Function at 0x1002c27d
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x102ecc30]
sub esp, 0x1c
push ebx
push esi
push edi
test al, 1
jne 0x1002c028
or eax, 1
mov dword [0x102ecc30], eax
mov eax, dword [0x102e79a4]
mov ecx, dword [eax + 0x30]
jmp 0x1002c01c
mov edi, dword [ecx + 0xc]
mov ebx, 0x811c9dc5
xor edx, edx
nop
inc edx
cmp byte [edx + edi], 0
jne 0x1002bff0
xor esi, esi
test edx, edx
je 0x1002c019
nop dword [eax]
movsx eax, byte [esi + edi]
inc esi
xor eax, ebx
imul ebx, eax, 0x1000193
cmp esi, edx
jb 0x1002c000
cmp ebx, 0xe6a08fc9
je 0x1002c020
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x1002bfe4
mov dword [0x102ecc38], ecx
jmp 0x1002c02e
mov ecx, dword [0x102ecc38]
cmp byte [0x102e507c], 0
je case.default.0x1002c049
mov eax, dword [0x102e5130]
cmp eax, 0x12
ja case.default.0x1002c049
jmp dword [eax*4 + 0x1002c394]
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0xc], 0x745f7363
mov dword [ebp - 8], 0x74656269
mov eax, dword [eax + 0x38]
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x61626d65
mov dword [ebp - 4], 0x797373
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x6c617469
mov word [ebp - 4], 0x79
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x100e8850]
mov eax, 0x10
pxor xmm0, xmmword [0x100e89d0]
mov dword [ebp - 8], 0x7618195d
mov dword [ebp - 4], 0x295b4d41
movups xmmword [ebp - 0x18], xmm0
nop dword [eax]
xor byte [ebp + eax - 0x18], 0x29
inc eax
cmp eax, 0x18
jb 0x1002c0e0
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x100e8850]
mov eax, 0x10
pxor xmm0, xmmword [str.ZBPvJZNFvJEFMP]
mov word [ebp - 4], 0x2918
movups xmmword [ebp - 0x14], xmm0
nop dword [eax + eax]
xor byte [ebp + eax - 0x14], 0x29
inc eax
cmp eax, 0x12
jb 0x1002c120
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
movaps xmm0, xmmword [0x100e8850]
pxor xmm0, xmmword [str.ZBPvJZNFvG_NA_]
push edx
mov eax, dword [eax + 0x38]
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x100e8850]
mov eax, 0x10
pxor xmm0, xmmword [str.ZBPvJZNFvG_NA_]
mov word [ebp - 4], 0x294b
movups xmmword [ebp - 0x14], xmm0
xor byte [ebp + eax - 0x14], 0x29
inc eax
cmp eax, 0x12
jb 0x1002c184
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x100e8850]
mov eax, 0x10
pxor xmm0, xmmword [0x100e8d80]
mov dword [ebp - 4], 0x295d4845
movups xmmword [ebp - 0x14], xmm0
xor byte [ebp + eax - 0x14], 0x29
inc eax
cmp eax, 0x14
jb 0x1002c1c0
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
movaps xmm0, xmmword [0x100e8850]
pxor xmm0, xmmword [0x100e8e70]
push edx
mov eax, dword [eax + 0x38]
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x10], 0x7650425a
xor eax, eax
mov dword [ebp - 0xc], 0x1950484d
mov dword [ebp - 8], 0x1c19761b
mov byte [ebp - 4], 0x29
xor byte [ebp + eax - 0x10], 0x29
inc eax
cmp eax, 0xd
jb 0x1002c221
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x100e8850]
mov eax, 0x10
pxor xmm0, xmmword [0x100e8fe0]
mov dword [ebp - 4], 0x295b4d45
movups xmmword [ebp - 0x14], xmm0
nop dword [eax]
xor byte [ebp + eax - 0x14], 0x29
inc eax
cmp eax, 0x14
jb 0x1002c260
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0xc], 0x5d5b4c5f
xor eax, eax
mov dword [ebp - 8], 0x76464e40
mov dword [ebp - 4], 0x295b4d41
xor byte [ebp + eax - 0xc], 0x29
inc eax
cmp eax, 0xc
jb 0x1002c294
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
movaps xmm0, xmmword [0x100e8850]
pxor xmm0, xmmword [0x100e8940]
push edx
mov eax, dword [eax + 0x38]
movups xmmword [ebp - 0x10], xmm0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x74726576
mov dword [ebp - 4], 0x6f6769
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x74656976
mov dword [ebp - 4], 0x6d616e
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0xc], 0x5f796b73
mov dword [ebp - 8], 0x74737564
mov eax, dword [eax + 0x38]
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 8], 0x676e756a
mov word [ebp - 4], 0x656c
jmp 0x1002c37c
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0xc], 0x656b756e
mov dword [ebp - 8], 0x6e616c62
mov eax, dword [eax + 0x38]
mov word [ebp - 4], 0x6b
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 8], 0x6966666f
mov word [ebp - 4], 0x6563
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov byte [ebp - 2], 0
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret