Function at 0x10006190
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1007b561
mov eax, dword fs:[0]
push eax
sub esp, 0x478
mov eax, dword [0x10098688]
xor eax, esp
mov dword [esp + 0x470], eax
push ebx
push esi
push edi
mov eax, dword [0x10098688]
xor eax, esp
push eax
lea eax, [esp + 0x488]
mov dword fs:[0], eax
mov dword [esp + 0x5c], ecx
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], ecx
xor edx, edx
mov dword [esp + 0x490], ecx
mov dword [esp + 0x1c], edx
mov byte [esp + 0x1b], dl
lea eax, [esp + 0x1b]
cmp eax, edi
jae 0x10006264
cmp ebx, eax
ja 0x10006264
mov esi, eax
sub esi, ebx
cmp edi, ecx
jne 0x10006259
mov eax, ecx
sub eax, edi
cmp eax, 1
jae 0x10006259
mov eax, ebx
sub eax, edi
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, ebx
mov edx, ecx
shr edx, 1
or eax, 0xffffffff
sub edi, ebx
sub eax, edx
inc edi
cmp eax, ecx
jae 0x10006238
xor ecx, ecx
jmp 0x1000623a
add ecx, edx
cmp ecx, edi
cmovb ecx, edi
push ecx
lea ecx, [esp + 0x24]
call fcn.100068c0
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
test edi, edi
je 0x100062bd
mov al, byte [ebx + esi]
mov byte [edi], al
jmp 0x100062bd
cmp edi, ecx
jne 0x100062b6
mov eax, ecx
sub eax, edi
cmp eax, 1
jae 0x100062b6
mov eax, ebx
sub eax, edi
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, ebx
mov edx, ecx
shr edx, 1
or eax, 0xffffffff
sub edi, ebx
sub eax, edx
inc edi
cmp eax, ecx
jae 0x10006295
xor ecx, ecx
jmp 0x10006297
add ecx, edx
cmp ecx, edi
cmovb ecx, edi
push ecx
lea ecx, [esp + 0x24]
call fcn.100068c0
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
test edi, edi
je 0x100062bd
mov byte [edi], 0
inc edx
inc edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x1c], edx
cmp edx, 0x10
jl 0x100061f7
mov edx, dword [ebp + 8]
mov al, byte [edx]
mov byte [esp + 0x17], al
test al, al
je 0x100063c2
lea esi, [esp + 0x1a]
mov byte [esp + 0x1a], al
cmp esi, edi
jae 0x10006353
cmp ebx, esi
ja 0x10006353
sub esi, ebx
cmp edi, ecx
jne 0x1000634a
mov eax, ecx
sub eax, edi
cmp eax, 1
jae 0x1000634a
mov eax, ebx
sub eax, edi
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, ebx
mov edx, ecx
shr edx, 1
or eax, 0xffffffff
sub edi, ebx
sub eax, edx
inc edi
cmp eax, ecx
jae 0x1000632a
xor ecx, ecx
jmp 0x1000632c
push str.vector_T__too_long
call fcn.100599f2
add ecx, edx
cmp ecx, edi
cmovb ecx, edi
push ecx
lea ecx, [esp + 0x24]
call fcn.100068c0
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov edx, dword [ebp + 8]
test edi, edi
je 0x100063aa
mov al, byte [esi + ebx]
jmp 0x100063a8
cmp edi, ecx
jne 0x100063a4
mov eax, ecx
sub eax, edi
cmp eax, 1
jae 0x100063a0
mov eax, ebx
sub eax, edi
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, ebx
mov edx, ecx
shr edx, 1
or eax, 0xffffffff
sub edi, ebx
sub eax, edx
inc edi
cmp eax, ecx
jae 0x10006380
xor ecx, ecx
jmp 0x10006382
add ecx, edx
cmp ecx, edi
cmovb ecx, edi
push ecx
lea ecx, [esp + 0x24]
call fcn.100068c0
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov edx, dword [ebp + 8]
mov al, byte [esp + 0x17]
test edi, edi
je 0x100063aa
mov byte [edi], al
mov al, byte [edx + 1]
inc edx
inc edi
mov dword [esp + 0x24], edi
mov dword [ebp + 8], edx
mov byte [esp + 0x17], al
test al, al
jne 0x100062e1
xor edx, edx
mov dword [esp + 0x1c], edx
mov byte [esp + 0x18], dl
lea esp, [esp]
lea eax, [esp + 0x18]
cmp eax, edi
jae 0x1000643d
cmp ebx, eax
ja 0x1000643d
mov esi, eax
sub esi, ebx
cmp edi, ecx
jne 0x10006432
mov eax, ecx
sub eax, edi
cmp eax, 1
jae 0x10006432
mov eax, ebx
sub eax, edi
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, ebx
mov edx, ecx
shr edx, 1
or eax, 0xffffffff
sub edi, ebx
sub eax, edx
inc edi
cmp eax, ecx
jae 0x10006411
xor ecx, ecx
jmp 0x10006413
add ecx, edx
cmp ecx, edi
cmovb ecx, edi
push ecx
lea ecx, [esp + 0x24]
call fcn.100068c0
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
test edi, edi
je 0x10006496
