Function at 0x1002b9e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100dbdc5
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x100f300c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0x5d465b6b
xor eax, eax
mov dword [ebp - 0x18], 0x615b4c41
mov dword [ebp - 0x14], 0x29424646
nop
xor byte [ebp + eax - 0x1c], 0x29
inc eax
cmp eax, 0xc
jb 0x1002ba20
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ba50
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.100227d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x45]
mov dword [ebp - 0x28], 0
lea edx, [ecx + 1]
mov byte [ebp - 0x45], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ba90
sub ecx, edx
lea eax, [ebp - 0x45]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.100227d0
mov byte [ebp - 4], 1
cmp byte [0x102e579c], 0
je case.0x1002baed.21
mov eax, dword [0x102e7a04]
mov ecx, 0x1b
movss xmm0, dword [eax + 0x10]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100e8138]
cvttsd2si eax, xmm0
cdq
idiv ecx
cmp dword [0x102ecbdc], edx
je case.0x1002baed.21
cmp edx, 0x1e
ja case.0x1002baed.21
jmp dword [edx*4 + 0x1002bd70]
sub esp, 0x18
mov ecx, esp
push 0x12
push 0x100e6c18
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._________________b
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.________________br
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._______________bro
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.______________brot
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._____________broth
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.____________brothe
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.___________brother
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.__________brother
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._________brother_h
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.________brother_ho
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._______brother_hoo
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.______brother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._____brother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.____brother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.___brother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.__brother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str._brother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.rother_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.other_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.ther_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.her_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.er_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x12
push str.r_hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0x11
push str._hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0xf
push str.hook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0xf
push str.ook
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0xf
push str.ok
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0xf
push 0x100e6e3c
jmp 0x1002bcd2
sub esp, 0x18
mov ecx, esp
push 0xf
push 0x100e6e4c
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.100227d0
call fcn.1002bdf0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x1002bd20
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002bd16
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002bd46
push ecx
push edx
call fcn.100da479
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1002bd56
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002bd4c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002bd4c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100da479
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d9ffe
mov esp, ebp
pop ebp
ret