Function at 0xbc6cca
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0xc81b70
call fcn.00be12c8
sub esp, 0x564
push ebx
push esi
push edi
mov dword [ebp - 0x56c], ecx
mov al, byte [0xd80c88]
mov byte [ebp - 0x218], al
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x217]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xd80c88]
mov byte [ebp - 0x110], al
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x10f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x218]
push eax
call fcn.00bc6a95
pop ecx
push 0x104
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00be2d60
add esp, 0xc
push str.HShield
call fcn.00be1c90
pop ecx
mov dword [ebp - 0x558], eax
push dword [ebp - 0x558]
push str.HShield
lea eax, [ebp - 0x110]
push eax
call fcn.00be4453
add esp, 0xc
push 0x9c40
push 0x124f80
lea eax, [ebp - 0x110]
push eax
call fcn.00bd62be
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
je 0xbc6dc2
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x544], eax
mov dword [ebp - 0x548], 0xc94ca8
mov dword [ebp - 0x548], 0xc94ca4
push 0xd36db0
lea eax, [ebp - 0x548]
push eax
call fcn.00be12e7
push 0x104
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00be2d60
add esp, 0xc
push str.HShieldEHSvc.dll
call fcn.00be1c90
pop ecx
mov dword [ebp - 0x55c], eax
push dword [ebp - 0x55c]
push str.HShieldEHSvc.dll
lea eax, [ebp - 0x110]
push eax
call fcn.00be4453
add esp, 0xc
push 0x30c
push 0
lea eax, [ebp - 0x538]
push eax
call fcn.00be1770
add esp, 0xc
jmp 0xbc6e30
mov byte [ebp - 0x228], 0x32
mov byte [ebp - 0x227], 0x31
mov byte [ebp - 0x226], 0x38
mov byte [ebp - 0x225], 0x2e
mov byte [ebp - 0x224], 0x33
mov byte [ebp - 0x223], 0x30
mov byte [ebp - 0x222], 0x2e
mov byte [ebp - 0x221], 0x37
mov byte [ebp - 0x220], 0x39
mov byte [ebp - 0x21f], 0x2e
mov byte [ebp - 0x21e], 0x35
mov byte [ebp - 0x21d], 0x34
and byte [ebp - 0x21c], 0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x538]
push eax
call fcn.00be2bf0
pop ecx
pop ecx
and dword [ebp - 0x54c], 0
lea eax, [ebp - 0x54c]
mov dword [ebp - 0x570], eax
and dword [ebp - 4], 0
push 1
push 0x55
push str.WL_03d._d
push dword [ebp - 0x570]
call fcn.0044e655
add esp, 0x10
mov eax, dword [eax]
mov dword [ebp - 0x560], eax
push dword [ebp - 0x560]
lea eax, [ebp - 0x330]
push eax
call fcn.00be2bf0
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54c]
call fcn.00406a50
jmp 0xbc6f0b
lea eax, [ebp - 0x110]
push eax
sub esp, 0x30c
mov ecx, 0xc3
lea esi, [ebp - 0x538]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00bd4376
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x540], 0xaca3dbe
push 1
push dword [ebp - 0x540]
push str.7F8C0EE7B8836AE5A8D7D636
push 0x26d3
push 0xbc6b11
lea eax, [ebp - 0x110]
push eax
call fcn.00bd34a2
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x53c], 0
je 0xbc6f9f
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x554], 0xc94ca8
mov dword [ebp - 0x554], 0xc94ca0
push 0xd36da0
lea eax, [ebp - 0x554]
push eax
call fcn.00be12e7
mov eax, dword [ebp - 0x56c]
add eax, 0xc
mov dword [ebp - 0x568], eax
push 1
mov ecx, dword [ebp - 0x568]
call fcn.006afc2f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret