Function at 0x1004d040
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
push esi
push edi
movzx ecx, byte [edx]
lea eax, [ecx - 9]
cmp eax, 0x75
ja case.0x1004d05e.11
movzx eax, byte [eax + 0x1004d69c]
jmp dword [eax*4 + 0x1004d634]
movzx eax, byte [edx + 1]
mov esi, 1
test byte [eax + 0x10094ae0], 1
je 0x1004d08f
jmp 0x1004d080
movzx ecx, byte [esi + edx + 1]
inc esi
test byte [ecx + 0x10094ae0], 1
jne 0x1004d080
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
mov dword [ecx], 0x95
pop ebp
ret
cmp byte [edx + 1], 0x2d
jne 0x1004d0cf
movzx eax, byte [edx + 2]
mov esi, 2
test eax, eax
je 0x1004d08f
cmp eax, 0xa
je 0x1004d08f
movzx eax, byte [esi + edx + 1]
inc esi
test eax, eax
jne 0x1004d0b1
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
mov dword [ecx], 0x95
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x57
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x16
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x17
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 1
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x56
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x58
mov eax, 1
pop ebp
ret
cmp byte [edx + 1], 0x2a
jne 0x1004d174
mov cl, byte [edx + 2]
test cl, cl
je 0x1004d174
mov eax, 3
movzx ecx, cl
cmp ecx, 0x2a
jne 0x1004d15b
cmp byte [eax + edx], 0x2f
je 0x1004d166
movzx ecx, byte [eax + edx]
test ecx, ecx
je 0x1004d167
inc eax
jmp 0x1004d150
inc eax
mov ecx, dword [ebp + 0xc]
pop edi
pop esi
mov dword [ecx], 0x95
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x59
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x5a
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x4c
xor eax, eax
cmp byte [edx + 1], 0x3d
sete al
inc eax
pop ebp
ret
movzx eax, byte [edx + 1]
cmp eax, 0x3d
jne 0x1004d1ca
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x4e
mov eax, 2
pop ebp
ret
cmp eax, 0x3e
jne 0x1004d1e1
mov eax, dword [ebp + 0xc]
pop edi
mov dword [eax], 0x4b
mov eax, 2
pop esi
pop ebp
ret
cmp eax, 0x3c
mov eax, dword [ebp + 0xc]
jne 0x1004d1f8
pop edi
mov dword [eax], 0x54
mov eax, 2
pop esi
pop ebp
ret
pop edi
mov dword [eax], 0x4f
mov eax, 1
pop esi
pop ebp
ret
movzx eax, byte [edx + 1]
cmp eax, 0x3d
jne 0x1004d222
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x50
mov eax, 2
pop ebp
ret
cmp eax, 0x3e
mov eax, dword [ebp + 0xc]
jne 0x1004d239
pop edi
mov dword [eax], 0x55
mov eax, 2
pop esi
pop ebp
ret
pop edi
mov dword [eax], 0x4d
mov eax, 1
pop esi
pop ebp
ret
cmp byte [edx + 1], 0x3d
mov eax, dword [ebp + 0xc]
je 0x1004d1d2
pop edi
mov dword [eax], 0x94
mov eax, 2
pop esi
pop ebp
ret
cmp byte [edx + 1], 0x7c
mov eax, dword [ebp + 0xc]
je 0x1004d278
pop edi
mov dword [eax], 0x53
mov eax, 1
pop esi
pop ebp
ret
pop edi
mov dword [eax], 0x5b
mov eax, 2
pop esi
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x19
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x52
mov eax, 1
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x5d
mov eax, 1
pop ebp
ret
movzx edi, byte [edx + 1]
mov esi, 1
test edi, edi
je 0x1004d2e8
lea ebx, [ebx]
cmp edi, ecx
jne 0x1004d2de
movzx eax, byte [edx + esi + 1]
cmp eax, ecx
jne 0x1004d2e8
inc esi
movzx edi, byte [esi + edx + 1]
inc esi
test edi, edi
jne 0x1004d2d0
cmp edi, 0x27
jne 0x1004d2fd
mov eax, dword [ebp + 0xc]
pop edi
mov dword [eax], 0x5e
lea eax, [esi + 1]
pop esi
pop ebp
ret
test edi, edi
je 0x1004d311
mov eax, dword [ebp + 0xc]
pop edi
mov dword [eax], 0x1a
lea eax, [esi + 1]
pop esi
pop ebp
ret
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
mov dword [ecx], 0x94
pop ebp
ret
movzx eax, byte [edx + 1]
test byte [eax + 0x10094ae0], 4
jne case.0x1004d05e.48
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x76
mov eax, 1
pop ebp
ret
mov edi, dword [ebp + 0xc]
xor esi, esi
mov dword [edi], 0x81
movzx eax, byte [edx]
test byte [eax + 0x10094ae0], 4
je 0x1004d36f
jmp 0x1004d360
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x10094ae0], 4
jne 0x1004d360
cmp byte [esi + edx], 0x2e
jne 0x1004d3a5
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x10094ae0], 4
je 0x1004d39f
jmp 0x1004d390
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x10094ae0], 4
jne 0x1004d390
mov dword [edi], 0x82
mov al, byte [esi + edx]
cmp al, 0x65
je 0x1004d3b0
cmp al, 0x45
jne 0x1004d405
mov cl, byte [esi + edx + 1]
movzx eax, cl
test byte [eax + 0x10094ae0], 4
jne 0x1004d3d8
cmp cl, 0x2b
je 0x1004d3ca
cmp cl, 0x2d
jne 0x1004d405
movzx eax, byte [esi + edx + 2]
test byte [eax + 0x10094ae0], 4
je 0x1004d405
movzx eax, byte [esi + edx + 2]
add esi, 2
test byte [eax + 0x10094ae0], 4
je 0x1004d3ff
lea esp, [esp]
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x10094ae0], 4
jne 0x1004d3f0
mov dword [edi], 0x82
movzx eax, byte [esi + edx]
test byte [eax + 0x10094ae0], 0x46
je 0x1004d62e
jmp 0x1004d420
inc esi
mov dword [edi], 0x94
movzx ecx, byte [esi + edx]
test byte [ecx + 0x10094ae0], 0x46
jne 0x1004d420
pop edi
mov eax, esi
pop esi
pop ebp
ret
mov eax, 1
cmp ecx, 0x5d
je 0x1004d452
movzx ecx, byte [eax + edx]
test ecx, ecx
je 0x1004d452
inc eax
cmp ecx, 0x5d
jne 0x1004d444
cmp ecx, 0x5d
mov esi, 0x1a
mov ecx, dword [ebp + 0xc]
mov edx, 0x94
cmove edx, esi
pop edi
pop esi
mov dword [ecx], edx
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov esi, 1
mov dword [eax], 0x85
movzx eax, byte [edx + 1]
test byte [eax + 0x10094ae0], 4
je 0x1004d62e
lea ebx, [ebx]
movzx ecx, byte [esi + edx + 1]
inc esi
test byte [ecx + 0x10094ae0], 4
jne 0x1004d490
pop edi
mov eax, esi
pop esi
pop ebp
ret
movzx eax, byte [edx + 1]
mov esi, 1
test byte [eax + 0x10094ae0], 4
je case.0x1004d05e.36
jmp 0x1004d4c0
movzx ecx, byte [esi + edx + 1]
inc esi
test byte [ecx + 0x10094ae0], 4
jne 0x1004d4c0
cmp esi, 1
jle case.0x1004d05e.36
mov ecx, dword [ebp + 0xc]
mov eax, esi
pop edi
pop esi
mov dword [ecx], 0x84
pop ebp
ret
mov edi, dword [ebp + 0xc]
xor esi, esi
push ebx
mov dword [edi], 0x85
lea ecx, [esi + 1]
movzx ebx, byte [edx + 1]
test ebx, ebx
je 0x1004d55d
lea ebx, [ebx]
movzx eax, bl
test byte [eax + 0x10094ae0], 0x46
je 0x1004d50f
inc esi
jmp 0x1004d520
cmp ebx, 0x28
je 0x1004d52c
cmp ebx, 0x3a
jne 0x1004d559
cmp byte [edx + ecx + 1], bl
jne 0x1004d559
inc ecx
movzx ebx, byte [ecx + edx + 1]
inc ecx
test ebx, ebx
jne 0x1004d500
jmp 0x1004d559
test esi, esi
jle 0x1004d55b
movzx ebx, byte [ecx + edx + 1]
inc ecx
test ebx, ebx
je 0x1004d54b
test byte [ebx + 0x10094ae0], 1
jne 0x1004d54b
cmp ebx, 0x29
jne 0x1004d530
inc ecx
jmp 0x1004d559
cmp ebx, 0x29
jne 0x1004d553
inc ecx
jmp 0x1004d559
mov dword [edi], 0x94
test esi, esi
jne 0x1004d563
mov dword [edi], 0x94
pop ebx
pop edi
mov eax, ecx
pop esi
pop ebp
ret
cmp byte [edx + 1], 0x27
jne case.0x1004d05e.11
mov esi, dword [ebp + 0xc]
mov ecx, 2
mov dword [esi], 0x83
movzx eax, byte [edx + 2]
test byte [eax + 0x10094ae0], 8
je 0x1004d59f
jmp 0x1004d590
movzx eax, byte [ecx + edx + 1]
inc ecx
test byte [eax + 0x10094ae0], 8
jne 0x1004d590
cmp byte [ecx + edx], 0x27
jne 0x1004d5b5
mov eax, ecx
and eax, 0x80000001
jns 0x1004d5b3
dec eax
or eax, 0xfffffffe
inc eax
je 0x1004d5cf
mov dword [esi], 0x94
mov al, byte [ecx + edx]
test al, al
je 0x1004d5cf
cmp al, 0x27
je 0x1004d5cf
mov al, byte [ecx + edx + 1]
inc ecx
test al, al
jne 0x1004d5c2
cmp byte [ecx + edx], 0
je 0x1004d5d6
inc ecx
pop edi
mov eax, ecx
pop esi
pop ebp
ret
test byte [ecx + 0x10094ae0], 0x46
jne 0x1004d5f7
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov dword [eax], 0x94
mov eax, 1
pop ebp
ret
movzx eax, byte [edx + 1]
mov esi, 1
test byte [eax + 0x10094ae0], 0x46
je 0x1004d61f
lea esp, [esp]
movzx eax, byte [esi + edx + 1]
inc esi
test byte [eax + 0x10094ae0], 0x46
jne 0x1004d610
push esi
push edx
call fcn.1002ed20
mov ecx, dword [ebp + 0xc]
add esp, 8
mov dword [ecx], eax
pop edi
mov eax, esi
pop esi
pop ebp
ret