Function at 0x1002f1d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov eax, dword [0x100bae20]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xb0], ecx
test esi, esi
je 0x1002f6b2
test ecx, ecx
je 0x1002f6b2
mov al, byte [esi + 0x130]
push ebx
push edi
cmp al, 8
jae 0x1002f289
movzx ebx, al
mov edi, 8
sub edi, ebx
push edi
lea eax, [ecx + ebx + 0x20]
push eax
push esi
mov dword [esi + 0x28c], 0x11
call fcn.10035e20
mov eax, dword [ebp - 0xb0]
push edi
add eax, 0x20
push ebx
push eax
mov byte [esi + 0x130], 8
mov dword [ebp - 0xc], eax
call fcn.10035280
add esp, 0x18
test eax, eax
je 0x1002f27d
cmp ebx, 4
jae 0x1002f26f
mov ecx, dword [ebp - 0xc]
add edi, 0xfffffffc
push edi
push ebx
push ecx
call fcn.10035280
add esp, 0xc
test eax, eax
je 0x1002f26f
push str.Not_a_PNG_file
jmp 0x1002f274
push str.PNG_file_corrupted_by_ASCII_conversion
push esi
call fcn.10035010
add esp, 8
cmp ebx, 3
jae 0x1002f289
or dword [esi + 0x6c], 0x1000
mov bl, 0x54
jmp 0x1002f290
push esi
mov dword [ebp - 0x2c], 0x52444849
mov word [ebp - 0xc], 0x4449
mov byte [ebp - 0xa], 0x41
mov byte [ebp - 9], bl
mov dword [ebp - 0x8c], 0x444e4549
mov word [ebp - 0x14], 0x4c50
mov byte [ebp - 0x12], bl
mov byte [ebp - 0x11], 0x45
mov dword [ebp - 0x3c], 0x44474b62
mov dword [ebp - 0x7c], 0x4d524863
mov dword [ebp - 0x4c], 0x414d4167
mov word [ebp - 0xa4], 0x4968
mov byte [ebp - 0xa2], 0x53
mov byte [ebp - 0xa1], bl
mov dword [ebp - 0x54], 0x50434369
mov byte [ebp - 0x94], 0x69
mov byte [ebp - 0x93], bl
mov word [ebp - 0x92], 0x7458
mov dword [ebp - 0x5c], 0x7346466f
mov dword [ebp - 0x1c], 0x4c414370
mov dword [ebp - 0x24], 0x73594870
mov word [ebp - 0x34], 0x4273
mov byte [ebp - 0x32], 0x49
mov byte [ebp - 0x31], bl
mov dword [ebp - 0x6c], 0x4c414373
mov word [ebp - 0x64], 0x5073
mov byte [ebp - 0x62], 0x4c
mov byte [ebp - 0x61], bl
mov dword [ebp - 0x44], 0x42475273
mov dword [ebp - 0x74], 0x74584574
mov dword [ebp - 0x84], 0x454d4974
mov dword [ebp - 0x9c], 0x534e5274
mov byte [ebp - 0xac], 0x7a
mov byte [ebp - 0xab], bl
mov word [ebp - 0xaa], 0x7458
call fcn.10039710
mov edx, dword [ebp - 0xc]
lea ecx, [esi + 0x120]
add esp, 4
mov edi, eax
cmp dword [ecx], edx
jne 0x1002f398
mov eax, dword [esi + 0x6c]
test al, 8
je 0x1002f398
or eax, 0x2000
mov dword [esi + 0x6c], eax
mov eax, dword [ecx]
cmp eax, dword [ebp - 0x2c]
jne 0x1002f3b5
mov eax, dword [ebp - 0xb0]
push edi
push eax
push esi
call fcn.10039890
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x8c]
jne 0x1002f3d3
mov ecx, dword [ebp - 0xb0]
push edi
push ecx
push esi
call fcn.10039c40
add esp, 0xc
jmp 0x1002f290
push ecx
push esi
call fcn.10035910
add esp, 8
test eax, eax
je 0x1002f448
mov edx, dword [ebp - 0xc]
cmp dword [esi + 0x120], edx
jne 0x1002f3f0
or dword [esi + 0x6c], 4
mov eax, dword [ebp - 0xb0]
push edi
push eax
push esi
call fcn.1003c0c0
mov eax, dword [esi + 0x120]
add esp, 0xc
cmp eax, dword [ebp - 0x14]
jne 0x1002f415
or dword [esi + 0x6c], 2
jmp 0x1002f290
cmp eax, dword [ebp - 0xc]
jne 0x1002f290
mov eax, dword [esi + 0x6c]
test al, 1
jne 0x1002f651
push str.Missing_IHDR_before_IDAT
push esi
call fcn.10035010
add esp, 8
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007cee0
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x120]
cmp eax, dword [ebp - 0x14]
jne 0x1002f469
mov ecx, dword [ebp - 0xb0]
push edi
push ecx
push esi
call fcn.10039a60
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0xc]
je 0x1002f67d
push edi
cmp eax, dword [ebp - 0x3c]
jne 0x1002f48d
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.1003ad80
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x7c]
jne 0x1002f4a7
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.10039f90
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x4c]
jne 0x1002f4c1
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.10039c90
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0xa4]
jne 0x1002f4de
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.1003afd0
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x5c]
jne 0x1002f4f8
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.1003b2c0
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x1c]
jne 0x1002f512
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.1003b410
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x6c]
jne 0x1002f52c
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.1003b720
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x24]
jne 0x1002f546
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.1003b170
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x34]
jne 0x1002f560
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.10039e20
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x44]
jne 0x1002f57a
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.1003a380
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x54]
jne 0x1002f594
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.1003a590
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x64]
jne 0x1002f5ae
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.1003a830
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x74]
jne 0x1002f5c8
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.1003ba70
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x84]
jne 0x1002f5e5
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.1003b950
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x9c]
jne 0x1002f602
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.1003ab10
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0xac]
jne 0x1002f61f
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.1003bc30
add esp, 0xc
jmp 0x1002f290
cmp eax, dword [ebp - 0x94]
jne 0x1002f63c
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.1003be40
add esp, 0xc
jmp 0x1002f290
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.1003c0c0
add esp, 0xc
jmp 0x1002f290
cmp byte [esi + 0x12a], 3
jne 0x1002f6b0
test al, 2
jne 0x1002f6b0
push str.Missing_PLTE_before_IDAT
push esi
call fcn.10035010
add esp, 8
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007cee0
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x6c]
test al, 1
jne 0x1002f68b
push str.Missing_IHDR_before_IDAT
jmp 0x1002f69d
cmp byte [esi + 0x12a], 3
jne 0x1002f6a6
test al, 2
jne 0x1002f6a6
push str.Missing_PLTE_before_IDAT
push esi
call fcn.10035010
add esp, 8
or dword [esi + 0x6c], 4
mov dword [esi + 0x110], edi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.1007cee0
mov esp, ebp
pop ebp
ret