Function at 0x10002b90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x30
mov eax, 0x10072066
call fcn.1003bfa0
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x28]
xor ebx, ebx
push 0x100847ef
mov dword [ebp - 0x3c], ebx
call fcn.10004179
mov dword [ebp - 4], ebx
mov edi, dword [0x10099bc0]
test edi, edi
je case.0x10002b56.113
cmp byte [0x10099bdb], bl
je 0x10002b3d
mov ecx, 0x10b8134
call fcn.1000dfae
mov ebx, eax
test ebx, ebx
je 0x10002b3b
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002b3b
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002b3b
mov ax, word [ebx]
mov word [edi + 0x3e], ax
xor ebx, ebx
movzx eax, word [edi + 0x3e]
push 0x6f
add eax, 0xffffff9b
pop ecx
cmp eax, ecx
ja case.0x10002b56.113
movzx eax, byte [eax + 0x10002d36]
jmp dword [eax*4 + 0x10002d12]
mov cl, 0x30
mov dword [ebp - 0x38], 0x1000130
mov dword [ebp - 0x34], 0x4251471d
mov eax, ebx
mov dword [ebp - 0x30], 0x425f5942
mov byte [ebp - 0x2c], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10002b88
mov cl, byte [ebp - 0x38]
jmp 0x10002b79
mov byte [ebp - 0x2c], bl
jmp 0x10002cce
mov cl, 9
mov dword [ebp - 0x38], 0x3b393809
mov dword [ebp - 0x34], 0x6e667b24
mov eax, ebx
mov word [ebp - 0x30], 0x6c7c
mov byte [ebp - 0x2e], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 9
jae 0x10002bba
mov cl, byte [ebp - 0x38]
jmp 0x10002bab
mov byte [ebp - 0x2e], bl
jmp 0x10002cce
mov cl, 0x58
mov dword [ebp - 0x38], 0x6b686958
mov dword [ebp - 0x34], 0x3f393575
mov eax, ebx
mov word [ebp - 0x30], 0x3d
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 8
jae 0x10002be9
mov cl, byte [ebp - 0x38]
jmp 0x10002bda
mov byte [ebp - 0x2f], bl
jmp 0x10002cce
mov cl, 0xe
mov dword [ebp - 0x38], 0x3a3e3f0e
mov dword [ebp - 0x34], 0x677c7e23
mov eax, ebx
mov dword [ebp - 0x30], 0x7a7d6b
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x10002ccb
mov cl, byte [ebp - 0x38]
jmp 0x10002c0a
mov cl, 0x3a
mov dword [ebp - 0x38], 0xb0a083a
mov dword [ebp - 0x34], 0x485b4d17
mov eax, ebx
mov dword [ebp - 0x30], 0x48555348
mov byte [ebp - 0x2c], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10002b88
mov cl, byte [ebp - 0x38]
jmp 0x10002c39
mov byte [ebp - 0x38], cl
mov eax, ebx
mov dword [ebp - 0x37], 0x425d5f5d
mov dword [ebp - 0x33], 0x1a08001d
mov word [ebp - 0x2f], 0xa
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 9
jae 0x10002bba
mov cl, byte [ebp - 0x38]
jmp 0x10002c65
mov cl, 3
mov dword [ebp - 0x38], 0x30333103
mov dword [ebp - 0x34], 0x64626e2e
mov eax, ebx
mov word [ebp - 0x30], 0x66
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 8
jae 0x10002be9
mov cl, byte [ebp - 0x38]
jmp 0x10002c90
mov cl, 0x51
mov dword [ebp - 0x38], 0x65616351
mov dword [ebp - 0x34], 0x3823217c
mov eax, ebx
mov dword [ebp - 0x30], 0x252234
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x10002ccb
mov cl, byte [ebp - 0x38]
jmp 0x10002cbc
mov byte [ebp - 0x2d], bl
lea eax, [ebp - 0x37]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x37]
push eax
lea ecx, [ebp - 0x28]
call fcn.100040e3
lea eax, [ebp - 0x28]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
mov ecx, esi
push eax
mov byte [esi], bl
call fcn.10003bc8
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.1000402e
mov eax, esi
call fcn.1003bf4a
ret 4