Function at 0x1002f0cd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xf
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.10036e19
add esp, 0xc
test dword [esp + 8], ebx
lea edx, [edx + 0x12a6]
sub edx, 0x12a6
std
cld
jle 0x1002f109
pushf
xor esp, 0
popf
jo 0x1002f103
nop
jl 0x1002f106
jg 0x1002f109
sub eax, 0x50e845c6
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0xe], 0x68
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x62
mov byte [ebp - 0xc], 0x73
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xa], 0
ja 0x1002f147
cmp esi, 0x3d9b
jl 0x1002f14f
jl 0x1002f181
pushf
xor edx, 0xbd2
xor edx, 0xbd2
lea edi, [edi + 0x6db8]
lea edi, [edi - 0x6db8]
jg 0x1002f16d
lea edi, [edi + 0x1cfd]
lea edi, [edi - 0x1cfd]
popf
lea esp, [esp]
jge 0x1002f181
mov esp, 0x80e84d8a
jmp 0xf850798b
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov esp, esp
jo 0x1002f1ff
add edx, dword [esp]
sub edx, dword [esp]
xchg edi, ebx
xchg edi, ebx
js 0x1002f21d
pushf
not esi
not esi
jb 0x1002f213
test dword [esp], ebx
popf
mov esp, esp
jns 0x1002f21d
sub eax, 0x639a
call fcn.100355bc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x1002f232
xor eax, eax
jmp 0x1002f4b5
jg 0x1002f234
jbe 0x1002f236
jp 0x1002f238
je 0x1002f240
jo 0x1002f23c
jne 0x1002f240
add dword [0x50e8458d], 0x51fc4d8b
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.1001f190
mov dword [ebp - 0x1c], eax
push 0xf
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.10036e19
add esp, 0xc
jne 0x1002f262
add edx, dword [esp]
sub edx, dword [esp]
ror edi, 0x1e
ror edi, 2
ror esp, 0
jbe 0x1002f285
pushf
cmp esi, 0x577c
ror esp, 0
popf
mov eax, eax
ja 0x1002f285
jmp 0x10e7700c
cmp dword [ebp - 0x1c], 0
jne 0x1002f292
xor eax, eax
jmp 0x1002f4b5
jo 0x1002f294
mov ecx, ecx
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
shl esp, 0
js 0x1002f2c0
pushf
jg 0x1002f2a7
rol ebx, 3
ror ebx, 3
jb 0x1002f2af
popf
lea esi, [esi + 0x180f]
lea esi, [esi - 0x180f]
jns 0x1002f2c0
add eax, 0x50e4458b
mov eax, dword [ebp - 0x1c]
push eax
call fcn.1003a66f
add esp, 4
push 0xf
push 0
lea ecx, [ebp - 0x18]
push ecx
call fcn.10036e19
add esp, 0xc
stc
jno 0x1002f2df
je 0x1002f2f2
lea esi, [esi + 0x57d9]
lea esi, [esi - 0x57d9]
jmp 0x1002f2ef
jne 0x1002f2f2
ljmp 0x45c6:0x50e845c6
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0xe], 0x68
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x62
mov byte [ebp - 0xc], 0x73
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xa], 0
dec eax
inc eax
jo 0x1002f346
pushf
mov esp, esp
dec edi
inc edi
test ebx, edx
popf
lea edx, [edx]
xchg ecx, ecx
lea esp, [esp]
jno 0x1002f346
call 0x90eb48d4
ljmp 0x458a
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
jl 0x1002f3c1
xchg ebx, ebx
lea esp, [esp]
jbe 0x1002f3c8
jb 0x1002f3e8
pushf
and ecx, ecx
mov esp, esp
nop
lea ebx, [ebx]
popf
mov ebx, ebx
jl 0x1002f3d9
lea edi, [edi + 0xe96]
lea edi, [edi - 0xe96]
jae 0x1002f3e8
sub eax, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x1002f41e
jge 0x1002f3f0
add edx, dword [esp]
sub edx, dword [esp]
je 0x1002f40e
pushf
xor edx, edi
xor edx, edi
inc edi
dec edi
stc
ja 0x1002f403
popf
jb 0x1002f407
jno 0x1002f409
jbe 0x1002f40b
jne 0x1002f40e
ljmp 0x558b:0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1001f190
mov dword [ebp - 8], eax
cld
jp 0x1002f421
test edi, 0x203
jge 0x1002f432
xchg ecx, ecx
mov esp, esp
jl 0x1002f432
mov esi, 0xf6abaa9
push 0xf
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.10036e19
add esp, 0xc
jg 0x1002f444
xchg esi, ecx
xchg esi, ecx
jle 0x1002f44a
ja 0x1002f455
je 0x1002f44e
lea esp, [esp]
jbe 0x1002f455
lcall 0x7400, 0xf87d838b
xor al, 0xf7
sal bh, 1
rol cl, 1
in al, 0
cmp dword [ebp - 8], 0
je 0x1002f48f
not eax
not eax
shl esp, 0
xor ebx, 0
jae 0x1002f467
js 0x1002f483
pushf
and esp, 0xffffffff
lea edi, [edi + 0x26c6]
lea edi, [edi - 0x26c6]
popf
jl 0x1002f47e
jg 0x1002f480
jns 0x1002f483
mov edi, 0x51f84d8b
mov ecx, dword [ebp - 8]
push ecx
call fcn.1003a66f
add esp, 4
xor edx, dword [esp + 8]
xor edx, dword [esp + 8]
ja 0x1002f4a6
jg 0x1002f49b
jl 0x1002f49d
ja 0x1002f49f
jle 0x1002f4a1
jbe 0x1002f4a6
xor eax, 0x558bdefc
adc byte [edx - 0x75], dl
inc ebp
or al, 0x50
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc