Function at 0x10009257
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009f100
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x1010fa0c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
xor ebx, ebx
mov ecx, dword [0x10113814]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x1013b928]
cmp eax, dword [esi + 4]
jle 0x10009301
push 0x1013b928
call fcn.1009cfcc
cmp dword [0x1013b928], 0xffffffff
pop ecx
jne 0x10009301
mov edx, dword [0x10113a0c]
mov cl, 0x11
mov dword [ebp - 0x18], 0x4e7d7211
mov dword [ebp - 0x14], 0x74657f78
mov word [ebp - 0x10], 0x6163
mov eax, dword [edx]
mov byte [ebp - 0xe], bl
mov edi, dword [eax + 0x34]
mov eax, ebx
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 9
jae 0x100092e6
mov cl, byte [ebp - 0x18]
jmp 0x100092d7
lea eax, [ebp - 0x17]
mov byte [ebp - 0xe], bl
push eax
mov ecx, edx
call edi
push 0x1013b928
mov dword [0x1013b934], eax
call fcn.1009cf82
pop ecx
mov eax, dword [0x1013b938]
cmp eax, dword [esi + 4]
jle 0x10009379
push 0x1013b938
call fcn.1009cfcc
cmp dword [0x1013b938], 0xffffffff
pop ecx
jne 0x10009379
mov edx, dword [0x10113a0c]
mov cl, 0x3c
mov dword [ebp - 0x1c], 0x63505f3c
mov dword [ebp - 0x18], 0x5d584c49
mov dword [ebp - 0x14], 0x5d4e5948
mov eax, dword [edx]
mov word [ebp - 0x10], 0x5948
mov byte [ebp - 0xe], bl
mov edi, dword [eax + 0x34]
mov eax, ebx
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 0xd
jae 0x1000935e
mov cl, byte [ebp - 0x1c]
jmp 0x1000934f
lea eax, [ebp - 0x1b]
mov byte [ebp - 0xe], bl
push eax
mov ecx, edx
call edi
push 0x1013b938
mov dword [0x1013b95c], eax
call fcn.1009cf82
pop ecx
mov eax, dword [0x1013b940]
cmp eax, dword [esi + 4]
jle 0x100093d6
push 0x1013b940
call fcn.1009cfcc
cmp dword [0x1013b940], 0xffffffff
pop ecx
jne 0x100093d6
mov ecx, dword [0x10113a0c]
mov edx, ebx
movaps xmm0, xmmword [0x100fff30]
movups xmmword [ebp - 0x20], xmm0
mov byte [ebp - 0x10], bl
mov eax, dword [ecx]
mov edi, dword [eax + 0x34]
mov al, byte [ebp - 0x20]
xor byte [ebp + edx - 0x1f], al
inc edx
cmp edx, 0xf
jb 0x100093b5
lea eax, [ebp - 0x1f]
mov byte [ebp - 0x10], bl
push eax
call edi
push 0x1013b940
call fcn.1009cf82
pop ecx
mov eax, dword [0x1013b92c]
cmp eax, dword [esi + 4]
jle 0x1000944a
push 0x1013b92c
call fcn.1009cfcc
cmp dword [0x1013b92c], 0xffffffff
pop ecx
jne 0x1000944a
mov ecx, dword [0x10113a0c]
mov edx, ebx
movaps xmm0, xmmword [0x10100200]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0x6f786973
mov eax, dword [ecx]
mov dword [ebp - 0x14], 0x7c6f426d
mov dword [ebp - 0x10], 0x727469
mov edi, dword [eax + 0x34]
mov al, byte [ebp - 0x28]
xor byte [ebp + edx - 0x27], al
inc edx
cmp edx, 0x1a
jb 0x10009424
lea eax, [ebp - 0x27]
mov byte [ebp - 0xd], bl
push eax
call edi
push 0x1013b92c
mov dword [0x1013b93c], eax
call fcn.1009cf82
pop ecx
mov eax, dword [0x1013b964]
cmp eax, dword [esi + 4]
jle 0x100094be
push 0x1013b964
call fcn.1009cfcc
cmp dword [0x1013b964], 0xffffffff
pop ecx
jne 0x100094be
mov ecx, dword [0x10113a0c]
mov edx, ebx
movaps xmm0, xmmword [0x100ffcf0]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0x594e5f45
mov eax, dword [ecx]
mov dword [ebp - 0x14], 0x4a59745b
mov dword [ebp - 0x10], 0x44425f
mov edi, dword [eax + 0x34]
mov al, byte [ebp - 0x28]
xor byte [ebp + edx - 0x27], al
inc edx
cmp edx, 0x1a
jb 0x10009498
lea eax, [ebp - 0x27]
mov byte [ebp - 0xd], bl
push eax
call edi
push 0x1013b964
mov dword [0x1013b924], eax
call fcn.1009cf82
pop ecx
mov eax, dword [0x1013b968]
cmp eax, dword [esi + 4]
jle 0x10009520
mov edi, 0x1013b968
push edi
call fcn.1009cfcc
cmp dword [0x1013b968], 0xffffffff
pop ecx
jne 0x10009520
mov ecx, dword [0x10113a0c]
mov edx, ebx
movaps xmm0, xmmword [0x100ff2b0]
movups xmmword [ebp - 0x20], xmm0
mov word [ebp - 0x10], 0x1f
mov eax, dword [ecx]
mov esi, dword [eax + 0x34]
mov al, byte [ebp - 0x20]
xor byte [ebp + edx - 0x1f], al
inc edx
cmp edx, 0x10
jb 0x100094fe
lea eax, [ebp - 0x1f]
mov byte [ebp - 0xf], bl
push eax
call esi
push edi
mov dword [0x1013b930], eax
call fcn.1009cf82
pop ecx
mov eax, dword [0x1013b93c]
mov eax, dword [eax + 0x1c]
movss xmm3, dword [eax + 0x2c]
mov eax, dword [0x1013b924]
mov eax, dword [eax + 0x1c]
movss xmm0, dword [eax + 0x2c]
mov eax, dword [0x1013b95c]
mov eax, dword [eax + 0x1c]
movss xmm1, dword [eax + 0x2c]
comiss xmm1, xmm3
ja 0x10009559
comiss xmm0, xmm1
jbe 0x10009556
movaps xmm3, xmm0
jmp 0x10009559
movaps xmm3, xmm1
mov ecx, dword [0x1013b930]
test ecx, ecx
je 0x1000956d
mov eax, dword [ecx + 0x1c]
movss xmm4, dword [eax + 0x2c]
jmp 0x10009570
movaps xmm4, xmm1
mov eax, dword [0x1013b934]
movaps xmm0, xmm3
divss xmm0, xmm4
mov eax, dword [eax + 0x1c]
movss xmm2, dword [eax + 0x2c]
comiss xmm2, xmm0
ja 0x1000959c
test ecx, ecx
je 0x10009595
mov eax, dword [ecx + 0x1c]
movss xmm1, dword [eax + 0x2c]
movaps xmm2, xmm3
divss xmm2, xmm1
movaps xmm0, xmm2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret