Function at 0x9b0220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.009af150
add esp, 0xc
je 0x9b023b
jnp 0x9b025d
pushf
js 0x9b0241
xor ecx, 0x3864
xor ecx, 0x3864
je 0x9b024f
xor esp, 0
popf
jo 0x9b0256
jmp 0x9b0258
xchg esi, esi
jp 0x9b025d
sub eax, 0x45c666b0
call 0xede08ab6
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
shl esi, 0
jle 0x9b02aa
lea ecx, [ecx]
js 0x9b0299
lea eax, [eax + 0x28b7]
lea eax, [eax - 0x28b7]
jl 0x9b02a7
jg 0x9b02aa
add eax, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x14]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
xor esp, 0
jne 0x9b0320
pushf
xchg esp, esp
jmp 0x9b0315
popf
nop
lea esp, [esp]
jno 0x9b031d
je 0x9b0320
jmp 0xb3bf0c
call 0x9b1be0
test eax, eax
mov dword [ebp - 4], eax
jne 0x9b0335
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esp, 0x4fd6
add esi, 0
jae 0x9b0340
rol ecx, 0xd
rol ecx, 0x13
jne 0x9b0352
mov ebx, ebx
xchg esi, esi
jo 0x9b034e
je 0x9b0352
mov edx, 0xe84d8d7f
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00993910
push 0xd
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.009af150
add esp, 0xc
test esi, esi
jne 0x9b0380
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test esp, 0x161b
jp 0x9b0388
je 0x9b038f
jbe 0x9b038c
jne 0x9b038f
mov eax, 0x3abe856
invalid
push esi
call fcn.009a0740
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.009af150
add esp, 0x10
clc
jnp 0x9b03a8
jo 0x9b03b4
lea ebx, [ebx]
jne 0x9b03ae
jo 0x9b03b0
jno 0x9b03b4
ljmp 0xe845:0xc666b03b
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
or edx, 0
jge 0x9b03ec
jle 0x9b0405
pushf
test eax, 0x699b
rol ebx, 0
xchg ebx, ebx
jbe 0x9b03fc
popf
jbe 0x9b0400
jg 0x9b0402
jg 0x9b0405
mov edx, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 0x17]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x12]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0xd]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x11]
dec dl
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
not eax
not eax
dec edi
inc edi
rol edi, 5
ror edi, 5
jp 0x9b0482
pushf
jg 0x9b0477
popf
lea ebx, [ebx]
xchg edi, ebx
xchg edi, ebx
jnp 0x9b0482
mov edx, 0xe4879191
xchg ecx, eax
xchg ecx, eax
xchg esp, esp
jp 0x9b048d
xchg esp, esp
jnp 0x9b048d
or dword [ebx + 0x4d8dfc55], 0xe85251e8
jbe 0x9b04cc
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00993910
mov edi, eax
mov dword [ebp - 4], edi
xor edx, dword [esp + 8]
xor edx, dword [esp + 8]
add esp, 0
add esp, 0
xchg ebx, ebx
jne 0x9b04ca
invalid
js 0x9b04b3
xchg ebx, esi
xchg ebx, esi
lea ebx, [ebx + 0x6534]
lea ebx, [ebx - 0x6534]
lea esp, [esp]
je 0x9b04ca
invalid
call 0x8da86fa3
inc ebp
call 0xe8eb053d
jns 0x9b04c1
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.009af150
add esp, 0xc
and esp, 0xffffffff
jbe 0x9b04f3
invalid
pushf
jb 0x9b04e3
nop
neg esi
neg esi
popf
mov eax, eax
je 0x9b04ee
jne 0x9b04f0
ja 0x9b04f3
call 0x3b10047c
test edi, edi
je 0x9b0531
jge 0x9b04f9
xchg edi, eax
xchg edi, eax
jl 0x9b0525
pushf
call 0x9b0504
add esp, 4
test dword [esp], ebx
jo 0x9b050c
ja 0x9b050e
popf
lea ecx, [ecx + 0x60af]
lea ecx, [ecx - 0x60af]
xchg esi, edx
xchg esi, edx
jbe 0x9b0522
jge 0x9b0525
mov eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.009a0740
add esp, 4
sub ecx, 0
or eax, eax
jns 0x9b0549
lea ecx, [ecx + 0x3125]
lea ecx, [ecx - 0x3125]
js 0x9b0549
or ebx, 0x10558b27
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xlatb
jl 0xb3bf3b
inc dword [eax + ebx*8 - 0x259ec4ec]
inc ecx
mov dh, 0x11
and eax, esi
fisttp qword [ecx]
scasd eax, dword es:[edi]
cmp al, 0x1a
retf 0xe3b4
sub edi, dword [ecx]
in eax, 0xd0
xor ebx, esp
mov ebp, 0xa9ab9409
inc esi
add esi, edi
jmp dword [eax - 0xaee2058]