Function at 0x10009070
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003cafd
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x100500f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x6c
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004ade8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x100090bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x100090a0
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0
call fcn.10008f00
mov dword [ebp - 0x18], 0x656d6f53
mov dword [ebp - 0x14], 0x6e696874
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 1
call fcn.10008f00
mov dword [ebp - 0x18], 0x434f5250
mov dword [ebp - 0x14], 0x4c505845
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 2
call fcn.10008f00
mov ecx, 0xb4
xor edx, edx
nop
mov al, byte [edx + 0x1004ae00]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000913d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x10009120
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 3
call fcn.10008f00
mov ecx, 0xc9
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004ae10]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000917d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x10009160
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 4
call fcn.10008f00
mov ecx, 0x46
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004ae20]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100091bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x100091a0
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 5
call fcn.10008f00
mov ecx, 0x64
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004ae30]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x100091fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x100091e0
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 6
call fcn.10008f00
mov ecx, 0xc
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.XKa_szz_Cyqzu]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000923d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x16
jl 0x10009220
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 7
call fcn.10008f00
mov ecx, 0x3d
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.iiV__]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000927d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x10009260
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 8
call fcn.10008f00
mov ecx, 0x39
xor edx, edx
nop dword [eax]
mov al, byte [edx + str.moHYOZZ____5_]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100092bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x100092a0
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 9
call fcn.10008f00
mov ecx, 0x74
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004ae80]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x100092fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x12
jl 0x100092e0
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xa
call fcn.10008f00
mov ecx, 0x41
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004ae94]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000933d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x10009320
mov byte [ebp - 0x12], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xb
call fcn.10008f00
mov ecx, 0xbd
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004aea4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000937d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10009360
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xc
call fcn.10008f00
mov ecx, 0x6b
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004aeb8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x100093bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x28
jl 0x100093a0
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xd
call fcn.10008f00
mov dword [ebp - 0x1c], 0x72546850
mov dword [ebp - 0x18], 0x654e6565
mov word [ebp - 0x14], 0x77
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xe
call fcn.10008f00
mov ecx, 0x90
xor edx, edx
mov al, byte [edx + 0x1004aee4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x1c], al
and ecx, 0x800000ff
jns 0x1000941d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x10009400
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xf
call fcn.10008f00
mov ecx, 0x34
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004aef4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x1c], al
and ecx, 0x800000ff
jns 0x1000945d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x10009440
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0x10
call fcn.10008f00
mov ecx, 0xa2
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004af04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1000949d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10009480
mov byte [ebp - 0x10], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x11
call fcn.10008f00
mov ecx, 0xb6
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1004af18]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100094dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x100094c0
mov byte [ebp - 0x13], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x12
call fcn.10008f00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret