Function at 0x10129328
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
or dword [0x101cf208], 0xffffffff
xor edx, edx
push ebx
push esi
xor eax, eax
mov dword [0x101cf210], edx
push edi
mov dword [0x101cf214], edx
mov esi, edx
mov dword [0x101cf20c], 0x101cee18
mov dword [0x101cf200], 0x101ce648
mov word [0x101cee18], ax
xor edi, edi
inc edi
movsx ebx, word [esi*2 + 0x10031e40]
test ebx, ebx
jne 0x10129453
cmp dword [0x101cf208], ebx
jge 0x10129399
call fcn.1012a74b
mov ecx, eax
mov dword [0x101cf208], ecx
test ecx, ecx
jns 0x10129399
and dword [0x101cf208], ebx
movsx edx, word [esi*2 + 0x10031980]
test edx, edx
je 0x1012941e
mov ecx, dword [0x101cf208]
add edx, ecx
cmp edx, 0xd88
ja 0x1012941e
movsx eax, word [edx*2 + 0x1002de80]
cmp eax, ecx
jne 0x1012941e
mov eax, dword [0x101cf20c]
cmp eax, 0x101cf1fe
jae 0x1012a19f
mov ecx, dword [0x101cf200]
add eax, 2
movsx esi, word [edx*2 + 0x1002f9a0]
add ecx, 4
or dword [0x101cf208], 0xffffffff
cmp dword [0x101cf214], 0
mov word [eax], si
mov dword [0x101cf20c], eax
mov eax, dword [0x101ce644]
push 0
mov dword [0x101cf200], ecx
mov dword [ecx], eax
pop edx
jle 0x1012936a
dec dword [0x101cf214]
xor edx, edx
jmp 0x1012936a
movsx edx, word [esi*2 + 0x100315b0]
test edx, edx
je 0x10129486
mov ecx, dword [0x101cf208]
add edx, ecx
cmp edx, 0xd88
ja 0x10129486
movsx eax, word [edx*2 + 0x1002de80]
cmp eax, ecx
jne 0x10129486
lfence
movsx ebx, word [edx*2 + 0x1002f9a0]
xor edx, edx
movsx esi, word [ebx*2 + 0x10032210]
mov eax, dword [0x101cf200]
mov ecx, esi
shl ecx, 2
sub eax, ecx
mov ecx, 0x124
mov eax, dword [eax + 4]
mov dword [0x101cf204], eax
lea eax, [ebx - 1]
cmp eax, ecx
ja case.default.0x1012947f
jmp dword [eax*4 + 0x1012a1bc]
cmp dword [0x101cf214], 0
jne 0x101294a7
push 0x1002ba74
push dword [0x101d00ac]
call fcn.1012ccfb
pop ecx
pop ecx
inc dword [0x101cf210]
cmp dword [0x101cf214], 3
jge 0x10129549
mov dword [0x101cf214], 3
mov eax, dword [0x101cf20c]
movsx eax, word [eax]
movsx ecx, word [eax*2 + 0x10031980]
test ecx, ecx
je 0x101294eb
mov eax, 0x100
add ecx, eax
cmp ecx, 0xd88
ja 0x101294eb
cmp word [ecx*2 + 0x1002de80], ax
je 0x1012950b
mov eax, dword [0x101cf20c]
cmp eax, 0x101cee18
jbe 0x1012a1b1
sub dword [0x101cf20c], 2
sub dword [0x101cf200], 4
jmp 0x101294be
mov eax, dword [0x101cf20c]
cmp eax, 0x101cf1fe
