Function at 0x10002b9e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x14
mov eax, 0x1003e14d
call fcn.1003dd2e
xor edi, edi
inc edi
mov dword [ebp - 0x10], edi
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x10042857
call fcn.10003d99
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], edi
mov edi, dword [0x10057860]
test edi, edi
je case.default.0x10002b97
cmp byte [0x100578e0], bl
je 0x10002a8d
mov ecx, 0x10b8134
call fcn.1000d857
mov ebx, eax
test ebx, ebx
je 0x10002a8b
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002a8b
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002a8b
mov ax, word [ebx]
mov word [edi + 0x3e], ax
xor ebx, ebx
movzx eax, word [edi + 0x3e]
mov ecx, 0xc9
cmp eax, ecx
ja 0x10002b80
je case.0x10002b97.205
sub eax, 0x65
cmp eax, 0xb
ja case.default.0x10002b97
movzx eax, byte [eax + 0x10002c75]
jmp dword [eax*4 + 0x10002c65]
mov cl, 0x17
mov dword [ebp - 0x20], 0x26272617
mov dword [ebp - 0x1c], 0x6576603a
mov eax, ebx
mov dword [ebp - 0x18], 0x65787e65
mov byte [ebp - 0x14], bl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002ae9
mov cl, byte [ebp - 0x20]
jmp 0x10002ada
mov byte [ebp - 0x14], bl
jmp 0x10002c4e
mov cl, 0x2f
mov dword [ebp - 0x20], 0x1d1f1e2f
mov dword [ebp - 0x1c], 0x48405d02
mov eax, ebx
mov word [ebp - 0x18], 0x4a5a
mov byte [ebp - 0x16], bl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002b1b
mov cl, byte [ebp - 0x20]
jmp 0x10002b0c
mov byte [ebp - 0x16], bl
jmp 0x10002c4e
mov cl, 0x61
mov dword [ebp - 0x20], 0x52515061
mov dword [ebp - 0x1c], 0x6000c4c
mov eax, ebx
mov word [ebp - 0x18], 4
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 8
jae 0x10002b4a
mov cl, byte [ebp - 0x20]
jmp 0x10002b3b
mov byte [ebp - 0x17], bl
jmp 0x10002c4e
push 0xa
mov dl, 0x13
mov dword [ebp - 0x20], 0x27232213
mov dword [ebp - 0x1c], 0x7a61633e
mov eax, ebx
mov dword [ebp - 0x18], 0x676076
pop ecx
xor byte [ebp + eax - 0x1f], dl
inc eax
cmp eax, ecx
jae 0x10002c4b
mov dl, byte [ebp - 0x20]
jmp 0x10002b6e
push 0xa
sub eax, 0xca
pop ecx
cmp eax, ecx
ja case.default.0x10002b97
movzx eax, byte [eax + 0x10002c91]
jmp dword [eax*4 + 0x10002c81]
mov cl, 0x49
mov dword [ebp - 0x20], 0x78797b49
mov dword [ebp - 0x1c], 0x3b283e64
mov eax, ebx
mov dword [ebp - 0x18], 0x3b26203b
mov byte [ebp - 0x14], bl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002ae9
mov cl, byte [ebp - 0x20]
jmp 0x10002bba
mov cl, 0xb
mov dword [ebp - 0x20], 0x393b390b
mov dword [ebp - 0x1c], 0x6c647926
mov eax, ebx
mov word [ebp - 0x18], 0x6e7e
mov byte [ebp - 0x16], bl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002b1b
mov cl, byte [ebp - 0x20]
jmp 0x10002be8
mov byte [ebp - 0x20], cl
mov eax, ebx
mov dword [ebp - 0x1f], 0x27393a38
mov dword [ebp - 0x1b], 0x6f6d6b67
mov byte [ebp - 0x17], bl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 8
jae 0x10002b4a
mov cl, byte [ebp - 0x20]
jmp 0x10002c11
mov dl, 0x47
mov dword [ebp - 0x20], 0x73777547
mov dword [ebp - 0x1c], 0x2e35376a
mov eax, ebx
mov dword [ebp - 0x18], 0x333422
xor byte [ebp + eax - 0x1f], dl
inc eax
cmp eax, ecx
jae 0x10002c4b
mov dl, byte [ebp - 0x20]
jmp 0x10002c3d
mov byte [ebp - 0x15], bl
lea eax, [ebp - 0x1f]
mov ecx, esi
push eax
call fcn.10003b49
mov eax, esi
call fcn.1003dd0b
ret 4
add byte [ecx], al
add al, byte [ebx]
add eax, dword [eax]
add byte [ecx], al
add dword [edx], eax
add ch, byte [edx + 0x14]
push 0x14
mov eax, 0x1003e14d
call fcn.1003dd2e
mov esi, ecx
xor ebx, ebx
inc ebx
mov dword [ebp - 0x10], ebx
mov edi, dword [ebp + 8]
mov ecx, edi
push 0x10042857
call fcn.10003d99
xor edx, edx
mov dword [ebp - 4], edx
mov al, byte [esi + 2]
mov dword [ebp - 0x10], ebx
cmp al, 0xff
je 0x1000307c
cmp al, bl
jne 0x10002f81
mov cl, 0x27
mov dword [ebp - 0x1c], 0xa161727
mov dword [ebp - 0x18], 0x434b4840
mov eax, edx
mov byte [ebp - 0x14], dl
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 7
jae 0x10002f79
mov cl, byte [ebp - 0x1c]
jmp 0x10002f6a
lea eax, [ebp - 0x1b]
jmp 0x10003071
jle 0x1000307c
cmp al, 5
jge 0x10002fc0
mov cl, 0x70
mov dword [ebp - 0x20], 0x5d424070
mov dword [ebp - 0x1c], 0x61c1903
mov eax, edx
mov word [ebp - 0x18], 0x215
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002fb5
mov cl, byte [ebp - 0x20]
jmp 0x10002fa6
mov byte [ebp - 0x16], dl
lea eax, [ebp - 0x1f]
jmp 0x10003074
cmp al, 0xa
jge 0x10002fee
mov cl, 0x5e
mov dword [ebp - 0x20], 0x736d6e5e
mov dword [ebp - 0x1c], 0x3f2c3733
mov eax, edx
mov word [ebp - 0x18], 0x3b39
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002fb5
mov cl, byte [ebp - 0x20]
jmp 0x10002fdf
cmp al, 0x1a
jge 0x1000301c
mov cl, 0xf
mov dword [ebp - 0x20], 0x223b3f0f
mov dword [ebp - 0x1c], 0x6b6e677c
mov eax, edx
mov word [ebp - 0x18], 0x7860
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 9
jae 0x10002fb5
mov cl, byte [ebp - 0x20]
jmp 0x1000300d
cmp al, 0x65
mov byte [ebp - 0x14], dl
mov eax, edx
jge 0x10003048
mov cl, 0x46
mov dword [ebp - 0x1c], 0x6b737646
mov dword [ebp - 0x18], 0x32352f2b
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 7
jae 0x10002f79
mov cl, byte [ebp - 0x1c]
jmp 0x10003035
mov cl, 0x3c
mov dword [ebp - 0x20], 0x110a0c3c
mov dword [ebp - 0x1c], 0x555d4e48
mov dword [ebp - 0x18], 0x5b525552
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x1000306e
mov cl, byte [ebp - 0x20]
jmp 0x1000305f
lea eax, [ebp - 0x1f]
mov byte [ebp - 0x14], dl
push eax
mov ecx, edi
call fcn.10003b49
mov eax, edi
call fcn.1003dd0b
ret 4
xor eax, eax
mov eax, dword [ebp - 8]
mov dword ds:[ebx], eax
pop ebx
leave
ret