Function at 0x10277650
Capabilities:
Parse pe header

Disassembly:
sub esp, 0x90
mov eax, dword [0x106499c8]
xor eax, esp
mov dword [esp + 0x8c], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0xa0]
push edi
mov ecx, dword [esi + 0x24]
xor edi, edi
mov eax, dword [ecx + 0x10]
or ebx, 0xffffffff
cmp byte [eax], 0x3c
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
jne 0x102779b7
cmp byte [eax + 1], 0x21
jne 0x102779b7
cmp byte [eax + 2], 0x45
jne 0x102779b7
cmp byte [eax + 3], 0x4c
jne 0x102779b7
cmp byte [eax + 4], 0x45
jne 0x102779b7
cmp byte [eax + 5], 0x4d
jne 0x102779b7
cmp byte [eax + 6], 0x45
jne 0x102779b7
cmp byte [eax + 7], 0x4e
jne 0x102779b7
cmp byte [eax + 8], 0x54
jne 0x102779b7
add dword [esi + 0xc8], 9
add dword [ecx + 0x10], 9
mov eax, dword [esi + 0x24]
add dword [eax + 0x20], 9
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x25
jne 0x10277701
push esi
call sym.php5.dll_xmlParserHandlePEReference
add esp, 4
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0
jne 0x10277727
push 0xfa
push ecx
call sym.php5.dll_xmlParserInputGrow
add esp, 8
test eax, eax
jg 0x10277727
push esi
call sym.php5.dll_xmlPopInput
add esp, 4
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x10]
mov al, byte [eax]
cmp al, 0x20
je 0x1027774f
cmp al, 9
jb 0x1027773b
cmp al, 0xa
jbe 0x1027774f
cmp al, 0xd
je 0x1027774f
push str.Space_required_after_ELEMENT_n
push 0x41
push esi
call fcn.1026f940
add esp, 0xc
push esi
call sym.php5.dll_xmlSkipBlankChars
push esi
call sym.php5.dll_xmlParseName
mov ebp, eax
add esp, 8
test ebp, ebp
jne 0x1027777c
push str.xmlParseElementDecl:_no_name_for_Element_n
push 0x44
push esi
call fcn.1026f940
add esp, 0xc
or eax, 0xffffffff
jmp 0x102779b9
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0
jne 0x102777a1
cmp dword [esi + 0x28], 1
jle 0x102777a1
push esi
call sym.php5.dll_xmlPopInput
mov eax, dword [esi + 0x24]
add esp, 4
mov eax, dword [eax + 0x10]
cmp byte [eax], 0
je 0x10277787
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x10]
mov al, byte [eax]
cmp al, 0x20
je 0x102777c9
cmp al, 9
jb 0x102777b5
cmp al, 0xa
jbe 0x102777c9
cmp al, 0xd
je 0x102777c9
push str.Space_required_after_the_element_name_n
push 0x41
push esi
call fcn.1026f940
add esp, 0xc
push esi
call sym.php5.dll_xmlSkipBlankChars
mov edx, dword [esi + 0x24]
add esp, 4
mov eax, dword [edx + 0x10]
mov cl, byte [eax]
cmp cl, 0x45
jne 0x1027784d
cmp byte [eax + 1], 0x4d
jne 0x1027784d
cmp byte [eax + 2], 0x50
jne 0x1027784d
cmp byte [eax + 3], 0x54
jne 0x1027784d
cmp byte [eax + 4], 0x59
jne 0x1027784d
add dword [esi + 0xc8], 5
add dword [edx + 0x10], 5
mov eax, dword [esi + 0x24]
add dword [eax + 0x20], 5
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x25
jne 0x1027781d
push esi
call sym.php5.dll_xmlParserHandlePEReference
add esp, 4
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0
jne 0x10277843
push 0xfa
push ecx
call sym.php5.dll_xmlParserInputGrow
add esp, 8
test eax, eax
jg 0x10277843
push esi
call sym.php5.dll_xmlPopInput
add esp, 4
mov ebx, 1
jmp 0x102778cf
