Function at 0x100256e6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10066029
push eax
mov dword fs:[0], esp
sub esp, 0x188
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
je 0x10026014
mov esi, dword [ebp + 0x14]
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x10026009
lea eax, [esp + 0x80]
xor ebx, ebx
push eax
push 0x1000
lea ecx, [esp + 0x58]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
call fcn.1001f36c
mov dword [esp + 0x19c], ebx
mov eax, dword [esp + 0x54]
sub eax, dword [esp + 0x50]
push dword [esp + 0x50]
sar eax, 1
push eax
push 0x4764
push 0x50e8
call fcn.10042ba9
pop ecx
pop ecx
call eax
push dword [esp + 0x50]
lea ecx, [esp + 0x88]
call fcn.1000ca5c
inc ebx
mov byte [esp + 0x19c], bl
mov dword [esp + 0x10], 0x4cf3
cmp dword [esp + 0x10], 0x4d44
jle 0x1002581b
xor esi, esi
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x14], ecx
xor eax, eax
mov dword [esp + 0x18], eax
xor eax, ecx
lea ecx, [esp + 0x118]
xor eax, edi
xor eax, esi
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100257cf
mov eax, dword [eax]
push eax
call fcn.1004c2d0
pop ecx
push 0
push ebx
lea ecx, [esp + 0x120]
call fcn.1000168f
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
inc eax
mov dword [esp + 0x18], eax
cmp eax, 0x5f7a
jl 0x100257b0
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, 0x74eb
jl 0x100257aa
inc edi
cmp edi, 0x3118
jl 0x100257a4
inc esi
cmp esi, 0x1fa1
jl 0x100257a2
mov esi, dword [ebp + 0x14]
push 0x42a2
call fcn.1001ebc6
cmp dword [esp + 0x14], 0x4af2
movzx eax, ax
pop ecx
mov dword [esp + 0x5c], eax
jge 0x10025842
push str.spy_low_jveoix_hplkcfhdw
call fcn.1004c2d0
pop ecx
push 0x4a3d
lea eax, [esp + 0x88]
mov dword [esp + 0x1a0], ebx
push eax
push 0x164c
lea eax, [esp + 0x68]
mov edx, 0x7e65
push eax
push 0x2658
push ebx
push ebx
push 0x24d9
push 0x596c
mov cl, bl
call fcn.100248fc
add esp, 0x24
lea eax, [esp + 0x84]
push eax
call fcn.100249ab
cmp dword [esp + 0x9c], 8
lea eax, [esp + 0x88]
pop ecx
cmovae eax, dword [esp + 0x84]
push 0
push eax
push 0x4764
push 0x8a00
call fcn.10042ba9
pop ecx
pop ecx
call eax
push ebx
push 0x2f19
lea eax, [esp + 0x8c]
mov edx, 0x6f70
push eax
push 0x566c
push ebx
push 0x96d
push ebx
lea ecx, [esp + 0x78]
call fcn.10024a1d
add esp, 0x1c
and dword [esp + 0x60], 0
lea eax, [esp + 0x60]
mov dl, bl
mov ecx, 0x3168
push 0x5e9c
push 0x1460
push 0x2771
push 0x4da
push esi
push 0x3ee8
push eax
push 0x5ad
push 0x1430
push ebx
push ebx
push 0x2d53
push 0x6cbe
call fcn.100253d7
add esp, 0x34
mov byte [esp + 0x1f], 0
and dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x1865
cmp dword [esp + 0x10], 0x1b29
jle 0x10025994
xor esi, esi
xor edi, edi
mov eax, edi
lea ecx, [esp + 0x160]
or eax, esi
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002596c
mov eax, dword [eax]
push eax
call fcn.1004c2d0
pop ecx
push 0
push ebx
lea ecx, [esp + 0x168]
call fcn.1000168f
inc edi
