Function at 0x100f3ba0
Capabilities:
Parse pe header
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa0c
mov eax, dword [0x10106010]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
xor esi, esi
push edi
mov eax, dword [ebx + 0x808]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x9ac], edi
mov dword [ebp - 0x9bc], esi
test eax, eax
je 0x100f3be0
push 0xb
push dword [ebx + 0x804]
call eax
add esp, 8
mov dword [ebx + 0x834], eax
test eax, eax
je 0x100f3c06
mov byte [ebx + 0xc94], 1
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a539a
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x808]
test eax, eax
je 0x100f3c1d
push 0xa
push dword [ebx + 0x804]
call eax
add esp, 8
mov dword [ebx + 0x838], eax
test eax, eax
je 0x100f3d52
push 0
mov dword [ebp - 0x9a8], esi
lea ecx, [ebx + 0xc7c]
lea esi, [ebp - 0x9a8]
push esi
push ecx
lea edx, [ebx + 0xc84]
push edx
lea edi, [ebx + 0xc80]
push edi
push dword [ebx + 0x804]
call eax
add esp, 0x18
mov esi, 0
test eax, eax
js 0x100f3d4c
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - fcn.10050980], 0x10013d3c
mov dword [ebp - 0x998], esi
mov dword [ebp - 0x99c], esi
cmp eax, 0xfffffff8
ja 0x100f3d31
push eax
lea ecx, [ebp - 0x9a0]
call fcn.10050980
mov edi, eax
test edi, edi
je 0x100f3d31
push edi
lea eax, [ebp - 0x9a8]
push eax
lea eax, [ebx + 0xc7c]
push eax
lea eax, [ebx + 0xc84]
push eax
lea eax, [ebx + 0xc80]
push eax
push dword [ebx + 0x804]
mov eax, dword [ebx + 0x838]
call eax
add esp, 0x18
test eax, eax
jns 0x100f3ce1
lea ecx, [ebp - 0x9a0]
call fcn.10050940
jmp 0x100f3d4c
push dword [ebp - 0x9a8]
mov ecx, ebx
push 0
push 0
push 0
push edi
call fcn.100f6080
mov esi, dword [ebx + 0xc88]
lea ecx, [ebp - 0x9a0]
call fcn.10050940
test esi, esi
je 0x100f3d4a
push dword [ebp - 0x9ac]
mov ecx, ebx
mov byte [ebx + 0xc78], 1
call fcn.100f5bf0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a539a
mov esp, ebp
pop ebp
ret 8
xor eax, eax
mov dword [ebx], 2
lea ecx, [ebp - 0x9a0]
mov word [ebx + 4], ax
call fcn.10050940
jmp 0x100f3d4c
xor esi, esi
mov edi, dword [ebp - 0x9ac]
mov eax, dword [ebx + 0x808]
test eax, eax
je 0x100f3d69
push 4
push dword [ebx + 0x804]
call eax
add esp, 8
mov dword [ebx + 0x82c], eax
test eax, eax
jne 0x100f3df0
mov eax, dword [ebx + 0x808]
test eax, eax
je 0x100f3d8a
push 5
push dword [ebx + 0x804]
call eax
add esp, 8
mov dword [ebx + 0x830], eax
test eax, eax
jne 0x100f3df0
push 0x20
push 0x10018f84
push edi
call fcn.100d5ff0
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x9bc], esi
test esi, esi
jne 0x100f3dbf
push edi
push 4
mov ecx, ebx
call fcn.100f6340
jmp 0x100f3e94
push 0
push 0
push esi
call fcn.100b397b
add esp, 0xc
test eax, eax
jne 0x100f3e78
push esi
push 0x40
