Function at 0x10002c40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100324f9
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
mov eax, dword [0x1003d300]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1003d300]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
xor ebp, ebp
mov edi, edx
xor ebx, ebx
mov dword [esp + 0x20], ebx
and dword [esp + 0x44], 0xfffffe00
mov esi, ecx
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], edi
mov dword [edi], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0xd0], 1
cmp esi, ebp
je 0x10002d73
mov eax, esi
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebp
mov byte [esp + 0x90], bl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10002ce0
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x94]
call fcn.10006850
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x90]
mov byte [esp + 0xd4], 2
mov ebx, 1
push ecx
mov dword [esp + 0x28], ebx
call fcn.100018f0
add esp, 8
test al, al
je 0x10002d73
push 0xb
push str.i_dt:
lea ecx, [esp + 0x78]
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], ebp
mov byte [esp + 0x7c], 0
call fcn.10006850
lea edx, [esp + 0x70]
mov ebx, 3
push edx
lea eax, [esp + 0x40]
mov dword [esp + 0xd4], ebx
push eax
mov dword [esp + 0x28], ebx
call fcn.100021b0
add esp, 8
mov byte [esp + 0x1b], 0
test al, al
jne 0x10002d78
mov byte [esp + 0x1b], 1
test bl, 2
je 0x10002dae
and ebx, 0xfffffffd
cmp dword [esp + 0x88], 0x10
jb 0x10002d97
mov ecx, dword [esp + 0x74]
push ecx
call fcn.1001aa0a
add esp, 4
mov dword [esp + 0x88], 0xf
mov dword [esp + 0x84], ebp
mov byte [esp + 0x74], 0
mov dword [esp + 0xd0], 1
test bl, 1
je 0x10002dd8
cmp dword [esp + 0xa4], 0x10
jb 0x10002dd8
mov edx, dword [esp + 0x90]
push edx
call fcn.1001aa0a
add esp, 4
cmp byte [esp + 0x1b], 0
je 0x10002e6b
push esi
push str.invalid_cacheable_data:__s
mov dword [edi], 1
call fcn.1001691b
mov eax, dword [0x1003ff54]
add esp, 8
cmp eax, ebp
jne 0x10002e47
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.pobus32.dll
call esi
cmp eax, ebp
jne 0x10002e2e
push str.pobus64.dll
call esi
cmp eax, ebp
jne 0x10002e2e
push str.poda32.dll
call esi
cmp eax, ebp
jne 0x10002e2e
push str.poda64.dll
call esi
push str.E43697C5
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1003ff54], eax
cmp eax, ebp
jne 0x10002e47
xor edi, edi
jmp 0x10002e50
push str.dropCachedData
call eax
mov edi, eax
lea esi, [esp + 0x3c]
mov dword [esp + 0xd0], 0xffffffff
call fcn.1000cb2c
mov eax, edi
jmp 0x10003196
push str.i_dt
lea eax, [esp + 0x40]
push eax
mov ecx, 0x10035990
call fcn.1000d7f2
push eax
lea ecx, [esp + 0xac]
call fcn.1000cd1a
lea esi, [esp + 0x54]
mov byte [esp + 0xd0], 4
call fcn.100031c0
mov byte [esp + 0xd0], 5
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x68]
mov ebx, dword [eax]
mov edi, ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], ecx
lea ecx, [ecx]
cmp edi, ebp
je 0x10002eca
cmp edi, dword [esp + 0x24]
je 0x10002ecf
call fcn.1001afea
cmp ebx, dword [esp + 0x28]
je 0x10003122
cmp edi, ebp
jne 0x10002f0e
call fcn.1001afea
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x10002eee
call fcn.1001afea
mov esi, dword [ebx + 0x1c]
mov eax, esi
cmp eax, esi
jae 0x10002ef7
mov eax, esi
cmp esi, 1
jb 0x10002f03
mov eax, 1
cmp dword [ebx + 0x20], 0x10
jb 0x10002f12
mov edx, dword [ebx + 0xc]
jmp 0x10002f15
mov eax, dword [edi]
jmp 0x10002ee4
lea edx, [ebx + 0xc]
mov ecx, 0x100358f8
call fcn.10001360
cmp eax, ebp
jne 0x10002f38
cmp esi, 1
jb 0x10002f38
xor eax, eax
cmp esi, 1
setne al
cmp eax, ebp
je 0x10002fb8
cmp edi, ebp
jne 0x10002f88
call fcn.1001afea
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x10002f4d
call fcn.1001afea
cmp dword [esp + 0xc0], 0x10
mov ecx, dword [esp + 0xac]
jae 0x10002f65
lea ecx, [esp + 0xac]
mov esi, dword [ebx + 0x1c]
mov eax, esi
cmp eax, esi
jae 0x10002f6e
mov edi, dword [esp + 0xbc]
mov eax, esi
cmp esi, edi
jb 0x10002f7d
mov eax, edi
cmp dword [ebx + 0x20], 0x10
jb 0x10002f8c
mov edx, dword [ebx + 0xc]
jmp 0x10002f8f
mov eax, dword [edi]
jmp 0x10002f43
lea edx, [ebx + 0xc]
call fcn.10001360
cmp eax, ebp
jne 0x10003092
cmp esi, edi
jb 0x10003092
xor eax, eax
cmp esi, dword [esp + 0xbc]
setne al
cmp eax, ebp
jne 0x10003092
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x20], ebp
cmp dword [esp + 0x1c], ebp
jne 0x10002fca
mov edi, dword [esp + 0x2c]
cmp dword [esp + 0xc0], 0x10
mov esi, dword [esp + 0xac]
jae 0x10002fe2
lea esi, [esp + 0xac]
mov eax, dword [esp + 0x34]
cmp eax, ebp
jne 0x100030b6
call fcn.1001afea
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x10002fff
call fcn.1001afea
mov edx, dword [ebx + 0x24]
lea ecx, [esp + 0x20]
push ecx
push edi
push esi
call edx
mov edi, eax
cmp dword [esp + 0x20], ebp
je 0x10003092
mov eax, dword [esp + 0x30]
mov dword [eax], 1
cmp edi, ebp
je 0x10003035
push str.dropCachedData
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x100030c1
cmp dword [esp + 0x1c], ebp
je 0x1000308e
mov eax, dword [0x1003ff58]
cmp eax, ebp
jne 0x10003087
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.pobus32.dll
call esi
cmp eax, ebp
jne 0x10003072
push str.pobus64.dll
call esi
cmp eax, ebp
jne 0x10003072
push str.poda32.dll
call esi
cmp eax, ebp
jne 0x10003072
push str.poda64.dll
call esi
push str.FB7C34E6
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1003ff58], eax
cmp eax, ebp
je 0x1000308e
mov ecx, dword [esp + 0x1c]
push ecx
call eax
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x34]
cmp eax, ebp
jne 0x100030bd
call fcn.1001afea
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x100030ab
call fcn.1001afea
mov ebx, dword [ebx]
mov edi, dword [esp + 0x34]
jmp 0x10002ec0
mov eax, dword [eax]
jmp 0x10002ff5
mov eax, dword [eax]
jmp 0x100030a1
lea edx, [esp + 0x54]
push edx
call fcn.100077b0
mov eax, dword [esp + 0x68]
push eax
call fcn.1001aa0a
mov ecx, dword [esp + 0x58]
add esp, 4
push ecx
mov dword [esp + 0x6c], ebp
call fcn.1001aa0a
add esp, 4
cmp dword [esp + 0xc0], 0x10
jb 0x10003103
mov edx, dword [esp + 0xac]
push edx
call fcn.1001aa0a
add esp, 4
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], ebp
mov byte [esp + 0xac], 0
jmp 0x10002e50
lea eax, [esp + 0x54]
push eax
call fcn.100077b0
mov ecx, dword [esp + 0x68]
push ecx
call fcn.1001aa0a
mov edx, dword [esp + 0x58]
add esp, 4
push edx
mov dword [esp + 0x6c], ebp
call fcn.1001aa0a
add esp, 4
cmp dword [esp + 0xc0], 0x10
jb 0x10003164
mov eax, dword [esp + 0xac]
push eax
call fcn.1001aa0a
add esp, 4
lea esi, [esp + 0x3c]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], ebp
mov byte [esp + 0xac], 0
mov dword [esp + 0xd0], 0xffffffff
call fcn.1000cb2c
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb0]
xor ecx, esp
call fcn.1001a9d1
add esp, 0xc0
ret