Function at 0x10251df
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10a6184]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, 0x10a6184
cmp eax, esi
push edi
mov edi, 0x1004db0
je 0x1025224
test byte [eax + 0x1c], 1
je 0x1025224
cmp byte [eax + 0x19], 5
jb 0x1025224
mov ecx, dword [ebp + 0x10]
push dword [ecx]
push ecx
push dword [ebp + 0xc]
push ebx
push edi
push 0x42
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0106ae69
and dword [ebp + 8], 0
call fcn.0102925b
test eax, eax
je 0x102586d
call fcn.0102903b
test eax, eax
je 0x102586d
cmp dword [ebp + 0xc], 0
je 0x1025826
cmp dword [ebp + 0x10], 0
je 0x1025826
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [ebp + 0xc]
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 6
jae 0x10252d4
mov eax, dword [0x10a6184]
cmp eax, esi
mov ebx, 0x80070057
je 0x10258b9
test byte [eax + 0x1c], 8
je 0x10252ab
cmp byte [eax + 0x19], 2
jb 0x10252ab
push 0x1004db0
push 0x47
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x10258b9
test byte [eax + 0x1c], 1
je 0x10258b9
cmp byte [eax + 0x19], 2
jb 0x10258b9
push ebx
push 0x1004db0
push 0x48
jmp 0x10258ae
mov ax, word [ebx]
cmp ax, 2
jne 0x10256c4
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x102530d
test byte [eax + 0x1c], 8
je 0x102530d
cmp byte [eax + 0x19], 5
jb 0x102530d
push 0x1004db0
push 0x4a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov eax, dword [0x10a6184]
mov ebx, dword [ebx + 4]
and dword [ebp - 0x10], 0
cmp ebx, 0x100007f
mov dword [ebp - 0x14], ebx
jne 0x1025352
cmp eax, esi
je 0x10257c9
test byte [eax + 0x1c], 8
je 0x10257c9
cmp byte [eax + 0x19], 5
jb 0x10257c9
push 0x1004db0
push 0x4b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
jmp 0x10257c9
cmp eax, esi
je 0x1025374
test byte [eax + 0x1c], 8
je 0x1025374
cmp byte [eax + 0x19], 5
jb 0x1025374
push 0x1004db0
push 0x4c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov ebx, 0x10a7f9c
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x10a7fbc]
xor edi, edi
cmp ecx, edi
mov dword [ebp - 0xc], edi
jne 0x1025486
cmp dword [0x10a7fe8], edi
je 0x1025405
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp + 0x10]
mov dword [eax], edi
mov eax, dword [0x10a6184]
cmp eax, esi
mov ebx, 0x8000ffff
je 0x10258b9
test byte [eax + 0x1c], 8
je 0x10253dc
cmp byte [eax + 0x19], 2
jb 0x10253dc
push 0x1004db0
push 0x4d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x10258b9
test byte [eax + 0x1c], 1
je 0x10258b9
cmp byte [eax + 0x19], 2
jb 0x10258b9
push ebx
push 0x1004db0
push 0x4e
jmp 0x10258ae
mov esi, 0x10a7fbc
call fcn.01024c3e
mov esi, eax
test esi, esi
je 0x1025474
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp + 0x10]
and dword [eax], 0
push esi
call fcn.01009676
mov esi, eax
test esi, esi
jl 0x1025433
mov esi, 0x80004005
mov eax, dword [0x10a6184]
cmp eax, 0x10a6184
je 0x102546d
test byte [eax + 0x1c], 1
je 0x102546d
movzx ecx, byte [eax + 0x19]
xor edx, edx
test esi, esi
setl dl
dec edx
and edx, 3
inc edx
inc edx
cmp ecx, edx
jl 0x102546d
push esi
push 0x1004db0
push 0x4f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, esi
jmp 0x10258bb
mov ecx, dword [0x10a7fbc]
mov dword [ebp - 0xc], 1
mov esi, 0x10a6184
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x10254bb
test byte [eax + 0x1c], 8
je 0x10254bb
cmp byte [eax + 0x19], 5
jb 0x10254bb
push dword [ebp - 0x14]
push 0x1004db0
push 0x50
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, dword [0x10a6184]
mov ecx, dword [0x10a7fbc]
xor edi, edi
cmp edi, dword [ecx]
mov dword [ebp - 8], edi
jae 0x1025580
and dword [ebp - 4], edi
cmp eax, esi
je 0x1025503
test byte [eax + 0x1c], 8
je 0x1025503
cmp byte [eax + 0x19], 5
jb 0x1025503
mov edx, dword [ebp - 4]
add ecx, edx
push dword [ecx + 0xc]
push dword [ecx + 4]
push 0x1004db0
push 0x51
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100ef6e
mov eax, dword [0x10a6184]
mov ecx, dword [0x10a7fbc]
mov edx, dword [ebp - 4]
add edx, ecx
cmp dword [edx + 0xc], 0
je 0x1025525
mov edi, dword [edx + 0xc]
mov edx, dword [edx + 4]
and edx, edi
and edi, dword [ebp - 0x14]
cmp edi, edx
je 0x1025533
mov edi, dword [ebp - 8]
mov ebx, 0x10a7f9c
add dword [ebp - 4], 0x18
inc edi
cmp edi, dword [ecx]
mov dword [ebp - 8], edi
jb 0x10254cb
jmp 0x102557e
cmp eax, esi
je 0x102556c
test byte [eax + 0x1c], 8
je 0x102556c
cmp byte [eax + 0x19], 5
jb 0x102556c
mov edi, dword [ebp - 8]
lea edx, [edi + edi*2]
push dword [ecx + edx*8 + 4]
push 0x1004db0
push 0x52
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, dword [0x10a6184]
mov ecx, dword [0x10a7fbc]
jmp 0x102556f
mov edi, dword [ebp - 8]
lea edx, [edi + edi*2]
mov edx, dword [ecx + edx*8 + 4]
mov dword [ebp - 0x10], edx
mov ebx, 0x10a7f9c
cmp edi, dword [ecx]
jne 0x10255ee
cmp eax, esi
je 0x10255a4
test byte [eax + 0x1c], 8
je 0x10255a4
cmp byte [eax + 0x19], 2
jb 0x10255a4
push 0x1004db0
push 0x55
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov eax, dword [ebp + 0x10]
and dword [eax], 0
cmp dword [ebp - 0xc], 0
je 0x10255c3
push dword [0x10a7fbc]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
and dword [0x10a7fbc], 0
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x10a6184]
cmp eax, esi
mov edi, 0x80070005
je 0x1025642
test byte [eax + 0x1c], 1
je 0x1025642
cmp byte [eax + 0x19], 2
jb 0x1025642
push edi
push 0x1004db0
push 0x56
jmp 0x1025637
cmp dword [ebp - 0xc], 0
je 0x1025602
push ecx
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
and dword [0x10a7fbc], 0
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x10], 0
jne 0x1025649
mov eax, dword [ebp + 0x10]
and dword [eax], 0
mov eax, dword [0x10a6184]
cmp eax, esi
mov edi, 0x80070005
je 0x1025642
test byte [eax + 0x1c], 1
je 0x1025642
cmp byte [eax + 0x19], 2
jb 0x1025642
push edi
push 0x1004db0
push 0x57
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, edi
jmp 0x10258bb
mov edi, dword [ebp + 0x10]
push edi
push dword [ebp + 0xc]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call sub.iphlpapi.dll_SendARP
mov ebx, eax
test ebx, ebx
je 0x1025678
push ebx
call fcn.01009676
test eax, eax
mov dword [ebp + 8], eax
jl 0x1025675
mov dword [ebp + 8], 0x80004005
and dword [edi], 0
