Function at 0x1002cfaf
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xbc
mov eax, 0x1007812c
call fcn.1004605f
mov esi, ecx
mov eax, dword [esi + 0x15c]
cmp eax, dword [esi + 0x160]
je 0x1002d51b
mov eax, dword [esi + 0x160]
xor edi, edi
sub eax, dword [esi + 0x15c]
push 0x68
pop ecx
cdq
idiv ecx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x44], ecx
test eax, eax
jle 0x1002d2ac
mov edi, dword [esi + 0x15c]
mov ebx, dword [ebp + 8]
mov edx, dword [ebp - 0x30]
lea ecx, [edi + 0x18]
cmp dword [ecx], ebx
je 0x1002d028
push 0x68
pop eax
add ecx, eax
inc edx
mov eax, dword [esi + 0x160]
sub eax, edi
mov dword [ebp - 0x30], edx
cdq
idiv dword [ebp - 0x44]
mov edx, dword [ebp - 0x30]
cmp edx, eax
jl 0x1002d003
jmp 0x1002d2a9
mov al, byte [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
imul ecx, edx, 0x68
mov edx, dword [ebp + 0x14]
sub ebx, edx
mov dword [ebp - 0x48], 4
mov dword [ebp - 0x78], ecx
mov byte [edi + ecx + 0x64], al
lea edi, [ecx + 0x58]
sub dword [ebp - 0x48], 1
mov ecx, dword [esi + 0x15c]
mov ax, word [ebx + edx]
mov word [edi + ecx - 8], ax
mov ecx, dword [esi + 0x15c]
mov ax, word [edx]
lea edx, [edx + 2]
mov word [edi + ecx], ax
lea edi, [edi + 2]
jne 0x1002d047
mov eax, dword [ebp + 8]
cmp eax, dword [esi + 0x144]
jne 0x1002d2a9
or dword [ebp - 0x7c], 0xffffffff
lea ebx, [esi + 0xb4]
and dword [ebp - 0x74], 0
lea eax, [esi + 0x84]
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x44], 4
mov ecx, dword [eax]
call fcn.100103ba
test al, al
je 0x1002d28d
mov eax, dword [esi + 0x15c]
mov ecx, dword [ebp - 0x78]
cmp byte [ecx + eax + 0x64], 2
jne 0x1002d13b
movaps xmm0, xmmword [0x1008eaa0]
xor ecx, ecx
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0x3a3c2134
mov word [ebp - 0x5c], 0x83b
mov byte [ebp - 0x5a], 0
mov al, byte [ebp - 0x70]
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 0x15
jb 0x1002d0df
lea eax, [ebp - 0x6f]
mov byte [ebp - 0x5a], 0
push eax
lea ecx, [ebp - 0x98]
call fcn.10001f6a
and dword [ebp - 4], 0
lea edx, [ebp - 0x98]
mov ecx, dword [esi + 0x7c]
call fcn.10010c45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
push 0
push 1
call fcn.10001e1f
mov ecx, dword [esi + 0x7c]
mov edx, 0xff5cb9fe
call fcn.10010cf9
mov eax, 0xff808080
mov dword [ebp - 0x7c], eax
jmp 0x1002d1b2
mov cl, 0xb
mov dword [ebp - 0x40], 0x655e500b
mov dword [ebp - 0x3c], 0x2b796e6f
xor eax, eax
mov dword [ebp - 0x38], 0x56726a7c
mov byte [ebp - 0x34], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 0xb
jae 0x1002d167
mov cl, byte [ebp - 0x40]
jmp 0x1002d158
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x34], 0
push eax
lea ecx, [ebp - 0x98]
call fcn.10001f6a
mov dword [ebp - 4], 1
lea edx, [ebp - 0x98]
mov ecx, dword [esi + 0x7c]
call fcn.10010c45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
push 0
push 1
call fcn.10001e1f
mov ecx, dword [esi + 0x7c]
mov edx, 0xffc4fc03
call fcn.10010cf9
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebx - 4]
mov edx, eax
call fcn.10010cf9
mov ebx, dword [ebp - 0x74]
mov edx, dword [esi + 0x15c]
imul ecx, edi, 0x34
lea eax, [ebx + ecx]
add ebx, ecx
movzx eax, word [edx + eax*2 + 0x58]
mov cl, 0x70
push eax
movzx eax, word [edx + ebx*2 + 0x50]
push eax
mov dword [ebp - 0x54], 0x50145570
xor eax, eax
mov dword [ebp - 0x50], 0x1455505f
mov byte [ebp - 0x4c], 0
xor byte [ebp + eax - 0x53], cl
inc eax
cmp eax, 7
jae 0x1002d1fe
mov cl, byte [ebp - 0x54]
jmp 0x1002d1ef
sub esp, 0x18
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x53]
mov ecx, esp
push eax
call fcn.10001f6a
lea eax, [ebp - 0x70]
push eax
call fcn.10007414
add esp, 0x24
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x1002d22b
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x98]
call fcn.10001f6a
mov ecx, dword [ebp - 0x48]
lea edx, [ebp - 0x98]
mov byte [ebp - 4], 3
mov ecx, dword [ecx]
call fcn.10010c45
push 0
push 1
lea ecx, [ebp - 0x98]
call fcn.10001e1f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
push 0
