Function at 0x49bf50
Capabilities:
Parse pe header

Disassembly:
push ebx
push esi
mov esi, ecx
push edi
mov edi, edx
movzx ebx, byte [esi]
lea eax, [ebx - 9]
cmp eax, 0x75
ja case.0x49bf6d.11
movzx eax, byte [eax + 0x49c518]
jmp dword [eax*4 + 0x49c4b0]
movzx eax, byte [esi + 1]
mov edx, 1
test byte [eax + 0x571728], dl
je 0x49bf9f
nop word [eax + eax]
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x571728], 1
jne 0x49bf90
mov dword [edi], 0x95
mov eax, edx
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x2d
jne 0x49bfdb
movzx eax, byte [esi + 2]
mov ecx, 2
test eax, eax
je 0x49bfcf
nop
cmp eax, 0xa
je 0x49bfcf
movzx eax, byte [ecx + esi + 1]
inc ecx
test eax, eax
jne 0x49bfc0
mov dword [edi], 0x95
mov eax, ecx
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x57
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x16
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x17
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 1
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x56
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x58
mov eax, 1
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x2a
jne 0x49c071
mov cl, byte [esi + 2]
test cl, cl
je 0x49c071
mov eax, 3
movzx ecx, cl
nop word [eax + eax]
cmp ecx, 0x2a
jne 0x49c05b
cmp byte [eax + esi], 0x2f
je 0x49c066
movzx ecx, byte [eax + esi]
test ecx, ecx
je 0x49c067
inc eax
jmp 0x49c050
inc eax
mov dword [edi], 0x95
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x59
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5a
mov eax, 1
pop edi
pop esi
pop ebx
ret
xor eax, eax
mov dword [edi], 0x4c
cmp byte [esi + 1], 0x3d
pop edi
sete al
pop esi
inc eax
pop ebx
ret
movzx eax, byte [esi + 1]
cmp eax, 0x3d
jne 0x49c0bb
mov dword [edi], 0x4e
mov eax, 2
pop edi
pop esi
pop ebx
ret
cmp eax, 0x3e
jne 0x49c0cf
mov dword [edi], 0x4b
mov eax, 2
pop edi
pop esi
pop ebx
ret
cmp eax, 0x3c
jne 0x49c0e3
mov dword [edi], 0x54
mov eax, 2
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x4f
mov eax, 1
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
cmp eax, 0x3d
jne 0x49c10a
mov dword [edi], 0x50
mov eax, 2
pop edi
pop esi
pop ebx
ret
cmp eax, 0x3e
jne 0x49c11e
mov dword [edi], 0x55
mov eax, 2
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x4d
mov eax, 1
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x3d
mov eax, 2
je 0x49c142
mov dword [edi], 0x94
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x4b
pop edi
pop esi
pop ebx
ret
cmp byte [esi + 1], 0x7c
je 0x49c161
mov dword [edi], 0x53
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5b
mov eax, 2
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x19
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x52
mov eax, 1
pop edi
pop esi
pop ebx
ret
mov dword [edi], 0x5d
mov eax, 1
pop edi
pop esi
pop ebx
ret
movzx edx, byte [esi + 1]
mov ecx, 1
test edx, edx
je 0x49c1c8
nop word [eax + eax]
cmp edx, ebx
jne 0x49c1be
movzx eax, byte [esi + ecx + 1]
cmp eax, ebx
jne 0x49c1c8
inc ecx
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
jne 0x49c1b0
cmp edx, 0x27
jne 0x49c1da
mov dword [edi], 0x5e
lea eax, [ecx + 1]
pop edi
pop esi
pop ebx
ret
test edx, edx
je 0x49c3f0
mov dword [edi], 0x1a
lea eax, [ecx + 1]
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
test byte [eax + 0x571728], 4
jne case.0x49bf6d.48
mov dword [edi], 0x76
mov eax, 1
pop edi
pop esi
pop ebx
ret
xor edx, edx
mov dword [edi], 0x81
test byte [ebx + 0x571728], 4
je 0x49c22f
nop dword [eax]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x571728], 4
jne 0x49c220
cmp byte [edx + esi], 0x2e
jne 0x49c265
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x571728], 4
je 0x49c25f
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x571728], 4
jne 0x49c250
mov dword [edi], 0x82
mov al, byte [edx + esi]
cmp al, 0x65
je 0x49c270
cmp al, 0x45
jne 0x49c2c5
mov cl, byte [edx + esi + 1]
movzx eax, cl
test byte [eax + 0x571728], 4
jne 0x49c298
cmp cl, 0x2b
je 0x49c28a
cmp cl, 0x2d
jne 0x49c2c5
movzx eax, byte [edx + esi + 2]
test byte [eax + 0x571728], 4
je 0x49c2c5
movzx eax, byte [edx + esi + 2]
add edx, 2
test byte [eax + 0x571728], 4
je 0x49c2bf
nop dword [eax]
movzx eax, byte [edx + esi + 1]
inc edx
test byte [eax + 0x571728], 4
jne 0x49c2b0
mov dword [edi], 0x82
movzx eax, byte [edx + esi]
test byte [eax + 0x571728], 0x46
je 0x49c2e7
movzx ecx, byte [edx + esi + 1]
inc edx
mov dword [edi], 0x94
test byte [ecx + 0x571728], 0x46
jne 0x49c2d2
pop edi
pop esi
mov eax, edx
pop ebx
ret
mov eax, 1
cmp ebx, 0x5d
je 0x49c305
movzx ebx, byte [eax + esi]
test ebx, ebx
je 0x49c305
inc eax
cmp ebx, 0x5d
jne 0x49c2f7
cmp ebx, 0x5d
mov ecx, 0x94
mov edx, 0x1a
cmove ecx, edx
mov dword [edi], ecx
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
mov edx, 1
mov dword [edi], 0x85
test byte [eax + 0x571728], 4
je 0x49c2e7
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x571728], 4
jne 0x49c333
pop edi
pop esi
mov eax, edx
pop ebx
ret
movzx eax, byte [esi + 1]
mov edx, 1
test byte [eax + 0x571728], 4
je case.0x49bf6d.36
nop word [eax + eax]
movzx ecx, byte [edx + esi + 1]
inc edx
test byte [ecx + 0x571728], 4
jne 0x49c360
cmp edx, 1
jle case.0x49bf6d.36
mov dword [edi], 0x84
mov eax, edx
pop edi
pop esi
pop ebx
ret
movzx edx, byte [esi + 1]
xor ebx, ebx
mov dword [edi], 0x85
lea ecx, [ebx + 1]
test edx, edx
je 0x49c3f0
movzx eax, dl
test byte [eax + 0x571728], 0x46
je 0x49c3a2
inc ebx
jmp 0x49c3b3
cmp edx, 0x28
je 0x49c3bf
cmp edx, 0x3a
jne 0x49c3ec
cmp byte [esi + ecx + 1], dl
jne 0x49c3ec
inc ecx
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
jne 0x49c393
jmp 0x49c3ec
test ebx, ebx
jle 0x49c3ee
movzx edx, byte [ecx + esi + 1]
inc ecx
test edx, edx
je 0x49c3de
test byte [edx + 0x571728], 1
jne 0x49c3de
cmp edx, 0x29
jne 0x49c3c3
inc ecx
jmp 0x49c3ec
cmp edx, 0x29
jne 0x49c3e6
inc ecx
jmp 0x49c3ec
mov dword [edi], 0x94
test ebx, ebx
jne 0x49c3f6
mov dword [edi], 0x94
pop edi
pop esi
mov eax, ecx
pop ebx
ret
cmp byte [esi + 1], 0x27
jne case.0x49bf6d.11
movzx eax, byte [esi + 2]
mov ecx, 2
mov dword [edi], 0x83
test byte [eax + 0x571728], 8
je 0x49c42f
nop word [eax + eax]
movzx eax, byte [ecx + esi + 1]
inc ecx
test byte [eax + 0x571728], 8
jne 0x49c420
mov al, byte [ecx + esi]
cmp al, 0x27
jne 0x49c43b
test cl, 1
je 0x49c452
mov dword [edi], 0x94
test al, al
je 0x49c452
cmp al, 0x27
je 0x49c452
mov al, byte [ecx + esi + 1]
inc ecx
test al, al
jne 0x49c445
cmp byte [ecx + esi], 0
lea eax, [ecx + 1]
pop edi
pop esi
cmove eax, ecx
pop ebx
ret
test byte [ebx + 0x571728], 0x46
jne 0x49c478
mov dword [edi], 0x94
mov eax, 1
pop edi
pop esi
pop ebx
ret
movzx eax, byte [esi + 1]
mov ebx, 1
test byte [eax + 0x571728], 0x46
je 0x49c49f
nop word [eax + eax]
movzx ecx, byte [ebx + esi + 1]
inc ebx
test byte [ecx + 0x571728], 0x46
jne 0x49c490
mov edx, ebx
mov ecx, esi
call fcn.0049beb0
mov dword [edi], eax
mov eax, ebx
pop edi
pop esi
pop ebx
ret