Function at 0x2557ee2
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2b8
mov eax, dword [0x6400104]
xor eax, esp
mov dword [esp + 0x2b4], eax
push ebx
push ebp
mov ebp, dword [esp + 0x2c4]
push esi
mov esi, ecx
push edi
lea ebx, [esi + 0x18]
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x2558d7f
push ebx
call fcn.0254b7a8
mov ecx, dword [esi + 0x14]
lea eax, [esp + 0x274]
xor edi, edi
push eax
mov dword [esp + 0x278], edi
call fcn.024d3d5b
mov esi, dword [esp + 0x274]
cmp dword [esi - 0xc], edi
jl 0x2558dae
movzx eax, word [esi]
push 0x33
pop ecx
cmp ax, cx
jne 0x2558d77
cmp dword [esi - 0xc], 1
jl 0x2558dae
movzx eax, word [esi + 2]
push 0x37
pop ecx
cmp ax, cx
jne 0x2558d77
push dword [ebx]
lea ecx, [esp + 0x274]
mov dword [esp + 0x274], edi
call fcn.024ae679
push 0x35
lea eax, [esp + 0x290]
push edi
push eax
call fcn.025acd10
mov eax, dword [esp + 0x27c]
lea ecx, [esp + 0x27c]
add esp, 0xc
push dword [eax - 0xc]
push dword [eax - 0xc]
call fcn.0247dc1b
push eax
lea ecx, [esp + 0x294]
call fcn.0254b421
push 0xffffffffffffffff
lea ecx, [esp + 0x274]
call fcn.02529975
mov eax, dword [esp + 0x290]
push dword [eax + 0xc]
call fcn.0258532a
pop ecx
push 0x33
mov dword [esp + 0x27c], eax
xor edx, edx
pop eax
mov dword [esp + 0x26c], edx
mov dword [esp + 0x10], 0x67637a45
mov dword [esp + 0x14], 0x6973784e
mov dword [esp + 0x18], 0x674d794f
mov dword [esp + 0x1c], 0x4b63794b
mov dword [esp + 0x20], 0x6a4d6a4a
mov dword [esp + 0x24], 0x2f55444b
mov dword [esp + 0x28], 0x2f74474b
mov byte [esp + 0x2c], 0x4f
mov byte [esp + 0x2d], al
mov dword [esp + 0x2e], 0x4464436b
mov dword [esp + 0x32], 0x58473159
mov dword [esp + 0x36], 0x6847566f
mov dword [esp + 0x3a], 0x7a506a41
mov dword [esp + 0x3e], 0x514b7334
mov dword [esp + 0x42], 0x32484c41
mov dword [esp + 0x46], 0x6a4f3064
mov dword [esp + 0x4a], 0x574e3073
mov dword [esp + 0x4e], 0x47453459
mov word [esp + 0x52], 0x3777
mov byte [esp + 0x54], 0x65
mov byte [esp + 0x55], al
mov dword [esp + 0x56], 0x5841746f
mov dword [esp + 0x5a], 0x52663838
mov dword [esp + 0x5e], 0x67447a51
mov dword [esp + 0x62], 0x67443978
mov dword [esp + 0x66], 0x6950756b
mov word [esp + 0x6a], 0x6e67
mov byte [esp + 0x6c], 0x42
mov byte [esp + 0x6d], al
mov dword [esp + 0x6e], 0x774a476b
mov dword [esp + 0x72], 0x534b4d55
mov dword [esp + 0x76], 0x54455577
mov dword [esp + 0x7a], 0x6e4d7945
mov dword [esp + 0x7e], 0x774f776b
mov dword [esp + 0x82], 0x41417577
mov dword [esp + 0x86], 0x68626d67
mov dword [esp + 0x8a], 0x524f396f
mov dword [esp + 0x8e], 0x414a5849
mov dword [esp + 0x92], 0x7747394d
mov dword [esp + 0x96], 0x67423841
mov dword [esp + 0x9a], 0x684b6842
mov byte [esp + 0x9e], 0x56
mov byte [esp + 0x9f], al
mov dword [esp + 0xa0], 0x3539544a
mov dword [esp + 0xa4], 0x63306a4b
mov dword [esp + 0xa8], 0x74415862
mov dword [esp + 0xac], 0x3649484f
mov dword [esp + 0xb0], 0x67455243
mov dword [esp + 0xb4], 0x64516848
mov dword [esp + 0xb8], 0x464d4243
mov dword [esp + 0xbc], 0x75637946
mov dword [esp + 0xc0], 0x79415163
mov dword [esp + 0xc4], 0x49304463
mov dword [esp + 0xc8], 0x3673444d
mov dword [esp + 0xcc], 0x5930414f
mov dword [esp + 0xd0], 0x6863534d
mov dword [esp + 0xd4], 0x67686a65
mov dword [esp + 0xd8], 0x30515247
mov dword [esp + 0xdc], 0x4b304441
mov dword [esp + 0xe0], 0x2b56694f
mov dword [esp + 0xe4], 0x30557848
mov dword [esp + 0xe8], 0x52676a42
mov dword [esp + 0xec], 0x4c6f6a42
mov dword [esp + 0xf0], 0x64303261
mov dword [esp + 0xf4], 0x64384141
mov byte [esp + 0xf8], 0x4d
mov byte [esp + 0xf9], al
mov dword [esp + 0xfa], 0x534d304a
mov dword [esp + 0xfe], 0x6a452b34
mov dword [esp + 0x102], 0x51463055
mov dword [esp + 0x106], 0x44455851
mov dword [esp + 0x10a], 0x42666959
mov dword [esp + 0x10e], 0x54414b73
mov dword [esp + 0x112], 0x524f7751
mov dword [esp + 0x116], 0x7a4a2b51
mov dword [esp + 0x11a], 0x41425345
mov dword [esp + 0x11e], 0x41444159
mov dword [esp + 0x122], 0x79657241
mov dword [esp + 0x126], 0x67456438
mov dword [esp + 0x12a], 0x4448696f
mov dword [esp + 0x12e], 0x44502b4d
mov dword [esp + 0x132], 0x444a486b
mov dword [esp + 0x136], 0x69475073
mov dword [esp + 0x13a], 0x32633442
mov dword [esp + 0x13e], 0x52643155
mov dword [esp + 0x142], 0x6d416673
mov dword [esp + 0x146], 0x79504e59
mov dword [esp + 0x14a], 0x77417a55
mov dword [esp + 0x14e], 0x6962716b
mov dword [esp + 0x152], 0x68454c45
mov dword [esp + 0x156], 0x41415455
mov dword [esp + 0x15a], 0x4450634d
mov dword [esp + 0x15e], 0x67456173
mov dword [esp + 0x162], 0x41474541
mov dword [esp + 0x166], 0x42437855
mov dword [esp + 0x16a], 0x43667051
mov dword [esp + 0x16e], 0x4147566f
mov dword [esp + 0x172], 0x524f5355
mov dword [esp + 0x176], 0x79466d4d
mov dword [esp + 0x17a], 0x414a4b73
mov dword [esp + 0x17e], 0x51487438
mov dword [esp + 0x182], 0x42664f73
mov dword [esp + 0x186], 0x58453245
mov dword [esp + 0x18a], 0x784f7967
mov dword [esp + 0x18e], 0x514d7052
mov dword [esp + 0x192], 0x51476134
mov dword [esp + 0x196], 0x51506f42
mov dword [esp + 0x19a], 0x5150746b
mov dword [esp + 0x19e], 0x444b5138
mov dword [esp + 0x1a2], 0x52617839
mov dword [esp + 0x1a6], 0x77414f49
mov dword [esp + 0x1aa], 0x52476d63
mov dword [esp + 0x1ae], 0x6749386b
mov dword [esp + 0x1b2], 0x44436149
mov dword [esp + 0x1b6], 0x32413134
mov dword [esp + 0x1ba], 0x414f2f6c
mov dword [esp + 0x1be], 0x32506345
mov dword [esp + 0x1c2], 0x78435373
mov dword [esp + 0x1c6], 0x78434e34
mov dword [esp + 0x1ca], 0x694a696f
mov dword [esp + 0x1ce], 0x444c6c59
mov dword [esp + 0x1d2], 0x52495277
mov dword [esp + 0x1d6], 0x67416764
mov dword [esp + 0x1da], 0x684a6673
mov dword [esp + 0x1de], 0x68433963
mov dword [esp + 0x1e2], 0x41414a55
mov dword [esp + 0x1e6], 0x6a4c5651
mov dword [esp + 0x1ea], 0x78447834
mov dword [esp + 0x1ee], 0x44634134
mov dword [esp + 0x1f2], 0x6a486949
mov dword [esp + 0x1f6], 0x67447964
mov dword [esp + 0x1fa], 0x69494c34
push edx
sub esp, 0xc
mov byte [esp + 0x221], al
mov ecx, esp
mov byte [esp + 0x239], al
mov byte [esp + 0x28c], dl
lea eax, [esp + 0x27a]
mov dword [esp + 0x20e], 0x544d4c30
push dword [esp + 0x28c]
mov dword [esp + 0x216], 0x42492b49
push eax
mov dword [esp + 0x21e], 0x44464c77
lea eax, [esp + 0x28]
mov dword [esp + 0x222], 0x77654a73
mov word [esp + 0x226], 0x514d
mov byte [esp + 0x228], 0x4b
mov dword [esp + 0x22a], 0x67436638
mov dword [esp + 0x22e], 0x53425a51
mov dword [esp + 0x232], 0x7747686b
mov dword [esp + 0x236], 0x78663152
mov dword [esp + 0x23a], 0x674b764d
mov word [esp + 0x23e], 0x7a45
mov byte [esp + 0x240], 0x4a
mov dword [esp + 0x242], 0x67444659
mov dword [esp + 0x246], 0x43426a51
mov dword [esp + 0x24a], 0x78424377
mov dword [esp + 0x24e], 0x69425a51
mov dword [esp + 0x252], 0x684b4173
mov dword [esp + 0x256], 0x6a4d6e70
mov dword [esp + 0x25a], 0x51594a63
mov dword [esp + 0x25e], 0x54434634
mov dword [esp + 0x262], 0x6a4b734d
mov dword [esp + 0x266], 0x774d5849
mov dword [esp + 0x26a], 0x43626778
mov dword [esp + 0x26e], 0x424c6451
mov dword [esp + 0x272], 0x42446a63
mov dword [esp + 0x276], 0x78497168
mov dword [esp + 0x27a], 0x41414f49
mov dword [esp + 0x27e], 0x51724241
push eax
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
call fcn.024799be
lea eax, [esp + 0x290]
push eax
call fcn.0254ecb5
add esp, 0x10
mov ecx, eax
call fcn.02486d16
push eax
lea ecx, [esp + 0x270]
call fcn.024ae5ff
lea ecx, [esp + 0x280]
call fcn.0247fde7
mov eax, dword [esp + 0x26c]
lea ecx, [esp + 0x26c]
mov edi, dword [eax - 0xc]
push edi
call fcn.0247dc1b
push dword [esp + 0x278]
lea ecx, [esp + 0x290]
push edi
push eax
call fcn.0254ea50
lea ecx, [esp + 0x26c]
push 0xffffffffffffffff
test eax, eax
jne 0x2558d30
call fcn.02529975
mov ecx, ebx
call fcn.0247d745
mov eax, dword [esp + 0x290]
xor edx, edx
mov edi, edx
cmp dword [eax + 0xc], edx
jbe 0x2558d1e
mov esi, dword [esp + 0x278]
push 0x33
pop eax
mov word [esp + 0x10], 0x6e5a
mov byte [esp + 0x12], 0x56
mov byte [esp + 0x13], al
mov dword [esp + 0x14], 0x5773524b
mov dword [esp + 0x18], 0x4373694c
mov dword [esp + 0x1c], 0x44775249
mov dword [esp + 0x20], 0x53676949
mov dword [esp + 0x24], 0x6749794d
mov dword [esp + 0x28], 0x53496949
mov dword [esp + 0x2c], 0x74777747
mov dword [esp + 0x30], 0x566f434b
mov dword [esp + 0x34], 0x72395345
mov dword [esp + 0x38], 0x3949684b
mov dword [esp + 0x3c], 0x4f776844
mov dword [esp + 0x40], 0x65516849
mov word [esp + 0x44], 0x784f
mov byte [esp + 0x46], 0x41
mov byte [esp + 0x47], al
mov dword [esp + 0x48], 0x6955694d