jae 0x1012a19f
movsx esi, word [ecx*2 + 0x1002f9a0]
add eax, 2
mov ecx, dword [0x101cf200]
add ecx, 4
mov dword [0x101cf20c], eax
mov dword [0x101cf200], ecx
mov word [eax], si
mov eax, dword [0x101ce644]
mov dword [ecx], eax
jmp 0x10129417
cmp dword [0x101cf208], 0
je 0x1012a1b1
or dword [0x101cf208], 0xffffffff
jmp 0x10129417
push edx
push edx
jmp 0x1012a0a7
push edi
push edi
jmp 0x1012a0a7
push edi
push 2
jmp 0x1012a0a7
push 2
push 3
jmp 0x1012a0a7
push edx
push 4
jmp 0x1012a0a7
push edi
push 5
jmp 0x1012a0a7
push edi
push 6
jmp 0x1012a0a7
push edi
push 7
jmp 0x1012a0a7
push edi
push 8
jmp 0x1012a0a7
push edi
push 9
jmp 0x1012a0a7
push edi
push 0xa
jmp 0x1012a0a7
push 2
push 0xb
jmp 0x1012a0a7
push edx
push 0xc
jmp 0x1012a0a7
push edx
push 0xd
jmp 0x1012a0a7
push edx
push 0xe
jmp 0x1012a0a7
push edx
push 0xf
jmp 0x1012a0a7
push edx
push 0x10
jmp 0x1012a0a7
push edx
push 0x11
jmp 0x1012a0a7
push edi
push 0x12
jmp 0x1012a0a7
push edi
push 0x13
jmp 0x1012a0a7
push edi
push 0x14
jmp 0x1012a0a7
push 2
push 0x15
jmp 0x1012a0a7
push edx
push 0x16
jmp 0x1012a0a7
push edx
push 0x17
jmp 0x1012a0a7
push edx
push 0x18
jmp 0x1012a0a7
push edi
push 0x19
jmp 0x1012a0a7
push 2
push 0x1a
jmp 0x1012a0a7
push edi
push 0x1d
jmp 0x1012a0a7
push 2
push 0x1e
jmp 0x1012a0a7
push 2
push 0x1f
jmp 0x1012a0a7
push 2
push 0x20
jmp 0x1012a0a7
push edi
push 0x21
jmp 0x1012a0a7
push edi
push 0x22
jmp 0x1012a0a7
push 2
push 0x23
jmp 0x1012a0a7
push edi
push 0x24
jmp 0x1012a0a7
push edi
push 0x25
jmp 0x1012a0a7
push edi
push 0x26
jmp 0x1012a0a7
push edi
push 0x27
jmp 0x1012a0a7
push edi
push 0x28
pop eax
push eax
jmp 0x1012a0a7
push 2
push 0x29
jmp 0x1012a0a7
push edi
push 0x2a
jmp 0x1012a0a7
push 2
push 0x2b
jmp 0x1012a0a7
push edx
push 0x2c
jmp 0x1012a0a7
push edi
push 0x2d
jmp 0x1012a0a7
push edi
push 0x2e
jmp 0x1012a0a7
push edi
push 0x2f
jmp 0x1012a0a7
push edi
push 0x30
jmp 0x1012a0a7
push edx
push 0x31
jmp 0x1012a0a7
push edx
push 0x32
jmp 0x1012a0a7
push edx
push 0x33
jmp 0x1012a0a7
push edx
push 0x34
jmp 0x1012a0a7
push edx
push 0x35
jmp 0x1012a0a7
push edx
push 0x36
jmp 0x1012a0a7
push 2
push 0x37
jmp 0x1012a0a7
push edx
push 0x38
jmp 0x1012a0a7
push 3
push 0x39
jmp 0x1012a0a7
push edx
push 0x3a
jmp 0x1012a0a7
push edx
push 0x3b
jmp 0x1012a0a7
push edx
push 0x3c
jmp 0x1012a0a7
push edx
push 0x3d
