Function at 0x1015a210
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
push ebx
push ebp
mov bl, 0x35
push esi
mov esi, dword [esp + 0x84]
mov byte [esp + 0x45], bl
mov byte [esp + 0x51], bl
mov al, 0x30
mov cl, 0x36
mov dl, 0x45
mov bl, 0x33
push edi
test esi, esi
mov byte [esp + 0x38], cl
mov byte [esp + 0x39], al
mov byte [esp + 0x3a], dl
mov byte [esp + 0x3b], 0x38
mov byte [esp + 0x3c], 0x34
mov byte [esp + 0x3d], dl
mov byte [esp + 0x3e], al
mov byte [esp + 0x3f], al
mov byte [esp + 0x40], al
mov byte [esp + 0x41], al
mov byte [esp + 0x42], al
mov byte [esp + 0x43], al
mov byte [esp + 0x44], cl
mov byte [esp + 0x45], 0x42
mov byte [esp + 0x46], al
mov byte [esp + 0x47], al
mov byte [esp + 0x48], cl
mov byte [esp + 0x4a], al
mov byte [esp + 0x4b], al
mov byte [esp + 0x4c], 0x37
mov byte [esp + 0x4d], 0x32
mov byte [esp + 0x4e], al
mov byte [esp + 0x4f], al
mov byte [esp + 0x50], cl
mov byte [esp + 0x51], dl
mov byte [esp + 0x52], al
mov byte [esp + 0x53], al
mov byte [esp + 0x54], cl
mov byte [esp + 0x56], al
mov byte [esp + 0x57], al
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], 0x43
mov byte [esp + 0x5a], al
mov byte [esp + 0x5b], al
mov byte [esp + 0x5c], bl
mov byte [esp + 0x5d], bl
mov byte [esp + 0x5e], al
mov byte [esp + 0x5f], al
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], 0x32
mov byte [esp + 0x62], al
mov byte [esp + 0x63], al
mov byte [esp + 0x64], al
mov byte [esp + 0x65], al
mov byte [esp + 0x66], al
mov byte [esp + 0x67], al
mov byte [esp + 0x68], cl
mov byte [esp + 0x69], dl
mov byte [esp + 0x6a], al
mov byte [esp + 0x6b], al
mov byte [esp + 0x6c], 0x37
mov byte [esp + 0x6d], 0x34
mov byte [esp + 0x6e], al
mov byte [esp + 0x6f], al
mov byte [esp + 0x70], cl
mov byte [esp + 0x71], 0x34
mov byte [esp + 0x72], al
mov byte [esp + 0x73], al
mov byte [esp + 0x74], cl
mov byte [esp + 0x75], 0x43
mov byte [esp + 0x76], al
mov byte [esp + 0x77], al
mov byte [esp + 0x78], cl
mov byte [esp + 0x79], 0x43
jbe 0x1015a535
mov ebp, dword [esp + 0x80]
test ebp, ebp
jl 0x1015a535
mov ebx, dword [esp + 0x84]
test ebx, ebx
jle 0x1015a535
push 0x1000
call dword [sym.imp.MSVCRT.dll_malloc]
mov edi, eax
add esp, 4
test edi, edi
mov dword [esp + 0x84], edi
je 0x1015a535
mov ecx, dword [0x107ab964]
lea eax, [esp + 0x80]
push 1
push eax
push edi
push 0x1000
push 0x1000
push esi
push ebx
push ebp
push ecx
call fcn.100253e0
add esp, 0x24
test eax, eax
je 0x1015a52b
cmp dword [esp + 0x80], 0x1000
jne 0x1015a52b
lea edx, [esp + 0x88]
lea eax, [esp + 0x18]
push edx
push 0x20
push eax
xor esi, esi
push 0x1000
push edi
mov dword [esp + 0x9c], esi
call fcn.1014a500
add esp, 0x14
test eax, eax
je 0x1015a52b
mov ecx, dword [esp + 0x88]
cmp ecx, esi
je 0x1015a52b
mov dword [esp + 0x14], esi
jmp 0x1015a406
xor esi, esi
xor eax, eax
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x10], esi
xor ebp, ebp
mov edx, dword [esp + 0x80]
push 0
push ecx
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x90]
sub edx, eax
add eax, ecx
push edx
push eax
call fcn.10024240
mov ecx, dword [esp + 0x9c]
add esp, 0x14
cmp eax, 0xffffffff
je 0x1015a466
add esi, ecx
add eax, esi
cmp ebp, 2
mov esi, eax
jne 0x1015a451
mov ebx, esi
jmp 0x1015a460
cmp ebp, 3
jne 0x1015a460
mov edi, esi
mov dword [esp + 0x10], esi
sub edi, ecx
sub edi, ebx
inc ebp
cmp ebp, 5
jl 0x1015a412
cmp ebp, 5
je 0x1015a4ac
mov byte [esp + ecx + 0x17], 0
dec ecx
mov dword [esp + 0x88], ecx
je 0x1015a48c
mov eax, dword [esp + 0x14]
inc eax
cmp eax, 3
mov dword [esp + 0x14], eax
jl 0x1015a404
cmp ebp, 5
je 0x1015a4ac
mov edx, dword [esp + 0x84]
push edx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret
mov ebp, dword [esp + 0x84]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
push 1
push 1
push 1
lea ecx, [ebx + ebp]
push edi
sub edx, eax
lea esi, [eax + ebp]
push ecx
push edx
push esi
call fcn.10028d60
add esp, 0x1c
test eax, eax
jne 0x1015a4f0
push ebp
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret
mov ecx, dword [esp + 0x80]
push 0
lea eax, [esp + 0x3c]
push 0x42
push eax
mov eax, dword [esp + 0x1c]
sub ecx, eax
push ecx
push esi
call fcn.10024240
add esp, 0x14
test eax, eax
push ebp
jne 0x1015a52c
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret
push edi
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x6c
ret