Function at 0x1002e0a0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [0x1005f010]
xor eax, esp
mov dword [esp + 0x10], eax
push ebx
push esi
push edi
push ecx
mov eax, esp
mov dword [0x101029c8], 0
push ecx
mov dword [0x101029cc], 0
mov edi, ecx
mov dword [0x10104120], 0
mov cl, 0x24
mov dword [0x10104124], 0
mov dl, 0x22
mov dword [0x10104114], 0
mov bl, 0x20
mov dword [0x10104118], 0
mov dword [eax], 0xffffffff
mov eax, esp
mov dword [eax], 0xff5757ed
mov ah, 0x45
mov al, 0x17
mov byte [esp + 0x18], ah
xor al, ah
mov byte [esp + 0x1d], 0
xor cl, ah
mov byte [esp + 0x19], al
xor dl, ah
mov byte [esp + 0x1a], cl
xor bl, ah
mov byte [esp + 0x1b], dl
lea eax, [esp + 0x19]
mov byte [esp + 0x1c], bl
push eax
mov eax, dword [edi + 0x94]
mov ecx, 0x101029c4
push 1
push dword [edi + 0x24]
add eax, 0xf
mov byte [esp + 0x29], 0
push dword [edi + 0x20]
push eax
push dword [edi + 0x18]
call fcn.1002dd40
push ecx
mov eax, esp
mov dh, 0x3b
push ecx
mov cl, 0x52
mov ch, 0x57
mov dl, 0x48
mov bl, 0x4e
mov dword [eax], 0xffffffff
xor cl, dh
mov eax, esp
xor ch, dh
xor dl, dh
xor bl, dh
mov dword [eax], 0xff5757ed
mov al, 0x6d
mov ah, 0x5a
mov byte [esp + 0x1f], 0
xor al, dh
mov byte [esp + 0x1a], cl
xor ah, dh
mov byte [esp + 0x19], al
mov byte [esp + 0x1d], ah
lea eax, [esp + 0x19]
push eax
mov eax, dword [edi + 0x94]
push 2
push dword [edi + 0x24]
add eax, 0xf
mov byte [esp + 0x2a], ch
push dword [edi + 0x20]
mov byte [esp + 0x28], dh
mov ecx, 0x101029c4
push eax
push dword [edi + 0x18]
mov byte [esp + 0x33], dl
mov byte [esp + 0x34], bl
mov byte [esp + 0x37], 0
call fcn.1002dd40
push ecx
mov eax, esp
mov dl, 0x5f
push ecx
mov cl, 0x45
mov bl, 0x4f
mov dword [eax], 0xffffffff
mov eax, esp
mov dword [eax], 0xff5757ed
mov ah, 0x2c
mov al, 0x61
mov byte [esp + 0x18], ah
xor al, ah
mov byte [esp + 0x1d], 0
xor cl, ah
mov byte [esp + 0x19], al
xor dl, ah
mov byte [esp + 0x1a], cl
xor bl, ah
mov byte [esp + 0x1b], dl
lea eax, [esp + 0x19]
mov byte [esp + 0x1c], bl
push eax
mov eax, dword [edi + 0x94]
mov ecx, 0x101029c4
push 3
push dword [edi + 0x24]
add eax, 0xf
mov byte [esp + 0x29], 0
push dword [edi + 0x20]
push eax
push dword [edi + 0x18]
call fcn.1002dd40
push ecx
mov eax, esp
mov dh, 0x6f
push ecx
xor cl, cl
mov ch, 8
xor ch, dh
mov dl, 1
mov dword [eax], 0xffffffff
mov bl, 9
mov eax, esp
xor dl, dh
xor bl, dh
mov dword [eax], 0xff5757ed
mov al, 0x2c
xor al, dh
mov byte [esp + 0x1f], cl
mov ah, 6
mov byte [esp + 0x19], al
xor ah, dh
mov byte [esp + 0x1e], ch
mov byte [esp + 0x1d], ah
xor cl, dh
lea eax, [esp + 0x19]
mov byte [esp + 0x1a], cl
push eax
mov eax, dword [edi + 0x94]
mov ecx, 0x101029c4
push 5
push dword [edi + 0x24]
add eax, 0xf
mov byte [esp + 0x24], dh
push dword [edi + 0x20]
mov byte [esp + 0x2b], dl
push eax
push dword [edi + 0x18]
mov byte [esp + 0x34], bl
mov byte [esp + 0x37], 0
call fcn.1002dd40
mov dh, 0x2e
mov al, 0x60
mov byte [esp + 0x10], dh
mov cl, 0x41
mov dl, 0x4d
mov bl, 0x5a
mov ah, 0x5b
mov ch, 0x4f
xor al, dh
mov byte [esp + 0x17], 0
xor ah, dh
mov byte [esp + 0x11], al
mov byte [esp + 0x15], ah
xor cl, dh
lea eax, [esp + 0x11]
mov byte [esp + 0x12], cl
push eax
xor ch, dh
mov byte [esp + 0x1b], 0
push ecx
mov eax, esp
mov byte [esp + 0x1e], ch
xor dl, dh
xor bl, dh
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1c], bl
mov dword [eax], 0xffffffff
mov eax, dword [edi + 0x94]
add eax, 0xf
push eax
mov eax, dword [edi + 0x90]
add eax, 0x1cc
push eax
push 0
push 0
push 0x10110b59
call fcn.10026a80
mov ah, 0x20
mov byte [esp + 0x31], 0
add esp, 0x1c
mov byte [esp + 0x10], ah
mov cl, 0x4f
mov byte [esp + 0x15], 0
mov al, 0x68
mov dl, cl
xor al, ah
xor cl, ah
mov byte [esp + 0x11], al
xor dl, ah
mov bl, 0x4b
mov byte [esp + 0x12], cl
xor bl, ah
mov byte [esp + 0x13], dl
lea eax, [esp + 0x11]
mov byte [esp + 0x14], bl
push eax
push ecx
mov eax, esp
mov dword [eax], 0xff5757ed
mov eax, dword [edi + 0x94]
add eax, 0xf
push eax
mov eax, dword [edi + 0x90]
add eax, 0x203
push eax
push 0
push 0
push 0x10110b59
call fcn.10026a80
mov eax, dword [0x101029c4]
add esp, 0x1c
cmp eax, 1
jne 0x1002e546
push ecx
mov eax, esp
lea esi, [edi + 0xa4]
push ecx
mov dh, 0x16
mov cl, 0x7f
mov ch, 0x62
xor cl, dh
mov dword [eax], 0xffffffff
xor ch, dh
mov eax, esp
mov dl, 0x7b
mov bl, 0x74
xor dl, dh
xor bl, dh
mov dword [eax], 0xff5757ed
mov al, 0x57
xor al, dh
mov byte [esp + 0x1a], cl
mov ah, 0x79
mov byte [esp + 0x19], al
xor ah, dh
mov byte [esp + 0x1e], ch
mov byte [esp + 0x1d], ah
mov ecx, 0x1010411c
lea eax, [esp + 0x19]
mov byte [esp + 0x1f], 0
push eax
mov eax, dword [edi + 0x94]
push 1
push esi
push dword [edi + 0x24]
add eax, 0x3a
mov byte [esp + 0x28], dh
push dword [edi + 0x20]
mov byte [esp + 0x2f], dl
push eax
push dword [edi + 0x18]
mov byte [esp + 0x38], bl
mov byte [esp + 0x3b], 0
call fcn.1002dee0
push ecx
mov eax, esp
mov bl, 0x2d
push ecx
mov cl, 0x3b
mov ch, 0x39
mov dl, cl
mov bh, 0x21
mov dword [eax], 0xffffffff
mov dh, dl
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 0x19
mov byte [esp + 0x18], 0x58
mov ah, 0x2a
xor al, byte [esp + 0x18]
mov byte [esp + 0x19], al
mov al, byte [esp + 0x18]
xor ah, al
mov byte [esp + 0x21], 0
xor cl, al
mov byte [esp + 0x1d], ah
xor dl, al
mov byte [esp + 0x1a], cl
