Function at 0x10002b17
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x30
mov eax, 0x10021e50
call fcn.100215d1
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x28]
xor ebx, ebx
push 0x10028d6c
mov dword [ebp - 0x3c], ebx
call fcn.10004090
mov dword [ebp - 4], ebx
mov edi, dword [0x10031080]
test edi, edi
je case.0x10002aab.113
cmp byte [0x100310b9], bl
je 0x10002a94
mov ecx, 0x10b8134
call fcn.1000939a
mov ebx, eax
test ebx, ebx
je 0x10002a92
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002a92
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002a92
mov ax, word [ebx]
mov word [edi + 0x3e], ax
xor ebx, ebx
movzx eax, word [edi + 0x3e]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x10002aab.113
movzx eax, byte [eax + 0x10002c8d]
jmp dword [eax*4 + 0x10002c69]
mov cl, 0x29
mov dword [ebp - 0x38], 0x18191829
mov dword [ebp - 0x34], 0x5b485e04
mov eax, ebx
mov dword [ebp - 0x30], 0x5b46405b
mov byte [ebp - 0x2c], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10002add
mov cl, byte [ebp - 0x38]
jmp 0x10002ace
mov byte [ebp - 0x2c], bl
jmp 0x10002c25
mov cl, 0x61
mov dword [ebp - 0x38], 0x53515061
mov dword [ebp - 0x34], 0x60e134c
mov eax, ebx
mov word [ebp - 0x30], 0x414
mov byte [ebp - 0x2e], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 9
jae 0x10002b0f
mov cl, byte [ebp - 0x38]
jmp 0x10002b00
mov byte [ebp - 0x2e], bl
jmp 0x10002c25
mov cl, 0x40
mov dword [ebp - 0x38], 0x73707140
mov dword [ebp - 0x34], 0x27212d6d
mov eax, ebx
mov word [ebp - 0x30], 0x25
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 8
jae 0x10002b3e
mov cl, byte [ebp - 0x38]
jmp 0x10002b2f
mov byte [ebp - 0x2f], bl
jmp 0x10002c25
mov cl, 0x10
mov dword [ebp - 0x38], 0x24202110
mov dword [ebp - 0x34], 0x7962603d
mov eax, ebx
mov dword [ebp - 0x30], 0x646375
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x10002c22
mov cl, byte [ebp - 0x38]
jmp 0x10002b5f
mov cl, 0x67
mov dword [ebp - 0x38], 0x56575567
mov dword [ebp - 0x34], 0x1506104a
mov eax, ebx
mov dword [ebp - 0x30], 0x15080e15
mov byte [ebp - 0x2c], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10002add
mov cl, byte [ebp - 0x38]
jmp 0x10002b8e
mov cl, 0x3e
mov dword [ebp - 0x38], 0xc0e0c3e
mov dword [ebp - 0x34], 0x59514c13
mov eax, ebx
mov word [ebp - 0x30], 0x5b4b
mov byte [ebp - 0x2e], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 9
jae 0x10002b0f
mov cl, byte [ebp - 0x38]
jmp 0x10002bbc
mov cl, 0x73
mov dword [ebp - 0x38], 0x40434173
mov dword [ebp - 0x34], 0x14121e5e
mov eax, ebx
mov word [ebp - 0x30], 0x16
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 8
jae 0x10002b3e
mov cl, byte [ebp - 0x38]
jmp 0x10002be7
mov cl, 0x2f
mov dword [ebp - 0x38], 0x1b1f1d2f
mov dword [ebp - 0x34], 0x465d5f02
mov eax, ebx
mov dword [ebp - 0x30], 0x5b5c4a
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x10002c22
mov cl, byte [ebp - 0x38]
jmp 0x10002c13
mov byte [ebp - 0x2d], bl
lea ecx, [ebp - 0x37]
call fcn.10004078
push eax
lea eax, [ebp - 0x37]
push eax
lea ecx, [ebp - 0x28]
call fcn.10004009
lea eax, [ebp - 0x28]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
mov ecx, esi
push eax
mov byte [esi], bl
call fcn.10003b00
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.10003f3c
mov eax, esi
call fcn.1002157b
ret 4