Function at 0x248ee07
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x254
mov eax, dword [0x6400104]
xor eax, esp
mov dword [esp + 0x250], eax
and dword [esp + 0x1ec], 0
push ebx
mov ebx, dword [esp + 0x25c]
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x20c], ebx
cmp dword [ebx + 0x14], 0x10
push edi
mov dword [esp + 0x20c], esi
jb 0x248ee48
mov edi, dword [ebx]
jmp 0x248ee4a
mov edi, ebx
mov ecx, dword [esp + 0x26c]
mov ebp, dword [ebx + 0x10]
add ebp, edi
mov eax, dword [ecx]
mov dword [esp + 0x200], eax
jmp 0x248f503
mov al, byte [edi]
cmp al, 0x5b
jne 0x248eedd
inc edi
cmp byte [edi], 0x25
jne 0x248ee85
push 1
lea eax, [esp + 0x204]
push eax
push ecx
push ebx
mov ecx, esi
call fcn.02480556
jmp 0x248eecf
xor ecx, ecx
jmp 0x248ee9f
mov al, byte [edi]
cmp al, 0x30
jl 0x248eea3
cmp al, 0x39
jg 0x248eea3
imul ecx, ecx, 0xa
movsx eax, al
add ecx, 0xffffffd0
add ecx, eax
inc edi
cmp edi, ebp
jne 0x248ee89
push ecx
lea ecx, [esp + 0x224]
call fcn.0247ae78
lea eax, [esp + 0x220]
mov ecx, esi
push eax
call fcn.02490624
push 0
push 1
lea ecx, [esp + 0x228]
call fcn.0247fc46
cmp edi, ebp
je 0x248f50b
inc edi
jmp 0x248f4fc
cmp al, 0x25
jne 0x248eef6
push 2
lea eax, [esp + 0x204]
push eax
push ecx
push ebx
mov ecx, esi
call fcn.02480556
jmp 0x248eed7
cmp al, 0x2e
jne 0x248ef00
inc edi
jmp 0x248f503
mov ebx, dword [esp + 0x1fc]
mov dword [esp + 0x208], edi
cmp edi, ebp
je 0x248f465
mov dword [esp + 0x14], 0x4d734747
mov dword [esp + 0x18], 0x32745441
mov dword [esp + 0x1c], 0x4d41444b
mov dword [esp + 0x20], 0x68557a4c
mov dword [esp + 0x24], 0x4634414b
mov dword [esp + 0x28], 0x4c555764
mov dword [esp + 0x2c], 0x4130514e
mov dword [esp + 0x30], 0x62305365
mov dword [esp + 0x34], 0x4651434d
mov dword [esp + 0x38], 0x424d6941
mov dword [esp + 0x3c], 0x31596a4c
mov dword [esp + 0x40], 0x5251785a
mov dword [esp + 0x44], 0x46677948
mov dword [esp + 0x48], 0x79517949
mov dword [esp + 0x4c], 0x34775164
mov dword [esp + 0x50], 0x58676846
mov dword [esp + 0x54], 0x41557a44
mov dword [esp + 0x58], 0x4c304142
mov dword [esp + 0x5c], 0x7855584d
mov dword [esp + 0x60], 0x6863414a
mov dword [esp + 0x64], 0x76384241
mov dword [esp + 0x68], 0x56384261
mov dword [esp + 0x6c], 0x4355434c
mov dword [esp + 0x70], 0x6f495449
mov dword [esp + 0x74], 0x6c63774f
mov dword [esp + 0x78], 0x49556948
mov dword [esp + 0x7c], 0x53774345
mov dword [esp + 0x80], 0x72705250
mov dword [esp + 0x84], 0x78495344
mov dword [esp + 0x88], 0x36515150
mov dword [esp + 0x8c], 0x32646847
mov dword [esp + 0x90], 0x70346a41
mov dword [esp + 0x94], 0x3651534c
mov dword [esp + 0x98], 0x70596d41
mov dword [esp + 0x9c], 0x66677847
mov dword [esp + 0xa0], 0x73685465
mov dword [esp + 0xa4], 0x5a67774d
mov dword [esp + 0xa8], 0x6234794f
mov dword [esp + 0xac], 0x784e784b
mov dword [esp + 0xb0], 0x41674866
mov dword [esp + 0xb4], 0x4567574f
mov dword [esp + 0xb8], 0x32555347
mov dword [esp + 0xbc], 0x7770424f
mov dword [esp + 0xc0], 0x76315463
mov dword [esp + 0xc4], 0x6b6c4241
mov dword [esp + 0xc8], 0x6a52794a
mov dword [esp + 0xcc], 0x3945784b
mov dword [esp + 0xd0], 0x38496e4b
mov dword [esp + 0xd4], 0x334a3341
mov dword [esp + 0xd8], 0x356b694c
mov dword [esp + 0xdc], 0x6b63434e
mov dword [esp + 0xe0], 0x4538514f
mov dword [esp + 0xe4], 0x51775247
mov dword [esp + 0xe8], 0x746b5848
mov dword [esp + 0xec], 0x626b544d
mov dword [esp + 0xf0], 0x4b59574a
mov dword [esp + 0xf4], 0x6e415446
mov dword [esp + 0xf8], 0x7938544b
mov dword [esp + 0xfc], 0x4477424d
mov dword [esp + 0x100], 0x364d7a42
