Function at 0x1800afd96
Capabilities:
Parse pe header

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, rdx
mov eax, 0
cmp word [rcx], 0x5a4d
jne 0x1800b1462
movsxd rdx, dword [rcx + 0x3c]
add rdx, rcx
cmp dword [rdx], 0x4550
jne 0x1800b1462
mov r13d, dword [rdx + 0x88]
test r13d, r13d
je 0x1800b324c
mov r13d, r13d
add r13, rcx
mov r12d, dword [r13 + 0x20]
mov ebp, dword [r13 + 0x18]
test ebp, ebp
je 0x1800b324c
mov ebp, ebp
mov ebx, 0
add r12, rcx
lea rax, [0x1800b02d2]
push rax
push r12
push rbp
mov rbp, rsp
sub rsp, 0x200
xor dword [0x1800d9f89], eax
mov eax, dword [0x1800da376]
mov dword [rbp - 0x194], eax
mov byte [rbp - 0xc4], ah
mov word [rbp - 9], ax
sub qword [rbp - 0x113], r12
mov dword [rbp - 0x6e], ecx
cmp rdx, qword [0x1800d9c7b]
je 0x1800afe5e
mov cx, word [rbp - 0xfa]
sub r9, qword [rbp - 0xd6]
mov r10, 0xe5de
xor qword [rbp - 0xe7], r11
mov rax, r12
mov dword [rbp - 0x8a], eax
test rcx, r8
jno 0x1800afe70
mov r9, 0xa934
movzx ecx, byte [rbp - 0x10d]
add edx, 0x9670
movzx eax, dh
mov r11, rcx
mov rcx, 0x7f70
mov r8, qword [rbp - 0x130]
mov al, ah
cmp r10, r12
jns 0x1800afea1
sub qword [rbp - 8], r12
mov eax, 0xca5a
add dl, byte [rbp - 0xe]
mov r12, qword [rbp - 0x134]
or r11, 0x88e8
sub ch, dh
mov eax, eax
mov dword [rbp - 0x130], eax
add ecx, eax
sub r11, 0x9570
or dword [0x1800d87aa], ecx
add dword [rbp - 0x1f3], edx
cmp ecx, 0x73700578
jne 0x1800afed9
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800afeeb
inc qword [rsp]
cmp dword [rsp], 5
jl 0x1800afee7
add rsp, 0x10
mov qword [rbp - 0x1e5], r12
mov rcx, qword [rbp - 0xda]
mov edx, edx
mov edx, edx
movzx ecx, dx
add rcx, qword [rbp - 0x13d]
and r11, qword [rbp - 0x19a]
and dword [rbp - 0xb0], ecx
mov r8, r11
lea r8, [0x1800d70ea]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800aff3a
inc qword [rsp]
cmp dword [rsp], 9
jl 0x1800aff36
add rsp, 0x10
mov qword [0x1800d7736], rcx
mov edx, dword [rbp - 0x19d]
or eax, dword [rbp - 0x2f]
mov qword [0x1800dc5bb], rax
mov r10, qword [rbp - 0x41]
sub ecx, dword [rbp - 0x12a]
mov dword [rbp - 0x17a], eax
test ecx, edx
jns 0x1800aff7d
mov eax, dword [rbp - 0x153]
mov eax, eax
sub ecx, dword [str.I9aubrqvyyD20xH7w6kurithWSZjUNoucMOgPDzFXfUl]
mov qword [rbp - 0x1de], rdx
sub rax, rax
mov eax, dword [rbp - 0x90]
sub dword [rbp - 0xf4], eax
movzx eax, ch
lea r12, [rbp - 0x56]
mov qword [rbp - 0x42], r12
sub eax, 0xcbca
add r10, 0x854c
mov rcx, r12
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b0059
movzx eax, cl
mov dword [rbp - 0x19c], ecx
mov qword [rbp - 0x1ea], r10
mov r11, qword [rbp - 0x1de]
mov eax, 0x2ea5
mov dword [rbp - 0x7f], eax
mov ecx, dword [0x1800daf0a]
xor rdx, r11
mov r10, r10
lea r10, [rbp - 0xa7]
mov r9, 0x31b5
mov r12, qword [rbp - 0xce]
mov qword [rbp - 0x148], r10
mov edx, eax
mov rax, r11
or r12, qword [rbp - 0x162]
sub dword [rbp - 0xe9], eax
add edx, 0xa606
and eax, ecx
mov qword [rbp - 0x187], r10
sub eax, eax
mov r9, qword [rbp - 0x1ad]
or r10, qword [rbp - 0x1bb]
sub dword [rbp - 6], ecx
movzx eax, al
add r11, 0x9a6c
or qword [rbp - 0xcf], r10
sub qword [rbp - 0xe8], r12
mov qword [rbp - 0x1c], r9
inc qword [rsp]
cmp dword [rsp], 0xe
jl 0x1800affbe
add rsp, 0x10
mov qword [rbp - 0x188], r9
mov eax, dword [rbp - 0x9c]
mov rdx, qword [rbp - 0x81]
xor ecx, ecx
cmp ecx, 0x10b44d6b
je 0x1800b02cd
sub rax, 0x2abc
mov r11, qword [rbp - 0xa7]
mov edx, dword [rbp - 0x128]
mov dword [rbp - 0xca], edx
mov qword [rbp - 8], r10
sub byte [0x1800d76ee], ah
sub ah, byte [rbp - 0x17c]
add qword [rbp - 0x198], r11
mov rcx, qword [rbp - 0x108]
cmp ah, byte [0x1800d70ca]
js 0x1800b02cd
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b01c8
lea r8, [rbp - 0x16b]
mov dword [rbp - 0x11b], eax
sub r10, r10
lea edx, [rbp - 0xed]
and dword [rbp - 0x48], ecx
mov qword [rbp - 0x14], r11
mov eax, dword [rbp - 0x38]
movzx edx, byte [rbp - 0x1b2]
mov r8, r12
or rax, qword [rbp - 0xf0]
mov r12, qword [rbp - 0x15c]
mov r10, qword [rbp - 0x4c]
and rdx, qword [rbp - 0x106]
add rdx, qword [rbp - 0x1ab]
mov eax, dword [0x1800dab59]
mov eax, dword [0x1800d8009]
mov dword [rbp - 0x98], ecx
mov qword [rbp - 0x1f1], rcx
sub rdx, r10
mov r10, qword [rbp - 0x142]
mov rax, qword [0x1800dbc64]
mov r8, qword [rbp - 0x82]
and r8, r8
add r11, 0xeb24
mov eax, edx
mov qword [rbp - 0xd2], r9
movzx edx, byte [0x1800d7e0c]
mov edx, eax
movzx eax, byte [rbp - 0x36]
or r11, qword [rbp - 0x2d]
mov dword [rbp - 0x45], ecx
mov dword [rbp - 0x59], eax
mov dword [rbp - 0x15], ecx
movzx edx, cl
or r11, qword [rbp - 0x2e]
xor edx, dword [rbp - 0x2a]
mov r12, rdx
mov dword [rbp - 0x86], edx
xor eax, ecx
movzx ecx, dl
add eax, eax
mov eax, edx
mov qword [rbp - 0xa8], r10
mov qword [0x1800d82ac], rax
sub eax, dword [rbp - 0x1af]
sub r9, rcx
and dword [rbp - 0xd0], eax
sub eax, dword [rbp - 0x15a]
inc qword [rsp]
cmp dword [rsp], 0x11
jl 0x1800b00dd
add rsp, 0x10
add r8, qword [rbp - 0x64]
or dword [rbp - 0x87], ecx
test eax, 0x4d303a39
js 0x1800b029a
mov rax, 0xb0a6
mov eax, edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800b0287
movzx ecx, ah
and rdx, 0xbfd6
sub qword [rbp - 0xf], r8
mov qword [rbp - 0xdc], rax
and qword [rbp - 0x22], r9
mov r8, rax
movzx eax, cx
mov ecx, dword [0x1800d8534]
mov rax, qword [rbp - 0x1da]
or r9, 0x7965
lea r12, [0x1800dbe32]
or byte [rbp - 0x18b], dl
movzx eax, word [0x1800db4e9]
mov qword [0x1800d8dd6], r10
and r9, qword [rbp - 0x16a]
mov dword [rbp - 0x10c], eax
add rdx, 0xde1b
mov qword [rbp - 0xe4], r11
mov qword [rbp - 0x11f], rcx
mov qword [rbp - 0x22], rdx
mov rax, r8
mov r9, qword [0x1800d7ba1]
inc qword [rsp]
cmp dword [rsp], 0x13
jl 0x1800b0205
add rsp, 0x10
mov ecx, 0xa2c2
mov rcx, qword [rbp - 0x1ba]
add rax, r12
add rdx, 0x20c7
xor r11, rcx
mov ecx, eax
sub r10, rax
sub dword [rbp - 0x9e], ecx
mov r8, qword [rbp - 0x92]
mov edx, edx
or qword [rbp - 0x4b], rdx
mov eax, 0x316
add eax, eax
leave
pop r12
ret
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov eax, 0
jmp 0x1800b1462