Function at 0x1003d6e0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov edi, dword [ebp + 8]
mov dword [ebp - 0x18], ecx
movzx eax, word [edi]
mov dword [ebp - 0x14], eax
mov eax, 0xae7eb160
mov ebx, 0xd64aea73
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], ecx
jmp 0x1003d710
mov eax, 0xff3dd1cc
nop
cmp eax, 0x7d80cad5
jg 0x1003d840
cmp eax, 0x7b3b77ec
jg 0x1003d850
cmp eax, 0x76822d65
jg 0x1003d865
cmp eax, 0x6ce4df9c
jg 0x1003d87a
cmp eax, 0x62778bae
jg 0x1003d8b0
cmp eax, 0x5fa42fb8
jg 0x1003d8ca
cmp eax, 0x5b230121
jg 0x1003d8da
cmp eax, 0x52d0ef08
jg 0x1003d95e
cmp eax, 0x49ec67c4
jg 0x1003d994
cmp eax, 0x211745cd
jg 0x1003da39
cmp eax, 0x1d083f16
jg 0x1003da53
cmp eax, 0x10bf2e17
jg 0x1003da68
cmp eax, 0xf72aebe
jg 0x1003da7d
cmp eax, 0x601d2d1
jg 0x1003da9a
cmp eax, 0x2692a1e
jg 0x1003db12
cmp eax, 0xff3dd1cb
jg 0x1003db3f
cmp eax, 0xfe03bfa6
jg 0x1003db59
cmp eax, 0xe83aa60c
jg 0x1003db73
cmp eax, 0xddecdfe2
jg 0x1003db88
cmp eax, 0xd64aea72
jg 0x1003dbaa
cmp eax, 0xcfc6a205
jg 0x1003dbbf
cmp eax, 0xce7c2c76
jg 0x1003dbe7
cmp eax, 0xafc041a4
jg 0x1003dc09
cmp eax, 0x912efc23
je 0x1003dc1e
cmp eax, 0x922fe579
jne 0x1003dcad
mov al, byte [ebp - 0xd]
test al, al
mov eax, 0x211745ce
cmovne eax, ebx
jmp 0x1003d710
cmp eax, 0x7d80cad6
jne 0x1003d710
jmp 0x1003d70a
cmp eax, 0x7b3b77ed
jne 0x1003d710
mov eax, 0x49ec67c5
jmp 0x1003d710
cmp eax, 0x76822d66
jne 0x1003d710
mov eax, 0x5b230122
jmp 0x1003d710
cmp eax, 0x6ce4df9d
jne 0x1003d710
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x180]
mov ecx, dword [ebp - 0x1c]
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.1000fe90
mov eax, 0xafc041a5
xor esi, esi
jmp 0x1003d710
cmp eax, 0x62778baf
jne 0x1003d710
mov eax, 0x5fa42fb9
mov esi, 0xb
jmp 0x1003d710
cmp eax, 0x5fa42fb9
jne 0x1003d710
jmp 0x1003dcd7
cmp eax, 0x5b230122
jne 0x1003d710
mov eax, dword [ebp - 0x18]
movsd xmm0, qword [edi + 0x38]
movsd qword [eax + 0x80], xmm0
movsd xmm0, qword [edi + 0x30]
movsd qword [eax + 0x78], xmm0
movsd xmm0, qword [edi + 0x28]
movsd qword [eax + 0x70], xmm0
movsd xmm0, qword [edi + 0x20]
movsd qword [eax + 0x68], xmm0
movsd xmm0, qword [edi + 0x18]
movsd qword [eax + 0x60], xmm0
movsd xmm0, qword [edi + 0x10]
movsd qword [eax + 0x58], xmm0
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
movsd qword [eax + 0x50], xmm1
movsd qword [eax + 0x48], xmm0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x84]
cmp dword [eax + edi], 0x4550
lea eax, [eax + edi]
mov dword [ebp - 0x24], eax
setne byte [ebp - 0xe]
mov eax, 0xce7c2c77
jmp 0x1003d710
cmp eax, 0x52d0ef09
jne 0x1003d710
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x180]
mov ecx, dword [ebp - 0x1c]
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.1000fe90
mov eax, 0x6ce4df9d
xor esi, esi
jmp 0x1003d710
cmp eax, 0x49ec67c5
jne 0x1003d710
mov eax, dword [ebp - 0x18]
add eax, 0x88
mov edi, dword [ebp - 0x24]
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xf8
call fcn.1000fe90
mov eax, dword [ebp - 0x18]
movzx eax, word [eax + 0x8e]
imul ebx, eax, 0x28
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x18]
movzx eax, word [eax + 0x9c]
lea eax, [edi + eax + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.10043610
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x10], eax
mov edi, dword [0x1018c360]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0
call edi
sub esp, 0xc
mov edi, dword [ebp + 8]
mov ebx, 0xd64aea73
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x180], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x180], 0
setne byte [ebp - 0xd]
mov eax, 0x922fe579
jmp 0x1003d710
cmp eax, 0x211745ce
jne 0x1003d710
mov eax, 0x5fa42fb9
mov esi, 8
jmp 0x1003d710
cmp eax, 0x1d083f17
jne 0x1003d710
mov eax, 0x5fa42fb9
jmp 0x1003d710
cmp eax, 0x10bf2e18
jne 0x1003d710
mov eax, 0xf72aebf
jmp 0x1003d710
cmp eax, 0xf72aebf
jne 0x1003d710
cmp dword [edi + 0x3c], 0
setne byte [ebp - 0xf]
mov eax, 0xddecdfe3
jmp 0x1003d710
cmp eax, 0x601d2d2
jne 0x1003d710
mov eax, dword [ebp - 0x18]
movsd xmm0, qword [edi + 0x38]
movsd qword [eax + 0x80], xmm0
movsd xmm0, qword [edi + 0x30]
movsd qword [eax + 0x78], xmm0
movsd xmm0, qword [edi + 0x28]
movsd qword [eax + 0x70], xmm0
movsd xmm0, qword [edi + 0x20]
movsd qword [eax + 0x68], xmm0
movsd xmm0, qword [edi + 0x18]
movsd qword [eax + 0x60], xmm0
movsd xmm0, qword [edi + 0x10]
movsd qword [eax + 0x58], xmm0
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
movsd qword [eax + 0x50], xmm1
movsd qword [eax + 0x48], xmm0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x84]
add eax, edi
mov dword [ebp - 0x24], eax
mov eax, 0x5b230122
jmp 0x1003d710
cmp eax, 0x2692a1f
jne 0x1003d710
mov eax, dword [ebp - 0x24]
movzx ecx, word [eax + 0x18]
mov eax, 0x7d80cad6
cmp ecx, 0x10b
jne 0x1003d710
mov eax, 0xcfc6a206
jmp 0x1003d710
cmp eax, 0xff3dd1cc
jne 0x1003d710
mov eax, 0x1d083f17
mov esi, 0xb
jmp 0x1003d710
cmp eax, 0xfe03bfa7
jne 0x1003d710
mov eax, 0xff3dd1cc
mov esi, 0xb
jmp 0x1003d710
cmp eax, 0xe83aa60d
jne 0x1003d710
mov eax, 0xf72aebf
jmp 0x1003d710
cmp eax, 0xddecdfe3
jne 0x1003d710
mov al, byte [ebp - 0xf]
test al, al
mov eax, 0x62778baf
mov ecx, 0x76822d66
cmovne eax, ecx
jmp 0x1003d710
cmp eax, 0xd64aea73
jne 0x1003d710
mov eax, 0x6ce4df9d
jmp 0x1003d710
cmp eax, 0xcfc6a206
jne 0x1003d710
mov eax, 0x7b3b77ed
mov ecx, dword [ebp - 0x24]
cmp word [ecx + 6], 0
jne 0x1003d710
mov eax, 0x7d80cad6
jmp 0x1003d710
cmp eax, 0xce7c2c77
jne 0x1003d710
mov al, byte [ebp - 0xe]
test al, al
mov eax, 0x2692a1f
mov ecx, 0x7d80cad6
cmovne eax, ecx
jmp 0x1003d710
cmp eax, 0xafc041a5
jne 0x1003d710
mov eax, 0x5fa42fb9
jmp 0x1003d710
mov eax, dword [ebp - 0x18]
add eax, 0x88
mov edi, dword [ebp - 0x24]
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 8], 0xf8
call fcn.1000fe90
mov eax, dword [ebp - 0x18]
movzx eax, word [eax + 0x8e]
imul ebx, eax, 0x28
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x18]
movzx eax, word [eax + 0x9c]
lea eax, [edi + eax + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.10043610
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x10], eax
mov edi, dword [0x1018c360]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0
call edi
sub esp, 0xc
mov edi, dword [ebp + 8]
mov ebx, 0xd64aea73
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x180], eax
mov eax, dword [ebp - 0x18]
mov eax, 0x49ec67c5
jmp 0x1003d710
cmp eax, 0xae7eb160
jne 0x1003d710
mov ecx, dword [ebp - 0x14]
mov eax, 0x62778baf
cmp ecx, 0x5a4d
jne 0x1003dccd
mov eax, 0xe83aa60d
mov ebx, 0xd64aea73
jmp 0x1003d710
mov eax, esi
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 4