xor bl, al
mov byte [esp + 0x1b], dl
xor ch, al
mov byte [esp + 0x1c], bl
xor dh, al
mov byte [esp + 0x1e], ch
xor bh, al
mov byte [esp + 0x1f], dh
lea eax, [esp + 0x19]
mov byte [esp + 0x20], bh
push eax
push 2
push esi
push dword [edi + 0x24]
mov byte [esp + 0x31], 0
push dword [edi + 0x20]
mov eax, dword [edi + 0x94]
mov ecx, 0x1010411c
add eax, 0x3a
push eax
push dword [edi + 0x18]
call fcn.1002dee0
push ecx
mov eax, esp
mov bl, 0x43
push ecx
mov cl, 0x35
xor cl, bl
mov dword [eax], 0xffffffff
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 0xb
mov dl, al
mov byte [esp + 0x1a], cl
xor al, bl
mov byte [esp + 0x1c], 0
mov byte [esp + 0x19], al
xor dl, bl
lea eax, [esp + 0x19]
mov byte [esp + 0x18], bl
push eax
mov eax, dword [edi + 0x94]
mov ecx, 0x1010411c
push 3
push esi
push dword [edi + 0x24]
add eax, 0x3a
mov byte [esp + 0x2b], dl
push dword [edi + 0x20]
mov byte [esp + 0x30], 0
push eax
push dword [edi + 0x18]
call fcn.1002dee0
push ecx
mov eax, esp
mov dh, 0x5e
push ecx
mov cl, 0x37
mov ch, 0x2c
xor cl, dh
mov dl, 0x2a
mov dword [eax], 0xffffffff
mov bl, dl
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 0x14
mov ah, 0x3b
mov byte [esp + 0x1a], cl
xor al, dh
xor ah, dh
mov byte [esp + 0x19], al
xor ch, dh
mov byte [esp + 0x1d], ah
lea eax, [esp + 0x19]
push eax
push 4
mov byte [esp + 0x26], ch
mov ecx, 0x1010411c
push esi
jmp 0x1002e7a7
cmp eax, 2
jne 0x1002e66b
push ecx
mov eax, esp
lea esi, [edi + 0xa8]
push ecx
mov bl, 0x4e
mov cl, 0x1d
xor cl, bl
mov dl, 0x1e
mov dword [eax], 0xffffffff
xor dl, bl
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 0xb
xor al, bl
mov byte [esp + 0x1a], cl
mov byte [esp + 0x19], al
mov ecx, 0x10104110
lea eax, [esp + 0x19]
mov byte [esp + 0x1c], 0
push eax
mov eax, dword [edi + 0x94]
push 1
push esi
push dword [edi + 0x24]
add eax, 0x3a
mov byte [esp + 0x28], bl
push dword [edi + 0x20]
mov byte [esp + 0x2f], dl
push eax
push dword [edi + 0x18]
mov byte [esp + 0x38], 0
call fcn.1002dee0
push ecx
mov eax, esp
mov dl, 0x3a
push ecx
mov ch, 0x48
mov cl, 0x27
xor cl, ch
mov bl, 0x24
mov dword [eax], 0xffffffff
xor dl, ch
mov eax, esp
xor bl, ch
mov dword [eax], 0xff5757ed
mov al, 0x1f
xor al, ch
mov byte [esp + 0x18], ch
mov ah, 0x2c
mov byte [esp + 0x19], al
xor ah, ch
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1d], ah
mov ecx, 0x10104110
lea eax, [esp + 0x19]
mov byte [esp + 0x1e], 0
push eax
mov eax, dword [edi + 0x94]
push 2
push esi
push dword [edi + 0x24]
add eax, 0x3a
mov byte [esp + 0x2b], dl
push dword [edi + 0x20]
mov byte [esp + 0x30], bl
push eax
push dword [edi + 0x18]
mov byte [esp + 0x3a], 0
call fcn.1002dee0
push ecx
mov eax, esp
mov bl, 0x47
push ecx
mov cl, 0x28
mov dl, 0x20
mov dword [eax], 0xffffffff
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 1
mov byte [esp + 0x18], bl
mov byte [esp + 0x1c], 0
xor al, bl
mov byte [esp + 0x1c], 0
mov byte [esp + 0x19], al
xor cl, bl
lea eax, [esp + 0x19]
mov byte [esp + 0x1a], cl
push eax
push 3
xor dl, bl
mov ecx, 0x10104110
push esi
jmp 0x1002e7bd
cmp eax, 3
jne 0x1002e757
push ecx
mov eax, esp
lea esi, [edi + 0xac]
push ecx
mov ch, 0x36
mov cl, 0x42
xor cl, ch
mov dl, 0x5e
mov dword [eax], 0xffffffff
mov bl, 0x53
mov eax, esp
xor dl, ch
xor bl, ch
mov dword [eax], 0xff5757ed
mov al, 0x79
xor al, ch
mov byte [esp + 0x18], ch
mov ah, 0x44
mov byte [esp + 0x19], al
xor ah, ch
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1d], ah
mov ecx, 0x10104110
lea eax, [esp + 0x19]
mov byte [esp + 0x1e], 0
push eax
mov eax, dword [edi + 0x94]
push 1
push esi
push dword [edi + 0x24]
add eax, 0x3a
mov byte [esp + 0x2b], dl
push dword [edi + 0x20]
mov byte [esp + 0x30], bl
push eax
push dword [edi + 0x18]
mov byte [esp + 0x3a], 0
call fcn.1002dee0
push ecx
mov eax, esp
mov dl, 0x53
push ecx
mov cl, 0x5b
mov ch, 0x4a
mov bl, 0x4f
mov dh, 0x57
mov dword [eax], 0xffffffff
mov bh, 0x50
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 0x66
mov byte [esp + 0x18], 0x23
mov ah, 0x4c
xor al, byte [esp + 0x18]
mov byte [esp + 0x19], al
mov al, byte [esp + 0x18]
xor cl, al
mov byte [esp + 0x21], 0
xor ah, al
mov byte [esp + 0x1a], cl
xor ch, al
mov byte [esp + 0x1d], ah
xor dh, al
mov byte [esp + 0x1e], ch
xor dl, al
mov byte [esp + 0x1f], dh
xor bl, al
mov byte [esp + 0x21], 0
xor bh, al
mov ecx, 0x10104110
lea eax, [esp + 0x19]
mov byte [esp + 0x20], bh
push eax
push 2
push esi
jmp 0x1002e7b9
cmp eax, 5
jne 0x1002e7d9
push ecx
mov eax, esp
mov dh, 0x3e
push ecx
mov cl, 0x51
mov ch, 0x59
xor cl, dh
mov dl, 0x50
mov dword [eax], 0xffffffff
mov bl, 0x58
mov eax, esp
mov dword [eax], 0xff5757ed
mov al, 0x7d
mov ah, 0x57
mov byte [esp + 0x1a], cl
xor al, dh
xor ah, dh
mov byte [esp + 0x19], al
xor ch, dh
mov byte [esp + 0x1d], ah
lea eax, [esp + 0x19]
push eax
push 1
lea eax, [edi + 0xb4]
mov byte [esp + 0x26], ch
push eax
mov ecx, 0x10104110
xor dl, dh
mov byte [esp + 0x2b], 0
mov byte [esp + 0x24], dh
xor bl, dh
mov byte [esp + 0x2b], 0
mov byte [esp + 0x28], bl
push dword [edi + 0x24]
mov eax, dword [edi + 0x94]
push dword [edi + 0x20]
add eax, 0x3a
mov byte [esp + 0x2f], dl
push eax
push dword [edi + 0x18]
call fcn.1002dee0
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1004305e
mov esp, ebp
pop ebp
ret