Function at 0x6a286a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
rol ecx, 0
js 0x6a2880
pushf
xor ecx, dword [esp]
xor ecx, dword [esp]
cld
lea edx, [edx + 0x4b8e]
lea edx, [edx - 0x4b8e]
rol eax, 0x12
rol eax, 0xe
popf
lea edi, [edi]
jg 0x6a287b
je 0x6a287d
jns 0x6a2880
lcall 0x458d, 0x6a0e6a
in al, 0x50
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0069ebcf
add esp, 0xc
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
je 0x6a28b5
pushf
call 0x6a28a1
add esp, 4
sub esp, 0
nop
or esp, 0
popf
jnp 0x6a28af
jae 0x6a28b1
nop
jne 0x6a28b5
mov esp, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
sub ebx, 0
xor edx, dword [esp]
xor edx, dword [esp]
jno 0x6a2912
pushf
ror esp, 0
cmp eax, 0x1fdf
dec esi
inc esi
shl esp, 0
popf
xchg esp, esp
jns 0x6a290d
jnp 0x6a290f
jo 0x6a2912
mov edi, 0x80e44d8a
jmp 0xe4b7b11c
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
lea edx, [edx + 0x2506]
lea edx, [edx - 0x2506]
jnp 0x6a29a5
pushf
clc
call 0x6a2999
add esp, 4
popf
jg 0x6a29a0
jmp 0x6a29a2
jp 0x6a29a5
mov ecx, 0x5a783d83
imul eax, dword [eax], 0xc1347400
ret
cmp dword [0x695a78], 0
je 0x6a29e2
rol ebx, 0x18
ror ebx, 0x18
cmp eax, dword [esp + 0xc]
ror esp, 0
jo 0x6a29d0
pushf
sub esp, 0
inc ecx
dec ecx
cmp eax, 0x1149
popf
jg 0x6a29cd
jno 0x6a29d0
or dword [ebp - 0x5ead1bab], 0x695a78
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x695a78]
push eax
call fcn.006a4075
mov dword [ebp - 0xc], eax
call 0x6a29e7
add esp, 4
jl 0x6a29f7
js 0x6a29ee
jmp 0x6a29f0
xchg ebx, ebx
jge 0x6a29f7
mov esi, 0xe6ae19c
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0069ebcf
add esp, 0xc
xchg edi, edi
xchg esp, esp
jbe 0x6a2a1b
pushf
add eax, 0
js 0x6a2a14
popf
jne 0x6a2a18
ja 0x6a2a1b
xor eax, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x6a2a4f
jb 0x6a2a23
call 0x6a2a28
add esp, 4
cmp ecx, ebx
jg 0x6a2a43
pushf
jp 0x6a2a33
add esi, dword [esp]
sub esi, dword [esp]
sub esp, 0
popf
jle 0x6a2a40
jle 0x6a2a43
lcall 0x65e8, 0x52f4558b
mov dword [eax], eax
add byte [ebx - 0x1b3efb3c], al
add cl, al
out dx, eax
add byte [ebx], bh
mov edx, dword [ebp - 0xc]
push edx
call fcn.006ab3b1
add esp, 4
shl esp, 0
shr edi, 0
jnp 0x6a2a57
jne 0x6a2a6a
pushf
test dword [esp + 8], edx
popf
xchg esi, edi
xchg esi, edi
xchg ecx, eax
xchg ecx, eax
je 0x6a2a6a
mov esp, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4