Function at 0x1002a180
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Packed with generic packer

Disassembly:
xor edi, edi
je 0x1002a18a
popal
jmp 0x4052eed4
mov edx, 0x4c
cmp byte [esp + 8], 1
jne 0x1002a381
pushal
mov esi, section..rdata
xor edi, edi
je 0x1002a1aa
popal
jmp 0x4052eef4
lea edi, [esi - 0x19000]
xor ecx, ecx
je 0x1002a1ba
popal
jmp 0x4052ef04
mov eax, 0x7d
cmp edx, eax
mov eax, 0x4c
not eax
jne 0x1002a209
mov eax, dword fs:[0x30]
test eax, eax
js 0x1002a1f7
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov dword [eax + 0x20], 0x1000
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
movzx eax, byte [eax + 2]
test eax, eax
jne 0x1002a208
jmp 0x1002a209
xor eax, eax
mov al, byte fs:[0x20]
test eax, eax
jne 0x1002a208
jmp 0x1002a209
popal
push edi
or ebp, 0xffffffff
jmp 0x1002a21a
mov al, byte [esi]
inc esi
mov byte [edi], al
inc edi
add ebx, ebx
jne 0x1002a221
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
jb 0x1002a210
mov eax, 1
add ebx, ebx
jne 0x1002a233
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
adc eax, eax
add ebx, ebx
jae 0x1002a228
jne 0x1002a244
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
jae 0x1002a228
xor ecx, ecx
sub eax, 3
jb 0x1002a258
shl eax, 8
mov al, byte [esi]
inc esi
xor eax, 0xffffffff
je 0x1002a2ca
mov ebp, eax
add ebx, ebx
jne 0x1002a263
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
adc ecx, ecx
add ebx, ebx
jne 0x1002a270
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
adc ecx, ecx
jne 0x1002a294
inc ecx
add ebx, ebx
jne 0x1002a280
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
adc ecx, ecx
add ebx, ebx
jae 0x1002a275
jne 0x1002a291
mov ebx, dword [esi]
sub esi, 0xfffffffc
adc ebx, ebx
jae 0x1002a275
add ecx, 2
cmp ebp, 0xfffff300
adc ecx, 1
lea edx, [edi + ebp]
cmp ebp, 0xfffffffc
jbe 0x1002a2b4
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
dec ecx
jne 0x1002a2a5
jmp 0x1002a216
mov eax, dword [edx]
add edx, 4
mov dword [edi], eax
add edi, 4
sub ecx, 4
ja 0x1002a2b4
add edi, ecx
jmp 0x1002a216
pop esi
mov edi, esi
mov ecx, 0x7b3
mov al, byte [edi]
inc edi
sub al, 0xe8
cmp al, 1
ja 0x1002a2d2
cmp byte [edi], 7
jne 0x1002a2d2
mov eax, dword [edi]
mov bl, byte [edi + 4]
shr ax, 8
rol eax, 0x10
xchg ah, al
sub eax, edi
sub bl, 0xe8
add eax, esi
mov dword [edi], eax
add edi, 5
mov eax, ebx
loop 0x1002a2d7
lea edi, [esi + 0x27000]
mov eax, dword [edi]
or eax, eax
je 0x1002a34f
mov ebx, dword [edi + 4]
lea eax, [eax + esi + 0x2a45c]
add ebx, esi
push eax
add edi, 8
call dword [esi + 0x2a4e8]
xchg ebp, eax
mov al, byte [edi]
inc edi
or al, al
je 0x1002a304
mov ecx, edi
jns 0x1002a333
movzx eax, word [edi]
inc edi
push eax
inc edi
mov ecx, 0xaef24857
push edi
dec eax
repne scasb al, byte es:[edi]
push ebp
call dword [esi + 0x2a4ec]
or eax, eax
je 0x1002a349
mov dword [ebx], eax
add ebx, 4
jmp 0x1002a321
popal
xor eax, eax
ret 0xc
add edi, 4
lea ebx, [esi - 4]
xor eax, eax
mov al, byte [edi]
inc edi
or eax, eax
je 0x1002a380
cmp al, 0xef
ja 0x1002a373
add ebx, eax
mov eax, dword [ebx]
xchg ah, al
rol eax, 0x10
xchg ah, al
add eax, esi
mov dword [ebx], eax
jmp 0x1002a355
and al, 0xf
shl eax, 0x10
mov ax, word [edi]
add edi, 2
jmp 0x1002a362
popal
jmp loc.1000e5c0