f289
mov byte [0x1800c371e], 0xa2
imul eax, dword [rsp + 0x4c], 0x8f42b213
movzx ecx, byte [rsp + 0x20]
movzx ecx, cl
and ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
jmp 0x18005f289
movsxd rax, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0xa8]
sub rax, rcx
movsxd rcx, dword [rsp + 0x3c]
sub rcx, rax
mov rax, rcx
mov dword [rsp + 0x3c], eax
movzx eax, byte [rsp + 0x22]
dec al
mov byte [rsp + 0x22], al
jmp 0x18005f289
movzx eax, byte [0x1800c3766]
imul eax, eax, 0x30729bd3
mov word [0x1800c3830], ax
jmp 0x18005f289
mov eax, dword [rsp + 0x4c]
and eax, 0x4409b75c
mov dword [rsp + 0x3c], eax
jmp 0x18005f2c4
movzx eax, byte [rsp + 0x30]
movsx eax, al
cmp eax, dword [rsp + 0x4c]
jl 0x18005f2b2
mov rax, qword [rsp + 0xa8]
mov ecx, 0xbe1f8257
sub rax, rcx
mov word [0x1800c37f4], ax
jmp 0x18005f2c4
cmp dword [rsp + 0x58], 0
je 0x18005f2c4
movzx eax, word [rsp + 0x24]
mov dword [0x1800c3834], eax
mov eax, dword [0x180895650]
mov dword [rsp + 0x50], eax
mov eax, 4
mov word [rsp + 0x28], ax
movzx eax, word [0x1800c3824]
cwde
add eax, 0x20c01afe
cdqe
mov qword [0x1800c3848], rax
movsx eax, word [rsp + 0x28]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x18005f323
cmp dword [rsp + 0x40], 1
je 0x18005f336
cmp dword [rsp + 0x40], 2
je 0x18005f366
cmp dword [rsp + 0x40], 3
je 0x18005f37d
cmp dword [rsp + 0x40], 4
je 0x18005f3c1
jmp 0x18005f3e3
mov eax, dword [0x1800c3820]
inc eax
mov dword [0x1800c3820], eax
jmp 0x18005f3e3
mov eax, 0xded5
mov word [rsp + 0x24], ax
mov eax, dword [0x1800c3800]
mov eax, eax
xor rax, qword [rsp + 0xa0]
mov ecx, dword [0x1800c3800]
mov ecx, ecx
sub rcx, rax
mov rax, rcx
mov dword [0x1800c3800], eax
jmp 0x18005f3e3
movzx eax, word [0x1800c3804]
sub eax, 0x5907
cdqe
mov qword [0x1800c37e8], rax
jmp 0x18005f3e3
movsx eax, word [0x1800c3794]
add eax, 0xbbbd7061
mov eax, eax
mov qword [0x1800c3838], rax
movzx eax, word [rsp + 0x24]
test eax, eax
je 0x18005f3a9
movzx eax, byte [rsp + 0x20]
movzx eax, al
mov dword [rsp + 0x5c], eax
jmp 0x18005f3b3
mov eax, dword [0x1800c37f0]
mov dword [rsp + 0x5c], eax
movzx eax, word [rsp + 0x5c]
mov word [0x1800c3840], ax
jmp 0x18005f3e3
movsx eax, word [0x1800c3794]
mov ecx, dword [rsp + 0x8c]
add eax, ecx
movsx ecx, word [0x1800c3794]
sub ecx, eax
mov eax, ecx
mov word [0x1800c3794], ax
mov eax, dword [rsp + 0x50]
add eax, 0x90b5
mov dword [rsp + 0x94], eax
movsx eax, word [rsp + 0x28]
movzx ecx, word [0x1800c3824]
movsx ecx, cx
cmp eax, ecx
jne 0x18005f446
mov eax, dword [rsp + 0x34]
mov eax, eax
movabs rcx, 0x6e64a610141c2
sub rax, rcx
mov word [rsp + 0x24], ax
mov eax, dword [0x1800c3828]
cdqe
movabs rcx, 0x4128ca7c88db0
add rax, rcx
mov rcx, qword [rsp + 0xd8]
add rax, rcx
mov dword [0x1800c3828], eax
jmp 0x18005f465
mov eax, dword [rsp + 0x90]
mov eax, eax
mov rcx, qword [rsp + 0xa0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x50]
add eax, 0x70
mov dword [rsp + 0xc8], eax
mov eax, dword [rsp + 0x50]
add eax, 0x1d
mov dword [rsp + 0xcc], eax
mov eax, dword [rsp + 0x34]
mov eax, dword [rsp + 0x94]
or eax, 0xf6
add eax, 0xffff6f09
mov ecx, dword [rsp + 0x54]
mov edx, dword [rsp + 0x54]
sub ecx, edx
mov edx, dword [rsp + 0x54]
btc edx, 7
imul ecx, edx
mov edx, dword [rsp + 0x60]
add edx, 0x80
mov r8d, dword [rsp + 0x60]
add r8d, 0x80
sub edx, r8d
sub ecx, edx
sub eax, ecx
mov dword [rsp + 0x98], eax
movsx eax, byte [0x1800c36f7]
test eax, eax
je 0x18005f4dc
jmp 0x18005f4ea
movzx eax, byte [rsp + 0x20]
movzx eax, al
shl eax, 1
mov byte [rsp + 0x21], al
mov qword [rsp + 0xb0], 0
mov r9d, dword [rsp + 0x148]
mov r8, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x130]
call sub.KERNEL32.dll_K32GetModuleFileNameExA
mov eax, eax
mov qword [rsp + 0xb0], rax
mov eax, dword [rsp + 0x98]
mov eax, eax
cmp qword [rsp + 0xb0], rax
jne 0x18005f614
movzx eax, byte [0x1800c3747]
movzx eax, al
movzx ecx, word [rsp + 0x2c]
movzx ecx, cx
cmp eax, ecx
jge 0x18005f55c
mov dword [rsp + 0x68], 1
jmp 0x18005f564
mov dword [rsp + 0x68], 0
movzx eax, byte [0x1800c3747]
movzx eax, al
cmp eax, 0x12
jge 0x18005f57d
mov dword [rsp + 0x64], 1
jmp 0x18005f585
mov dword [rsp + 0x64], 0
mov eax, dword [rsp + 0x64]
cmp dword [rsp + 0x68], eax
jg 0x18005f591
jmp 0x18005f5c3
movsx eax, word [0x1800c3794]
test eax, eax
je 0x18005f5c3
movzx eax, word [0x1800c3840]
movzx eax, ax
mov ecx, dword [0x1800c3800]
add eax, ecx
movzx ecx, word [0x1800c3840]
movzx ecx, cx
sub ecx, eax
mov eax, ecx
mov word [0x1800c3840], ax
mov eax, dword [rsp + 0x148]
dec eax
mov eax, eax
mov qword [rsp + 0xe0], rax
lea rdx, str._not_found_
lea rcx, [rsp + 0x108]
call fcn.180028640
mov rcx, rax
call fcn.18002a4d0
mov rcx, qword [rsp + 0xe0]
mov r8, rcx
mov rdx, rax
mov rcx, qword [rsp + 0x140]
call fcn.1800918e0
mov eax, 3
jmp 0x18005f616
xor eax, eax
add rsp, 0x128
ret