Function at 0x30f1ec0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x348
mov esi, esp
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
lea eax, [0x3120190]
mov dword [esi + 0x2d4], eax
mov al, byte [esi + 0xcc]
mov byte [esi + 0xe4], al
mov byte [esi + 0xd0], 0x81
mov byte [esi + 0xd1], 0x1f
mov byte [esi + 0xd2], 0xf9
mov byte [esi + 0xd3], 0x11
mov byte [esi + 0xd4], 0x9b
mov byte [esi + 0xd5], 0x13
mov byte [esi + 0xd6], 0xc6
mov byte [esi + 0xd7], 0x15
mov byte [esi + 0xd8], 0xca
mov byte [esi + 0xd9], 0x17
mov byte [esi + 0xda], 0xf2
mov byte [esi + 0xdb], 9
mov byte [esi + 0xdc], 0xea
mov byte [esi + 0xdd], 0xb
mov byte [esi + 0xde], 0xa
mov byte [esi + 0xdf], 0xd
mov eax, 0x10
mov byte [esi + eax + 0xd0], 0
add eax, 1
cmp eax, 0x13
jne 0x30f1f64
mov dword [esi + 0x30], 0
mov eax, dword [esi + 0x30]
cmp eax, 0x13
jae 0x30f1fb6
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x30]
movzx ecx, byte [esi + ecx + 0xd0]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.030f3ee0
add esp, 8
mov ecx, dword [esi + 0x30]
mov byte [esi + ecx + 0xd0], al
mov eax, dword [esi + 0x30]
inc eax
mov dword [esi + 0x30], eax
jmp 0x30f1f7b
lea eax, [esi + 0xd0]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.030ec610
add esp, 0xc
and al, 1
movzx ebx, al
mov al, byte [esi + 0xc8]
mov byte [esi + 0xe8], al
mov byte [esi + 0x168], 0x1f
mov byte [esi + 0x169], 0xf9
mov byte [esi + 0x16a], 0x1b
mov byte [esi + 0x16b], 0xff
mov byte [esi + 0x16c], 0x6a
mov byte [esi + 0x16d], 0xfd
mov byte [esi + 0x16e], 0x76
mov byte [esi + 0x16f], 0xe3
mov byte [esi + 0x170], 0x39
mov byte [esi + 0x171], 0xe1
mov byte [esi + 0x172], 0x34
mov byte [esi + 0x173], 0xe7
mov byte [esi + 0x174], 0
mov byte [esi + 0x175], 0xe5
mov byte [esi + 0x176], 0xc
mov byte [esi + 0x177], 0xeb
mov byte [esi + 0x178], 0xe8
mov byte [esi + 0x179], 0xe9
mov eax, 0x12
mov byte [esi + eax + 0x168], 0
add eax, 1
cmp eax, 0x16
jne 0x30f2066
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x34]
cmp eax, 0x16
jae 0x30f20b8
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
movzx ecx, byte [esi + ecx + 0x168]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.030f3f60
add esp, 8
mov ecx, dword [esi + 0x34]
mov byte [esi + ecx + 0x168], al
mov eax, dword [esi + 0x34]
inc eax
mov dword [esi + 0x34], eax
jmp 0x30f207d
lea eax, [esi + 0x168]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.030ec610
add esp, 0xc
and al, 1
movzx eax, al
or ebx, eax
cmp ebx, 0
setne bl
mov al, byte [esi + 0xc4]
mov byte [esi + 0xec], al
mov byte [esi + 0x118], 0xe6
mov byte [esi + 0x119], 0x41
mov byte [esi + 0x11a], 0xed
mov byte [esi + 0x11b], 0x43
mov byte [esi + 0x11c], 0xd6
mov byte [esi + 0x11d], 0x45
mov byte [esi + 0x11e], 0xeb
mov byte [esi + 0x11f], 0x47
mov byte [esi + 0x120], 0xe0
mov byte [esi + 0x121], 0x49
mov byte [esi + 0x122], 0xe3
mov byte [esi + 0x123], 0x4b
mov byte [esi + 0x124], 0xdf
mov byte [esi + 0x125], 0x4d
mov byte [esi + 0x126], 0xda
mov byte [esi + 0x127], 0x4f
mov byte [esi + 0x128], 0x1f
mov byte [esi + 0x129], 0xb1
mov byte [esi + 0x12a], 0x20
mov byte [esi + 0x12b], 0xb3
mov byte [esi + 0x12c], 0x2d
mov byte [esi + 0x12d], 0xb5
mov byte [esi + 0x12e], 0xd8
mov byte [esi + 0x12f], 0xb7
mov byte [esi + 0x130], 0x2b
mov byte [esi + 0x131], 0xb9
mov byte [esi + 0x132], 0x2b
mov byte [esi + 0x133], 0xbb
mov byte [esi + 0x134], 0x10
mov byte [esi + 0x135], 0xbd
mov byte [esi + 0x136], 0x17
mov byte [esi + 0x137], 0xbf
mov byte [esi + 0x138], 0x34
mov byte [esi + 0x139], 0xa1
mov byte [esi + 0x13a], 7
mov byte [esi + 0x13b], 0xa3
mov byte [esi + 0x13c], 0xa4
mov byte [esi + 0x13d], 0xa5
mov eax, 0x26
mov byte [esi + eax + 0x118], 0
add eax, 1
cmp eax, 0x2c
jne 0x30f21ff
mov dword [esi + 0x38], 0
mov eax, dword [esi + 0x38]
cmp eax, 0x2c
jae 0x30f2251
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x38]
movzx ecx, byte [esi + ecx + 0x118]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.030f3fe0
add esp, 8
mov ecx, dword [esi + 0x38]
mov byte [esi + ecx + 0x118], al
mov eax, dword [esi + 0x38]
inc eax
mov dword [esi + 0x38], eax
jmp 0x30f2216
lea eax, [esi + 0x118]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.030ec610
add esp, 0xc
and al, 1
movzx eax, al
and bl, 1
movzx ecx, bl
and ecx, ecx
xor ecx, 0xffffffff
and eax, eax
xor eax, 0xffffffff
and ecx, eax
xor ecx, 0xffffffff
cmp ecx, 0
setne bl
mov al, byte [esi + 0xc0]
mov byte [esi + 0xf0], al
mov byte [esi + 0x144], 0xe1
mov byte [esi + 0x145], 0xbb
mov byte [esi + 0x146], 0x2b
mov byte [esi + 0x147], 0xb9
mov byte [esi + 0x148], 0x29
mov byte [esi + 0x149], 0xbf
mov byte [esi + 0x14a], 0x23
mov byte [esi + 0x14b], 0xbd
mov byte [esi + 0x14c], 0x23
mov byte [esi + 0x14d], 0xb3
mov byte [esi + 0x14e], 0x29
mov byte [esi + 0x14f], 0xb1
mov byte [esi + 0x150], 0x25
mov byte [esi + 0x151], 0xb7
mov byte [esi + 0x152], 0xe4
mov byte [esi + 0x153], 0xb5
mov byte [esi + 0x154], 0x21
mov byte [esi + 0x155], 0xab
mov byte [esi + 0x156], 0x3d
mov byte [esi + 0x157], 0xa9
mov byte [esi + 0x158], 0x34
mov byte [esi + 0x159], 0xaf
mov byte [esi + 0x15a], 0x31
mov byte [esi + 0x15b], 0xad
mov byte [esi + 0x15c], 0x38
mov byte [esi + 0x15d], 0xa3
mov byte [esi + 0x15e], 0x39
mov byte [esi + 0x15f], 0xa1
mov byte [esi + 0x160], 0xa0
mov byte [esi + 0x161], 0xa7
mov eax, 0x1e
mov byte [esi + eax + 0x144], 0
add eax, 1
cmp eax, 0x24
jne 0x30f2373
mov dword [esi + 0x3c], 0
mov eax, dword [esi + 0x3c]
cmp eax, 0x24
jae 0x30f23c5
mov eax, dword [esi + 0x3c]
mov ecx, dword [esi + 0x3c]
movzx ecx, byte [esi + ecx + 0x144]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.030f4070
add esp, 8
mov ecx, dword [esi + 0x3c]
mov byte [esi + ecx + 0x144], al
mov eax, dword [esi + 0x3c]
inc eax
mov dword [esi + 0x3c], eax
jmp 0x30f238a
lea eax, [esi + 0x144]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.030ec610
add esp, 0xc
and al, 1
movzx ecx, al
and bl, 1
movzx eax, bl
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, eax
and edx, 0xa9208531
mov ebx, ecx
and ebx, 0xa9208531
or edx, 0
or ebx, 0
xor edx, ebx
or eax, ecx
xor eax, 0xffffffff
and eax, 0xffffffff
or edx, eax
cmp edx, 0
setne bl
mov al, byte [esi + 0xa0]
mov byte [esi + 0xf4], al
mov byte [esi + 0xa4], 0xa0
mov byte [esi + 0xa5], 0xf
mov byte [esi + 0xa6], 0x9f
mov byte [esi + 0xa7], 0xf1
mov byte [esi + 0xa8], 0x59
mov byte [esi + 0xa9], 0xf3
mov byte [esi + 0xaa], 0x59
mov byte [esi + 0xab], 0xf5
mov byte [esi + 0xac], 0x5a
mov byte [esi + 0xad], 0xf7
mov byte [esi + 0xae], 0x63
mov byte [esi + 0xaf], 0xf9
mov byte [esi + 0xb0], 0x16
mov byte [esi + 0xb1], 0xfb
mov byte [esi + 0xb2], 0x50
mov byte [esi + 0xb3], 0xfd
mov byte [esi + 0xb4], 0x69
mov byte [esi + 0xb5], 0xff
mov byte [esi + 0xb6], 0x6f
mov byte [esi + 0xb7], 0xe1
mov byte [esi + 0xb8], 0x4e
mov byte [esi + 0xb9], 0xe3
mov byte [esi + 0xba], 0xe2
mov byte [esi + 0xbb], 0xe5
mov eax, 0x18
mov byte [esi + eax + 0xa4], 0
add eax, 1
cmp eax, 0x1c
jne 0x30f24d6
mov dword [esi + 0x40], 0
