Function at 0x6c85f830
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xd4]
cmp eax, dword [ecx + 8]
jbe 0x6c85fe59
sub esp, 0x154
mov dword [esp + 0x5d], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5d], 0x1b928f46
mov word [esp + 0x61], 0x899a
mov byte [esp + 0x63], 0x50
mov dword [esp + 0x59], 0
mov dword [esp + 0x59], 0x13f1ff35
lea eax, [0x6c882b20]
mov dword [esp], eax
mov dword [esp + 4], 7
mov dword [esp + 8], 7
call fcn.6c804d80
mov eax, dword [esp + 0xc]
xor ecx, ecx
jmp 0x6c85f8ba
movzx edx, byte [esp + eax + 0x59]
xor edx, ebp
mov byte [ebx + ecx], dl
inc ecx
mov eax, ebx
cmp ecx, 7
jge 0x6c85f8ea
jae 0x6c85fe4c
movzx edx, byte [esp + ecx + 0x5d]
mov ebx, eax
mov eax, 0xaaaaaaab
mov ebp, edx
imul ecx
add edx, ecx
sar edx, 1
lea edx, [edx + edx*2]
mov eax, ecx
sub eax, edx
cmp eax, 4
jb 0x6c85f8ad
jmp 0x6c85fe42
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 7
call fcn.6c808550
mov eax, dword [esp + 0xc]
mov dword [esp + 0x13c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
lea edi, [esp + 0x74]
xor eax, eax
call fcn.6c81a5fa
mov dword [esp + 0x74], 0x830e5885
mov dword [esp + 0x78], 0xe800e0e
mov dword [esp + 0x7c], 0x60d865b
mov dword [esp + 0x80], 0x810c5d87
mov dword [esp + 0x84], 0xa835c5a
mov dword [esp + 0x88], 0x5c0e830c
mov dword [esp + 0x55], 0
mov dword [esp + 0x55], 0xef3e3eb0
lea ecx, [0x6c882b20]
mov dword [esp], ecx
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
call fcn.6c804d80
mov eax, dword [esp + 0xc]
xor ecx, ecx
jmp 0x6c85f99c
movzx edx, byte [esp + eax + 0x55]
xor edx, ebp
mov byte [ebx + ecx], dl
inc ecx
mov eax, ebx
cmp ecx, 0x18
jge 0x6c85f9cc
jae 0x6c85fe36
movzx edx, byte [esp + ecx + 0x74]
mov ebx, eax
mov eax, 0xaaaaaaab
mov ebp, edx
imul ecx
add edx, ecx
sar edx, 1
lea edx, [edx + edx*2]
mov eax, ecx
sub eax, edx
cmp eax, 4
jb 0x6c85f98f
jmp 0x6c85fe2c
lea ecx, [esp + 0x10c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x18
call fcn.6c808550
mov eax, dword [esp + 0xc]
mov dword [esp + 0x138], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
lea edi, [esp + 0xec]
xor eax, eax
call fcn.6c81a5f8
mov dword [esp + 0xec], 0x30701b60
mov dword [esp + 0xf0], 0x1d3d764f
mov dword [esp + 0xf4], 0x77486524
mov dword [esp + 0xf8], 0x32714834
mov dword [esp + 0xfc], 0x1f30704b
mov dword [esp + 0x100], 0x764c3222
mov dword [esp + 0x104], 0x3d764a32
mov dword [esp + 0x108], 0x1d307010
mov dword [esp + 0x51], 0
mov dword [esp + 0x51], 0xab472904
lea eax, [0x6c882b20]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.6c804d80
mov eax, dword [esp + 0xc]
xor ecx, ecx
jmp 0x6c85faa3
movzx edx, byte [esp + eax + 0x51]
xor edx, ebp
mov byte [ebx + ecx], dl
inc ecx
mov eax, ebx
cmp ecx, 0x20
jge 0x6c85fad6
jae 0x6c85fe20
movzx edx, byte [esp + ecx + 0xec]
mov ebx, eax
mov eax, 0xaaaaaaab
mov ebp, edx
imul ecx
add edx, ecx
sar edx, 1
lea edx, [edx + edx*2]
mov eax, ecx
sub eax, edx
cmp eax, 4
jb 0x6c85fa96
jmp 0x6c85fe16
lea ecx, [esp + 0xcc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.6c808550
mov eax, dword [esp + 0xc]
mov dword [esp + 0x140], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
nop
lea edx, [esp + 0xac]
mov dword [esp], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 8], edx
call fcn.6c8086b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x130], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.6c85da70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x34]
cmp ebp, ebx
jb 0x6c85fe0d
test eax, eax
je 0x6c85fb7b
test ecx, ecx
jne 0x6c85fdfe
jmp 0x6c85fe01
mov dword [esp + 0x38], ebx
nop
lea eax, [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
call fcn.6c8086b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x12c], eax
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x30], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.6c85da70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x30]
cmp ebp, ebx
jb 0x6c85fdf5
test eax, eax
je 0x6c85fbf6
test ecx, ecx
jne 0x6c85fde6
jmp 0x6c85fde9
call fcn.6c851300
call fcn.6c85eb60
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x150], eax
lea eax, [esp + 0x144]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.6c85ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c8516d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test eax, eax
je 0x6c85fcb8
test ecx, ecx
jne 0x6c85fdd7
jmp 0x6c85fdda
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x130]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
call fcn.6c85f4b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
nop
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov ebx, dword [esp + 0x30]
cmp ebx, 0x10
jb 0x6c85fdcb
mov dword [esp + 0x3c], ecx
mov ebx, dword [esp + 0x12c]
lea esi, [esp + 0x64]
cmp ebx, esi
je 0x6c85fd62
mov dword [esp + 0x134], eax
mov dword [esp + 0x40], edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x10
call fcn.6c81acf0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
lea esi, [esp + 0x64]
lea edi, [esp]
call fcn.6c81aae8
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
call fcn.6c85f6c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x28]
mov esi, ebp
mov ebp, dword [esp + 0x2c]
test ebx, ebx
jne 0x6c85fdb4
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.6c85f120
add esp, 0x154
ret
test esi, esi
je 0x6c85fdc7
mov eax, dword [esi + 4]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.6c7f27c0
mov eax, esi
jmp 0x6c85fdbb
mov ecx, 0x10
mov edx, ebx
call fcn.6c81a4f0
mov ecx, dword [ecx + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.6c7f27c0
mov ecx, dword [ecx + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.6c7f27c0
mov ecx, ebx
mov edx, ebp
call fcn.6c81a4f0
mov ecx, dword [ecx + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.6c7f27c0
mov ecx, ebx
mov edx, ebp
call fcn.6c81a4f0
mov ecx, 4
call fcn.6c81a4b0
mov eax, ecx
mov ecx, 0x20
call fcn.6c81a4b0
mov ecx, 4
call fcn.6c81a4b0
mov eax, ecx
mov ecx, 0x18
call fcn.6c81a4b0
mov ecx, 4
call fcn.6c81a4b0
mov eax, ecx
mov ecx, 7
call fcn.6c81a4b0
nop
call fcn.6c819000
jmp fcn.6c85f830