Function at 0x603200
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push esi
mov byte [ebp - 0x10], 0x33
mov byte [ebp - 0xf], 0x13
mov byte [ebp - 0xe], 0x22
mov byte [ebp - 0xd], 0x1c
mov byte [ebp - 0xc], 0xa
mov byte [ebp - 0xb], 0x28
mov byte [ebp - 0xa], 0x15
mov byte [ebp - 9], 0x27
mov byte [ebp - 8], 0x32
mov byte [ebp - 7], 0x17
mov byte [ebp - 6], 0x18
mov byte [ebp - 5], 1
mov byte [ebp - 0x1c], 0x2b
mov byte [ebp - 0x1b], 0x2f
mov byte [ebp - 0x1a], 0x11
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x18], 0x30
mov byte [ebp - 0x17], 0x5e
mov byte [ebp - 0x16], 0x53
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x14], 0x5b
mov byte [ebp - 4], 0xb
mov byte [ebp - 3], 7
mov byte [ebp - 2], 2
mov byte [ebp - 1], 0x1b
call fcn.0061e9d0
mov al, byte [esi + 0x117]
add esp, 4
test al, al
je 0x603285
dec al
mov byte [esi + 0x117], al
movzx eax, word [esi + 0x2dc]
sub eax, 0x262
je 0x60329f
sub eax, 0x2b
je 0x6032b6
sub eax, 0xc2
jne 0x6032d5
mov al, byte [esi + 0x117]
test al, al
je 0x6032d5
push esi
call fcn.0061e840
add esp, 4
mov esp, ebp
pop ebp
ret
mov al, byte [esi + 0x117]
test al, al
je 0x6032d5
mov eax, dword [esi + 0xe0]
cdq
sub eax, edx
sar eax, 1
mov dword [esi + 0xe0], eax
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x2cc]
mov edx, dword [esi + 0x2c4]
push ebx
push edi
push eax
push 0
mov ecx, eax
push ecx
push edx
call fcn.006442f0
movzx ebx, ax
xor eax, eax
mov ax, word [esi + 0xea]
push ebx
push eax
call fcn.006442d0
movzx edi, ax
movzx eax, word [esi + 0x2dc]
add eax, 0xfffffd9e
add esp, 0x18
cmp eax, 0xed
mov word [esi + 0xf0], bx
mov word [esi + 0xdc], 5
ja case.0x603336.611
movzx ecx, byte [eax + 0x6036d0]
jmp dword [ecx*4 + 0x6036c0]
mov edx, dword [0x91cfa4]
mov al, byte [edx + 0x1a]
cmp byte [esi], al
jne 0x603488
call fcn.006013f0
test eax, eax
je 0x603441
movzx eax, byte [esi + 0xd8]
mov ecx, eax
imul eax, eax, 0x2970
mov edx, dword [eax + 0xed5a7c]
xor ecx, 1
imul ecx, ecx, 0x2970
cmp edx, dword [ecx + 0xed5a7c]
jg 0x603441
mov eax, dword [0x91cfa8]
cmp byte [eax + 0x64], 5
je 0x603441
call fcn.006013f0
test eax, eax
je case.0x603336.611
movzx eax, byte [esi + 0xd8]
mov ecx, eax
imul eax, eax, 0x2970
mov edx, dword [eax + 0xed5a7c]
xor ecx, 1
imul ecx, ecx, 0x2970
cmp edx, dword [ecx + 0xed5a7c]
jg case.0x603336.611
push 0x3e8
call fcn.0042d710
movzx eax, ax
add esp, 4
and eax, 0x80000003
jns 0x6033e7
dec eax
or eax, 0xfffffffc
inc eax
movzx ecx, al
movzx ebx, byte [ebp + ecx - 4]
cmp ebx, 2
jne 0x603417
xor edx, edx
mov dx, word [esi + 0xea]
push 0x4000
push edx
call fcn.006442d0
add esp, 8
movzx edi, ax
mov word [esi + 0xf0], 0x4000
push ebx
push edi
call fcn.005e11c0
add esp, 8
test eax, eax
je 0x603437
push esi
call fcn.0064b190
add esp, 4
cmp eax, 1
jne 0x60368c
mov ebx, 0xb
jmp 0x60368c
push 0x3e8
call fcn.0042d710
movzx eax, ax
cdq
mov ecx, 9
idiv ecx
movzx edx, dl
movzx ebx, byte [ebp + edx - 0x1c]
push ebx
push edi
call fcn.005e11c0
add esp, 0xc
test eax, eax
je 0x60347e
push esi
call fcn.0064b190
add esp, 4
cmp eax, 1
jne 0x60368c
mov ebx, 0x2b
jmp 0x60368c
cmp al, 0xff
je 0x603499
movzx eax, al
cdq
mov ecx, 0x17
idiv ecx
jmp 0x60349e
mov edx, 1
imul edx, edx, 0x4c0
add edx, 0xd92230
push 3
mov dword [ebp - 8], edx
call fcn.0063c860
movzx ebx, byte [ebp + eax - 0x1c]
push ebx
push edi
call fcn.005e11c0
add esp, 0xc
test eax, eax
jne 0x6034cc
mov ebx, 0x2b
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x316]
cmp ebx, eax
jne 0x60368c
xor ecx, ecx
cmp ebx, 0x2b
setne cl
dec ecx
and ecx, 5
add ecx, 0x2b
mov ebx, ecx
jmp 0x60368c
mov eax, dword [0x91cfa4]
mov dl, byte [esi]
cmp dl, byte [eax + 0x1a]
je case.0x603336.611
mov ebx, 0x20
jmp 0x60368c
mov ecx, dword [0x91cfa4]
mov al, byte [ecx + 0x1a]
cmp byte [esi], al
jne 0x60362d
call fcn.006013f0
test eax, eax
je 0x6035e9
movzx eax, byte [esi + 0xd8]
mov edx, eax
imul eax, eax, 0x2970
mov eax, dword [eax + 0xed5a7c]
xor edx, 1
imul edx, edx, 0x2970
cmp eax, dword [edx + 0xed5a7c]
jg 0x6035e9
mov ecx, dword [0x91cfa8]
cmp byte [ecx + 0x64], 5
je 0x6035e9
call fcn.006013f0
test eax, eax
je case.0x603336.611
movzx eax, byte [esi + 0xd8]
mov edx, eax
imul eax, eax, 0x2970
mov eax, dword [eax + 0xed5a7c]
xor edx, 1
imul edx, edx, 0x2970
cmp eax, dword [edx + 0xed5a7c]
jg case.0x603336.611
push 0x3e8
call fcn.0042d710
movzx ecx, ax
and ecx, 0x80000003
jns 0x6035b7
dec ecx
or ecx, 0xfffffffc
inc ecx
movzx edx, cl
movzx ebx, byte [ebp + edx - 8]
push ebx
push edi
call fcn.005e11c0
add esp, 0xc
test eax, eax
je 0x6035df
push esi
call fcn.0064b190
add esp, 4
cmp eax, 1
jne 0x60368c
mov ebx, 0x18
jmp 0x60368c
push 0x3e8
call fcn.0042d710
movzx eax, ax
and eax, 0x80000007
jns 0x603602
dec eax
or eax, 0xfffffff8
inc eax
movzx ecx, al
movzx ebx, byte [ebp + ecx - 0x10]
push ebx
push edi
call fcn.005e11c0
add esp, 0xc
test eax, eax
je 0x603626
push esi
call fcn.0064b190
add esp, 4
cmp eax, 1
jne 0x60368c
mov ebx, 0x28
jmp 0x60368c
cmp al, 0xff
je 0x603640
movzx eax, al
cdq
mov ecx, 0x17
idiv ecx
mov edi, edx
jmp 0x603645
mov edi, 1
push 0x3e8
call fcn.0042d710
imul edi, edi, 0x4c0
movzx eax, ax
cdq
mov ecx, 5
idiv ecx
movzx eax, byte [edi + 0xd92546]
add esp, 4
movzx edx, dl
movzx ebx, byte [ebp + edx - 0x10]
cmp ebx, eax
jne 0x60368c
xor ecx, ecx
cmp ebx, 0x33
setne cl
dec ecx
and ecx, 0xffffffe9
add ecx, 0x33
mov ebx, ecx
jmp 0x60368c
mov ebx, dword [ebp - 8]
push 1
push ebx
push esi
mov byte [esi + 0x316], bl
call fcn.005e13d0
add esp, 0xc
pop edi
cmp ebx, 0x1c
pop ebx
jne 0x6036bb
push 3
call fcn.0042d710
add esp, 4
test ax, ax
jne 0x6036bb
mov byte [esi + 0x117], 0xf0
mov esp, ebp
pop ebp
ret