Function at 0x1015c8c0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x6f8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x54]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.1005db20
movzx eax, word [ebp - 0x54]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x6ec], 0x155b95e3
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], eax
sub eax, 0x8731f8ac
je 0x1015d3b4
jmp 0x1015c91c
mov eax, dword [ebp - 0x6f0]
sub eax, 0xa0d40be1
je 0x1015cbf6
jmp 0x1015c932
mov eax, dword [ebp - 0x6f0]
nop dword [eax + eax]
sub eax, 0xaf47763b
je 0x1015ccb7
jmp 0x1015c950
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xb4bcc696
je 0x1015d3a5
jmp 0x1015c970
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xbeb6a06b
je 0x1015cd05
jmp 0x1015c990
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xc32a2ed7
je 0x1015cf8a
jmp 0x1015c9b0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xccc31871
je 0x1015d351
jmp 0x1015c9d0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xf3ef92ec
je 0x1015d294
jmp 0x1015c9f0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0xf75f6f3d
je 0x1015d325
jmp 0x1015ca10
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x5383698
je 0x1015d385
jmp 0x1015ca30
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x5a70e35
je 0x1015d2c7
jmp 0x1015ca50
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x155b95e3
je 0x1015cbd5
jmp 0x1015ca70
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x1c970662
je 0x1015d1c5
jmp 0x1015ca90
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x35a65b3c
je 0x1015d374
jmp 0x1015cab0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x3aa7b679
je 0x1015d0bd
jmp 0x1015cad0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x4784b529
je 0x1015cd78
jmp 0x1015caf0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x4ccf9fa9
je 0x1015d2ef
jmp 0x1015cb10
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x53b037e9
je 0x1015d26c
jmp 0x1015cb30
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x56a99b91
je 0x1015d0fd
jmp 0x1015cb50
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x5c41d5bd
je 0x1015cc16
jmp 0x1015cb70
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x6225430d
je 0x1015d394
jmp 0x1015cb90
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x77f6342c
je 0x1015d0d6
jmp 0x1015cbb0
mov eax, dword [ebp - 0x6f0]
nop word cs:[eax + eax]
sub eax, 0x79f71c6e
je 0x1015d365
jmp 0x1015cbd0
jmp 0x1015d3c3
mov edx, dword [ebp - 0xc]
mov eax, 0xb4bcc696
mov ecx, 0xa0d40be1
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
mov edx, 0x40
mov eax, 0xaf47763b
mov ecx, 0x5c41d5bd
cmp edx, dword [ebp - 0x18]
cmovb eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub ecx, eax
add ecx, 0
mov eax, 0xc6168908
add eax, 0
sub eax, 0x5ee54620
sub eax, 0xc6168908
sub ecx, 0x16f9fe23
add ecx, eax
add ecx, 0x16f9fe23
mov eax, 0x7a3cb9ba
add eax, 0
sub eax, ecx
sub eax, 0x7a3cb9ba
sub eax, 0xc1d7574c
sub eax, 0x15fe3d7e
add eax, 0xc1d7574c
sub eax, 0x1fca81f1
sub eax, 0x40
add eax, 0x1fca81f1
xor ecx, ecx
sub ecx, 0x15fe3d7e
sub eax, ecx
xor ecx, ecx
sub ecx, 0x5ee54620
add ecx, 0
add eax, 0xa3da6dc0
add eax, ecx
sub eax, 0xa3da6dc0
mov ecx, dword [ebp + 8]
add ecx, 0x40
lea edx, [ebp - 0x6dc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1005db20
mov dword [ebp - 0x6ec], 0xaf47763b
jmp 0x1015d3c3
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
lea ecx, [ebp - 0x14c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xf8
call fcn.1005db20
mov eax, 0x5383698
mov ecx, 0xbeb6a06b
cmp dword [ebp - 0x14c], 0x4550
