Function at 0x4a2920
Capabilities:
Parse pe header

Disassembly:
push ebx
push esi
mov esi, ecx
push edi
movzx ebx, byte [esi]
mov edi, edx
lea eax, [ebx - 9]
cmp eax, 0x75
ja case.0x4a293d.11
movzx eax, byte [eax + 0x4a2ef8]
jmp dword [eax*4 + 0x4a2e90]
movzx eax, byte [esi + 1]
mov edx, 1
test byte [eax + 0x64f338], dl
je 0x4a296f
jmp 0x4a2960
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x64f338], 1
jne 0x4a2960
mov dword [edi], 0x95
pop edi
pop esi
mov eax, edx
pop ebx
ret
cmp byte [esi + 1], 0x2d
jne 0x4a29ab
movzx eax, byte [esi + 2]
mov ecx, 2
test eax, eax
je 0x4a299f
mov edi, edi
cmp eax, 0xa
je 0x4a299f
movzx eax, byte [ecx + esi + 1]
inc ecx
test eax, eax
jne 0x4a2990
mov dword [edi], 0x95
pop edi
pop esi
mov eax, ecx
pop ebx
ret
mov dword [edi], 0x57
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x16
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x17
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 1
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x56
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x58
pop edi
pop esi
mov eax, 1
pop ebx
ret
cmp byte [esi + 1], 0x2a
jne 0x4a2a41
mov cl, byte [esi + 2]
test cl, cl
je 0x4a2a41
mov eax, 3
movzx ecx, cl
lea ebx, [ebx]
cmp ecx, 0x2a
jne 0x4a2a2b
cmp byte [eax + esi], 0x2f
je 0x4a2a36
movzx ecx, byte [eax + esi]
test ecx, ecx
je 0x4a2a37
inc eax
jmp 0x4a2a20
inc eax
mov dword [edi], 0x95
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x59
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x5a
pop edi
pop esi
mov eax, 1
pop ebx
ret
xor eax, eax
cmp byte [esi + 1], 0x3d
mov dword [edi], 0x4c
sete al
pop edi
pop esi
pop ebx
inc eax
ret
movzx eax, byte [esi + 1]
cmp eax, 0x3d
jne 0x4a2a8b
mov dword [edi], 0x4e
pop edi
pop esi
mov eax, 2
pop ebx
ret
cmp eax, 0x3e
jne 0x4a2a9f
mov dword [edi], 0x4b
pop edi
pop esi
mov eax, 2
pop ebx
ret
cmp eax, 0x3c
jne 0x4a2ab3
mov dword [edi], 0x54
pop edi
pop esi
mov eax, 2
pop ebx
ret
mov dword [edi], 0x4f
pop edi
pop esi
mov eax, 1
pop ebx
ret
movzx eax, byte [esi + 1]
cmp eax, 0x3d
jne 0x4a2ada
mov dword [edi], 0x50
pop edi
pop esi
mov eax, 2
pop ebx
ret
cmp eax, 0x3e
jne 0x4a2aee
mov dword [edi], 0x55
pop edi
pop esi
mov eax, 2
pop ebx
ret
mov dword [edi], 0x4d
pop edi
pop esi
mov eax, 1
pop ebx
ret
cmp byte [esi + 1], 0x3d
mov eax, 2
je 0x4a2b12
mov dword [edi], 0x94
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x4b
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x7c
je 0x4a2b31
mov dword [edi], 0x53
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x5b
pop edi
pop esi
mov eax, 2
pop ebx
ret
mov dword [edi], 0x19
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x52
pop edi
pop esi
mov eax, 1
pop ebx
ret
mov dword [edi], 0x5d
pop edi
pop esi
mov eax, 1
pop ebx
ret
movzx edx, byte [esi + 1]
mov ecx, 1
test edx, edx
je 0x4a2b98
lea ebx, [ebx]
cmp edx, ebx
jne 0x4a2b8e
movzx eax, byte [esi + ecx + 1]
cmp eax, ebx
jne 0x4a2b98
inc ecx
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
jne 0x4a2b80
cmp edx, 0x27
jne 0x4a2baa
mov dword [edi], 0x5e
pop edi
pop esi
lea eax, [ecx + 1]
pop ebx
ret
test edx, edx
je 0x4a2dc0
mov dword [edi], 0x1a
pop edi
pop esi
lea eax, [ecx + 1]
pop ebx
ret
movzx eax, byte [esi + 1]
test byte [eax + 0x64f338], 4
jne case.0x4a293d.48
mov dword [edi], 0x76
pop edi
pop esi
mov eax, 1
pop ebx
ret
xor edx, edx
test byte [ebx + 0x64f338], 4
mov dword [edi], 0x81
je 0x4a2bff
