Function at 0x100a1180
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
movzx edi, byte [ecx]
lea eax, [edi - 9]
cmp eax, 0x75
ja case.0x100a119e.34
movzx eax, byte [eax + 0x100a17d0]
mov dl, 4
jmp dword [eax*4 + 0x100a1768]
movzx esi, byte [ecx + 1]
mov edx, 1
mov eax, edx
test byte [esi + 0x1010afa0], dl
je 0x100a11ce
jmp 0x100a11c0
add eax, edx
movzx esi, byte [eax + ecx]
test byte [esi + 0x1010afa0], dl
jne 0x100a11c0
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x95
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x2d
jne 0x100a120d
movzx edx, byte [ecx + 2]
mov eax, 2
test edx, edx
je 0x100a11ff
nop
cmp edx, 0xa
je 0x100a11ff
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x100a11f0
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x95
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x57
mov eax, 1
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x16
mov eax, 1
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x17
mov eax, 1
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 1
mov eax, 1
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x56
mov eax, 1
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x58
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x2a
jne 0x100a12b9
mov dl, byte [ecx + 2]
test dl, dl
je 0x100a12b9
mov eax, 3
movzx edx, dl
cmp edx, 0x2a
jne 0x100a129f
cmp byte [eax + ecx], 0x2f
je 0x100a12aa
movzx edx, byte [eax + ecx]
test edx, edx
je 0x100a12ab
inc eax
jmp 0x100a1294
inc eax
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x95
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x59
mov eax, 1
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x5a
mov eax, 1
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
xor eax, eax
mov dword [edx], 0x4c
cmp byte [ecx + 1], 0x3d
pop edi
sete al
pop esi
pop ebx
inc eax
pop ebp
ret
movzx eax, byte [ecx + 1]
cmp eax, 0x3d
jne 0x100a1313
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x4e
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3e
jne 0x100a132b
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x4b
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3c
jne 0x100a1343
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x54
mov eax, 2
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x4f
mov eax, 1
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
cmp eax, 0x3d
jne 0x100a1372
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x50
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3e
jne 0x100a138a
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x55
mov eax, 2
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x4d
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x3d
mov eax, 2
je 0x100a13b6
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x94
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x4b
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x7c
je 0x100a13dd
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x53
mov eax, 1
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x5b
mov eax, 2
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x19
mov eax, 1
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x52
mov eax, 1
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x5d
mov eax, 1
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov eax, 1
test esi, esi
je 0x100a144e
cmp esi, edi
jne 0x100a1444
movzx edx, byte [ecx + eax + 1]
cmp edx, edi
jne 0x100a144e
inc eax
movzx esi, byte [eax + ecx + 1]
inc eax
test esi, esi
jne 0x100a1436
cmp esi, 0x27
jne 0x100a1462
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x5e
inc eax
pop ebx
pop ebp
ret
test esi, esi
je 0x100a13a8
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x1a
inc eax
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
test byte [eax + 0x1010afa0], dl
jne case.0x100a119e.24
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x76
mov eax, 1
pop ebx
pop ebp
ret
mov esi, dword [ebp + 8]
mov dword [esi], 0x81
movzx edi, byte [ecx]
xor eax, eax
