Function at 0x1002afd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x10073098]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
push edi
test esi, esi
je 0x1002b01e
push 0x20
push esi
call fcn.1004d28b
mov edi, eax
add esp, 8
test edi, edi
je 0x1002b01e
mov edx, esi
xor eax, eax
mov word [edi], ax
lea ecx, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1002b003
sub edx, ecx
mov ecx, esi
sar edx, 1
call fcn.1000aa60
lea ecx, [edi + 2]
jmp 0x1002b022
xor eax, eax
xor ecx, ecx
cmp eax, 0x24f0129
je 0x1002b279
cmp eax, 0x6950236
je 0x1002b14f
cmp eax, 0x87d0273
je 0x1002b051
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004bc43
mov esp, ebp
pop ebp
ret
xor esi, esi
mov dword [ebp - 8], esi
test ecx, ecx
je 0x1002b0b0
lea edx, [ebp - 8]
call fcn.10003e80
mov esi, eax
test esi, esi
je 0x1002b0b0
mov eax, dword [ebp - 8]
cmp eax, 2
jl 0x1002b0b0
push dword [esi + eax*4 - 4]
call fcn.1005350c
mov edx, dword [esi + 4]
add esp, 4
mov ecx, dword [esi]
movzx eax, al
shr eax, 1
and eax, 1
push eax
call fcn.10021800
mov edx, dword [ebp - 8]
add esp, 4
mov ecx, esi
mov edi, eax
call fcn.10003f50
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004bc43
mov esp, ebp
pop ebp
ret
mov edx, 2
mov dword [ebp - 0x30], 0xe798b470
push 0x10cb2f
mov dword [ebp - 0x2c], 0xc7e0f1f
mov dword [ebp - 0x28], 0xba98e6d8
lea ecx, [edx + 0x12]
mov dword [ebp - 0x24], 0x3081c98
mov dword [ebp - 0x20], 0x79a031c
mov dword [ebp - 0x1c], 0x87380b5d
mov dword [ebp - 0x18], 0x1758761a
mov dword [ebp - 0x14], 0x16b8909d
mov dword [ebp - 0x10], 0xd5c481e
mov dword [ebp - 0xc], 0x63aa83
call fcn.100138e0
add esp, 4
lea ecx, [ebp - 0x58]
mov edi, eax
lea eax, [ebp - 0x30]
push dword [ebp - 8]
push eax
call fcn.1000d480
lea eax, [ebp - 0x58]
push eax
push 0x14
push edi
call fcn.10052344
add esp, 0xc
test esi, esi
je 0x1002b280
mov edx, dword [ebp - 8]
mov ecx, esi
call fcn.10003f50
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004bc43
mov esp, ebp
pop ebp
ret
xor esi, esi
mov dword [ebp - 8], esi
test ecx, ecx
je 0x1002b1de
lea edx, [ebp - 8]
call fcn.10003e80
mov esi, eax
test esi, esi
je 0x1002b1de
mov eax, dword [ebp - 8]
cmp eax, 1
jl 0x1002b1de
push dword [esi + eax*4 - 4]
call fcn.1005350c
mov ecx, dword [esi]
add esp, 4
cmp dword [ebp - 8], 3
movzx edx, al
jne 0x1002b1b8
shr edx, 1
and edx, 1
push edx
mov edx, dword [esi + 4]
call fcn.1001eb00
mov edx, dword [ebp - 8]
add esp, 4
mov ecx, esi
mov edi, eax
call fcn.10003f50
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004bc43
mov esp, ebp
pop ebp
ret
and edx, 1
call fcn.10021de0
mov edx, dword [ebp - 8]
mov ecx, esi
mov edi, eax
call fcn.10003f50
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004bc43
mov esp, ebp
pop ebp
ret
mov edx, 2
mov dword [ebp - 0x30], 0xa4b9f751
push 0x10cb2f
mov dword [ebp - 0x2c], 0x4f5f4c3e
mov dword [ebp - 0x28], 0xf9b9a5f9
lea ecx, [edx + 0x12]
mov dword [ebp - 0x24], 0x40295fb9
mov dword [ebp - 0x20], 0x44bb403d
mov dword [ebp - 0x1c], 0xc419487c
mov dword [ebp - 0x18], 0x5479353b
mov dword [ebp - 0x14], 0x5599d3bc
mov dword [ebp - 0x10], 0x4e7d0b3f
mov dword [ebp - 0xc], 0x4342e9a2
call fcn.100138e0
add esp, 4
lea ecx, [ebp - 0x58]
mov edi, eax
lea eax, [ebp - 0x30]
push dword [ebp - 8]
push eax
call fcn.1000d480
lea eax, [ebp - 0x58]
push eax
push 0x14
push edi
call fcn.10052344
add esp, 0xc
test esi, esi
je 0x1002b280
mov edx, dword [ebp - 8]
mov ecx, esi
call fcn.10003f50
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004bc43
mov esp, ebp
pop ebp
ret
call fcn.1001e360
mov edi, eax
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
xor ecx, ebp
pop esi
call fcn.1004bc43
mov esp, ebp
pop ebp
ret