mov al, byte [esi + ebx]
mov byte [edi], al
jmp 0x10006496
cmp edi, ecx
jne 0x1000648f
mov eax, ecx
sub eax, edi
cmp eax, 1
jae 0x1000648f
mov eax, ebx
sub eax, edi
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, ebx
mov edx, ecx
shr edx, 1
or eax, 0xffffffff
sub edi, ebx
sub eax, edx
inc edi
cmp eax, ecx
jae 0x1000646e
xor ecx, ecx
jmp 0x10006470
add ecx, edx
cmp ecx, edi
cmovb ecx, edi
push ecx
lea ecx, [esp + 0x24]
call fcn.100068c0
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
test edi, edi
je 0x10006496
mov byte [edi], 0
inc edx
inc edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x1c], edx
cmp edx, 0x10
jl 0x100063d0
mov eax, edi
sub eax, ebx
cdq
and edx, 0xf
lea esi, [edx + eax]
and esi, 0xfffffff0
add esi, ebx
cmp esi, ebx
jne 0x100064c1
mov edi, ebx
jmp 0x100064d3
cmp esi, edi
je 0x100064d7
push 0
push edi
push esi
call fcn.1005b1d0
add esp, 0xc
mov edi, esi
mov dword [esp + 0x24], edi
xor esi, esi
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x55], 0x44454445
mov dword [esp + 0x4f], 0x46314238
mov dword [esp + 0x4a], 0x44424433
mov dword [esp + 0x46], 0x39313537
mov dword [esp + 0x3d], 0x33463746
mov dword [esp + 0x41], 0x36434142
mov byte [esp + 0x3c], 0x33
mov word [esp + 0x53], 0x3134
mov byte [esp + 0x4e], 0x32
mov byte [esp + 0x59], 0
mov byte [esp + 0x45], 0x36
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], edx
xor eax, eax
mov byte [esp + 0x490], 1
mov dword [esp + 0x1c], eax
mov bl, byte [esp + eax + 0x3c]
mov byte [esp + 0x17], bl
mov byte [esp + 0x19], bl
lea ebx, [esp + 0x19]
cmp ebx, ecx
mov ebx, dword [esp + 0x20]
jae 0x100065d1
lea ebx, [esp + 0x19]
cmp esi, ebx
mov ebx, dword [esp + 0x20]
ja 0x100065d1
lea eax, [esp + 0x19]
sub eax, esi
mov dword [esp + 0x2c], eax
cmp ecx, edx
jne 0x100065c2
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x100065be
mov eax, esi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, esi
sub edx, esi
mov esi, edx
shr esi, 1
or eax, 0xffffffff
sub eax, esi
inc ecx
cmp eax, edx
jae 0x100065a1
xor edx, edx
jmp 0x100065a3
add edx, esi
cmp edx, ecx
cmovb edx, ecx
push edx
lea ecx, [esp + 0x34]
call fcn.100068c0
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
test ecx, ecx
je 0x100065cb
mov al, byte [esi + eax]
mov byte [ecx], al
mov eax, dword [esp + 0x1c]
jmp 0x10006631
cmp ecx, edx
jne 0x10006623
mov eax, edx
sub eax, ecx
cmp eax, 1
jae 0x1000661f
mov eax, esi
sub eax, ecx
dec eax
cmp eax, 1
jb 0x10006320
sub ecx, esi
sub edx, esi
mov esi, edx
shr esi, 1
or eax, 0xffffffff
sub eax, esi
inc ecx
cmp eax, edx
jae 0x10006602
xor edx, edx
jmp 0x10006604
add edx, esi
cmp edx, ecx
cmovb edx, ecx
push edx
lea ecx, [esp + 0x34]
call fcn.100068c0
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
test ecx, ecx
je 0x10006631
mov bl, byte [esp + 0x17]
mov byte [ecx], bl
mov ebx, dword [esp + 0x20]
inc eax
inc ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x1c], eax
cmp eax, 0x1d
jl 0x10006542
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x24]
push eax
push esi
lea eax, [esp + 0x70]
push eax
sub ecx, esi
sub edi, ebx
push ebx
mov dword [esp + 0x44], 0x400
mov dword [esp + 0x34], ecx
mov dword [esp + 0x78], edi
call fcn.10005fb0
push dword [esp + 0x2c]
lea edx, [esp + 0x80]
lea ecx, [esp + 0x68]
call fcn.10005c90
add esp, 4
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x64]
mov byte [esp + 0x490], 2
cmp eax, ecx
je 0x100066ad
push 0xffffffffffffffff
push 0
push ecx
mov ecx, eax
call fcn.10005340
cmp dword [esp + 0x78], 0x10
jb 0x100066c0
push dword [esp + 0x64]
call fcn.1005a591
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
test esi, esi
je 0x100066e2
push esi
call fcn.1005a591
add esp, 4
test ebx, ebx
je 0x100066ef
push ebx
call fcn.1005a591
add esp, 4
mov ecx, dword [esp + 0x488]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x470]
xor ecx, esp
call fcn.1005c9a6
mov esp, ebp
pop ebp
ret 4