Function at 0x1009c530
Capabilities:
Parse pe header

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
mov ebx, eax
push esi
movzx esi, byte [ebx]
lea eax, [esi - 9]
cmp eax, 0x75
push edi
ja case.0x1009c552.34
movzx eax, byte [eax + 0x1009cb48]
mov cl, 4
jmp dword [eax*4 + 0x1009cae0]
movzx ecx, byte [ebx + 1]
mov dl, byte [ecx + 0x10182e08]
mov eax, 1
test al, dl
je 0x1009c581
lea esp, [esp]
movzx edx, byte [eax + ebx + 1]
mov cl, byte [edx + 0x10182e08]
inc eax
test cl, 1
jne 0x1009c570
pop edi
pop esi
mov dword [ebp], 0x95
pop ebp
pop ebx
ret
cmp byte [ebx + 1], 0x2d
jne 0x1009c5bb
movzx ecx, byte [ebx + 2]
test ecx, ecx
mov eax, 2
je 0x1009c5af
cmp ecx, 0xa
je 0x1009c5af
movzx ecx, byte [eax + ebx + 1]
inc eax
test ecx, ecx
jne 0x1009c5a0
pop edi
pop esi
mov dword [ebp], 0x95
pop ebp
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x57
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x16
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x17
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 1
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x56
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x58
pop ebp
mov eax, 1
pop ebx
ret
cmp byte [ebx + 1], 0x2a
jne 0x1009c659
mov cl, byte [ebx + 2]
test cl, cl
je 0x1009c659
mov eax, 3
movzx ecx, cl
cmp ecx, 0x2a
jne 0x1009c641
cmp byte [eax + ebx], 0x2f
je 0x1009c64c
movzx ecx, byte [eax + ebx]
test ecx, ecx
je 0x1009c64d
inc eax
jmp 0x1009c636
inc eax
pop edi
pop esi
mov dword [ebp], 0x95
pop ebp
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x59
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x5a
pop ebp
mov eax, 1
pop ebx
ret
mov dword [ebp], 0x4c
mov dl, byte [ebx + 1]
xor eax, eax
cmp dl, 0x3d
sete al
pop edi
pop esi
pop ebp
pop ebx
inc eax
ret
movzx eax, byte [ebx + 1]
cmp eax, 0x3d
jne 0x1009c6ad
pop edi
pop esi
mov dword [ebp], 0x4e
pop ebp
mov eax, 2
pop ebx
ret
cmp eax, 0x3e
jne 0x1009c6c3
pop edi
pop esi
mov dword [ebp], 0x4b
pop ebp
mov eax, 2
pop ebx
ret
cmp eax, 0x3c
jne 0x1009c6d9
pop edi
pop esi
mov dword [ebp], 0x54
pop ebp
mov eax, 2
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x4f
pop ebp
mov eax, 1
pop ebx
ret
movzx eax, byte [ebx + 1]
cmp eax, 0x3d
jne 0x1009c704
pop edi
pop esi
mov dword [ebp], 0x50
pop ebp
mov eax, 2
pop ebx
ret
cmp eax, 0x3e
jne 0x1009c71a
pop edi
pop esi
mov dword [ebp], 0x55
pop ebp
mov eax, 2
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x4d
pop ebp
mov eax, 1
pop ebx
ret
cmp byte [ebx + 1], 0x3d
mov eax, 2
jne 0x1009ca15
pop edi
pop esi
mov dword [ebp], 0x4b
pop ebp
pop ebx
ret
cmp byte [ebx + 1], 0x7c
je 0x1009c75d
pop edi
pop esi
mov dword [ebp], 0x53
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x5b
pop ebp
mov eax, 2
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x19
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x52
pop ebp
mov eax, 1
pop ebx
ret
pop edi
pop esi
mov dword [ebp], 0x5d
pop ebp
mov eax, 1
pop ebx
ret
movzx edx, byte [ebx + 1]
test edx, edx
mov eax, 1
je 0x1009c7c8
mov edi, edi
cmp edx, esi
jne 0x1009c7be
movzx ecx, byte [ebx + eax + 1]
cmp ecx, esi
jne 0x1009c7c8
inc eax
movzx edx, byte [eax + ebx + 1]
inc eax
test edx, edx
jne 0x1009c7b0
cmp edx, 0x27
jne 0x1009c7da
pop edi
pop esi
mov dword [ebp], 0x5e
pop ebp
inc eax
pop ebx
ret
test edx, edx
je 0x1009ca15
pop edi
pop esi
mov dword [ebp], 0x1a
pop ebp
inc eax
pop ebx
ret
movzx edx, byte [ebx + 1]
test byte [edx + 0x10182e08], cl
jne case.0x1009c552.24
pop edi
pop esi
mov dword [ebp], 0x76
pop ebp
mov eax, 1
pop ebx
ret
mov dword [ebp], 0x81
movzx edx, byte [ebx]
xor eax, eax
test byte [edx + 0x10182e08], cl
je 0x1009c82e
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
jne 0x1009c820
cmp byte [eax + ebx], 0x2e
jne 0x1009c857
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
je 0x1009c850
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
jne 0x1009c842
mov dword [ebp], 0x82
mov dl, byte [eax + ebx]
cmp dl, 0x65
je 0x1009c864
cmp dl, 0x45
jne 0x1009c8b5
mov dl, byte [eax + ebx + 1]
movzx esi, dl
test byte [esi + 0x10182e08], cl
jne 0x1009c88a
cmp dl, 0x2b
je 0x1009c87d
cmp dl, 0x2d
jne 0x1009c8b5
movzx edx, byte [eax + ebx + 2]
test byte [edx + 0x10182e08], cl
je 0x1009c8b5
movzx edx, byte [eax + ebx + 2]
add eax, 2
test byte [edx + 0x10182e08], cl
je 0x1009c8ae
lea ebx, [ebx]
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
jne 0x1009c8a0
mov dword [ebp], 0x82
movzx ecx, byte [eax + ebx]
mov dl, 0x46
test byte [ecx + 0x10182e08], dl
je 0x1009cada
jmp 0x1009c8d0
inc eax
mov dword [ebp], 0x94
movzx ecx, byte [eax + ebx]
test byte [ecx + 0x10182e08], dl
jne 0x1009c8d0
pop edi
pop esi
pop ebp
pop ebx
ret
mov ecx, esi
cmp ecx, 0x5d
mov eax, 1
je 0x1009c903
movzx ecx, byte [eax + ebx]
test ecx, ecx
je 0x1009c903
inc eax
cmp ecx, 0x5d
jne 0x1009c8f5
xor edx, edx
cmp ecx, 0x5d
setne dl
pop edi
pop esi
dec edx
and edx, 0xffffff86
add edx, 0x94
mov dword [ebp], edx
pop ebp
pop ebx
ret
mov dword [ebp], 0x85
movzx edx, byte [ebx + 1]
mov cl, 4
test byte [edx + 0x10182e08], cl
mov eax, 1
je 0x1009cada
jmp 0x1009c940
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
jne 0x1009c940
pop edi
pop esi
pop ebp
pop ebx
ret
movzx edx, byte [ebx + 1]
mov cl, 4
test byte [edx + 0x10182e08], cl
mov eax, 1
je case.0x1009c552.13
jmp 0x1009c970
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
jne 0x1009c970
cmp eax, 1
jle case.0x1009c552.13
pop edi
pop esi
mov dword [ebp], 0x84
pop ebp
pop ebx
ret
mov dword [ebp], 0x85
movzx ecx, byte [ebx + 1]
xor esi, esi
test ecx, ecx
mov eax, 1
je 0x1009ca15
mov dl, 0x46
jmp 0x1009c9b0
movzx edi, cl
test byte [edi + 0x10182e08], dl
je 0x1009c9be
inc esi
jmp 0x1009c9d0
cmp ecx, 0x28
je 0x1009c9dc
cmp ecx, 0x3a
jne 0x1009ca0d
cmp byte [ebx + eax + 1], 0x3a
jne 0x1009ca0d
inc eax
movzx ecx, byte [eax + ebx + 1]
inc eax
test ecx, ecx
jne 0x1009c9b0
jmp 0x1009ca0d
test esi, esi
jle 0x1009ca0f
movzx ecx, byte [eax + ebx + 1]
inc eax
test ecx, ecx
je 0x1009c9fe
movzx edx, cl
test byte [edx + 0x10182e08], 1
jne 0x1009c9fe
cmp ecx, 0x29
jne 0x1009c9e0
inc eax
jmp 0x1009ca0d
cmp ecx, 0x29
jne 0x1009ca06
inc eax
jmp 0x1009ca0d
mov dword [ebp], 0x94
test esi, esi
jne 0x1009cada
pop edi
pop esi
mov dword [ebp], 0x94
pop ebp
pop ebx
ret
cmp byte [ebx + 1], 0x27
jne case.0x1009c552.34
mov dword [ebp], 0x83
movzx edx, byte [ebx + 2]
mov cl, 8
test byte [edx + 0x10182e08], cl
mov eax, 2
je 0x1009ca4f
movzx edx, byte [eax + ebx + 1]
inc eax
test byte [edx + 0x10182e08], cl
jne 0x1009ca41
cmp byte [eax + ebx], 0x27
jne 0x1009ca66
mov ecx, eax
and ecx, 0x80000001
jns 0x1009ca64
dec ecx
or ecx, 0xfffffffe
inc ecx
je 0x1009ca82
mov dword [ebp], 0x94
mov cl, byte [eax + ebx]
test cl, cl
je 0x1009ca82
cmp cl, 0x27
je 0x1009ca82
mov cl, byte [eax + ebx + 1]
inc eax
test cl, cl
jne 0x1009ca74
cmp byte [eax + ebx], 0
je 0x1009cada
pop edi
pop esi
pop ebp
inc eax
pop ebx
ret
mov al, byte [esi + 0x10182e08]
mov dl, 0x46
test dl, al
jne 0x1009caab
pop edi
pop esi
mov dword [ebp], 0x94
pop ebp
mov eax, 1
pop ebx
ret
movzx eax, byte [ebx + 1]
test byte [eax + 0x10182e08], dl
mov edi, 1
je 0x1009cad0
lea esp, [esp]
movzx ecx, byte [edi + ebx + 1]
mov al, byte [ecx + 0x10182e08]
inc edi
test dl, al
jne 0x1009cac0
call fcn.1009c4a0
mov dword [ebp], eax
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret