Function at 0x100f7920
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x6f8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x54]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.10049060
movzx eax, word [ebp - 0x54]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x6ec], 0x8c1d0f46
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], eax
sub eax, 0x8542d83f
je 0x100f8385
jmp 0x100f797c
mov eax, dword [ebp - 0x6f0]
sub eax, 0x8968d31c
je 0x100f7d65
jmp 0x100f7992
mov eax, dword [ebp - 0x6f0]
nop dword [eax + eax]
sub eax, 0x8c1d0f46
je 0x100f7c35
jmp 0x100f79b0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xa744d9e1
je 0x100f8374
jmp 0x100f79d0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xa8b987fc
je 0x100f8265
jmp 0x100f79f0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xb0752b7b
je 0x100f8325
jmp 0x100f7a10
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xc387fa70
je 0x100f7c76
jmp 0x100f7a30
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xc75e5534
je 0x100f8345
jmp 0x100f7a50
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xc8253d46
je 0x100f8365
jmp 0x100f7a70
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xd392a5aa
je 0x100f7c56
jmp 0x100f7a90
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xd88e6019
je 0x100f8298
jmp 0x100f7ab0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xfc6feeb3
je 0x100f82f8
jmp 0x100f7ad0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xedace53
je 0x100f82c5
jmp 0x100f7af0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x13625e9d
je 0x100f823c
jmp 0x100f7b10
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x22887a1b
je 0x100f8354
jmp 0x100f7b30
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x2ef7aa9f
je 0x100f80ae
jmp 0x100f7b50
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x2f157b2b
je 0x100f7f45
jmp 0x100f7b70
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x436358da
je 0x100f806e
jmp 0x100f7b90
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x4c343a89
je 0x100f8187
jmp 0x100f7bb0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x525176ba
je 0x100f7d16
jmp 0x100f7bd0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x5a51f5a2
je 0x100f7dd8
jmp 0x100f7bf0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x5ce12cda
je 0x100f8087
jmp 0x100f7c10
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x67931243
je 0x100f8334
jmp 0x100f7c30
jmp 0x100f8394
mov edx, dword [ebp - 0xc]
mov eax, 0xa744d9e1
mov ecx, 0xd392a5aa
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x100f8394
mov edx, 0x40
mov eax, 0x525176ba
mov ecx, 0xc387fa70
cmp edx, dword [ebp - 0x18]
cmovb eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x100f8394
mov eax, dword [ebp - 0x18]
sub eax, 0x842b0bea
sub eax, 0x6b44dc2c
add eax, 0x842b0bea
xor ecx, ecx
sub ecx, 0xce1c7dff
sub eax, ecx
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x6b44dc2c
add ecx, eax
xor eax, eax
sub eax, ecx
sub eax, 0xd6bf9012
add eax, 0xec9960d8
add eax, 0xd6bf9012
xor ecx, ecx
sub ecx, 0x40
add eax, ecx
xor ecx, ecx
sub ecx, 0xec9960d8
add eax, ecx
sub eax, 0x297bad80
sub eax, 0xc52a7b42
add eax, 0x297bad80
xor ecx, ecx
sub ecx, 0xce1c7dff
add eax, ecx
add eax, 0xaf094d99
add eax, 0xc52a7b42
sub eax, 0xaf094d99
mov ecx, dword [ebp + 8]
add ecx, 0x40
lea edx, [ebp - 0x6dc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10049060
mov dword [ebp - 0x6ec], 0x525176ba
