Function at 0x4bf5e0
Capabilities:
Parse pe header

Disassembly:
push ebx
push esi
mov esi, ecx
push edi
mov edi, edx
mov cl, byte [esi]
movzx ebx, cl
movzx eax, byte [ebx + str.eeeeeeeee_a_ae_a_aeeeeeeeeeeeeeeeeee_a]
cmp eax, 0x1a
ja case.default.0x4bf5fc
jmp dword [eax*4 + 0x4bfb9c]
movzx eax, byte [esi + 1]
mov edx, 1
test byte [eax + 0x67fd50], dl
je 0x4bf62f
nop dword [eax]
nop dword [eax + eax]
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x67fd50], 1
jne 0x4bf620
mov dword [edi], 0xa3
mov eax, edx
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x2d
jne 0x4bf66b
movzx eax, byte [esi + 2]
mov ecx, 2
test eax, eax
je 0x4bf65f
nop
cmp eax, 0xa
je 0x4bf65f
movzx eax, byte [ecx + esi + 1]
inc ecx
test eax, eax
jne 0x4bf650
mov dword [edi], 0xa3
mov eax, ecx
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x59
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x16
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x17
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 1
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x58
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5a
mov eax, 1
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x2a
jne 0x4bf701
mov cl, byte [esi + 2]
test cl, cl
je 0x4bf701
mov eax, 3
movzx ecx, cl
nop word [eax + eax]
cmp ecx, 0x2a
jne 0x4bf6eb
cmp byte [eax + esi], 0x2f
je 0x4bf6f6
movzx ecx, byte [eax + esi]
test ecx, ecx
je 0x4bf6f7
inc eax
jmp 0x4bf6e0
inc eax
mov dword [edi], 0xa3
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5b
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5c
mov eax, 1
pop edi
pop esi
pop ebx
ret
xor eax, eax
mov dword [edi], 0x4e
cmp byte [esi + 1], 0x3d
pop edi
sete al
pop esi
inc eax
pop ebx
ret
movzx eax, byte [esi + 1]
cmp eax, 0x3d
jne 0x4bf74b
mov dword [edi], 0x50
mov eax, 2
pop edi
pop esi
pop ebx
ret
cmp eax, 0x3e
je 0x4bf7b8
cmp eax, 0x3c
jne 0x4bf764
mov dword [edi], 0x56
mov eax, 2
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x51
mov eax, 1
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
cmp eax, 0x3d
jne 0x4bf78b
mov dword [edi], 0x52
mov eax, 2
pop edi
pop esi
pop ebx
ret
cmp eax, 0x3e
jne 0x4bf79f
mov dword [edi], 0x57
mov eax, 2
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x4f
mov eax, 1
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x3d
jne case.default.0x4bf5fc
mov dword [edi], 0x4d
mov eax, 2
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x7c
je 0x4bf7dc
mov dword [edi], 0x55
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5d
mov eax, 2
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x1a
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x54
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5f
mov eax, 1
pop edi
pop esi
pop ebx
ret
movzx edx, byte [esi + 1]
mov ecx, 1
test edx, edx
je 0x4bf83d
cmp edx, ebx
jne 0x4bf833
movzx eax, byte [esi + ecx + 1]
cmp eax, ebx
jne 0x4bf83d
inc ecx
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
jne 0x4bf825
cmp edx, 0x27
jne 0x4bf84f
mov dword [edi], 0x61
lea eax, [ecx + 1]
pop edi
pop esi
pop ebx
ret
test edx, edx
je 0x4bfa9d
mov dword [edi], 0x1b
lea eax, [ecx + 1]
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
test byte [eax + 0x67fd50], 4
jne case.0x4bf5fc.3
mov dword [edi], 0x7a
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x86
cmp cl, 0x30
jne 0x4bf8d5
mov al, byte [esi + 1]
cmp al, 0x78
je 0x4bf896
cmp al, 0x58
jne 0x4bf8d5
movzx eax, byte [esi + 2]
test byte [eax + 0x67fd50], 8
je 0x4bf8d5
movzx eax, byte [esi + 3]
mov edx, 3
test byte [eax + 0x67fd50], 8
je 0x4bf8cf
nop word [eax + eax]
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x67fd50], 8
jne 0x4bf8c0
pop edi
pop esi
mov eax, edx
pop ebx
ret
xor edx, edx
test byte [ebx + 0x67fd50], 4
je 0x4bf8ef
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x67fd50], 4
jne 0x4bf8e0
cmp byte [edx + esi], 0x2e
jne 0x4bf925
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x67fd50], 4
je 0x4bf91f
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x67fd50], 4
jne 0x4bf910
mov dword [edi], 0x84
mov al, byte [edx + esi]
cmp al, 0x65
je 0x4bf930
cmp al, 0x45
jne 0x4bf985
mov cl, byte [edx + esi + 1]
movzx eax, cl
test byte [eax + 0x67fd50], 4
jne 0x4bf958
cmp cl, 0x2b
je 0x4bf94a
cmp cl, 0x2d
jne 0x4bf985
movzx eax, byte [edx + esi + 2]
test byte [eax + 0x67fd50], 4
je 0x4bf985
movzx eax, byte [edx + esi + 2]
add edx, 2
test byte [eax + 0x67fd50], 4
je 0x4bf97f
nop dword [eax]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x67fd50], 4
jne 0x4bf970
mov dword [edi], 0x84
movzx eax, byte [edx + esi]
test byte [eax + 0x67fd50], 0x46
je 0x4bf8cf
nop word [eax + eax]
movzx ecx, byte [edx + esi + 1]
inc edx
mov dword [edi], 0xa4
test byte [ecx + 0x67fd50], 0x46
jne 0x4bf9a0
pop edi
pop esi
mov eax, edx
pop ebx
ret
mov eax, 1
cmp ebx, 0x5d
je 0x4bf9d3
movzx ebx, byte [eax + esi]
test ebx, ebx
je 0x4bf9d3
inc eax
cmp ebx, 0x5d
jne 0x4bf9c5
cmp ebx, 0x5d
mov ecx, 0xa4
mov edx, 0x1b
cmove ecx, edx
mov dword [edi], ecx
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
mov edx, 1
mov dword [edi], 0x87
test byte [eax + 0x67fd50], 4
je 0x4bf8cf
nop word [eax + eax]
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x67fd50], 4
jne 0x4bfa10
pop edi
pop esi
mov eax, edx
pop ebx
ret
movzx edx, byte [esi + 1]
xor ebx, ebx
mov dword [edi], 0x87
lea ecx, [ebx + 1]
test edx, edx
je 0x4bfa9d
nop dword [eax + eax]
movzx eax, dl
test byte [eax + 0x67fd50], 0x46
je 0x4bfa4f
inc ebx
jmp 0x4bfa60
cmp edx, 0x28
je 0x4bfa6c
cmp edx, 0x3a
jne 0x4bfa99
cmp byte [esi + ecx + 1], dl
jne 0x4bfa99
inc ecx
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
jne 0x4bfa40
jmp 0x4bfa99
test ebx, ebx
jle 0x4bfa9b
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
je 0x4bfa8b
test byte [edx + 0x67fd50], 1
jne 0x4bfa8b
cmp edx, 0x29
jne 0x4bfa70
inc ecx
jmp 0x4bfa99
cmp edx, 0x29
jne 0x4bfa93
inc ecx
jmp 0x4bfa99
mov dword [edi], 0xa4
test ebx, ebx
jne 0x4bfaa3
mov dword [edi], 0xa4
pop edi
pop esi
mov eax, ecx
pop ebx
ret
movzx eax, byte [esi + 1]
mov ecx, 1
cmp byte [eax + str.eeeeeeeee_a_ae_a_aeeeeeeeeeeeeeeeeee_a], cl
ja 0x4bfacf
nop word [eax + eax]
movzx eax, byte [ecx + esi + 1]
inc ecx
cmp byte [eax + str.eeeeeeeee_a_ae_a_aeeeeeeeeeeeeeeeeee_a], 1
jbe 0x4bfac0
movzx eax, byte [ecx + esi]
test byte [eax + 0x67fd50], 0x46
je 0x4bfae2
inc ecx
jmp 0x4bfb65
mov edx, ecx
mov dword [edi], 0x1b
push edi
mov ecx, esi
call fcn.004bf520
add esp, 4
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x27
jne case.0x4bf5fc.2
movzx eax, byte [esi + 2]
mov ecx, 2
mov dword [edi], 0x85
test byte [eax + 0x67fd50], 8
je 0x4bfb2f
nop word [eax + eax]
movzx eax, byte [ecx + esi + 1]
inc ecx
test byte [eax + 0x67fd50], 8
jne 0x4bfb20
mov al, byte [ecx + esi]
cmp al, 0x27
jne 0x4bfb3b
test cl, 1
je 0x4bfb52
mov dword [edi], 0xa4
test al, al
je 0x4bfb52
cmp al, 0x27
je 0x4bfb52
mov al, byte [ecx + esi + 1]
inc ecx
test al, al
jne 0x4bfb45
cmp byte [ecx + esi], 0
lea eax, [ecx + 1]
pop edi
pop esi
cmove eax, ecx
pop ebx
ret
mov ecx, 1
movzx eax, byte [ecx + esi]
test byte [eax + 0x67fd50], 0x46
je 0x4bfb81
movzx eax, byte [ecx + esi + 1]
inc ecx
test byte [eax + 0x67fd50], 0x46
jne 0x4bfb72
mov dword [edi], 0x1b
mov eax, ecx
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0xa4
mov eax, 1
pop edi
pop esi
pop ebx
ret