cmove eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
movzx eax, word [ebp - 0x146]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x6e0]
add ecx, 0xf8
lea edx, [ebp - 0x2dc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1005db20
mov eax, dword [ebp - 0xfc]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x103000
mov dword [esp + 0xc], 0x40
call fcn.100043e0
mov dword [ebp - 0x14], eax
mov eax, 0x35a65b3c
mov ecx, 0x4784b529
cmp dword [ebp - 0x14], 0
cmovne eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
lea eax, [ebp - 0x54]
mov ecx, dword [ebp - 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.1005db20
lea eax, [ebp - 0x14c]
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
xor ecx, ecx
sub ecx, edx
add ecx, 0
xor edx, edx
sub edx, ecx
xor ecx, ecx
sub ecx, edx
mov edx, 0x6e172f5
add edx, 0
sub edx, 0x510472c
sub edx, 0x6e172f5
xor esi, esi
sub esi, edi
add edx, esi
xor esi, esi
sub esi, 0x510472c
sub edx, esi
mov esi, 0xe3d57353
add esi, 0
sub esi, edx
sub esi, 0xe3d57353
xor edx, edx
sub edx, esi
add ecx, edx
xor edx, edx
sub edx, 0x70f9c114
sub edx, ecx
add edx, 0x70f9c114
xor ecx, ecx
sub ecx, 0xdbeffa17
add ecx, edx
add ecx, 0xdbeffa17
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xf8
call fcn.1005db20
movzx eax, word [ebp - 0x146]
imul eax, eax, 0x28
lea ecx, [ebp - 0x2dc]
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
xor edi, edi
sub edi, 0xbaa43814
sub edi, esi
add edi, 0xbaa43814
xor esi, esi
sub esi, edi
xor edi, edi
sub edi, esi
mov esi, 0xdd36da05
add esi, 0
sub esi, 0x6afeaa0f
sub esi, 0xdd36da05
add esi, 0x8466343e
sub esi, edx
sub esi, 0x8466343e
add esi, 0x18c99db7
add esi, 0x6afeaa0f
sub esi, 0x18c99db7
xor edx, edx
sub edx, edi
add edx, 0
mov edi, 0x6fe51505
add edi, 0
sub edi, esi
sub edi, 0x6fe51505
xor esi, esi
sub esi, edx
xor edx, edx
sub edx, edi
add esi, edx
xor edx, edx
sub edx, esi
xor esi, esi
sub esi, edx
add esi, 0
xor edx, edx
sub edx, 0xd91c0312
sub edx, 0x4c6922d
add edx, 0xd91c0312
add edx, 0x7e974ddd
sub edx, esi
sub edx, 0x7e974ddd
sub edx, 0xa757f821
add edx, 0x4c6922d
add edx, 0xa757f821
xor esi, esi
sub esi, 0x2d20f6f0
add edx, esi
sub edx, 0x36a6df40
sub edx, 0x88b3200e
add edx, 0x36a6df40
xor esi, esi
sub esi, 0x2d20f6f0
sub edx, esi
add edx, 0x538be102
sub edx, 0x62196f80
sub edx, 0x538be102
xor esi, esi
sub esi, 0xf8
sub edx, esi
xor esi, esi
sub esi, 0x62196f80
sub edx, esi
xor esi, esi
sub esi, 0x84f9df51
sub esi, edx
add esi, 0x84f9df51
xor edi, edi
sub edi, 0x88b3200e
add edi, 0
xor edx, edx
sub edx, edi
sub esi, edx
xor edx, edx
sub edx, 0x71732657
sub edx, esi
add edx, 0x71732657
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1005db20
mov edx, 0x40
mov eax, 0x3aa7b679
mov ecx, 0xc32a2ed7
cmp edx, dword [ebp - 0x18]
cmovb eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub ecx, 0xefb4ff2a
add eax, ecx
xor ecx, ecx
sub ecx, 0x76602516
sub eax, ecx
xor ecx, ecx
sub ecx, 0xefb4ff2a
sub eax, ecx
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0xa7fe1bd3
add ecx, eax
xor eax, eax
sub eax, ecx
sub eax, 0xee875935
sub eax, 0x40
add eax, 0xee875935
sub eax, 0x2bde0f8a
sub eax, 0xa7fe1bd3
add eax, 0x2bde0f8a
xor ecx, ecx
sub ecx, 0x76602516
add ecx, 0
add eax, 0x119158f9
add eax, ecx
sub eax, 0x119158f9
lea ecx, [ebp - 0x6dc]
mov edi, dword [ebp - 0x14]
mov esi, 0x158dc465
add esi, 0
sub esi, 0x436e25eb
sub esi, 0x158dc465
xor edx, edx
sub edx, edi
add esi, edx
xor edx, edx
sub edx, 0x436e25eb
sub esi, edx
mov edi, 0xf515f28d
add edi, 0
add edi, 0x31d61cc9
sub edi, 0xf515f28d
add edi, 0x242ab0a6
sub edi, 0x40
sub edi, 0x242ab0a6
xor edx, edx
sub edx, 0x31d61cc9
add edi, edx
xor edx, edx
sub edx, 0xfada554e
sub esi, edx
xor edx, edx
sub edx, esi
xor esi, esi
sub esi, edi
add edx, esi
xor esi, esi
sub esi, edx
add esi, 0xf920a518
sub esi, 0xfada554e
sub esi, 0xf920a518
xor edx, edx
sub edx, 0x32b04670
add edx, 0
add edx, 0x7735e024
sub edx, esi
sub edx, 0x7735e024
add edx, 0xbf9145f6
add edx, 0x32b04670
sub edx, 0xbf9145f6
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1005db20
mov dword [ebp - 0x6ec], 0x3aa7b679
jmp 0x1015d3c3
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x6ec], 0x77f6342c
jmp 0x1015d3c3
mov edx, dword [ebp - 0x6e4]
movzx esi, word [ebp - 0x146]
mov eax, 0x53b037e9
mov ecx, 0x56a99b91
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x2dc]
imul edx, dword [ebp - 0x6e4], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x6e8], eax
lea eax, [ebp - 0x2dc]
imul ecx, dword [ebp - 0x6e4], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x6e8]
mov edx, dword [ebp - 0x14]
lea esi, [ebp - 0x2dc]
imul edi, dword [ebp - 0x6e4], 0x28
add esi, edi
mov edi, dword [esi + 0xc]
xor esi, esi
sub esi, 0xffcf38c0
add esi, 0
add esi, 0x42b799a7
sub esi, edi
sub esi, 0x42b799a7
sub esi, 0x846fe24f
add esi, 0xffcf38c0
add esi, 0x846fe24f
xor edi, edi
sub edi, edx
xor edx, edx
sub edx, 0x179b230f
add edi, edx
xor edx, edx
sub edx, edi
add edx, 0xc348719a
sub edx, esi
sub edx, 0xc348719a
add edx, 0xedbb1596
sub edx, 0x179b230f
sub edx, 0xedbb1596
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1005db20
mov dword [ebp - 0x6ec], 0x1c970662
nop dword [eax]
jmp 0x1015d3c3
mov ecx, dword [ebp - 0x6e4]
xor eax, eax
sub eax, 0x4be5d95c
sub eax, ecx
add eax, 0x4be5d95c
mov ecx, 0x352d8b83
add ecx, 0
add ecx, eax
sub ecx, 0x352d8b83
xor edx, edx
sub edx, 1
add edx, 0
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, eax
sub ecx, 0x201bf513
add ecx, 0xf98723f6
add ecx, 0x201bf513
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
sub ecx, 0x2dbfcbd7
sub ecx, 0xf98723f6
add ecx, 0x2dbfcbd7
xor eax, eax
sub eax, 0xd367a21c
sub eax, 0x7900c530
add eax, 0xd367a21c
add eax, 0x7f7a5665
sub eax, ecx
sub eax, 0x7f7a5665
add eax, 0x3783bf66
add eax, 0x7900c530
sub eax, 0x3783bf66
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x6ec], 0x77f6342c
jmp 0x1015d3c3
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.1015d3e0
mov edx, eax
mov eax, 0xf3ef92ec
mov ecx, 0x5a70e35
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8000
call fcn.10001010
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x6ec], 0x79f71c6e
jmp 0x1015d3c3
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.1015dee0
mov edx, eax
mov eax, 0x4ccf9fa9
mov ecx, 0xf75f6f3d
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x6ec], eax
jmp 0x1015d3c3
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8000
call fcn.10001010
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x6ec], 0xccc31871
nop dword [eax]
jmp 0x1015d3c3
lea ecx, [ebp - 0x14c]
add ecx, 0x18
add ecx, 0x10
mov eax, dword [ecx]
add eax, dword [ebp - 0x14]
push 0
push 1
push dword [ebp - 0x14]
call eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x6ec], 0xccc31871
jmp 0x1015d3c3
mov dword [ebp - 0x6ec], 0x79f71c6e
nop dword [eax + eax]
jmp 0x1015d3c3
mov dword [ebp - 0x6ec], 0x35a65b3c
jmp 0x1015d3c3
mov dword [ebp - 0x6ec], 0x6225430d
nop
jmp 0x1015d3c3
mov dword [ebp - 0x6ec], 0x6225430d
jmp 0x1015d3c3
mov dword [ebp - 0x6ec], 0x8731f8ac
nop
jmp 0x1015d3c3
mov dword [ebp - 0x6ec], 0x8731f8ac
jmp 0x1015d3c3
mov eax, dword [ebp - 0x14]
add esp, 0x6f8
pop esi
pop edi
pop ebp
ret 4
jmp 0x1015c900