Function at 0x500af0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 9
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x75
ja case.0x500b1c.2
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0x501374]
jmp dword [ecx*4 + 0x50130c]
mov dword [ebp - 4], 1
jmp 0x500b35
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 1
je 0x500b4c
jmp 0x500b2c
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x95
mov eax, dword [ebp - 4]
jmp 0x501305
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 1]
cmp edx, 0x2d
jne 0x500ba6
mov dword [ebp - 4], 2
jmp 0x500b7b
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x500b95
cmp dword [ebp - 8], 0xa
je 0x500b95
jmp 0x500b72
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x95
mov eax, dword [ebp - 4]
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x57
mov eax, 1
jmp 0x501305
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x16
mov eax, 1
jmp 0x501305
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x17
mov eax, 1
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 1
mov eax, 1
jmp 0x501305
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x56
mov eax, 1
jmp 0x501305
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x58
mov eax, 1
jmp 0x501305
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 1]
cmp edx, 0x2a
jne 0x500c2f
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 2]
test ecx, ecx
jne 0x500c42
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x59
mov eax, 1
jmp 0x501305
mov dword [ebp - 4], 3
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 2]
mov dword [ebp - 8], ecx
jmp 0x500c5e
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 8], 0x2a
jne 0x500c72
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x2f
je 0x500c86
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x500c86
jmp 0x500c55
cmp dword [ebp - 8], 0
je 0x500c95
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x95
mov eax, dword [ebp - 4]
jmp 0x501305
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x5a
mov eax, 1
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x4c
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
xor ecx, ecx
cmp eax, 0x3d
sete cl
add ecx, 1
mov eax, ecx
jmp 0x501305
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x3d
jne 0x500d00
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x4e
mov eax, 2
jmp 0x501305
cmp dword [ebp - 8], 0x3e
jne 0x500d1b
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x4b
mov eax, 2
jmp 0x501305
cmp dword [ebp - 8], 0x3c
jne 0x500d36
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x54
mov eax, 2
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x4f
mov eax, 1
jmp 0x501305
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x3d
jne 0x500d6e
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x50
mov eax, 2
jmp 0x501305
cmp dword [ebp - 8], 0x3e
jne 0x500d89
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x55
mov eax, 2
jmp 0x501305
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4d
mov eax, 1
jmp 0x501305
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 1]
cmp edx, 0x3d
je 0x500dbd
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x94
mov eax, 2
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x4b
mov eax, 2
jmp 0x501305
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
cmp eax, 0x7c
je 0x500df1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x53
mov eax, 1
jmp 0x501305
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x5b
mov eax, 2
jmp 0x501305
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x19
mov eax, 1
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x52
mov eax, 1
jmp 0x501305
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x5d
mov eax, 1
jmp 0x501305
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 4], 1
jmp 0x500e58
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0
je 0x500e90
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0xc]
jne 0x500e8e
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax + 1]
cmp ecx, dword [ebp - 0xc]
jne 0x500e8c
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x500e8e
jmp 0x500e90
jmp 0x500e4f
cmp dword [ebp - 8], 0x27
jne 0x500eac
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x5e
mov eax, dword [ebp - 4]
add eax, 1
jmp 0x501305
cmp dword [ebp - 8], 0
je 0x500ec8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x1a
mov eax, dword [ebp - 4]
add eax, 1
jmp 0x501305
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x94
mov eax, dword [ebp - 4]
jmp 0x501305
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 1]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 4
jne case.0x500b1c.39
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x76
mov eax, 1
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x81
mov dword [ebp - 4], 0
jmp 0x500f1a
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 4
je 0x500f31
jmp 0x500f11
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x2e
jne 0x500f71
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 4
je 0x500f68
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x500f48
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x82
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
cmp eax, 0x65
je 0x500f8d
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
cmp edx, 0x45
jne 0x501009
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax + 1]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 4
jne 0x500fd7
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax + 1]
cmp ecx, 0x2b
je 0x500fc1
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx + 1]
cmp eax, 0x2d
jne 0x501009
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx + 2]
movzx eax, byte [edx + 0x5bfce0]
and eax, 4
je 0x501009
mov ecx, dword [ebp - 4]
add ecx, 2
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
movzx ecx, byte [eax + 0x5bfce0]
and ecx, 4
je 0x501000
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x500fe0
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x82
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
movzx eax, byte [edx + 0x5bfce0]
and eax, 0x46
je 0x501032
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x94
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x501009
mov eax, dword [ebp - 4]
jmp 0x501305
mov dword [ebp - 4], 1
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
mov dword [ebp - 8], ecx
jmp 0x501055
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 8], 0x5d
je 0x50106f
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0
je 0x50106f
jmp 0x50104c
mov edx, dword [ebp - 8]
sub edx, 0x5d
neg edx
sbb edx, edx
and edx, 0x7a
add edx, 0x1a
mov eax, dword [ebp + 0xc]
mov dword [eax], edx
mov eax, dword [ebp - 4]
jmp 0x501305
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x85
mov dword [ebp - 4], 1
jmp 0x5010a7
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 4
je 0x5010be
jmp 0x50109e
mov eax, dword [ebp - 4]
jmp 0x501305
mov dword [ebp - 4], 1
jmp 0x5010d8
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
movzx eax, byte [edx + 0x5bfce0]
and eax, 4
je 0x5010ef
jmp 0x5010cf
cmp dword [ebp - 4], 1
jle case.0x500b1c.27
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x84
mov eax, dword [ebp - 4]
jmp 0x501305
mov dword [ebp - 0x10], 0
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x85
mov dword [ebp - 4], 1
jmp 0x501128
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x5011db
movzx eax, byte [ebp - 8]
movzx ecx, byte [eax + 0x5bfce0]
and ecx, 0x46
je 0x501159
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x5011d6
cmp dword [ebp - 8], 0x28
jne 0x5011b4
cmp dword [ebp - 0x10], 0
jle 0x5011b4
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x501196
movzx eax, byte [ebp - 8]
movzx ecx, byte [eax + 0x5bfce0]
and ecx, 1
jne 0x501196
cmp dword [ebp - 8], 0x29
jne 0x501165
cmp dword [ebp - 8], 0x29
jne 0x5011a7
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x5011b0
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x94
jmp 0x5011db
cmp dword [ebp - 8], 0x3a
jne 0x5011d4
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x5011d4
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x5011d6
jmp 0x5011db
jmp 0x50111f
cmp dword [ebp - 0x10], 0
jne 0x5011ea
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x94
mov eax, dword [ebp - 4]
jmp 0x501305
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
cmp eax, 0x27
jne case.0x500b1c.2
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x83
mov dword [ebp - 4], 2
jmp 0x50121d
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 8
je 0x501234
jmp 0x501214
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x27
jne 0x501256
mov edx, dword [ebp - 4]
and edx, 0x80000001
jns 0x501252
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x501285
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x94
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
test edx, edx
je 0x501285
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x27
je 0x501285
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x50125f
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
test ecx, ecx
je 0x50129b
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
jmp 0x501305
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x5bfce0]
and edx, 0x46
jne 0x5012b4
jmp 0x5012f7
mov dword [ebp - 4], 1
jmp 0x5012c6
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
movzx eax, byte [edx + 0x5bfce0]
and eax, 0x46
je 0x5012dd
jmp 0x5012bd
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004faa40
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 4]
jmp 0x501305
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x94
mov eax, 1
mov esp, ebp
pop ebp
ret