lea eax, [ebp - 0x48c]
push 1
push eax
call fcn.100b3b62
add esp, 0x10
cmp eax, 0x40
sete al
jmp 0x100f3e39
mov eax, dword [ebx + 0x82c]
test eax, eax
je 0x100f3e14
lea ecx, [ebp - 0x48c]
push ecx
push 0x40
push 0
push 0
push dword [ebx + 0x804]
call eax
add esp, 0x14
jmp 0x100f3e34
mov eax, dword [ebx + 0x830]
test eax, eax
je 0x100f3e78
lea ecx, [ebp - 0x48c]
push ecx
push 0x40
push 0
push dword [ebx + 0x804]
call eax
add esp, 0x10
test eax, eax
setns al
test al, al
je 0x100f3e78
mov ax, word [ebp - 0x48c]
test esi, esi
je 0x100f3ea9
mov ecx, 0x4944
cmp ax, cx
jne 0x100f3ea9
push esi
call fcn.100b29c0
mov eax, dword [ebp - 0x484]
add esp, 4
mov ecx, ebx
mov dword [ebx + 0xc80], eax
push edi
call fcn.100f51c0
test al, al
jne 0x100f3e96
cmp dword [ebx], 0xb
jne 0x100f3e96
push dword [ebp - 0x9ac]
push 0x11
mov ecx, ebx
call fcn.100f6340
test esi, esi
je 0x100f3e94
push esi
call fcn.100b29c0
add esp, 4
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a539a
mov esp, ebp
pop ebp
ret 8
mov ecx, 0x5a4d
cmp ax, cx
jne 0x100f3e78
push edi
mov ecx, ebx
call fcn.100f5bf0
test al, al
je 0x100f3e87
mov eax, dword [ebp - 0x450]
test eax, eax
jle 0x100f3e78
push 1
lea ecx, [ebp - 0x594]
push ecx
push 0x108
push eax
push eax
push esi
mov ecx, ebx
call fcn.100f58c0
test al, al
je 0x100f3e78
cmp dword [ebp - 0x594], 0x4550
jne 0x100f3e78
movzx eax, word [ebp - 0x57c]
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x9b4], edx
mov dword [ebp - 0x9b0], edx
mov dword [ebp - 0x9b8], ecx
mov dword [ebp - 0x9c4], ecx
cmp eax, 0x10b
je 0x100f3f7b
cmp eax, 0x20b
jne 0x100f3e78
mov edi, dword [ebp - 0x510]
mov eax, dword [ebp - 0x544]
mov dword [ebx + 0xc7c], eax
cmp edi, 6
jb 0x100f3f55
mov edx, dword [ebp - 0x4dc]
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x9b4], edx
mov dword [ebp - 0x9b0], eax
mov al, byte [ebp + 0xc]
test al, al
je 0x100f3fd0
cmp edi, 0xe
jb 0x100f3fd0
mov ecx, dword [ebp - 0x49c]
mov edi, dword [ebp - 0x498]
mov dword [ebp - 0x9b8], ecx
mov dword [ebp - 0x9c4], edi
jmp 0x100f3fd2
mov edi, dword [ebp - 0x520]
mov eax, dword [ebp - 0x544]
mov dword [ebx + 0xc7c], eax
cmp edi, 6
jb 0x100f3faa
mov edx, dword [ebp - 0x4ec]
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x9b4], edx
mov dword [ebp - 0x9b0], eax
mov al, byte [ebp + 0xc]
test al, al
je 0x100f3fd0
cmp edi, 0xe
jb 0x100f3fd0
mov ecx, dword [ebp - 0x4ac]
mov edi, dword [ebp - 0x4a8]
mov dword [ebp - 0x9b8], ecx
mov dword [ebp - 0x9c4], edi
jmp 0x100f3fd2
xor edi, edi
test edx, edx
je 0x100f4498
cmp dword [ebp - 0x9b0], 0
je 0x100f4498
test al, al
je 0x100f3ffb
test ecx, ecx
je 0x100f3e78
test edi, edi
je 0x100f3e78
xor eax, eax
cmp dword [ebx + 0x82c], eax
jne 0x100f4023
cmp dword [ebx + 0x830], eax
je 0x100f4023
mov cl, byte [ebp + 0xc]
xor edi, edi
mov edx, dword [ebp - 0x9b8]
mov dword [ebp - 0x9a8], edi
jmp 0x100f417e
mov eax, dword [ebp - 0x450]
xor edi, edi
movzx ecx, word [ebp - 0x580]
add eax, 0x18
add ecx, eax
mov dword [ebp - 0x9d4], edi
movzx eax, word [ebp - 0x58e]
mov dword [ebp - 0x9cc], eax
xor eax, eax
mov dword [ebp - 0x9c8], ecx
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9d0], eax
cmp dword [ebp - 0x9cc], eax
jbe 0x100f4149
push 1
lea eax, [ebp - 0x42c]
push eax
push 0x28
push ecx
push ecx
push esi
mov ecx, ebx
call fcn.100f58c0
test al, al
je 0x100f413d
add dword [ebp - 0x9c8], 0x28
mov edx, dword [ebp - 0x420]
mov eax, dword [ebp - 0x9b4]
cmp edx, eax
ja 0x100f40c8
mov ecx, dword [ebp - 0x41c]
add eax, dword [ebp - 0x9b0]
add ecx, edx
mov esi, dword [ebp - 0x9bc]
cmp ecx, eax
jb 0x100f40c8
mov edi, dword [ebp - 0x418]
mov dword [ebp - 0x9d4], edx
mov cl, byte [ebp + 0xc]
test cl, cl
je 0x100f410c
cmp edx, dword [ebp - 0x9b8]
ja 0x100f410c
mov ecx, dword [ebp - 0x41c]
mov eax, dword [ebp - 0x9b8]
add ecx, edx
add eax, dword [ebp - 0x9c4]
mov esi, dword [ebp - 0x9bc]
cmp ecx, eax
mov cl, byte [ebp + 0xc]
jb 0x100f410c
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9c0], edx
jmp 0x100f4112
mov eax, dword [ebp - 0x9a8]
test edi, edi
je 0x100f411e
test cl, cl
je 0x100f413d
test eax, eax
jne 0x100f413d
mov eax, dword [ebp - 0x9d0]
mov ecx, dword [ebp - 0x9c8]
inc eax
mov dword [ebp - 0x9d0], eax
cmp eax, dword [ebp - 0x9cc]
jb 0x100f4070
mov edx, dword [ebp - 0x9b4]
mov eax, dword [ebp - 0x9a8]
mov ecx, dword [ebp - 0x9cc]
cmp dword [ebp - 0x9d0], ecx
je 0x100f3e78
sub edi, dword [ebp - 0x9d4]
mov cl, byte [ebp + 0xc]
add edi, edx
mov dword [ebp - 0x9a8], edi
test cl, cl
je 0x100f41b9
sub eax, dword [ebp - 0x9c0]
mov edx, dword [ebp - 0x9b8]
add eax, edx
test cl, cl
je 0x100f41b9
push 0
lea ecx, [ebp - 0x44c]
push ecx
push 0x48
push edx
push eax
push esi
mov ecx, ebx
call fcn.100f58c0
test al, al
je 0x100f3e78
cmp dword [ebp - 0x40c], 0
je 0x100f3e78
cmp dword [ebp - 0x408], 0
je 0x100f3e78
mov ecx, dword [ebp - 0x9b0]
xor eax, eax
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0x9f8], eax
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x9ec], eax
mov dword [ebp - 0x9e0], eax
mov dword [ebp - 0x9dc], eax
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x9e4], eax
mov eax, 0x24924925
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 4
cmp byte [ebp + 0xc], 0
mov dword [ebp - 0x9b0], ecx
je 0x100f423f
push 0
push 0
push 0x100
lea eax, [ebp - 0x404]
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x9ac]
call fcn.100b2eef
mov ecx, dword [ebp - 0x9b0]
add esp, 0x24
mov dword [ebp - 0x9c0], 0
test ecx, ecx
je 0x100f43ab
push 0
lea eax, [ebp - 0x420]
mov ecx, ebx
push eax
push 0x1c
push dword [ebp - 0x9b4]
push edi
push esi
call fcn.100f58c0
test al, al
je 0x100f3e78
add dword [ebp - 0x9b4], 0x1c
cmp dword [ebx + 0x82c], 0
jne 0x100f428c
cmp dword [ebx + 0x830], 0
jne 0x100f4295
add edi, 0x1c
mov dword [ebp - 0x9a8], edi
lea eax, [ebp - 0x420]
mov ecx, ebx
push eax
push 1
call fcn.100f5e20
mov eax, dword [ebp - 0x414]
cmp eax, 2
jne 0x100f4360
cmp byte [ebp + 0xc], 0
je 0x100f4358
mov eax, dword [ebp - 0x410]
mov ecx, ebx
mov dword [ebx + 0xc98], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebx + 0xc9c], eax
mov eax, dword [ebp - 0x408]
mov byte [ebx + 0xc94], 1
mov dword [ebx + 0x86c], esi
mov dword [ebx + 0xca0], eax
call fcn.100f5960
test al, al
je 0x100f4384
cmp byte [ebx + 0xca4], 0
je 0x100f4384
cmp dword [ebx + 0xcbc], 0
je 0x100f4384
mov eax, dword [ebx + 0xcc0]
test eax, eax
je 0x100f4384
push 0
push 0
push 0x100
lea ecx, [ebp - 0x204]
push ecx
push 0
push 0
push 0
push 0
push eax
call fcn.100b2eef
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.100ae68e
add esp, 0x2c
test eax, eax
je 0x100f3bf1
jmp 0x100f4384
lea edi, [ebp - 0xa0c]
jmp 0x100f436b
cmp eax, 4
jne 0x100f4384
lea edi, [ebp - 0x9f0]
mov ecx, 7
lea esi, [ebp - 0x420]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x9a8]
mov esi, dword [ebp - 0x9bc]
mov eax, dword [ebp - 0x9c0]
inc eax
mov dword [ebp - 0x9c0], eax
cmp eax, dword [ebp - 0x9b0]
jb 0x100f4251
mov eax, dword [ebp - 0x9fc]
mov edx, dword [ebp - 0x9ec]
jmp 0x100f43af
xor eax, eax
xor edx, edx
xor cl, cl
mov dword [ebx + 0x86c], esi
cmp dword [ebp - 0xa00], 0
mov byte [ebp - 0x9a1], cl
je 0x100f43f4
mov dword [ebx + 0xc98], eax
mov cl, 1
mov eax, dword [ebp - 0x9f8]
mov dword [ebx + 0xc9c], eax
mov eax, dword [ebp - 0x9f4]
mov byte [ebp - 0x9a1], cl
mov byte [ebx + 0xc94], cl
mov dword [ebx + 0xca0], eax
jmp 0x100f43fe
cmp byte [ebp + 0xc], 0
jne 0x100f3e78
mov eax, dword [ebp - 0x57e]
shr eax, 9
and al, 1
mov byte [ebx + 0xc78], al
je 0x100f446a
cmp dword [ebp - 0x9e4], 0
je 0x100f446a
push dword [ebp - 0x9e0]
mov eax, dword [ebp - 0x58c]
mov ecx, ebx
push dword [ebp - 0x9dc]
mov byte [ebp - 0x9a1], 1
push dword [ebp - 0x9d8]
mov dword [ebx + 0xc80], eax
push esi
push 0
mov dword [ebx + 0xc84], edx
call fcn.100f6080
mov cl, byte [ebp - 0x9a1]
pop edi
pop esi
mov al, cl
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a539a
mov esp, ebp
pop ebp
ret 8
test cl, cl
jne 0x100f4483
push dword [ebp - 0x9ac]
mov ecx, ebx
push 0x13
call fcn.100f6340
mov cl, byte [ebp - 0x9a1]
mov al, cl
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100a539a
mov esp, ebp
pop ebp
ret 8
push dword [ebp - 0x9ac]
push 0x13
jmp 0x100f3e80