Function at 0x1002582c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x1008a084]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x24], 0x38223456
push edi
mov dword [ebp - 0x3c], esi
mov dl, 0x56
mov dword [ebp - 0x20], 0x393a3509
xor ecx, ecx
mov word [ebp - 0x1c], 0x3325
mov byte [ebp - 0x1a], 0
xor dl, byte [ebp + ecx - 0x23]
mov byte [ebp + ecx - 0x23], dl
inc ecx
cmp ecx, 9
jae 0x10025873
mov dl, byte [ebp - 0x24]
jmp 0x10025860
sub esp, 0x18
mov byte [ebp - 0x1a], 0
lea eax, [ebp - 0x23]
mov ecx, esp
push eax
call fcn.1000289a
mov ecx, dword [esi]
call fcn.1000b929
add esp, 0x18
mov dword [esi + 4], eax
xor eax, eax
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x48], eax
sub esp, 0x18
mov dword [ebp - 0x24], 0x110c197e
mov edi, esp
mov dword [ebp - 0x20], 0x5b210e0b
mov cl, 0x7e
mov word [ebp - 0x1c], 0x1a
xor edx, edx
push eax
xor cl, byte [ebp + edx - 0x23]
mov byte [ebp + edx - 0x23], cl
inc edx
cmp edx, 8
jae 0x100258cf
mov cl, byte [ebp - 0x24]
jmp 0x100258bc
sub esp, 0x18
mov byte [ebp - 0x1b], 0
lea eax, [ebp - 0x23]
mov ecx, esp
push eax
call fcn.1000289a
push edi
call fcn.10007288
mov ecx, dword [esi]
add esp, 0x20
call fcn.1000b929
mov ebx, eax
mov dword [ebp - 0x44], 5
add esp, 0x18
mov dword [ebp - 0x38], ebx
xor eax, eax
mov dword [ebp - 0x40], eax
sub esp, 0x18
mov dword [ebp - 0x34], 0x91e0d6c
mov edi, esp
mov dword [ebp - 0x30], 0xf05330d
mov cl, 0x6c
mov dword [ebp - 0x2c], 0x49330203
mov word [ebp - 0x28], 8
push eax
xor eax, eax
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xc
jae 0x10025939
mov cl, byte [ebp - 0x34]
jmp 0x1002592a
sub esp, 0x18
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x33]
mov ecx, esp
push eax
call fcn.1000289a
push edi
call fcn.10007288
add esp, 0x20
mov ecx, ebx
call fcn.1000b929
add esp, 0x18
mov edi, eax
call fcn.10009a39
mov ebx, eax
test ebx, ebx
je 0x10025a66
mov dword [ebp - 0x18], ebx
call fcn.1000c006
test eax, eax
je 0x10025a66
mov dword [ebx], eax
mov ecx, eax
mov edx, dword [esi]
call fcn.1000b8f3
mov ecx, dword [ebx]
xor edx, edx
mov esi, 0x3f340000
mov eax, dword [ecx]
mov eax, dword [eax + 0xcc]
mov dword [ecx + 0x13c], edx
mov dword [ecx + 0x140], edx
mov dword [ecx + 0x144], esi
mov dword [ecx + 0x148], esi
mov dword [ecx + 0x1f0], edx
mov dword [ecx + 0x1f4], edx
mov dword [ecx + 0x1f8], edx
mov dword [ecx + 0x1fc], edx
call eax
mov ecx, dword [ebx]
call fcn.1000bbd6
mov ecx, dword [ebx]
mov edx, pe_nt_image_headers32
call fcn.1000bc77
lea eax, [ebp - 0x5c]
mov ecx, edi
push eax
call fcn.1000b996
mov esi, eax
lea edi, [ebp - 0x14]
pop ecx
lea edx, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx]
call fcn.1000c059
mov ecx, dword [ebx]
lea edx, [ebp - 0x14]
call fcn.1000ba0a
mov ecx, dword [ebx]
xor dl, dl
call fcn.1000bb59
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x18]
mov eax, dword [esi + 0xc]
cmp ecx, eax
jae 0x10025a4b
cmp dword [esi + 8], ecx
ja 0x10025a4b
mov edi, ecx
sub edi, dword [esi + 8]
sar edi, 2
cmp eax, dword [esi + 0x10]
jne 0x10025a3a
push ecx
lea ecx, [esi + 8]
call fcn.1002616b
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x10025a62
mov eax, dword [esi + 8]
mov eax, dword [eax + edi*4]
mov dword [ecx], eax
jmp 0x10025a62
cmp eax, dword [esi + 0x10]
jne 0x10025a59
push ecx
lea ecx, [esi + 8]
call fcn.1002616b
mov eax, dword [esi + 0xc]
test eax, eax
je 0x10025a62
mov dword [eax], ebx
add dword [esi + 0xc], 4
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x38]
inc eax
sub dword [ebp - 0x44], 1
mov dword [ebp - 0x40], eax
jne 0x10025905
mov eax, dword [ebp - 0x48]
inc eax
sub dword [ebp - 0x4c], 1
mov dword [ebp - 0x48], eax
jne 0x1002589e
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100350f5
mov esp, ebp
pop ebp
ret