Function at 0x140174b10
Capabilities:
Parse pe header

Disassembly:
inc qword [rcx + 8]
mov r9, r8
mov r11, qword [rcx]
mov r10, rcx
mov rax, qword [rdx]
mov qword [r8 + 8], rax
cmp rax, r11
jne 0x140174b82
xchg r8, r12
mov qword [r11], r12
xchg r12, r8
xchg rbp, rax
mov rbp, r8
xchg rbp, rax
xchg rcx, r8
mov qword [r11 + 8], rcx
xchg r8, rcx
xchg r8, r13
mov qword [r11 + 0x10], r13
xchg r8, r13
mov byte [r8 + 0x18], 0x69
sub byte [r8 + 0x18], 0x62
add byte [r8 + 0x18], 5
xor byte [r8 + 0x18], 0x26
add byte [r8 + 0x18], 0x47
xor byte [r8 + 0x18], 0x17
sub byte [r8 + 0x18], 0x27
sub byte [r8 + 0x18], 0x3e
nop
add rsp, 8
jmp qword [rsp - 8]
cmp dword [rdx + 8], 0
jne 0x140174ba9
mov qword [rax + 0x10], r9
cmp rax, qword [r11 + 0x10]
jne 0x140174bbe
xchg r9, r13
mov qword [r11 + 0x10], r13
xchg r13, r9
jmp 0x140174bbe
mov qword [rax], r9
cmp rax, qword [r11]
jne 0x140174bbe
xchg r9, r15
mov qword [r11], r15
xchg r15, r9
xchg rcx, rdx
mov rdx, qword [r8 + 8]
xchg rcx, rdx
xchg r9, r8
mov rax, r8
xchg r9, r8
cmp byte [rcx + 0x18], 0
jne 0x14017503d
nop
xchg r11, rdx
mov r11, qword [rax + 8]
xchg rdx, r11
xchg r8, r10
mov r10, qword [rdx + 8]
xchg r8, r10
xchg rsi, rcx
mov rsi, qword [r8]
xchg rsi, rcx
cmp rdx, rcx
jne 0x140174e32
xchg rbp, rcx
mov rbp, qword [r8 + 0x10]
xchg rbp, rcx
cmp byte [rcx + 0x18], 0
jne 0x140174c8d
mov byte [rdx + 0x18], 0x5d
xor byte [rdx + 0x18], 7
sub byte [rdx + 0x18], 0x50
xor byte [rdx + 0x18], 0x10
sub byte [rdx + 0x18], 1
xor byte [rdx + 0x18], 0x4b
sub byte [rdx + 0x18], 0x51
mov byte [rcx + 0x18], 0x22
xor byte [rcx + 0x18], 0x32
xor byte [rcx + 0x18], 0x25
add byte [rcx + 0x18], 0x45
xor byte [rcx + 0x18], 8
sub byte [rcx + 0x18], 0x49
sub byte [rcx + 0x18], 0x25
add byte [rcx + 0x18], 0x2d
sub byte [rcx + 0x18], 0x30
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 8]
mov byte [rdx + 0x18], 0x31
add byte [rdx + 0x18], 0x34
sub byte [rdx + 0x18], 0x32
add byte [rdx + 0x18], 0x38
sub byte [rdx + 0x18], 0xa
add byte [rdx + 0x18], 0x19
xor byte [rdx + 0x18], 0x7a
xchg r8, rcx
mov r8, qword [rax + 8]
xchg r8, rcx
mov rax, qword [rcx + 8]
jmp 0x140175029
xchg r15, r8
mov r15, qword [rdx + 0x10]
xchg r15, r8
cmp rax, r8
jne 0x140174d1d
xchg rcx, r15
mov r15, qword [r8]
xchg rcx, r15
xchg rbx, rdx
mov rax, rbx
xchg rdx, rbx
xchg rsi, rcx
mov qword [rdx + 0x10], rsi
xchg rsi, rcx
xchg rcx, rbp
mov rbp, qword [r8]
xchg rcx, rbp
cmp byte [rcx + 0x19], 0
jne 0x140174cd9
xchg rdx, r13
mov qword [rcx + 8], r13
xchg r13, rdx
xchg rcx, r13
mov r13, qword [rdx + 8]
xchg r13, rcx
mov qword [r8 + 8], rcx
mov rcx, qword [r10]
cmp rdx, qword [rcx + 8]
jne 0x140174cfd
mov qword [rcx + 8], r8
jmp 0x140174d16
mov rcx, qword [rdx + 8]
cmp rdx, qword [rcx]
jne 0x140174d12
mov qword [rcx], r8
jmp 0x140174d16
mov qword [rcx + 0x10], r8
mov qword [r8], rdx
mov qword [rdx + 8], r8
xchg rbx, rcx
mov rbx, qword [rax + 8]
xchg rbx, rcx
mov byte [rcx + 0x18], reloc.SHLWAPI.dll_SHCreateMemStream
add byte [rcx + 0x18], 0x60
sub byte [rcx + 0x18], 4
sub byte [rcx + 0x18], 0x2f
xor byte [rcx + 0x18], 0x66
xor byte [rcx + 0x18], 0x6b
add byte [rcx + 0x18], 0x3f
sub byte [rcx + 0x18], 0x3e
xor byte [rcx + 0x18], 0x34
xchg rcx, rbp
mov rbp, qword [rax + 8]
xchg rbp, rcx
mov rdx, qword [rcx + 8]
mov byte [rdx + 0x18], 0x6d
xor byte [rdx + 0x18], 0x5a
add byte [rdx + 0x18], 0x26
sub byte [rdx + 0x18], 0x22
sub byte [rdx + 0x18], 0x24
add byte [rdx + 0x18], 1
xor byte [rdx + 0x18], 7
sub byte [rdx + 0x18], 0x16
xor byte [rdx + 0x18], 9
xchg r12, rcx
mov r12, qword [rax + 8]
xchg rcx, r12
mov rdx, qword [rcx + 8]
xchg r8, rbx
mov rbx, qword [rdx]
xchg rbx, r8
xchg r14, rcx
mov r14, qword [r8 + 0x10]
xchg rcx, r14
xchg r15, rcx
mov qword [rdx], r15
xchg rcx, r15
xchg r10, rcx
mov r10, qword [r8 + 0x10]
xchg rcx, r10
cmp byte [rcx + 0x19], 0
jne 0x140174dbf
mov qword [rcx + 8], rdx
xchg rbx, rcx
mov rbx, qword [rdx + 8]
xchg rbx, rcx
xchg rcx, rbp
mov qword [r8 + 8], rbp
xchg rcx, rbp
xchg r15, rcx
mov r15, qword [r10]
xchg rcx, r15
cmp rdx, qword [rcx + 8]
jne 0x140174dff
xchg r10, r8
mov qword [rcx + 8], r10
xchg r8, r10
xchg rdx, rbx
mov qword [r8 + 0x10], rbx
xchg rdx, rbx
jmp 0x14017501f
xchg r14, rcx
mov r14, qword [rdx + 8]
xchg rcx, r14
cmp rdx, qword [rcx + 0x10]
jne 0x140174e26
xchg r13, r8
mov qword [rcx + 0x10], r13
xchg r8, r13
mov qword [r8 + 0x10], rdx
jmp 0x14017501f
mov qword [rcx], r8
mov qword [r8 + 0x10], rdx
jmp 0x14017501f
cmp byte [rcx + 0x18], 0
jne 0x140174eb1
mov byte [rdx + 0x18], 0x4e
sub byte [rdx + 0x18], 0x31
add byte [rdx + 0x18], 0x1c
sub byte [rdx + 0x18], 0x28
xor byte [rdx + 0x18], 0x4f
xor byte [rdx + 0x18], 0x58
xor byte [rdx + 0x18], 0x35
sub byte [rdx + 0x18], 0x32
mov byte [rcx + 0x18], 0x6e
sub byte [rcx + 0x18], 3
xor byte [rcx + 0x18], 0x4d
xor byte [rcx + 0x18], 0x1e
xor byte [rcx + 0x18], 0x67
sub byte [rcx + 0x18], 0x5e
xchg r10, rcx
mov r10, qword [rax + 8]
xchg r10, rcx
mov rdx, qword [rcx + 8]
mov byte [rdx + 0x18], 4
xor byte [rdx + 0x18], 0x72
xor byte [rdx + 0x18], 0x25
xor byte [rdx + 0x18], 1
sub byte [rdx + 0x18], 0xa
xor byte [rdx + 0x18], 0x48
xchg rcx, r10
mov r10, qword [rax + 8]
xchg rcx, r10
xchg r13, rax
mov r13, qword [rcx + 8]
xchg r13, rax
jmp 0x140175029
xchg r15, r8
mov r15, qword [rdx]
xchg r15, r8
cmp rax, r8
jne 0x140174f4d
mov rcx, qword [r8 + 0x10]
xchg rdi, rax
mov rdi, rdx
xchg rdi, rax
mov qword [rdx], rcx
xchg r14, rcx
mov r14, qword [r8 + 0x10]
xchg rcx, r14
cmp byte [rcx + 0x19], 0
jne 0x140174eef
xchg rbp, rdx
mov qword [rcx + 8], rbp
xchg rbp, rdx
xchg r8, rcx
mov r8, qword [rdx + 8]
xchg r8, rcx
mov qword [r8 + 8], rcx
mov rcx, qword [r10]
cmp rdx, qword [rcx + 8]
jne 0x140174f13
mov qword [rcx + 8], r8
jmp 0x140174f39
xchg rcx, r11
mov r11, qword [rdx + 8]
xchg r11, rcx
cmp rdx, qword [rcx + 0x10]
jne 0x140174f30
mov qword [rcx + 0x10], r8
jmp 0x140174f39
xchg r8, r12
mov qword [rcx], r12
xchg r12, r8
xchg rdx, r13
mov qword [r8 + 0x10], r13
xchg rdx, r13
xchg r8, rbp
mov qword [rdx + 8], rbp
xchg rbp, r8
mov rcx, qword [rax + 8]
mov byte [rcx + 0x18], 0x2b
sub byte [rcx + 0x18], 0x1c
add byte [rcx + 0x18], 0x30
xor byte [rcx + 0x18], 0x32
xor byte [rcx + 0x18], 0x7e
xor byte [rcx + 0x18], 7
xor byte [rcx + 0x18], 0x69
xor byte [rcx + 0x18], 0x1c
xchg rcx, r10
mov r10, qword [rax + 8]
xchg rcx, r10
xchg rdi, rdx
mov rdi, qword [rcx + 8]
xchg rdi, rdx
mov byte [rdx + 0x18], 0x78
sub byte [rdx + 0x18], 0x6c
xor byte [rdx + 0x18], 0x32
add byte [rdx + 0x18], 2
add byte [rdx + 0x18], 0x11
sub byte [rdx + 0x18], 0x2d
add byte [rdx + 0x18], 0x50
add byte [rdx + 0x18], 5
sub byte [rdx + 0x18], 0x79
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 8]
mov r8, qword [rdx + 0x10]
mov rcx, qword [r8]
xchg r9, rcx
mov qword [rdx + 0x10], r9
xchg r9, rcx
mov rcx, qword [r8]
cmp byte [rcx + 0x19], 0
jne 0x140174fd3
mov qword [rcx + 8], rdx
mov rcx, qword [rdx + 8]
mov qword [r8 + 8], rcx
mov rcx, qword [r10]
cmp rdx, qword [rcx + 8]
jne 0x140174ff7
xchg r8, rsi
mov qword [rcx + 8], rsi
xchg r8, rsi
jmp 0x140175016
mov rcx, qword [rdx + 8]
cmp rdx, qword [rcx]
jne 0x14017500c
mov qword [rcx], r8
jmp 0x140175016
xchg r8, r12
mov qword [rcx + 0x10], r12
xchg r8, r12
xchg r13, rdx
mov qword [r8], r13
xchg r13, rdx
xchg r10, r8
mov qword [rdx + 8], r10
xchg r8, r10
xchg r12, rcx
mov r12, qword [rax + 8]
xchg rcx, r12
cmp byte [rcx + 0x18], 0
je 0x140174bdc
xchg rdi, rax
mov rdi, qword [r11 + 8]
xchg rdi, rax
mov byte [rax + 0x18], 0x1d
add byte [rax + 0x18], 0x3f
xor byte [rax + 0x18], 0x37
sub byte [rax + 0x18], 0x64
add byte [rax + 0x18], 0x3f
sub byte [rax + 0x18], 0x20
add byte [rax + 0x18], 6
add byte [rax + 0x18], 0x4f
xor byte [rax + 0x18], 0x7a
mov rax, r9
nop
add rsp, 8
jmp qword [rsp - 8]