Function at 0x248f9ca
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2ec
mov eax, dword [0x6400104]
xor eax, esp
mov dword [esp + 0x2e8], eax
movzx eax, byte [esp + 0x2fc]
xor edx, edx
push ebx
push ebp
mov ebp, dword [esp + 0x2f8]
push esi
mov esi, ecx
mov ecx, dword [esp + 0x300]
push edi
mov edi, dword [esp + 0x308]
mov dword [esp + 0x2c0], ecx
cmp byte [esi + 0x6c], dl
lea ebx, [esi + 0x54]
mov dword [esi + 0x44], ecx
mov ecx, ebx
cmove eax, edx
mov dword [esi + 0x40], ebp
mov byte [esi + 0x6e], al
xor eax, eax
push eax
push 0x440533f
mov dword [esi + 0x48], ebp
mov dword [esi + 0x4c], eax
mov dword [esi + 0x50], eax
call fcn.02486c9e
lea ecx, [esi + 0x14]
call fcn.0247fd72
xor eax, eax
jmp 0x248fa49
sub dword [esi + 0x10], 1
jne 0x248fa49
mov dword [esi + 0xc], eax
cmp dword [esi + 0x10], eax
jne 0x248fa40
lea eax, [esp + 0x2c4]
mov dword [esp + 0x2c4], edi
push eax
mov ecx, esi
call fcn.02490382
mov ecx, esi
call fcn.0249319d
mov byte [esp + 0x13], al
mov ecx, esi
lea eax, [esp + 0x2c8]
push eax
call fcn.0249473b
cmp byte [esi + 0x6e], 0
je 0x248fa94
cmp dword [esi + 0x64], 0
je 0x248fa94
push 2
push ebx
mov ecx, edi
call fcn.02494642
cmp byte [esi + 0x6d], 0
je 0x249026f
mov ecx, edi
call fcn.0248e92d
test al, al
jne 0x249026f
mov ecx, edi
call fcn.0248ed06
test al, al
jne 0x249026f
mov eax, dword [esp + 0x2c0]
mov dword [esp + 0x2c8], 0xd
mov dword [esp + 0x2cc], ebp
mov dword [esp + 0x2d0], eax
mov dword [esp + 0x14], 0x7a556d41
mov dword [esp + 0x18], 0x756f444d
mov dword [esp + 0x1c], 0x4445334b
mov dword [esp + 0x20], 0x58737847
mov dword [esp + 0x24], 0x36557959
mov dword [esp + 0x28], 0x334d6949
mov dword [esp + 0x2c], 0x38597a49
mov dword [esp + 0x30], 0x76597961
mov dword [esp + 0x34], 0x6d4a6a4b
mov dword [esp + 0x38], 0x7935694b
mov dword [esp + 0x3c], 0x7877694a
mov dword [esp + 0x40], 0x314d544f
mov dword [esp + 0x44], 0x6e417a62
mov dword [esp + 0x48], 0x72554461
mov dword [esp + 0x4c], 0x7341534d
mov dword [esp + 0x50], 0x6f6b5459
mov dword [esp + 0x54], 0x6d6b6a5a
mov dword [esp + 0x58], 0x34517961
mov dword [esp + 0x5c], 0x6c4d794d
mov dword [esp + 0x60], 0x6b734750
mov dword [esp + 0x64], 0x776b6949
mov dword [esp + 0x68], 0x7968484e
mov dword [esp + 0x6c], 0x34684349
mov dword [esp + 0x70], 0x58416d4f
mov dword [esp + 0x74], 0x6a4a7a4c
mov dword [esp + 0x78], 0x7934694e
mov dword [esp + 0x7c], 0x38424745
mov dword [esp + 0x80], 0x4a774346
mov dword [esp + 0x84], 0x53517a4d
mov dword [esp + 0x88], 0x31454244
mov dword [esp + 0x8c], 0x77396747
mov dword [esp + 0x90], 0x67555741
mov dword [esp + 0x94], 0x4f6f6843
mov dword [esp + 0x98], 0x55307744
mov dword [esp + 0x9c], 0x7456694a
mov dword [esp + 0xa0], 0x76786964
mov dword [esp + 0xa4], 0x51597a64
mov dword [esp + 0xa8], 0x554d434f
mov dword [esp + 0xac], 0x5349544d
mov dword [esp + 0xb0], 0x61675149
mov dword [esp + 0xb4], 0x73495164
mov dword [esp + 0xb8], 0x4d6b414e
mov dword [esp + 0xbc], 0x39745442
mov dword [esp + 0xc0], 0x72785248
mov dword [esp + 0xc4], 0x4e6b424b
mov dword [esp + 0xc8], 0x6a454441
mov dword [esp + 0xcc], 0x3477794c
mov dword [esp + 0xd0], 0x3370784d
mov dword [esp + 0xd4], 0x2b637750
mov dword [esp + 0xd8], 0x33496e41
mov dword [esp + 0xdc], 0x6f31534a
mov dword [esp + 0xe0], 0x64777a49
mov dword [esp + 0xe4], 0x38456948
mov dword [esp + 0xe8], 0x4f414765
mov dword [esp + 0xec], 0x6e674145
mov dword [esp + 0xf0], 0x72455145
mov dword [esp + 0xf4], 0x41514445
mov dword [esp + 0xf8], 0x71457a4f
mov dword [esp + 0xfc], 0x5a4d5346
mov dword [esp + 0x100], 0x304d6a4c
mov dword [esp + 0x104], 0x64736945
mov dword [esp + 0x108], 0x32314248
mov dword [esp + 0x10c], 0x48554366
mov dword [esp + 0x110], 0x626b6847
mov dword [esp + 0x114], 0x7a49524a
mov dword [esp + 0x118], 0x724a544b
mov dword [esp + 0x11c], 0x53414441
mov dword [esp + 0x120], 0x5a73444c
mov dword [esp + 0x124], 0x6f775445
mov dword [esp + 0x128], 0x7a674450
mov dword [esp + 0x12c], 0x56346762
mov dword [esp + 0x130], 0x73347748
mov dword [esp + 0x134], 0x78677942
mov dword [esp + 0x138], 0x5159444c
mov dword [esp + 0x13c], 0x6767794c
mov dword [esp + 0x140], 0x5a73684b
mov dword [esp + 0x144], 0x42515443
mov dword [esp + 0x148], 0x7338694a
mov dword [esp + 0x14c], 0x49494262
mov dword [esp + 0x150], 0x6f674845
mov dword [esp + 0x154], 0x2f77414e
mov dword [esp + 0x158], 0x764d7747
mov dword [esp + 0x15c], 0x345a5750
mov dword [esp + 0x160], 0x4c73524c
mov dword [esp + 0x164], 0x6e42434a
mov dword [esp + 0x168], 0x74356949
mov dword [esp + 0x16c], 0x35356746
mov dword [esp + 0x170], 0x71315244
mov dword [esp + 0x174], 0x2b557847
mov dword [esp + 0x178], 0x2f4a7746
mov dword [esp + 0x17c], 0x4b635444
mov dword [esp + 0x180], 0x77594741
mov dword [esp + 0x184], 0x684d424f
mov dword [esp + 0x188], 0x50554163
mov dword [esp + 0x18c], 0x7959774f
mov dword [esp + 0x190], 0x49454265
mov dword [esp + 0x194], 0x65414141
mov dword [esp + 0x198], 0x4c4d6865
mov dword [esp + 0x19c], 0x6549524d
mov dword [esp + 0x1a0], 0x35347a4a
mov dword [esp + 0x1a4], 0x52777745
mov dword [esp + 0x1a8], 0x6c73685a
mov dword [esp + 0x1ac], 0x78346a41
mov dword [esp + 0x1b0], 0x5063794f
mov dword [esp + 0x1b4], 0x5a41444e
mov dword [esp + 0x1b8], 0x6a6c7746
mov dword [esp + 0x1bc], 0x63387a43
mov dword [esp + 0x1c0], 0x65774243
mov dword [esp + 0x1c4], 0x70385461
mov dword [esp + 0x1c8], 0x644d4245
mov dword [esp + 0x1cc], 0x5767574e
mov dword [esp + 0x1d0], 0x6b4d7a48
mov dword [esp + 0x1d4], 0x42734265
mov dword [esp + 0x1d8], 0x72525145
mov dword [esp + 0x1dc], 0x77516863
mov dword [esp + 0x1e0], 0x44457946
mov dword [esp + 0x1e4], 0x6e414163
mov dword [esp + 0x1e8], 0x75685866
mov dword [esp + 0x1ec], 0x53594246
mov dword [esp + 0x1f0], 0x72457848
mov dword [esp + 0x1f4], 0x3834694c
mov dword [esp + 0x1f8], 0x42556842
mov dword [esp + 0x1fc], 0x49634243
mov dword [esp + 0x200], 0x44456750
mov dword [esp + 0x204], 0x51596962
mov dword [esp + 0x208], 0x5245424b
mov dword [esp + 0x20c], 0x3552784a
mov dword [esp + 0x210], 0x49454342
mov dword [esp + 0x214], 0x54414864
mov dword [esp + 0x218], 0x4473524c
mov dword [esp + 0x21c], 0x3864534a
mov dword [esp + 0x220], 0x7877414b
mov dword [esp + 0x224], 0x494d7949
mov dword [esp + 0x228], 0x70466865
mov dword [esp + 0x22c], 0x61346843
mov dword [esp + 0x230], 0x34415464
mov dword [esp + 0x234], 0x2b555847
mov dword [esp + 0x238], 0x7a557763
mov dword [esp + 0x23c], 0x5545434c
mov dword [esp + 0x240], 0x6273524b
mov dword [esp + 0x244], 0x4d676946
mov dword [esp + 0x248], 0x74345346
mov dword [esp + 0x24c], 0x78527965
mov dword [esp + 0x250], 0x71354145
mov dword [esp + 0x254], 0x39416941
mov dword [esp + 0x258], 0x4b41694b
mov dword [esp + 0x25c], 0x3778574b
mov dword [esp + 0x260], 0x715a695a
mov dword [esp + 0x264], 0x7a31514b
mov dword [esp + 0x268], 0x4e34535a
mov dword [esp + 0x26c], 0x4a4d544e
mov dword [esp + 0x270], 0x2b524266
mov dword [esp + 0x274], 0x394d6949
mov dword [esp + 0x278], 0x5038424f
mov dword [esp + 0x27c], 0x78307765
mov dword [esp + 0x280], 0x4377534d
mov dword [esp + 0x284], 0x75674750
mov dword [esp + 0x288], 0x34457a4a
xor ebx, ebx
mov dword [esp + 0x28c], 0x4b6f774b
push ebx
sub esp, 0xc
mov byte [esp + 0x2d0], bl
mov ecx, esp
mov dword [esp + 0x2a0], 0x57306a4c
lea eax, [esp + 0x2d0]
mov dword [esp + 0x2a4], 0x76514341
mov dword [esp + 0x2a8], 0x3955784e
push dword [esp + 0x2d0]
mov dword [esp + 0x2b0], 0x34307841
push eax
mov dword [esp + 0x2b8], 0x4c737a41
lea eax, [esp + 0x2c]
mov dword [esp + 0x2bc], 0x6c56534a
mov dword [esp + 0x2c0], 0x72775365
mov dword [esp + 0x2c4], 0x6b6f6748
mov dword [esp + 0x2c8], 0x6f304150
mov dword [esp + 0x2cc], 0x4a73434e
mov dword [esp + 0x2d0], 0x41304149
mov dword [esp + 0x2d4], 0x38474141
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.024799be
lea eax, [esp + 0x2e4]
push eax
call fcn.0247d204
add esp, 0x10
mov ecx, eax
call fcn.02486d16
push eax
lea ecx, [esp + 0x2e4]
call fcn.0247aa91
push ebx
lea eax, [esp + 0x2cc]
mov ecx, esi
push eax
lea eax, [esp + 0x2e8]
push eax
call fcn.024804a9
push ebx
push 1
lea ecx, [esp + 0x2e8]
call fcn.0247fc46
lea ecx, [esp + 0x2d4]
call fcn.0247fde7
xor al, al
jmp 0x2490273
mov al, byte [esp + 0x13]
mov ecx, dword [esp + 0x2f8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.02585cf8
add esp, 0x2ec
ret 0x10