Function at 0x18001ed5e
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov qword [rsp + 0x20], rcx
lea r14, [rsp + 4]
mov qword [rsp + 0x10], r14
mov rax, qword [rsp + 0x10]
mov dword [r14], 0x361ca5
mov eax, dword [r14]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
mov dword [rsp + 0xc], eax
lea r15d, [rcx + 0x1c]
lea r9d, [rcx + rcx]
mov eax, 0xe332bf98
mov r10d, 0xbba40c30
mov r11d, 0x15317766
mov ebx, 3
mov edi, 0x50f0d883
mov esi, 0x9b20d54e
cmp eax, 0x15317765
jle 0x18001edf5
cmp eax, 0x4e410cfa
jle 0x18001ee19
cmp eax, 0x4e410cfb
je 0x18001ee83
cmp eax, 0x50f0d883
je 0x18001eeac
cmp eax, 0x603b5708
jne 0x18001edc5
jmp 0x18001eef5
cmp eax, 0xe332bf97
jg 0x18001ee4b
cmp eax, 0x9b20d54e
je 0x18001eeb9
cmp eax, 0xbba40c30
jne 0x18001edc5
add dword [rsp + 4], ecx
mov eax, 0x603b5708
jmp 0x18001edc5
cmp eax, 0x15317766
je 0x18001eed3
cmp eax, 0x4290fbd7
jne 0x18001edc5
mov eax, dword [rsp + 4]
lea ebp, [rax + rbx]
test eax, eax
cmovns ebp, eax
and ebp, 0xfffffffc
sub eax, ebp
cmp eax, ebx
mov eax, 0x603b5708
cmove eax, edi
jmp 0x18001edc5
cmp eax, 0xe332bf98
je 0x18001eee2
cmp eax, 0xe83d24e9
jne 0x18001edc5
mov eax, dword [rsp + 8]
lea ebp, [rax + 3]
test eax, eax
cmovns ebp, eax
and ebp, 0xfffffffc
sub eax, ebp
cmp eax, 2
mov eax, 0x4290fbd7
cmove eax, r11d
jmp 0x18001edc5
mov eax, dword [rsp + 4]
lea ebp, [rax + 3]
test eax, eax
cmovns ebp, eax
and ebp, 0xfffffffc
sub eax, ebp
cmp eax, 1
mov eax, dword [rsp + 4]
mov dword [rsp + 8], eax
mov eax, 0xe83d24e9
cmove eax, esi
jmp 0x18001edc5
mov eax, r15d
sub eax, dword [rsp + 4]
sub eax, dword [rsp + 4]
jmp 0x18001eec5
mov eax, dword [rsp + 8]
add eax, ecx
imul eax, ecx
add eax, 0x1c
mov dword [rsp + 4], eax
mov eax, 0x603b5708
jmp 0x18001edc5
add dword [rsp + 4], r9d
mov eax, 0x603b5708
jmp 0x18001edc5
cmp dword [rsp + 0xc], 0
mov eax, 0x4e410cfb
cmove eax, r10d
jmp 0x18001edc5
mov rax, qword [rsp + 0x10]
mov rax, qword [rsp + 0x20]
movzx eax, word [rax]
mov dword [rsp + 0x1c], eax
mov edi, 0x182a3544
mov r10d, 0xbba40c30
mov r11d, 0x15317766
mov r8d, 3
mov r12d, 0x50f0d883
mov r13d, 0x9b20d54e
cmp edi, 0xc9e71cce
jle 0x18001ef6a
cmp edi, 0xc9e71ccf
je 0x18001f0de
cmp edi, 0xf2557e68
je 0x18001f59c
cmp edi, 0x182a3544
jne 0x18001ef29
mov edi, dword [rsp + 0x1c]
cmp edi, 0x5a4d
mov edi, 0xc9e71ccf
mov eax, 0x96a13f59
cmove edi, eax
jmp 0x18001ef29
cmp edi, 0x96a13f59
je 0x18001f23e
cmp edi, 0xa25dd578
jne 0x18001ef29
mov qword [rsp + 0x10], r14
mov rax, qword [rsp + 0x10]
mov dword [rsp + 4], 0x361ca5
mov eax, dword [rsp + 4]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
mov dword [rsp + 0xc], eax
mov eax, 0xe332bf98
cmp eax, 0x15317765
jle 0x18001efda
cmp eax, 0x4e410cfa
jle 0x18001effe
cmp eax, 0x4e410cfb
je 0x18001f06b
cmp eax, 0x50f0d883
je 0x18001f095
cmp eax, 0x603b5708
jne 0x18001efaa
jmp 0x18001f3aa
cmp eax, 0xe332bf97
jg 0x18001f033
cmp eax, 0x9b20d54e
je 0x18001f0a2
cmp eax, 0xbba40c30
jne 0x18001efaa
add dword [rsp + 4], ecx
mov eax, 0x603b5708
jmp 0x18001efaa
cmp eax, 0x15317766
je 0x18001f0bc
cmp eax, 0x4290fbd7
jne 0x18001efaa
mov eax, dword [rsp + 4]
lea edx, [rax + r8]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
cmp eax, r8d
