Function at 0x10002c01
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x558
mov eax, 0x1001f31b
call fcn.1001b357
mov eax, dword [ebp + 8]
xor ebx, ebx
mov esi, ecx
mov edi, edx
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x564], ebx
mov dword [ebp - 0x560], ebx
mov dword [ebp - 0x55c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x94], 0x66296635
mov dword [ebp - 0x90], 0x66326620
mov dword [ebp - 0x8c], 0x66276631
mov dword [ebp - 0x88], 0x66236634
mov dword [ebp - 0x84], 0x6625663a
mov dword [ebp - 0x80], 0x6607660a
mov dword [ebp - 0x7c], 0x66156615
mov dword [ebp - 0x78], 0x66156603
mov dword [ebp - 0x74], 0x6625663a
mov dword [ebp - 0x70], 0x6635662a
mov dword [ebp - 0x6c], 0x6622662f
mov dword [ebp - 0x68], 0x6666663a
mov dword [ebp - 0x44], 0x6608662f
mov dword [ebp - 0x40], 0x66146636
mov dword [ebp - 0x3c], 0x66056609
mov dword [ebp - 0x38], 0x66036635
mov dword [ebp - 0x34], 0x66106614
mov dword [ebp - 0x30], 0x66146603
mov dword [ebp - 0x2c], 0x66546655
mov word [ebp - 0x28], 0x6666
xor eax, eax
xor byte [ebp + eax - 0x94], 0x66
inc eax
cmp eax, 0x30
jb 0x10002cd0
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x340]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x340]
push eax
call esi
push 0x1002431c
lea eax, [ebp - 0x340]
push eax
call esi
xor eax, eax
xor byte [ebp + eax - 0x44], 0x66
inc eax
cmp eax, 0x1e
jb 0x10002d12
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x340]
push eax
call esi
mov dword [ebp - 0x54c], ebx
call fcn.1000b059
neg eax
sbb eax, eax
and eax, 0x100
lea ecx, [ebp - 0x340]
push ecx
xor ecx, ecx
or eax, 0x20019
cmp edi, ebx
setne cl
add ecx, 0x80000001
push ecx
lea ecx, [ebp - 0x564]
call fcn.1000b627
test eax, eax
jne 0x10002eaa
push ebx
lea eax, [ebp - 0x564]
push eax
lea esi, [ebp - 0x554]
lea edi, [ebp - 0x548]
mov dword [ebp - 0x554], 0x104
call fcn.100056ce
test eax, eax
jne 0x10002dd5
cmp word [ebp - 0x548], bx
je 0x10002dd5
lea eax, [ebp - 0x54d]
push eax
call fcn.10002982
mov eax, edi
push eax
call dword [0x1002955c]
test eax, eax
je 0x10002dd5
mov dword [ebp - 0x54c], 1
cmp dword [ebp - 0x558], ebx
je 0x10002dd5
mov eax, edi
push eax
push dword [ebp - 0x558]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0x64], 0x660e6632
mov dword [ebp - 0x60], 0x66036614
mov dword [ebp - 0x5c], 0x66026607
mov dword [ebp - 0x58], 0x6608660f
mov dword [ebp - 0x54], 0x662b6601
mov dword [ebp - 0x50], 0x66026609
mov dword [ebp - 0x4c], 0x660a6603
mov word [ebp - 0x48], 0x6666
mov dword [ebp - 0x24], 0x66166627
mov dword [ebp - 0x20], 0x66146607
mov dword [ebp - 0x1c], 0x660b6612
mov dword [ebp - 0x18], 0x66086603
mov dword [ebp - 0x14], 0x66666612
mov dword [ebp - 0x554], 0x50
cmp dword [ebp - 0x54c], ebx
je 0x10002e9f
mov dword [ebp - 0x54c], ebx
xor eax, eax
xor byte [ebp + eax - 0x64], 0x66
inc eax
cmp eax, 0x1e
jb 0x10002e49
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x564]
push eax
lea esi, [ebp - 0x554]
lea edi, [ebp - 0x138]
call fcn.100056ce
test eax, eax
jne 0x10002e9f
xor byte [ebp + ebx - 0x24], 0x66
inc ebx
cmp ebx, 0x14
jb 0x10002e74
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.1000dfd1
pop ecx
pop ecx
test eax, eax
jne 0x10002e9f
mov dword [ebp - 0x54c], 1
lea esi, [ebp - 0x564]
call fcn.1000b7ae
lea esi, [ebp - 0x564]
call fcn.1000b7ae
mov eax, dword [ebp - 0x54c]
call fcn.1001b3a1
ret