Function at 0x10002c9e
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x18
mov eax, 0x1003dc08
call fcn.1003d7ae
xor edi, edi
inc edi
mov dword [ebp - 0x10], edi
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x10042857
call fcn.10003d9a
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x10], edi
mov edi, dword [0x10057860]
test edi, edi
je case.default.0x10002e2f
cmp byte [0x100578dc], dl
je 0x10002d1a
mov ecx, 0x10b8134
call fcn.1000d2bd
mov ebx, eax
test ebx, ebx
je 0x10002d18
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002d18
push 4
add ebx, 0x6e4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
xor edx, edx
test eax, eax
jne 0x10002d1a
mov ax, word [ebx]
mov word [edi + 0x3e], ax
jmp 0x10002d1a
xor edx, edx
movzx eax, word [edi + 0x3e]
mov ecx, 0xc9
cmp eax, ecx
ja 0x10002e1a
je case.0x10002e2f.205
sub eax, 0x65
cmp eax, 0xb
ja case.default.0x10002e2f
movzx eax, byte [eax + 0x10002ef6]
jmp dword [eax*4 + 0x10002ee6]
mov cl, 0x76
mov dword [ebp - 0x24], 0x4173d76
mov dword [ebp - 0x20], 0x21560503
mov eax, edx
mov dword [ebp - 0x1c], 0x1f040417
mov word [ebp - 0x18], 0x419
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xd
jae 0x10002d7c
mov cl, byte [ebp - 0x24]
jmp 0x10002d6d
mov byte [ebp - 0x16], dl
jmp 0x10002ecf
mov cl, 0x49
mov dword [ebp - 0x20], 0x3b280249
mov dword [ebp - 0x1c], 0x1b693a3c
mov eax, edx
mov dword [ebp - 0x18], 0x2c3c2e26
mov byte [ebp - 0x14], dl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xb
jae 0x10002daf
mov cl, byte [ebp - 0x20]
jmp 0x10002da0
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x1f]
jmp 0x10002ed2
mov cl, 0x3d
mov dword [ebp - 0x20], 0x4f5c763d
mov dword [ebp - 0x1c], 0x701d4e48
mov eax, edx
mov dword [ebp - 0x18], 0x585a5c
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xa
jae 0x10002de2
mov cl, byte [ebp - 0x20]
jmp 0x10002dd3
mov byte [ebp - 0x15], dl
jmp 0x10002db2
mov cl, 0x2d
mov dword [ebp - 0x20], 0x5f4c662d
mov dword [ebp - 0x1c], 0x7d0d5e58
mov eax, edx
mov dword [ebp - 0x18], 0x5e48445f
mov word [ebp - 0x14], 0x59
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xc
jae 0x10002e15
mov cl, byte [ebp - 0x20]
jmp 0x10002e06
mov byte [ebp - 0x13], dl
jmp 0x10002db2
sub eax, 0xca
cmp eax, 0xa
ja case.default.0x10002e2f
movzx eax, byte [eax + 0x10002f12]
jmp dword [eax*4 + 0x10002f02]
movaps xmm0, xmmword [0x1004cc40]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 6
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x10
jb 0x10002e49
mov byte [ebp - 0x13], dl
jmp 0x10002ecf
movaps xmm0, xmmword [0x1004c940]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xe
jb 0x10002e68
mov byte [ebp - 0x15], dl
jmp 0x10002ecf
mov cl, 0x3a
mov dword [ebp - 0x24], 0x1a567f3a
mov dword [ebp - 0x20], 0x5b485577
mov eax, edx
mov dword [ebp - 0x1c], 0x5b771a5e
mov word [ebp - 0x18], 0x5f5d
mov byte [ebp - 0x16], dl
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xd
jae 0x10002d7c
mov cl, byte [ebp - 0x24]
jmp 0x10002e9c
movaps xmm0, xmmword [0x1004cf70]
mov ecx, edx
movups xmmword [ebp - 0x24], xmm0
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xf
jb 0x10002ebf
mov byte [ebp - 0x14], dl
lea eax, [ebp - 0x23]
push eax
mov ecx, esi
call fcn.10003b4a
mov eax, esi
call fcn.1003d78b
ret 4