Function at 0x10015161
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x10033d30
call fcn.10031d20
sub esp, 0x90
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push ebx
call fcn.10014e46
test al, al
je 0x1001550b
push 4
mov edi, 0x1003d8c4
pop ecx
mov esi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x1001544e
lea ecx, [ebp - 0x6c]
call fcn.10015147
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x6c], 0x78766964
call fcn.10015147
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x3c], 0x58564944
call fcn.10015147
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x8c], 0x44495658
call fcn.10015147
lea eax, [ebx + 0x10]
push 4
pop ecx
lea edi, [ebp - 0x6c]
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
mov dword [ebp - 0x4c], 0x30355844
je 0x1001542a
push 4
lea edi, [ebp - 0x8c]
pop ecx
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x1001542a
push 4
lea edi, [ebp - 0x3c]
pop ecx
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x1001542a
push 4
mov esi, eax
pop ecx
lea edi, [ebp - 0x4c]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x1001542a
lea ecx, [ebp - 0x5c]
call fcn.10015147
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x5c], 0x34363278
call fcn.10015147
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x7c], 0x34363248
call fcn.10015147
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x9c], 0x34363268
call fcn.10015147
push 4
lea eax, [ebx + 0x10]
pop ecx
lea edi, [ebp - 0x2c]
mov esi, eax
xor edx, edx
mov dword [ebp - 0x2c], 0x31435641
repe cmpsd dword [esi], dword es:[edi]
jne 0x100152c9
push 4
mov edi, 0x1003c634
pop ecx
lea esi, [ebx + 0x2c]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x100152c9
push 0x4c
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
pop ecx
mov dword [ebp + 8], esi
test esi, esi
mov dword [ebp - 4], 1
je 0x100154d0
mov dword [esi], 0x100397e8
push 0
push ebx
lea ecx, [esi + 4]
mov byte [ebp - 4], 2
call fcn.1002a8d0
mov dword [esi], 0x100397b0
jmp 0x100154d2
push 4
lea edi, [ebp - 0x5c]
pop ecx
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x10015304
push 4
lea edi, [ebp - 0x7c]
pop ecx
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x10015304
push 4
lea edi, [ebp - 0x9c]
pop ecx
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x10015304
push 4
lea edi, [ebp - 0x2c]
pop ecx
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x1001532e
push 4
lea esi, [ebx + 0x2c]
pop ecx
mov edi, 0x1003cbf4
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x10015403
push 4
mov edi, 0x1003cbe4
pop ecx
lea esi, [ebx + 0x2c]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x10015403
mov ecx, dword [eax]
and word [ebp - 0x18], 0
push 4
mov dword [ebp - 0x1c], ecx
mov edi, eax
pop ecx
lea esi, [ebp - 0x1c]
xor eax, eax
mov word [ebp - 0x16], 0x10
mov dword [ebp - 0x14], 0xaa000080
mov dword [ebp - 0x10], 0x719b3800
repe cmpsd dword [esi], dword es:[edi]
jne 0x1001550b
push 4
mov edi, 0x1003cbf4
pop ecx
lea esi, [ebx + 0x2c]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x1001550b
mov eax, dword [ebx + 0x44]
mov cx, word [eax + 0x3e]
test cx, cx
jbe 0x1001550b
mov edx, dword [eax + 0x38]
mov esi, dword [eax + 0x34]
test edx, edx
movzx ecx, cx
jge 0x100153a6
imul esi, ecx
add esi, 0x1f
shr esi, 3
and esi, 0x1ffffffc
imul esi, edx
neg esi
jmp 0x100153b8
imul esi, ecx
add esi, 0x1f
shr esi, 3
and esi, 0x1ffffffc
imul esi, edx
mov ecx, ebx
call fcn.1002aa70
cmp esi, eax
jne 0x1001550b
push 0x4c
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
pop ecx
mov dword [ebp + 8], esi
test esi, esi
mov dword [ebp - 4], 4
je 0x100154d0
mov dword [esi], 0x100397e8
push 0
push ebx
lea ecx, [esi + 4]
mov byte [ebp - 4], 5
call fcn.1002a8d0
mov dword [esi], 0x10039778
jmp 0x100154d2
push 0x70
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 8], eax
test eax, eax
mov dword [ebp - 4], 3
je 0x1001550b
push ebx
mov ecx, eax
call fcn.1001659c
jmp 0x1001550d
push 0x58
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 8], eax
and dword [ebp - 4], 0
test eax, eax
je 0x1001550b
push ebx
mov ecx, eax
call fcn.100156c1
jmp 0x1001550d
push 4
mov edi, 0x1003d8b4
pop ecx
mov esi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x1001550b
push 4
mov edi, 0x1003cbd4
pop ecx
lea esi, [ebx + 0x2c]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x1001550b
mov eax, dword [ebx + 0x44]
mov ax, word [eax]
cmp ax, 0xff
je 0x100154d6
cmp ax, 0x1234
je 0x100154d6
cmp ax, 1
je 0x1001549b
cmp ax, 6
je 0x1001549b
cmp ax, 7
jne 0x1001550b
push 0x4c
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
pop ecx
mov dword [ebp + 8], esi
test esi, esi
mov dword [ebp - 4], 8
je 0x100154d0
mov dword [esi], 0x100397e8
push 0
push ebx
lea ecx, [esi + 4]
mov byte [ebp - 4], 9
call fcn.1002a8d0
mov dword [esi], 0x10039740
jmp 0x100154d2
xor esi, esi
mov eax, esi
jmp 0x1001550d
push 0x4c
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
pop ecx
mov dword [ebp + 8], esi
test esi, esi
mov dword [ebp - 4], 6
je 0x100154d0
mov dword [esi], 0x100397e8
push 0
push ebx
lea ecx, [esi + 4]
mov byte [ebp - 4], 7
call fcn.1002a8d0
mov dword [esi], 0x10039708
jmp 0x100154d2
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4