Function at 0x10002ca0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x18
mov eax, 0x1003d7f8
call fcn.1003d39e
xor edi, edi
inc edi
mov dword [ebp - 0x10], edi
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x10041857
call fcn.10003da0
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x10], edi
mov edi, dword [0x10056840]
test edi, edi
je case.default.0x10002e31
cmp byte [0x100568bc], dl
je 0x10002d1c
mov ecx, 0x10b8134
call fcn.1000d217
mov ebx, eax
test ebx, ebx
je 0x10002d1a
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002d1a
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edx, edx
test eax, eax
jne 0x10002d1c
mov ax, word [ebx]
mov word [edi + 0x3e], ax
jmp 0x10002d1c
xor edx, edx
movzx eax, word [edi + 0x3e]
mov ecx, 0xc9
cmp eax, ecx
ja 0x10002e1c
je case.0x10002e31.205
sub eax, 0x65
cmp eax, 0xb
ja case.default.0x10002e31
movzx eax, byte [eax + 0x10002ef8]
jmp dword [eax*4 + 0x10002ee8]
mov cl, 2
mov dword [ebp - 0x24], 0x70634902
mov dword [ebp - 0x20], 0x55227177
mov eax, edx
mov dword [ebp - 0x1c], 0x6b707063
mov word [ebp - 0x18], 0x706d
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xd
jae 0x10002d7e
mov cl, byte [ebp - 0x24]
jmp 0x10002d6f
mov byte [ebp - 0x16], dl
jmp 0x10002ed1
mov cl, 0x5b
mov dword [ebp - 0x20], 0x293a105b
mov dword [ebp - 0x1c], 0x97b282e
mov eax, edx
mov dword [ebp - 0x18], 0x3e2e3c34
mov byte [ebp - 0x14], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002db1
mov cl, byte [ebp - 0x20]
jmp 0x10002da2
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x1f]
jmp 0x10002ed4
mov cl, 0x6c
mov dword [ebp - 0x20], 0x1e0d276c
mov dword [ebp - 0x1c], 0x214c1f19
mov eax, edx
mov dword [ebp - 0x18], 0x90b0d
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10002de4
mov cl, byte [ebp - 0x20]
jmp 0x10002dd5
mov byte [ebp - 0x15], dl
jmp 0x10002db4
mov cl, 0x54
mov dword [ebp - 0x20], 0x26351f54
mov dword [ebp - 0x1c], 0x4742721
mov eax, edx
mov dword [ebp - 0x18], 0x27313d26
mov word [ebp - 0x14], 0x20
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xc
jae 0x10002e17
mov cl, byte [ebp - 0x20]
jmp 0x10002e08
mov byte [ebp - 0x13], dl
jmp 0x10002db4
sub eax, 0xca
cmp eax, 0xa
ja case.default.0x10002e31
movzx eax, byte [eax + 0x10002f14]
jmp dword [eax*4 + 0x10002f04]
movaps xmm0, xmmword [0x1004b7a0]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0x1d
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x10
jb 0x10002e4b
mov byte [ebp - 0x13], dl
jmp 0x10002ed1
movaps xmm0, xmmword [str._bMd_Egzil_Zgom]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xe
jb 0x10002e6a
mov byte [ebp - 0x15], dl
jmp 0x10002ed1
mov cl, 0x5d
mov dword [ebp - 0x24], 0x7d31185d
mov dword [ebp - 0x20], 0x3c2f3210
mov eax, edx
mov dword [ebp - 0x1c], 0x3c107d39
mov word [ebp - 0x18], 0x383a
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xd
jae 0x10002d7e
mov cl, byte [ebp - 0x24]
jmp 0x10002e9e
movaps xmm0, xmmword [0x1004c030]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xf
jb 0x10002ec1
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x23]
push eax
mov ecx, esi
call fcn.10003b50
mov eax, esi
call fcn.1003d37b
ret 4