push 1
call fcn.10001e1f
mov eax, dword [esi + 0x15c]
xorps xmm3, xmm3
xorps xmm2, xmm2
movzx eax, word [eax + ebx*2 + 0x50]
mov ebx, dword [ebp - 0x48]
movd xmm1, eax
mov ecx, dword [ebx + 4]
cvtdq2ps xmm1, xmm1
call fcn.10010aa2
mov eax, dword [ebp - 0x80]
add ebx, 0x14
inc dword [ebp - 0x74]
add eax, 4
sub dword [ebp - 0x44], 1
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x48], ebx
jne 0x1002d0a2
push 0x68
pop ecx
mov eax, dword [esi + 0x148]
shl eax, 2
mov dword [ebp - 0x78], eax
lea edi, [eax - 4]
cmp edi, eax
jge 0x1002d51b
imul ebx, edi, 0x68
lea eax, [esi + 0xc]
add eax, 0x18
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x160]
sub eax, dword [esi + 0x15c]
cdq
idiv ecx
dec eax
cmp edi, eax
jg 0x1002d51b
mov eax, dword [esi + 0x15c]
lea ecx, [ebp - 0x2c]
add eax, ebx
mov dword [ebp - 0x44], 0xffc4fc03
push eax
call fcn.10004ca6
mov dword [ebp - 4], 4
mov eax, dword [esi + 0x15c]
cmp byte [ebx + eax + 0x64], 2
jne 0x1002d35f
movaps xmm0, xmmword [0x1008ebc0]
xor ecx, ecx
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0x29342133
mov dword [ebp - 0x5c], 0x1d2e2f
mov al, byte [ebp - 0x70]
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 0x16
jb 0x1002d32e
lea eax, [ebp - 0x6f]
mov byte [ebp - 0x59], 0
push eax
call fcn.10001f4d
pop ecx
push eax
lea eax, [ebp - 0x6f]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10004a46
mov dword [ebp - 0x44], 0xff5cb9fe
jmp 0x1002d3b1
push 0x68
pop eax
mov cl, 0x48
mov byte [ebp - 0x3f], al
mov byte [ebp - 0x38], al
xor eax, eax
mov byte [ebp - 0x40], cl
mov dword [ebp - 0x3e], 0x2c261d13
mov word [ebp - 0x3a], 0x3a2d
mov dword [ebp - 0x37], 0x1531293f
mov byte [ebp - 0x33], 0
xor byte [ebp + eax - 0x3f], cl
inc eax
cmp eax, 0xc
jae 0x1002d396
mov cl, byte [ebp - 0x40]
jmp 0x1002d387
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x33], 0
push eax
call fcn.10001f4d
pop ecx
push eax
lea eax, [ebp - 0x3f]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10004a46
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x98]
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.10001f6a
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x98]
mov byte [ebp - 4], 5
mov ecx, dword [ecx]
call fcn.10010c45
push 0
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 4
call fcn.10001e1f
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x44]
mov ecx, dword [eax]
call fcn.10010cf9
mov ecx, dword [esi + 0x15c]
movaps xmm0, xmmword [0x1008e1d0]
movzx eax, byte [ebx + ecx + 0x62]
push eax
movzx eax, byte [ebx + ecx + 0x61]
xor ecx, ecx
push eax
movups xmmword [ebp - 0x58], xmm0
mov al, byte [ebp - 0x58]
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 0xe
jb 0x1002d41b
sub esp, 0x18
mov byte [ebp - 0x49], 0
lea eax, [ebp - 0x57]
mov ecx, esp
push eax
call fcn.10001f6a
lea eax, [ebp - 0xb0]
push eax
call fcn.10007414
add esp, 0x24
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x1002d455
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x98]
call fcn.10001f6a
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x98]
mov byte [ebp - 4], 7
mov ecx, dword [eax - 4]
call fcn.10010c45
push 0
push 1
lea ecx, [ebp - 0x98]
call fcn.10001e1f
push 0
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 4
call fcn.10001e1f
mov eax, dword [esi + 0x15c]
lea ecx, [ebp - 0xc8]
movzx edx, byte [eax + ebx + 0x63]
call fcn.10028fec
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0x10
jb 0x1002d4ba
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xb0]
call fcn.10001f6a
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0xb0]
mov byte [ebp - 4], 9
mov ecx, dword [eax + 8]
call fcn.10010c45
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.10001e1f
push 0
push 1
lea ecx, [ebp - 0xc8]
call fcn.10001e1f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
push 0
push 1
call fcn.10001e1f
mov eax, dword [ebp - 0x30]
inc edi
push 0x68
pop ecx
add ebx, ecx
cmp edi, dword [ebp - 0x78]
jl 0x1002d2c9
call fcn.10046009
ret 0x10