Function at 0x6c1ac0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c8
push ebx
xor ebx, ebx
push ebp
push edi
mov dword [esp + 0x14], 0x40404040
mov dword [esp + 0x18], 0x6f5e20
mov dword [esp + 0x1c], 0x6f66d0
mov dword [esp + 0x20], 0x6f5a50
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], 0x4241434b
mov dword [esp + 0x38], 0x6f5dd0
mov dword [esp + 0x3c], 0x6f63b0
mov dword [esp + 0x40], 0x6f38b0
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], 0x42415349
mov dword [esp + 0x58], 0x6f5d80
mov dword [esp + 0x5c], 0x6f6450
mov dword [esp + 0x60], 0x6f3180
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], 0x434c4950
mov dword [esp + 0x78], 0x6f5d80
mov dword [esp + 0x7c], 0x6f6450
mov dword [esp + 0x80], 0x6f3d70
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], 0x434c4f4e
mov dword [esp + 0x98], 0x6f5f10
mov dword [esp + 0x9c], 0x6f65d0
mov dword [esp + 0xa0], 0x6f3410
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], 0x4442594b
mov dword [esp + 0xb8], 0x6f5e70
mov dword [esp + 0xbc], 0x6f6650
mov dword [esp + 0xc0], 0x6f5580
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], 0x44454649
mov dword [esp + 0xd8], 0x6f5ce0
mov dword [esp + 0xdc], 0x6f6040
mov dword [esp + 0xe0], 0x6f2fb0
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], 0x44484452
mov dword [esp + 0xf8], 0x6f5f10
mov dword [esp + 0xfc], 0x6f65d0
mov dword [esp + 0x100], 0x6f4df0
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], 0x44495343
mov dword [esp + 0x118], 0x6f5e20
mov dword [esp + 0x11c], 0x6f6370
mov dword [esp + 0x120], 0x6f3790
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], 0x44524f50
mov dword [esp + 0x138], 0x6f5e20
mov dword [esp + 0x13c], 0x6f6610
mov dword [esp + 0x140], 0x6f5520
mov dword [esp + 0x144], ebx
mov edx, 0x6f5dd0
mov ecx, 0x6f6590
mov eax, 0x6f4c70
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
mov dword [esp + 0x154], 0x454e444c
mov dword [esp + 0x158], 0x6f5f60
mov dword [esp + 0x15c], 0x6f6310
mov dword [esp + 0x160], 0x6f2f00
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], 0x4652414d
mov dword [esp + 0x178], 0x6f5d30
mov dword [esp + 0x17c], 0x6f63d0
mov dword [esp + 0x180], 0x6f3a10
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], 0x49444154
mov dword [esp + 0x198], 0x6f5dd0
mov dword [esp + 0x19c], 0x6f6590
mov dword [esp + 0x1a0], 0x6f0ad0
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x1b4], 0x49454e44
mov dword [esp + 0x1b8], 0x6f5ec0
mov dword [esp + 0x1bc], 0x6f62b0
mov dword [esp + 0x1c0], 0x6f0be0
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0x1d0], ebx
mov dword [esp + 0x1d4], 0x49484452
mov dword [esp + 0x1d8], 0x6f5e70
mov dword [esp + 0x1dc], 0x6f6430
mov dword [esp + 0x1e0], 0x6f0490
mov dword [esp + 0x1e4], ebx
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1f4], 0x494a4e47
mov dword [esp + 0x1f8], 0x6f5ec0
mov dword [esp + 0x1fc], 0x6f62b0
mov dword [esp + 0x200], 0x6f54b0
mov dword [esp + 0x204], ebx
mov dword [esp + 0x208], ebx
mov dword [esp + 0x20c], ebx
mov dword [esp + 0x210], ebx
mov dword [esp + 0x214], 0x49504e47
mov dword [esp + 0x218], 0x6f5ec0
mov dword [esp + 0x21c], 0x6f62b0
mov dword [esp + 0x220], 0x6f50a0
mov dword [esp + 0x224], ebx
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x230], ebx
mov dword [esp + 0x234], 0x4a444141
mov dword [esp + 0x238], edx
mov dword [esp + 0x23c], ecx
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], ebx
mov dword [esp + 0x248], ebx
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x250], ebx
mov dword [esp + 0x254], 0x4a444154
mov dword [esp + 0x258], 0x6f5dd0
mov dword [esp + 0x25c], 0x6f6590
mov dword [esp + 0x260], 0x6f4d10
mov dword [esp + 0x264], ebx
mov dword [esp + 0x268], ebx
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x270], ebx
mov dword [esp + 0x274], 0x4a484452
mov dword [esp + 0x278], 0x6f5e70
mov dword [esp + 0x27c], 0x6f6430
mov dword [esp + 0x280], 0x6f4920
mov dword [esp + 0x284], ebx
mov dword [esp + 0x288], ebx
mov dword [esp + 0x28c], ebx
mov dword [esp + 0x290], ebx
mov dword [esp + 0x294], 0x4a534550
mov dword [esp + 0x298], 0x6f5ec0
mov dword [esp + 0x29c], 0x6f62b0
mov dword [esp + 0x2a0], 0x6f4da0
mov dword [esp + 0x2a4], ebx
mov dword [esp + 0x2a8], ebx
mov dword [esp + 0x2ac], ebx
mov dword [esp + 0x2b0], ebx
mov dword [esp + 0x2b4], 0x4a644141
mov dword [esp + 0x2b8], edx
mov dword [esp + 0x2bc], ecx
mov dword [esp + 0x2c0], eax
mov dword [esp + 0x2c4], ebx
mov dword [esp + 0x2c8], ebx
mov dword [esp + 0x2cc], ebx
mov dword [esp + 0x2d0], ebx
mov dword [esp + 0x2d4], 0x4c4f4f50
mov dword [esp + 0x2d8], 0x6f5c90
mov dword [esp + 0x2dc], 0x6f62d0
mov dword [esp + 0x2e0], 0x6f2d70
mov dword [esp + 0x2e4], ebx
mov dword [esp + 0x2e8], ebx
mov dword [esp + 0x2ec], ebx
mov dword [esp + 0x2f0], ebx
mov dword [esp + 0x2f4], 0x4d41474e
mov dword [esp + 0x2f8], 0x6f5f10
mov dword [esp + 0x2fc], 0x6f65d0
mov dword [esp + 0x300], 0x6f5650
mov dword [esp + 0x304], ebx
mov dword [esp + 0x308], ebx
mov dword [esp + 0x30c], ebx
mov dword [esp + 0x310], ebx
mov dword [esp + 0x314], 0x4d454e44
mov dword [esp + 0x318], 0x6f5ec0
mov dword [esp + 0x31c], 0x6f62b0
mov dword [esp + 0x320], 0x6f2cc0
mov dword [esp + 0x324], ebx
mov dword [esp + 0x328], ebx
mov dword [esp + 0x32c], ebx
mov dword [esp + 0x330], ebx
mov dword [esp + 0x334], 0x4d484452
mov dword [esp + 0x338], 0x6f5c90
mov dword [esp + 0x33c], 0x6f6290
mov dword [esp + 0x340], 0x6f2af0
mov dword [esp + 0x344], ebx
mov dword [esp + 0x348], ebx
mov dword [esp + 0x34c], ebx
mov dword [esp + 0x350], ebx
mov dword [esp + 0x354], 0x4d4f5645
mov dword [esp + 0x358], 0x6f5e70
mov dword [esp + 0x35c], 0x6f6430
mov dword [esp + 0x360], 0x6f3cb0
mov dword [esp + 0x364], ebx
mov dword [esp + 0x368], ebx
mov dword [esp + 0x36c], ebx
mov dword [esp + 0x370], ebx
mov dword [esp + 0x374], 0x4f524452
mov dword [esp + 0x378], 0x6f5e20
mov dword [esp + 0x37c], 0x6f6690
mov dword [esp + 0x380], 0x6f55e0
mov dword [esp + 0x384], ebx
mov dword [esp + 0x388], ebx
mov dword [esp + 0x38c], ebx
mov dword [esp + 0x390], ebx
mov dword [esp + 0x394], 0x50415354
mov dword [esp + 0x398], 0x6f5f10
mov dword [esp + 0x39c], 0x6f6330
mov dword [esp + 0x3a0], 0x6f3580
mov dword [esp + 0x3a4], ebx
mov dword [esp + 0x3a8], ebx
mov dword [esp + 0x3ac], ebx
mov dword [esp + 0x3b0], ebx
mov dword [esp + 0x3b4], 0x504c5445
mov dword [esp + 0x3b8], 0x6f5ba0
mov dword [esp + 0x3bc], 0x6f6000
mov dword [esp + 0x3c0], 0x6f07a0
mov dword [esp + 0x3c4], ebx
mov dword [esp + 0x3c8], ebx
mov dword [esp + 0x3cc], ebx
mov dword [esp + 0x3d0], ebx
mov dword [esp + 0x3d4], 0x50504c54
mov dword [esp + 0x3d8], 0x6f5fb0
mov dword [esp + 0x3dc], 0x6f65f0
mov dword [esp + 0x3e0], 0x6f5110
mov dword [esp + 0x3e4], ebx
mov dword [esp + 0x3e8], ebx
mov dword [esp + 0x3ec], ebx
mov dword [esp + 0x3f0], ebx
mov dword [esp + 0x3f4], 0x50524f4d
mov dword [esp + 0x3f8], 0x6f5f60
mov dword [esp + 0x3fc], 0x6f6310
mov dword [esp + 0x400], 0x6f4f90
mov dword [esp + 0x404], ebx
mov dword [esp + 0x408], ebx
mov dword [esp + 0x40c], ebx
mov dword [esp + 0x410], ebx
mov dword [esp + 0x414], 0x53415645
mov dword [esp + 0x418], 0x6f5dd0
mov dword [esp + 0x41c], 0x6f6490
mov dword [esp + 0x420], 0x6f4150
mov dword [esp + 0x424], ebx
mov dword [esp + 0x428], ebx
mov dword [esp + 0x42c], ebx
mov dword [esp + 0x430], ebx
mov dword [esp + 0x434], 0x5345454b
mov dword [esp + 0x438], 0x6f5e20
mov dword [esp + 0x43c], 0x6f6510
mov dword [esp + 0x440], 0x6f4200
mov dword [esp + 0x444], ebx
mov dword [esp + 0x448], ebx
mov dword [esp + 0x44c], ebx
mov dword [esp + 0x450], ebx
mov dword [esp + 0x454], 0x53484f57
mov dword [esp + 0x458], 0x6f5e20
mov dword [esp + 0x45c], 0x6f6470
mov dword [esp + 0x460], 0x6f3e60
mov dword [esp + 0x464], ebx
mov dword [esp + 0x468], ebx
mov dword [esp + 0x46c], ebx
mov dword [esp + 0x470], ebx
mov dword [esp + 0x474], 0x5445524d
mov dword [esp + 0x478], 0x6f5dd0
mov dword [esp + 0x47c], 0x6f63b0
mov dword [esp + 0x480], 0x6f3f90
mov dword [esp + 0x484], ebx
mov dword [esp + 0x488], ebx
mov dword [esp + 0x48c], ebx
mov dword [esp + 0x490], ebx
mov dword [esp + 0x494], 0x624b4744
mov dword [esp + 0x498], 0x6f5dd0
mov dword [esp + 0x49c], 0x6f63b0
mov dword [esp + 0x4a0], 0x6f2460
mov dword [esp + 0x4a4], ebx
mov dword [esp + 0x4a8], ebx
mov dword [esp + 0x4ac], ebx
mov dword [esp + 0x4b0], ebx
mov dword [esp + 0x4b4], 0x6348524d
mov dword [esp + 0x4b8], 0x6f5ce0
mov dword [esp + 0x4bc], 0x6f6040
mov dword [esp + 0x4c0], 0x6f12f0
mov dword [esp + 0x4c4], ebx
mov dword [esp + 0x4c8], ebx