jmp 0x1012a0a7
push edx
push 0x3e
jmp 0x1012a0a7
push edx
push 0x3f
jmp 0x1012a0a7
push edx
push 0x40
jmp 0x1012a0a7
push edx
push 0x41
jmp 0x1012a0a7
push edx
push 0x42
jmp 0x1012a0a7
push edx
push 0x43
jmp 0x1012a0a7
push edx
push 0x44
jmp 0x1012a0a7
push edx
push 0x45
jmp 0x1012a0a7
push edx
push 0x46
jmp 0x1012a0a7
push edx
push 0x47
jmp 0x1012a0a7
push edx
push 0x48
jmp 0x1012a0a7
push edx
push 0x49
jmp 0x1012a0a7
push 2
push 0x4a
jmp 0x1012a0a7
push 3
push 0x4b
jmp 0x1012a0a7
push 3
push 0x4c
jmp 0x1012a0a7
push 4
push 0x4d
jmp 0x1012a0a7
push edi
push 0x4e
jmp 0x1012a0a7
push 2
push 0x4f
jmp 0x1012a0a7
push edx
push 0x50
jmp 0x1012a0a7
push edi
push 0x51
jmp 0x1012a0a7
push 2
push 0x52
jmp 0x1012a0a7
push edx
push 0x53
jmp 0x1012a0a7
push edi
push 0x54
jmp 0x1012a0a7
push edi
push 0x55
jmp 0x1012a0a7
push edi
push 0x56
jmp 0x1012a0a7
push 2
push 0x57
jmp 0x1012a0a7
push edx
push 0x58
jmp 0x1012a0a7
push edi
push 0x59
jmp 0x1012a0a7
push edi
push 0x5a
jmp 0x1012a0a7
push 2
push 0x5b
jmp 0x1012a0a7
push 2
push 0x5c
jmp 0x1012a0a7
push 3
push 0x5d
jmp 0x1012a0a7
push edx
push 0x5e
jmp 0x1012a0a7
push edi
push 0x5f
jmp 0x1012a0a7
push edx
push 0x60
jmp 0x1012a0a7
push edi
push 0x61
jmp 0x1012a0a7
push 2
push 0x62
jmp 0x1012a0a7
push edx
push 0x63
jmp 0x1012a0a7
push edi
push 0x64
jmp 0x1012a0a7
push edi
push 0x65
jmp 0x1012a0a7
push edi
push 0x66
jmp 0x1012a0a7
push edx
push 0x67
jmp 0x1012a0a7
push edi
push 0x68
jmp 0x1012a0a7
push 2
push 0x69
jmp 0x1012a0a7
push 2
push 0x6a
jmp 0x1012a0a7
push edi
push 0x6b
jmp 0x1012a0a7
push 2
push 0x6c
jmp 0x1012a0a7
push 4
push 0x6d
jmp 0x1012a0a7
push edi
push 0x6e
jmp 0x1012a0a7
push edi
push 0x6f
jmp 0x1012a0a7
push 2
push 0x70
jmp 0x1012a0a7
push edi
push 0x71
jmp 0x1012a0a7
push 3
push 0x72
jmp 0x1012a0a7
push 4
push 0x73
jmp 0x1012a0a7
push 2
push 0x74
jmp 0x1012a0a7
push 2
push 0x75
jmp 0x1012a0a7
push 3
push 0x76
jmp 0x1012a0a7
push edx
push 0x77
jmp 0x1012a0a7
push edx
push 0x78
jmp 0x1012a0a7
push edi
push 0x79
jmp 0x1012a0a7
push 2
push 0x7a
jmp 0x1012a0a7
push 2
push 0x7b
jmp 0x1012a0a7
push edi
push 0x7c
jmp 0x1012a0a7
push 2
push 0x7d
jmp 0x1012a0a7
push edi
push 0x80
jmp 0x1012a0a7
push 2
push 0x81
jmp 0x1012a0a7
push edx
push 0x82
jmp 0x1012a0a7
push edx
push 0x83
jmp 0x1012a0a7
push edx
push 0x84
jmp 0x1012a0a7
