Function at 0x702bbc50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14c
push edi
lea edi, [ebp - 0x14c]
mov ecx, 0x53
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x7034b250]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
jne 0x702bbc81
jmp 0x702bc310
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.702cbe80
add esp, 8
mov byte [ebp - 0x10], 0x49
mov byte [ebp - 0xf], 0x48
mov byte [ebp - 0xe], 0x44
mov byte [ebp - 0xd], 0x52
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x20], 0x49
mov byte [ebp - 0x1f], 0x44
mov byte [ebp - 0x1e], 0x41
mov byte [ebp - 0x1d], 0x54
mov byte [ebp - 0x1c], 0
mov byte [ebp - 0x30], 0x49
mov byte [ebp - 0x2f], 0x45
mov byte [ebp - 0x2e], 0x4e
mov byte [ebp - 0x2d], 0x44
mov byte [ebp - 0x2c], 0
mov byte [ebp - 0x40], 0x50
mov byte [ebp - 0x3f], 0x4c
mov byte [ebp - 0x3e], 0x54
mov byte [ebp - 0x3d], 0x45
mov byte [ebp - 0x3c], 0
mov byte [ebp - 0x50], 0x62
mov byte [ebp - 0x4f], 0x4b
mov byte [ebp - 0x4e], 0x47
mov byte [ebp - 0x4d], 0x44
mov byte [ebp - 0x4c], 0
mov byte [ebp - 0x60], 0x63
mov byte [ebp - 0x5f], 0x48
mov byte [ebp - 0x5e], 0x52
mov byte [ebp - 0x5d], 0x4d
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x70], 0x67
mov byte [ebp - 0x6f], 0x41
mov byte [ebp - 0x6e], 0x4d
mov byte [ebp - 0x6d], 0x41
mov byte [ebp - 0x6c], 0
mov byte [ebp - 0x80], 0x68
mov byte [ebp - 0x7f], 0x49
mov byte [ebp - 0x7e], 0x53
mov byte [ebp - 0x7d], 0x54
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x90], 0x69
mov byte [ebp - 0x8f], 0x43
mov byte [ebp - 0x8e], 0x43
mov byte [ebp - 0x8d], 0x50
mov byte [ebp - 0x8c], 0
mov byte [ebp - 0xa0], 0x6f
mov byte [ebp - 0x9f], 0x46
mov byte [ebp - 0x9e], 0x46
mov byte [ebp - 0x9d], 0x73
mov byte [ebp - 0x9c], 0
mov byte [ebp - 0xb0], 0x70
mov byte [ebp - 0xaf], 0x43
mov byte [ebp - 0xae], 0x41
mov byte [ebp - 0xad], 0x4c
mov byte [ebp - 0xac], 0
mov byte [ebp - 0xc0], 0x70
mov byte [ebp - 0xbf], 0x48
mov byte [ebp - 0xbe], 0x59
mov byte [ebp - 0xbd], 0x73
mov byte [ebp - 0xbc], 0
mov byte [ebp - 0xd0], 0x73
mov byte [ebp - 0xcf], 0x42
mov byte [ebp - 0xce], 0x49
mov byte [ebp - 0xcd], 0x54
mov byte [ebp - 0xcc], 0
mov byte [ebp - 0xe0], 0x73
mov byte [ebp - 0xdf], 0x43
mov byte [ebp - 0xde], 0x41
mov byte [ebp - 0xdd], 0x4c
mov byte [ebp - 0xdc], 0
mov byte [ebp - 0xf0], 0x73
mov byte [ebp - 0xef], 0x50
mov byte [ebp - 0xee], 0x4c
mov byte [ebp - 0xed], 0x54
mov byte [ebp - 0xec], 0
mov byte [ebp - 0x100], 0x73
mov byte [ebp - 0xff], 0x52
mov byte [ebp - 0xfe], 0x47
mov byte [ebp - 0xfd], 0x42
mov byte [ebp - 0xfc], 0
mov byte [ebp - 0x110], 0x74
mov byte [ebp - 0x10f], 0x45
mov byte [ebp - 0x10e], 0x58
mov byte [ebp - 0x10d], 0x74
mov byte [ebp - 0x10c], 0
mov byte [ebp - 0x120], 0x74
mov byte [ebp - 0x11f], 0x49
mov byte [ebp - 0x11e], 0x4d
mov byte [ebp - 0x11d], 0x45
mov byte [ebp - 0x11c], 0
mov byte [ebp - 0x130], 0x74
mov byte [ebp - 0x12f], 0x52
mov byte [ebp - 0x12e], 0x4e
mov byte [ebp - 0x12d], 0x53
mov byte [ebp - 0x12c], 0
mov byte [ebp - 0x140], 0x7a
mov byte [ebp - 0x13f], 0x54
mov byte [ebp - 0x13e], 0x58
mov byte [ebp - 0x13d], 0x74
mov byte [ebp - 0x13c], 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cbd60
add esp, 4
mov dword [ebp - 0x148], eax
mov edx, dword [ebp + 8]
add edx, 0x11c
mov dword [ebp - 0x14c], edx
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x10]
jne 0x702bbf1d
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cc600
add esp, 0xc
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x30]
jne 0x702bbf46
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702ccb40
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702c6450
add esp, 8
test eax, eax
je 0x702bbfc9
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x20]
jne 0x702bbf91
cmp dword [ebp - 0x148], 0
ja 0x702bbf80
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x68]
and eax, 0x2000
je 0x702bbf91
push 0x7034eed0
mov ecx, dword [ebp + 8]
push ecx
call fcn.702d2090
add esp, 8
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cf9a0
add esp, 0xc
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x40]
jne 0x702bbfc4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
or edx, 2
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], edx
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x20]
jne 0x702bc016
cmp dword [ebp - 0x148], 0
ja 0x702bbfed
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
and ecx, 0x2000
je 0x702bbffe
push str.Too_many_IDATs_found
mov edx, dword [ebp + 8]
push edx
call fcn.702d2090
add esp, 8
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cbe80
add esp, 8
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x40]
jne 0x702bc03f
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702cc870
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x50]
jne 0x702bc068
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702ce2a0
add esp, 0xc
jmp 0x702bc301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x60]
jne 0x702bc091
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cd000
add esp, 0xc
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x70]
jne 0x702bc0ba
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702ccbb0
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x80]
jne 0x702bc0e3
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702ce5f0
add esp, 0xc
jmp 0x702bc301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xa0]
jne 0x702bc10f
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702ce980
add esp, 0xc
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xb0]
jne 0x702bc13b
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702ceb10
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0xe0]
jne 0x702bc167
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702cef60
add esp, 0xc
jmp 0x702bc301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xc0]
jne 0x702bc193
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702ce7f0
add esp, 0xc
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xd0]
jne 0x702bc1bf
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702ccdd0
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x100]
jne 0x702bc1eb
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702cd440
add esp, 0xc
jmp 0x702bc301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x90]
jne 0x702bc217
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cd760
add esp, 0xc
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xf0]
jne 0x702bc243
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702cdb00
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x110]
jne 0x702bc26f
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702cf420
add esp, 0xc
jmp 0x702bc301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x120]
jne 0x702bc298
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.702cf290
add esp, 0xc
jmp 0x702bc301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x130]
jne 0x702bc2c1
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.702cdf20
add esp, 0xc
jmp 0x702bc301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x140]
jne 0x702bc2ea
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702cf680
add esp, 0xc
jmp 0x702bc301
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.702cf9a0
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
and ecx, 0x10
je 0x702bbc8f
push edx
mov ecx, ebp
push eax
lea edx, [0x702bc340]
call fcn.7030a1bd
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.702e1c2f
add esp, 0x14c
cmp ebp, esp
call fcn.7030a19a
mov esp, ebp
pop ebp
ret