Function at 0x10015f6e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x30
lea ecx, [esp + 0x10]
lea eax, [esp + 0xf]
mov edx, 0x2f4a0eb0
mov dword [esp], ecx
mov ecx, 0x28d653e8
mov dword [eax - 0xb], 0x6c6b7d43
mov dword [eax - 7], 0x604c6e78
mov word [eax - 3], 0x7264
mov byte [eax - 1], 0x41
cmp edx, 0x28d653e8
je 0x10015fc3
cmp edx, 0x2f4a0eb0
jne 0x10015fa2
mov byte [eax], 0
inc eax
mov edx, 0x2f4a0eb0
cmp eax, dword [esp]
cmove edx, ecx
jmp 0x10015fa2
xor ecx, ecx
mov eax, 0xd9685fd8
mov edx, 0xf7ba797a
cmp edx, 0xd9685fd8
je 0x10015ffa
cmp edx, 0x483da674
je 0x1001603b
cmp edx, 0xf7ba797a
jne 0x10015fcf
mov dword [esp], ecx
mov edx, dword [esp]
cmp edx, 0xb
mov edx, 0x483da674
cmovb edx, eax
jmp 0x10015fcf
mov ecx, dword [esp]
mov bl, byte [esp + ecx + 4]
mov edx, ebx
and bl, 0xbd
not dl
and dl, 0x42
or bl, dl
mov edx, dword [esp]
mov bh, bl
xor bl, 0xc8
xor bh, 4
and bl, 0xc9
and bh, 0x36
add dl, 0x47
or bh, bl
mov bl, dl
and dl, 0x36
not bl
and bl, 0xc9
or dl, bl
xor dl, bh
mov byte [esp + ecx + 4], dl
mov ecx, dword [esp]
inc ecx
jmp 0x10015fca
lea esi, [esp + 4]
mov ecx, esi
mov byte [esi + 0xb], 0
call fcn.10015dcf
xor ecx, ecx
push ecx
push ecx
push 2
push ecx
push 3
push 0xc0000000
push dword [esp + 0x5c]
call eax
cmp dword [esp + 0x4c], 0
mov dword [esp + 0x1c], eax
mov eax, 0x4dfa743d
mov ecx, 0xf8e3ec1a
cmove ecx, eax
mov eax, 0xf7aa23b3
mov dword [esp + 0x24], ecx
cmp eax, 0x15afec75
jle 0x100160ba
cmp eax, 0x4ad4724a
jle 0x10016134
cmp eax, 0x5c93c63b
jg 0x10016217
cmp eax, 0x4ad4724b
je 0x10016232
cmp eax, 0x4dfa743d
jne 0x1001607d
xor edi, edi
mov eax, 0x5c93c63c
inc edi
mov dword [esp + 0x14], edi
jmp 0x1001607d
cmp eax, 0xf7aa23b2
jg 0x100161a7
cmp eax, 0x86a585b3
je 0x1001628c
cmp eax, 0xa1208bb6
je 0x10016296
cmp eax, 0xc28194d1
jne 0x1001607d
lea eax, [esp + 0x11]
mov ecx, 0xfe9c334
mov dword [esp + 4], 0x417a6a47
mov dword [esp + 8], 0x4c7e786d
mov dword [esp + 0xc], 0x6779657a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x27c1e5d3
je 0x100162a4
cmp ecx, 0xfe9c334
jne 0x1001610a
mov byte [eax], 0
inc eax
mov ecx, 0xfe9c334
mov edx, 0x27c1e5d3
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1001610a
cmp eax, 0x15afec76
je 0x10016312
cmp eax, 0x277d93a7
je 0x10016368
cmp eax, 0x3cf9562a
jne 0x1001607d
lea eax, [esp + 0x11]
mov ecx, 0xfe9c334
mov dword [esp + 4], 0x417a6a47
mov dword [esp + 8], 0x4c7e786d
mov dword [esp + 0xc], 0x6779657a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x27c1e5d3
je 0x100163ba
cmp ecx, 0xfe9c334
jne 0x1001617d
mov byte [eax], 0
inc eax
mov ecx, 0xfe9c334
mov edx, 0x27c1e5d3
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1001617d
cmp eax, 0xf7aa23b3
je 0x10016436
cmp eax, 0xf8e3ec1a
je 0x1001644f
cmp eax, 0x4cf9dce
jne 0x1001607d
lea eax, [esp + 0xe]
mov ecx, 0x9e9fdd4d
mov dword [esp + 4], 0x79677d57
mov dword [esp + 8], 0x65634d69
mov byte [esp + 0xc], 0x6d
mov dword [esp], eax
lea eax, [esp + 0xd]
cmp ecx, 0x79d02a88
je 0x100164a5
cmp ecx, 0x9e9fdd4d
jne 0x100161ed
mov byte [eax], 0
inc eax
mov ecx, 0x9e9fdd4d
mov edx, 0x79d02a88
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x100161ed
cmp eax, 0x65d7e9cc
je 0x10016505
cmp eax, 0x5c93c63c
jne 0x1001607d
jmp 0x100167f6
lea eax, [esp + 0x10]
mov ecx, 0x2f4a0eb0
mov dword [esp + 4], 0x7e616343
mov dword [esp + 8], 0x676b4369
mov word [esp + 0xc], 0x7b6c
mov dword [esp + 0x2c], ebp
mov byte [esp + 0xe], 0x73
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x28d653e8
je 0x10016517
cmp ecx, 0x2f4a0eb0
jne 0x10016262
mov byte [eax], 0
inc eax
mov ecx, 0x2f4a0eb0
mov edx, 0x28d653e8
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10016262
mov eax, 0xa1208bb6
jmp 0x1001607d
mov ebx, dword [esp + 0x2c]
mov eax, 0x65d7e9cc
jmp 0x1001607d
xor eax, eax
mov ecx, 0xab8bb57f
cmp ecx, 0x64e5c8bc
je 0x1001657f
cmp ecx, 0x582fd786
je 0x100162df
cmp ecx, 0xab8bb57f
jne 0x100162ab
mov dword [esp], eax
mov edx, 0x582fd786
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0x64e5c8bc
cmovb ecx, edx
jmp 0x100162ab
mov ecx, dword [esp]
mov bl, 0xb8
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x17
not al
and al, 0xe8
or dl, al
mov eax, dword [esp]
mov dh, dl
xor dl, 0x50
xor dh, 0xaf
sub bl, al
add al, 0x47
and dl, al
and bl, dh
or bl, dl
mov byte [esp + ecx + 4], bl
mov eax, dword [esp]
inc eax
jmp 0x100162a6
lea eax, [esp + 0x10]
mov ecx, 0x2f4a0eb0
mov dword [esp + 4], 0x7e616343
mov dword [esp + 8], 0x676b4369
mov word [esp + 0xc], 0x7b6c
mov byte [esp + 0xe], 0x73
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x28d653e8
je 0x10016599
cmp ecx, 0x2f4a0eb0
jne 0x1001633e
mov byte [eax], 0
inc eax
mov ecx, 0x2f4a0eb0
mov edx, 0x28d653e8
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1001633e
lea eax, [esp + 0x11]
mov ecx, 0xfe9c334
mov dword [esp + 4], 0x417a6a47
mov dword [esp + 8], 0x4c7e786d
mov dword [esp + 0xc], 0x6779657a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0x27c1e5d3
je 0x10016611
cmp ecx, 0xfe9c334
jne 0x10016390
mov byte [eax], 0
inc eax
mov ecx, 0xfe9c334
mov edx, 0x27c1e5d3
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10016390
xor eax, eax
mov ecx, 0xab8bb57f
cmp ecx, 0x64e5c8bc
je 0x10016689
cmp ecx, 0x582fd786
je 0x100163f5
cmp ecx, 0xab8bb57f
jne 0x100163c1
mov dword [esp], eax
mov edx, 0x582fd786
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0x64e5c8bc
cmovb ecx, edx
jmp 0x100163c1
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0x6a
not cl
and cl, 0x95
or dl, cl
mov ecx, dword [esp]
mov dh, dl
xor dl, 0xc
xor dh, 0x40
and dl, 0x9e
and dh, 0x61
or dh, dl
mov dl, 0xb8
sub dl, cl
add cl, 0x47
and dl, 0x9e
and cl, 0x61
or cl, dl
xor cl, dh
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x100163bc
mov eax, dword [esp + 0x1c]
mov ecx, 0x3cf9562a
cmp eax, 0xffffffff
mov eax, 0x15afec76
cmove eax, ecx
jmp 0x1001607d
lea eax, [esp + 0x10]
mov ecx, 0x2f4a0eb0
mov dword [esp + 4], 0x6c6b7d43
mov dword [esp + 8], 0x604c6e78
mov word [esp + 0xc], 0x7264
mov byte [esp + 0xe], 0x41
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x28d653e8
je 0x100166a5
cmp ecx, 0x2f4a0eb0
jne 0x1001647b
mov byte [eax], 0
inc eax
mov ecx, 0x2f4a0eb0
mov edx, 0x28d653e8
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1001647b
xor eax, eax
mov ecx, 0x6d82f995
cmp ecx, 0xcae17231
je 0x1001671b
cmp ecx, 0x6241db66
je 0x100164e0
cmp ecx, 0x6d82f995
jne 0x100164ac
mov dword [esp], eax
mov edx, 0x6241db66
mov ecx, dword [esp]
cmp ecx, 9
mov ecx, 0xcae17231
cmovb ecx, edx
jmp 0x100164ac
mov eax, dword [esp]
mov cl, byte [esp + eax + 4]
mov edx, ecx
and cl, 0xb8
not dl
and dl, 0x47
or cl, dl
mov edx, dword [esp]
add dl, 0x47
xor dl, cl
mov byte [esp + eax + 4], dl
mov eax, dword [esp]
inc eax
jmp 0x100164a7
mov eax, dword [esp + 0x20]
mov eax, 0x5c93c63c
mov dword [esp + 0x14], ebx
jmp 0x1001607d
xor eax, eax
mov ecx, 0xf7ba797a
cmp ecx, 0xd9685fd8
je 0x10016552
cmp ecx, 0x483da674
je 0x10016752
cmp ecx, 0xf7ba797a
jne 0x1001651e
mov dword [esp], eax
mov edx, 0xd9685fd8
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x483da674
cmovb ecx, edx
jmp 0x1001651e
mov ecx, dword [esp]
mov dh, 0xb8
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0xb8
not al
and al, 0x47
or dl, al
mov eax, dword [esp]
sub dh, al
add al, 0x47
and dh, dl
not dl
and dl, al
or dh, dl
mov byte [esp + ecx + 4], dh
mov eax, dword [esp]
inc eax
jmp 0x10016519
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015dcf
call eax
mov ebx, eax
mov eax, 0x65d7e9cc
jmp 0x1001607d
xor eax, eax
mov ecx, 0xf7ba797a
cmp ecx, 0xd9685fd8
je 0x100165d4
cmp ecx, 0x483da674
je 0x10016778
cmp ecx, 0xf7ba797a
jne 0x100165a0
mov dword [esp], eax
mov edx, 0xd9685fd8
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x483da674
cmovb ecx, edx
jmp 0x100165a0
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0xb8
not cl
and cl, 0x47
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 0x75
not dh
and dh, 0x8a
or dl, dh
mov dh, 0xb8
sub dh, cl
add cl, 0x47
and dh, 0x8a
and cl, 0x75
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x1001659b
xor eax, eax
mov ecx, 0xab8bb57f
cmp ecx, 0x64e5c8bc
je 0x10016793
cmp ecx, 0x582fd786
je 0x1001664c
cmp ecx, 0xab8bb57f
jne 0x10016618
mov dword [esp], eax
mov edx, 0x582fd786
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0x64e5c8bc
cmovb ecx, edx
jmp 0x10016618
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0xb8
not cl
and cl, 0x47
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 0x95
not dh
and dh, 0x6a
add cl, 0x47
or dl, dh
mov dh, cl
and cl, 0x95
not dh
and dh, 0x6a
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x10016613
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015dcf
call eax
mov dword [esp + 0x14], eax
mov eax, 0x5c93c63c
jmp 0x1001607d
xor eax, eax
mov ecx, 0xf7ba797a
cmp ecx, 0xd9685fd8
je 0x100166e0
cmp ecx, 0x483da674
je 0x100167ad
cmp ecx, 0xf7ba797a
jne 0x100166ac
mov dword [esp], eax
mov edx, 0xd9685fd8
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x483da674
cmovb ecx, edx
jmp 0x100166ac
mov ecx, dword [esp]
mov edi, esi
mov esi, ebx
mov bl, 0xb8
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x83
not al
and al, 0x7c
or dl, al
mov eax, dword [esp]
mov dh, dl
xor dl, 0xc4
xor dh, 0x3b
sub bl, al
add al, 0x47
and dl, al
and bl, dh
or bl, dl
mov byte [esp + ecx + 4], bl
mov ebx, esi
mov esi, edi
mov eax, dword [esp]
inc eax
jmp 0x100166a7
mov ecx, esi
mov byte [esp + 0xd], 0
call fcn.10015dcf
push 0
lea ecx, [esp + 0x2c]
push ecx
push dword [esp + 0x54]
push dword [esp + 0x54]
push dword [esp + 0x28]
call eax
test eax, eax
mov eax, 0x4ad4724b
mov ecx, 0x277d93a7
cmove eax, ecx
xor ebp, ebp
jmp 0x1001607d
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015dcf
push dword [esp + 0x18]
call eax
test eax, eax
mov eax, 0xa1208bb6
mov ecx, 0x86a585b3
cmove eax, ecx
jmp 0x1001607d
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015dcf
push dword [esp + 0x1c]
call eax
mov eax, dword [esp + 0x24]
jmp 0x1001607d
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015dcf
call eax
mov ebp, eax
mov eax, 0x4ad4724b
jmp 0x1001607d
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015dcf
xor ecx, ecx
push ecx
push ecx
push 2
push ecx
push 3
push 0xc0000000
push dword [esp + 0x5c]
call eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x28]
mov ecx, 0xc28194d1
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
mov eax, 0x4cf9dce
cmove eax, ecx
jmp 0x1001607d
mov eax, dword [esp + 0x14]
add esp, 0x30
pop esi
pop edi
pop ebx
pop ebp
ret