Function at 0x10002bf0
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x10006018]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push esi
mov byte [ebp - 0x48], pe_nt_image_headers32
mov dword [ebp - 0x47], eax
mov byte [ebp - 0x38], 0xe9
mov dword [ebp - 0x37], eax
mov word [ebp - 0x40], 0x800f
mov dword [ebp - 0x3e], eax
mov byte [ebp - 0x21], al
mov byte [ebp - 0x22], al
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
push edi
lea ecx, [ecx]
movzx edi, byte [ebp - 0x21]
movzx eax, byte [ebp - 0x22]
add edi, dword [ebx]
mov esi, dword [ebx + 8]
push edi
lea edx, [ebp - 0x20]
mov dword [ebp - 0x4c], eax
add esi, eax
call fcn.10002fc0
add esp, 4
test dword [ebp - 8], 0x1000
jne 0x10002e98
cmp byte [ebp - 0x21], 5
mov dword [ebp - 0x2c], edi
jb 0x10002c85
mov eax, edi
sub eax, esi
sub eax, 5
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x2c], ecx
mov eax, 5
mov dword [ebp - 0x30], 1
jmp 0x10002daf
mov dl, byte [ebp - 0x1a]
cmp dl, 0xe8
jne 0x10002cad
movzx edx, byte [ebp - 0x20]
sub edx, esi
add edx, dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
lea eax, [edx + edi - 5]
mov dword [ebp - 0x47], eax
mov dword [ebp - 0x2c], ecx
mov eax, 5
jmp 0x10002daf
mov cl, dl
and cl, 0xfd
cmp cl, 0xe9
jne 0x10002d0c
movzx ecx, byte [ebp - 0x20]
add ecx, edi
cmp dl, 0xeb
jne 0x10002cca
movsx edx, byte [ebp - 0x10]
add ecx, edx
jmp 0x10002ccd
add ecx, dword [ebp - 0x10]
mov edx, dword [ebx]
cmp edx, ecx
ja 0x10002ceb
add edx, 5
cmp ecx, edx
jae 0x10002ceb
cmp dword [ebp - 0x28], ecx
jae 0x10002daf
mov dword [ebp - 0x28], ecx
jmp 0x10002daf
sub ecx, esi
sub ecx, 5
cmp edi, dword [ebp - 0x28]
mov dword [ebp - 0x37], ecx
lea eax, [ebp - 0x38]
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], eax
mov eax, 5
mov dword [ebp - 0x30], ecx
jmp 0x10002daf
and dl, 0xf0
cmp dl, 0x70
je 0x10002d41
mov cl, byte [ebp - 0x1a]
and cl, 0xfc
cmp cl, 0xe0
je 0x10002d41
mov cl, byte [ebp - 0x19]
and cl, 0xf0
cmp cl, 0x80
je 0x10002d41
movzx ecx, byte [ebp - 0x1a]
and cl, 0xfe
cmp cl, 0xc2
jne 0x10002daf
cmp edi, dword [ebp - 0x28]
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x30], ecx
jmp 0x10002daf
movzx ecx, byte [ebp - 0x20]
add ecx, edi
cmp dl, 0x70
je 0x10002d5c
mov dl, byte [ebp - 0x1a]
and dl, 0xfc
cmp dl, 0xe0
je 0x10002d5c
add ecx, dword [ebp - 0x10]
jmp 0x10002d62
movsx edx, byte [ebp - 0x10]
add ecx, edx
mov edx, dword [ebx]
cmp edx, ecx
ja 0x10002d79
add edx, 5
cmp ecx, edx
jae 0x10002d79
cmp dword [ebp - 0x28], ecx
jae 0x10002daf
mov dword [ebp - 0x28], ecx
jmp 0x10002daf
mov al, byte [ebp - 0x1a]
mov dl, al
and dl, 0xfc
cmp dl, 0xe0
je 0x10002e98
cmp al, 0xf
movzx eax, al
jne 0x10002d95
movzx eax, byte [ebp - 0x19]
and al, 0xf
or al, 0x80
mov byte [ebp - 0x3f], al
sub ecx, esi
lea eax, [ebp - 0x40]
sub ecx, 6
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3e], ecx
mov eax, 6
cmp edi, dword [ebp - 0x28]
jae 0x10002dc0
movzx ecx, byte [ebp - 0x20]
cmp eax, ecx
jne 0x10002e98
mov ecx, dword [ebp - 0x4c]
lea edx, [ecx + eax]
cmp edx, 0x20
ja 0x10002e98
mov esi, dword [ebx + 0x10]
cmp esi, 8
jae 0x10002e98
movzx edx, byte [ebp - 0x21]
mov byte [esi + ebx + 0x14], dl
mov esi, dword [ebx + 0x10]
mov dl, byte [ebp - 0x22]
mov byte [esi + ebx + 0x1c], dl
mov edi, dword [ebx + 8]
inc dword [ebx + 0x10]
mov esi, dword [ebp - 0x2c]
add edi, ecx
add dl, al
mov ecx, eax
mov al, byte [ebp - 0x21]
add al, byte [ebp - 0x20]
cmp dword [ebp - 0x30], 0
rep movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x22], dl
mov byte [ebp - 0x21], al
je 0x10002c30
cmp al, 5
jae 0x10002e83
mov esi, dword [ebx]
movzx edi, al
mov edx, 5
add esi, edi
sub edx, edi
call fcn.10002bc0
test eax, eax
jne 0x10002e83
mov edx, 2
cmp byte [ebp - 0x21], dl
jae 0x10002e44
sub edx, edi
call fcn.10002bc0
test eax, eax
je 0x10002e98
mov ecx, dword [ebx]
add ecx, 0xfffffffb
call fcn.10002f80
test eax, eax
je 0x10002e98
mov eax, dword [ebx]
mov cl, byte [eax - 5]
test cl, cl
je 0x10002e65
cmp cl, 0x90
je 0x10002e65
cmp cl, 0xcc
jne 0x10002e98
mov esi, 1
lea ebx, [ebx]
cmp byte [esi + eax - 5], cl
jne 0x10002e98
inc esi
cmp esi, 5
jb 0x10002e70
mov dword [ebx + 0xc], 1
pop edi
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10003684
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
xor eax, eax
pop esi
call fcn.10003684
mov esp, ebp
pop ebp
ret