Function at 0x10002da0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
cmp dword [esi + 0x304], 0
je 0x10002dd0
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10006e80
mov esp, ebp
pop ebp
ret
push ebx
push edi
call fcn.10002360
test eax, eax
je 0x10003071
cmp dword [esi + 0x308], 0
lea ecx, [esi + 0xec]
jne 0x10002f4d
lea eax, [esi + 0x24c]
mov edx, ecx
push eax
mov ecx, esi
xor ebx, ebx
call fcn.10002a80
add esp, 4
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x10002f3f
mov edx, eax
mov ecx, esi
call fcn.10002660
mov edi, eax
test edi, edi
jne 0x10002e54
lea ecx, [esi + 0x1da]
push ecx
lea edx, [esi + 0x16c]
mov ecx, esi
call fcn.10002760
add esp, 4
test eax, eax
je 0x10002f25
mov edx, dword [ebp - 0x4c]
mov ecx, esi
call fcn.10002660
mov edi, eax
test edi, edi
je 0x10002f25
mov edx, edi
mov dword [ebp - 0x30], 0x65006c
mov ecx, esi
mov dword [ebp - 0xc], 0x74006e
mov dword [ebp - 0x2c], 0x3f0073
mov dword [ebp - 0x1c], 0x690020
mov dword [ebp - 0x34], 0x690066
mov dword [ebp - 0x40], 0x650076
mov dword [ebp - 0x38], 0x2f0033
mov dword [ebp - 0x18], 0x20006e
mov dword [ebp - 0x44], 0x690072
mov dword [ebp - 0x14], 0x610070
mov dword [ebp - 0x28], 0x3d0071
mov dword [ebp - 0x48], 0x64002f
mov dword [ebp - 0x24], 0x250027
mov dword [ebp - 0x3c], 0x76002f
mov dword [ebp - 0x20], 0x270073
mov dword [ebp - 8], 0x73
mov dword [ebp - 0x10], 0x650072
call fcn.10004e40
mov ebx, eax
test ebx, ebx
je 0x10002f25
mov eax, dword [esi + 0x5c]
push edi
call eax
lea eax, [eax*2 + 0x62]
push eax
push esi
call fcn.10004ca7
add esp, 8
mov dword [esi + 0x308], eax
push ebx
test eax, eax
jne 0x10002f09
push esi
call fcn.10004d08
add esp, 8
xor ebx, ebx
jmp 0x10002f25
lea ecx, [ebp - 0x48]
push ecx
push eax
mov eax, dword [esi + 0xa8]
call eax
push ebx
push esi
call fcn.10004d08
add esp, 0x14
mov ebx, 1
push dword [ebp - 0x4c]
push esi
call fcn.10004d08
add esp, 8
test edi, edi
je 0x10002f3f
push edi
push esi
call fcn.10004d08
add esp, 8
test ebx, ebx
je 0x10003071
lea ecx, [esi + 0xec]
cmp dword [esi + 0x30c], 0
jne 0x10003051
lea eax, [esi + 0x200]
mov dword [ebp - 0x4c], 0
mov edx, ecx
mov ecx, esi
push eax
call fcn.10002a80
mov ebx, eax
add esp, 4
mov dword [ebp - 0x50], ebx
test ebx, ebx
je 0x10003071
mov edx, ebx
mov ecx, esi
call fcn.10002660
mov edi, eax
mov ecx, esi
test edi, edi
je 0x10002fab
mov edx, edi
call fcn.10002ce0
push ebx
push esi
mov dword [ebp - 0x4c], eax
call fcn.10004d08
add esp, 8
jmp 0x10003041
lea eax, [esi + 0x1b4]
push eax
lea edx, [esi + 0x16c]
call fcn.10002760
add esp, 4
test eax, eax
je 0x10003033
mov edx, ebx
mov ecx, esi
call fcn.10002660
mov edi, eax
test edi, edi
je 0x10003033
mov edx, edi
mov ecx, esi
call fcn.10002ce0
test eax, eax
je 0x10003033
push 0x13
push esi
call fcn.10004ca7
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1000301d
mov word [ebx + 0x11], 0x3f
mov edx, 0x13
push ebx
mov ecx, esi
mov byte [ebx + 0x10], 0
call fcn.100015e0
push 0x13
mov edx, ebx
mov ecx, esi
call fcn.10003a00
push ebx
push esi
call fcn.10004d08
add esp, 0x10
mov ebx, dword [ebp - 0x50]
push ebx
push esi
mov dword [ebp - 0x4c], 1
call fcn.10004d08
add esp, 8
jmp 0x10003041
push ebx
push esi
call fcn.10004d08
add esp, 8
test edi, edi
je 0x1000304b
push edi
push esi
call fcn.10004d08
add esp, 8
cmp dword [ebp - 0x4c], 0
je 0x10003071
pop edi
pop ebx
mov dword [esi + 0x304], 1
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10006e80
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop ebx
xor ecx, ebp
pop esi
call fcn.10006e80
mov esp, ebp
pop ebp
ret