Function at 0x10009390
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x204
mov eax, dword [ebp + 8]
xor ecx, ecx
mov edx, dword [0x1022ea10]
add edx, 0x314d
mov dword [0x1022ea10], edx
mov edx, ecx
mov esi, ecx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x19c], ecx
jmp 0x1000949d
lea eax, [0x10213b82]
mov ecx, 0x20
lea edx, [ebp - 0x14c]
mov esi, dword [ebp - 0x1a0]
add esi, 0xb1283
mov edi, dword [ebp - 0x1a0]
add edi, 0x11a5a
mov dword [0x1022ea10], 0x1503
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
mov dword [ebp - 0x1a4], edi
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x1ac], edx
mov dword [ebp - 0x1b0], esi
call fcn.10009200
mov eax, dword [ebp - 0x1ac]
mov dword [esp], eax
mov ecx, dword [ebp - 0x1a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [ebp - 0x1b4]
mov dword [esp + 0xc], edx
call fcn.1000a8d0
xor eax, eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x1b0]
mov dword [ecx], edx
mov dword [ecx + 4], 0x139600
mov edx, dword [ebp - 0x1a4]
mov dword [ecx + 8], edx
mov edx, dword [0x1022ea10]
add edx, 0xffffddba
mov dword [0x1022ea10], edx
mov dword [ecx + 0xc], 0x2090
add esp, 0x204
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x198]
lea esi, section..data
imul edi, ecx, 0x44
mov ebx, esi
add ebx, edi
add ebx, 0x40
imul edi, ecx, 0x44
mov dword [ebp - 0x1b8], eax
mov eax, esi
add eax, edi
add eax, 0x10
mov edi, ecx
add edi, 2
or ecx, 1
mov dword [ebp - 0x1bc], eax
imul eax, ecx, 0x44
mov dword [ebp - 0x1c0], eax
mov eax, esi
mov dword [ebp - 0x1c4], ecx
mov ecx, dword [ebp - 0x1c0]
add eax, ecx
add eax, 0x40
mov ecx, dword [ebx]
mov eax, dword [eax]
mov ebx, dword [ebp - 0x1c4]
imul ebx, ebx, 0x44
add esi, ebx
add esi, 0x10
mov ebx, dword [ebp - 0x1bc]
mov bx, word [ebx]
mov si, word [esi]
movzx ebx, bx
movzx esi, si
xor ebx, ecx
xor esi, eax
add ebx, edx
mov eax, dword [ebp - 0x1b8]
add esi, eax
cmp edi, 0x58e
mov eax, ebx
mov ecx, esi
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x194], edi
mov dword [ebp - 0x1cc], ebx
jne 0x1000949d
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x1c8]
add ecx, eax
mov dword [ebp - 0x1d0], ecx
xor eax, eax
mov cl, 0x6b
lea edx, [ebp - 0x4c]
lea esi, [ebp - 0x2c]
lea edi, [ebp - 0x18c]
mov bx, word [0x1022e9c8]
mov dword [ebp - 0x1d4], eax
mov eax, dword [0x1022e9f8]
movzx ebx, bx
xor ebx, eax
mov eax, dword [ebp - 0x1d0]
add ebx, eax
mov byte [ebp - 0x2c], 0x56
mov byte [ebp - 0x2b], 0x69
mov byte [ebp - 0x2a], 0x72
mov byte [ebp - 0x29], 0x74
mov byte [ebp - 0x28], 0x75
mov byte [ebp - 0x27], 0x61
mov byte [ebp - 0x26], 0x6c
mov byte [ebp - 0x25], 0x41
mov byte [ebp - 0x24], 0x6c
mov byte [ebp - 0x23], 0x6c
mov byte [ebp - 0x22], 0x6f
mov byte [ebp - 0x21], 0x63
mov byte [ebp - 0x20], 0
mov byte [ebp - 0x1f], 0x79
mov dword [0x1022ea10], 0x1938
mov byte [ebp - 0x4c], 0x6b
mov byte [ebp - 0x4b], 0x65
mov byte [ebp - 0x4a], 0x72
mov byte [ebp - 0x49], 0x6e
mov byte [ebp - 0x48], 0x65
mov byte [ebp - 0x47], 0x6c
mov byte [ebp - 0x46], 0x33
mov byte [ebp - 0x45], 0x32
mov byte [ebp - 0x44], 0x2e
mov byte [ebp - 0x43], 0x64
mov byte [ebp - 0x42], 0x6c
mov byte [ebp - 0x41], 0x6c
mov byte [ebp - 0x40], 0
mov byte [ebp - 0x3f], 0x79
mov dword [0x1022ea14], 0x14f9
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1e0], edx
mov dword [ebp - 0x1e4], esi
mov dword [ebp - 0x1b4], ebx
mov byte [ebp - 0x1e5], cl
mov al, byte [ebp - 0x1e5]
mov ecx, dword [ebp - 0x1dc]
mov edx, ecx
inc edx
movsx esi, al
mov di, si
mov word [ebp + ecx*2 - 0x18c], di
mov al, byte [ebp + ecx - 0x4b]
cmp al, 0
mov dword [ebp - 0x1dc], edx
mov byte [ebp - 0x1e5], al
jne 0x10009666
xor eax, eax
lea ecx, [ebp - 0x18c]
mov dword [0x1022ea10], 0x90
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x1ec], eax
call fcn.1000a100
mov dword [esp], eax
mov eax, dword [ebp - 0x1e4]
mov dword [esp + 4], eax
call fcn.10008f50
mov ecx, eax
mov dword [0x1022ea2c], eax
mov eax, esp
mov edx, dword [ebp - 0x1b4]
mov dword [eax + 4], edx
mov dword [eax + 0xc], 4
mov dword [eax + 8], 0x1000
mov dword [eax], 0
call ecx
sub esp, 0x10
xor ecx, ecx
mov dword [0x1022ea10], 0xf9
mov edx, ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1f0], edx
mov dword [ebp - 0x1f4], ecx
mov eax, dword [ebp - 0x1f4]
mov ecx, dword [ebp - 0x1f0]
lea edx, section..data
imul esi, eax, 0x44
mov edi, edx
add edi, esi
add edi, 0xc
imul esi, eax, 0x44
mov ebx, edx
add ebx, esi
add ebx, 0x40
mov esi, eax
add esi, 1
imul eax, eax, 0x44
add edx, eax
add edx, 0x10
mov eax, dword [ebp - 0x1a0]
add eax, ecx
mov ebx, dword [ebx]
mov edi, dword [edi]
movzx edx, word [edx]
xor edx, ebx
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x200], edx
call fcn.1000a690
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x1fc]
add eax, ecx
mov edx, dword [ebp - 0x1f8]
cmp edx, 0x58f
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x1f0], eax
je 0x100093d4
jmp 0x1000971c