Function at 0xc70a42
Capabilities:
Parse pe header

Disassembly:
mov eax, esi
pop esi
pop ebp
ret
push ecx
push eax
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
pop dword [0x662950]
jmp 0xcdca49
add esi, 0x1000
jmp 0xc2277f
cmp esi, 0x7d000000
jmp 0xc26f8a
jb 0xce141b
jmp 0x44b8bf
mov dword [0x662c00], eax
jmp 0xc6c745
cmp word [eax], 0x4550
jmp 0xc848a0
push ebx
mov dword [esp], 0x27210465
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], eax
push esi
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [eax + 0x3c]
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push edi
push 0x6b726e45
mov dword [esp], ebx
mov ebx, 0x661adf2c
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0xc72484
push 0x604f45eb
mov dword [esp], esi
push esi
mov esi, 0xc64c6b6
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
sub eax, 0x7e667c93
push edx
mov edx, 0x7d2f87bd
sub eax, edx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add eax, esi
add eax, 0x7d2f87bd
add eax, 0x7e667c93
jmp 0xc6c73b
jne 0xc22774
jmp 0xd2e891
je 0x44b8d6
jmp 0xc22774
add esp, 4
jmp 0xccac36
test eax, eax
jmp 0xcdadde
je 0xc22774
jmp 0xcdca53
call fcn.0044b6f0
jmp 0xcb05d1
cmp word [esi], 0x5a4d
jmp 0xc84895
push ebp
push ebp
push 0x554aa66c
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
add ecx, 0x2f7ed799
add ecx, 0x4ddd6287
add ecx, eax
sub ecx, 0x4ddd6287
sub esp, 4
mov dword [esp], edx
mov edx, 0x7f5f4cb6
add edx, 0xb01f8ae3
sub ecx, edx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0x7cc9ccfe
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], esi
push edi
mov dword [esp], eax
mov eax, esp
push 0x28185464
push esp
sbb byte [eax], ch
push esp
sbb byte [eax], ch
mov dword [esp], ecx
mov ecx, 4
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push 0xeed5106
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x6dfc68cd
xor ecx, 0x3fff4839
shl ecx, 4
dec ecx
neg ecx
add ecx, 0x20320f43
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc118c7
sub esp, 4
mov dword [esp], eax
push ebx
push 0x5d3c9d37
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push 0x5fd2e74e
mov dword [esp], eax
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x662950]
push dword [esp]
pop eax
push edx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push 0x73e4c4fe
mov dword [esp], ebx
mov dword [esp], edi
push ebx
mov ebx, 0x3dc20ac6
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push 0x2efae1ed
mov dword [esp], ebp
mov dword [esp], 0x3f7fb53f
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xc709b5