test byte [edi + 0x1010afa0], dl
je 0x100a14be
mov edi, edi
movzx edi, byte [eax + ecx + 1]
inc eax
test byte [edi + 0x1010afa0], dl
jne 0x100a14b0
cmp byte [eax + ecx], 0x2e
jne 0x100a14e6
movzx edi, byte [eax + ecx + 1]
inc eax
test byte [edi + 0x1010afa0], dl
je 0x100a14e0
movzx edi, byte [eax + ecx + 1]
inc eax
test byte [edi + 0x1010afa0], dl
jne 0x100a14d2
mov dword [esi], 0x82
mov bl, byte [eax + ecx]
cmp bl, 0x65
je 0x100a14f3
cmp bl, 0x45
jne 0x100a1549
mov bl, byte [eax + ecx + 1]
movzx esi, bl
test byte [esi + 0x1010afa0], dl
jne 0x100a1519
cmp bl, 0x2b
je 0x100a150c
cmp bl, 0x2d
jne 0x100a1549
movzx esi, byte [eax + ecx + 2]
test byte [esi + 0x1010afa0], dl
je 0x100a1549
movzx esi, byte [eax + ecx + 2]
add eax, 2
test byte [esi + 0x1010afa0], dl
je 0x100a153e
lea esp, [esp]
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x1010afa0], dl
jne 0x100a1530
mov edx, dword [ebp + 8]
mov dword [edx], 0x82
jmp 0x100a154c
mov edx, dword [ebp + 8]
movzx esi, byte [eax + ecx]
mov bl, 0x46
test byte [esi + 0x1010afa0], bl
je 0x100a1761
mov edi, edi
inc eax
mov dword [edx], 0x94
movzx esi, byte [eax + ecx]
test byte [esi + 0x1010afa0], bl
jne 0x100a1560
pop edi
pop esi
pop ebx
pop ebp
ret
mov edx, edi
mov eax, 1
cmp edx, 0x5d
je 0x100a1592
movzx edx, byte [eax + ecx]
test edx, edx
je 0x100a1592
inc eax
cmp edx, 0x5d
jne 0x100a1584
mov ecx, dword [ebp + 8]
sub edx, 0x5d
neg edx
sbb edx, edx
pop edi
and edx, 0x7a
add edx, 0x1a
pop esi
mov dword [ecx], edx
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
mov dword [edx], 0x85
movzx esi, byte [ecx + 1]
mov dl, 4
mov eax, 1
test byte [esi + 0x1010afa0], dl
je 0x100a1761
lea esp, [esp]
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x1010afa0], dl
jne 0x100a15d0
pop edi
pop esi
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov dl, 4
mov eax, 1
test byte [esi + 0x1010afa0], dl
je case.0x100a119e.13
jmp 0x100a1600
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x1010afa0], dl
jne 0x100a1600
cmp eax, 1
jle case.0x100a119e.13
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov dword [ecx], 0x84
pop ebx
pop ebp
ret
mov edx, dword [ebp + 8]
mov dword [edx], 0x85
movzx edx, byte [ecx + 1]
xor esi, esi
lea eax, [esi + 1]
test edx, edx
je 0x100a16a4
mov bl, 0x46
lea esp, [esp]
movzx edi, dl
test byte [edi + 0x1010afa0], bl
je 0x100a164e
inc esi
jmp 0x100a165f
cmp edx, 0x28
je 0x100a166b
cmp edx, 0x3a
jne 0x100a169c
cmp byte [ecx + eax + 1], dl
jne 0x100a169c
inc eax
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x100a1640
jmp 0x100a169c
test esi, esi
jle 0x100a169e
nop
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
je 0x100a168b
test byte [edx + 0x1010afa0], 1
jne 0x100a168b
cmp edx, 0x29
jne 0x100a1670
inc eax
jmp 0x100a169c
cmp edx, 0x29
jne 0x100a1693
inc eax
jmp 0x100a169c
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x94
test esi, esi
jne 0x100a1761
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x94
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x27
jne case.0x100a119e.34
mov esi, dword [ebp + 8]
mov dword [esi], 0x83
movzx edx, byte [ecx + 2]
mov eax, 2
test edx, edx
je 0x100a16f0
mov bl, 8
cmp edx, 0x27
je 0x100a16f0
movzx edx, dl
test byte [edx + 0x1010afa0], bl
jne 0x100a16e6
mov dword [esi], 0x94
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x100a16d0
mov ecx, eax
and ecx, 0x80000001
jns 0x100a16ff
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x100a1705
test edx, edx
jne 0x100a170f
mov dword [esi], 0x94
test edx, edx
je 0x100a1761
pop edi
pop esi
inc eax
pop ebx
pop ebp
ret
mov bl, 0x46
test byte [edi + 0x1010afa0], bl
jne 0x100a1732
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x94
mov eax, 1
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
mov edi, 1
test byte [eax + 0x1010afa0], bl
je 0x100a1751
movzx edx, byte [edi + ecx + 1]
inc edi
test byte [edx + 0x1010afa0], bl
jne 0x100a1743
push ecx
call fcn.100a10a0
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
pop ebp
ret