jmp 0x100f8394
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
lea ecx, [ebp - 0x14c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xf8
call fcn.10049060
mov eax, 0x22887a1b
mov ecx, 0x8968d31c
cmp dword [ebp - 0x14c], 0x4550
cmove eax, ecx
mov dword [ebp - 0x6ec], eax
nop
jmp 0x100f8394
movzx eax, word [ebp - 0x146]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x6e0]
add ecx, 0xf8
lea edx, [ebp - 0x2dc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10049060
mov eax, dword [ebp - 0xfc]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x103000
mov dword [esp + 0xc], 0x40
call fcn.100027f0
mov dword [ebp - 0x14], eax
mov eax, 0xc75e5534
mov ecx, 0x5a51f5a2
cmp dword [ebp - 0x14], 0
cmovne eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x100f8394
lea eax, [ebp - 0x54]
mov ecx, dword [ebp - 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.10049060
lea eax, [ebp - 0x14c]
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
xor edx, edx
sub edx, 0xf65dded9
add edx, 0
sub ecx, 0x29d219f1
sub ecx, edx
add ecx, 0x29d219f1
xor edx, edx
sub edx, 0xffa7a87b
sub edx, esi
add edx, 0xffa7a87b
sub ecx, 0xf8df8ced
sub ecx, edx
add ecx, 0xf8df8ced
xor esi, esi
sub esi, 0xf65dded9
add esi, 0
xor edx, edx
sub edx, ecx
xor ecx, ecx
sub ecx, esi
add edx, ecx
xor ecx, ecx
sub ecx, edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xf8
call fcn.10049060
movzx eax, word [ebp - 0x146]
imul eax, eax, 0x28
lea ecx, [ebp - 0x2dc]
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edi, 0x60ae768c
add edi, 0
add edi, 0xe9d5f6fb
sub edi, 0x60ae768c
add edi, 0x319661b
sub edi, esi
sub edi, 0x319661b
xor esi, esi
sub esi, 0xe9d5f6fb
add edi, esi
sub edx, 0xe12c20e4
sub edx, 0x8da07790
add edx, 0xe12c20e4
xor esi, esi
sub esi, edi
add edx, esi
sub edx, 0x7de37a85
add edx, 0x8da07790
add edx, 0x7de37a85
mov esi, 0x858a1995
add esi, 0
sub esi, 0xf8
sub esi, 0x858a1995
xor edi, edi
sub edi, 0xd879ddb5
add edi, esi
add edi, 0xd879ddb5
xor esi, esi
sub esi, 0x7e0011c9
sub esi, edi
add esi, 0x7e0011c9
sub edx, 0xa05d90d4
add edx, esi
add edx, 0xa05d90d4
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10049060
mov edx, 0x40
mov eax, 0x436358da
mov ecx, 0x2f157b2b
cmp edx, dword [ebp - 0x18]
cmovb eax, ecx
mov dword [ebp - 0x6ec], eax
nop dword [eax + eax]
jmp 0x100f8394
mov eax, dword [ebp - 0x18]
mov ecx, 0x667abc71
add ecx, 0
sub ecx, 0x5ce41a0e
sub ecx, 0x667abc71
add eax, 0xa45dc00e
add eax, ecx
sub eax, 0xa45dc00e
xor edx, edx
sub edx, 0x40
add edx, 0
xor ecx, ecx
sub ecx, edx
sub eax, ecx
add eax, 0x382126b4
sub eax, 0xd66d5243
sub eax, 0x382126b4
add eax, 0x5708f76f
add eax, 0x5ce41a0e
sub eax, 0x5708f76f
add eax, 0x2e927a67
add eax, 0xd66d5243
sub eax, 0x2e927a67
lea ecx, [ebp - 0x6dc]
mov edx, dword [ebp - 0x14]
xor esi, esi
sub esi, 0xfb854033
add esi, 0xf211edc7
add esi, 0xfb854033
add esi, 0x8ae1b250
sub esi, edx
sub esi, 0x8ae1b250
add esi, 0xc16e0831
sub esi, 0xf211edc7
sub esi, 0xc16e0831
xor edx, edx
sub edx, 0x53d80d26
sub edx, 0x40
add edx, 0x53d80d26
xor edi, edi
sub edi, edx
xor edx, edx
sub edx, edi
add esi, 0x49518f48
sub esi, 0x9ddf8d4
sub esi, 0x49518f48
add esi, 0x6a45af08
add esi, edx
sub esi, 0x6a45af08
xor edx, edx
sub edx, 0x9ddf8d4
sub esi, edx
mov edx, 0x92923d52
add edx, 0
sub edx, 0xb5048504
sub edx, 0x92923d52
sub edx, 0xa1af5ff3
sub edx, esi
add edx, 0xa1af5ff3
xor esi, esi
sub esi, 0xb5048504
