Function at 0xf95940
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x390
push esi
xorps xmm0, xmm0
mov dword [ebp - 8], 0
push 0x44
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x44], 0
push 0
push eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x80], xmm0
movq qword [ebp - 0x70], xmm0
movq qword [ebp - 0x60], xmm0
movq qword [ebp - 0x68], xmm0
movups xmmword [ebp - 0x34], xmm0
call fcn.00f92690
push 0x2cc
lea eax, [ebp - 0x390]
push 0
push eax
call fcn.00f92690
mov esi, 0x5a4d
mov dword [ebp - 0xc4], 0x44
add esp, 0x18
cmp word [0xf9a018], si
je 0xf95a0f
push 0x6fa00
push 0xf9a018
push 0x10
push 0xf98df0
call fcn.00f927c0
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xc4]
push eax
push 0
push 0
push 0x800000c
push 0
push 0
push 0
push dword [ebp + 8]
push 0
call dword [0xf9809c]
test eax, eax
jne 0xf95a3d
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [0x106a21c]
push ebx
mov ebx, dword [0xf98050]
push edi
test eax, eax
jne 0xf95b07
lea eax, [ebp - 0x390]
mov dword [ebp - 0x390], 0x10007
push eax
push dword [ebp - 0x30]
call dword [0xf98020]
test eax, eax
je 0xf95aa3
mov ebx, dword [0xf9808c]
lea eax, [ebp - 0x24]
push eax
push 4
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x2ec]
add eax, 8
push eax
push dword [ebp - 0x34]
call ebx
test eax, eax
je 0xf95a9d
cmp dword [ebp - 0x24], 4
je 0xf95b48
mov ebx, dword [0xf98050]
push 0
push dword [ebp - 0x34]
call dword [0xf98084]
push dword [ebp - 0x34]
mov esi, dword [0xf98098]
call esi
push dword [ebp - 0x30]
call esi
mov eax, dword [ebp - 0x18]
test eax, eax
je 0xf95acc
push eax
call dword [0x106a218]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0xf95ada
push eax
call dword [0x106a218]
mov eax, dword [ebp - 0xc]
test eax, eax
je 0xf95aec
cdq
push edx
push eax
call ebx
push eax
call fcn.00f97e10
mov eax, dword [ebp - 4]
test eax, eax
je 0xf95afe
cdq
push edx
push eax
call ebx
push eax
call fcn.00f97e10
pop edi
pop ebx
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
push 0
push 0x18
lea ecx, [ebp - 0x80]
push ecx
push 0
push dword [ebp - 0x34]
call eax
test eax, eax
jne 0xf95aa3
mov ebx, dword [0xf9808c]
lea eax, [ebp - 0x24]
push eax
push 4
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x7c]
add eax, 8
push eax
push dword [ebp - 0x34]
call ebx
test eax, eax
je 0xf95a9d
cmp dword [ebp - 0x24], 4
jne 0xf95a9d
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
push dword [ebp - 0x34]
call fcn.00f95f70
add esp, 0x10
test al, al
je 0xf95a9d
cmp word [0xf9a018], si
jne 0xf95a9d
mov eax, dword [0xf9a054]
cmp dword [eax + 0xf9a018], 0x4550
lea eax, [eax + 0xf9a018]
mov dword [ebp - 0x20], eax
jne 0xf95a9d
mov ecx, 0x10b
cmp word [eax + 0x18], cx
jne 0xf95a9d
cmp dword [eax + 0xa0], 0
mov ecx, dword [eax + 0x34]
mov esi, dword [eax + 0x50]
mov dword [ebp - 0x40], ecx
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x4c], ecx
je 0xf95a9d
mov edi, dword [ebp - 0x10]
lea eax, [ebp - 0x60]
push 0
push 0x8000000
push 0x40
push eax
push 0
push 0xf001f
lea eax, [ebp - 0x18]
mov dword [ebp - 0x60], edi
push eax
call fcn.00f97bf0
test eax, eax
jne 0xf95a9d
push eax
push 0x8000000
push 0x40
lea eax, [ebp - 0x68]
mov dword [ebp - 0x68], esi
push eax
push 0
push 0xf001f
lea eax, [ebp - 0x1c]
push eax
call fcn.00f97bf0
test eax, eax
jne 0xf95a9d
push 0x40
push eax
push 1
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x3c]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0xc]
mov dword [ebp - 0x3c], edi
push eax
call dword [0xf98050]
push eax
push dword [ebp - 0x18]
call fcn.00f97cd0
test eax, eax
jne 0xf95a9d
push 0x40
push eax
push 1
mov dword [ebp - 4], eax
lea eax, [ebp - 0x38]
push eax
push 0
push 0
push 0
lea eax, [ebp - 4]
mov dword [ebp - 0x38], esi
push eax
call dword [0xf98050]
push eax
push dword [ebp - 0x1c]
call fcn.00f97cd0
test eax, eax
jne 0xf95a9d
push 0x40
push eax
push 1
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x38]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x1c]
call fcn.00f97cd0
test eax, eax
jne 0xf95a9d
push 4
push 0x3000
push edi
push eax
