Function at 0x6f571110
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x94
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x10]
test byte [section..data], 8
jne 0x6f571550
lea edx, [ebp - 0x68]
xor eax, eax
mov ecx, 0x16
mov dword [ebp - 0x70], esi
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x6c], eax
test ebx, ebx
je 0x6f571150
cmp word [ebx], 0
jne 0x6f5711c0
movzx eax, byte [section..data]
and eax, 1
test al, al
jne 0x6f571180
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call sym._GlobalFree_4
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov dword [esp + 0x14], str.dialog:_Printer___The_operation_was_not_successful_n
mov dword [esp + 0x10], 0x111
mov dword [esp + 0xc], str.PrintUIEntryW
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 0
call sym._ros_dbg_log
jmp 0x6f57115e
lea eax, [ebp - 0x60]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._CommandLineToArgvW_8
sub esp, 8
mov dword [ebp - 0x68], eax
test byte [section..data], 8
jne 0x6f5715b0
mov edx, 1
lea eax, [ebp - 0x70]
xor esi, esi
call sym._get_next_wchar
mov word [ebp - 0x74], si
mov esi, dword [sym.imp.msvcrt.dll_wcschr]
mov word [ebp - 0x78], ax
test ax, ax
je 0x6f5712e0
cmp ax, 9
je 0x6f571214
cmp ax, 0x20
jne 0x6f571231
mov edx, 1
lea eax, [ebp - 0x70]
call sym._get_next_wchar
mov word [ebp - 0x78], ax
cmp ax, 0x20
je 0x6f571214
cmp ax, 9
je 0x6f571214
mov word [ebp - 0x76], ax
cmp ax, 0x40
je 0x6f5715f4
cmp ax, 0x2f
jne 0x6f571682
xor edx, edx
lea eax, [ebp - 0x70]
lea ebx, [ebp - 0x76]
call sym._get_next_wchar
mov word [ebp - 0x78], ax
test ax, ax
je 0x6f5712c3
mov word [ebp - 0x76], ax
movzx eax, ax
mov dword [esp + 4], eax
mov dword [esp], str.abcfhjlmntrv
call esi
test eax, eax
je 0x6f5713e0
mov edx, dword [ebp - 0x64]
sub eax, str.abcfhjlmntrv
sar eax, 1
test edx, edx
je 0x6f57128f
cmp word [edx], 0
jne 0x6f5712a5
mov ecx, dword [ebp - 0x5c]
xor edx, edx
cmp ecx, dword [ebp - 0x60]
jge 0x6f5712ac
mov edx, dword [ebp - 0x68]
mov edx, dword [edx + ecx*4]
add ecx, 1
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x64], 0
mov dword [ebp + eax*4 - 0x54], edx
test byte [section..data], 8
jne 0x6f571370
xor ebx, ebx
mov word [ebp - 0x78], bx
mov edx, 1
lea eax, [ebp - 0x70]
call sym._get_next_wchar
mov word [ebp - 0x78], ax
test ax, ax
jne 0x6f571208
lea esi, [esi]
movzx edx, word [ebp - 0x58]
movzx eax, byte [section..data]
and eax, 1
test dx, dx
je 0x6f57115a
mov word [ebp - 0x76], dx
movzx edx, word [ebp - 0x56]
mov word [ebp - 0x74], dx
xor edx, edx
mov word [ebp - 0x72], dx
test al, al
je 0x6f57115e
lea eax, [ebp - 0x76]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str.command_not_implemented:__s_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x10b
mov dword [esp + 0xc], str.PrintUIEntryW
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 0
call sym._ros_dbg_log
cmp word [ebp - 0x58], 0
jne 0x6f57115e
jmp 0x6f571150
mov dword [esp], edx
mov dword [esp + 4], 0xffffffff
call sym._wine_dbgstr_wn
mov dword [esp + 4], 0xffffffff
mov ebx, eax
lea eax, [ebp - 0x76]
mov dword [esp], eax
call sym._wine_dbgstr_wn
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str._opt:__s___s_n
mov dword [esp + 0x10], 0x9d
mov dword [esp + 0xc], str.parse_rundll
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6f5712bd
movzx eax, word [ebp - 0x78]
mov dword [esp], str.qwyzZ
mov dword [esp + 4], eax
call esi
test eax, eax
je 0x6f571470
sub eax, str.qwyzZ
sar eax, 1
mov dword [ebp + eax*4 - 0x24], 1
test byte [section..data], 8
jne 0x6f571521
movzx eax, word [ebp - 0x78]
cmp ax, 0x3f
je 0x6f5712e0
xor edx, edx
lea eax, [ebp - 0x70]
call sym._get_next_wchar
movzx edi, word [ebp - 0x58]
mov word [ebp - 0x78], ax
lea edx, [edi - 0x53]
cmp dx, 0x16
ja 0x6f57125a
mov ecx, 0x520021
bt ecx, edx
jae 0x6f57125a
mov word [ebp - 0x56], ax
mov word [ebp - 0x76], ax
test byte [section..data], 8
jne 0x6f5714d4
xor edx, edx
lea eax, [ebp - 0x70]
call sym._get_next_wchar
mov word [ebp - 0x78], ax
jmp 0x6f57125a
movzx eax, word [ebp - 0x78]
xor ecx, ecx
mov word [ebp - 0x56], cx
mov word [ebp - 0x58], ax
test byte [section..data], 8
je 0x6f571415
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str._cmd:__s_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xac
mov dword [esp + 0xc], str.parse_rundll
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6f571411
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str._sub:__s_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xbb
mov dword [esp + 0xc], str.parse_rundll
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6f57145d
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str.flag:__s_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xa6
jmp 0x6f5714ab
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call sym._wine_dbgstr_wn
mov edi, dword [ebp + 0x14]
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x24], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], str.__p___p___s__0x_x__n
mov dword [esp + 0x10], 0xf3
mov dword [esp + 0xc], str.PrintUIEntryW
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6f57112f
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x14], str.got__d_args_at__p_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xfc
mov dword [esp + 0xc], str.PrintUIEntryW
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6f5711e2
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x6f571601
cmp word [eax], 0
jne 0x6f571617
mov edx, dword [ebp - 0x5c]
xor eax, eax
cmp edx, dword [ebp - 0x60]
jge 0x6f57161e
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + edx*4]
add edx, 1
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x64], 0
test byte [section..data], 1
je 0x6f57115e
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str.redir_not_supported:__s_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x91
mov dword [esp + 0xc], str.parse_rundll
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 0
call sym._ros_dbg_log
movzx eax, byte [section..data]
and eax, 1
jmp 0x6f57115a
movzx edx, word [ebp - 0x58]
movzx eax, byte [section..data]
cmp dx, 0x53
je 0x6f571703
cmp dx, 0x58
je 0x6f571703
test al, 1
je 0x6f57115e
lea eax, [ebp - 0x78]
mov dword [esp + 4], 1
mov dword [esp], eax
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str.0x_x:__s_is_unknown_n
mov dword [esp + 0x1c], eax
movzx eax, word [ebp - 0x78]
mov dword [esp + 0x10], 0xcd
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], str.parse_rundll
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 0
call sym._ros_dbg_log
movzx eax, byte [section..data]
and eax, 1
jmp 0x6f57115a
mov esi, dword [ebp - 0x64]
lea ecx, [esi - 2]
mov dword [ebp - 0x64], ecx
test al, 8
je 0x6f5712eb
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call sym._wine_dbgstr_wn
mov dword [esp + 0x14], str._d_extra_Parameter__starting_with__s_n
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x5c]
mov dword [esp + 0x10], 0xca
add eax, 1
mov dword [esp + 0xc], str.parse_rundll
mov dword [esp + 0x18], eax
mov dword [esp + 8], 0x6f576049
mov dword [esp + 4], 0x6f575000
mov dword [esp], 3
call sym._ros_dbg_log
movzx edx, word [ebp - 0x58]
movzx eax, byte [section..data]
jmp 0x6f5712eb