Function at 0x10002b25
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x14
mov eax, 0x1003dbcd
call fcn.1003d7ae
xor edi, edi
inc edi
mov dword [ebp - 0x10], edi
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x10042857
call fcn.10003d9a
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x10], edi
mov edi, dword [0x10057860]
test edi, edi
je case.default.0x10002b95
cmp byte [0x100578dc], dl
je 0x10002a8f
mov ecx, 0x10b8134
call fcn.1000d2bd
mov ebx, eax
test ebx, ebx
je 0x10002a8d
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002a8d
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edx, edx
test eax, eax
jne 0x10002a8f
mov ax, word [ebx]
mov word [edi + 0x3e], ax
jmp 0x10002a8f
xor edx, edx
movzx eax, word [edi + 0x3e]
mov ecx, 0xc9
cmp eax, ecx
ja 0x10002b80
je case.0x10002b95.205
sub eax, 0x65
cmp eax, 0xb
ja case.default.0x10002b95
movzx eax, byte [eax + 0x10002c77]
jmp dword [eax*4 + 0x10002c67]
mov cl, 0x20
mov dword [ebp - 0x20], 0x11101120
mov dword [ebp - 0x1c], 0x5241570d
mov eax, edx
mov dword [ebp - 0x18], 0x524f4952
mov byte [ebp - 0x14], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002aeb
mov cl, byte [ebp - 0x20]
jmp 0x10002adc
mov byte [ebp - 0x14], dl
jmp 0x10002c4f
mov cl, 0x2a
mov dword [ebp - 0x20], 0x181a1b2a
mov dword [ebp - 0x1c], 0x4d455807
mov eax, edx
mov word [ebp - 0x18], 0x4f5f
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002b1d
mov cl, byte [ebp - 0x20]
jmp 0x10002b0e
mov byte [ebp - 0x16], dl
jmp 0x10002c4f
mov cl, 0x48
mov dword [ebp - 0x20], 0x7b787948
mov dword [ebp - 0x1c], 0x2f292565
mov eax, edx
mov word [ebp - 0x18], 0x2d
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 8
jae 0x10002b4c
mov cl, byte [ebp - 0x20]
jmp 0x10002b3d
mov byte [ebp - 0x17], dl
jmp 0x10002c4f
mov cl, 0xc
mov dword [ebp - 0x20], 0x383c3d0c
mov dword [ebp - 0x1c], 0x657e7c21
mov eax, edx
mov dword [ebp - 0x18], 0x787f69
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10002c4c
mov cl, byte [ebp - 0x20]
jmp 0x10002b6d
sub eax, 0xca
cmp eax, 0xa
ja case.default.0x10002b95
movzx eax, byte [eax + 0x10002c93]
jmp dword [eax*4 + 0x10002c83]
mov cl, 0x13
mov dword [ebp - 0x20], 0x22232113
mov dword [ebp - 0x1c], 0x6172643e
mov eax, edx
mov dword [ebp - 0x18], 0x617c7a61
mov byte [ebp - 0x14], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002aeb
mov cl, byte [ebp - 0x20]
jmp 0x10002bb8
mov cl, 0x5c
mov dword [ebp - 0x20], 0x6e6c6e5c
mov dword [ebp - 0x1c], 0x3b332e71
mov eax, edx
mov word [ebp - 0x18], 0x3929
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002b1d
mov cl, byte [ebp - 0x20]
jmp 0x10002be6
mov cl, 0x40
mov dword [ebp - 0x20], 0x73707240
mov dword [ebp - 0x1c], 0x27212d6d
mov eax, edx
mov word [ebp - 0x18], 0x25
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 8
jae 0x10002b4c
mov cl, byte [ebp - 0x20]
jmp 0x10002c11
mov cl, 0x49
mov dword [ebp - 0x20], 0x7d797b49
mov dword [ebp - 0x1c], 0x203b3964
mov eax, edx
mov dword [ebp - 0x18], 0x3d3a2c
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10002c4c
mov cl, byte [ebp - 0x20]
jmp 0x10002c3d
mov byte [ebp - 0x15], dl
lea eax, [ebp - 0x1f]
mov ecx, esi
push eax
call fcn.10003b4a
mov eax, esi
call fcn.1003d78b
ret 4