call dword [0xf9803c]
mov esi, eax
test esi, esi
je 0xf95a9d
push 0
push edi
push esi
push dword [ebp - 8]
push dword [ebp - 0x34]
call ebx
test eax, eax
jne 0xf95cd2
push 0x8000
push eax
push esi
call dword [0xf98040]
jmp 0xf95a9d
push edi
push esi
push dword [ebp - 0xc]
call fcn.00f92230
add esp, 0xc
push 0x8000
push 0
push esi
call dword [0xf98040]
mov ebx, dword [ebp - 0x20]
movzx edi, word [ebx + 6]
lea esi, [ebx + 0x18]
movzx eax, word [ebx + 0x14]
add esi, eax
lea eax, [edi + edi*4]
shl eax, 3
sub eax, 0xf9a018
add eax, esi
push eax
push 0xf9a018
push dword [ebp - 4]
call fcn.00f92230
add esp, 0xc
test edi, edi
je 0xf95d44
add esi, 0x14
push dword [esi - 4]
mov eax, dword [esi]
add eax, 0xf9a018
push eax
mov eax, dword [esi - 8]
add eax, dword [ebp - 4]
push eax
call fcn.00f92230
add esp, 0xc
lea esi, [esi + 0x28]
sub edi, 1
jne 0xf95d22
mov ebx, dword [ebx + 0x80]
mov ecx, dword [ebp - 4]
add ebx, ecx
nop
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0xf95d5c
cmp dword [ebx + 4], eax
je 0xf95dcd
add eax, ecx
push eax
call 0xf98980
mov edx, eax
add esp, 4
mov dword [ebp - 0x10], edx
test edx, edx
je 0xf95a9d
mov ecx, dword [ebp - 4]
mov esi, dword [ebx]
mov edi, dword [ebx + 0x10]
add esi, ecx
add edi, ecx
cmp esi, ecx
cmove esi, edi
cmp esi, ecx
je 0xf95a9d
mov eax, dword [esi]
test eax, eax
je 0xf95dc8
test eax, eax
jns 0xf95d9c
movzx eax, ax
jmp 0xf95da1
add eax, 2
add eax, ecx
push eax
push edx
call dword [0xf98044]
mov dword [edi], eax
test eax, eax
je 0xf95a9d
mov eax, dword [esi + 4]
add esi, 4
mov ecx, dword [ebp - 4]
add edi, 4
test eax, eax
je 0xf95dc8
mov edx, dword [ebp - 0x10]
jmp 0xf95d93
add ebx, 0x14
jmp 0xf95d50
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
mov eax, edx
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov edi, dword [esi + 0xa0]
mov eax, dword [esi + 0xa4]
add edi, ecx
add eax, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x58], eax
cmp edi, eax
jae 0xf95e4b
mov eax, dword [edi]
test eax, eax
je 0xf95e48
lea edx, [edi + 4]
mov dword [ebp - 0x10], edx
lea esi, [edi + 8]
mov edx, dword [edx]
lea ebx, [eax + ecx]
sub edx, 8
shr edx, 1
je 0xf95e3b
mov edi, dword [ebp - 0x40]
movzx ecx, word [esi]
dec edx
mov eax, ecx
and eax, 0xf000
cmp eax, 0x3000
jne 0xf95e2e
and ecx, 0xfff
add dword [ecx + ebx], edi
add esi, 2
test edx, edx
jne 0xf95e13
mov ecx, dword [ebp - 4]
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
add edi, dword [eax]
mov dword [ebp - 0x20], edi
cmp edi, dword [ebp - 0x58]
jb 0xf95df5
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
add eax, edx
mov byte [ebp - 0x54], 0x68
mov dword [ebp - 0x53], eax
lea eax, [ebp - 0x54]
push 6
push eax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x44]
push eax
mov byte [ebp - 0x4f], 0xc3
call fcn.00f92230
add esp, 0xc
push 0
push dword [ebp - 8]
push dword [ebp - 0x34]
call fcn.00f97e10
test eax, eax
jne 0xf95a9d
mov eax, dword [ebp - 8]
push 0x40
push 0
push 1
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x3c]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x18]
call fcn.00f97cd0
test eax, eax
jne 0xf95a9d
push dword [ebp - 0x30]
call fcn.00f97e90
push 0x1388
call dword [0xf98064]
push 4
push 0x3000
push 0x138
push 0
call dword [0xf9803c]
mov esi, eax
test esi, esi
je 0xf95f15
push 0x138
push 0
push esi
call fcn.00f92690
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x14]
push 0x138
push esi
cdq
push edx
push eax
push dword [ebp - 0x34]
call 0xf98020
push 0x8000
push 0
push esi
call dword [0xf98040]
push dword [ebp - 0x34]
mov esi, dword [0xf98098]
call esi
push dword [ebp - 0x30]
call esi
mov eax, dword [ebp - 0x18]
test eax, eax
je 0xf95f33
push eax
call dword [0x106a218]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0xf95f41
push eax
call dword [0x106a218]
mov eax, dword [ebp - 0xc]
mov ebx, dword [0xf98050]
cdq
push edx
push eax
call ebx
push eax
call fcn.00f97e10
mov eax, dword [ebp - 4]
cdq
push edx
push eax
call ebx
push eax
call fcn.00f97e10
mov eax, dword [ebp - 0x2c]
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret