Function at 0x1012c4ce
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
or dword [0x101d62e0], 0xffffffff
xor edx, edx
push ebx
push esi
xor eax, eax
mov dword [0x101d62e4], edx
push edi
mov dword [0x101d62dc], edx
mov esi, edx
mov dword [0x101d62d4], 0x101d5718
mov dword [0x101d62d8], 0x101d5b00
mov word [0x101d5718], ax
xor ecx, ecx
inc ecx
mov ebx, pe_nt_image_headers32
movsx edi, word [esi*2 + 0x1002e198]
test edi, edi
jne 0x1012c617
cmp dword [0x101d62e0], edi
jge 0x1012c54a
mov ecx, dword [0x101d7114]
call fcn.1012d93a
mov ecx, eax
mov dword [0x101d62e0], ecx
test ecx, ecx
jns 0x1012c54a
and dword [0x101d62e0], edi
movsx edx, word [esi*2 + 0x1002dce8]
test edx, edx
je 0x1012c5df
mov ecx, dword [0x101d62e0]
add edx, ecx
cmp edx, 0xd88
ja 0x1012c5df
movsx eax, word [edx*2 + 0x1002a208]
cmp eax, ecx
jne 0x1012c5df
mov ecx, dword [0x101d62d4]
cmp ecx, 0x101d5afe
jae 0x1012d37c
movzx eax, word [edx*2 + 0x1002bd20]
add ecx, 2
or dword [0x101d62e0], 0xffffffff
mov dword [0x101d62d4], ecx
push 1
mov word [ecx], ax
mov ecx, dword [0x101d62d8]
add ecx, 4
movsx esi, ax
cmp dword [0x101d62dc], 0
mov eax, dword [0x101d62d0]
mov dword [0x101d62d8], ecx
mov dword [ecx], eax
pop ecx
push 0
pop edx
jle 0x1012c515
dec dword [0x101d62dc]
xor ecx, ecx
inc ecx
xor edx, edx
jmp 0x1012c515
movsx edx, word [esi*2 + 0x1002d920]
test edx, edx
je 0x1012c648
mov ecx, dword [0x101d62e0]
add edx, ecx
cmp edx, 0xd88
ja 0x1012c648
movsx eax, word [edx*2 + 0x1002a208]
cmp eax, ecx
jne 0x1012c648
xor ecx, ecx
lfence
movsx edi, word [edx*2 + 0x1002bd20]
inc ecx
xor edx, edx
movsx esi, word [edi*2 + 0x1002e560]
mov eax, dword [0x101d62d8]
mov ebx, esi
shl ebx, 2
sub eax, ebx
mov eax, dword [eax + 4]
mov dword [0x101d5714], eax
lea eax, [edi - 1]
cmp eax, 0x124
ja case.default.0x1012c641
jmp dword [eax*4 + 0x1012d39a]
cmp dword [0x101d62dc], 0
jne 0x1012c669
push 0x10027e1c
push dword [0x101d7114]
call fcn.1012fee7
pop ecx
pop ecx
inc dword [0x101d62e4]
cmp dword [0x101d62dc], 3
jge 0x1012c70d
mov dword [0x101d62dc], 3
mov eax, dword [0x101d62d4]
movsx eax, word [eax]
movsx eax, word [eax*2 + 0x1002dce8]
test eax, eax
je 0x1012c6a7
add eax, ebx
cmp eax, 0xd88
ja 0x1012c6a7
cmp word [eax*2 + 0x1002a208], bx
je 0x1012c6c9
mov ecx, dword [0x101d62d4]
cmp ecx, 0x101d5718
jbe 0x1012d38e
sub dword [0x101d62d4], 2
sub dword [0x101d62d8], 4
