Function at 0x10002301
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 8
push 0x178
mov eax, 0x1003e105
call fcn.1003ddef
mov edi, ecx
mov dword [ebp - 0x140], edi
lea eax, [ebp - 0xe0]
push eax
call fcn.10039a60
pop ecx
push 0
push 0x989680
push dword [eax + 4]
push dword [eax]
call fcn.1003d4e0
mov dword [edi + 8], eax
mov dword [edi + 0xc], edx
cmp byte [edi], 0
je 0x100029f5
cmp dword [0x10057860], 0
je 0x10002a0c
mov cl, 0x1e
mov dword [ebp - 0xd8], 0x72714d1e
mov word [ebp - 0xd4], 0x71
xor eax, eax
xor byte [ebp + eax - 0xd7], cl
inc eax
cmp eax, 4
jae 0x10002380
mov cl, byte [ebp - 0xd8]
jmp 0x1000236b
lea eax, [ebp - 0xd7]
mov byte [ebp - 0xd3], 0
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003d99
xor edx, edx
mov dword [ebp - 4], edx
cmp byte [edi + 1], 1
jne 0x10002444
mov al, byte [edi + 3]
test al, al
jne 0x10002401
mov cl, 0x74
mov dword [ebp - 0xec], 0x6113974
mov dword [ebp - 0xe8], 0x1a151c17
mov eax, edx
mov word [ebp - 0xe4], dx
xor byte [ebp + eax - 0xeb], cl
inc eax
cmp eax, 8
jae 0x100023e0
mov cl, byte [ebp - 0xec]
jmp 0x100023cb
lea ecx, [ebp - 0xeb]
mov byte [ebp - 0xe3], dl
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100023ef
lea eax, [ebp - 0xeb]
jmp 0x10002497
jle 0x10002444
movups xmm0, xmmword [str._qYN_T_RH]
mov ecx, edx
movups xmmword [ebp - 0x134], xmm0
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0xe
jb 0x10002413
lea ecx, [ebp - 0x133]
mov byte [ebp - 0x125], dl
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10002435
lea eax, [ebp - 0x133]
jmp 0x10002497
cmp byte [edi + 3], dl
jle 0x100024a3
mov cl, 0x2c
mov dword [ebp - 0xe0], 0x5e4d7c2c
mov word [ebp - 0xdc], 0x5558
mov eax, edx
mov byte [ebp - 0xda], dl
xor byte [ebp + eax - 0xdf], cl
inc eax
cmp eax, 5
jae 0x1000247b
mov cl, byte [ebp - 0xe0]
jmp 0x10002466
lea ecx, [ebp - 0xdf]
mov byte [ebp - 0xda], dl
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000248a
lea eax, [ebp - 0xdf]
sub ecx, edx
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003b04
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x118]
lea esi, [ebp - 0x2c]
mov ecx, edi
cmova esi, dword [ebp - 0x2c]
push eax
call fcn.100031e1
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 0xf
jbe 0x100024c8
mov eax, dword [eax]
push esi
push eax
mov cl, 0x27
mov dword [ebp - 0xf8], 0x7540227
mov dword [ebp - 0xf4], 0x5402075b
xor eax, eax
mov byte [ebp - 0xf0], 0
xor byte [ebp + eax - 0xf7], cl
inc eax
cmp eax, 7
jae 0x100024fe
mov cl, byte [ebp - 0xf8]
jmp 0x100024e9
sub esp, 0x18
mov byte [ebp - 0xf0], 0
lea eax, [ebp - 0xf7]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0xbc]
push eax
call fcn.100039e2
add esp, 0x24
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 3
call fcn.10003b97
cmp byte [0x100578e0], 0
mov edi, dword [0x10057860]
je 0x10002578
mov ecx, 0x10b8134
call fcn.1000d857
mov esi, eax
test esi, esi
je 0x10002578
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002578
push 4
add esi, 0x6e8
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002578
mov al, byte [esi]
mov byte [edi + 0x3c], al
cmp byte [0x100578e0], 0
movzx ecx, byte [edi + 0x3c]
mov edi, dword [0x10057860]
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xc0], edi
je 0x100025f7
mov ecx, 0x10b8134
call fcn.1000d857
mov esi, eax
test esi, esi
je 0x100025f1
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100025f1
push 4
lea edi, [esi + 0x6bc]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100025eb
cmp dword [esi + 0x6d0], 0x10
jb 0x100025d2
mov edi, dword [edi]
mov eax, dword [ebp - 0xc0]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x100025e3
mov eax, dword [eax]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xfc]
lea eax, [edi + 0x20]
cmp dword [eax + 0x14], 0xf
jbe 0x10002602
mov eax, dword [eax]
movups xmm0, xmmword [0x1004d880]
push ecx
push eax
movups xmmword [ebp - 0x13c], xmm0
mov dword [ebp - 0x12c], 0x3071746e
xor ecx, ecx
mov byte [ebp - 0x128], 0
mov al, byte [ebp - 0x13c]
xor byte [ebp + ecx - 0x13b], al
inc ecx
cmp ecx, 0x13
jb 0x10002625
sub esp, 0x18
mov byte [ebp - 0x128], 0
lea eax, [ebp - 0x13b]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0xa4]
push eax
call fcn.100039e2
add esp, 0x24
mov edi, dword [ebp - 0x140]
lea eax, [ebp - 0x118]
push eax
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.10002a15