mov dword [esp + 0x4c], 0x76455747
mov dword [esp + 0x50], 0x786c3242
mov dword [esp + 0x54], 0x7459674c
mov dword [esp + 0x58], 0x68634344
mov dword [esp + 0x5c], 0x6d396e4f
mov dword [esp + 0x60], 0x30686945
mov dword [esp + 0x64], 0x68556950
mov dword [esp + 0x68], 0x77415466
mov dword [esp + 0x6c], 0x31676844
mov dword [esp + 0x70], 0x4849684c
mov dword [esp + 0x74], 0x76465163
mov dword [esp + 0x78], 0x2f6c794e
mov byte [esp + 0x7c], 0x44
mov byte [esp + 0x7d], al
mov dword [esp + 0x7e], 0x7a457230
mov word [esp + 0x82], 0x7555
mov byte [esp + 0x84], 0x48
mov byte [esp + 0x85], al
mov dword [esp + 0x86], 0x414b3173
mov dword [esp + 0x8a], 0x524e3277
mov dword [esp + 0x8e], 0x41497763
mov dword [esp + 0x92], 0x69453768
mov word [esp + 0x96], 0x4430
mov byte [esp + 0x98], 0x43
mov byte [esp + 0x99], al
mov dword [esp + 0x9a], 0x4747326b
mov dword [esp + 0x9e], 0x77507834
mov dword [esp + 0xa2], 0x514d3668
mov dword [esp + 0xa6], 0x774d6767
mov word [esp + 0xaa], 0x5155
mov byte [esp + 0xac], 0x4a
mov byte [esp + 0xad], al
mov dword [esp + 0xae], 0x42646130
mov dword [esp + 0xb2], 0x7a595551
mov dword [esp + 0xb6], 0x78646738
mov dword [esp + 0xba], 0x6a4b486b
mov dword [esp + 0xbe], 0x43647656
mov dword [esp + 0xc2], 0x514d6d70
mov dword [esp + 0xc6], 0x6a43724d
mov dword [esp + 0xca], 0x434b7230
mov dword [esp + 0xce], 0x78506f38
mov dword [esp + 0xd2], 0x68656b49
mov dword [esp + 0xd6], 0x78656b38
mov dword [esp + 0xda], 0x774a6a51
mov dword [esp + 0xde], 0x51475045
mov dword [esp + 0xe2], 0x41666949
mov dword [esp + 0xe6], 0x67495130
mov dword [esp + 0xea], 0x6d4e6b35
mov dword [esp + 0xee], 0x434b7435
mov dword [esp + 0xf2], 0x44664234
mov word [esp + 0xf6], 0x5467
mov byte [esp + 0xf8], 0x46
mov byte [esp + 0xf9], al
mov dword [esp + 0xfa], 0x52455038
mov dword [esp + 0xfe], 0x42496731
mov dword [esp + 0x102], 0x53476f51
mov dword [esp + 0x106], 0x78434b59
mov dword [esp + 0x10a], 0x51666673
mov dword [esp + 0x10e], 0x44496f74
mov dword [esp + 0x112], 0x434e3645
mov byte [esp + 0x14d], al
mov byte [esp + 0x1cf], al
movzx eax, byte [edi + esi]
push eax
push edx
sub esp, 0xc
mov byte [esp + 0x290], dl
mov ecx, esp
mov dword [esp + 0x12a], 0x7a614e34
mov dword [esp + 0x12e], 0x7848636f
lea eax, [esp + 0x22b]
mov dword [esp + 0x132], 0x51487977
push dword [esp + 0x290]
mov dword [esp + 0x13a], 0x67414634
mov dword [esp + 0x13e], 0x534f6c5a
mov dword [esp + 0x142], 0x67485251
mov dword [esp + 0x146], 0x79427a49
mov dword [esp + 0x14a], 0x784a4f49
mov dword [esp + 0x14e], 0x77455230
mov dword [esp + 0x152], 0x434c7456
mov dword [esp + 0x156], 0x774d7164
mov dword [esp + 0x15a], 0x52666573
mov dword [esp + 0x15e], 0x444d4e73
mov word [esp + 0x162], 0x7663
mov byte [esp + 0x164], 0x42
mov dword [esp + 0x166], 0x79475767
mov dword [esp + 0x16a], 0x68446b45
mov dword [esp + 0x16e], 0x69654655
mov dword [esp + 0x172], 0x7a506c41
mov dword [esp + 0x176], 0x52467449
mov dword [esp + 0x17a], 0x53653051
mov dword [esp + 0x17e], 0x7a427178
mov dword [esp + 0x182], 0x68427749
mov dword [esp + 0x186], 0x7762394d
mov dword [esp + 0x18a], 0x684b2f68
mov dword [esp + 0x18e], 0x53497173
mov dword [esp + 0x192], 0x77425859
mov dword [esp + 0x196], 0x79436d51
mov dword [esp + 0x19a], 0x54657573
mov dword [esp + 0x19e], 0x794a7338
mov dword [esp + 0x1a2], 0x6742426f
mov dword [esp + 0x1a6], 0x42466939
mov dword [esp + 0x1aa], 0x6a63626b
mov dword [esp + 0x1ae], 0x69476938
mov dword [esp + 0x1b2], 0x544c2f51
mov dword [esp + 0x1b6], 0x67446b6b
mov dword [esp + 0x1ba], 0x54437a46
mov dword [esp + 0x1be], 0x52433246
mov dword [esp + 0x1c2], 0x42657839
mov dword [esp + 0x1c6], 0x544f7434
mov dword [esp + 0x1ca], 0x674b3549
mov dword [esp + 0x1ce], 0x5141326b
mov dword [esp + 0x1d2], 0x444b6667
mov dword [esp + 0x1d6], 0x524c2f34
mov dword [esp + 0x1da], 0x784a3139
mov dword [esp + 0x1de], 0x434c6b6b
mov dword [esp + 0x1e2], 0x6842634d
mov byte [esp + 0x1e6], 0x74
mov dword [esp + 0x1e8], 0x41556841
mov dword [esp + 0x1ec], 0x79306a4b
mov dword [esp + 0x1f0], 0x41637747
mov dword [esp + 0x1f4], 0x3749694d
mov dword [esp + 0x1f8], 0x6a306848
mov dword [esp + 0x1fc], 0x734a4843
mov dword [esp + 0x200], 0x78417949
mov dword [esp + 0x204], 0x4659674b
mov dword [esp + 0x208], 0x426b694b
mov dword [esp + 0x20c], 0x43414148
mov dword [esp + 0x210], 0x5a73514f
mov dword [esp + 0x214], 0x3445674b
mov dword [esp + 0x218], 0x7763514a
mov dword [esp + 0x21c], 0x6449474e
mov dword [esp + 0x220], 0x36467845
mov dword [esp + 0x224], 0x796b7850
mov dword [esp + 0x228], 0x41415148
mov word [esp + 0x22c], 0x5841
mov byte [esp + 0x22e], 0x30
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.024799be
lea eax, [esp + 0x294]
push eax
call fcn.0254ef1e
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
push ebx
call fcn.024b50cc
add esp, 0xc
lea ecx, [esp + 0x280]
call fcn.0247fe92
mov eax, dword [esp + 0x290]
inc edi
push 0
pop edx
cmp edi, dword [eax + 0xc]
jb 0x25586f4
mov esi, dword [esp + 0x274]
mov ecx, ebx
call fcn.0252838c
push 0x2d
mov ecx, ebx
call fcn.02565694
jmp 0x2558d35
call fcn.02529975
push dword [esp + 0x278]
call fcn.02585333
pop ecx
mov ecx, dword [esp + 0x26c]
lea ecx, [ecx - 0x10]
call fcn.0247de5b
lea ecx, [esp + 0x28c]
mov dword [esp + 0x28c], 0x4405ac8
call fcn.0254b4ca
mov ecx, dword [esp + 0x270]
lea ecx, [ecx - 0x10]
call fcn.0247de5b
lea ecx, [esi - 0x10]
call fcn.0247de5b
mov ecx, dword [ebx]
sub ecx, 0x10
push ecx
call fcn.024b7c0a
pop ecx
mov ecx, dword [esp + 0x2c4]
add eax, 0x10
pop edi
mov dword [ebp], eax
mov eax, ebp
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.02585cf8
add esp, 0x2b8
ret 4
push 0x80070057
call fcn.0247d08e
int3