Function at 0x5b6a39
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x64
mov eax, 0x6d9781
call fcn.00648b1c
mov ebx, ecx
mov dword [ebp - 0x10], ebx
lea ecx, [ebx + 0x18]
call fcn.005b640d
call fcn.00515e26
push eax
lea ecx, [ebx + 0xa84]
call fcn.00515c3a
call fcn.00515e26
push eax
lea ecx, [ebx + 0xa88]
call fcn.00515c3a
push 0x18
xor esi, esi
push esi
push ebx
call fcn.0066f220
add esp, 0xc
lea eax, [ebx + 0xa60]
push 0x20
push esi
push eax
call fcn.0066f220
add esp, 0xc
mov dword [ebx + 0xa80], esi
mov dword [ebx + 0xa90], esi
mov dword [ebx + 0xa94], esi
mov dword [ebx + 0xa98], 1
lea ecx, [ebx + 0xaa0]
mov dword [ebp - 4], esi
call fcn.005fb141
mov byte [ebp - 4], 1
lea edi, [ebx + 0xb44]
call fcn.00515e26
push eax
mov ecx, edi
call fcn.00515c3a
lea esi, [ebx + 0xb48]
mov byte [ebp - 4], 2
mov dword [ebp - 0x18], esi
call fcn.00515e26
push eax
mov ecx, esi
call fcn.00515c3a
mov byte [ebp - 4], 3
call fcn.00515e26
push eax
lea ecx, [ebx + 0xb4c]
call fcn.00515c3a
mov byte [ebp - 4], 4
mov esi, ebx
call fcn.00515e26
push eax
lea ecx, [esi + 0xb50]
call fcn.00515c3a
mov byte [ebp - 4], 5
call fcn.00515e26
push eax
lea ecx, [esi + 0xb54]
call fcn.00515c3a
mov byte [ebp - 4], 6
call fcn.00515e26
push eax
lea ecx, [esi + 0xb5c]
call fcn.00515c3a
mov byte [ebp - 4], 7
call fcn.00515e26
push eax
lea ecx, [esi + 0xb60]
call fcn.00515c3a
mov byte [ebp - 4], 8
call fcn.00515e26
push eax
lea ecx, [esi + 0xb64]
call fcn.00515c3a
lea eax, [esi + 0xb68]
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov edx, dword [ebp + 8]
mov byte [ebp - 4], 0xa
mov dword [esi + 0xb40], ecx
mov byte [esi + 0xb3c], cl
lea ecx, [ebp - 0x70]
push str.DeviceID
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
push ecx
mov ecx, eax
call fcn.006c22d9
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.006c2344
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x70]
push 0x760434
mov edx, edi
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd
push ecx
mov ecx, eax
call fcn.006c22d9
push eax
lea ecx, [esi + 0xb48]
mov byte [ebp - 4], 0xe
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.006c2344
push str.InterfaceType
mov edx, edi
lea ecx, [ebp - 0x70]
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.006c22d9
push eax
lea ecx, [ebx + 0xb4c]
mov byte [ebp - 4], 0x10
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.006c2344
push str.MediaType
mov edx, edi
lea ecx, [ebp - 0x70]
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
push ecx
mov ecx, eax
call fcn.006c22d9
push eax
lea ecx, [esi + 0xb50]
mov byte [ebp - 4], 0x12
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.006c2344
push str.SystemName
mov edx, edi
lea ecx, [ebp - 0x70]
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x13
push ecx
mov ecx, eax
call fcn.006c22d9
push eax
lea ecx, [esi + 0xb54]
mov byte [ebp - 4], 0x14
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.006c2344
push str.Manufacturer
mov edx, edi
lea ecx, [ebp - 0x70]
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
push ecx
mov ecx, eax
call fcn.006c22d9
lea ebx, [esi + 0xb5c]
mov byte [ebp - 4], 0x16
push eax
mov ecx, ebx
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.006c2344
push str.Caption
mov edx, edi
lea ecx, [ebp - 0x70]
call fcn.005a39cf
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x17
push ecx
mov ecx, eax
call fcn.006c22d9
add esi, 0xb60
mov byte [ebp - 4], 0x18
push eax
mov ecx, esi
call fcn.005154cf
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x70]
call fcn.006c2344
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x40]
push str.Index
mov byte [ebp - 4], 0x19
call fcn.005a3652
pop ecx
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1a
call fcn.005b114b
mov ecx, eax
call fcn.005a3a10
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x19
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call edi
mov ecx, dword [ebp - 0x10]
mov al, byte [ebp - 0x28]
mov byte [ecx + 0xb58], al
lea ecx, [ecx + 0xb48]
call fcn.005a2ea9
test al, al
je 0x5b6dfb
mov ecx, 0x741504
call fcn.0051545a
mov ecx, dword [ebp - 0x18]
push eax
push 0x741504
call fcn.00515b15
mov ecx, esi
call fcn.005a2ea9
test al, al
je 0x5b6e1d
mov ecx, 0x741504
call fcn.0051545a
push eax
push 0x741504
mov ecx, esi
call fcn.00515b15
mov ecx, ebx
call fcn.005a2ea9
test al, al
jne 0x5b6e33
mov ecx, ebx
call fcn.005a2ec5
test al, al
je 0x5b6e48
mov esi, 0x741504
mov ecx, esi
call fcn.0051545a
push eax
push esi
mov ecx, ebx
call fcn.00515b15
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x40]
push str.Capabilities
call fcn.005a3652
pop ecx
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1b
call fcn.005b114b
mov ecx, eax
call fcn.005a39fd
mov bl, al
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x40]
push eax
call edi
test bl, bl
je 0x5b6e96
sub esp, 0x10
lea eax, [ebp - 0x30]
mov ecx, esp
push eax
call fcn.005a44b1
mov ecx, dword [ebp - 0x1c]
call fcn.005a3a6e
add esp, 0x10
lea eax, [ebp - 0x30]
push eax
call edi
mov eax, dword [ebp - 0x10]
call fcn.00648ae5
ret 8