Function at 0x1002ec40
Capabilities:
Contain obfuscated stackstrings
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x190
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, edx
mov dword [ebp - 0x190], ecx
push esi
push edi
mov edx, dword [ebx + 0x14]
test edx, edx
je 0x1002ec6d
mov edx, dword [edx + 0x84]
jmp 0x1002ec6f
xor edx, edx
mov eax, dword [edx + 0xc]
xor esi, esi
sub eax, dword [edx + 8]
sar eax, 2
movzx edi, ax
xor eax, eax
cmp ax, di
jae 0x1002ed08
mov ecx, ebx
call fcn.10095320
movzx edx, si
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
sar ecx, 2
cmp edx, ecx
jae 0x1002eca7
mov eax, dword [eax + 8]
mov edx, dword [eax + edx*4]
jmp 0x1002eca9
xor edx, edx
mov edx, dword [edx]
movsx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movsx eax, byte [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movsx eax, byte [edx + 2]
xor eax, ecx
imul ecx, eax, 0x1000193
movsx eax, byte [edx + 3]
xor eax, ecx
imul ecx, eax, 0x1000193
movsx eax, byte [edx + 4]
xor eax, ecx
imul ecx, eax, 0x1000193
movsx eax, byte [edx + 5]
xor eax, ecx
imul eax, eax, 0x1000193
cmp eax, 0x54e07f8e
je 0x1002ed02
inc esi
cmp si, di
jb 0x1002ec88
mov ecx, dword [ebp - 0x190]
cmp si, di
je 0x1002f118
mov dword [ebp - 0x68], 0x1600030
mov dword [ebp - 0x64], 0x38b0264
mov dword [ebp - 0x60], 0x5300405
mov dword [ebp - 0x5c], 0x7000600
mov dword [ebp - 0x58], 0x98b0800
mov dword [ebp - 0x54], 0xb0c0a40
mov dword [ebp - 0x50], 0xd700c8b
mov dword [ebp - 0x4c], 0xfad0e1c
mov dword [ebp - 0x48], 0x1140108b
mov dword [ebp - 0x44], 0x13891208
mov dword [ebp - 0x40], 0x158914c7
mov dword [ebp - 0x3c], 0x178b16c5
mov dword [ebp - 0x38], 0x193c1845
mov dword [ebp - 0x34], 0x1b541a8b
mov dword [ebp - 0x30], 0x1d781c28
mov dword [ebp - 0x2c], 0x1fea1e01
mov dword [ebp - 0x28], 0x214a208b
mov dword [ebp - 0x24], 0x238b2218
mov dword [ebp - 0x20], 0x2520245a
mov dword [ebp - 0x1c], 0x27eb2601
mov dword [ebp - 0x18], 0x298b2849
mov dword [ebp - 0x14], 0x2b8b2a34
mov dword [ebp - 0x10], 0x2dee2c01
mov dword [ebp - 0xc], 0x2f472eb8
mov byte [ebp - 8], 0x65
mov dword [ebp - 0x188], 0x1ff008e
mov dword [ebp - 0x184], 0x3140255
mov dword [ebp - 0x180], 0x5450489
mov dword [ebp - 0x17c], 0x73d0644
mov dword [ebp - 0x178], 0x9ff08ff
mov dword [ebp - 0x174], 0xbff0aff
mov dword [ebp - 0x170], 0xd780c74
mov dword [ebp - 0x16c], 0xf000e6a
mov dword [ebp - 0x168], 0x1145108b
mov dword [ebp - 0x164], 0x13501204
mov dword [ebp - 0x160], 0x15ff1468
mov dword [ebp - 0x15c], 0x17001600
mov dword [ebp - 0x158], 0x19831800
mov dword [ebp - 0x154], 0x1b0c1ac0
mov dword [ebp - 0x150], 0x1dff1c05
mov dword [ebp - 0x14c], 0x1f001e00
mov dword [ebp - 0x148], 0x21502000
mov dword [ebp - 0x144], 0x237522ff
mov dword [ebp - 0x140], 0x25ff2434
mov dword [ebp - 0x13c], 0x27182655
mov dword [ebp - 0x138], 0x2900286a
mov dword [ebp - 0x134], 0x2b452a8b
mov dword [ebp - 0x130], 0x2d502c04
mov dword [ebp - 0x12c], 0x2f302eff
mov dword [ebp - 0x128], 0x31c03083
mov dword [ebp - 0x124], 0x3305320c
mov dword [ebp - 0x120], 0x350034ff
mov dword [ebp - 0x11c], 0x37003600
mov dword [ebp - 0x118], 0x39ff3850
mov dword [ebp - 0x114], 0x3b443a75
mov dword [ebp - 0x110], 0x3d553cff
mov dword [ebp - 0x10c], 0x3f8b3e1c
mov dword [ebp - 0x108], 0x41044045
mov dword [ebp - 0x104], 0x43384283
mov dword [ebp - 0x100], 0x45754400
mov dword [ebp - 0xfc], 0x47ff46c7
mov dword [ebp - 0xf8], 0x49444875
mov dword [ebp - 0xf4], 0x4b554aff
mov dword [ebp - 0xf0], 0x4dff4c2c
mov dword [ebp - 0xec], 0x4f344e75
mov dword [ebp - 0xe8], 0x515550ff
mov dword [ebp - 0xe4], 0x536a522c
mov dword [ebp - 0xe0], 0x558b5401
mov dword [ebp - 0xdc], 0x57045645
mov dword [ebp - 0xd8], 0x59c05883
mov dword [ebp - 0xd4], 0x5b505a0c
mov dword [ebp - 0xd0], 0x5d555cff
mov dword [ebp - 0xcc], 0x5f8b5e30
mov dword [ebp - 0xc8], 0x61046045
mov dword [ebp - 0xc4], 0x630062c7
mov dword [ebp - 0xc0], 0x656c6447
mov dword [ebp - 0xbc], 0x6762666f
mov dword [ebp - 0xb8], 0x69c06883
mov dword [ebp - 0xb4], 0x6bc76a04
mov dword [ebp - 0xb0], 0x6d616c00
mov dword [ebp - 0xac], 0x6f466e6c
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 4]
mov dword [ebp - 0xa8], 0x71837072
mov dword [ebp - 0xa4], 0x730472c0
lea eax, [esi + 0x290]
mov dword [ebp - 0xa0], 0x750074c7
mov dword [ebp - 0x9c], 0x77657665
mov dword [ebp - 0x98], 0x79007800
mov dword [ebp - 0x94], 0x7b757aff
mov dword [ebp - 0x90], 0x7d577c04
mov dword [ebp - 0x8c], 0x7f557eff
mov dword [ebp - 0x88], 0x81ff8010
mov dword [ebp - 0x84], 0x834c8275
mov dword [ebp - 0x80], 0x85d084ff
mov dword [ebp - 0x7c], 0x87ec8689
mov dword [ebp - 0x78], 0x89c48883
mov dword [ebp - 0x74], 0x8b048a50
mov dword [ebp - 0x70], 0x8d0c8c58
mov byte [ebp - 0x6c], 0xb9
mov dword [ebp - 0x18c], edi
cmp eax, edi
jae 0x1002f118
mov ebx, edi
xor cl, cl
sub ebx, esi
jmp 0x1002f0a0
movzx eax, cl
lea edx, [ebp - 0x68]
lea edx, [edx + eax*2]
movzx eax, byte [edx + 1]
cmp eax, ebx
jae 0x1002f118
mov edi, dword [ebp - 0x190]
mov esi, dword [ebp + 8]
add eax, dword [edi]
mov edi, dword [ebp - 0x18c]
mov al, byte [eax + esi]
cmp al, byte [edx + 2]
jne 0x1002f118
inc cl
cmp cl, 0x30
jb 0x1002f0a0
mov ecx, dword [ebp - 0x190]
lea eax, [ebp - 0x188]
mov dword [ebp - 0x18c], eax
sub edi, esi
sub edi, 0x290
push edi
mov eax, dword [ecx]
lea ecx, [ebp - 0x18c]
add eax, 0x290
add eax, esi
push eax
call fcn.1001cbe0
test al, al
je 0x1002f118
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100b37df
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100b37df
mov esp, ebp
pop ebp
ret