Function at 0xfb470
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
or eax, 0xffffffff
push edi
mov word [ebp - 0x10], ax
xor eax, eax
xor edi, edi
push 0x64
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
mov word [ebp - 0xe], ax
call fcn.000f6b0f
mov ecx, dword [ebp + 0x10]
call fcn.000f4f30
mov ebx, dword [ebp + 0xc]
cmp word [ebx], di
je 0xfb69b
lea esp, [esp]
movzx eax, word [ebx + edi*2]
cmp eax, 0x20
je 0xfb54e
cmp eax, 9
je 0xfb54e
movzx eax, word [ebx + edi*2]
mov dword [ebp - 8], edi
test ax, ax
je 0xfb69b
mov esi, eax
mov word [ebp - 0xe], di
cmp esi, 0x30
jae 0xfb554
cmp esi, 0x2e
je 0xfb559
cmp esi, 0x41
jae 0xfb5b5
cmp esi, 0x61
jae 0xfb6d2
cmp esi, 0x5f
je 0xfb6db
mov eax, esi
cmp eax, 0x24
je case.0xfb528.64
cmp eax, 0x3d
je 0xfb717
sub eax, 0x1a
cmp eax, 0x44
ja case.0xfb528.27
movzx eax, byte [eax + 0xfba40]
jmp dword [eax*4 + 0xfb9f4]
push 0x4f
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
inc edi
jmp 0xfb4b0
cmp esi, 0x39
ja 0xfb4e1
mov edi, dword [ebp + 0x10]
mov eax, 0x40
mov ecx, dword [edi + 8]
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0xfb57c
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
movzx eax, word [eax + 8]
mov dword [ebp + 0xc], eax
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.000fc413
cmp al, 1
jne 0xfb960
cmp word [ebp + 0xc], 0x4a
je 0xfb8fc
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.000fba85
mov edi, dword [ebp - 8]
jmp 0xfb690
cmp esi, 0x5a
ja 0xfb4ef
jmp 0xfb6db
push dword [ebp + 0x10]
call fcn.000fbecc
test eax, eax
js 0xfb9ed
cmp esi, 0x24
jne 0xfb8b4
mov eax, 0x33
push eax
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
inc edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
call fcn.000fbcce
movzx esi, word [ebx + edi*2]
cmp si, 0x5a
jbe 0xfb63f
cmp si, 0x61
jb 0xfb647
cmp si, 0x7a
ja 0xfb647
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, 1
jg 0x163909
mov eax, dword [ebp - 0x24]
inc eax
push eax
lea ecx, [ebp - 0x28]
call fcn.000fbb85
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
inc eax
mov word [ecx + eax*2 - 2], si
xor edx, edx
mov dword [ebp - 0x24], eax
mov word [ecx + eax*2], dx
inc edi
jmp 0xfb5f6
cmp si, 0x41
jae 0xfb60c
jmp 0xfb600
cmp si, 0x30
jae 0xfb708
cmp si, 0x5f
je 0xfb60c
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], edi
je 0xfb9e4
lea ecx, [ebp - 0x28]
call fcn.000fbdfa
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.000fbc74
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
cmp word [ebx + edi*2], 0
jne 0xfb4b0
push 0x7f
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
mov word [ebp - 0xe], di
call fcn.000fba85
xor esi, esi
lea ecx, [ebp - 0x28]
call fcn.000fcb37
lea ecx, [ebp - 0x18]
call fcn.0010d8f5
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x7a
ja 0xfb4f8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.000fc6a5
cmp dword [ebp - 0x18], 0xffffffff
je 0x163963
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
mov edi, dword [ebp - 8]
jmp 0xfb690
cmp si, 0x39
ja 0xfb651
jmp 0xfb60c
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
lea ecx, [ebp - 0x18]
je 0x1638f9
push 0x41
call fcn.000fbbfc
jmp 0xfb684
push 0x4e
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
push 0x47
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
push 0x48
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
push 0x40
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 8]
push eax
push ebx
push dword [ebp + 8]
call fcn.000fc62c
lea ecx, [ebp - 0x18]
test eax, eax
js 0x16398c
push 0x36
call fcn.000fbbfc
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.000fbc74
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
mov edi, dword [ebp - 8]
jmp 0xfb690
