Function at 0x140197038
Capabilities:
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push r12
push r14
push r15
sub rsp, 0x1b0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rsi, rcx
lea rbx, [rcx + 0x10]
mov rcx, qword [rcx + 0x20]
xor r12d, r12d
test rcx, rcx
je 0x14019711f
cmp qword [rsi + 0x28], 0x10
jb 0x14019708c
mov r9, qword [rbx]
lea rdi, [rcx + r9]
lea r14, [rcx + r9]
jmp 0x140197097
lea rdi, [rcx + rbx]
mov r9, rbx
lea r14, [rcx + rbx]
mov r8, rdi
sub r8, r9
mov edx, 0x22
mov rcx, r9
call qword [sym.imp.VCRUNTIME140.dll_memchr]
mov rcx, rdi
test rax, rax
cmovne rcx, rax
mov rax, rcx
cmp rcx, rdi
je 0x1401970d3
jmp 0x1401970cb
mov dl, byte [rcx]
cmp dl, 0x22
je 0x1401970cb
mov byte [rax], dl
inc rax
inc rcx
cmp rcx, rdi
jne 0x1401970bf
mov rcx, rbx
cmp qword [rsi + 0x28], 0x10
jb 0x1401970e0
mov rcx, qword [rbx]
mov rdx, rax
sub rdx, rcx
sub r14, rax
mov r8, qword [rsi + 0x20]
mov rax, r8
sub rax, rdx
cmp rax, r14
cmovb r14, rax
cmp qword [rsi + 0x28], 0x10
jb 0x140197104
mov rbx, qword [rbx]
lea rcx, [rbx + rdx]
sub r8, r14
mov qword [rsi + 0x20], r8
sub r8, rdx
inc r8
lea rdx, [rcx + r14]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov rcx, rsi
call fcn.1401978d8
test al, al
jne 0x14019713e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0x7c
jmp 0x1401976e1
cmp byte [rsi + 0x409], r12b
jne 0x14019717d
lea rdx, [rsi + 0x30]
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov ecx, dword [rsi + 0x54]
mov qword [rsi + 0x68], rcx
cmp byte [rsi + 4], r12b
jne 0x14019717d
cmp byte [rsi + 0x488], r12b
jne 0x140197176
mov rcx, rsi
call fcn.14019a524
mov al, 1
jmp 0x1401976eb
lea rbx, [rsi + 0x70]
mov byte [rsp + 0x28], r12b
mov r15d, 2
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea edi, [r15 + 0x3e]
mov r8d, edi
mov rdx, rbx
mov rcx, rsi
call fcn.1401998f0
test al, al
jne 0x1401971d4
mov qword [rsi + 0x470], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, 0x80006
lea r8d, [rdi + 0x57]
jmp 0x1401976e1
mov eax, 0x5a4d
cmp ax, word [rbx]
je 0x1401971e8
mov eax, 0x4d5a
cmp ax, word [rbx]
jne 0x1401971f2
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140197202
mov edx, 0x80003
mov r8d, 0x9d
jmp 0x1401976e1
cmp byte [rsi + 0x409], r12b
jne 0x140197227
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, eax
jmp 0x140197229
mov ecx, edi
mov eax, dword [rsi + 0xac]
cmp eax, edi
jb 0x1401976d6
cmp eax, 0x400
jg 0x1401976d6
sub eax, ecx
lea rdi, [rsi + 0x360]
mov ebx, eax
mov edx, eax
mov rcx, rdi
call fcn.1400cea6c
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, ebx
mov rdx, qword [rdi]
mov rcx, rsi
call fcn.1401998f0
test al, al
jne 0x140197286
mov edx, 0x80006
mov r8d, 0xb2
jmp 0x1401976e1
mov edi, 0xf8
mov r8d, edi
xor edx, edx
lea rcx, [rsp + 0xb0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r9 + 0x14]
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call fcn.1401998f0
test al, al
jne 0x1401972d0
mov edx, 0x80006
lea r8d, [rdi - 0x41]
jmp 0x1401976e1
mov edx, 0x14c
movzx ecx, word [rsp + 0xb4]
and cx, dx
cmp cx, dx
sete al
mov byte [rsi + 0x430], al
movsxd r9, dword [rsi + 0xac]
mov byte [rsp + 0x28], 1
mov rcx, rsi
mov dword [rsp + 0x20], 1
jne 0x140197376
mov qword [rsi + 0x438], 4
lea rbx, [rsi + 0xb0]
mov r8, rdi
mov rdx, rbx
call fcn.1401998f0
test al, al
jne 0x140197336
mov edx, 0x80006
mov r8d, 0xbf
jmp 0x1401976e1
cmp dword [rbx], 0x4550
je 0x14019734e
mov edx, 0x80003
mov r8d, 0xc3
jmp 0x1401976e1
movzx ecx, word [rsi + 0xb6]
mov eax, 0x60
cmp ecx, eax
jbe 0x140197367
mov word [rsi + 0xb6], ax
mov ecx, eax
test ecx, ecx
jne 0x1401973db
mov r8d, 0xe3
jmp 0x1401976dc
mov qword [rsi + 0x438], 8
lea rbx, [rsi + 0x1a8]
mov r8d, 0x108
mov rdx, rbx
call fcn.1401998f0
test al, al
jne 0x1401973aa
mov edx, 0x80006
mov r8d, 0xd2
jmp 0x1401976e1
cmp dword [rbx], 0x4550
