Function at 0x42a060
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x8c
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0xa4]
mov dword [esp], ebx
lea edi, [ebx + 0xd8]
mov dword [esp + 4], esi
call sym._png_read_sig
lea esi, [esi]
mov dword [esp + 0x17], 0x52444849
mov byte [esp + 0x1b], 0
mov dword [esp + 0x1c], 0x54414449
mov byte [esp + 0x20], 0
mov dword [esp + 0x21], 0x444e4549
mov byte [esp + 0x25], 0
mov dword [esp + 0x26], 0x45544c50
mov byte [esp + 0x2a], 0
mov dword [esp + 0x2b], 0x44474b62
mov byte [esp + 0x2f], 0
mov dword [esp + 0x30], 0x4d524863
mov byte [esp + 0x34], 0
mov dword [esp + 0x35], 0x414d4167
mov byte [esp + 0x39], 0
mov dword [esp + 0x3a], 0x54534968
mov byte [esp + 0x3e], 0
mov dword [esp + 0x3f], 0x50434369
mov byte [esp + 0x43], 0
mov dword [esp + 0x44], 0x74585469
mov byte [esp + 0x48], 0
mov dword [esp + 0x49], 0x7346466f
mov byte [esp + 0x4d], 0
mov dword [esp + 0x4e], 0x4c414370
mov byte [esp + 0x52], 0
mov dword [esp + 0x53], 0x73594870
mov byte [esp + 0x57], 0
mov dword [esp + 0x58], 0x54494273
mov byte [esp + 0x5c], 0
mov dword [esp + 0x5d], 0x4c414373
mov byte [esp + 0x61], 0
mov dword [esp + 0x62], 0x544c5073
mov byte [esp + 0x66], 0
mov dword [esp + 0x67], 0x42475273
mov dword [esp], ebx
mov byte [esp + 0x6b], 0
mov dword [esp + 0x6c], 0x74584574
mov byte [esp + 0x70], 0
mov dword [esp + 0x71], 0x454d4974
mov byte [esp + 0x75], 0
mov dword [esp + 0x76], 0x534e5274
mov byte [esp + 0x7a], 0
mov dword [esp + 0x7b], 0x7458547a
mov byte [esp + 0x7f], 0
call sym._png_read_chunk_header
mov ebp, eax
mov eax, dword [ebx + 0xd8]
cmp eax, dword [esp + 0x1c]
jne 0x42a1c5
mov edx, dword [ebx + 0x28]
test dl, 8
je 0x42a1c5
or dh, 0x20
mov dword [ebx + 0x28], edx
cmp eax, dword [esp + 0x17]
je 0x42a228
mov eax, dword [ebx + 0xd8]
cmp dword [esp + 0x21], eax
je 0x42a320
mov dword [esp + 4], edi
mov dword [esp], ebx
call sym._png_handle_as_unknown
test eax, eax
je 0x42a240
mov eax, dword [esp + 0x1c]
cmp dword [ebx + 0xd8], eax
jne 0x42a1fb
or dword [ebx + 0x28], 4
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_unknown
mov eax, dword [ebx + 0xd8]
cmp eax, dword [esp + 0x26]
jne 0x42a338
or dword [ebx + 0x28], 2
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_IHDR
jmp 0x42a090
mov eax, dword [ebx + 0xd8]
cmp eax, dword [esp + 0x26]
je 0x42a378
cmp eax, dword [esp + 0x1c]
je 0x42a402
cmp eax, dword [esp + 0x2b]
je 0x42a390
cmp eax, dword [esp + 0x30]
je 0x42a3a8
cmp eax, dword [esp + 0x35]
je 0x42a3c0
cmp eax, dword [esp + 0x3a]
je 0x42a3d8
cmp eax, dword [esp + 0x49]
je 0x42a3ed
cmp eax, dword [esp + 0x4e]
je 0x42a42d
cmp eax, dword [esp + 0x5d]
je 0x42a442
cmp eax, dword [esp + 0x53]
je 0x42a457
cmp eax, dword [esp + 0x58]
je 0x42a48d
cmp eax, dword [esp + 0x67]
je 0x42a478
cmp eax, dword [esp + 0x3f]
je 0x42a4a2
cmp eax, dword [esp + 0x62]
je 0x42a4cc
cmp eax, dword [esp + 0x6c]
je 0x42a4e1
cmp eax, dword [esp + 0x71]
je 0x42a4b7
cmp eax, dword [esp + 0x76]
je 0x42a4f6
cmp eax, dword [esp + 0x7b]
je 0x42a515
cmp eax, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
jne 0x42a50b
call sym._png_handle_iTXt
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_IEND
jmp 0x42a090
cmp eax, dword [esp + 0x1c]
jne 0x42a090
mov eax, dword [ebx + 0x28]
test al, 1
je 0x42a52a
cmp byte [ebx + 0xe2], 3
jne 0x42a422
test al, 2
jne 0x42a422
mov dword [esp + 4], str.Missing_PLTE_before_IDAT
mov dword [esp], ebx
call sym._png_error
lea esi, [esi]
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_PLTE
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_bKGD
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_cHRM
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_gAMA
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_hIST
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_oFFs
jmp 0x42a090
mov eax, dword [ebx + 0x28]
test al, 1
je 0x42a52a
cmp byte [ebx + 0xe2], 3
je 0x42a46c
or eax, 4
mov dword [ebx + 0xc8], ebp
mov dword [ebx + 0x28], eax
add esp, 0x8c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_pCAL
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_sCAL
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_pHYs
jmp 0x42a090
test al, 2
jne 0x42a416
jmp 0x42a362
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_sRGB
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_sBIT
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_iCCP
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_tIME
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_sPLT
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_tEXt
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_tRNS
jmp 0x42a090
call sym._png_handle_unknown
jmp 0x42a090
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._png_handle_zTXt
jmp 0x42a090
mov dword [esp + 4], str.Missing_IHDR_before_IDAT
mov dword [esp], ebx
call sym._png_error
lea esi, [esi]