Function at 0x10002ca3
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x18
mov eax, 0x1003db28
call fcn.1003d6ce
xor edi, edi
inc edi
mov dword [ebp - 0x10], edi
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x10042857
call fcn.10003da4
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x10], edi
mov edi, dword [0x10057860]
test edi, edi
je case.default.0x10002e34
cmp byte [0x100578dc], dl
je 0x10002d1f
mov ecx, 0x10b8134
call fcn.1000d2b7
mov ebx, eax
test ebx, ebx
je 0x10002d1d
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002d1d
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edx, edx
test eax, eax
jne 0x10002d1f
mov ax, word [ebx]
mov word [edi + 0x3e], ax
jmp 0x10002d1f
xor edx, edx
movzx eax, word [edi + 0x3e]
mov ecx, 0xc9
cmp eax, ecx
ja 0x10002e1f
je case.0x10002e34.205
sub eax, 0x65
cmp eax, 0xb
ja case.default.0x10002e34
movzx eax, byte [eax + 0x10002efb]
jmp dword [eax*4 + 0x10002eeb]
mov cl, 0x33
mov dword [ebp - 0x24], 0x41527833
mov dword [ebp - 0x20], 0x64134046
mov eax, edx
mov dword [ebp - 0x1c], 0x5a414152
mov word [ebp - 0x18], 0x415c
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xd
jae 0x10002d81
mov cl, byte [ebp - 0x24]
jmp 0x10002d72
mov byte [ebp - 0x16], dl
jmp 0x10002ed4
mov cl, 0x3e
mov dword [ebp - 0x20], 0x4c5f753e
mov dword [ebp - 0x1c], 0x6c1e4d4b
mov eax, edx
mov dword [ebp - 0x18], 0x5b4b5951
mov byte [ebp - 0x14], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002db4
mov cl, byte [ebp - 0x20]
jmp 0x10002da5
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x1f]
jmp 0x10002ed7
mov cl, 0x25
mov dword [ebp - 0x20], 0x57446e25
mov dword [ebp - 0x1c], 0x68055650
mov eax, edx
mov dword [ebp - 0x18], 0x404244
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10002de7
mov cl, byte [ebp - 0x20]
jmp 0x10002dd8
mov byte [ebp - 0x15], dl
jmp 0x10002db7
mov cl, 0x12
mov dword [ebp - 0x20], 0x60735912
mov dword [ebp - 0x1c], 0x42326167
mov eax, edx
mov dword [ebp - 0x18], 0x61777b60
mov word [ebp - 0x14], 0x66
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xc
jae 0x10002e1a
mov cl, byte [ebp - 0x20]
jmp 0x10002e0b
mov byte [ebp - 0x13], dl
jmp 0x10002db7
sub eax, 0xca
cmp eax, 0xa
ja case.default.0x10002e34
movzx eax, byte [eax + 0x10002f17]
jmp dword [eax*4 + 0x10002f07]
movaps xmm0, xmmword [0x1004d220]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0x5e
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x10
jb 0x10002e4e
mov byte [ebp - 0x13], dl
jmp 0x10002ed4
movaps xmm0, xmmword [0x1004c8c0]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xe
jb 0x10002e6d
mov byte [ebp - 0x15], dl
jmp 0x10002ed4
mov cl, 0x3a
mov dword [ebp - 0x24], 0x1a567f3a
mov dword [ebp - 0x20], 0x5b485577
mov eax, edx
mov dword [ebp - 0x1c], 0x5b771a5e
mov word [ebp - 0x18], 0x5f5d
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xd
jae 0x10002d81
mov cl, byte [ebp - 0x24]
jmp 0x10002ea1
movaps xmm0, xmmword [0x1004d170]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xf
jb 0x10002ec4
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x23]
push eax
mov ecx, esi
call fcn.10003b54
mov eax, esi
call fcn.1003d6ab
ret 4