Function at 0x100069a0
Capabilities:
Parse pe header

Disassembly:
push ebx
push edi
push esi
sub esp, 0x48
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0xc]
movzx ecx, word [ecx]
mov dword [esp + 0x14], ecx
mov dword [esp + 4], 0x52a0e1cc
mov eax, dword [esp + 4]
mov ecx, eax
sub ecx, 0x8b8944d3
mov dword [esp], eax
je 0x10006c2f
jmp 0x100069f7
mov eax, dword [esp]
sub eax, 0x8c0797a7
je 0x10006d2e
jmp 0x10006a0a
mov eax, dword [esp]
sub eax, 0xafbf24a5
je 0x10006d16
jmp 0x10006a1d
mov eax, dword [esp]
sub eax, 0xc387d354
je 0x10006aec
jmp 0x10006a30
mov eax, dword [esp]
sub eax, 0xc40128b2
je 0x10006c22
jmp 0x10006a43
mov eax, dword [esp]
sub eax, 0xd488615f
je 0x10006b60
jmp 0x10006a56
mov eax, dword [esp]
sub eax, 0x52a0e1cc
je 0x10006acd
jmp 0x10006a69
mov eax, dword [esp]
sub eax, 0x546d7eb0
je 0x10006d09
jmp 0x10006a7c
mov eax, dword [esp]
sub eax, 0x54708965
je 0x10006ca3
jmp 0x10006a8f
mov eax, dword [esp]
sub eax, 0x5541f6ab
je 0x10006d21
jmp 0x10006aa2
mov eax, dword [esp]
sub eax, 0x629c8e26
je 0x10006bae
jmp 0x10006ab5
mov eax, dword [esp]
sub eax, 0x6a5ef6a0
je 0x10006b3b
jmp 0x10006ac8
jmp 0x10006d4e
mov eax, dword [esp + 0x14]
cmp eax, 0x5a4d
mov eax, 0xc387d354
mov ecx, 0x8b8944d3
cmove ecx, eax
mov dword [esp + 4], ecx
jmp 0x10006d4e
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xc]
add eax, dword [ecx + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 8]
cmp dword [eax], 0x4550
mov eax, 0x6a5ef6a0
mov ecx, 0xd488615f
cmove ecx, eax
mov dword [esp + 4], ecx
jmp 0x10006d4e
mov eax, dword [esp + 0x58]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0xafbf24a5
jmp 0x10006d4e
mov eax, dword [0x1000e0e8]
mov ecx, dword [0x1000e0e4]
mov edx, eax
add edx, 0xe64cfb70
sub edx, 1
sub edx, 0xe64cfb70
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
mov ecx, 0x629c8e26
mov edx, 0x5541f6ab
cmovne edx, ecx
mov dword [esp + 4], edx
jmp 0x10006d4e
mov eax, dword [0x1000e0e8]
mov ecx, dword [0x1000e0e4]
mov edx, eax
sub edx, 0x364657bb
sub edx, 1
add edx, 0x364657bb
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
xor al, 0xff
mov ah, bh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov ch, al
and ch, 0
and bl, cl
mov dl, ah
and dl, 0
and bh, cl
or ch, bl
or dl, bh
xor ch, dl
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or ch, al
test ch, 1
mov esi, 0xc40128b2
mov edi, 0x5541f6ab
cmovne edi, esi
mov dword [esp + 4], edi
jmp 0x10006d4e
mov dword [esp + 4], 0x8b8944d3
jmp 0x10006d4e
mov eax, dword [0x1000e0e8]
mov ecx, dword [0x1000e0e4]
mov edx, eax
add edx, 0x9164c4ea
sub edx, 1
sub edx, 0x9164c4ea
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
xor al, 0xff
mov ah, bh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov ch, al
and ch, 0
and bl, cl
mov dl, ah
and dl, 0
and bh, cl
or ch, bl
or dl, bh
xor ch, dl
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or ch, al
test ch, 1
mov esi, 0x54708965
mov edi, 0x8c0797a7
cmovne edi, esi
mov dword [esp + 4], edi
jmp 0x10006d4e
mov eax, dword [esp + 0x58]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], 0
mov eax, dword [0x1000e0e8]
mov ecx, dword [0x1000e0e4]
mov edx, eax
sub edx, 0x8447082c
sub edx, 1
add edx, 0x8447082c
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
mov ecx, 0x546d7eb0
mov edx, 0x8c0797a7
cmovne edx, ecx
mov dword [esp + 4], edx
jmp 0x10006d4e
mov dword [esp + 4], 0xafbf24a5
jmp 0x10006d4e
mov eax, dword [esp + 0x10]
add esp, 0x48
pop esi
pop edi
pop ebx
ret
mov dword [esp + 4], 0x629c8e26
jmp 0x10006d4e
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
mov dword [esp + 0x10], 0
mov dword [esp + 4], 0x54708965
jmp 0x100069dd