Function at 0x10002e35
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x34
mov eax, 0x10071e13
call fcn.1003bd50
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x28]
xor ebx, ebx
push 0x10088176
mov dword [ebp - 0x40], ebx
call fcn.1000416d
mov dword [ebp - 4], ebx
mov edi, dword [0x10098bc0]
test edi, edi
je case.0x10002e2e.113
cmp byte [0x10098bdb], bl
je 0x10002e17
mov ecx, 0x10b8134
call fcn.1000dd00
mov ebx, eax
test ebx, ebx
je 0x10002e15
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002e15
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002e15
mov ax, word [ebx]
mov word [edi + 0x3e], ax
xor ebx, ebx
movzx eax, word [edi + 0x3e]
add eax, 0xffffff9b
cmp eax, 0x6f
ja case.0x10002e2e.113
movzx eax, byte [eax + 0x10003010]
jmp dword [eax*4 + 0x10002fec]
mov cl, 0x29
mov dword [ebp - 0x3c], 0x5b486229
mov dword [ebp - 0x38], 0x7e095a5c
mov eax, ebx
mov dword [ebp - 0x34], 0x405b5b48
mov word [ebp - 0x30], 0x5b46
mov byte [ebp - 0x2e], bl
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xd
jae 0x10002e66
mov cl, byte [ebp - 0x3c]
jmp 0x10002e57
mov byte [ebp - 0x2e], bl
jmp 0x10002fa8
mov cl, 0x4b
mov dword [ebp - 0x38], 0x392a004b
mov dword [ebp - 0x34], 0x196b383e
mov eax, ebx
mov dword [ebp - 0x30], 0x2e3e2c24
mov byte [ebp - 0x2c], bl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10002e99
mov cl, byte [ebp - 0x38]
jmp 0x10002e8a
mov byte [ebp - 0x2c], bl
lea eax, [ebp - 0x37]
push eax
call fcn.10004150
pop ecx
push eax
lea eax, [ebp - 0x37]
jmp 0x10002fb6
mov cl, 0xd
mov dword [ebp - 0x38], 0x7f6c460d
mov dword [ebp - 0x34], 0x402d7e78
mov eax, ebx
mov dword [ebp - 0x30], 0x686a6c
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xa
jae 0x10002ed7
mov cl, byte [ebp - 0x38]
jmp 0x10002ec8
mov byte [ebp - 0x2d], bl
jmp 0x10002e9c
mov cl, 0x6a
mov dword [ebp - 0x38], 0x180b216a
mov dword [ebp - 0x34], 0x3a4a191f
mov eax, ebx
mov dword [ebp - 0x30], 0x190f0318
mov word [ebp - 0x2c], 0x1e
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x10002f0a
mov cl, byte [ebp - 0x38]
jmp 0x10002efb
mov byte [ebp - 0x2b], bl
jmp 0x10002e9c
movaps xmm0, xmmword [0x10089830]
mov ecx, ebx
movups xmmword [ebp - 0x3c], xmm0
mov word [ebp - 0x2c], 0x3c
mov al, byte [ebp - 0x3c]
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0x10
jb 0x10002f22
mov byte [ebp - 0x2b], bl
jmp 0x10002fa8
movaps xmm0, xmmword [str._rHa__b]
mov ecx, ebx
movups xmmword [ebp - 0x3c], xmm0
mov al, byte [ebp - 0x3c]
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0xe
jb 0x10002f41
mov byte [ebp - 0x2d], bl
jmp 0x10002fa8
mov cl, 0x3f
mov dword [ebp - 0x3c], 0x1f537a3f
mov dword [ebp - 0x38], 0x5e4d5072
mov eax, ebx
mov dword [ebp - 0x34], 0x5e721f5b
mov word [ebp - 0x30], 0x5a58
mov byte [ebp - 0x2e], bl
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xd
jae 0x10002e66
mov cl, byte [ebp - 0x3c]
jmp 0x10002f75
movaps xmm0, xmmword [0x10089920]
mov ecx, ebx
movups xmmword [ebp - 0x3c], xmm0
mov byte [ebp - 0x2c], bl
mov al, byte [ebp - 0x3c]
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0xf
jb 0x10002f98
mov byte [ebp - 0x2c], bl
lea eax, [ebp - 0x3b]
push eax
call fcn.10004150
pop ecx
push eax
lea eax, [ebp - 0x3b]
push eax
lea ecx, [ebp - 0x28]
call fcn.100040d7
lea eax, [ebp - 0x28]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
mov ecx, esi
push eax
mov byte [esi], bl
call fcn.10003bbc
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.10004022
mov eax, esi
call fcn.1003bcfa
ret 4