Function at 0xca68b8
Capabilities:
Parse pe header

Disassembly:
jmp 0xca67f7
mov dword [esp + 0x10], 0
jmp 0xca6c25
cmp word [eax], 0x5a4d
jmp 0xca6b5b
mov dword [esp + 0x1c], edi
jmp 0xca69a6
pop ebp
jmp 0xca6996
mov eax, dword [esi + 0x18]
jmp 0xca6a03
mov bl, 2
jmp 0xca6704
push section..text
jmp 0xca642e
add edx, ebp
jmp 0xca6c30
push ebp
jmp 0xca6a6e
pushal
jmp 0xca682f
cmp dword [edi + 8], 0
jmp 0xca6688
mov eax, dword [edi]
jp 0xca6478
jnp 0xca6478
sub byte [eax], 0xda
add eax, ebx
jl 0xca64f4
jge 0xca64f4
jmp dword [edi - 0x74509665]
mov eax, dword [esi + 0x3c]
jmp 0xca6b2c
mov cl, byte [eax]
jmp 0xca699d
cmp dword [eax], 0x4550
jmp 0xca658a
jmp 0xca6543
mov eax, dword [eax + 4]
jmp 0xca646b
shl eax, 0x10
jmp 0xca6b94
mov dword [0xca6244], edx
jmp 0xca6614
mov ebp, eax
jmp 0xca6412
add edi, esi
jmp 0xca663c
push ebx
jmp 0xca6480
add eax, ebp
jmp 0xca6abf
shr eax, 0x10
jmp 0xca6beb
mov edi, dword [eax + ebx]
jmp 0xca691c
cmp dword [esi + 0x14], 0
jl 0xca6525
jge 0xca6525
xchg dl, bh
jne 0xca6560
jmp 0xca68d8
cmp dword [eax + 1], 0
jmp 0xca6854
call 0xca65dd
xchg esi, eax
movsb byte es:[edi], byte [esi]
xchg dword [esp], ebx
lea ebx, [ebx + 0x1f0]
xchg dword [esp], ebx
jmp 0xca67cb
je 0xca6c8f
jmp 0xca64b4
mov edx, dword [esp + 0x1c]
jmp 0xca6746
push ecx
jmp 0xca6a4d
jmp 0xca64be
call eax
jmp 0xca6580
ret
cmp cl, 8
jmp 0xca6ca4
push esp
jmp 0xca69ba
mov ecx, dword [esi + ebx + 0x10]
jmp 0xca6a15
push eax
jmp 0xca645a
cld
jmp 0xca69b2
je 0xca68f2
jmp 0xca689d
push edi
jmp 0xca68b2
mov ecx, dword [eax + 1]
jmp 0xca6a3d
add dl, dl
jmp 0xca6911
cmp cl, 1
jmp 0xca67b5
push pe_nt_image_headers32
jmp 0xca6a0c
call 0xca670a
push 0x8d243c87
mov edi, 0x113
xchg dword [esp], edi
jl 0xca66d7
jge 0xca66d7
xor dword [ebp + 0x738b47fc], edi
cmp al, 0xe9
adc eax, dword [ecx]
add byte [eax], al
pop esi
add edi, 0x14
jmp 0xca68f2
push ebx
jmp 0xca6555
push ecx
jmp 0xca6ba5
cmp dword [eax + 1], 0
jmp 0xca6974
push 0x1000
jmp 0xca662f
sub edx, dword [esi + 0x20]
jmp 0xca65f0
je 0xca669a
jmp 0xca6a8e
mov eax, dword [esp + 0x20]
jmp 0xca6a78
pop eax
jmp 0xca6903
push 0xca6010
jmp 0xca6942
add eax, 5
jmp 0xca65ca
xor ebx, ebx
jmp 0xca6b8b
pop esi
jmp 0xca6450
add dword [ecx + ebp], edi
jmp 0xca6400
adc dl, dl
jmp 0xca6647
mov esi, dword [esp + 0x24]
jmp 0xca69d4
jmp 0xca6ae3
jne 0xca64be
jmp 0xca6c8f
movzx edx, word [esi + 0x14]
jmp 0xca6aed
jne 0xca6c3f
jmp 0xca6c0a
cmp eax, dword [esi + 0x14]
jmp 0xca6b3b
mov edx, dword [edi + 4]
jmp 0xca64a0
call 0xca68b8
loope 0xca6840
sbb al, 0x24
lea ebx, [ebx - 0x12a]
xchg dword [esp], ebx
jmp 0xca65d6
call dword [0xca6244]
jmp 0xca6543
shr eax, 0x10
jmp 0xca64ff
cmp dword [0xca6240], 0
jmp 0xca6886
mov eax, dword [esp + 0x10]
jmp 0xca6a34
add eax, 0x10000
jmp 0xca6560
jne 0xca6647
jmp 0xca6aad
add esi, ebx
jmp 0xca64a9
mov edx, ebp
jmp 0xca67ac
push eax
jmp 0xca69e6
call eax
jmp 0xca67ec
jb 0xca6493
jmp 0xca6924
je 0xca6c8f
jmp 0xca6637
inc esi
jmp 0xca6827
pop ebx
jmp 0xca6b9a
cmp cl, 3
jmp 0xca6bca
mov dword [esp + 0x18], eax
jmp 0xca6955
mov dl, 0x80
jmp 0xca6800
call 0xca69c1
mov eax, dword [0x240c872b]
lea ecx, [ecx + 0x226]
xchg dword [esp], ecx
jmp 0xca6acf
mov edi, dword [esp + 0x28]
jmp 0xca6681
call edi
jmp 0xca685f
push eax
jmp 0xca6af8
add edx, ebp
jmp 0xca6518
add esi, ebx
jmp 0xca6765
mov edi, dword [esi + ebx + 0x40]
jmp 0xca66ed
pop edi
jmp 0xca680b
add eax, 1
jmp 0xca6891
add ecx, ebp
jmp 0xca6bf7
push eax
jmp 0xca68cc
push 0
jmp 0xca652e
jmp 0xca6b12
push esi
jmp 0xca6693
mov ecx, dword [esp + 0x14]
jmp 0xca6678
cmp cl, 9
jmp 0xca6b71
mov ecx, dword [eax + 1]
jmp 0xca6b48
mov dl, byte [esi]
jmp 0xca697f
call eax
jmp 0xca6a24
add eax, esi
jmp 0xca69f9
sub esp, 0xc
jmp 0xca68e4
mov eax, dword [ecx + ebx + 0x10]
jmp 0xca656c
mov esi, dword [edx + esi + 0x74]
jmp 0xca666d
call 0xca6aff
mov cl, ah
xchg dword [esp], ebp
lea ebp, [ebp - 0x3d4]
xchg dword [esp], ebp
jmp 0xca6489
call 0xca6b18
mov bh, 0x87
adc al, 0x24
lea edx, [edx + 0x65]
xchg dword [esp], edx
jmp 0xca6b7c
add eax, esi
jmp 0xca6758
mov dword [esp + 0x10], eax
jmp 0xca695f
lea edi, [ecx + ebp]
jmp 0xca6813
jne 0xca6560
jmp 0xca6c99
je 0xca669a
jmp 0xca664d
pushal
jmp 0xca6658
ret 4
movsb byte es:[edi], byte [esi]
jmp 0xca6463
ret
add esp, 0xc
je 0xca6b83
jne 0xca6b83
insb byte es:[edi], dx
push es
inc esi
enter 0xffffffffffffe952, 0xffffffffffffff8a
sti
invalid
push edx
jmp 0xca6735
sub eax, 0x10000
jmp 0xca6422
je 0xca669a
jmp 0xca66e2
shl eax, 0x10
jmp 0xca6bb6
add dword [ecx], edx
jmp 0xca67f7
lea ecx, [ecx]
jmp 0xca6493
mov dword [0xca6240], 1
jmp 0xca64ef
jbe 0xca6924
jmp 0xca6bff
push edx
jmp 0xca6ac7
mov eax, dword [esp + 0x10]
jmp 0xca6a46
mov edx, dword [esi + 0x1c]
jmp 0xca67c0
add eax, dword [eax + 0x3c]
jmp 0xca64c8
jne 0xca67f7
jmp 0xca6aa3