jmp 0x1012c680
mov ecx, dword [0x101d62d4]
cmp ecx, 0x101d5afe
jae 0x1012d37c
movzx eax, word [eax*2 + 0x1002bd20]
add ecx, 2
mov dword [0x101d62d4], ecx
movsx esi, ax
mov word [ecx], ax
mov ecx, dword [0x101d62d8]
mov eax, dword [0x101d62d0]
add ecx, 4
mov dword [0x101d62d8], ecx
mov dword [ecx], eax
jmp 0x1012c5d5
cmp dword [0x101d62e0], 0
je 0x1012d38e
or dword [0x101d62e0], 0xffffffff
jmp 0x1012c5d5
push edx
push edx
jmp 0x1012d26f
push ecx
push ecx
jmp 0x1012d26f
push ecx
push 2
jmp 0x1012d26f
push 2
push 3
jmp 0x1012d26f
push edx
push 4
jmp 0x1012d26f
push ecx
push 5
jmp 0x1012d26f
push ecx
push 6
jmp 0x1012d26f
push ecx
push 7
jmp 0x1012d26f
push ecx
push 8
jmp 0x1012d26f
push ecx
push 9
jmp 0x1012d26f
push ecx
push 0xa
jmp 0x1012d26f
push 2
push 0xb
jmp 0x1012d26f
push edx
push 0xc
jmp 0x1012d26f
push edx
push 0xd
jmp 0x1012d26f
push edx
push 0xe
jmp 0x1012d26f
push edx
push 0xf
jmp 0x1012d26f
push edx
push 0x10
jmp 0x1012d26f
push edx
push 0x11
jmp 0x1012d26f
push ecx
push 0x12
jmp 0x1012d26f
push ecx
push 0x13
jmp 0x1012d26f
push ecx
push 0x14
jmp 0x1012d26f
push 2
push 0x15
jmp 0x1012d26f
push edx
push 0x16
jmp 0x1012d26f
push edx
push 0x17
jmp 0x1012d26f
push edx
push 0x18
jmp 0x1012d26f
push ecx
push 0x19
jmp 0x1012d26f
push 2
push 0x1a
jmp 0x1012d26f
push ecx
push 0x1d
jmp 0x1012d26f
push 2
push 0x1e
jmp 0x1012d26f
push 2
push 0x1f
jmp 0x1012d26f
push 2
push 0x20
jmp 0x1012d26f
push ecx
push 0x21
jmp 0x1012d26f
push ecx
push 0x22
jmp 0x1012d26f
push 2
push 0x23
jmp 0x1012d26f
push ecx
push 0x24
jmp 0x1012d26f
push ecx
push 0x25
jmp 0x1012d26f
push ecx
push 0x26
jmp 0x1012d26f
push ecx
push 0x27
jmp 0x1012d26f
push ecx
push 0x28
pop eax
push eax
jmp 0x1012d26f
push 2
push 0x29
jmp 0x1012d26f
push ecx
push 0x2a
jmp 0x1012d26f
push 2
push 0x2b
jmp 0x1012d26f
push edx
push 0x2c
jmp 0x1012d26f
push ecx
push 0x2d
jmp 0x1012d26f
push ecx
push 0x2e
jmp 0x1012d26f
push ecx
push 0x2f
jmp 0x1012d26f
push ecx
push 0x30
jmp 0x1012d26f
push edx
push 0x31
jmp 0x1012d26f
push edx
push 0x32
jmp 0x1012d26f
push edx
push 0x33
jmp 0x1012d26f
push edx
push 0x34
jmp 0x1012d26f
push edx
push 0x35
jmp 0x1012d26f
push edx
push 0x36
jmp 0x1012d26f
push 2
push 0x37
jmp 0x1012d26f
push edx
push 0x38
jmp 0x1012d26f
push 3
push 0x39
jmp 0x1012d26f
push edx
push 0x3a
jmp 0x1012d26f
push edx
push 0x3b
jmp 0x1012d26f
