Function at 0x4c5200
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
movzx edx, byte [ecx + str.eeeeeeeee_a_ae_a_aeeeeeeeeeeeeeeeeee_a]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x1a
ja case.default.0x4c5223
mov eax, dword [ebp - 0x14]
jmp dword [eax*4 + 0x4c5a88]
mov dword [ebp - 4], 1
jmp 0x4c523c
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
movzx ecx, byte [eax + 0x64a060]
and ecx, 1
je 0x4c5253
jmp 0x4c5233
mov edx, dword [ebp + 0xc]
mov dword [edx], 0xa3
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 1]
cmp ecx, 0x2d
jne 0x4c52ad
mov dword [ebp - 4], 2
jmp 0x4c5282
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0
je 0x4c529c
cmp dword [ebp - 8], 0xa
je 0x4c529c
jmp 0x4c5279
mov edx, dword [ebp + 0xc]
mov dword [edx], 0xa3
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x59
mov eax, 1
jmp 0x4c5a82
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x16
mov eax, 1
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x17
mov eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 1
mov eax, 1
jmp 0x4c5a82
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x58
mov eax, 1
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x5a
mov eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 1]
cmp ecx, 0x2a
jne 0x4c5336
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 2]
test eax, eax
jne 0x4c5349
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x5b
mov eax, 1
jmp 0x4c5a82
mov dword [ebp - 4], 3
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 2]
mov dword [ebp - 8], eax
jmp 0x4c5365
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 8], 0x2a
jne 0x4c5379
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
cmp eax, 0x2f
je 0x4c538d
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x4c538d
jmp 0x4c535c
cmp dword [ebp - 8], 0
je 0x4c539c
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0xa3
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x5c
mov eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4e
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 1]
xor eax, eax
cmp edx, 0x3d
sete al
add eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 1]
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x3d
jne 0x4c5405
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x50
mov eax, 2
jmp 0x4c5a82
cmp dword [ebp - 8], 0x3e
jne 0x4c5420
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4d
mov eax, 2
jmp 0x4c5a82
cmp dword [ebp - 8], 0x3c
jne 0x4c543b
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x56
mov eax, 2
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x51
mov eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 1]
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x3d
jne 0x4c5473
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x52
mov eax, 2
jmp 0x4c5a82
cmp dword [ebp - 8], 0x3e
jne 0x4c548e
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x57
mov eax, 2
jmp 0x4c5a82
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x4f
mov eax, 1
jmp 0x4c5a82
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
cmp eax, 0x3d
je 0x4c54c2
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0xa4
mov eax, 1
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x4d
mov eax, 2
jmp 0x4c5a82
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 1]
cmp ecx, 0x7c
je 0x4c54f6
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x55
mov eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x5d
mov eax, 2
jmp 0x4c5a82
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x1a
mov eax, 1
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x54
mov eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x5f
mov eax, 1
jmp 0x4c5a82
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], 1
jmp 0x4c555d
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x4c5595
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xc]
jne 0x4c5593
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx + 1]
cmp edx, dword [ebp - 0xc]
jne 0x4c5591
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x4c5593
jmp 0x4c5595
jmp 0x4c5554
cmp dword [ebp - 8], 0x27
jne 0x4c55b1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x61
mov eax, dword [ebp - 4]
add eax, 1
jmp 0x4c5a82
cmp dword [ebp - 8], 0
je 0x4c55cd
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x1b
mov eax, dword [ebp - 4]
add eax, 1
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xa4
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 1]
movzx eax, byte [edx + 0x64a060]
and eax, 4
jne case.0x4c5223.3
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x7a
mov eax, 1
jmp 0x4c5a82
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x86
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
cmp ecx, 0x30
jne 0x4c5674
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
cmp eax, 0x78
je 0x4c5630
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 1]
cmp edx, 0x58
jne 0x4c5674
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 2]
movzx edx, byte [ecx + 0x64a060]
and edx, 8
je 0x4c5674
mov dword [ebp - 4], 3
jmp 0x4c5655
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
movzx eax, byte [edx + 0x64a060]
and eax, 8
je 0x4c566c
jmp 0x4c564c
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov dword [ebp - 4], 0
jmp 0x4c5686
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
movzx ecx, byte [eax + 0x64a060]
and ecx, 4
je 0x4c569d
jmp 0x4c567d
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
cmp eax, 0x2e
jne 0x4c56dd
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
movzx ecx, byte [eax + 0x64a060]
and ecx, 4
je 0x4c56d4
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x4c56b4
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x84
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
cmp edx, 0x65
je 0x4c56f9
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x45
jne 0x4c5775
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx + 1]
movzx ecx, byte [eax + 0x64a060]
and ecx, 4
jne 0x4c5743
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx + 1]
cmp eax, 0x2b
je 0x4c572d
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx + 1]
cmp edx, 0x2d
jne 0x4c5775
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax + 2]
movzx edx, byte [ecx + 0x64a060]
and edx, 4
je 0x4c5775
mov eax, dword [ebp - 4]
add eax, 2
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
movzx eax, byte [edx + 0x64a060]
and eax, 4
je 0x4c576c
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x4c574c
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x84
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x64a060]
and edx, 0x46
je 0x4c579e
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xa4
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x4c5775
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov dword [ebp - 4], 1
mov edx, dword [ebp + 8]
movzx eax, byte [edx]
mov dword [ebp - 8], eax
jmp 0x4c57c1
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 8], 0x5d
je 0x4c57db
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4c57db
jmp 0x4c57b8
mov ecx, dword [ebp - 8]
sub ecx, 0x5d
neg ecx
sbb ecx, ecx
and ecx, 0x89
add ecx, 0x1b
mov edx, dword [ebp + 0xc]
mov dword [edx], ecx
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x87
mov dword [ebp - 4], 1
jmp 0x4c5816
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movzx eax, byte [edx]
movzx ecx, byte [eax + 0x64a060]
and ecx, 4
je 0x4c582d
jmp 0x4c580d
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov dword [ebp - 0x10], 0
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x87
mov dword [ebp - 4], 1
jmp 0x4c5857
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x4c590a
movzx eax, byte [ebp - 8]
movzx ecx, byte [eax + 0x64a060]
and ecx, 0x46
je 0x4c5888
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x4c5905
cmp dword [ebp - 8], 0x28
jne 0x4c58e3
cmp dword [ebp - 0x10], 0
jle 0x4c58e3
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x4c58c5
movzx eax, byte [ebp - 8]
movzx ecx, byte [eax + 0x64a060]
and ecx, 1
jne 0x4c58c5
cmp dword [ebp - 8], 0x29
jne 0x4c5894
cmp dword [ebp - 8], 0x29
jne 0x4c58d6
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x4c58df
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xa4
jmp 0x4c590a
cmp dword [ebp - 8], 0x3a
jne 0x4c5903
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x4c5903
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x4c5905
jmp 0x4c590a
jmp 0x4c584e
cmp dword [ebp - 0x10], 0
jne 0x4c5919
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0xa4
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov dword [ebp - 4], 1
jmp 0x4c5933
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + str.eeeeeeeee_a_ae_a_aeeeeeeeeeeeeeeeeee_a]
cmp edx, 1
jg 0x4c594a
jmp 0x4c592a
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x64a060]
and edx, 0x46
je 0x4c596d
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x4c5a56
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x1b
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004c5b00
add esp, 0xc
jmp 0x4c5a82
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 1]
cmp eax, 0x27
jne case.0x4c5223.2
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x85
mov dword [ebp - 4], 2
jmp 0x4c59ba
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
movzx edx, byte [ecx + 0x64a060]
and edx, 8
je 0x4c59d1
jmp 0x4c59b1
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x27
jne 0x4c59f3
mov edx, dword [ebp - 4]
and edx, reloc.WS2_32.dll_accept
jns 0x4c59ef
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x4c5a22
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xa4
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
test edx, edx
je 0x4c5a22
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
cmp ecx, 0x27
je 0x4c5a22
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x4c59fc
mov eax, dword [ebp + 8]
add eax, dword [ebp - 4]
movzx ecx, byte [eax]
test ecx, ecx
je 0x4c5a38
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
jmp 0x4c5a82
mov dword [ebp - 4], 1
jmp 0x4c5a56
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xa4
mov eax, 1
jmp 0x4c5a82
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 4]
movzx edx, byte [ecx]
movzx eax, byte [edx + 0x64a060]
and eax, 0x46
je 0x4c5a76
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x4c5a56
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x1b
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret