Function at 0x1000de70
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6d8
push esi
push edi
mov dword [ebp - 4], 0
mov ecx, 0x10
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x50]
cmp eax, 0x5a4d
jne 0x1000e0bc
cmp dword [ebp - 0x14], 0x40
jbe 0x1000deca
mov ecx, dword [ebp - 0x14]
sub ecx, 0x40
push ecx
mov edx, dword [ebp + 8]
add edx, 0x40
push edx
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0x6d8]
push edx
call fcn.10027350
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, 0x3e
mov esi, dword [ebp - 0xc]
lea edi, [ebp - 0x148]
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x148], 0x4550
jne 0x1000e0bc
movzx ecx, word [ebp - 0x142]
imul edx, ecx, 0x28
push edx
mov eax, dword [ebp - 0xc]
add eax, 0xf8
push eax
mov ecx, 0x28
imul edx, ecx, 0
lea eax, [ebp + edx - 0x2d8]
push eax
call fcn.10027350
add esp, 0xc
push 0x40
push 0x103000
mov ecx, dword [ebp - 0xf8]
push ecx
push 0
push 0
push 0
call fcn.10001340
add esp, 8
call eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x1000e0bc
mov ecx, 0x10
lea esi, [ebp - 0x50]
mov edi, dword [ebp - 4]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 4]
add edi, dword [ebp - 0x14]
mov ecx, 0x3e
lea esi, [ebp - 0x148]
rep movsd dword es:[edi], dword [esi]
movzx edx, word [ebp - 0x142]
imul eax, edx, 0x28
push eax
mov ecx, 0x28
imul edx, ecx, 0
lea eax, [ebp + edx - 0x2d8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
lea eax, [edx + ecx + 0xf8]
push eax
call fcn.10027350
add esp, 0xc
cmp dword [ebp - 0x14], 0x40
jbe 0x1000dfc7
mov ecx, dword [ebp - 0x14]
sub ecx, 0x40
push ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x6d8]
push ecx
mov edx, dword [ebp - 4]
add edx, 0x40
push edx
call fcn.10027350
add esp, 0xc
mov dword [ebp - 8], 0
jmp 0x1000dfd9
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
movzx ecx, word [ebp - 0x142]
cmp dword [ebp - 8], ecx
jge 0x1000e01f
imul edx, dword [ebp - 8], 0x28
mov eax, dword [ebp + 8]
add eax, dword [ebp + edx - 0x2c4]
mov dword [ebp - 0x10], eax
imul ecx, dword [ebp - 8], 0x28
mov edx, dword [ebp + ecx - 0x2c8]
push edx
mov eax, dword [ebp - 0x10]
push eax
imul ecx, dword [ebp - 8], 0x28
mov edx, dword [ebp - 4]
add edx, dword [ebp + ecx - 0x2cc]
push edx
call fcn.10027350
add esp, 0xc
jmp 0x1000dfd0
mov eax, dword [ebp - 4]
push eax
call fcn.1000eae0
add esp, 4
test eax, eax
jne 0x1000e051
push 0x8000
push 0
mov ecx, dword [ebp - 4]
push ecx
push 0
push 0
call fcn.10001370
add esp, 8
call eax
mov dword [ebp - 4], 0
jmp 0x1000e0bc
mov edx, dword [ebp - 4]
push edx
call fcn.10003b90
add esp, 4
test eax, eax
jne 0x1000e083
push 0x8000
push 0
mov eax, dword [ebp - 4]
push eax
push 0
push 0
call fcn.10001370
add esp, 8
call eax
mov dword [ebp - 4], 0
jmp 0x1000e0bc
movzx ecx, word [ebp - 0x132]
and ecx, 0x2000
jne 0x1000e09e
mov edx, dword [ebp - 4]
push edx
call fcn.1000e680
add esp, 4
mov eax, dword [ebp - 4]
push eax
call fcn.10007450
add esp, 4
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 4]
push 0
push 1
push dword [ebp - 4]
call eax
mov eax, dword [ebp - 4]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4