sub edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10049060
mov dword [ebp - 0x6ec], 0x436358da
jmp 0x100f8394
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x6ec], 0x5ce12cda
jmp 0x100f8394
mov edx, dword [ebp - 0x6e4]
movzx esi, word [ebp - 0x146]
mov eax, 0x13625e9d
mov ecx, 0x2ef7aa9f
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x100f8394
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x2dc]
imul edx, dword [ebp - 0x6e4], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x6e8], eax
lea eax, [ebp - 0x2dc]
imul ecx, dword [ebp - 0x6e4], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x6e8]
mov edx, dword [ebp - 0x14]
lea esi, [ebp - 0x2dc]
imul edi, dword [ebp - 0x6e4], 0x28
add esi, edi
mov edi, dword [esi + 0xc]
xor esi, esi
sub esi, 0x33ab6aca
sub edx, esi
add edx, 0x38547e7f
sub edx, 0x2a883581
sub edx, 0x38547e7f
add edx, 0xec785c2a
sub edx, 0x33ab6aca
sub edx, 0xec785c2a
add edx, 0xd2357e00
sub edx, 0xfec0f369
sub edx, 0xd2357e00
xor esi, esi
sub esi, edi
sub edx, esi
add edx, 0x681a5daf
add edx, 0xfec0f369
sub edx, 0x681a5daf
mov edi, 0xec4f9904
add edi, 0
sub edi, 0x2a883581
sub edi, 0xec4f9904
xor esi, esi
sub esi, edi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10049060
mov dword [ebp - 0x6ec], 0x4c343a89
jmp 0x100f8394
mov eax, dword [ebp - 0x6e4]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0xf2fb86ab
add ecx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0xe7764af2
add ecx, eax
xor eax, eax
sub eax, ecx
sub eax, 0x41d81da9
sub eax, 0xf2fb86ab
add eax, 0x41d81da9
xor ecx, ecx
sub ecx, 0x6f86e3e2
sub ecx, eax
add ecx, 0x6f86e3e2
mov eax, 0xa92976a5
add eax, 0
sub eax, 1
sub eax, 0xa92976a5
sub ecx, 0x79c8fea7
add ecx, eax
add ecx, 0x79c8fea7
xor eax, eax
sub eax, 0xfba6d404
sub eax, ecx
add eax, 0xfba6d404
sub eax, 0xff96ffc2
add eax, 0x3ba0bae8
add eax, 0xff96ffc2
add eax, 0x6cd12267
sub eax, 0xe7764af2
sub eax, 0x6cd12267
sub eax, 0x7bed4924
sub eax, 0x3ba0bae8
add eax, 0x7bed4924
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x6ec], 0x5ce12cda
jmp 0x100f8394
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.100f83a0
mov edx, eax
mov eax, 0xa8b987fc
mov ecx, 0xd88e6019
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x6ec], eax
nop
jmp 0x100f8394
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8000
call fcn.10001010
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x6ec], 0x67931243
jmp 0x100f8394
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.100f9480
mov edx, eax
mov eax, 0xedace53
mov ecx, 0xfc6feeb3
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x6ec], eax
nop dword [eax + eax]
jmp 0x100f8394
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8000
call fcn.10001010
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x6ec], 0xb0752b7b
jmp 0x100f8394
lea ecx, [ebp - 0x14c]
add ecx, 0x18
add ecx, 0x10
mov eax, dword [ecx]
add eax, dword [ebp - 0x14]
push 0
push 1
push dword [ebp - 0x14]
call eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x6ec], 0xb0752b7b
nop
jmp 0x100f8394
mov dword [ebp - 0x6ec], 0x67931243
jmp 0x100f8394
mov dword [ebp - 0x6ec], 0xc75e5534
nop
jmp 0x100f8394
mov dword [ebp - 0x6ec], 0xc8253d46
jmp 0x100f8394
mov dword [ebp - 0x6ec], 0xc8253d46
nop
jmp 0x100f8394
mov dword [ebp - 0x6ec], 0x8542d83f
jmp 0x100f8394
mov dword [ebp - 0x6ec], 0x8542d83f
nop
jmp 0x100f8394
mov eax, dword [ebp - 0x14]
add esp, 0x6f8
pop esi
pop edi
pop ebp
ret 4
jmp 0x100f7960