cmp cl, 0x41
jne 0x102778b1
cmp byte [eax + 1], 0x4e
jne 0x102778b1
cmp byte [eax + 2], 0x59
jne 0x102778b1
add dword [esi + 0xc8], 3
add dword [edx + 0x10], 3
mov eax, dword [esi + 0x24]
add dword [eax + 0x20], 3
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x25
jne 0x10277884
push esi
call sym.php5.dll_xmlParserHandlePEReference
add esp, 4
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0
jne 0x102778aa
push 0xfa
push ecx
call sym.php5.dll_xmlParserInputGrow
add esp, 8
test eax, eax
jg 0x102778aa
push esi
call sym.php5.dll_xmlPopInput
add esp, 4
mov ebx, 2
jmp 0x102778cf
cmp cl, 0x28
jne 0x10277a30
lea eax, [esp + 0x10]
push eax
push ebp
push esi
call sym.php5.dll_xmlParseElementContentDecl
mov edi, dword [esp + 0x1c]
add esp, 0xc
mov ebx, eax
push esi
call sym.php5.dll_xmlSkipBlankChars
mov ecx, dword [esi + 0x24]
add esp, 4
mov ecx, dword [ecx + 0x10]
cmp byte [ecx], 0
jne 0x102778fd
cmp dword [esi + 0x28], 1
jle 0x102778fd
push esi
call sym.php5.dll_xmlPopInput
mov eax, dword [esi + 0x24]
add esp, 4
mov eax, dword [eax + 0x10]
cmp byte [eax], 0
je 0x102778e3
push esi
call sym.php5.dll_xmlSkipBlankChars
mov ecx, dword [esi + 0x24]
add esp, 4
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0x3e
je 0x102779d2
push 0x80
lea eax, [esp + 0x1d]
push 0
push eax
mov byte [esp + 0x24], 0
call sub.MSVCR110.dll_memset
add esp, 0xc
cmp dword [esi + 0xd4], 0
je 0x10277940
cmp dword [esi + 0xac], 0xffffffff
je 0x102779a7
push str.expected__
push 0x1061a878
lea eax, [esp + 0x20]
push 0x80
push eax
call dword [sym.imp.MSVCR110.dll__snprintf]
push 0
lea eax, [esp + 0x2c]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 3
push 0x49
push 1
push 0
push esi
push 0
push 0
push 0
mov dword [esi + 0x54], 0x49
call fcn.10260ef0
add esp, 0x54
cmp dword [esi + 0x120], 0
mov dword [esi + 0xc], 0
jne 0x102779a7
mov dword [esi + 0xd4], 1
test edi, edi
je 0x102779b7
push edi
push dword [esi + 8]
call fcn.10263f50
add esp, 8
mov eax, ebx
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10311bec
add esp, 0x90
ret
cmp dword [esp + 0x14], ecx
je 0x102779e8
push str.Element_declaration_doesnt_start_and_stop_in_the_same_entity_n
push 0x5a
push esi
call fcn.1026f940
add esp, 0xc
push esi
call sym.php5.dll_xmlNextChar
mov eax, dword [esi]
add esp, 4
test eax, eax
je 0x102779a7
cmp dword [esi + 0xd4], 0
jne 0x102779a7
cmp dword [eax + 0x24], 0
je 0x102779a7
test edi, edi
je 0x10277a11
mov dword [edi + 0x14], 0
mov eax, dword [esi]
push edi
mov eax, dword [eax + 0x24]
push ebx
push ebp
push dword [esi + 4]
call eax
add esp, 0x10
test edi, edi
je 0x102779b7
cmp dword [edi + 0x14], 0
jne 0x102779b7
jmp 0x102779ab
cmp cl, 0x25
jne 0x10277a58
cmp dword [esi + 0x60], edi
jne 0x10277a58
cmp dword [esi + 0x28], 1
jne 0x10277a58
push str.PEReference:_forbidden_within_markup_decl_in_internal_subset_n
push 0x15
push esi
call fcn.1026f940
add esp, 0xc
or eax, 0xffffffff
jmp 0x102779b9
push str.xmlParseElementDecl:_EMPTY__ANY_or___expected_n
push 0x36
push esi
call fcn.1026f940
add esp, 0xc
or eax, 0xffffffff
jmp 0x102779b9