mov eax, 0x603b5708
cmove eax, r12d
jmp 0x18001efaa
cmp eax, 0xe332bf98
je 0x18001f0cb
cmp eax, 0xe83d24e9
jne 0x18001efaa
mov eax, dword [rsp + 8]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
cmp eax, 2
mov eax, 0x4290fbd7
cmove eax, r11d
jmp 0x18001efaa
mov eax, dword [rsp + 4]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
cmp eax, 1
mov eax, dword [rsp + 4]
mov dword [rsp + 8], eax
mov eax, 0xe83d24e9
cmove eax, r13d
jmp 0x18001efaa
mov eax, r15d
sub eax, dword [rsp + 4]
sub eax, dword [rsp + 4]
jmp 0x18001f0ae
mov eax, dword [rsp + 8]
add eax, ecx
imul eax, ecx
add eax, 0x1c
mov dword [rsp + 4], eax
mov eax, 0x603b5708
jmp 0x18001efaa
add dword [rsp + 4], r9d
mov eax, 0x603b5708
jmp 0x18001efaa
cmp dword [rsp + 0xc], 0
mov eax, 0x4e410cfb
cmove eax, r10d
jmp 0x18001efaa
mov qword [rsp + 0x10], r14
mov rax, qword [rsp + 0x10]
mov dword [rsp + 4], 0x361ca5
mov eax, dword [rsp + 4]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
mov dword [rsp + 0xc], eax
mov eax, 0xe332bf98
cmp eax, 0x15317765
jle 0x18001f13a
cmp eax, 0x4e410cfa
jle 0x18001f15e
cmp eax, 0x4e410cfb
je 0x18001f1cb
cmp eax, 0x50f0d883
je 0x18001f1f5
cmp eax, 0x603b5708
jne 0x18001f10a
jmp 0x18001f3be
cmp eax, 0xe332bf97
jg 0x18001f193
cmp eax, 0x9b20d54e
je 0x18001f202
cmp eax, 0xbba40c30
jne 0x18001f10a
add dword [rsp + 4], ecx
mov eax, 0x603b5708
jmp 0x18001f10a
cmp eax, 0x15317766
je 0x18001f21c
cmp eax, 0x4290fbd7
jne 0x18001f10a
mov eax, dword [rsp + 4]
lea edx, [rax + r8]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
cmp eax, r8d
mov eax, 0x603b5708
cmove eax, r12d
jmp 0x18001f10a
cmp eax, 0xe332bf98
je 0x18001f22b
cmp eax, 0xe83d24e9
jne 0x18001f10a
mov eax, dword [rsp + 8]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
cmp eax, 2
mov eax, 0x4290fbd7
cmove eax, r11d
jmp 0x18001f10a
mov eax, dword [rsp + 4]
lea edx, [rax + 3]
test eax, eax
cmovns edx, eax
and edx, 0xfffffffc
sub eax, edx
cmp eax, 1
mov eax, dword [rsp + 4]
mov dword [rsp + 8], eax
mov eax, 0xe83d24e9
cmove eax, r13d
jmp 0x18001f10a
mov eax, r15d
sub eax, dword [rsp + 4]
sub eax, dword [rsp + 4]
jmp 0x18001f20e
mov eax, dword [rsp + 8]
add eax, ecx
imul eax, ecx
add eax, 0x1c
mov dword [rsp + 4], eax
mov eax, 0x603b5708
jmp 0x18001f10a
add dword [rsp + 4], r9d
mov eax, 0x603b5708
jmp 0x18001f10a
cmp dword [rsp + 0xc], 0
mov eax, 0x4e410cfb
cmove eax, r10d
jmp 0x18001f10a
mov qword [rsp + 0x10], r14
mov rdi, qword [rsp + 0x10]
mov dword [rsp + 4], 0x361ca5
mov edi, dword [rsp + 4]
lea ebx, [rdi + 3]
test edi, edi
cmovns ebx, edi
and ebx, 0xfffffffc
sub edi, ebx
mov dword [rsp + 0xc], edi
mov edi, 0xe332bf98
cmp edi, 0x15317765
jle 0x18001f29f
cmp edi, 0x4e410cfa
jle 0x18001f2c6
cmp edi, 0x4e410cfb
je 0x18001f337
cmp edi, 0x50f0d883
je 0x18001f361
cmp edi, 0x603b5708
jne 0x18001f26a
jmp 0x18001f3cf
cmp edi, 0xe332bf97
jg 0x18001f2fd
cmp edi, 0x9b20d54e
je 0x18001f36e
cmp edi, 0xbba40c30
jne 0x18001f26a
add dword [rsp + 4], ecx
mov edi, 0x603b5708
jmp 0x18001f26a
cmp edi, 0x15317766
je 0x18001f388
cmp edi, 0x4290fbd7
jne 0x18001f26a
mov edi, dword [rsp + 4]
lea ebx, [rdi + r8]
test edi, edi
cmovns ebx, edi
and ebx, 0xfffffffc
sub edi, ebx
cmp edi, r8d
mov edi, 0x603b5708
cmove edi, r12d
jmp 0x18001f26a
cmp edi, 0xe332bf98
je 0x18001f397
cmp edi, 0xe83d24e9
jne 0x18001f26a
mov edi, dword [rsp + 8]
lea ebx, [rdi + 3]
test edi, edi
cmovns ebx, edi
and ebx, 0xfffffffc
sub edi, ebx
cmp edi, 2
mov edi, 0x4290fbd7
cmove edi, r11d
jmp 0x18001f26a
mov edi, dword [rsp + 4]
lea ebx, [rdi + 3]
test edi, edi
cmovns ebx, edi
and ebx, 0xfffffffc
sub edi, ebx
cmp edi, 1
mov edi, dword [rsp + 4]
mov dword [rsp + 8], edi
mov edi, 0xe83d24e9
cmove edi, r13d
jmp 0x18001f26a
mov edi, r15d
sub edi, dword [rsp + 4]
sub edi, dword [rsp + 4]
jmp 0x18001f37a
mov edi, dword [rsp + 8]
add edi, ecx
imul edi, ecx
add edi, 0x1c
mov dword [rsp + 4], edi
mov edi, 0x603b5708
jmp 0x18001f26a
add dword [rsp + 4], r9d
mov edi, 0x603b5708
jmp 0x18001f26a
cmp dword [rsp + 0xc], 0
mov edi, 0x4e410cfb
cmove edi, r10d
jmp 0x18001f26a
mov rax, qword [rsp + 0x10]
mov edi, 0xf2557e68
mov rdx, qword [rsp + 0x28]
jmp 0x18001ef29
mov rax, qword [rsp + 0x10]
mov edi, 0xf2557e68
xor edx, edx
jmp 0x18001ef29
mov qword [rsp + 0x30], rdx
mov rdi, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x20]
movsxd rbp, dword [rdi + 0x3c]
add rbp, rcx
mov qword [rsp + 0x28], rbp
mov rax, r14
mov qword [rsp + 0x10], r14
mov rdi, qword [rsp + 0x10]
mov dword [rsp + 4], 0x361ca5
mov edi, dword [rsp + 4]
lea ebx, [rdi + 3]
test edi, edi
cmovns ebx, edi
and ebx, 0xfffffffc
sub edi, ebx
mov dword [rsp + 0xc], edi
lea edi, [rbp + 0x1c]
lea ebx, [rbp + rbp]
mov r14d, 0xe332bf98
cmp r14d, 0x15317765
jle 0x18001f45b
cmp r14d, 0x4e410cfa
jle 0x18001f486
cmp r14d, 0x4e410cfb
je 0x18001f4fd
cmp r14d, 0x50f0d883
je 0x18001f528
cmp r14d, 0x603b5708
jne 0x18001f421
jmp 0x18001f572
cmp r14d, 0xe332bf97
jg 0x18001f4c0
cmp r14d, 0x9b20d54e
je 0x18001f534
cmp r14d, 0xbba40c30
jne 0x18001f421
add dword [rsp + 4], ebp
mov r14d, 0x603b5708
jmp 0x18001f421
cmp r14d, 0x15317766
je 0x18001f54f
cmp r14d, 0x4290fbd7
jne 0x18001f421
mov edx, dword [rsp + 4]
lea esi, [rdx + r8]
test edx, edx
cmovns esi, edx
and esi, 0xfffffffc
sub edx, esi
cmp edx, r8d
mov r14d, 0x603b5708
cmove r14d, r12d
jmp 0x18001f421
cmp r14d, 0xe332bf98
je 0x18001f55e
cmp r14d, 0xe83d24e9
jne 0x18001f421
mov edx, dword [rsp + 8]
lea esi, [rdx + 3]
test edx, edx
cmovns esi, edx
and esi, 0xfffffffc
sub edx, esi
cmp edx, 2
mov r14d, 0x4290fbd7
cmove r14d, r11d
jmp 0x18001f421
mov edx, dword [rsp + 4]
lea esi, [rdx + 3]
test edx, edx
cmovns esi, edx
and esi, 0xfffffffc
sub edx, esi
cmp edx, 1
mov edx, dword [rsp + 4]
mov dword [rsp + 8], edx
mov r14d, 0xe83d24e9
cmove r14d, r13d
jmp 0x18001f421
mov edx, edi
sub edx, dword [rsp + 4]
sub edx, dword [rsp + 4]
jmp 0x18001f540
mov edx, dword [rsp + 8]
add edx, ebp
imul edx, ebp
add edx, 0x1c
mov dword [rsp + 4], edx
mov r14d, 0x603b5708
jmp 0x18001f421
add dword [rsp + 4], ebx
mov r14d, 0x603b5708
jmp 0x18001f421
cmp dword [rsp + 0xc], 0
mov r14d, 0x4e410cfb
cmove r14d, r10d
jmp 0x18001f421
mov rdx, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x28]
cmp dword [rdx], 0x4550
mov edi, 0xc9e71ccf
mov edx, 0xa25dd578
cmove edi, edx
mov r14, rax
mov rdx, qword [rsp + 0x30]
jmp 0x18001ef29
mov rax, rdx
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret