Function at 0x1002e7c0
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10088110
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x100a7078]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x100aaa04], eax
call edi
sub eax, dword [esi + 0x30]
mov ecx, eax
sbb edx, dword [esi + 0x34]
call fcn.10085440
cvtsd2ss xmm0, xmm0
divss xmm0, dword [0x1009d9e8]
comiss xmm0, dword [0x1009d9a8]
jb 0x1002ec1a
call edi
mov dword [esi + 0x30], eax
mov al, byte [esi + 0x20]
mov dword [esi + 0x34], edx
test al, al
je 0x1002ea31
mov eax, dword [esi + 0x24]
test eax, eax
jle 0x1002e840
dec eax
mov dword [esi + 0x24], eax
mov edi, dword [esi + 0x24]
test edi, edi
js 0x1002ea20
mov eax, 0x91a2b3c5
mov dword [ebp - 0x14], 0xf
imul edi
mov ecx, edi
mov dword [ebp - 0x18], 0
add edx, edi
mov byte [ebp - 0x28], 0
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xe10
sub ecx, eax
mov eax, 0x88888889
imul ecx
mov eax, 0x88888889
add edx, ecx
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
shl eax, 4
sub eax, ecx
shl eax, 2
sub edi, eax
mov dword [ebp - 4], 0
push edi
push ebx
cmp ebx, 0xa
jae 0x1002e91d
sub esp, 0x18
cmp edi, 0xa
jae 0x1002e8f3
mov bh, 0x72
mov byte [ebp - 0x2c], 0
mov al, 0x42
mov byte [ebp - 0x34], bh
mov cl, 0x57
mov byte [ebp - 0x2c], 0
mov dl, 0x16
mov ah, al
mov ch, cl
mov bl, 0x48
mov dh, dl
xor ch, bh
xor al, bh
mov byte [ebp - 0x2e], ch
xor cl, bh
xor dl, bh
xor bl, bh
xor ah, bh
xor dh, bh
mov byte [ebp - 0x2d], dh
jmp 0x1002e970
mov dh, 0x4f
mov byte [ebp - 0x2d], 0
mov cl, 0x6a
mov byte [ebp - 0x34], dh
mov dl, 0x2b
mov byte [ebp - 0x2d], 0
mov ah, cl
mov al, 0x7f
mov bl, 0x75
mov ch, dl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1002e970
cmp edi, 0xa
jae 0x1002e94c
mov dh, 0x6f
mov byte [ebp - 0x2d], 0
mov al, 0x4a
mov byte [ebp - 0x34], dh
mov cl, 0xb
mov byte [ebp - 0x2d], 0
mov ah, al
mov dl, 0x55
mov bl, 0x5f
mov ch, cl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1002e96d
mov ch, 0x60
mov byte [ebp - 0x2e], 0
mov al, 0x45
mov byte [ebp - 0x34], ch
mov cl, 4
mov byte [ebp - 0x2e], 0
mov bl, al
mov dl, 0x5a
mov ah, cl
xor al, ch
xor cl, ch
xor dl, ch
xor bl, ch
xor ah, ch
sub esp, 0x18
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2f], ah
lea eax, [ebp - 0x33]
mov byte [ebp - 0x32], cl
mov ecx, esp
push eax
mov byte [ebp - 0x31], dl
mov byte [ebp - 0x30], bl
call fcn.10002870
lea eax, [ebp - 0x50]
push eax
call fcn.1000d830
add esp, 0x24
lea ecx, [ebp - 0x28]
push eax
call fcn.10003ae0
lea ecx, [ebp - 0x50]
call fcn.10002220
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
movaps xmm0, xmmword [0x1009eb30]
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x12f7907
mov byte [ebp - 0x3c], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x1002e9d0
sub esp, 0x18
mov byte [ebp - 0x3c], 0
lea eax, [ebp - 0x4f]
mov ecx, esp
push eax
call fcn.10002870
lea eax, [ebp - 0x68]
push eax
call fcn.1000d830
add esp, 0x20
mov byte [ebp - 4], 1
mov edx, eax
mov ecx, dword [esi + 8]
call fcn.10019110
lea ecx, [ebp - 0x68]
call fcn.10002220
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.10002220
cmp dword [esi + 0x24], 0
jg 0x1002ea31
mov byte [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov al, byte [esi + 0x21]
test al, al
je 0x1002ec1a
movzx eax, word [esi + 0x28]
test ax, ax
jle 0x1002ea4a
dec eax
mov word [esi + 0x28], ax
movzx edi, word [esi + 0x28]
mov eax, edi
test ax, ax
js 0x1002ec09
movsx eax, di
mov ecx, 0xe10
cdq
idiv ecx
mov eax, 0x88888889
mov dword [ebp - 0x14], 0xf
mov ecx, edx
mov dword [ebp - 0x18], 0
imul ecx
mov byte [ebp - 0x28], 0
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx ecx, ax
mov eax, edi
cwde
mov edi, 0x3c
cdq
idiv edi
movzx eax, dx
mov dword [ebp - 4], 2
push eax
push ecx
cmp ecx, 0xa
jae 0x1002eb0d
sub esp, 0x18
cmp eax, 0xa
jae 0x1002eae3
mov bh, 0x4a
mov byte [ebp - 0x2c], 0
mov al, 0x7a
mov byte [ebp - 0x34], bh
mov cl, 0x6f
mov byte [ebp - 0x2c], 0
mov dl, 0x2e
mov ah, al
mov ch, cl
mov bl, 0x70
mov dh, dl
xor ch, bh
xor al, bh
mov byte [ebp - 0x2e], ch
xor cl, bh
xor dl, bh
xor bl, bh
xor ah, bh
xor dh, bh
mov byte [ebp - 0x2d], dh
jmp 0x1002eb60
mov dh, 0x50
mov byte [ebp - 0x2d], 0
mov cl, 0x75
mov byte [ebp - 0x34], dh
mov dl, 0x34
mov byte [ebp - 0x2d], 0
mov ah, cl
mov al, 0x60
mov bl, 0x6a
mov ch, dl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1002eb60
cmp eax, 0xa
jae 0x1002eb3c
mov dh, 0x7d
mov byte [ebp - 0x2d], 0
mov al, 0x58
mov byte [ebp - 0x34], dh
mov cl, 0x19
mov byte [ebp - 0x2d], 0
mov ah, al
mov dl, 0x47
mov bl, 0x4d
mov ch, cl
xor al, dh
xor cl, dh
xor dl, dh
xor bl, dh
xor ah, dh
xor ch, dh
mov byte [ebp - 0x2e], ch
jmp 0x1002eb5d
mov ch, 0x60
mov byte [ebp - 0x2e], 0
mov al, 0x45
mov byte [ebp - 0x34], ch
mov cl, 4
mov byte [ebp - 0x2e], 0
mov bl, al
mov dl, 0x5a
mov ah, cl
xor al, ch
xor cl, ch
xor dl, ch
xor bl, ch
xor ah, ch
sub esp, 0x18
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2f], ah
lea eax, [ebp - 0x33]
mov byte [ebp - 0x32], cl
mov ecx, esp
push eax
mov byte [ebp - 0x31], dl
mov byte [ebp - 0x30], bl
call fcn.10002870
lea eax, [ebp - 0x68]
push eax
call fcn.1000d830
add esp, 0x24
lea ecx, [ebp - 0x28]
push eax
call fcn.10003ae0
lea ecx, [ebp - 0x68]
call fcn.10002220
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
movaps xmm0, xmmword [0x1009e620]
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x1a4c3249
mov word [ebp - 0x3c], 0x34
nop dword [eax]
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x1002ebc0
sub esp, 0x18
mov byte [ebp - 0x3b], 0
lea eax, [ebp - 0x4f]
mov ecx, esp
push eax
call fcn.10002870
lea eax, [ebp - 0x68]
push eax
call fcn.1000d830
add esp, 0x20
mov byte [ebp - 4], 3
mov edx, eax
mov ecx, dword [esi + 0xc]
call fcn.10019110
lea ecx, [ebp - 0x68]
call fcn.10002220
lea ecx, [ebp - 0x28]
call fcn.10002220
cmp word [esi + 0x28], 0
jg 0x1002ec1a
xor eax, eax
mov byte [esi + 0x21], 0
mov word [esi + 0x28], ax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10067955
mov esp, ebp
pop ebp
ret