push edx
push 0x3c
jmp 0x1012d26f
push edx
push 0x3d
jmp 0x1012d26f
push edx
push 0x3e
jmp 0x1012d26f
push edx
push 0x3f
jmp 0x1012d26f
push edx
push 0x40
jmp 0x1012d26f
push edx
push 0x41
jmp 0x1012d26f
push edx
push 0x42
jmp 0x1012d26f
push edx
push 0x43
jmp 0x1012d26f
push edx
push 0x44
jmp 0x1012d26f
push edx
push 0x45
jmp 0x1012d26f
push edx
push 0x46
jmp 0x1012d26f
push edx
push 0x47
jmp 0x1012d26f
push edx
push 0x48
jmp 0x1012d26f
push edx
push 0x49
jmp 0x1012d26f
push 2
push 0x4a
jmp 0x1012d26f
push 3
push 0x4b
jmp 0x1012d26f
push 3
push 0x4c
jmp 0x1012d26f
push 4
push 0x4d
jmp 0x1012d26f
push ecx
push 0x4e
jmp 0x1012d26f
push 2
push 0x4f
jmp 0x1012d26f
push edx
push 0x50
jmp 0x1012d26f
push ecx
push 0x51
jmp 0x1012d26f
push 2
push 0x52
jmp 0x1012d26f
push edx
push 0x53
jmp 0x1012d26f
push ecx
push 0x54
jmp 0x1012d26f
push ecx
push 0x55
jmp 0x1012d26f
push ecx
push 0x56
jmp 0x1012d26f
push 2
push 0x57
jmp 0x1012d26f
push edx
push 0x58
jmp 0x1012d26f
push ecx
push 0x59
jmp 0x1012d26f
push ecx
push 0x5a
jmp 0x1012d26f
push 2
push 0x5b
jmp 0x1012d26f
push 2
push 0x5c
jmp 0x1012d26f
push 3
push 0x5d
jmp 0x1012d26f
push edx
push 0x5e
jmp 0x1012d26f
push ecx
push 0x5f
jmp 0x1012d26f
push edx
push 0x60
jmp 0x1012d26f
push ecx
push 0x61
jmp 0x1012d26f
push 2
push 0x62
jmp 0x1012d26f
push edx
push 0x63
jmp 0x1012d26f
push ecx
push 0x64
jmp 0x1012d26f
push ecx
push 0x65
jmp 0x1012d26f
push ecx
push 0x66
jmp 0x1012d26f
push edx
push 0x67
jmp 0x1012d26f
push ecx
push 0x68
jmp 0x1012d26f
push 2
push 0x69
jmp 0x1012d26f
push 2
push 0x6a
jmp 0x1012d26f
push ecx
push 0x6b
jmp 0x1012d26f
push 2
push 0x6c
jmp 0x1012d26f
push 4
push 0x6d
jmp 0x1012d26f
push ecx
push 0x6e
jmp 0x1012d26f
push ecx
push 0x6f
jmp 0x1012d26f
push 2
push 0x70
jmp 0x1012d26f
push ecx
push 0x71
jmp 0x1012d26f
push 3
push 0x72
jmp 0x1012d26f
push 4
push 0x73
jmp 0x1012d26f
push 2
push 0x74
jmp 0x1012d26f
push 2
push 0x75
jmp 0x1012d26f
push 3
push 0x76
jmp 0x1012d26f
push edx
push 0x77
jmp 0x1012d26f
push edx
push 0x78
jmp 0x1012d26f
push ecx
push 0x79
jmp 0x1012d26f
push 2
push 0x7a
jmp 0x1012d26f
push 2
push 0x7b
jmp 0x1012d26f
push ecx
push 0x7c
jmp 0x1012d26f
push 2
push 0x7d
jmp 0x1012d26f
push ecx
push 0x80
jmp 0x1012d26f
push 2
push 0x81
jmp 0x1012d26f
push edx
push 0x82
jmp 0x1012d26f
push edx
push 0x83
jmp 0x1012d26f
push edx
push 0x84
jmp 0x1012d26f
push edx
push 0x85
jmp 0x1012d26f
push ecx
push 0x86
jmp 0x1012d26f
push 3
push 0x87
jmp 0x1012d26f
push 2
push 0x88
jmp 0x1012d26f
push 3
push 0x89
jmp 0x1012d26f
push edx
push 0x8a
jmp 0x1012d26f
push edx
push 0x8b
jmp 0x1012d26f
push ecx
push 0x8c
jmp 0x1012d26f
push 2
push 0x8d
jmp 0x1012d26f
push 3
push 0x8e
jmp 0x1012d26f
push 2
push 0x8f
jmp 0x1012d26f
push 3
push 0x90
jmp 0x1012d26f
push edx
push 0x91
jmp 0x1012d26f
push edx
push 0x92
jmp 0x1012d26f
push ecx
push 0x93
jmp 0x1012d26f
push 2
push 0x94
jmp 0x1012d26f
push 5
push 0x95
jmp 0x1012d26f
push edx
push 0x96
jmp 0x1012d26f
push ecx
push 0x97
jmp 0x1012d26f
push edx
push 0x98
jmp 0x1012d26f
push edx
push 0x99
jmp 0x1012d26f
push 2
push 0x9a
jmp 0x1012d26f
push 3
push 0x9b
jmp 0x1012d26f
push edx
push 0x9c
jmp 0x1012d26f
push edx
push 0x9d
jmp 0x1012d26f
push ecx
push 0x9e
jmp 0x1012d26f
push 2
push 0x9f
jmp 0x1012d26f
push edx
push 0xa0
jmp 0x1012d26f
push ecx
push 0xa1
jmp 0x1012d26f
push edx
push 0xa2
jmp 0x1012d26f
push ecx
push 0xa3
jmp 0x1012d26f
push 2
push 0xa4
jmp 0x1012d26f
push ecx
push 0xa5
jmp 0x1012d26f
push edx
push 0xa6
jmp 0x1012d26f
push ecx
push 0xa7
jmp 0x1012d26f
push ecx
push 0xa8
jmp 0x1012d26f
push ecx
push 0xa9
jmp 0x1012d26f
push ecx
push 0xaa
jmp 0x1012d26f
push 2
push 0xab
jmp 0x1012d26f
push 5
push 0xac
jmp 0x1012d26f
push ecx
push 0xad
jmp 0x1012d26f
push 2
push 0xae
jmp 0x1012d26f
push 5
push 0xaf
jmp 0x1012d26f
push 2
push 0xb0
jmp 0x1012d26f
push 3
push 0xb1
jmp 0x1012d26f
push edx
push 0xb2
jmp 0x1012d26f
push edx
push 0xb3
jmp 0x1012d26f
push ecx
push 0xb4
jmp 0x1012d26f
push ecx
push 0xb5
jmp 0x1012d26f
push edx
push 0xb6
jmp 0x1012d26f
push ecx
push 0xb7
jmp 0x1012d26f
push edx
push 0xb8
jmp 0x1012d26f
push ecx
push 0xb9
jmp 0x1012d26f
push ecx
push 0xba
jmp 0x1012d26f
push 2
push 0xbb
jmp 0x1012d26f
push ecx
push 0xbc
jmp 0x1012d26f
push ecx
push 0xbd
jmp 0x1012d26f
push ecx
push 0xbe
jmp 0x1012d26f
push ecx
push 0xbf
jmp 0x1012d26f
push ecx
push 0xc0
jmp 0x1012d26f
push edx
push 0xc1
jmp 0x1012d26f
push edx
push 0xc2
jmp 0x1012d26f
push ecx
push 0xc3
jmp 0x1012d26f
push ecx
push 0xc4
jmp 0x1012d26f
push ecx
push 0xc5
jmp 0x1012d26f
push ecx
push 0xc6
jmp 0x1012d26f
push ecx
push 0xc7
jmp 0x1012d26f
push 2
push 0xc8
jmp 0x1012d26f
push 2
push 0xc9
jmp 0x1012d26f
push 2
push 0xca
jmp 0x1012d26f
push ecx
push 0xcb
jmp 0x1012d26f
push ecx
push 0xcc
jmp 0x1012d26f
push 2
push 0xcd
jmp 0x1012d26f
push ecx
push 0xce
jmp 0x1012d26f
push ecx
push 0xcf
jmp 0x1012d26f
push 3
push 0xd0
jmp 0x1012d26f
push ecx
push 0xd1
jmp 0x1012d26f
push 3
push 0xd2
jmp 0x1012d26f
push ecx
push 0xd3
jmp 0x1012d26f
push ecx
push 0xd4
jmp 0x1012d26f
push ecx
push 0xd5
jmp 0x1012d26f
push ecx
push 0xd6
jmp 0x1012d26f
push 2
push 0xd7
jmp 0x1012d26f
push 2
push 0xd8
jmp 0x1012d26f
push ecx
push 0xd9
jmp 0x1012d26f
push ecx
push 0xda
jmp 0x1012d26f
push ecx
push 0xdb
jmp 0x1012d26f
push ecx
push 0xdc
jmp 0x1012d26f
push ecx
push 0xdd
jmp 0x1012d26f
push ecx
push 0xde
jmp 0x1012d26f
push ecx
push 0xdf
jmp 0x1012d26f
push ecx
push 0xe0
jmp 0x1012d26f
push ecx
push 0xe1
jmp 0x1012d26f
push 2
push 0xe2
jmp 0x1012d26f
push ecx
push 0xe3
jmp 0x1012d26f
push 2
push 0xe4
jmp 0x1012d26f
push 2
push 0xe5
jmp 0x1012d26f
push 2
push 0xe6
jmp 0x1012d26f
push ecx
push 0xe7
jmp 0x1012d26f
push 2
push 0xe8
jmp 0x1012d26f
push 2
push 0xe9
jmp 0x1012d26f
push ecx
push 0xea
jmp 0x1012d26f
push 2
push 0xeb
jmp 0x1012d26f
push 2
push 0xec
jmp 0x1012d26f
push 2
push 0xed
jmp 0x1012d26f
push 2
push 0xee
jmp 0x1012d26f
push ecx
push 0xef
jmp 0x1012d26f
push 2
push 0xf0
jmp 0x1012d26f
push 2
push 0xf1
jmp 0x1012d26f
push ecx
push 0xf2
jmp 0x1012d26f
push 2
push 0xf3
jmp 0x1012d26f
push ecx
push 0xf4
jmp 0x1012d26f
push 2
push 0xf5
jmp 0x1012d26f
push ecx
push 0xfd
jmp 0x1012d26f
push 3
push 0xfe
jmp 0x1012d26f
push ecx
push 0xf6
jmp 0x1012d26f
push 2
push 0xf7
jmp 0x1012d26f
push 2
push 0xf8
jmp 0x1012d26f
push 2
push 0xf9
jmp 0x1012d26f
push 2
push 0xfa
jmp 0x1012d26f
push 2
push 0xfb
jmp 0x1012d26f
push 2
push 0xfc
jmp 0x1012d26f
push ecx
push 0xff
jmp 0x1012d26f
push 2
push pe_nt_image_headers32
jmp 0x1012d26f
push edx
push 0x101
jmp 0x1012d26f
push ecx
push 0x102
jmp 0x1012d26f
push ecx
push 0x103
jmp 0x1012d26f
push ecx
push 0x104
jmp 0x1012d26f
push ecx
push 0x105
jmp 0x1012d26f
push ecx
push 0x106
jmp 0x1012d26f
push 2
push 0x107
jmp 0x1012d26f
push ecx
push 0x108
jmp 0x1012d26f
push ecx
push 0x109
jmp 0x1012d26f
push 2
push 0x10a
jmp 0x1012d26f
push ecx
push 0x10b
jmp 0x1012d26f
push ecx
push 0x10c
jmp 0x1012d26f
push ecx
push 0x10d
jmp 0x1012d26f
push ecx
push 0x10e
jmp 0x1012d26f
push ecx
push 0x10f
jmp 0x1012d26f
push 2
push 0x110
jmp 0x1012d26f
push ecx
push 0x111
jmp 0x1012d26f
push edx
push 0x112
jmp 0x1012d26f
push edx
push 0x113
jmp 0x1012d26f
push edx
push 0x114
jmp 0x1012d26f
push ecx
push 0x115
jmp 0x1012d26f
push ecx
push 0x116
jmp 0x1012d26f
push edx
push 0x117
jmp 0x1012d26f
push ecx
push 0x118
jmp 0x1012d26f
push ecx
push 0x119
jmp 0x1012d26f
push edx
push 0x11a
jmp 0x1012d26f
push edx
push 0x11b
jmp 0x1012d26f
push edx
push 0x11c
jmp 0x1012d26f
push edx
push 0x11d
jmp 0x1012d26f
push edx
push 0x11e
jmp 0x1012d26f
push edx
push 0x11f
jmp 0x1012d26f
push edx
push 0x120
jmp 0x1012d26f
push ecx
push 0x121
jmp 0x1012d26f
push 2
push 0x122
jmp 0x1012d26f
push edx
push 0x123
jmp 0x1012d26f
push edx
push 0x124
jmp 0x1012d26f
push edx
push 0x125
jmp 0x1012d26f
push edx
push 0x126
jmp 0x1012d26f
push edx
push 0x127
jmp 0x1012d26f
push edx
push 0x128
mov ecx, dword [0x101d7114]
call fcn.1012e770
mov ecx, dword [0x101d62d4]
lea eax, [esi + esi]
movsx edx, word [edi*2 + 0x1002e7b0]
sub ecx, eax
mov eax, dword [0x101d62d8]
sub eax, ebx
mov dword [0x101d62d4], ecx
mov dword [0x101d62d8], eax
movsx esi, word [ecx]
test esi, esi
jne 0x1012d30b
test edx, edx
jne 0x1012d30b
add ecx, 2
cmp dword [0x101d62e0], 0
push 0x28
pop edx
mov dword [0x101d62d4], ecx
mov esi, edx
mov word [ecx], dx
lea ecx, [eax + 4]
mov eax, dword [0x101d5714]
mov dword [0x101d62d8], ecx
mov dword [ecx], eax
jge 0x1012d2f5
mov ecx, dword [0x101d7114]
call fcn.1012d93a
mov ecx, eax
xor edx, edx
mov dword [0x101d62e0], ecx
test ecx, ecx
jns 0x1012d2f7
mov dword [0x101d62e0], edx
jmp 0x1012d2f7
xor edx, edx
cmp dword [0x101d62e0], 0
jne 0x1012c50d
xor eax, eax
jmp 0x1012d391
movsx ecx, word [edx*2 + 0x1002d838]
test ecx, ecx
je 0x1012d337
add ecx, esi
cmp ecx, 0xd88
ja 0x1012d337
movsx eax, word [ecx*2 + 0x1002a208]
cmp eax, esi
jne 0x1012d337
movzx edx, word [ecx*2 + 0x1002bd20]
jmp 0x1012d33f
movzx edx, word [edx*2 + 0x1002e0b0]
mov ecx, dword [0x101d62d4]
cmp ecx, 0x101d5afe
jae 0x1012d37c
mov eax, dword [0x101d5714]
add ecx, 2
mov dword [0x101d62d4], ecx
movsx esi, dx
mov word [ecx], dx
mov ecx, dword [0x101d62d8]
add ecx, 4
mov dword [0x101d62d8], ecx
mov dword [ecx], eax
xor ecx, ecx
inc ecx
xor edx, edx
jmp 0x1012c510
push 0x10027e2c
push dword [0x101d7114]
call fcn.1012fee7
pop ecx
pop ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret