Function at 0x10015c66
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x2c
lea ecx, [esp + 0x10]
lea eax, [esp + 0xf]
mov edx, 0xc064e803
mov dword [esp], ecx
mov ecx, 0x7dc2ff55
mov dword [eax - 0xb], 0x64677143
mov dword [eax - 7], 0x70406270
mov word [eax - 3], 0x7e74
mov byte [eax - 1], 0x4d
cmp edx, 0x7dc2ff55
je 0x10015cbb
cmp edx, 0xc064e803
jne 0x10015c9a
mov byte [eax], 0
inc eax
mov edx, 0xc064e803
cmp eax, dword [esp]
cmove edx, ecx
jmp 0x10015c9a
xor ecx, ecx
mov eax, 0xfe43dcde
mov edx, 0x88893efc
cmp edx, 0xfe43dcde
je 0x10015cf2
cmp edx, 0xd85c465d
je 0x10015d2f
cmp edx, 0x88893efc
jne 0x10015cc7
mov dword [esp], ecx
mov edx, dword [esp]
cmp edx, 0xb
mov edx, 0xd85c465d
cmovb edx, eax
jmp 0x10015cc7
mov ecx, dword [esp]
mov bl, byte [esp + ecx + 4]
mov edx, ebx
and bl, 0x76
not dl
and dl, 0x89
or bl, dl
mov edx, dword [esp]
mov bh, bl
and bl, 0x65
not bh
and bh, 0x9a
add dl, 0x89
or bl, bh
mov bh, dl
and dl, 0x65
not bh
and bh, 0x9a
or dl, bh
xor dl, bl
mov byte [esp + ecx + 4], dl
mov ecx, dword [esp]
inc ecx
jmp 0x10015cc2
lea esi, [esp + 4]
mov ecx, esi
mov byte [esi + 0xb], 0
call fcn.10015ac4
xor ecx, ecx
push ecx
push ecx
push 2
push ecx
push 3
push 0xc0000000
push dword [esp + 0x58]
call eax
cmp dword [esp + 0x48], 0
mov dword [esp + 0x18], eax
mov eax, 0x39227575
mov ecx, 0x6e637072
cmove ecx, eax
mov eax, 0x9c5dfc37
mov dword [esp + 0x20], ecx
cmp eax, 0xdfa47e0
jle 0x10015df2
cmp eax, 0x39227574
jg 0x10015e37
cmp eax, 0x2a409f31
jg 0x10015f1e
cmp eax, 0xdfa47e1
je 0x10015f39
cmp eax, 0x23571607
jne 0x10015d71
lea eax, [esp + 0x11]
mov ecx, 0xd18c1ab2
mov dword [esp + 4], 0x49766647
mov dword [esp + 8], 0x5c727465
mov dword [esp + 0xc], 0x6f75696a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0xd5a58613
je 0x10015f93
cmp ecx, 0xd18c1ab2
jne 0x10015dc8
mov byte [eax], 0
inc eax
mov ecx, 0xd18c1ab2
mov edx, 0xd5a58613
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10015dc8
cmp eax, 0xbab5148c
jg 0x10015eae
cmp eax, 0x84546a9d
je 0x10015fff
cmp eax, 0x88053d07
je 0x10016051
cmp eax, 0x9c5dfc37
jne 0x10015d71
mov eax, dword [esp + 0x18]
mov ecx, 0x88053d07
cmp eax, 0xffffffff
mov eax, 0xbab5148d
cmove eax, ecx
jmp 0x10015d71
cmp eax, 0x39227575
je 0x100160a3
cmp eax, 0x3e30a9d7
je 0x100160b0
cmp eax, 0x6e637072
jne 0x10015d71
lea eax, [esp + 0x10]
mov ecx, 0xc064e803
mov dword [esp + 4], 0x64677143
mov dword [esp + 8], 0x70406270
mov word [esp + 0xc], 0x7e74
mov byte [esp + 0xe], 0x4d
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x7dc2ff55
je 0x100160be
cmp ecx, 0xc064e803
jne 0x10015e84
mov byte [eax], 0
inc eax
mov ecx, 0xc064e803
mov edx, 0x7dc2ff55
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10015e84
cmp eax, 0xbab5148d
je 0x1001612e
cmp eax, 0xdcffae1d
je 0x10016184
cmp eax, 0xdd9ecfc8
jne 0x10015d71
lea eax, [esp + 0xe]
mov ecx, 0x52d1f67b
mov dword [esp + 4], 0x716b7157
mov dword [esp + 8], 0x756f4161
mov byte [esp + 0xc], 0x7d
mov dword [esp], eax
lea eax, [esp + 0xd]
cmp ecx, 0xe11730b2
je 0x1001618e
cmp ecx, 0x52d1f67b
jne 0x10015ef4
mov byte [eax], 0
inc eax
mov ecx, 0x52d1f67b
mov edx, 0xe11730b2
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10015ef4
cmp eax, 0x2c76e482
je 0x100161f6
cmp eax, 0x2a409f32
jne 0x10015d71
jmp 0x100164e5
lea eax, [esp + 0x10]
mov ecx, 0xc064e803
mov dword [esp + 4], 0x766d6f43
mov dword [esp + 8], 0x77674f61
mov word [esp + 0xc], 0x777c
mov dword [esp + 0x28], ebp
mov byte [esp + 0xe], 0x7f
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x7dc2ff55
je 0x10016206
cmp ecx, 0xc064e803
jne 0x10015f69
mov byte [eax], 0
inc eax
mov ecx, 0xc064e803
mov edx, 0x7dc2ff55
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10015f69
xor eax, eax
mov ecx, 0x8105d5fc
cmp ecx, 0xd66f2225
je 0x1001627e
cmp ecx, 0x9b5f4f67
je 0x10015fce
cmp ecx, 0x8105d5fc
jne 0x10015f9a
mov dword [esp], eax
mov edx, 0x9b5f4f67
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xd66f2225
cmovb ecx, edx
jmp 0x10015f9a
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x3c
not al
and al, 0xc3
or dl, al
mov eax, dword [esp]
mov dh, dl
xor dl, 0xb5
xor dh, 0x4a
add al, 0x89
and dl, al
not al
and al, dh
or al, dl
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10015f95
lea eax, [esp + 0x11]
mov ecx, 0xd18c1ab2
mov dword [esp + 4], 0x49766647
mov dword [esp + 8], 0x5c727465
mov dword [esp + 0xc], 0x6f75696a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0xd5a58613
je 0x10016298
cmp ecx, 0xd18c1ab2
jne 0x10016027
mov byte [eax], 0
inc eax
mov ecx, 0xd18c1ab2
mov edx, 0xd5a58613
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10016027
lea eax, [esp + 0x11]
mov ecx, 0xd18c1ab2
mov dword [esp + 4], 0x49766647
mov dword [esp + 8], 0x5c727465
mov dword [esp + 0xc], 0x6f75696a
mov dword [esp], eax
lea eax, [esp + 0x10]
cmp ecx, 0xd5a58613
je 0x10016310
cmp ecx, 0xd18c1ab2
jne 0x10016079
mov byte [eax], 0
inc eax
mov ecx, 0xd18c1ab2
mov edx, 0xd5a58613
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10016079
xor edi, edi
mov eax, 0x2a409f32
inc edi
jmp 0x10015d71
mov ebx, dword [esp + 0x28]
mov eax, 0x2c76e482
jmp 0x10015d71
xor eax, eax
mov ecx, 0x88893efc
cmp ecx, 0xfe43dcde
je 0x100160f9
cmp ecx, 0xd85c465d
je 0x10016378
cmp ecx, 0x88893efc
jne 0x100160c5
mov dword [esp], eax
mov edx, 0xfe43dcde
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0xd85c465d
cmovb ecx, edx
jmp 0x100160c5
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov dh, dl
and dl, 0x64
not dh
mov al, dh
and dh, 0x12
and al, 0x89
or dl, al
mov eax, dword [esp]
or dh, dl
mov dl, 0x76
sub dl, al
add al, 0x89
and dl, 0x12
and al, 0xed
or al, dl
xor al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x100160c0
lea eax, [esp + 0x10]
mov ecx, 0xc064e803
mov dword [esp + 4], 0x766d6f43
mov dword [esp + 8], 0x77674f61
mov word [esp + 0xc], 0x777c
mov byte [esp + 0xe], 0x7f
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x7dc2ff55
je 0x100163c1
cmp ecx, 0xc064e803
jne 0x1001615a
mov byte [eax], 0
inc eax
mov ecx, 0xc064e803
mov edx, 0x7dc2ff55
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1001615a
mov eax, 0x3e30a9d7
jmp 0x10015d71
xor eax, eax
mov ecx, 0x799871b5
cmp ecx, 0x199e88f6
je 0x100161c9
cmp ecx, 0x6862bd81
je 0x10016439
cmp ecx, 0x799871b5
jne 0x10016195
mov dword [esp], eax
mov edx, 0x199e88f6
mov ecx, dword [esp]
cmp ecx, 9
mov ecx, 0x6862bd81
cmovb ecx, edx
jmp 0x10016195
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x76
not al
and al, 0x89
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x89
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10016190
mov eax, dword [esp + 0x1c]
mov eax, 0x2a409f32
mov edi, ebx
jmp 0x10015d71
xor eax, eax
mov ecx, 0x88893efc
cmp ecx, 0xfe43dcde
je 0x10016241
cmp ecx, 0xd85c465d
je 0x10016470
cmp ecx, 0x88893efc
jne 0x1001620d
mov dword [esp], eax
mov edx, 0xfe43dcde
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0xd85c465d
cmovb ecx, edx
jmp 0x1001620d
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0x76
not cl
and cl, 0x89
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 0x1e
not dh
and dh, 0xe1
or dl, dh
mov dh, 0x76
sub dh, cl
add cl, 0x89
and dh, 0xe1
and cl, 0x1e
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x10016208
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015ac4
call eax
mov ebp, eax
mov eax, 0xdfa47e1
jmp 0x10015d71
xor eax, eax
mov ecx, 0x8105d5fc
cmp ecx, 0xd66f2225
je 0x10016496
cmp ecx, 0x9b5f4f67
je 0x100162d3
cmp ecx, 0x8105d5fc
jne 0x1001629f
mov dword [esp], eax
mov edx, 0x9b5f4f67
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xd66f2225
cmovb ecx, edx
jmp 0x1001629f
mov eax, dword [esp]
mov bl, 0x76
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0x76
not cl
and cl, 0x89
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 0xd2
not dh
and dh, 0x2d
sub bl, cl
add cl, 0x89
or dl, dh
and bl, 0x2d
and cl, 0xd2
or cl, bl
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x1001629a
xor eax, eax
mov ecx, 0x8105d5fc
cmp ecx, 0xd66f2225
je 0x100164b0
cmp ecx, 0x9b5f4f67
je 0x1001634b
cmp ecx, 0x8105d5fc
jne 0x10016317
mov dword [esp], eax
mov edx, 0x9b5f4f67
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0xd66f2225
cmovb ecx, edx
jmp 0x10016317
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0x76
not al
and al, 0x89
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x89
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10016312
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015ac4
xor ecx, ecx
push ecx
push ecx
push 2
push ecx
push 3
push 0xc0000000
push dword [esp + 0x58]
call eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x24]
mov ecx, 0x84546a9d
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
mov eax, 0xdd9ecfc8
cmove eax, ecx
jmp 0x10015d71
xor eax, eax
mov ecx, 0x88893efc
cmp ecx, 0xfe43dcde
je 0x100163fc
cmp ecx, 0xd85c465d
je 0x100164ca
cmp ecx, 0x88893efc
jne 0x100163c8
mov dword [esp], eax
mov edx, 0xfe43dcde
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0xd85c465d
cmovb ecx, edx
jmp 0x100163c8
mov eax, dword [esp]
mov dl, byte [esp + eax + 4]
mov ecx, edx
and dl, 0x76
not cl
and cl, 0x89
or dl, cl
mov ecx, dword [esp]
mov dh, dl
and dl, 0xf4
not dh
and dh, 0xb
add cl, 0x89
or dl, dh
mov dh, cl
and cl, 0xf4
not dh
and dh, 0xb
or cl, dh
xor cl, dl
mov byte [esp + eax + 4], cl
mov eax, dword [esp]
inc eax
jmp 0x100163c3
mov ecx, esi
mov byte [esp + 0xd], 0
call fcn.10015ac4
push 0
lea ecx, [esp + 0x28]
push ecx
push dword [esp + 0x50]
push dword [esp + 0x50]
push dword [esp + 0x24]
call eax
test eax, eax
mov eax, 0xdfa47e1
mov ecx, 0x23571607
cmove eax, ecx
xor ebp, ebp
jmp 0x10015d71
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015ac4
push dword [esp + 0x14]
call eax
test eax, eax
mov eax, 0x3e30a9d7
mov ecx, 0xdcffae1d
cmove eax, ecx
jmp 0x10015d71
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015ac4
call eax
mov ebx, eax
mov eax, 0x2c76e482
jmp 0x10015d71
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015ac4
call eax
mov edi, eax
mov eax, 0x2a409f32
jmp 0x10015d71
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015ac4
push dword [esp + 0x18]
call eax
mov eax, dword [esp + 0x20]
jmp 0x10015d71
mov eax, edi
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret