Function at 0x472c30
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
movzx edi, byte [ecx]
lea eax, [edi - 9]
cmp eax, 0x75
ja case.0x472c51.34
movzx eax, byte [eax + 0x47321c]
mov dl, 4
jmp dword [eax*4 + 0x4731b4]
movzx esi, byte [ecx + 1]
mov edx, 1
mov eax, edx
test byte [esi + 0x4b20e0], dl
je 0x472c7e
jmp 0x472c70
add eax, edx
movzx esi, byte [eax + ecx]
test byte [esi + 0x4b20e0], dl
jne 0x472c70
pop edi
pop esi
mov dword [ebx], 0x96
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x2d
jne 0x472cba
movzx edx, byte [ecx + 2]
mov eax, 2
test edx, edx
je 0x472caf
lea esp, [esp]
cmp edx, 0xa
je 0x472caf
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x472ca0
pop edi
pop esi
mov dword [ebx], 0x96
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x58
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x16
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x17
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 1
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x57
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x59
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x2a
jne 0x472d52
mov dl, byte [ecx + 2]
test dl, dl
je 0x472d52
mov eax, 3
movzx edx, dl
nop
cmp edx, 0x2a
jne 0x472d3b
cmp byte [eax + ecx], 0x2f
je 0x472d46
movzx edx, byte [eax + ecx]
test edx, edx
je 0x472d47
inc eax
jmp 0x472d30
inc eax
pop edi
pop esi
mov dword [ebx], 0x96
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5a
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5b
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
cmp byte [ecx + 1], 0x3d
pop edi
sete al
pop esi
mov dword [ebx], 0x4d
pop ebx
inc eax
pop ebp
ret
movzx eax, byte [ecx + 1]
cmp eax, 0x3d
jne 0x472da0
pop edi
pop esi
mov dword [ebx], 0x4f
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3e
jne 0x472db5
pop edi
pop esi
mov dword [ebx], 0x4c
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3c
jne 0x472dca
pop edi
pop esi
mov dword [ebx], 0x55
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x50
mov eax, 1
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
cmp eax, 0x3d
jne 0x472df3
pop edi
pop esi
mov dword [ebx], 0x51
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3e
jne 0x472e08
pop edi
pop esi
mov dword [ebx], 0x56
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x4e
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x3d
mov eax, 2
jne 0x4730e9
pop edi
pop esi
mov dword [ebx], 0x4c
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x7c
je 0x472e48
pop edi
pop esi
mov dword [ebx], 0x54
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5c
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x1a
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x53
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5e
mov eax, 1
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov eax, 1
test esi, esi
je 0x472ead
cmp esi, edi
jne 0x472ea3
movzx edx, byte [ecx + eax + 1]
cmp edx, edi
jne 0x472ead
inc eax
movzx esi, byte [eax + ecx + 1]
inc eax
test esi, esi
jne 0x472e95
cmp esi, 0x27
jne 0x472ebe
pop edi
pop esi
mov dword [ebx], 0x5f
inc eax
pop ebx
pop ebp
ret
test esi, esi
je 0x4730e9
pop edi
pop esi
mov dword [ebx], 0x1b
inc eax
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
test byte [eax + 0x4b20e0], dl
jne case.0x472c51.24
pop edi
pop esi
mov dword [ebx], 0x77
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
mov dword [ebx], 0x82
test byte [edi + 0x4b20e0], dl
je 0x472f0e
mov edi, edi
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
jne 0x472f00
cmp byte [eax + ecx], 0x2e
jne 0x472f36
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
je 0x472f30
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
jne 0x472f22
mov dword [ebx], 0x83
mov bl, byte [eax + ecx]
cmp bl, 0x65
je 0x472f43
cmp bl, 0x45
jne 0x472f99
mov bl, byte [eax + ecx + 1]
movzx esi, bl
test byte [esi + 0x4b20e0], dl
jne 0x472f69
cmp bl, 0x2b
je 0x472f5c
cmp bl, 0x2d
jne 0x472f99
movzx esi, byte [eax + ecx + 2]
test byte [esi + 0x4b20e0], dl
je 0x472f99
movzx esi, byte [eax + ecx + 2]
add eax, 2
test byte [esi + 0x4b20e0], dl
je 0x472f8e
lea esp, [esp]
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
jne 0x472f80
mov edx, dword [ebp + 8]
mov dword [edx], 0x83
jmp 0x472f9c
mov edx, dword [ebp + 8]
movzx esi, byte [eax + ecx]
mov bl, 0x46
test byte [esi + 0x4b20e0], bl
je 0x4731ae
mov edi, edi
movzx esi, byte [eax + ecx + 1]
inc eax
mov edi, 0x95
test byte [esi + 0x4b20e0], bl
jne 0x472fb0
mov dword [edx], edi
pop edi
pop esi
pop ebx
pop ebp
ret
mov edx, edi
mov eax, 1
cmp edx, 0x5d
je 0x472fe4
movzx edx, byte [eax + ecx]
test edx, edx
je 0x472fe4
inc eax
cmp edx, 0x5d
jne 0x472fd6
sub edx, 0x5d
neg edx
sbb edx, edx
and edx, 0x7a
pop edi
add edx, 0x1b
pop esi
mov dword [ebx], edx
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov dl, 4
mov dword [ebx], 0x86
mov eax, 1
test byte [esi + 0x4b20e0], dl
je 0x4731ae
jmp 0x473020
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
jne 0x473020
pop edi
pop esi
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov dl, 4
mov eax, 1
test byte [esi + 0x4b20e0], dl
je case.0x472c51.13
jmp 0x473050
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
jne 0x473050
cmp eax, 1
jle case.0x472c51.13
pop edi
pop esi
mov dword [ebx], 0x85
pop ebx
pop ebp
ret
movzx edx, byte [ecx + 1]
xor esi, esi
mov dword [ebx], 0x86
lea eax, [esi + 1]
test edx, edx
je 0x4730e9
mov bl, 0x46
movzx edi, dl
test byte [edi + 0x4b20e0], bl
je 0x473091
inc esi
jmp 0x4730a2
cmp edx, 0x28
je 0x4730ae
cmp edx, 0x3a
jne 0x4730de
cmp byte [ecx + eax + 1], dl
jne 0x4730de
inc eax
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x473083
jmp 0x4730de
test esi, esi
jle 0x4730e0
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
je 0x4730cd
test byte [edx + 0x4b20e0], 1
jne 0x4730cd
cmp edx, 0x29
jne 0x4730b2
inc eax
jmp 0x4730de
cmp edx, 0x29
jne 0x4730d5
inc eax
jmp 0x4730de
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x95
test esi, esi
jne 0x4731ae
mov ebx, dword [ebp + 8]
pop edi
pop esi
mov dword [ebx], 0x95
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x27
jne case.0x472c51.34
movzx esi, byte [ecx + 2]
mov dl, 8
mov dword [ebx], 0x84
mov eax, 2
test byte [esi + 0x4b20e0], dl
je 0x473121
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x4b20e0], dl
jne 0x473113
mov dl, byte [eax + ecx]
cmp dl, 0x27
jne 0x47313a
mov esi, eax
and esi, 0x80000001
jns 0x473138
dec esi
or esi, 0xfffffffe
inc esi
je 0x473152
mov dword [ebx], 0x95
test dl, dl
je 0x473152
cmp dl, 0x27
je 0x473152
mov dl, byte [eax + ecx + 1]
inc eax
test dl, dl
jne 0x473144
cmp byte [eax + ecx], 0
je 0x4731ae
pop edi
pop esi
inc eax
pop ebx
pop ebp
ret
mov bl, 0x46
test byte [edi + 0x4b20e0], bl
jne 0x47317b
mov edx, dword [ebp + 8]
pop edi
pop esi
mov dword [edx], 0x95
mov eax, 1
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
mov edi, 1
test byte [eax + 0x4b20e0], bl
je 0x47319e
lea esp, [esp]
movzx edx, byte [edi + ecx + 1]
inc edi
test byte [edx + 0x4b20e0], bl
jne 0x473190
push ecx
call fcn.00472b50
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
pop ebp
ret
add dword [ecx], edx
mov ecx, 0xcc3db257
adc dword [esi + 0x1010117], eax
adc dword [ecx + 0x1ff4287], edi
add dword [ebp - 0x46eedd0e], eax
dec edi
mov dl, 0x3d
ret