je 0x1401973c2
mov edx, 0x80003
mov r8d, 0xd7
jmp 0x1401976e1
movzx ecx, word [rsi + 0x1ae]
mov eax, 0x60
cmp ecx, eax
jbe 0x140197367
mov word [rsi + 0x1ae], ax
mov ecx, eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x38], al
mov rbx, r12
mov rdi, r12
mov r14d, ecx
test ecx, ecx
je 0x140197560
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r9 + 0x28]
lea rdx, [rsp + 0x80]
mov rcx, rsi
call fcn.1401998f0
test al, al
je 0x14019761f
mov r8d, 8
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x30]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov rax, r12
cmp byte [rsp + rax + 0x30], 0x20
jge 0x140197448
mov byte [rsp + rax + 0x30], r12b
inc rax
cmp rax, 9
jb 0x14019743c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x41], xmm0
movups xmmword [rsp + 0x51], xmm0
movups xmmword [rsp + 0x61], xmm0
mov word [rsp + 0x71], ax
mov byte [rsp + 0x73], al
movups xmm0, xmmword [rsp + 0x80]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [rsp + 0xa0]
movsd qword [rsp + 0x60], xmm0
lea r9d, [rax + 8]
lea r8, [rsp + 0x30]
lea edx, [rax + 9]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
lea rcx, [rsi + 0x378]
mov rdx, qword [rsi + 0x380]
cmp rdx, qword [rsi + 0x388]
je 0x1401974ed
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x20], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rdx + 0x30], eax
add qword [rcx + 8], 0x34
jmp 0x1401974f7
lea r8, [rsp + 0x40]
call fcn.1401a6f38
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.140198c8c
cmp byte [rsi + 0x409], r12b
je 0x140197544
dec eax
xor edx, edx
cmp byte [rsi + 0x430], r12b
je 0x140197522
mov ecx, dword [rsi + 0xe8]
jmp 0x140197528
mov ecx, dword [rsi + 0x1e0]
add eax, ecx
div ecx
mov r8d, eax
imul r8, rcx
mov ecx, dword [rsp + 0x4c]
add rcx, r8
cmp rcx, rbx
jbe 0x140197554
mov rbx, rcx
jmp 0x140197554
mov edx, dword [rsp + 0x54]
mov eax, eax
add rdx, rax
cmp rdx, rbx
cmova rbx, rdx
inc rdi
cmp rdi, r14
jb 0x1401973f7
cmp byte [rsi + 0x488], r12b
jne 0x140197571
mov rcx, rsi
call fcn.14019a524
cmp byte [rsi + 0x430], r12b
je 0x140197634
lea r14, [rsi + 0x128]
mov rdi, r14
lea r15, [r14 + 0x80]
cmp r14, r15
je 0x1401975bf
mov eax, dword [rdi]
cmp byte [rsi + 0x409], r12b
jne 0x1401975a9
mov edx, eax
mov rcx, rsi
call fcn.140197c4c
mov ecx, dword [rdi + 4]
add rax, rcx
cmp rax, rbx
cmova rbx, rax
add rdi, 8
cmp rdi, r15
jne 0x140197594
cmp dword [rsi + 0x130], r12d
je 0x1401975e0
xor edx, edx
mov rcx, rsi
call fcn.140197d64
test al, al
jne 0x1401975e0
cmp dword [rsi + 8], 4
jne 0x1401976eb
cmp dword [r14], r12d
je 0x1401975fb
mov rcx, rsi
call fcn.1401986d0
test al, al
jne 0x1401975fb
cmp dword [rsi + 8], 4
jne 0x1401976eb
cmp dword [rsi + 0x150], r12d
je 0x14019761a
mov rcx, rsi
call fcn.140198cd8
test al, al
jne 0x14019761a
cmp dword [rsi + 8], 4
jne 0x1401976eb
jmp 0x1401976c4
mov edx, 0x80006
mov r8d, 0xef
jmp 0x1401976e1
lea r14, [rsi + 0x230]
mov rdi, r14
lea r15, [r14 + 0x80]
cmp r14, r15
je 0x140197675
mov eax, dword [rdi]
cmp byte [rsi + 0x409], r12b
jne 0x14019765f
mov edx, eax
mov rcx, rsi
call fcn.140197c4c
mov ecx, dword [rdi + 4]
add rax, rcx
cmp rax, rbx
cmova rbx, rax
add rdi, 8
cmp rdi, r15
jne 0x14019764a
cmp dword [rsi + 0x238], r12d
je 0x140197692
xor edx, edx
mov rcx, rsi
call fcn.140197d64
test al, al
jne 0x140197692
cmp dword [rsi + 8], 4
jne 0x1401976eb
cmp dword [r14], r12d
je 0x1401976a9
mov rcx, rsi
call fcn.1401986d0
test al, al
jne 0x1401976a9
cmp dword [rsi + 8], 4
jne 0x1401976eb
cmp dword [rsi + 0x258], r12d
je 0x1401976c4
mov rcx, rsi
call fcn.140198cd8
test al, al
jne 0x1401976c4
cmp dword [rsi + 8], 4
jne 0x1401976eb
cmp qword [rsi + 0x68], rbx
seta al
mov byte [rsi + 0x48b], al
jmp 0x140197176
mov r8d, 0xa9
mov edx, 0x8000c
mov rcx, rsi
call fcn.140196c24
xor al, al
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret