Function at 0x49d470
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
push ebx
push esi
push edi
movzx edi, byte [edx]
lea eax, [edi - 9]
cmp eax, 0x75
ja case.0x49d48f.11
movzx eax, byte [eax + 0x49dac0]
jmp dword [eax*4 + 0x49da58]
movzx eax, byte [edx + 1]
mov esi, 1
test byte [eax + 0x72f7c8], 1
je 0x49d4bf
nop dword [eax + eax]
movzx ecx, byte [esi + edx + 1]
inc esi
test byte [ecx + 0x72f7c8], 1
jne 0x49d4b0
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword [ecx], 0x95
pop ebp
ret
cmp byte [edx + 1], 0x2d
jne 0x49d501
movzx eax, byte [edx + 2]
mov esi, 2
test eax, eax
je 0x49d4bf
cmp eax, 0xa
je 0x49d4bf
movzx eax, byte [esi + edx + 1]
inc esi
test eax, eax
jne 0x49d4e2
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword [ecx], 0x95
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x57
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x16
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x17
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 1
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x56
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x58
mov eax, 1
pop ebp
ret
cmp byte [edx + 1], 0x2a
jne 0x49d5b4
mov al, byte [edx + 2]
test al, al
je 0x49d5b4
mov ecx, 3
movzx esi, al
cmp esi, 0x2a
jne 0x49d593
cmp byte [ecx + edx], 0x2f
je 0x49d59e
movzx esi, byte [ecx + edx]
test esi, esi
je 0x49d59e
inc ecx
jmp 0x49d588
test esi, esi
lea eax, [ecx + 1]
pop edi
cmove eax, ecx
mov ecx, dword [ebp + 0xc]
pop esi
pop ebx
mov dword [ecx], 0x95
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x59
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x5a
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x4c
xor eax, eax
cmp byte [edx + 1], 0x3d
sete al
inc eax
pop ebp
ret
mov al, byte [edx + 1]
cmp al, 0x3d
jne 0x49d60c
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x4e
mov eax, 2
pop ebp
ret
cmp al, 0x3e
je 0x49d695
cmp al, 0x3c
mov eax, dword [ebp + 0xc]
jne 0x49d62b
pop edi
pop esi
mov dword [eax], 0x54
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [eax], 0x4f
mov eax, 1
pop ebx
pop ebp
ret
mov al, byte [edx + 1]
cmp al, 0x3d
jne 0x49d655
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x50
mov eax, 2
pop ebp
ret
cmp al, 0x3e
mov eax, dword [ebp + 0xc]
jne 0x49d66c
pop edi
pop esi
mov dword [eax], 0x55
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [eax], 0x4d
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [edx + 1], 0x3d
je 0x49d695
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x94
mov eax, 2
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x4b
mov eax, 2
pop ebp
ret
cmp byte [edx + 1], 0x7c
mov eax, dword [ebp + 0xc]
je 0x49d6c1
pop edi
pop esi
mov dword [eax], 0x53
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [eax], 0x5b
mov eax, 2
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x19
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x52
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x5d
mov eax, 1
pop ebp
ret
movzx ecx, byte [edx + 1]
mov esi, 1
test ecx, ecx
je 0x49d72f
cmp ecx, edi
jne 0x49d725
movzx eax, byte [edx + esi + 1]
cmp eax, edi
jne 0x49d72f
inc esi
movzx ecx, byte [esi + edx + 1]
inc esi
test ecx, ecx
jne 0x49d717
cmp ecx, 0x27
jne 0x49d745
mov eax, dword [ebp + 0xc]
pop edi
mov dword [eax], 0x5e
lea eax, [esi + 1]
pop esi
pop ebx
pop ebp
ret
test ecx, ecx
je 0x49d75a
mov eax, dword [ebp + 0xc]
pop edi
mov dword [eax], 0x1a
lea eax, [esi + 1]
pop esi
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword [ecx], 0x94
pop ebp
ret
movzx eax, byte [edx + 1]
test byte [eax + 0x72f7c8], 4
jne case.0x49d48f.48
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x76
mov eax, 1
pop ebp
ret
mov edi, dword [ebp + 0xc]
xor esi, esi
mov dword [edi], 0x81
movzx eax, byte [edx]
test byte [eax + 0x72f7c8], 4
je 0x49d7b0
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x72f7c8], 4
jne 0x49d7a1
cmp byte [esi + edx], 0x2e
jne 0x49d7e5
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x72f7c8], 4
je 0x49d7df
nop word [eax + eax]
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x72f7c8], 4
jne 0x49d7d0
mov dword [edi], 0x82
mov al, byte [esi + edx]
cmp al, 0x65
je 0x49d7f0
cmp al, 0x45
jne 0x49d845
mov cl, byte [esi + edx + 1]
movzx eax, cl
test byte [eax + 0x72f7c8], 4
jne 0x49d818
cmp cl, 0x2b
je 0x49d80a
cmp cl, 0x2d
jne 0x49d845
movzx eax, byte [esi + edx + 2]
test byte [eax + 0x72f7c8], 4
je 0x49d845
movzx eax, byte [esi + edx + 2]
add esi, 2
test byte [eax + 0x72f7c8], 4
je 0x49d83f
nop dword [eax]
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x72f7c8], 4
jne 0x49d830
mov dword [edi], 0x82
movzx eax, byte [esi + edx]
test byte [eax + 0x72f7c8], 0x46
je 0x49da4e
nop word [eax + eax]
inc esi
mov dword [edi], 0x94
movzx ecx, byte [esi + edx]
test byte [ecx + 0x72f7c8], 0x46
jne 0x49d860
pop edi
mov eax, esi
pop esi
pop ebx
pop ebp
ret
mov eax, 1
movzx ecx, byte [eax + edx]
test ecx, ecx
je 0x49d88e
inc eax
cmp ecx, 0x5d
jne 0x49d880
cmp ecx, 0x5d
mov esi, 0x1a
mov ecx, dword [ebp + 0xc]
mov edx, 0x94
pop edi
cmove edx, esi
pop esi
mov dword [ecx], edx
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov esi, 1
mov dword [eax], 0x85
movzx eax, byte [edx + 1]
test byte [eax + 0x72f7c8], 4
je 0x49da4e
nop word [eax + eax]
movzx ecx, byte [esi + edx + 1]
inc esi
test byte [ecx + 0x72f7c8], 4
jne 0x49d8d0
pop edi
mov eax, esi
pop esi
pop ebx
pop ebp
ret
movzx eax, byte [edx + 1]
mov esi, 1
test byte [eax + 0x72f7c8], 4
je case.0x49d48f.36
nop dword [eax + eax]
movzx ecx, byte [esi + edx + 1]
inc esi
test byte [ecx + 0x72f7c8], 4
jne 0x49d900
cmp esi, 1
jle case.0x49d48f.36
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword [ecx], 0x84
pop ebp
ret
mov edi, dword [ebp + 0xc]
xor esi, esi
mov dword [edi], 0x85
lea eax, [esi + 1]
movzx ecx, byte [edx + 1]
test ecx, ecx
je 0x49d975
nop word [eax + eax]
test byte [ecx + 0x72f7c8], 0x46
je 0x49d94c
inc esi
jmp 0x49d95d
cmp ecx, 0x28
je 0x49d969
cmp ecx, 0x3a
jne 0x49d96d
cmp byte [edx + eax + 1], cl
jne 0x49d96d
inc eax
movzx ecx, byte [eax + edx + 1]
inc eax
test ecx, ecx
jne 0x49d940
jmp 0x49d96d
test esi, esi
jg 0x49d980
test esi, esi
jne 0x49da50
mov dword [edi], 0x94
pop edi
pop esi
pop ebx
pop ebp
ret
mov bl, byte [eax + edx + 1]
inc eax
movzx ecx, bl
test bl, bl
je 0x49d99a
test byte [ecx + 0x72f7c8], 1
jne 0x49d99a
cmp ecx, 0x29
jne 0x49d980
cmp bl, 0x29
jne 0x49d975
pop edi
pop esi
inc eax
pop ebx
pop ebp
ret
cmp byte [edx + 1], 0x27
jne case.0x49d48f.11
mov eax, dword [ebp + 0xc]
mov ebx, 2
mov dword [eax], 0x83
movzx ecx, byte [edx + 2]
test ecx, ecx
je 0x49d9e8
cmp ecx, 0x27
je 0x49d9df
test byte [ecx + 0x72f7c8], 8
jne 0x49d9d5
mov dword [eax], 0x94
movzx ecx, byte [ebx + edx + 1]
inc ebx
test ecx, ecx
jne 0x49d9c1
test bl, 1
jne 0x49d9e8
test ecx, ecx
jne 0x49d9ee
mov dword [eax], 0x94
pop edi
lea eax, [ebx + 1]
test ecx, ecx
pop esi
cmove eax, ebx
pop ebx
pop ebp
ret
test byte [edi + 0x72f7c8], 0x46
jne 0x49da17
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov dword [eax], 0x94
mov eax, 1
pop ebp
ret
movzx eax, byte [edx + 1]
mov esi, 1
test byte [eax + 0x72f7c8], 0x46
je 0x49da3f
nop dword [eax]
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x72f7c8], 0x46
jne 0x49da30
push esi
push edx
call fcn.0047c890
mov ecx, dword [ebp + 0xc]
add esp, 8
mov dword [ecx], eax
mov eax, esi
pop edi
pop esi
pop ebx
pop ebp
ret