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x102581e
test byte [eax + 0x1c], 8
je 0x10257e3
movzx ecx, byte [eax + 0x19]
xor edx, edx
cmp dword [ebp + 8], edx
setl dl
dec edx
and edx, 3
inc edx
inc edx
cmp ecx, edx
jl 0x10257e3
push ebx
push dword [ebp + 8]
push 0x1004db0
push 0x58
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100ef6e
jmp 0x10257de
cmp ax, 0x17
jne 0x10257d4
mov esi, dword [0x10a6184]
mov edi, 0x10a6184
cmp esi, edi
je 0x1025702
test byte [esi + 0x1c], 8
je 0x1025702
cmp byte [esi + 0x19], 5
jb 0x1025702
push ebx
push 0x1004db0
push 0x59
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.01024a4b
mov esi, dword [0x10a6184]
push ebx
call fcn.010246ee
test eax, eax
je 0x102573a
cmp esi, edi
je 0x10257c9
test byte [esi + 0x1c], 8
je 0x10257c9
cmp byte [esi + 0x19], 5
jb 0x10257c9
push 0x1004db0
push 0x5a
push dword [esi + 0x14]
push dword [esi + 0x10]
jmp 0x1025348
push ebx
call fcn.01024739
test eax, eax
jne 0x102577e
mov eax, dword [ebp + 0x10]
and dword [eax], 0
mov eax, dword [0x10a6184]
cmp eax, edi
mov dword [ebp + 8], 0x80070005
je 0x102581e
test byte [eax + 0x1c], 8
je 0x10257e3
cmp byte [eax + 0x19], 2
jb 0x10257e3
push 0x1004db0
push 0x5b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
jmp 0x10257de
cmp esi, edi
je 0x10257a0
test byte [esi + 0x1c], 8
je 0x10257a0
cmp byte [esi + 0x19], 5
jb 0x10257a0
push 0x1004db0
push 0x5c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.01009ab7
mov cl, byte [ebx + 8]
mov eax, dword [ebp + 0xc]
xor cl, 2
mov byte [eax], cl
mov cl, byte [ebx + 9]
mov byte [eax + 1], cl
mov cl, byte [ebx + 0xa]
mov byte [eax + 2], cl
mov cl, byte [ebx + 0xd]
mov byte [eax + 3], cl
mov cl, byte [ebx + 0xe]
mov byte [eax + 4], cl
mov cl, byte [ebx + 0xf]
mov byte [eax + 5], cl
mov eax, dword [ebp + 0x10]
mov dword [eax], 6
jmp 0x10257de
and dword [ecx], 0
mov dword [ebp + 8], 0x8000ffff
mov eax, dword [0x10a6184]
cmp eax, 0x10a6184
je 0x102581e
test byte [eax + 0x1c], 1
je 0x102581e
movzx ecx, byte [eax + 0x19]
xor edx, edx
cmp dword [ebp + 8], edx
setl dl
dec edx
and edx, 3
inc edx
inc edx
cmp ecx, edx
jl 0x102581e
push dword [ebp + 0xc]
push dword [ebp + 8]
push 0x1004db0
push 0x5d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01024a76
mov eax, dword [ebp + 8]
jmp 0x10258bb
mov eax, dword [0x10a6184]
cmp eax, esi
mov ebx, 0x80070057
je 0x10258b9
test byte [eax + 0x1c], 8
je 0x1025857
cmp byte [eax + 0x19], 2
jb 0x1025857
push edi
push 0x45
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x10258b9
test byte [eax + 0x1c], 1
je 0x10258b9
cmp byte [eax + 0x19], 2
jb 0x10258b9
push ebx
push edi
push 0x46
jmp 0x10258ae
mov eax, dword [0x10a6184]
cmp eax, esi
mov ebx, 0x8000ffff
je 0x10258b9
test byte [eax + 0x1c], 8
je 0x102589a
cmp byte [eax + 0x19], 2
jb 0x102589a
push edi
push 0x43
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009ab7
mov eax, dword [0x10a6184]
cmp eax, esi
je 0x10258b9
test byte [eax + 0x1c], 1
je 0x10258b9
cmp byte [eax + 0x19], 2
jb 0x10258b9
push ebx
push edi
push 0x44
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0xc