lea esp, [esp]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x64f338], 4
jne 0x4a2bf0
cmp byte [edx + esi], 0x2e
jne 0x4a2c35
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x64f338], 4
je 0x4a2c2f
jmp 0x4a2c20
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x64f338], 4
jne 0x4a2c20
mov dword [edi], 0x82
mov al, byte [edx + esi]
cmp al, 0x65
je 0x4a2c40
cmp al, 0x45
jne 0x4a2c95
mov cl, byte [edx + esi + 1]
movzx eax, cl
test byte [eax + 0x64f338], 4
jne 0x4a2c68
cmp cl, 0x2b
je 0x4a2c5a
cmp cl, 0x2d
jne 0x4a2c95
movzx eax, byte [edx + esi + 2]
test byte [eax + 0x64f338], 4
je 0x4a2c95
movzx eax, byte [edx + esi + 2]
add edx, 2
test byte [eax + 0x64f338], 4
je 0x4a2c8f
lea esp, [esp]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x64f338], 4
jne 0x4a2c80
mov dword [edi], 0x82
movzx eax, byte [edx + esi]
test byte [eax + 0x64f338], 0x46
je 0x4a2cb7
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x64f338], 0x46
mov dword [edi], 0x94
jne 0x4a2ca2
pop edi
pop esi
mov eax, edx
pop ebx
ret
mov eax, 1
cmp ebx, 0x5d
je 0x4a2cd5
movzx ebx, byte [eax + esi]
test ebx, ebx
je 0x4a2cd5
inc eax
cmp ebx, 0x5d
jne 0x4a2cc7
cmp ebx, 0x5d
mov ecx, 0x94
mov edx, 0x1a
cmove ecx, edx
mov dword [edi], ecx
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
mov dword [edi], 0x85
test byte [eax + 0x64f338], 4
mov edx, 1
je 0x4a2cb7
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x64f338], 4
jne 0x4a2d03
pop edi
pop esi
mov eax, edx
pop ebx
ret
movzx eax, byte [esi + 1]
mov edx, 1
test byte [eax + 0x64f338], 4
je case.0x4a293d.36
lea ebx, [ebx]
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x64f338], 4
jne 0x4a2d30
cmp edx, 1
jle case.0x4a293d.36
mov dword [edi], 0x84
pop edi
pop esi
mov eax, edx
pop ebx
ret
movzx edx, byte [esi + 1]
xor ebx, ebx
mov dword [edi], 0x85
lea ecx, [ebx + 1]
test edx, edx
je 0x4a2dc0
movzx eax, dl
test byte [eax + 0x64f338], 0x46
je 0x4a2d72
inc ebx
jmp 0x4a2d83
cmp edx, 0x28
je 0x4a2d8f
cmp edx, 0x3a
jne 0x4a2dbc
cmp byte [esi + ecx + 1], dl
jne 0x4a2dbc
inc ecx
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
jne 0x4a2d63
jmp 0x4a2dbc
test ebx, ebx
jle 0x4a2dbe
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
je 0x4a2dae
test byte [edx + 0x64f338], 1
jne 0x4a2dae
cmp edx, 0x29
jne 0x4a2d93
inc ecx
jmp 0x4a2dbc
cmp edx, 0x29
jne 0x4a2db6
inc ecx
jmp 0x4a2dbc
mov dword [edi], 0x94
test ebx, ebx
jne 0x4a2dc6
mov dword [edi], 0x94
pop edi
pop esi
mov eax, ecx
pop ebx
ret
cmp byte [esi + 1], 0x27
jne case.0x4a293d.11
movzx eax, byte [esi + 2]
mov dword [edi], 0x83
test byte [eax + 0x64f338], 8
mov ecx, 2
je 0x4a2dff
lea ebx, [ebx]
movzx eax, byte [ecx + esi + 1]
inc ecx
test byte [eax + 0x64f338], 8
jne 0x4a2df0
mov dl, byte [ecx + esi]
cmp dl, 0x27
jne 0x4a2e17
mov eax, ecx
and eax, 0x80000001
jns 0x4a2e15
dec eax
or eax, 0xfffffffe
inc eax
je 0x4a2e2f
mov dword [edi], 0x94
test dl, dl
je 0x4a2e2f
cmp dl, 0x27
je 0x4a2e2f
mov dl, byte [ecx + esi + 1]
inc ecx
test dl, dl
jne 0x4a2e21
cmp byte [ecx + esi], 0
je 0x4a2e36
inc ecx
pop edi
pop esi
mov eax, ecx
pop ebx
ret
test byte [ebx + 0x64f338], 0x46
jne 0x4a2e54
mov dword [edi], 0x94
pop edi
pop esi
mov eax, 1
pop ebx
ret
movzx eax, byte [esi + 1]
mov ebx, 1
test byte [eax + 0x64f338], 0x46
je 0x4a2e7f
jmp 0x4a2e70
movzx ecx, byte [ebx + esi + 1]
inc ebx
test byte [ecx + 0x64f338], 0x46
jne 0x4a2e70
mov edx, ebx
mov ecx, esi
call fcn.004a2870
mov dword [edi], eax
pop edi
pop esi
mov eax, ebx
pop ebx
ret