mov dword [esp + 0x104], 0x48306a43
mov dword [esp + 0x108], 0x726f784b
mov dword [esp + 0x10c], 0x51557847
mov dword [esp + 0x110], 0x4263674f
mov dword [esp + 0x114], 0x6c67484c
mov dword [esp + 0x118], 0x4a497a4d
mov dword [esp + 0x11c], 0x2b466946
mov dword [esp + 0x120], 0x71496e4d
mov dword [esp + 0x124], 0x45417a48
mov dword [esp + 0x128], 0x46516750
mov dword [esp + 0x12c], 0x33386962
mov dword [esp + 0x130], 0x6c455743
mov dword [esp + 0x134], 0x7a555150
mov dword [esp + 0x138], 0x4f416d42
mov dword [esp + 0x13c], 0x796b6765
mov dword [esp + 0x140], 0x4a6b684d
mov dword [esp + 0x144], 0x67776a45
mov dword [esp + 0x148], 0x46495445
mov dword [esp + 0x14c], 0x79525361
mov dword [esp + 0x150], 0x37455166
mov dword [esp + 0x154], 0x6d4d6849
movsx esi, byte [edi]
lea eax, [esp + 0x1fc]
push 0
sub esp, 0xc
mov byte [esp + 0x214], 0
mov ecx, esp
mov dword [esp + 0x168], 0x70345246
mov dword [esp + 0x16c], 0x4e516841
or ebx, 1
mov dword [esp + 0x170], 0x63557750
push dword [esp + 0x214]
mov dword [esp + 0x178], 0x596f6763
push eax
mov dword [esp + 0x180], 0x46734864
lea eax, [esp + 0x2c]
mov dword [esp + 0x184], 0x35415142
mov dword [esp + 0x188], 0x4e6f4341
mov dword [esp + 0x18c], 0x71456a42
mov dword [esp + 0x190], 0x516b6e4b
mov dword [esp + 0x194], 0x644d694b
mov dword [esp + 0x198], 0x71394747
mov dword [esp + 0x19c], 0x2b52414f
mov dword [esp + 0x1a0], 0x4e493246
mov dword [esp + 0x1a4], 0x576b6847
mov dword [esp + 0x1a8], 0x634d7a41
mov dword [esp + 0x1ac], 0x3945544e
mov dword [esp + 0x1b0], 0x66385466
mov dword [esp + 0x1b4], 0x784e5144
mov dword [esp + 0x1b8], 0x584d5844
mov dword [esp + 0x1bc], 0x564d4843
mov dword [esp + 0x1c0], 0x72597947
mov dword [esp + 0x1c4], 0x2b77684a
mov dword [esp + 0x1c8], 0x2f55414a
mov dword [esp + 0x1cc], 0x6d635845
mov dword [esp + 0x1d0], 0x59457a44
mov dword [esp + 0x1d4], 0x35673245
mov dword [esp + 0x1d8], 0x33634147
mov dword [esp + 0x1dc], 0x73346a62
mov dword [esp + 0x1e0], 0x48344447
mov dword [esp + 0x1e4], 0x334d4142
mov dword [esp + 0x1e8], 0x67456849
mov dword [esp + 0x1ec], 0x6a414449
mov dword [esp + 0x1f0], 0x4d304448
mov dword [esp + 0x1f4], 0x2b6b524d
mov dword [esp + 0x1f8], 0x78495743
mov dword [esp + 0x1fc], 0x4c635241
mov dword [esp + 0x200], 0x346b5841
mov dword [esp + 0x204], 0x4d41584d
mov dword [esp + 0x208], 0x6863674b
mov dword [esp + 0x20c], 0x416f4364
mov dword [esp + 0x210], 0x6f464141
and dword [ecx], 0
and dword [ecx + 4], 0
and dword [ecx + 8], 0
push eax
call fcn.024799be
lea eax, [esp + 0x224]
push eax
call fcn.0247d204
add esp, 0x10
mov ecx, eax
call fcn.02486d16
push esi
push eax
call fcn.025ace70
mov byte [esp + 0x1b], 1
pop ecx
pop ecx
test eax, eax
je 0x248f46a
mov byte [esp + 0x13], 0
test bl, 1
je 0x248f47e
lea ecx, [esp + 0x214]
and ebx, 0xfffffffe
call fcn.0247fde7
cmp byte [esp + 0x13], 0
je 0x248f48b
inc edi
jmp 0x248ef0e
lea eax, [esp + 0x13]
mov dword [esp + 0x1fc], ebx
push eax
push edi
push dword [esp + 0x210]
lea ecx, [esp + 0x22c]
mov dword [esp + 0x208], ebx
call fcn.024791d0
push eax
lea ecx, [esp + 0x244]
call fcn.0247ae56
mov esi, dword [esp + 0x20c]
lea eax, [esp + 0x240]
push eax
mov ecx, esi
call fcn.02490624
push 0
push 1
lea ecx, [esp + 0x248]
call fcn.0247fc46
push 0
push 1
lea ecx, [esp + 0x228]
call fcn.0247fc46
mov ebx, dword [esp + 0x210]
mov ecx, dword [esp + 0x26c]
cmp edi, ebp
jne 0x248ee64
mov ecx, dword [esp + 0x260]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.02585cf8
add esp, 0x254
ret 8