Function at 0x180172d74
Capabilities:
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push r12
push r14
push r15
sub rsp, 0x1b0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rsi, rcx
lea rbx, [rcx + 0x10]
mov rdx, qword [rcx + 0x20]
xor r12d, r12d
test rdx, rdx
je 0x180172e50
cmp qword [rcx + 0x28], 0x10
jb 0x180172dca
mov r14, qword [rbx]
mov r9, r14
lea rdi, [rdx + r14]
add r14, rdx
jmp 0x180172dd5
mov r9, rbx
lea rdi, [rbx + rdx]
lea r14, [rbx + rdx]
mov r8b, 0x22
mov rdx, rdi
mov rcx, r9
call fcn.180268d50
mov rcx, rax
cmp rax, rdi
je 0x180172e01
jmp 0x180172df9
mov dl, byte [rax]
cmp dl, 0x22
je 0x180172df9
mov byte [rcx], dl
inc rcx
inc rax
cmp rax, rdi
jne 0x180172ded
mov rax, rbx
cmp qword [rsi + 0x28], 0x10
jb 0x180172e0e
mov rax, qword [rbx]
mov rdx, rcx
sub rdx, rax
sub r14, rcx
mov rdi, qword [rsi + 0x20]
mov rax, rdi
sub rax, rdx
cmp rax, r14
cmovb r14, rax
cmp qword [rsi + 0x28], 0x10
jb 0x180172e32
mov rbx, qword [rbx]
lea rcx, [rbx + rdx]
sub rdi, r14
mov r8, rdi
sub r8, rdx
inc r8
lea rdx, [rcx + r14]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov qword [rsi + 0x20], rdi
mov rcx, rsi
call fcn.180173618
test al, al
jne 0x180172e6f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov r8d, 0x7c
jmp 0x180173421
cmp byte [rsi + 0x409], r12b
jne 0x180172eae
lea rdx, [rsi + 0x30]
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov ecx, dword [rsi + 0x54]
mov qword [rsi + 0x68], rcx
cmp byte [rsi + 4], r12b
jne 0x180172eae
cmp byte [rsi + 0x488], r12b
jne 0x180172ea7
mov rcx, rsi
call fcn.18017617c
mov al, 1
jmp 0x18017342b
lea rbx, [rsi + 0x70]
mov byte [rsp + 0x28], r12b
mov r15d, 2
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea edi, [r15 + 0x3e]
mov r8d, edi
mov rdx, rbx
mov rcx, rsi
call fcn.1801755f8
test al, al
jne 0x180172f05
mov qword [rsi + 0x470], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, 0x80006
lea r8d, [rdi + 0x57]
jmp 0x180173421
mov eax, 0x5a4d
cmp ax, word [rbx]
je 0x180172f19
mov eax, 0x4d5a
cmp ax, word [rbx]
jne 0x180172f23
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x180172f33
mov edx, 0x80003
mov r8d, 0x9d
jmp 0x180173421
cmp byte [rsi + 0x409], r12b
jne 0x180172f58
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, eax
jmp 0x180172f5a
mov ecx, edi
mov eax, dword [rsi + 0xac]
cmp eax, edi
jb 0x180173416
cmp eax, 0x400
jg 0x180173416
sub eax, ecx
lea rdi, [rsi + 0x360]
mov ebx, eax
mov edx, eax
mov rcx, rdi
call fcn.18009ea50
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, ebx
mov rdx, qword [rdi]
mov rcx, rsi
call fcn.1801755f8
test al, al
jne 0x180172fb7
mov edx, 0x80006
mov r8d, 0xb2
jmp 0x180173421
mov edi, 0xf8
mov r8d, edi
xor edx, edx
lea rcx, [rsp + 0xb0]
call sub.VCRUNTIME140.dll_memset
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r9 + 0x14]
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call fcn.1801755f8
test al, al
jne 0x180173001
mov edx, 0x80006
lea r8d, [rdi - 0x41]
jmp 0x180173421
mov edx, 0x14c
movzx ecx, word [rsp + 0xb4]
and cx, dx
cmp cx, dx
sete al
mov byte [rsi + 0x430], al
movsxd r9, dword [rsi + 0xac]
mov byte [rsp + 0x28], 1
mov rcx, rsi
mov dword [rsp + 0x20], 1
jne 0x1801730a7
mov qword [rsi + 0x438], 4
lea rbx, [rsi + 0xb0]
mov r8, rdi
mov rdx, rbx
call fcn.1801755f8
test al, al
jne 0x180173067
mov edx, 0x80006
mov r8d, 0xbf
jmp 0x180173421
cmp dword [rbx], 0x4550
je 0x18017307f
mov edx, 0x80003
mov r8d, 0xc3
jmp 0x180173421
movzx ecx, word [rsi + 0xb6]
mov eax, 0x60
cmp ecx, eax
jbe 0x180173098
mov word [rsi + 0xb6], ax
mov ecx, eax
test ecx, ecx
jne 0x18017310c
mov r8d, 0xe3
jmp 0x18017341c
mov qword [rsi + 0x438], 8
lea rbx, [rsi + 0x1a8]
mov r8d, 0x108
mov rdx, rbx
call fcn.1801755f8
test al, al
jne 0x1801730db
mov edx, 0x80006
mov r8d, 0xd2
jmp 0x180173421
cmp dword [rbx], 0x4550
je 0x1801730f3
mov edx, 0x80003