mov eax, dword [esi + 0x40]
cmp eax, 0x1c
jae 0x30f2528
mov eax, dword [esi + 0x40]
mov ecx, dword [esi + 0x40]
movzx ecx, byte [esi + ecx + 0xa4]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.030f40e0
add esp, 8
mov ecx, dword [esi + 0x40]
mov byte [esi + ecx + 0xa4], al
mov eax, dword [esi + 0x40]
inc eax
mov dword [esi + 0x40], eax
jmp 0x30f24ed
lea eax, [esi + 0xa4]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.030ec610
add esp, 0xc
and al, 1
movzx ecx, al
and bl, 1
movzx eax, bl
mov edx, ecx
xor edx, 0xffffffff
mov ebx, eax
and ebx, edx
mov edx, eax
xor edx, ecx
add eax, edx
sub eax, ebx
cmp eax, 0
setne bl
mov al, byte [esi + 0x9c]
mov byte [esi + 0xf8], al
mov byte [esi + 0x58], 0xf4
mov byte [esi + 0x59], 0x6b
mov byte [esi + 0x5a], 0xc6
mov byte [esi + 0x5b], 0x69
mov byte [esi + 0x5c], 0xcf
mov byte [esi + 0x5d], 0x6f
mov byte [esi + 0x5e], 0xcb
mov byte [esi + 0x5f], 0x6d
mov byte [esi + 0x60], 0xc7
mov byte [esi + 0x61], 0x53
mov byte [esi + 0x62], 0xc7
mov byte [esi + 0x63], 0x51
mov byte [esi + 0x64], 0x82
mov byte [esi + 0x65], 0x57
mov byte [esi + 0x66], 0xc3
mov byte [esi + 0x67], 0x55
mov byte [esi + 0x68], 0xc3
mov byte [esi + 0x69], 0x5b
mov byte [esi + 0x6a], 0xf6
mov byte [esi + 0x6b], 0x59
mov byte [esi + 0x6c], 0xf7
mov byte [esi + 0x6d], 0x5f
mov byte [esi + 0x6e], 0xca
mov byte [esi + 0x6f], 0x5d
mov byte [esi + 0x70], 0xf7
mov byte [esi + 0x71], 0x43
mov byte [esi + 0x72], 0x42
mov byte [esi + 0x73], 0x41
mov dword [esi + 0x44], 0
mov eax, dword [esi + 0x44]
cmp eax, 0x1c
jae 0x30f2621
mov eax, dword [esi + 0x44]
mov ecx, dword [esi + 0x44]
movzx ecx, byte [esi + ecx + 0x58]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.030f4150
add esp, 8
mov ecx, dword [esi + 0x44]
mov byte [esi + ecx + 0x58], al
mov eax, dword [esi + 0x44]
inc eax
mov dword [esi + 0x44], eax
jmp 0x30f25ec
sub esp, 0xc
lea eax, [esi + 0x58]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.030ec610
add esp, 0xc
movzx eax, al
xor ecx, ecx
mov cl, bl
mov ebx, ecx
not ebx
or ebx, 0xfe
not eax
and ebx, eax
not bl
xor eax, eax
cmp dword [ebp + 0x10], 0
sete al
mov dword [esi + 0x2d0], eax
mov eax, dword [esi + 0x2d4]
mov ecx, dword [esi + 0x2d0]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x1c8], eax
push eax
mov eax, esp
mov dword [esi + 0x1cc], eax
mov dword [eax], 0x3120080
push eax
mov ecx, esp
mov dword [ecx], 0x2f
push eax
mov eax, esp
mov dword [esi + 0x1c4], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1b8], eax
mov dword [eax], 0xe
push eax
mov eax, esp
mov dword [esi + 0x1c0], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1b4], eax
mov dword [eax], 0xf
push eax
mov eax, esp
mov dword [esi + 0x1bc], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1b0], eax
mov dword [eax], 0x10
push eax
mov eax, esp
mov dword [esi + 0x1f0], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1e0], eax
mov dword [eax], 0x11
push eax
mov eax, esp
mov dword [esi + 0x1dc], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1d0], eax
mov dword [eax], 0x12
push eax
mov eax, esp
mov dword [esi + 0x1e8], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1d8], eax
mov dword [eax], 0x13
push eax
mov eax, esp
mov dword [esi + 0x1e4], eax
mov dword [eax], 0x3120198
push eax
mov dword [esi + 0x1d4], esp
push eax
mov eax, esp
mov dword [esi + 0x1f4], eax
mov dword [eax], 0x31201a0
push eax
mov dword [esi + 0x1ec], esp
push eax
mov eax, esp
mov dword [esi + 0x20c], eax
mov dword [eax], 0x31201a8
push eax
mov dword [esi + 0x204], esp
push eax
mov eax, esp
mov dword [esi + 0x208], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x1fc], eax
mov dword [eax], 0x17
push eax
mov eax, esp
mov dword [esi + 0x200], eax
mov dword [eax], 0x31201b0
push eax
mov dword [esi + 0x1f8], esp
push eax
mov eax, esp
mov dword [esi + 0x224], eax
mov dword [eax], 0x31201b8
push eax
mov dword [esi + 0x220], esp
push eax
mov eax, esp
mov dword [esi + 0x21c], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x218], eax
mov dword [eax], 0x1a
push eax
mov eax, esp
mov dword [esi + 0x214], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x210], eax
mov dword [eax], 0x1b
push eax
mov eax, esp
mov dword [esi + 0x23c], eax
mov dword [eax], 0x31201c0
push eax
mov dword [esi + 0x230], esp
push eax
mov eax, esp
mov dword [esi + 0x234], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x228], eax
mov dword [eax], 0x1d
push eax
mov edi, esp
mov dword [esi + 0x2cc], edi
mov dword [edi], 0x31201c8
push eax
mov dword [esi + 0x2c8], esp
push eax
mov edi, esp
mov dword [esi + 0x2c4], edi
mov dword [edi], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x2b8], eax
mov dword [eax], 0x27
push eax
mov eax, esp
mov dword [esi + 0x2a4], eax
mov dword [eax], 0x31201d0
push eax
mov dword [esi + 0x298], esp
push eax
mov eax, esp
mov dword [esi + 0x294], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x290], eax
mov dword [eax], 0x24
push eax
mov eax, esp
mov dword [esi + 0x28c], eax
mov dword [eax], 0x31201d8
push eax
mov dword [esi + 0x288], esp
push eax
mov eax, esp
mov dword [esi + 0x284], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x280], eax
mov dword [eax], 0x23
push eax
mov eax, esp
mov dword [esi + 0x27c], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x278], eax
mov dword [eax], 0x24
push eax
mov eax, esp
mov dword [esi + 0x274], eax
mov dword [eax], 0x31201e0
push eax
mov dword [esi + 0x270], esp
push eax
mov eax, esp
mov dword [esi + 0x26c], eax
mov dword [eax], 0x31201e8
push eax
mov dword [esi + 0x268], esp
push eax
mov eax, esp
mov dword [esi + 0x264], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x25c], eax
mov dword [eax], 0x1d
push eax
mov eax, esp
mov dword [esi + 0x260], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x250], eax
mov dword [eax], 0x28
push eax
mov eax, esp
mov dword [esi + 0x258], eax
mov dword [eax], 0x31201f0
push eax
mov dword [esi + 0x24c], esp
push eax
mov eax, esp
mov dword [esi + 0x254], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x248], eax
mov dword [eax], 0x2a
push eax
mov eax, esp
mov dword [esi + 0x244], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x240], eax
mov dword [eax], 0x2b
push eax
mov edi, esp
mov dword [edi], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x2ac], eax
mov dword [eax], 0x2c
push eax
mov eax, esp
mov dword [esi + 0x2b4], eax
mov dword [eax], 0x31201f8
push eax
mov dword [esi + 0x2a0], esp
push eax
mov eax, esp
mov dword [esi + 0x2b0], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [esi + 0x29c], eax
mov dword [eax], 0x2e
push eax
mov eax, esp
mov dword [esi + 0x2bc], eax
mov dword [eax], 0x3120080
push eax
mov eax, esp
mov dword [eax], 0x2f
push eax
mov edx, esp
mov dword [esi + 0x1ac], edx
mov dword [edx], 0x3120080
push eax
mov edx, esp
mov dword [esi + 0x1a8], edx
mov dword [edx], 0x18
push eax
mov edx, esp
mov dword [esi + 0x238], edx
mov dword [edx], 0x3120080
push eax
mov edx, esp
mov dword [edx], 0x25
jmp dword [esi + 0x1c8]