Function at 0x60956d84
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push edi
push esi
push ebx
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
movzx ecx, byte [esi]
lea eax, [ecx - 9]
cmp eax, 0x75
ja case.0x60956da2.11
jmp dword [eax*4 + 0x60956dac]
mov ebx, 1
movzx eax, byte [esi + 1]
mov edx, 0x60901170
test byte [eax + edx], 1
je 0x6095705d
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 1
jne 0x60956f9c
jmp 0x6095705d
cmp byte [esi + 1], 0x2d
jne 0x60956fd8
mov ebx, 2
movzx edx, byte [esi + 2]
jmp 0x60956fc5
inc ebx
movzx edx, byte [ebx + esi]
test edx, edx
je 0x6095705d
cmp edx, 0xa
jne 0x60956fc0
jmp 0x6095705d
mov dword [edi], 0x57
jmp 0x60957486
mov dword [edi], 0x16
jmp 0x60957486
mov dword [edi], 0x17
jmp 0x60957486
mov dword [edi], 1
jmp 0x60957486
mov dword [edi], 0x56
jmp 0x60957486
mov dword [edi], 0x58
jmp 0x60957486
cmp byte [esi + 1], 0x2a
jne 0x6095702c
cmp byte [esi + 2], 0
jne 0x60957038
mov dword [edi], 0x59
jmp 0x60957486
mov ebx, 3
movzx edx, byte [esi + 2]
jmp 0x60957045
inc ebx
cmp edx, 0x2a
jne 0x60957050
cmp byte [ebx + esi], 0x2f
je 0x60957058
movzx edx, byte [ebx + esi]
test edx, edx
jne 0x60957044
test edx, edx
je 0x6095705d
inc ebx
mov dword [edi], 0x95
mov eax, ebx
jmp 0x6095748b
mov dword [edi], 0x5a
jmp 0x60957486
mov dword [edi], 0x4c
mov eax, 1
cmp byte [esi + 1], 0x3d
jne 0x6095748b
mov eax, 2
jmp 0x6095748b
movzx edx, byte [esi + 1]
cmp edx, 0x3d
jne 0x609570b4
mov dword [edi], 0x4e
mov eax, 2
jmp 0x6095748b
cmp edx, 0x3e
je 0x60957134
cmp edx, 0x3c
jne 0x609570d0
mov dword [edi], 0x54
mov eax, 2
jmp 0x6095748b
mov dword [edi], 0x4f
jmp 0x60957486
movzx edx, byte [esi + 1]
cmp edx, 0x3d
jne 0x609570f8
mov dword [edi], 0x50
mov eax, 2
jmp 0x6095748b
cmp edx, 0x3e
jne 0x60957110
mov dword [edi], 0x55
mov eax, 2
jmp 0x6095748b
mov dword [edi], 0x4d
jmp 0x60957486
cmp byte [esi + 1], 0x3d
je 0x60957134
mov dword [edi], 0x94
mov eax, 2
jmp 0x6095748b
mov dword [edi], 0x4b
mov eax, 2
jmp 0x6095748b
cmp byte [esi + 1], 0x7c
je 0x60957158
mov dword [edi], 0x53
jmp 0x60957486
mov dword [edi], 0x5b
mov eax, 2
jmp 0x6095748b
mov dword [edi], 0x19
jmp 0x60957486
mov dword [edi], 0x52
jmp 0x60957486
mov dword [edi], 0x5d
jmp 0x60957486
mov ebx, 1
movzx edx, byte [esi + 1]
test edx, edx
je 0x609571c8
cmp edx, ecx
jne 0x609571ac
movzx eax, byte [esi + 2]
cmp eax, ecx
jne 0x609571c8
mov ebx, 2
mov esi, esi
inc ebx
movzx edx, byte [ebx + esi]
test edx, edx
je 0x609571c8
cmp edx, ecx
jne 0x609571ac
movzx eax, byte [esi + ebx + 1]
cmp eax, ecx
jne 0x609571c8
inc ebx
jmp 0x609571ac
cmp edx, 0x27
jne 0x609571dc
mov dword [edi], 0x5e
lea eax, [ebx + 1]
jmp 0x6095748b
test edx, edx
je 0x609573e6
mov dword [edi], 0x1a
lea eax, [ebx + 1]
jmp 0x6095748b
movzx eax, byte [esi + 1]
test byte [eax + 0x60901170], 4
jne case.0x60956da2.48
mov dword [edi], 0x76
jmp 0x60957486
mov dword [edi], 0x81
xor ebx, ebx
movzx eax, byte [esi]
mov edx, 0x60901170
test byte [eax + edx], 4
je 0x6095722f
mov esi, esi
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 4
jne 0x60957224
cmp byte [ebx + esi], 0x2e
jne 0x60957259
inc ebx
movzx eax, byte [ebx + esi]
mov edx, 0x60901170
test byte [eax + edx], 4
je 0x60957253
lea esi, [esi]
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 4
jne 0x60957248
mov dword [edi], 0x82
mov al, byte [ebx + esi]
cmp al, 0x65
je 0x60957264
cmp al, 0x45
jne 0x609572a1
movzx eax, byte [esi + ebx + 1]
mov edx, 0x60901170
test byte [eax + edx], 4
jne 0x6095728b
mov al, byte [esi + ebx + 1]
cmp al, 0x2b
je 0x60957280
cmp al, 0x2d
jne 0x609572a1
movzx eax, byte [esi + ebx + 2]
test byte [eax + edx], 4
je 0x609572a1
add ebx, 2
jmp 0x60957291
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 4
jne 0x60957290
mov dword [edi], 0x82
movzx eax, byte [ebx + esi]
mov edx, 0x60901170
test byte [eax + edx], 0x46
je 0x60957063
mov dword [edi], 0x94
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 0x46
jne 0x609572b4
jmp 0x60957063
mov ebx, 1
cmp ecx, 0x5d
je 0x609572f3
movzx edx, byte [esi + 1]
test edx, edx
je 0x609572ee
mov esi, esi
inc ebx
cmp edx, 0x5d
je 0x609572f3
movzx edx, byte [ebx + esi]
test edx, edx
jne 0x609572e0
cmp edx, 0x5d
jne 0x60957300
mov dword [edi], 0x1a
jmp 0x60957063
mov dword [edi], 0x94
jmp 0x60957063
mov dword [edi], 0x85
mov ebx, 1
movzx eax, byte [esi + 1]
mov edx, 0x60901170
test byte [eax + edx], 4
je 0x60957063
mov esi, esi
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 4
jne 0x6095732c
jmp 0x60957063
mov ebx, 1
movzx eax, byte [esi + 1]
mov edx, 0x60901170
test byte [eax + edx], 4
je 0x6095735b
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 4
jne 0x60957350
cmp ebx, 1
jle case.0x60956da2.36
mov dword [edi], 0x84
jmp 0x60957063
inc ebx
jmp 0x609573de
xor eax, eax
mov dword [edi], 0x85
mov ebx, 1
movzx edx, byte [esi + 1]
test edx, edx
je 0x609573de
lea esi, [esi]
mov ecx, 0x60901170
test byte [edx + ecx], 0x46
je 0x60957398
inc eax
jmp 0x609573d5
cmp edx, 0x28
jne 0x609573c8
test eax, eax
jle 0x609573c8
lea esi, [esi]
inc ebx
movzx edx, byte [ebx + esi]
test edx, edx
je 0x609573b8
test byte [edx + ecx], 1
jne 0x609573b8
cmp edx, 0x29
jne 0x609573a4
cmp edx, 0x29
je 0x6095736c
mov dword [edi], 0x94
jmp 0x609573de
cmp edx, 0x3a
jne 0x609573de
cmp byte [esi + ebx + 1], 0x3a
jne 0x609573de
inc ebx
inc ebx
movzx edx, byte [ebx + esi]
test edx, edx
jne 0x60957388
test eax, eax
jne 0x60957063
mov dword [edi], 0x94
jmp 0x60957063
cmp byte [esi + 1], 0x27
jne case.0x60956da2.11
mov dword [edi], 0x83
mov ebx, 2
movzx edx, byte [esi + 2]
jmp 0x60957420
test byte [edx + 0x60901170], 8
jne 0x6095741b
mov dword [edi], 0x94
inc ebx
movzx edx, byte [ebx + esi]
test edx, edx
je 0x60957429
cmp edx, 0x27
jne 0x6095740c
test bl, 1
jne 0x60957432
test edx, edx
jne 0x60957440
mov dword [edi], 0x94
test edx, edx
je 0x60957063
inc ebx
jmp 0x60957063
mov edx, 0x60901170
test byte [ecx + edx], 0x46
je 0x60957480
mov ebx, 1
movzx eax, byte [esi + 1]
test byte [eax + edx], 0x46
je 0x6095746f
mov esi, esi
inc ebx
movzx eax, byte [ebx + esi]
test byte [eax + edx], 0x46
jne 0x60957464
add esp, 0xfffffff8
push ebx
push esi
call sym._keywordCode
mov dword [edi], eax
jmp 0x60957063
mov dword [edi], 0x94
mov eax, 1
lea esp, [ebp - 0x18]
pop ebx
pop esi
pop edi
leave
ret