push 0x4d
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0xfb684
inc edi
push 0x56
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.000fbbfc
jmp 0xfb684
push 0x49
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0xfb684
inc edi
push 0x52
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.000fbbfc
jmp 0xfb684
push 0x4c
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0xfb684
inc edi
push 0x55
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.000fbbfc
jmp 0xfb684
push 0x4b
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0xfb684
jmp 0x16385b
push 0x4a
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0xfb684
jmp 0x163848
mov eax, 0x32
jmp 0xfb5e1
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
lea ecx, [ebp - 0x18]
je 0xfb940
push 0x42
call fcn.000fbbfc
jmp 0xfb684
movzx eax, word [ebx + edi*2 + 2]
inc edi
mov dword [ebp - 8], edi
lea ecx, [ebp - 0x18]
sub eax, 0x3d
je 0xfb9cc
dec eax
je 0xfb950
push 0x43
call fcn.000fbbfc
jmp 0xfb684
cmp word [ebp - 0x10], 5
jne 0xfb5a2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
neg ecx
adc eax, 0
neg eax
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, 0x49
mov word [eax + 8], cx
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.000fba85
mov edi, dword [ebp - 8]
jmp 0xfb690
push 0x45
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
jmp 0xfb684
push 0x44
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
jmp 0xfb684
mov edi, dword [ebp - 8]
cmp esi, 0x2e
jne 0xfb4e6
inc edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
call fcn.000fbcce
movzx eax, word [ebx + edi*2]
cmp ax, 0x5a
jbe 0xfb99a
cmp ax, 0x61
jb 0xfb9a2
cmp ax, 0x7a
ja 0xfb9a2
push eax
lea ecx, [ebp - 0x28]
call fcn.000fc799
inc edi
jmp 0xfb978
cmp ax, 0x41
jae 0xfb98e
jmp 0xfb982
cmp ax, 0x30
jae 0xfb9dc
cmp ax, 0x5f
je 0xfb98e
cmp ax, 0x7f
ja 0xfb98e
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], edi
je 0xfb9e4
push 0x35
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
jmp 0xfb678
push 0x46
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
jmp 0xfb684
cmp ax, 0x39
jbe 0xfb98e
jmp 0xfb9a8
lea eax, [edi - 1]
push eax
jmp 0x1639a7
push edi
jmp 0x1639a7
inc edi
push 0x53
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.000fbbfc
jmp 0xfb684
inc edi
push 0x54
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.000fbbfc
jmp 0xfb684
push 0x51
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
push 0x57
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
push 0x58
lea ecx, [ebp - 0x18]
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
inc edi
mov dword [ebp - 8], edi
jmp 0xfb690
test edi, edi
jne case.0xfb528.27
cmp word [ebx + 2], di
jne case.0xfb528.27
mov eax, dword [ebp + 8]
cmp eax, dword [0x1b2110]
jl case.0xfb528.27
mov edi, 1
mov dword [ebp - 8], edi
jmp 0xfb690
push 0x50
call fcn.000fbbfc
inc edi
mov dword [ebp - 8], edi
jmp 0xfb684
dec eax
mov dword [ecx], eax
lea ecx, [ebp - 0x28]
call fcn.000f6b4a
mov eax, dword [ebp - 0x24]
add eax, 2
push eax
call fcn.000f6af6
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0010f4ea
mov edx, eax
mov eax, dword [ebp - 0x24]
add esp, 4
lea ecx, [eax*2 + 2]
push ecx
push dword [ebp - 0x28]
mov dword [ebp + 0xc], edx
push edx
call fcn.0010ee80
mov ecx, dword [ebp + 0xc]
add esp, 0xc
mov dword [ebp - 0x28], ecx
jmp 0xfb62a
push dword [ebp - 8]
push 0x138c
push dword [ebp + 8]
call fcn.001326bc
or esi, 0xffffffff
jmp 0xfb6b7
push edi
push 0x1388
push dword [ebp + 8]
call fcn.001326bc
lea ecx, [ebp - 0x18]
push 0x7f
call fcn.000fbbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.000fba85
or esi, 0xffffffff
jmp 0xfb6b7
push 0x138b
push dword [ebp + 8]
call fcn.001326bc
or esi, 0xffffffff
jmp 0xfb6b7