Function at 0x1005efe0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x1011b92c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
test esi, esi
je 0x1005f355
push ebx
push edi
push 0
push esi
call fcn.100825c0
add esp, 8
mov bl, 0x73
jmp 0x1005f020
push esi
mov dword [ebp - 0x64], 0x52444849
mov dword [ebp - 0x14], 0x54414449
mov dword [ebp - 0x34], 0x444e4549
mov dword [ebp - 0xc], 0x45544c50
mov dword [ebp - 0x8c], 0x44474b62
mov dword [ebp - 0x44], 0x4d524863
mov dword [ebp - 0x7c], 0x414d4167
mov dword [ebp - 0x54], 0x54534968
mov dword [ebp - 0x5c], 0x50434369
mov word [ebp - 0x9c], 0x466f
mov byte [ebp - 0x9a], 0x46
mov byte [ebp - 0x99], bl
mov dword [ebp - 0x1c], 0x4c414370
mov word [ebp - 0x2c], 0x4870
mov byte [ebp - 0x2a], 0x59
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x3c], bl
mov word [ebp - 0x3b], 0x4942
mov byte [ebp - 0x39], 0x54
mov byte [ebp - 0x24], bl
mov word [ebp - 0x23], 0x4143
mov byte [ebp - 0x21], 0x4c
mov byte [ebp - 0x74], bl
mov word [ebp - 0x73], 0x4c50
mov byte [ebp - 0x71], 0x54
mov byte [ebp - 0x4c], bl
mov word [ebp - 0x4b], 0x4752
mov byte [ebp - 0x49], 0x42
mov dword [ebp - 0x84], 0x74584574
mov dword [ebp - 0x94], 0x454d4974
mov dword [ebp - 0xa4], 0x534e5274
mov dword [ebp - 0x6c], 0x7458547a
call fcn.10082550
lea ecx, [esi + 0x11c]
mov edi, eax
mov eax, dword [ecx]
add esp, 4
cmp eax, dword [ebp - 0x64]
jne 0x1005f110
mov ecx, dword [ebp - 0xa8]
push edi
push ecx
push esi
call fcn.10082680
jmp 0x1005f346
cmp eax, dword [ebp - 0x34]
jne 0x1005f128
mov edx, dword [ebp - 0xa8]
push edi
push edx
push esi
call fcn.100829c0
jmp 0x1005f346
push ecx
push esi
call fcn.1003b190
add esp, 8
test eax, eax
mov eax, dword [esi + 0x11c]
je 0x1005f185
cmp eax, dword [ebp - 0x14]
jne 0x1005f15c
test edi, edi
jne 0x1005f14e
test dword [esi + 0x68], 0x2000
je 0x1005f15c
push str.Too_many_IDATs_found
push esi
call fcn.1003a8f0
add esp, 8
mov ecx, dword [ebp - 0xa8]
push edi
push ecx
push esi
call fcn.10084780
mov edx, dword [esi + 0x11c]
add esp, 0xc
cmp edx, dword [ebp - 0xc]
jne 0x1005f349
or dword [esi + 0x68], 2
jmp 0x1005f349
cmp eax, dword [ebp - 0x14]
jne 0x1005f1b4
test edi, edi
jne 0x1005f197
test dword [esi + 0x68], 0x2000
je 0x1005f1a5
push str.Too_many_IDATs_found
push esi
call fcn.1003a8f0
add esp, 8
push edi
push esi
call fcn.100825c0
add esp, 8
jmp 0x1005f349
push edi
cmp eax, dword [ebp - 0xc]
jne 0x1005f1cc
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.100827f0
jmp 0x1005f346
cmp eax, dword [ebp - 0x8c]
jne 0x1005f1e6
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.100838c0
jmp 0x1005f346
cmp eax, dword [ebp - 0x44]
jne 0x1005f1fd
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10082cf0
jmp 0x1005f346
cmp eax, dword [ebp - 0x7c]
jne 0x1005f214
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10082a10
jmp 0x1005f346
cmp eax, dword [ebp - 0x54]
jne 0x1005f22b
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10083af0
jmp 0x1005f346
cmp eax, dword [ebp - 0x9c]
jne 0x1005f245
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10083d90
jmp 0x1005f346
cmp eax, dword [ebp - 0x1c]
jne 0x1005f25c
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10083eb0
jmp 0x1005f346
cmp eax, dword [ebp - 0x24]
jne 0x1005f273
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10084160
jmp 0x1005f346
cmp eax, dword [ebp - 0x2c]
jne 0x1005f28a
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10083c70
jmp 0x1005f346
cmp eax, dword [ebp - 0x3c]
jne 0x1005f2a1
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10082b80
jmp 0x1005f346
cmp eax, dword [ebp - 0x4c]
jne 0x1005f2b8
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10083030
jmp 0x1005f346
cmp eax, dword [ebp - 0x5c]
jne 0x1005f2cc
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10083230
jmp 0x1005f346
cmp eax, dword [ebp - 0x74]
jne 0x1005f2e0
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10083420
jmp 0x1005f346
cmp eax, dword [ebp - 0x84]
jne 0x1005f2f7
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.10084480
jmp 0x1005f346
cmp eax, dword [ebp - 0x94]
jne 0x1005f30e
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10084370
jmp 0x1005f346
cmp eax, dword [ebp - 0xa4]
jne 0x1005f325
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.10083680
jmp 0x1005f346
cmp eax, dword [ebp - 0x6c]
jne 0x1005f339
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.100845e0
jmp 0x1005f346
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.10084780
add esp, 0xc
test byte [esi + 0x68], 0x10
je 0x1005f020
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100b3ac1
mov esp, ebp
pop ebp
ret