Function at 0x100151f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005fbad
mov eax, dword fs:[0]
push eax
sub esp, 0x18
mov eax, dword [0x1006d040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0xf
xor edx, edx
nop
mov al, byte [edx + str.Aui4Vvuj]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1001523d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10015220
mov byte [ebp - 0x15], 0
mov edx, 0x10127ad9
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.10048510
mov dword [ebp - 0x1c], 0x46206f4e
mov dword [ebp - 0x18], 0x6873616c
mov byte [ebp - 0x14], 0
mov edx, 0x10127ad4
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.10048510
mov dword [ebp - 0x1c], 0x46206f4e
mov word [ebp - 0x18], 0x676f
mov byte [ebp - 0x16], 0
mov edx, 0x10127ad5
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.10048510
mov ecx, 0xb5
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10061dcc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100152cd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x100152b0
mov byte [ebp - 0x14], 0
mov edx, 0x10127ad2
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.10048510
mov dword [ebp - 0x1c], 0x53206f4e
mov dword [ebp - 0x18], 0x656b6f6d
mov byte [ebp - 0x14], 0
mov edx, 0x10127ac7
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x1c]
call fcn.10048510
mov ecx, 0xb0
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x10061ddc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1001533d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10015320
mov byte [ebp - 0x15], 0
mov edx, 0x10127ad0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x20]
call fcn.10048510
mov ecx, 0x96
xor edx, edx
mov al, byte [edx + 0x10061de8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1001537f
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x10015362
mov byte [ebp - 0x16], 0
mov edx, 0x10127ada
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x24]
call fcn.10048510
mov ecx, 0x5b
xor edx, edx
mov al, byte [edx + 0x10061df8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100153c1
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100153a4
mov byte [ebp - 0x15], 0
mov edx, 0x10127ad3
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x20]
call fcn.10048510
mov dword [ebp - 0x1c], 0x776f6853
mov dword [ebp - 0x18], 0x53504620
mov byte [ebp - 0x14], 0
mov edx, 0x10127ad8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x1c]
call fcn.10048510
mov dword [ebp - 0x1c], 0x776f6853
mov dword [ebp - 0x18], 0x445548
mov edx, 0x10127acf
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x1c]
call fcn.10048510
mov dword [ebp - 0x1c], 0x63617274
mov dword [ebp - 0x18], 0x737265
mov edx, 0x10127ad7
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x1c]
call fcn.10048510
mov ecx, 0xa
xor edx, edx
mov al, byte [edx + str.NymzY_bvGfps]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x1001546d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x10015450
mov byte [ebp - 0x17], 0
mov edx, 0x10127adb
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x24]
call fcn.10048510
mov ecx, 0x24
xor edx, edx
mov al, byte [edx + str._WGPzLDOI_lC_RY_]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x100154af
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10015492
mov byte [ebp - 0x14], 0
mov edx, 0x10127ad6
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x24]
call fcn.10048510
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005d7a4
mov esp, ebp
pop ebp
ret