mov r8d, 0xd7
jmp 0x180173421
movzx ecx, word [rsi + 0x1ae]
mov eax, 0x60
cmp ecx, eax
jbe 0x180173098
mov word [rsi + 0x1ae], ax
mov ecx, eax
xor eax, eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x38], al
mov rbx, r12
mov rdi, r12
mov r14d, ecx
test ecx, ecx
je 0x180173296
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r9 + 0x28]
lea rdx, [rsp + 0x80]
mov rcx, rsi
call fcn.1801755f8
test al, al
je 0x18017335a
mov r8d, 8
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x30]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
mov rax, r12
cmp byte [rsp + rax + 0x30], 0x20
jge 0x180173179
mov byte [rsp + rax + 0x30], r12b
inc rax
cmp rax, 9
jb 0x18017316d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x41], xmm0
movups xmmword [rsp + 0x51], xmm0
movups xmmword [rsp + 0x61], xmm0
mov word [rsp + 0x71], ax
mov byte [rsp + 0x73], al
movups xmm0, xmmword [rsp + 0x80]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [rsp + 0xa0]
movsd qword [rsp + 0x60], xmm0
lea r9d, [rax + 8]
lea r8, [rsp + 0x30]
lea edx, [rax + 9]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
lea rcx, [rsi + 0x378]
mov rdx, qword [rsi + 0x380]
cmp rdx, qword [rsi + 0x388]
je 0x180173221
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rdx + 0x20], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rdx + 0x30], eax
add qword [rsi + 0x380], 0x34
jmp 0x18017322b
lea r8, [rsp + 0x40]
call fcn.1801875ec
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.180174a10
cmp byte [rsi + 0x409], r12b
je 0x18017327a
dec eax
xor edx, edx
cmp byte [rsi + 0x430], r12b
je 0x180173256
mov ecx, dword [rsi + 0xe8]
jmp 0x18017325c
mov ecx, dword [rsi + 0x1e0]
add eax, ecx
div ecx
mov r8d, eax
imul r8, rcx
mov ecx, dword [rsp + 0x4c]
add rcx, r8
cmp rcx, rbx
cmovbe rcx, rbx
mov rbx, rcx
jmp 0x18017328a
mov edx, dword [rsp + 0x54]
mov eax, eax
add rdx, rax
cmp rdx, rbx
cmova rbx, rdx
inc rdi
cmp rdi, r14
jb 0x180173128
cmp byte [rsi + 0x488], r12b
jne 0x1801732a7
mov rcx, rsi
call fcn.18017617c
cmp byte [rsi + 0x430], r12b
je 0x18017336f
lea rdi, [rsi + 0x128]
mov r14, rdi
lea r15, [rdi + 0x80]
cmp rdi, r15
je 0x1801732fa
mov eax, dword [r14]
cmp byte [rsi + 0x409], r12b
jne 0x1801732e0
mov edx, eax
mov rcx, rsi
call fcn.18017390c
mov ecx, dword [r14 + 4]
add rax, rcx
cmp rax, rbx
cmovbe rax, rbx
mov rbx, rax
add r14, 8
cmp r14, r15
jne 0x1801732ca
cmp dword [rsi + 0x130], r12d
je 0x18017331b
xor edx, edx
mov rcx, rsi
call fcn.180173a28
test al, al
jne 0x18017331b
cmp dword [rsi + 8], 4
jne 0x18017342b
cmp dword [rdi], r12d
je 0x180173336
mov rcx, rsi
call fcn.180174448
test al, al
jne 0x180173336
cmp dword [rsi + 8], 4
jne 0x18017342b
cmp dword [rsi + 0x150], r12d
je 0x180173355
mov rcx, rsi
call fcn.180174a5c
test al, al
jne 0x180173355
cmp dword [rsi + 8], 4
jne 0x18017342b
jmp 0x180173404
mov edx, 0x80006
mov r8d, 0xef
jmp 0x180173421
lea rdi, [rsi + 0x230]
mov r14, rdi
lea r15, [rdi + 0x80]
cmp rdi, r15
je 0x1801733b5
mov eax, dword [r14]
cmp byte [rsi + 0x409], r12b
jne 0x18017339b
mov edx, eax
mov rcx, rsi
call fcn.18017390c
mov ecx, dword [r14 + 4]
add rax, rcx
cmp rax, rbx
cmovbe rax, rbx
mov rbx, rax
add r14, 8
cmp r14, r15
jne 0x180173385
cmp dword [rsi + 0x238], r12d
je 0x1801733d2
xor edx, edx
mov rcx, rsi
call fcn.180173a28
test al, al
jne 0x1801733d2
cmp dword [rsi + 8], 4
jne 0x18017342b
cmp dword [rdi], r12d
je 0x1801733e9
mov rcx, rsi
call fcn.180174448
test al, al
jne 0x1801733e9
cmp dword [rsi + 8], 4
jne 0x18017342b
cmp dword [rsi + 0x258], r12d
je 0x180173404
mov rcx, rsi
call fcn.180174a5c
test al, al
jne 0x180173404
cmp dword [rsi + 8], 4
jne 0x18017342b
cmp qword [rsi + 0x68], rbx
seta al
mov byte [rsi + 0x48b], al
jmp 0x180172ea7
mov r8d, 0xa9
mov edx, 0x8000c
mov rcx, rsi
call fcn.1801728a8
xor al, al
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret