Function at 0x4eef30
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
movzx edi, byte [ecx]
lea eax, [edi - 9]
cmp eax, 0x75
ja case.0x4eef51.34
movzx eax, byte [eax + 0x4ef50c]
mov dl, 4
jmp dword [eax*4 + 0x4ef4a4]
movzx esi, byte [ecx + 1]
mov edx, 1
mov eax, edx
test byte [esi + 0x5933a0], dl
je 0x4eef7e
jmp 0x4eef70
add eax, edx
movzx esi, byte [eax + ecx]
test byte [esi + 0x5933a0], dl
jne 0x4eef70
pop edi
pop esi
mov dword [ebx], 0x95
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x2d
jne 0x4eefba
movzx edx, byte [ecx + 2]
mov eax, 2
test edx, edx
je 0x4eefaf
lea esp, [esp]
cmp edx, 0xa
je 0x4eefaf
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x4eefa0
pop edi
pop esi
mov dword [ebx], 0x95
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x57
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x16
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x17
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 1
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x56
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x58
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x2a
jne 0x4ef052
mov dl, byte [ecx + 2]
test dl, dl
je 0x4ef052
mov eax, 3
movzx edx, dl
nop
cmp edx, 0x2a
jne 0x4ef03b
cmp byte [eax + ecx], 0x2f
je 0x4ef046
movzx edx, byte [eax + ecx]
test edx, edx
je 0x4ef047
inc eax
jmp 0x4ef030
inc eax
pop edi
pop esi
mov dword [ebx], 0x95
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x59
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5a
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
mov dword [ebx], 0x4c
cmp byte [ecx + 1], 0x3d
pop edi
sete al
pop esi
pop ebx
inc eax
pop ebp
ret
movzx eax, byte [ecx + 1]
cmp eax, 0x3d
jne 0x4ef0a0
pop edi
pop esi
mov dword [ebx], 0x4e
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3e
jne 0x4ef0b5
pop edi
pop esi
mov dword [ebx], 0x4b
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3c
jne 0x4ef0ca
pop edi
pop esi
mov dword [ebx], 0x54
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x4f
mov eax, 1
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
cmp eax, 0x3d
jne 0x4ef0f3
pop edi
pop esi
mov dword [ebx], 0x50
mov eax, 2
pop ebx
pop ebp
ret
cmp eax, 0x3e
jne 0x4ef108
pop edi
pop esi
mov dword [ebx], 0x55
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x4d
mov eax, 1
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x3d
mov eax, 2
jne 0x4ef3d9
pop edi
pop esi
mov dword [ebx], 0x4b
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x7c
je 0x4ef148
pop edi
pop esi
mov dword [ebx], 0x53
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5b
mov eax, 2
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x19
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x52
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
mov dword [ebx], 0x5d
mov eax, 1
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov eax, 1
test esi, esi
je 0x4ef1ad
cmp esi, edi
jne 0x4ef1a3
movzx edx, byte [ecx + eax + 1]
cmp edx, edi
jne 0x4ef1ad
inc eax
movzx esi, byte [eax + ecx + 1]
inc eax
test esi, esi
jne 0x4ef195
cmp esi, 0x27
jne 0x4ef1be
pop edi
pop esi
mov dword [ebx], 0x5e
inc eax
pop ebx
pop ebp
ret
test esi, esi
je 0x4ef3d9
pop edi
pop esi
mov dword [ebx], 0x1a
inc eax
pop ebx
pop ebp
ret
movzx eax, byte [ecx + 1]
test byte [eax + 0x5933a0], dl
jne case.0x4eef51.24
pop edi
pop esi
mov dword [ebx], 0x76
mov eax, 1
pop ebx
pop ebp
ret
mov dword [ebx], 0x81
movzx esi, byte [ecx]
xor eax, eax
test byte [esi + 0x5933a0], dl
je 0x4ef20f
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
jne 0x4ef201
cmp byte [eax + ecx], 0x2e
jne 0x4ef237
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
je 0x4ef231
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
jne 0x4ef223
mov dword [ebx], 0x82
mov bl, byte [eax + ecx]
cmp bl, 0x65
je 0x4ef244
cmp bl, 0x45
jne 0x4ef299
mov bl, byte [eax + ecx + 1]
movzx esi, bl
test byte [esi + 0x5933a0], dl
jne 0x4ef26a
cmp bl, 0x2b
je 0x4ef25d
cmp bl, 0x2d
jne 0x4ef299
movzx esi, byte [eax + ecx + 2]
test byte [esi + 0x5933a0], dl
je 0x4ef299
movzx esi, byte [eax + ecx + 2]
add eax, 2
test byte [esi + 0x5933a0], dl
je 0x4ef28e
lea ebx, [ebx]
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
jne 0x4ef280
mov edx, dword [ebp + 8]
mov dword [edx], 0x82
jmp 0x4ef29c
mov edx, dword [ebp + 8]
movzx esi, byte [eax + ecx]
mov bl, 0x46
test byte [esi + 0x5933a0], bl
je 0x4ef49e
mov edi, edi
inc eax
mov dword [edx], 0x94
movzx esi, byte [eax + ecx]
test byte [esi + 0x5933a0], bl
jne 0x4ef2b0
pop edi
pop esi
pop ebx
pop ebp
ret
mov edx, edi
mov eax, 1
cmp edx, 0x5d
je 0x4ef2e2
movzx edx, byte [eax + ecx]
test edx, edx
je 0x4ef2e2
inc eax
cmp edx, 0x5d
jne 0x4ef2d4
sub edx, 0x5d
neg edx
sbb edx, edx
and edx, 0x7a
pop edi
add edx, 0x1a
pop esi
mov dword [ebx], edx
pop ebx
pop ebp
ret
mov dword [ebx], 0x85
movzx esi, byte [ecx + 1]
mov dl, 4
mov eax, 1
test byte [esi + 0x5933a0], dl
je 0x4ef49e
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
jne 0x4ef313
pop edi
pop esi
pop ebx
pop ebp
ret
movzx esi, byte [ecx + 1]
mov dl, 4
mov eax, 1
test byte [esi + 0x5933a0], dl
je case.0x4eef51.13
lea esp, [esp]
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
jne 0x4ef340
cmp eax, 1
jle case.0x4eef51.13
pop edi
pop esi
mov dword [ebx], 0x84
pop ebx
pop ebp
ret
mov dword [ebx], 0x85
movzx edx, byte [ecx + 1]
xor esi, esi
lea eax, [esi + 1]
test edx, edx
je 0x4ef3d9
mov bl, 0x46
movzx edi, dl
test byte [edi + 0x5933a0], bl
je 0x4ef381
inc esi
jmp 0x4ef392
cmp edx, 0x28
je 0x4ef39e
cmp edx, 0x3a
jne 0x4ef3ce
cmp byte [ecx + eax + 1], dl
jne 0x4ef3ce
inc eax
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
jne 0x4ef373
jmp 0x4ef3ce
test esi, esi
jle 0x4ef3d0
movzx edx, byte [eax + ecx + 1]
inc eax
test edx, edx
je 0x4ef3bd
test byte [edx + 0x5933a0], 1
jne 0x4ef3bd
cmp edx, 0x29
jne 0x4ef3a2
inc eax
jmp 0x4ef3ce
cmp edx, 0x29
jne 0x4ef3c5
inc eax
jmp 0x4ef3ce
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x94
test esi, esi
jne 0x4ef49e
mov ebx, dword [ebp + 8]
pop edi
pop esi
mov dword [ebx], 0x94
pop ebx
pop ebp
ret
cmp byte [ecx + 1], 0x27
jne case.0x4eef51.34
mov dword [ebx], 0x83
movzx esi, byte [ecx + 2]
mov dl, 8
mov eax, 2
test byte [esi + 0x5933a0], dl
je 0x4ef411
movzx esi, byte [eax + ecx + 1]
inc eax
test byte [esi + 0x5933a0], dl
jne 0x4ef403
cmp byte [eax + ecx], 0x27
jne 0x4ef428
mov edx, eax
and edx, reloc.WS2_32.dll_accept
jns 0x4ef426
dec edx
or edx, 0xfffffffe
inc edx
je 0x4ef443
mov dword [ebx], 0x94
mov dl, byte [eax + ecx]
test dl, dl
je 0x4ef443
cmp dl, 0x27
je 0x4ef443
mov dl, byte [eax + ecx + 1]
inc eax
test dl, dl
jne 0x4ef435
cmp byte [eax + ecx], 0
je 0x4ef49e
pop edi
pop esi
inc eax
pop ebx
pop ebp
ret
mov bl, 0x46
test byte [edi + 0x5933a0], bl
jne 0x4ef46c
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax], 0x94
mov eax, 1
pop ebx
pop ebp
ret
movzx edx, byte [ecx + 1]
mov edi, 1
test byte [edx + 0x5933a0], bl
je 0x4ef48e
lea ecx, [ecx]
movzx eax, byte [edi + ecx + 1]
inc edi
test byte [eax + 0x5933a0], bl
jne 0x4ef480
push ecx
call fcn.004eee40
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
pop ebp
ret
inc edx
fimul dword [edi]
push edx
out 0x4e, eax
invalid