mov dword [esp + 0x4cc], ebx
mov dword [esp + 0x4d0], ebx
mov dword [esp + 0x4d4], 0x65585049
mov dword [esp + 0x4d8], 0x6f5dd0
mov dword [esp + 0x4dc], 0x6f6550
mov dword [esp + 0x4e0], 0x6f4340
mov dword [esp + 0x4e4], ebx
mov dword [esp + 0x4e8], ebx
mov dword [esp + 0x4ec], ebx
mov dword [esp + 0x4f0], ebx
mov dword [esp + 0x4f4], 0x66505249
mov dword [esp + 0x4f8], 0x6f5f60
mov dword [esp + 0x4fc], 0x6f6310
mov dword [esp + 0x500], 0x6f43b0
mov dword [esp + 0x504], ebx
mov dword [esp + 0x508], ebx
mov dword [esp + 0x50c], ebx
mov dword [esp + 0x510], ebx
mov dword [esp + 0x514], 0x67414d41
mov dword [esp + 0x518], 0x6f5e20
mov dword [esp + 0x51c], 0x6f6470
mov dword [esp + 0x520], 0x6f1110
mov dword [esp + 0x524], ebx
mov dword [esp + 0x528], ebx
mov dword [esp + 0x52c], ebx
mov dword [esp + 0x530], ebx
mov dword [esp + 0x534], 0x68495354
mov dword [esp + 0x538], 0x6f5c40
mov dword [esp + 0x53c], 0x6f6270
mov dword [esp + 0x540], 0x6f2a00
mov dword [esp + 0x544], ebx
mov dword [esp + 0x548], ebx
mov dword [esp + 0x54c], ebx
mov dword [esp + 0x550], ebx
mov dword [esp + 0x554], 0x69434350
mov dword [esp + 0x558], 0x6f5d80
mov dword [esp + 0x55c], 0x6f6060
mov dword [esp + 0x560], 0x6f1780
mov dword [esp + 0x564], ebx
mov dword [esp + 0x568], ebx
mov dword [esp + 0x56c], ebx
mov dword [esp + 0x570], ebx
mov dword [esp + 0x574], 0x69545874
mov dword [esp + 0x578], 0x6f5ce0
mov dword [esp + 0x57c], 0x6f6180
mov dword [esp + 0x580], 0x6f2050
mov dword [esp + 0x584], ebx
mov dword [esp + 0x588], ebx
mov dword [esp + 0x58c], ebx
mov dword [esp + 0x590], ebx
mov dword [esp + 0x594], 0x6e454544
mov dword [esp + 0x598], 0x6f5e20
mov dword [esp + 0x59c], 0x6f6510
mov dword [esp + 0x5a0], 0x6f4420
mov dword [esp + 0x5a4], ebx
mov dword [esp + 0x5a8], ebx
mov dword [esp + 0x5ac], ebx
mov dword [esp + 0x5b0], ebx
mov dword [esp + 0x5b4], 0x70444167
mov dword [esp + 0x5b8], 0x6f5e70
mov dword [esp + 0x5bc], 0x6f6430
mov dword [esp + 0x5c0], 0x6f48a0
mov dword [esp + 0x5c4], ebx
mov dword [esp + 0x5c8], ebx
mov dword [esp + 0x5cc], ebx
mov dword [esp + 0x5d0], ebx
mov dword [esp + 0x5d4], 0x70485973
mov dword [esp + 0x5d8], 0x6f5e70
mov dword [esp + 0x5dc], 0x6f6430
mov dword [esp + 0x5e0], 0x6f2720
mov dword [esp + 0x5e4], ebx
mov dword [esp + 0x5e8], ebx
mov dword [esp + 0x5ec], ebx
mov dword [esp + 0x5f0], ebx
mov dword [esp + 0x5f4], 0x73424954
mov dword [esp + 0x5f8], 0x6f5e20
mov dword [esp + 0x5fc], 0x6f6470
mov dword [esp + 0x600], 0x6f27c0
mov dword [esp + 0x604], ebx
mov dword [esp + 0x608], ebx
mov dword [esp + 0x60c], ebx
mov dword [esp + 0x610], ebx
mov dword [esp + 0x614], 0x73504c54
mov dword [esp + 0x618], 0x6f5d80
mov dword [esp + 0x61c], 0x6f6210
mov dword [esp + 0x620], 0x6f2900
mov dword [esp + 0x624], ebx
mov dword [esp + 0x628], ebx
mov dword [esp + 0x62c], ebx
mov dword [esp + 0x630], ebx
mov dword [esp + 0x634], 0x73524742
mov dword [esp + 0x638], 0x6f5f60
mov dword [esp + 0x63c], 0x6f6310
mov dword [esp + 0x640], 0x6f15c0
mov dword [esp + 0x644], ebx
mov dword [esp + 0x648], ebx
mov edi, dword [esp + 0x6d8]
mov dword [esp + 0x64c], ebx
mov dword [esp + 0x650], ebx
mov dword [esp + 0x654], 0x74455874
mov al, byte [edi + 0x158]
mov dword [esp + 0x658], 0x6f5e70
cmp al, bl
mov dword [esp + 0x65c], 0x6f60c0
mov dword [esp + 0x660], 0x6f1bf0
mov dword [esp + 0x664], ebx
mov dword [esp + 0x668], ebx
mov dword [esp + 0x66c], ebx
mov dword [esp + 0x670], ebx
mov dword [esp + 0x674], 0x74494d45
mov dword [esp + 0x678], 0x6f5e20
mov dword [esp + 0x67c], 0x6f6470
mov dword [esp + 0x680], 0x6f2a80
mov dword [esp + 0x684], ebx
mov dword [esp + 0x688], ebx
mov dword [esp + 0x68c], ebx
mov dword [esp + 0x690], ebx
mov dword [esp + 0x694], 0x74524e53
mov dword [esp + 0x698], 0x6f5bf0
mov dword [esp + 0x69c], 0x6f6020
mov dword [esp + 0x6a0], 0x6f0d00
mov dword [esp + 0x6a4], ebx
mov dword [esp + 0x6a8], ebx
mov dword [esp + 0x6ac], ebx
mov dword [esp + 0x6b0], ebx
mov dword [esp + 0x6b4], 0x7a545874
mov dword [esp + 0x6b8], 0x6f5f10
mov dword [esp + 0x6bc], 0x6f6120
mov dword [esp + 0x6c0], 0x6f1e00
mov dword [esp + 0x6c4], ebx
mov dword [esp + 0x6c8], ebx
mov dword [esp + 0x6cc], ebx
mov dword [esp + 0x6d0], ebx
je 0x6c29c0
cmp byte [edi + 0x1a0], bl
jne 0x6c29c0
mov byte [edi + 0x1e1], bl
mov ebp, dword [esp + 0x6dc]
push esi
push ebp
call fcn.006f02d0
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x6e8]
sub eax, 4
add esp, 4
add ebp, 4
mov dword [esp + 0x6e4], eax
mov dword [esp + 0x10], ebx
xor edx, edx
mov eax, 0xb
mov ecx, 0x34
mov esi, eax
shl esi, 5
mov esi, dword [esp + esi + 0x38]
cmp esi, dword [esp + 0x14]
jge 0x6c2a0d
lea edx, [eax + 1]
jmp 0x6c2a16
cmp esi, dword [esp + 0x14]
jle 0x6c2a21
lea ecx, [eax - 1]
lea eax, [ecx + edx]
sar eax, 1
cmp edx, ecx
jle 0x6c29f9
jmp 0x6c2a2c
shl eax, 5
lea esi, [esp + eax + 0x38]
cmp esi, ebx
jne 0x6c2a30
lea esi, [esp + 0x18]
mov edx, dword [edi + 0x110]
mov eax, dword [esp + 0x14]
inc edx
mov dword [edi + 0x10c], eax
mov dword [edi + 0x110], edx
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x6c2abf
mov edx, dword [esp + 0x6e4]
lea ecx, [esp + 0x10]
push ecx
push ebp
push edx
push esi
push edi
call eax
mov ebp, eax
mov eax, dword [esp + 0x24]
add esp, 0x14
cmp ebp, ebx
jne 0x6c2a83
cmp eax, ebx
je 0x6c2a91
cmp dword [esi], 0x40404040
jne 0x6c2a83
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x6c2a91
push eax
push edi
call fcn.006f5b10
add esp, 8
mov al, byte [edi + 0x11d]
pop esi
cmp al, bl
jne 0x6c2ac3
cmp byte [edi + 0x11e], bl
jne 0x6c2ac3
cmp byte [edi + 0x121], bl
jne 0x6c2ac3
push edi
call fcn.006c0d40
add esp, 4
pop edi
pop ebp
pop ebx
add esp, 0x6c8
ret
xor ebp, ebp
jmp 0x6c2a91
mov eax, ebp
pop edi
pop ebp
pop ebx
add esp, 0x6c8
ret