Function at 0x10009960
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x200
mov eax, dword [ebp + 8]
xor ecx, ecx
mov edx, dword [0x1022e944]
add edx, 0x314d
mov dword [0x1022e944], edx
mov edx, ecx
mov esi, ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x19c], ecx
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x198]
lea esi, section..data
mov edi, edx
add edi, 2
imul ebx, edx, 0x44
mov dword [ebp - 0x1a0], eax
mov eax, esi
add eax, ebx
add eax, 0x40
imul ebx, edx, 0x44
mov dword [ebp - 0x1a4], eax
mov eax, esi
add eax, ebx
add eax, 0x10
or edx, 1
imul ebx, edx, 0x44
mov dword [ebp - 0x1a8], eax
mov eax, esi
add eax, ebx
add eax, 0x40
mov ebx, dword [ebp - 0x1a4]
mov ebx, dword [ebx]
mov eax, dword [eax]
imul edx, edx, 0x44
add esi, edx
add esi, 0x10
mov edx, dword [ebp - 0x1a8]
mov dx, word [edx]
mov si, word [esi]
movzx edx, dx
movzx esi, si
xor edx, ebx
xor esi, eax
add edx, ecx
mov eax, dword [ebp - 0x1a0]
add esi, eax
cmp edi, 0x58c
mov eax, edx
mov ecx, esi
mov dword [ebp - 0x1ac], edx
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1b0], esi
jne 0x1000999f
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
xor edx, edx
mov bl, 0x6b
lea esi, [ebp - 0x18c]
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b4]
add eax, ecx
mov byte [ebp - 0x2c], 0x56
mov byte [ebp - 0x2b], 0x69
mov byte [ebp - 0x2a], 0x72
mov byte [ebp - 0x29], 0x74
mov byte [ebp - 0x28], 0x75
mov byte [ebp - 0x27], 0x61
mov byte [ebp - 0x26], 0x6c
mov byte [ebp - 0x25], 0x41
mov byte [ebp - 0x24], 0x6c
mov byte [ebp - 0x23], 0x6c
mov byte [ebp - 0x22], 0x6f
mov byte [ebp - 0x21], 0x63
mov byte [ebp - 0x20], 0
mov byte [ebp - 0x1f], 0x9b
mov dword [0x1022e944], 0x1938
mov byte [ebp - 0x18c], 0x6b
mov byte [ebp - 0x18b], 0x65
mov byte [ebp - 0x18a], 0x72
mov byte [ebp - 0x189], 0x6e
mov byte [ebp - 0x188], 0x65
mov byte [ebp - 0x187], 0x6c
mov byte [ebp - 0x186], 0x33
mov byte [ebp - 0x185], 0x32
mov byte [ebp - 0x184], 0x2e
mov byte [ebp - 0x183], 0x64
mov byte [ebp - 0x182], 0x6c
mov byte [ebp - 0x181], 0x6c
mov byte [ebp - 0x180], 0
mov byte [ebp - 0x17f], 0x9b
mov dword [0x1022e948], 0x14f9
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x1c8], edx
mov byte [ebp - 0x1c9], bl
mov al, byte [ebp - 0x1c9]
mov ecx, dword [ebp - 0x1c8]
movsx edx, al
mov si, dx
mov edx, ecx
add edx, 1
mov word [ebp + ecx*2 - 0x16c], si
mov al, byte [ebp + ecx - 0x18b]
cmp al, 0
mov dword [ebp - 0x1c8], edx
mov byte [ebp - 0x1c9], al
jne 0x10009b69
xor eax, eax
lea ecx, [ebp - 0x16c]
mov dword [0x1022e944], 0x90
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x1d0], eax
call fcn.1000a6b0
mov dword [esp], eax
mov eax, dword [ebp - 0x1bc]
mov dword [esp + 4], eax
call fcn.10009530
mov ecx, eax
mov dword [0x1022e960], eax
mov eax, esp
mov edx, dword [ebp - 0x1c0]
mov dword [eax + 4], edx
mov dword [eax + 0xc], 4
mov dword [eax + 8], 0x1000
mov dword [eax], 0
call ecx
sub esp, 0x10
xor ecx, ecx
mov dword [0x1022e944], 0xf9
mov edx, ecx
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d8], edx
mov dword [ebp - 0x1dc], ecx
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x1d8]
lea edx, section..data
imul esi, eax, 0x44
mov edi, edx
add edi, esi
add edi, 0x40
imul esi, eax, 0x44
mov ebx, edx
add ebx, esi
add ebx, 0xc
mov esi, dword [ebp - 0x1d4]
add esi, ecx
mov dword [ebp - 0x1e0], eax
add eax, 1
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e0]
imul eax, eax, 0x44
add edx, eax
add edx, 0x10
mov eax, dword [edi]
mov edi, dword [ebx]
movzx edx, word [edx]
xor edx, eax
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [ebp - 0x1e8], edx
mov dword [ebp - 0x1ec], ecx
call fcn.1000ac30
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1ec]
add eax, ecx
mov edx, dword [ebp - 0x1e4]
cmp edx, 0x58c
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1d8], eax
jne 0x10009c27
lea eax, [0x10214b42]
mov ecx, 0x20
lea edx, [ebp - 0x12c]
mov esi, dword [ebp - 0x1d4]
add esi, 0x4c8f1
mov dword [0x1022e944], 0x1503
mov edi, dword [ebp - 0x1d4]
add edi, 0xbfcb
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x1f8], edx
mov dword [ebp - 0x1fc], esi
call fcn.100097d0
mov eax, dword [ebp - 0x1f8]
mov dword [esp], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [ebp - 0x1c0]
mov dword [esp + 0xc], edx
call fcn.1000ae70
xor eax, eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x1fc]
mov dword [ecx], edx
mov dword [ecx + 4], 0x14c400
mov edx, dword [ebp - 0x1f0]
mov dword [ecx + 8], edx
mov edx, dword [0x1022e944]
add edx, 0xffffddba
mov dword [0x1022e944], edx
mov dword [ecx + 0xc], 0x20b0
add esp, 0x200
pop esi
pop edi
pop ebx
pop ebp
ret