Function at 0x1002ccb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
push ebx
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x14], ebx
mov eax, dword [ebx + 8]
mov dword [esp + 0x18], eax
test al, 0x40
je 0x1002ccfc
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
cmp eax, dword [ecx]
jb 0x1002ccdd
push eax
call fcn.10052d00
mov esi, dword [ebx + 0x40]
mov edi, dword [ebx + 0x44]
push eax
push 9
call fcn.10028200
add esp, 8
mov dword [eax], esi
lea ebx, [eax + 8]
mov dword [eax + 4], edi
mov eax, dword [esp + 0x18]
jmp 0x1002ccff
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
test al, al
jns 0x1002cd3f
cmp ebx, dword [edi]
jb 0x1002cd18
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov esi, dword [esp + 0x14]
push ebx
push 0x10
mov esi, dword [esi + 0x48]
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov ebx, eax
add esp, 0x14
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x100
je 0x1002cd77
cmp ebx, dword [edi]
jb 0x1002cd54
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x18
mov esi, dword [eax + 0x4c]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x2000000
je 0x1002cdb7
cmp ebx, dword [edi]
jb 0x1002cd8c
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x51
mov esi, dword [eax + 0x98]
mov edi, dword [eax + 0x9c]
call fcn.10028200
add esp, 8
lea ebx, [eax + 8]
mov dword [eax], esi
mov dword [eax + 4], edi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x4000000
je 0x1002cdf8
mov ecx, dword [ebp + 0xc]
cmp ebx, dword [ecx]
jb 0x1002cdcd
push ebx
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x59
mov esi, dword [eax + 0xa0]
mov edi, dword [eax + 0xa4]
call fcn.10028200
add esp, 8
lea ebx, [eax + 8]
mov dword [eax], esi
mov dword [eax + 4], edi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
mov esi, dword [esp + 0x14]
mov edi, dword [ebp + 0xc]
test al, 1
je 0x1002ce1e
mov eax, dword [esi + 0x28]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0xc
call fcn.10011ea0
mov ebx, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x8000000
je 0x1002ce59
cmp ebx, dword [edi]
jb 0x1002ce33
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov esi, dword [esi + 0xa8]
push ebx
push 0x68
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov ebx, eax
add esp, 0x14
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
mov esi, dword [esp + 0x14]
test al, 2
je 0x1002ce78
mov eax, dword [esi + 0x2c]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0xe
call fcn.10011ea0
mov ebx, eax
mov dword [esp + 0x10], ebx
cmp dword [esi + 0xbc], 0xf
jne 0x1002ceba
cmp ebx, dword [edi]
jb 0x1002ce8f
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
cmp dword [esi + 0xbc], 0xf
jne 0x1002cea0
mov esi, dword [esi + 0xb8]
jmp 0x1002cea2
xor esi, esi
push ebx
push 0x78
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
mov esi, dword [esp + 0x18]
test esi, 0x200
je 0x1002cefa
cmp ebx, dword [edi]
jb 0x1002ced4
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x80
mov esi, dword [eax + 0x50]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov esi, dword [esp + 0x28]
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
test esi, 0x10000000
je 0x1002cf3d
cmp ebx, dword [edi]
jb 0x1002cf10
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x88
mov esi, dword [eax + 0xac]
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov esi, dword [esp + 0x2c]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x10], ebx
test esi, 0x20000000
je 0x1002cf83
cmp ebx, dword [edi]
jb 0x1002cf53
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x90
mov edi, dword [eax + 0xb0]
mov esi, dword [eax + 0xb4]
call fcn.10028200
push eax
push esi
push edi
call fcn.10011f60
mov esi, dword [esp + 0x2c]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x10], ebx
mov edi, dword [ebp + 0xc]
test esi, 0x400
je 0x1002cfc2
cmp ebx, dword [edi]
jb 0x1002cf9c
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x98
mov esi, dword [eax + 0x54]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov esi, dword [esp + 0x28]
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
test esi, 0x1000
je 0x1002cffe
cmp ebx, dword [edi]
jb 0x1002cfd8
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0xa0
mov esi, dword [eax + 0x60]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov esi, dword [esp + 0x28]
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
test esi, 0x800
je 0x1002d03e
cmp ebx, dword [edi]
jb 0x1002d014
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0xa8
mov edi, dword [eax + 0x58]
mov esi, dword [eax + 0x5c]
call fcn.10028200
push eax
push esi
push edi
call fcn.10011f60
mov esi, dword [esp + 0x2c]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x10], ebx
mov edi, dword [ebp + 0xc]
test esi, 0x2000
je 0x1002d07d
cmp ebx, dword [edi]
jb 0x1002d057
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0xb0
mov esi, dword [eax + 0x64]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov esi, dword [esp + 0x28]
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
test esi, 0x8000
je 0x1002d0c2
cmp ebx, dword [edi]
jb 0x1002d095
push ebx
mov ecx, edi
call fcn.10052d00
mov ecx, eax
jmp 0x1002d099
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
push ecx
push 0xb8
mov bl, byte [eax + 0x6c]
call fcn.10028200
push eax
xor eax, eax
test bl, bl
setne al
push eax
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
test esi, 0x4000
je 0x1002d102
cmp ebx, dword [edi]
jb 0x1002d0d8
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0xc0
mov esi, dword [eax + 0x68]
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov esi, dword [esp + 0x2c]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x10], ebx
test esi, 0x20000
je 0x1002d13e
cmp ebx, dword [edi]
jb 0x1002d118
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0xc8
mov esi, dword [eax + 0x70]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov esi, dword [esp + 0x28]
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
test esi, 0x10000
je 0x1002d183
cmp ebx, dword [edi]
jb 0x1002d156
push ebx
mov ecx, edi
call fcn.10052d00
mov ecx, eax
jmp 0x1002d15a
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
push ecx
push 0xd0
mov bl, byte [eax + 0x6d]
call fcn.10028200
push eax
xor eax, eax
test bl, bl
setne al
push eax
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x14]
add eax, 0x10
mov ecx, eax
mov dword [esp + 0x20], eax
call fcn.10056010
mov ecx, eax
xor eax, eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], eax
test ecx, ecx
jle 0x1002d1f1
cmp ebx, dword [edi]
jb 0x1002d1b7
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
push eax
call fcn.10055270
push ebx
push 0xd8
mov esi, dword [eax]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x24]
jl 0x1002d1a5
mov esi, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test esi, 0x40000
je 0x1002d229
cmp ebx, dword [edi]
jb 0x1002d207
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0xe0
mov esi, dword [eax + 0x74]
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov dword [esp + 0x10], ebx
mov esi, dword [esp + 0x14]
cmp dword [esi + 0xbc], 0x1d
jne 0x1002d250
mov eax, dword [esi + 0xb8]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x1d
call fcn.10011ea0
mov ebx, eax
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x18]
test eax, 0x80000
je 0x1002d28f
cmp ebx, dword [edi]
jb 0x1002d269
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov esi, dword [esi + 0x78]
push ebx
push 0xf8
call fcn.10028200
push eax
push esi
call fcn.10028200
mov esi, dword [esp + 0x24]
mov ebx, eax
mov eax, dword [esp + 0x28]
add esp, 0x10
mov dword [esp + 0x10], ebx
test eax, 0x100000
je 0x1002d2c6
cmp ebx, dword [edi]
jb 0x1002d2a4
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov esi, dword [esi + 0x7c]
push ebx
push 0x100
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x1000000
je 0x1002d308
cmp ebx, dword [edi]
jb 0x1002d2db
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x108
mov esi, dword [eax + 0x90]
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov ebx, eax
add esp, 0x14
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
mov esi, dword [esp + 0x14]
test al, 4
je 0x1002d32b
mov eax, dword [esi + 0x30]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x22
call fcn.10011ea0
mov ebx, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x400000
je 0x1002d365
cmp ebx, dword [edi]
jb 0x1002d340
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov esi, dword [esi + 0x88]
push ebx
push pe_nt_image_headers32
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ebx, eax
add esp, 0x10
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test eax, 0x200000
je 0x1002d3aa
cmp ebx, dword [edi]
jb 0x1002d37a
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x120
mov edi, dword [eax + 0x80]
mov esi, dword [eax + 0x84]
call fcn.10028200
push eax
push esi
push edi
call fcn.10011f60
mov ebx, eax
add esp, 0x14
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
test al, 0x20
je 0x1002d482
mov edi, dword [ebp + 0xc]
cmp ebx, dword [edi]
jb 0x1002d3c3
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x14]
push ebx
push 0x12a
mov eax, dword [eax + 0x3c]
mov dword [esp + 0x2c], eax
call fcn.10028200
mov ebx, dword [esp + 0x2c]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.10028200
mov ecx, eax
add esp, 0x10
mov eax, dword [ebx + 8]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], eax
test al, 1
je 0x1002d42f
cmp ecx, dword [edi]
jb 0x1002d409
push ecx
mov ecx, edi
call fcn.10052d00
mov ecx, eax
mov edi, dword [ebx + 0x10]
mov esi, dword [ebx + 0x14]
push ecx
push 8
call fcn.10028200
push eax
push esi
push edi
call fcn.10011f60
mov edi, dword [ebp + 0xc]
mov ecx, eax
mov dword [esp + 0x24], eax
add esp, 0x14
mov eax, dword [esp + 0x24]
test al, 2
je 0x1002d45c
cmp ecx, dword [edi]
jb 0x1002d441
push ecx
mov ecx, edi
call fcn.10052d00
mov ecx, eax
mov esi, dword [ebx + 0x18]
push ecx
push 0x10
call fcn.10028200
push eax
push esi
call fcn.10028200
mov ecx, eax
add esp, 0x10
mov dword [esp + 0x10], ecx
test byte [ebx + 4], 1
je 0x1002d47c
mov eax, dword [ebx + 4]
and eax, 0xfffffffc
push edi
add eax, 4
push ecx
push eax
call fcn.100894f0
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x18]
jmp 0x1002d486
mov ecx, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
test eax, 0x800000
je 0x1002d4c9
cmp ecx, dword [edi]
jb 0x1002d49e
push ecx
mov ecx, edi
call fcn.10052d00
mov ecx, eax
mov eax, dword [esp + 0x14]
push ecx
push 0x130
mov esi, dword [eax + 0x8c]
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov ebx, eax
add esp, 0x14
mov eax, dword [esp + 0x18]
jmp 0x1002d4cd
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
test al, 8
je 0x1002d4ec
mov eax, dword [esi + 0x34]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x27
call fcn.10011ea0
mov ebx, eax
mov eax, dword [esp + 0x18]
test al, 0x10
je 0x1002d503
mov eax, dword [esi + 0x38]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x28
call fcn.10011ea0
mov ebx, eax
lea eax, [esi + 0x1c]
mov ecx, eax
mov dword [esp + 0x24], eax
call fcn.10056010
mov ecx, eax
xor eax, eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], eax
test ecx, ecx
jle 0x1002d56d
cmp ebx, dword [edi]
jb 0x1002d533
push ebx
mov ecx, edi
call fcn.10052d00
mov ebx, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
push eax
call fcn.10055270
push ebx
push 0x148
mov esi, dword [eax]
call fcn.10028200
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.10011f60
mov ebx, eax
add esp, 0x14
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x20]
jl 0x1002d521
mov esi, dword [esp + 0x14]
test byte [esi + 4], 1
je 0x1002d590
mov eax, dword [esi + 4]
and eax, 0xfffffffc
push edi
add eax, 4
push ebx
push eax
call fcn.100894f0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8