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0xf
jbe 0x10002683
mov eax, dword [eax]
push eax
mov cl, 0x3b
mov dword [ebp - 0xc4], 0x481e3b
xor eax, eax
xor byte [ebp + eax - 0xc3], cl
inc eax
cmp eax, 2
jae 0x100026a7
mov cl, byte [ebp - 0xc4]
jmp 0x10002692
sub esp, 0x18
mov byte [ebp - 0xc1], 0
lea eax, [ebp - 0xc3]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x8c]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 7
call fcn.10003b97
lea eax, [ebp - 0x13c]
mov ecx, edi
push eax
call 0x10002c9c
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0xf
jbe 0x100026f7
mov eax, dword [eax]
push eax
mov cl, 0x51
mov dword [ebp - 0xc8], 0x227451
xor eax, eax
xor byte [ebp + eax - 0xc7], cl
inc eax
cmp eax, 2
jae 0x1000271b
mov cl, byte [ebp - 0xc8]
jmp 0x10002706
sub esp, 0x18
mov byte [ebp - 0xc5], 0
lea eax, [ebp - 0xc7]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x74]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0xa
call fcn.10003b97
lea eax, [ebp - 0x118]
mov ecx, edi
push eax
call fcn.10002f1b
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0xf
jbe 0x10002768
mov eax, dword [eax]
push eax
mov cl, 7
mov dword [ebp - 0xcc], 0x742207
xor eax, eax
xor byte [ebp + eax - 0xcb], cl
inc eax
cmp eax, 2
jae 0x1000278c
mov cl, byte [ebp - 0xcc]
jmp 0x10002777
sub esp, 0x18
mov byte [ebp - 0xc9], 0
lea eax, [ebp - 0xcb]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x5c]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xd
call fcn.10003b97
lea eax, [ebp - 0x13c]
mov ecx, edi
push eax
call fcn.10003086
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 0xf
jbe 0x100027d9
mov eax, dword [eax]
push eax
mov cl, 0x72
mov dword [ebp - 0xd0], 0x15772
xor eax, eax
xor byte [ebp + eax - 0xcf], cl
inc eax
cmp eax, 2
jae 0x100027fd
mov cl, byte [ebp - 0xd0]
jmp 0x100027e8
sub esp, 0x18
mov byte [ebp - 0xcd], 0
lea eax, [ebp - 0xcf]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x44]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x13c]
call fcn.10003b97
xor edx, edx
mov ecx, dword [edi + 0xc]
cmp dword [ebp - 0xa8], 0xf
lea eax, [ebp - 0xbc]
xorps xmm0, xmm0
mov dword [ebp - 0x17c], ecx
cmova eax, dword [ebp - 0xbc]
mov ecx, edx
cmp dword [ebp - 0x90], 0xf
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0xa4]
cmova eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0xf
mov dword [ebp - 0x184], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x8c]
cmova eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x60], 0xf
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x74]
cmova eax, dword [ebp - 0x74]
cmp dword [ebp - 0x48], 0xf
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x30], 0xf
movlpd qword [ebp - 0x14c], xmm0
movlpd qword [ebp - 0x178], xmm0
movups xmm0, xmmword [0x1004d2f0]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x44]
cmova eax, dword [ebp - 0x44]
movups xmmword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], edx
movups xmm0, xmmword [0x1004cd80]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x164], eax
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0x104], 0x4241464e
mov word [ebp - 0x100], 0x40
mov al, byte [ebp - 0x124]
xor byte [ebp + ecx - 0x123], al
inc ecx
cmp ecx, 0x24
jb 0x1000290e
movups xmm0, xmmword [0x1004d3d0]
lea eax, [ebp - 0x123]
mov dword [ebp - 0x158], 8
mov dword [ebp - 0x160], eax
mov ecx, edx
movsx eax, byte [edi + 3]
mov dword [ebp - 0x15c], eax
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0x4e757b54
mov dword [ebp - 0x10c], 0x6c4b6c59
mov dword [ebp - 0x108], 0x6c4b6c59
mov word [ebp - 0x104], 0x11c
mov byte [ebp - 0x102], dl
mov al, byte [ebp - 0x120]
xor byte [ebp + ecx - 0x11f], al
inc ecx
cmp ecx, 0x1d
jb 0x1000297e
lea eax, [ebp - 0x11f]
mov byte [ebp - 0x102], dl
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x150], eax
call fcn.10033580
lea ecx, [ebp - 0x44]
call fcn.10003b97
lea ecx, [ebp - 0x5c]
call fcn.10003b97
lea ecx, [ebp - 0x74]
call fcn.10003b97
lea ecx, [ebp - 0x8c]
call fcn.10003b97
lea ecx, [ebp - 0xa4]
call fcn.10003b97
lea ecx, [ebp - 0xbc]
call fcn.10003b97
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.10003b97
jmp 0x100029fc
xor ecx, ecx
call fcn.10033580
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1000233e
mov ecx, dword [ebp - 0x14]
call fcn.1003ddcd
ret