Function at 0x1002abd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x44
push ebx
mov al, 0x53
push ebp
mov cl, 0x6b
push esi
mov esi, dword [esp + 0x54]
mov byte [esp + 0x26], al
mov byte [esp + 0x27], al
mov byte [esp + 0x2f], al
xor ebp, ebp
push edi
mov byte [esp + 0x1f], cl
mov byte [esp + 0x24], cl
mov dl, 0x52
mov al, 0x65
mov byte [esp + 0x18], cl
mov ecx, dword [esp + 0x5c]
push ebp
mov byte [esp + 0x31], dl
mov byte [esp + 0x35], dl
mov byte [esp + 0x1b], al
mov byte [esp + 0x1e], al
mov eax, dword [esi]
push 0x8002
mov dl, 0x6f
push ecx
mov ecx, esi
mov byte [esp + 0x28], 0x4d
mov byte [esp + 0x29], 0x72
mov byte [esp + 0x2a], 0x61
mov byte [esp + 0x2c], 0x31
mov byte [esp + 0x2d], 0x70
mov byte [esp + 0x2e], 0x61
mov byte [esp + 0x2f], 0x63
mov byte [esp + 0x34], 0x50
mov byte [esp + 0x35], 0x41
mov byte [esp + 0x38], 0x45
mov byte [esp + 0x3a], 0x20
mov byte [esp + 0x3b], 0x56
mov byte [esp + 0x3c], 0x49
mov byte [esp + 0x3e], 0x55
mov byte [esp + 0x20], 0x61
mov byte [esp + 0x21], 0x73
mov byte [esp + 0x22], dl
mov byte [esp + 0x25], dl
call dword [eax + 4]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x1002adba
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x20]
mov edi, eax
cmp edi, ebp
jg 0x1002aca4
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x18]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x44
ret
mov eax, dword [esp + 0x64]
mov dword [esp + 0x58], ebp
cmp eax, 0x1e14
mov dword [esp + 0x10], 0
ja 0x1002ae70
je 0x1002ade6
cmp eax, 0xf5e
je 0x1002ad3f
cmp eax, 0x1354
je 0x1002ad20
cmp eax, 0x1580
jne 0x1002adb2
lea ecx, [esp + 0x34]
push 0
push 0x13a3
mov dword [esp + 0x3c], 0x21212121
mov dword [esp + 0x40], 0x6b756621
mov dword [esp + 0x44], 0x7063742d
mov dword [esp + 0x48], 0x21212161
mov word [esp + 0x4c], 0x2121
mov ebp, 0x12
mov dword [esp + 0x18], ecx
push 1
jmp 0x1002ada0
lea eax, [esp + 0x34]
mov dword [esp + 0x34], 0x75736976
mov byte [esp + 0x38], 0x61
mov ebp, 5
mov dword [esp + 0x10], eax
jmp 0x1002afcf
lea eax, [edi - 0x20]
test eax, eax
jle 0x1002adb2
cmp edi, eax
jle 0x1002adb2
lea ecx, [esp + 0x58]
push 1
lea edx, [esp + 0x38]
push ecx
push edx
push 0x20
push 0x20
push eax
push edi
push ebx
push esi
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x1002ac92
cmp dword [esp + 0x58], 0x20
jne 0x1002ac92
cmp word [esp + 0x51], 0x414b
jne 0x1002adc4
cmp byte [esp + 0x53], 0x59
jne 0x1002adc4
lea eax, [esp + 0x51]
mov ebp, 3
mov dword [esp + 0x10], eax
push 1
sub edi, ebp
push 0x13a3
push edi
push ebx
push esi
call fcn.10013800
add esp, 0x14
test eax, eax
jne 0x1002afcf
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x18]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x44
ret
cmp dword [esp + 0x4e], 0x5a444547
jne 0x1002ad96
cmp word [esp + 0x52], 0x4341
jne 0x1002ad96
lea ecx, [esp + 0x4e]
mov ebp, 6
mov dword [esp + 0x10], ecx
jmp 0x1002ad96
lea eax, [edi - 0x20]
test eax, eax
jle 0x1002ac92
cmp edi, eax
jle 0x1002ac92
lea ecx, [esp + 0x58]
push 1
lea edx, [esp + 0x38]
push ecx
mov ebp, 0x20
push edx
push ebp
push ebp
push eax
push edi
push ebx
push esi
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x1002adb2
cmp dword [esp + 0x58], ebp
jne 0x1002adb2
lea eax, [esp + 0x1c]
push 9
push eax
lea ecx, [esp + 0x3c]
push ebp
push ecx
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
je 0x1002adb2
sub ebp, eax
push 1
sub edi, ebp
push 0x13a3
push edi
push ebx
push esi
call fcn.10013800
add esp, 0x14
test eax, eax
jne 0x1002afcf
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x18]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x44
ret
cmp eax, 0x1fdd
je 0x1002af1f
cmp eax, 0x22d7
jne 0x1002adb2
mov ebp, dword [esp + 0x60]
lea eax, [edi - 0x20]
test eax, eax
mov dword [ebp], 0
jle 0x1002adb2
cmp edi, eax
jle 0x1002adb2
lea ecx, [esp + 0x58]
push 1
lea edx, [esp + 0x38]
push ecx
push edx
push 0x20
push 0x20
push eax
push edi
push ebx
push esi
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x1002ac92
cmp dword [esp + 0x58], 0x20
jne 0x1002ac92
lea eax, [esp + 0x14]
push 7
push eax
lea ecx, [esp + 0x3c]
push 0x20
push ecx
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x1002af13
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x18]
mov eax, dword [esp + 0x5c]
push ebp
push eax
push esi
call fcn.1002bac0
add esp, 0xc
neg eax
pop edi
pop esi
sbb eax, eax
pop ebp
neg eax
pop ebx
add esp, 0x44
ret
mov ebp, 0x20
sub ebp, eax
jmp 0x1002ad96
mov ebp, dword [esp + 0x60]
lea eax, [edi - 0x20]
test eax, eax
mov dword [ebp], 0
jle 0x1002adb2
cmp edi, eax
jle 0x1002adb2
lea ecx, [esp + 0x58]
push 1
lea edx, [esp + 0x38]
push ecx
push edx
push 0x20
push 0x20
push eax
push edi
push ebx
push esi
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x1002ac92
cmp dword [esp + 0x58], 0x20
jne 0x1002ac92
lea eax, [esp + 0x28]
push 0xc
push eax
lea ecx, [esp + 0x3c]
push 0x20
push ecx
call fcn.100241a0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x1002afac
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x18]
mov eax, dword [esp + 0x5c]
push ebp
push eax
push esi
call fcn.1002bac0
add esp, 0xc
neg eax
pop edi
pop esi
sbb eax, eax
pop ebp
neg eax
pop ebx
add esp, 0x44
ret
mov ebp, 0x20
push 1
sub ebp, eax
push 0x13a3
sub edi, ebp
push edi
push ebx
push esi
call fcn.10013800
add esp, 0x14
test eax, eax
je 0x1002adb2
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x18]
test ebp, ebp
je 0x1002adba
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x60]
push 0
push ebp
mov ebp, dword [esp + 0x64]
push ecx
push edi
push ebp
push esi
call fcn.1002a180
add esp, 0x18
test eax, eax
jne 0x1002b02d
cmp dword [esp + 0x64], 0x22d7
jne 0x1002adba
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x18]
push edi
push ebp
push esi
call fcn.1002bac0
add esp, 0xc
neg eax
pop edi
pop esi
sbb eax, eax
pop ebp
neg eax
pop ebx
add esp, 0x44
ret
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x44
ret