Function at 0x1002f8a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x1006f180]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
test esi, esi
je 0x1002fc41
push ebx
push edi
push 0
push esi
call fcn.100358f0
add esp, 8
mov bl, 0x73
push 4
lea ecx, [ebp - 0xac]
push ecx
push esi
mov dword [ebp - 0x2c], 0x52444849
mov dword [ebp - 0x14], 0x54414449
mov dword [ebp - 0x8c], 0x444e4549
mov dword [ebp - 0xc], 0x45544c50
mov dword [ebp - 0x44], 0x44474b62
mov dword [ebp - 0x7c], 0x4d524863
mov dword [ebp - 0x54], 0x414d4167
mov dword [ebp - 0x9c], 0x54534968
mov dword [ebp - 0x74], 0x50434369
mov word [ebp - 0x1c], 0x466f
mov byte [ebp - 0x1a], 0x46
mov byte [ebp - 0x19], bl
mov dword [ebp - 0x64], 0x4c414370
mov word [ebp - 0x3c], 0x4870
mov byte [ebp - 0x3a], 0x59
mov byte [ebp - 0x39], bl
mov byte [ebp - 0x4c], bl
mov word [ebp - 0x4b], 0x4942
mov byte [ebp - 0x49], 0x54
mov byte [ebp - 0x24], bl
mov word [ebp - 0x23], 0x4143
mov byte [ebp - 0x21], 0x4c
mov byte [ebp - 0x84], bl
mov word [ebp - 0x83], 0x4c50
mov byte [ebp - 0x81], 0x54
mov byte [ebp - 0x5c], bl
mov word [ebp - 0x5b], 0x4752
mov byte [ebp - 0x59], 0x42
mov dword [ebp - 0x94], 0x74584574
mov dword [ebp - 0xa4], 0x454d4974
mov dword [ebp - 0x6c], 0x534e5274
mov dword [ebp - 0x34], 0x7458547a
call fcn.10031450
lea edx, [ebp - 0xac]
push edx
push esi
call fcn.100358c0
push esi
mov edi, eax
call fcn.1002e1f0
push 4
lea eax, [esi + 0x11c]
push eax
push esi
call fcn.10034860
mov eax, dword [esi + 0x11c]
lea ecx, [esi + 0x11c]
add esp, 0x24
cmp eax, dword [ebp - 0x2c]
jne 0x1002f9f6
mov eax, dword [ebp - 0xa8]
push edi
push eax
push esi
call fcn.100359b0
jmp 0x1002fc32
cmp eax, dword [ebp - 0x8c]
jne 0x1002fa11
mov ecx, dword [ebp - 0xa8]
push edi
push ecx
push esi
call fcn.10035cf0
jmp 0x1002fc32
push ecx
push esi
call fcn.1002e880
add esp, 8
test eax, eax
je 0x1002fa6e
mov edx, dword [esi + 0x11c]
cmp edx, dword [ebp - 0x14]
jne 0x1002fa45
test edi, edi
jne 0x1002fa37
test dword [esi + 0x68], 0x2000
je 0x1002fa45
push 0x1005f6a0
push esi
call fcn.1002de40
add esp, 8
mov eax, dword [ebp - 0xa8]
push edi
push eax
push esi
call fcn.100379e0
mov ecx, dword [esi + 0x11c]
add esp, 0xc
cmp ecx, dword [ebp - 0xc]
jne 0x1002fc35
or dword [esi + 0x68], 2
jmp 0x1002fc35
mov eax, dword [esi + 0x11c]
cmp eax, dword [ebp - 0x14]
jne 0x1002faa3
test edi, edi
jne 0x1002fa86
test dword [esi + 0x68], 0x2000
je 0x1002fa94
push 0x1005f6a0
push esi
call fcn.1002de40
add esp, 8
push edi
push esi
call fcn.100358f0
add esp, 8
jmp 0x1002fc35
push edi
cmp eax, dword [ebp - 0xc]
jne 0x1002fabb
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10035b20
jmp 0x1002fc32
cmp eax, dword [ebp - 0x44]
jne 0x1002fad2
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10036c40
jmp 0x1002fc32
cmp eax, dword [ebp - 0x7c]
jne 0x1002fae9
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10036020
jmp 0x1002fc32
cmp eax, dword [ebp - 0x54]
jne 0x1002fb00
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10035d40
jmp 0x1002fc32
cmp eax, dword [ebp - 0x9c]
jne 0x1002fb1a
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10036e70
jmp 0x1002fc32
cmp eax, dword [ebp - 0x1c]
jne 0x1002fb31
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10037110
jmp 0x1002fc32
cmp eax, dword [ebp - 0x64]
jne 0x1002fb48
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10037230
jmp 0x1002fc32
cmp eax, dword [ebp - 0x24]
jne 0x1002fb5f
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10037480
jmp 0x1002fc32
cmp eax, dword [ebp - 0x3c]
jne 0x1002fb76
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10036ff0
jmp 0x1002fc32
cmp eax, dword [ebp - 0x4c]
jne 0x1002fb8d
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10035eb0
jmp 0x1002fc32
cmp eax, dword [ebp - 0x5c]
jne 0x1002fba4
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10036430
jmp 0x1002fc32
cmp eax, dword [ebp - 0x74]
jne 0x1002fbb8
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10036630
jmp 0x1002fc32
cmp eax, dword [ebp - 0x84]
jne 0x1002fbcf
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.100367f0
jmp 0x1002fc32
cmp eax, dword [ebp - 0x94]
jne 0x1002fbe6
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10037740
jmp 0x1002fc32
cmp eax, dword [ebp - 0xa4]
jne 0x1002fbfd
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10037630
jmp 0x1002fc32
cmp eax, dword [ebp - 0x6c]
jne 0x1002fc11
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10036a00
jmp 0x1002fc32
cmp eax, dword [ebp - 0x34]
jne 0x1002fc25
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10037870
jmp 0x1002fc32
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.100379e0
add esp, 0xc
test byte [esi + 0x68], 0x10
je 0x1002f8d7
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.1005ba3e
mov esp, ebp
pop ebp
ret