push edx
push 0x85
jmp 0x1012a0a7
push edi
push 0x86
jmp 0x1012a0a7
push 3
push 0x87
jmp 0x1012a0a7
push 2
push 0x88
jmp 0x1012a0a7
push 3
push 0x89
jmp 0x1012a0a7
push edx
push 0x8a
jmp 0x1012a0a7
push edx
push 0x8b
jmp 0x1012a0a7
push edi
push 0x8c
jmp 0x1012a0a7
push 2
push 0x8d
jmp 0x1012a0a7
push 3
push 0x8e
jmp 0x1012a0a7
push 2
push 0x8f
jmp 0x1012a0a7
push 3
push 0x90
jmp 0x1012a0a7
push edx
push 0x91
jmp 0x1012a0a7
push edx
push 0x92
jmp 0x1012a0a7
push edi
push 0x93
jmp 0x1012a0a7
push 2
push 0x94
jmp 0x1012a0a7
push 5
push 0x95
jmp 0x1012a0a7
push edx
push 0x96
jmp 0x1012a0a7
push edi
push 0x97
jmp 0x1012a0a7
push edx
push 0x98
jmp 0x1012a0a7
push edx
push 0x99
jmp 0x1012a0a7
push 2
push 0x9a
jmp 0x1012a0a7
push 3
push 0x9b
jmp 0x1012a0a7
push edx
push 0x9c
jmp 0x1012a0a7
push edx
push 0x9d
jmp 0x1012a0a7
push edi
push 0x9e
jmp 0x1012a0a7
push 2
push 0x9f
jmp 0x1012a0a7
push edx
push 0xa0
jmp 0x1012a0a7
push edi
push 0xa1
jmp 0x1012a0a7
push edx
push 0xa2
jmp 0x1012a0a7
push edi
push 0xa3
jmp 0x1012a0a7
push 2
push 0xa4
jmp 0x1012a0a7
push edi
push 0xa5
jmp 0x1012a0a7
push edx
push 0xa6
jmp 0x1012a0a7
push edi
push 0xa7
jmp 0x1012a0a7
push edi
push 0xa8
jmp 0x1012a0a7
push edi
push 0xa9
jmp 0x1012a0a7
push edi
push 0xaa
jmp 0x1012a0a7
push 2
push 0xab
jmp 0x1012a0a7
push 5
push 0xac
jmp 0x1012a0a7
push edi
push 0xad
jmp 0x1012a0a7
push 2
push 0xae
jmp 0x1012a0a7
push 5
push 0xaf
jmp 0x1012a0a7
push 2
push 0xb0
jmp 0x1012a0a7
push 3
push 0xb1
jmp 0x1012a0a7
push edx
push 0xb2
jmp 0x1012a0a7
push edx
push 0xb3
jmp 0x1012a0a7
push edi
push 0xb4
jmp 0x1012a0a7
push edi
push 0xb5
jmp 0x1012a0a7
push edx
push 0xb6
jmp 0x1012a0a7
push edi
push 0xb7
jmp 0x1012a0a7
push edx
push 0xb8
jmp 0x1012a0a7
push edi
push 0xb9
jmp 0x1012a0a7
push edi
push 0xba
jmp 0x1012a0a7
push 2
push 0xbb
jmp 0x1012a0a7
push edi
push 0xbc
jmp 0x1012a0a7
push edi
push 0xbd
jmp 0x1012a0a7
push edi
push 0xbe
jmp 0x1012a0a7
push edi
push 0xbf
jmp 0x1012a0a7
push edi
push 0xc0
jmp 0x1012a0a7
push edx
push 0xc1
jmp 0x1012a0a7
push edx
push 0xc2
jmp 0x1012a0a7
push edi
push 0xc3
jmp 0x1012a0a7
push edi
push 0xc4
jmp 0x1012a0a7
push edi
push 0xc5
jmp 0x1012a0a7
push edi
push 0xc6
jmp 0x1012a0a7
push edi
push 0xc7
jmp 0x1012a0a7
push 2
push 0xc8
jmp 0x1012a0a7
push 2
push 0xc9
jmp 0x1012a0a7
push 2
push 0xca
jmp 0x1012a0a7
push edi
push 0xcb
jmp 0x1012a0a7
push edi
push 0xcc
jmp 0x1012a0a7
push 2
push 0xcd
jmp 0x1012a0a7
push edi
push 0xce
jmp 0x1012a0a7
push edi
push 0xcf
jmp 0x1012a0a7
push 3
push 0xd0
jmp 0x1012a0a7
push edi
push 0xd1
jmp 0x1012a0a7
push 3
push 0xd2
jmp 0x1012a0a7
push edi
push 0xd3
jmp 0x1012a0a7
push edi
push 0xd4
jmp 0x1012a0a7
push edi
push 0xd5
jmp 0x1012a0a7
push edi
push 0xd6
jmp 0x1012a0a7
push 2
push 0xd7
jmp 0x1012a0a7
push 2
push 0xd8
jmp 0x1012a0a7
push edi
push 0xd9
jmp 0x1012a0a7
push edi
push 0xda
jmp 0x1012a0a7
push edi
push 0xdb
jmp 0x1012a0a7
push edi
push 0xdc
jmp 0x1012a0a7
push edi
push 0xdd
jmp 0x1012a0a7
push edi
push 0xde
jmp 0x1012a0a7
push edi
push 0xdf
jmp 0x1012a0a7
push edi
push 0xe0
jmp 0x1012a0a7
push edi
push 0xe1
jmp 0x1012a0a7
push 2
push 0xe2
jmp 0x1012a0a7
push edi
push 0xe3
jmp 0x1012a0a7
push 2
push 0xe4
jmp 0x1012a0a7
push 2
push 0xe5
jmp 0x1012a0a7
push 2
push 0xe6
jmp 0x1012a0a7
push edi
push 0xe7
jmp 0x1012a0a7
push 2
push 0xe8
jmp 0x1012a0a7
push 2
push 0xe9
jmp 0x1012a0a7
push edi
push 0xea
jmp 0x1012a0a7
push 2
push 0xeb
jmp 0x1012a0a7
push 2
push 0xec
jmp 0x1012a0a7
push 2
push 0xed
jmp 0x1012a0a7
push 2
push 0xee
jmp 0x1012a0a7
push edi
push 0xef
jmp 0x1012a0a7
push 2
push 0xf0
jmp 0x1012a0a7
push 2
push 0xf1
jmp 0x1012a0a7
push edi
push 0xf2
jmp 0x1012a0a7
push 2
push 0xf3
jmp 0x1012a0a7
push edi
push 0xf4
jmp 0x1012a0a7
push 2
push 0xf5
jmp 0x1012a0a7
push edi
push 0xfd
jmp 0x1012a0a7
push 3
push 0xfe
jmp 0x1012a0a7
push edi
push 0xf6
jmp 0x1012a0a7
push 2
push 0xf7
jmp 0x1012a0a7
push 2
push pe_nt_image_headers32
jmp 0x1012a0a7
push 2
push 0xf9
jmp 0x1012a0a7
push 2
push 0xfa
jmp 0x1012a0a7
push 2
push 0xfb
jmp 0x1012a0a7
push 2
push 0xfc
jmp 0x1012a0a7
push edi
push 0xff
jmp 0x1012a0a7
push 2
mov eax, 0x100
jmp 0x1012969c
push edx
push 0x101
jmp 0x1012a0a7
push edi
push 0x102
jmp 0x1012a0a7
push edi
push 0x103
jmp 0x1012a0a7
push edi
push 0x104
jmp 0x1012a0a7
push edi
push 0x105
jmp 0x1012a0a7
push edi
push 0x106
jmp 0x1012a0a7
push 2
push 0x107
jmp 0x1012a0a7
push edi
push 0x108
jmp 0x1012a0a7
push edi
push 0x109
jmp 0x1012a0a7
push 2
push 0x10a
jmp 0x1012a0a7
push edi
push 0x10b
jmp 0x1012a0a7
push edi
push 0x10c
jmp 0x1012a0a7
push edi
push 0x10d
jmp 0x1012a0a7
push edi
push 0x10e
jmp 0x1012a0a7