cmp edi, 0x2726
jl 0x1002594f
inc esi
cmp esi, 0x1b78
jl 0x1002594d
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0xa0]
call fcn.10001dc3
cmp dword [esp + 0x10], 0x156c
jge 0x100259bd
push str.bkzqd_dkpw_fyl_ahc_jgkxw_tbgpcvfil_cfkkp_vgianph_onlxdhfu_bneyco_jqzkfp
call fcn.1004c2d0
pop ecx
push 0x10
pop edx
lea ecx, [esp + 0x100]
mov dword [esp + 0x19c], 4
call fcn.1002d48e
push 0x2ab5
push ebx
push 0xce7
lea eax, [esp + 0xa8]
mov byte [esp + 0x1a8], 7
push eax
lea eax, [esp + 0x110]
mov edx, 0x57c7
push 0
push eax
mov ecx, 0x5aee
call fcn.10025611
mov word [esp + 0x44], 0x3602
add esp, 0x18
mov byte [esp + 0x2e], bl
mov dword [esp + 0x2f], 0x24b001d
mov dword [esp + 0x33], 0x4b0306da
mov dword [esp + 0x10], 0x1cda
cmp dword [esp + 0x10], 0x2072
jle 0x10025a8c
xor esi, esi
xor edi, edi
mov eax, edi
lea ecx, [esp + 0x130]
or eax, esi
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025a5c
mov eax, dword [eax]
push eax
call fcn.1004c2d0
pop ecx
push 0
push ebx
lea ecx, [esp + 0x138]
call fcn.1000168f
inc edi
cmp edi, 0x5b38
jl 0x10025a3f
inc esi
cmp esi, 0x3605
jl 0x10025a3d
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
cmp dword [esp + 0x10], 0x196b
push 0x78
pop eax
mov word [esp + 0x74], ax
jge 0x10025aa9
push str.uhoefodc_ayn_fcpqx_zvhbzwh_nmn_lxynja_dusmbgzkb_arqwgdhi_liykeg_kacxs_sne
call fcn.1004c2d0
pop ecx
push 7
pop edx
push 2
mov dword [esp + 0x1a0], edx
xor ecx, ecx
pop esi
cmp esi, 6
jne 0x10025ac4
push 3
pop ecx
mov esi, edx
jmp 0x10025af0
movzx edx, byte [esp + esi + 0x2d]
mov eax, esi
sub eax, ecx
push 7
movzx eax, byte [esp + eax + 0x2e]
movzx ecx, word [esp + eax*2 + 0x74]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [esp + esi + 0x30]
add ecx, edx
pop edx
mov word [esp + eax*2 + 0x70], cx
xor ecx, ecx
add esi, 2
cmp esi, 0xb
jb 0x10025ab8
xor eax, eax
mov dword [esp + 0xe0], edx
and dword [esp + 0xdc], eax
lea ecx, [esp + 0xcc]
mov word [esp + 0x78], ax
mov word [esp + 0xcc], ax
lea eax, [esp + 0x70]
push eax
call fcn.1000ce6c
push ecx
push ecx
lea eax, [esp + 0xd4]
mov byte [esp + 0x1a4], 0xa
push eax
lea ecx, [esp + 0xa8]
call fcn.10026e42
push 0
push ebx
lea ecx, [esp + 0xd4]
mov byte [esp + 0x1a4], 7
call fcn.10001f60
xor eax, eax
lea edi, [esp + 0x70]
cmp dword [esp + 0xb0], 8
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x9c]
cmovae eax, dword [esp + 0x9c]
xor ecx, ecx
push ecx
push 0x80
push 2
pop edi
push edi
push ecx
push ecx
push 0x40000000
push eax
push 0x4764
push 0x807c
call fcn.10042ba9
pop ecx
pop ecx
call eax
mov esi, eax
cmp esi, 0xffffffff
je 0x10025bf1
push 0
lea eax, [esp + 0x100]
push eax
push dword [esp + 0x68]
mov eax, dword [ebp + 0x14]
push dword [eax]
push esi
push 0x4764
push 0x9384
call fcn.10042ba9
pop ecx
pop ecx
call eax
push esi
test eax, eax
push 0x4764
push 0x5a6c
setne bl
call fcn.10042ba9
pop ecx
pop ecx
call eax
test bl, bl
jne 0x10025c34
xor ebx, ebx
inc ebx
xor esi, esi
lea ecx, [esp + 0x100]
push esi
push ebx
call fcn.10001f60
push esi
push ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1a4], bl
call fcn.10001f60
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, 0x12c
jb 0x10025939
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
jmp 0x10025ff0
mov word [esp + 0x44], 0x6000
xor ebx, ebx
mov dword [esp + 0x18], 0x8d0
cmp dword [esp + 0x18], 0x945
jle 0x10025cca
xor ecx, ecx
inc ebx
mov dword [esp + 0x14], ecx
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [esp + 0x10], eax
and eax, esi
and eax, edi
xor eax, ecx
lea ecx, [esp + 0x148]
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025c7f
mov eax, dword [eax]
push eax
call fcn.1004c2d0
pop ecx
push 0
push ebx
lea ecx, [esp + 0x150]
call fcn.1000168f
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
inc eax
mov dword [esp + 0x10], eax
cmp eax, 0x39ee
jl 0x10025c60
inc esi
cmp esi, 0x6e6a
jl 0x10025c5a
inc edi
cmp edi, 0x4b5a
jl 0x10025c58
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, 0x6c7c
jl 0x10025c56
jmp 0x10025ccb
inc ebx
cmp dword [esp + 0x18], 0x684
push 0x22
pop eax
mov word [esp + 0x40], ax
jge 0x10025ce8
push str.siiw_zylqlyta_ymucymq_amt
call fcn.1004c2d0
pop ecx
push 7
pop ecx
mov dword [esp + 0x19c], ecx
xor eax, eax
and dword [esp + 0xc4], eax
mov word [esp + 0x42], ax
mov word [esp + 0xb4], ax
lea eax, [esp + 0x40]
mov dword [esp + 0xc8], ecx
lea ecx, [esp + 0xb4]
push eax
call fcn.1000ce6c
push ecx
push ecx
lea eax, [esp + 0xa4]
mov byte [esp + 0x1a4], 0xd
and dword [esp + 0x48], 0
lea ecx, [esp + 0xbc]
push eax
call fcn.10026e42
mov dword [esp + 0x10], 0x8c2
mov dword [esp + 0x18], 0x1f4c
cmp dword [esp + 0x18], 0xbc3
jge 0x10025e40
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x3c]
push eax
push str._llu_llu
call fcn.1004c442
add esp, 0xc
push dword [esp + 0x38]
call fcn.100269b5
xor esi, esi
cmp dword [esp + 0x3c], esi
jl 0x10025dbe
jg 0x10025d93
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x10025dc2
mov eax, dword [0x100832a8]
lea eax, [eax + esi*8]
push eax
push str._llu
call fcn.1004c442
inc esi
mov eax, esi
cdq
pop ecx
pop ecx
cmp edx, dword [esp + 0x3c]
jl 0x10025d93
jg 0x10025dbe
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jb 0x10025d93
jmp 0x10025dc2
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x3c], 0
mov esi, ebx
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
jl 0x10025e31
jg 0x10025dd9
cmp ecx, ebx
jbe 0x10025e31
mov ebx, eax
mov edx, dword [0x100832a8]
mov ecx, dword [0x100832a8]
mov eax, dword [edx + esi*8]
sub eax, dword [edx + esi*8 - 8]
mov edx, dword [edx + esi*8 + 4]
sbb edx, dword [ecx + esi*8 - 4]
mov ecx, dword [esp + 0x38]
cmp edx, dword [esp + 0x4c]
jg 0x10025e0e
jl 0x10025e08
cmp eax, dword [esp + 0x48]
ja 0x10025e0e
add edi, eax
adc ebx, edx
jmp 0x10025e16
add edi, dword [esp + 0x48]
adc ebx, dword [esp + 0x4c]
inc esi
mov eax, esi
cdq
cmp edx, dword [esp + 0x3c]
jl 0x10025ddb
jg 0x10025e26
cmp eax, ecx
jb 0x10025ddb
mov dword [esp + 0x14], ebx
xor ebx, ebx
mov eax, dword [esp + 0x14]
inc ebx
push eax
push edi
push str._lld_n
call fcn.1004c2d0
add esp, 0xc
cmp dword [esp + 0x10], 0xb3e
jle 0x10025e95
xor esi, esi
xor edi, edi
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [esp + 0x178]
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025e6d
mov eax, dword [eax]
push eax
call fcn.1004c2d0
pop ecx
push 0
push ebx
lea ecx, [esp + 0x180]
call fcn.1000168f
inc edi
cmp edi, 0x1a78
jl 0x10025e4e
inc esi
cmp esi, 0x6c4e
jl 0x10025e4c
cmp dword [esp + 0x10], 0x837
mov dword [esp + 0x20], 0x70022b00
mov word [esp + 0x24], 0x307
mov byte [esp + 0x26], 0x71
mov byte [esp + 0x27], bl
mov word [esp + 0x28], 0x273
mov byte [esp + 0x2a], 0xf
jge 0x10025ece
push str.yrtatt_cefavx_pgtzozh_uovn_gftqim_sjzj_izd_yxl_pnhfukfi_hxxa_cfe_tksf
call fcn.1004c2d0
pop ecx
push 0x22
pop eax
push 2
mov dword [esp + 0x1a0], 0xd
xor ecx, ecx
mov word [esp + 0x68], ax
pop esi
cmp esi, 2
jne 0x10025ef2
push 3
pop ecx
push ecx
pop esi
jmp 0x10025f19
movzx edx, byte [esp + esi + 0x21]
mov eax, esi
sub eax, ecx
movzx eax, byte [esp + eax + 0x1e]
movzx eax, word [esp + eax*2 + 0x64]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [esp + esi + 0x20]
mov word [esp + eax*2 + 0x64], cx
xor ecx, ecx
add esi, 2
cmp esi, 0xb
jb 0x10025ee6
xor eax, eax
mov dword [esp + 0xf8], 7
and dword [esp + 0xf4], eax
lea ecx, [esp + 0xe4]
mov word [esp + 0x6c], ax
mov word [esp + 0xe4], ax
lea eax, [esp + 0x64]
push eax
call fcn.1000ce6c
push ecx
push ecx
lea eax, [esp + 0xec]
mov byte [esp + 0x1a4], 0x10
push eax
lea ecx, [esp + 0xc0]
call fcn.10026e42
xor esi, esi
mov byte [esp + 0x19c], 0xd
push esi
push ebx
lea ecx, [esp + 0xec]
call fcn.10001f60
xor eax, eax
lea edi, [esp + 0x64]
stosd dword es:[edi], eax
mov edx, 0x1783
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x1f]
push eax
push ebx
push ecx
push ecx
push 0x76ec
push ecx
call fcn.100255dd
add esp, 0x18
lea edx, [esp + 0x84]
lea ecx, [esp + 0xb4]
call fcn.10023526
mov ecx, dword [ebp + 0xc]
push esi
push ebx
mov dword [ecx], eax
lea ecx, [esp + 0xbc]
call fcn.10001f60
push esi
push ebx
lea ecx, [esp + 0x108]
call fcn.10001f60
push esi
push ebx
lea ecx, [esp + 0xa4]
call fcn.10001f60
push esi
push ebx
lea ecx, [esp + 0x8c]
call fcn.10001f60
lea ecx, [esp + 0x50]
call fcn.1001f3f3
jmp 0x10026055
mov eax, dword [ebp + 0xc]
mov dword [eax], 1
jmp 0x10026055
mov esi, dword [ebp + 0x10]
mov dword [esi], 0
cmp dword [esi], 0x1d
jge 0x10026055
xor ebx, ebx
inc ebx
push 0x7d82
lea eax, [esp + 0x80]
mov dword [esp + 0x80], 0x66a92721
push eax
push ebx
push ebx
mov edx, 0x4453
mov cl, bl
call fcn.1002198b
add esp, 0x10
inc dword [esi]
cmp dword [esi], 0x1d
jl 0x10026025
mov ecx, dword [esp + 0x194]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret