Function at 0x449f3b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x2c
mov eax, 0x5babf8
call fcn.00580b4b
push 0x6d7624
mov dword [ebp - 0x20], 0x6d75f0
call fcn.0044e552
xor ebx, ebx
mov dword [ebp - 4], ebx
push ebx
mov esi, 0x6d7654
push 1
mov dword [ebp - 0x1c], esi
call fcn.0040eabb
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x449f81
mov dword [eax], esi
jmp 0x449f83
xor eax, eax
mov byte [ebp - 4], bl
mov dword [0x6d7654], eax
mov byte [ebp - 4], 6
call fcn.00450200
mov dword [0x6d766c], eax
mov byte [eax + 0x49], 1
mov eax, dword [0x6d766c]
mov dword [eax + 4], eax
mov eax, dword [0x6d766c]
mov dword [eax], eax
mov eax, dword [0x6d766c]
mov dword [eax + 8], eax
mov dword [0x6d7670], ebx
mov byte [ebp - 4], 8
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x6d7674
call esi
mov byte [ebp - 4], 9
push 0x6d768c
call esi
mov byte [ebp - 4], 0xa
push ebx
mov edi, 0x6d76a4
push 1
mov dword [ebp - 0x1c], edi
call fcn.0040eabb
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb
cmp eax, ebx
je 0x449ffe
mov dword [eax], edi
jmp 0x44a000
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [0x6d76a4], eax
mov byte [ebp - 4], 0x10
call fcn.0045058a
mov dword [0x6d76bc], eax
mov byte [eax + 0x19], 1
mov eax, dword [0x6d76bc]
mov dword [eax + 4], eax
mov eax, dword [0x6d76bc]
mov dword [eax], eax
mov eax, dword [0x6d76bc]
mov dword [eax + 8], eax
mov dword [0x6d76c0], ebx
mov byte [ebp - 4], 0x12
push 0x6d76c4
call esi
mov byte [ebp - 4], 0x13
push 0x6d76dc
call fcn.0043e33f
mov byte [ebp - 4], 0x14
push 0x6d76fc
call esi
mov byte [ebp - 4], 0x15
push 0x6d7714
call fcn.0043e33f
mov byte [ebp - 4], 0x16
push 0x6d7734
call esi
mov byte [ebp - 4], 0x17
push 0x6d774c
call fcn.0043e33f
mov byte [ebp - 4], 0x18
push 0x6d776c
call esi
mov byte [ebp - 4], 0x19
push ebx
mov edi, 0x6d7784
push 1
mov dword [ebp - 0x1c], edi
call fcn.0040eabb
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1a
cmp eax, ebx
je 0x44a0b6
mov dword [eax], edi
jmp 0x44a0b8
xor eax, eax
mov byte [ebp - 4], 0x19
mov dword [0x6d7784], eax
mov byte [ebp - 4], 0x1f
call fcn.0045058a
mov dword [0x6d779c], eax
mov byte [eax + 0x19], 1
mov eax, dword [0x6d779c]
mov dword [eax + 4], eax
mov eax, dword [0x6d779c]
mov dword [eax], eax
mov eax, dword [0x6d779c]
mov dword [eax + 8], eax
mov dword [0x6d77a0], ebx
mov byte [ebp - 4], 0x21
mov edi, 0x6d77a4
push edi
call fcn.0040f7de
mov byte [ebp - 4], 0x22
push 0x6d763c
call esi
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x6d75f0], eax
push 0x67a418
lea eax, [ebp - 0x10]
push eax
call fcn.0040f884
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x1c]
push eax
call fcn.0046f4e0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x18]
push ecx
mov esi, eax
call fcn.004136c3
mov byte [ebp - 4], 0x25
push dword [eax]
lea eax, [ebp - 0x14]
push eax
call fcn.00470110
add esp, 0x14
mov byte [ebp - 4], 0x26
push dword [eax]
mov ecx, edi
call fcn.004100b3
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x14]
call fcn.0040842d
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x18]
call fcn.0040856e
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1c]
call fcn.0040856e
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x10]
call fcn.0040856e
lea eax, [ebp - 0x38]
push eax
push edi
call fcn.004131df
mov byte [ebp - 4], 0x27
mov esi, dword [ebp - 0x2c]
cmp esi, dword [ebp - 0x28]
jbe 0x44a1b2
call fcn.005741fa
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x2c], eax
jbe 0x44a1c5
call fcn.005741fa
cmp edi, ebx
je 0x44a1ce
cmp edi, dword [ebp - 0x38]
je 0x44a1d3
call fcn.005741fa
cmp esi, dword [ebp - 0x1c]
je 0x44a25d
cmp edi, ebx
jne 0x44a255
call fcn.005741fa
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x44a1f1
call fcn.005741fa
push dword [esi + 8]
lea eax, [ebp - 0x14]
push eax
call fcn.00470250
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004716a0
add esp, 0x10
mov byte [ebp - 4], 0x29
push eax
push 0x6d6948
call fcn.0043e372
mov byte [eax], 1
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x18]
call fcn.0040856e
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x14]
call fcn.0040856e
cmp edi, ebx
jne 0x44a259
call fcn.005741fa
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x44a24d
call fcn.005741fa
add esi, 0x10
jmp 0x44a1b5
mov eax, dword [edi]
jmp 0x44a1e7
mov eax, dword [edi]
jmp 0x44a243
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x67a424
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x27
call fcn.0042c8fe
push 1
push ecx
mov dword [0x6c0400], eax
mov eax, esp
mov dword [ebp - 0x1c], esp
push str.TTEnabled
push eax
call fcn.0040852d
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x27
call fcn.0042c8fe
mov dword [0x6c0404], eax
call fcn.00449a2f
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x38]
push eax
call fcn.004139b8
or dword [ebp - 4], 0xffffffff
mov eax, 0x6d75f0
call fcn.00580c23
ret