push edi
push 0x10f
jmp 0x1012a0a7
push 2
push 0x110
jmp 0x1012a0a7
push edi
push 0x111
jmp 0x1012a0a7
push edx
push 0x112
jmp 0x1012a0a7
push edx
push 0x113
jmp 0x1012a0a7
push edx
push 0x114
jmp 0x1012a0a7
push edi
push 0x115
jmp 0x1012a0a7
push edi
push 0x116
jmp 0x1012a0a7
push edx
push 0x117
jmp 0x1012a0a7
push edi
push 0x118
jmp 0x1012a0a7
push edi
push 0x119
jmp 0x1012a0a7
push edx
push 0x11a
jmp 0x1012a0a7
push edx
push 0x11b
jmp 0x1012a0a7
push edx
push 0x11c
jmp 0x1012a0a7
push edx
push 0x11d
jmp 0x1012a0a7
push edx
push 0x11e
jmp 0x1012a0a7
push edx
push 0x11f
jmp 0x1012a0a7
push edx
push 0x120
jmp 0x1012a0a7
push edi
push 0x121
jmp 0x1012a0a7
push 2
push 0x122
jmp 0x1012a0a7
push edx
push 0x123
jmp 0x1012a0a7
push edx
push ecx
jmp 0x1012a0a7
push edx
push 0x125
jmp 0x1012a0a7
push edx
push 0x126
jmp 0x1012a0a7
push edx
push 0x127
jmp 0x1012a0a7
push edx
push 0x128
call fcn.1012b577
mov edx, dword [0x101cf20c]
lea eax, [esi + esi]
mov ecx, dword [0x101cf200]
sub edx, eax
mov eax, esi
mov dword [0x101cf20c], edx
movsx esi, word [ebx*2 + 0x10032460]
shl eax, 2
movsx edi, word [edx]
sub ecx, eax
mov dword [0x101cf200], ecx
test edi, edi
jne 0x1012a139
test esi, esi
jne 0x1012a139
add ecx, 4
lea eax, [edx + 2]
push 0x28
pop ebx
mov esi, ebx
mov word [eax], bx
mov dword [0x101cf20c], eax
mov eax, dword [0x101cf204]
mov dword [0x101cf200], ecx
mov dword [ecx], eax
cmp dword [0x101cf208], edi
jge 0x1012a126
call fcn.1012a74b
mov ecx, eax
xor edx, edx
mov dword [0x101cf208], ecx
test ecx, ecx
jns 0x1012a128
mov dword [0x101cf208], edx
jmp 0x1012a128
xor edx, edx
cmp dword [0x101cf208], 0
jne 0x10129367
xor eax, eax
jmp 0x1012a1b3
movsx ecx, word [esi*2 + 0x100314c0]
test ecx, ecx
je 0x1012a165
add ecx, edi
cmp ecx, 0xd88
ja 0x1012a165
movsx eax, word [ecx*2 + 0x1002de80]
cmp eax, edi
jne 0x1012a165
movsx esi, word [ecx*2 + 0x1002f9a0]
jmp 0x1012a16d
movsx esi, word [esi*2 + 0x10031d50]
xor edi, edi
cmp edx, 0x101cf1fe
jae 0x1012a19e
mov ecx, dword [0x101cf200]
lea eax, [edx + 2]
add ecx, 4
mov word [eax], si
mov dword [0x101cf20c], eax
inc edi
mov eax, dword [0x101cf204]
mov dword [0x101cf200], ecx
mov dword [ecx], eax
jmp 0x10129417
inc edi
push 0x1002ba84
push dword [0x101d00ac]
call fcn.1012ccfb
pop ecx
pop ecx
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret