Function at 0x6a36c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x36
push 0
push 0
dec ecx
jne 0x6a36cd
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov ebx, ecx
mov byte [ebp - 9], dl
mov edi, eax
xor eax, eax
push ebp
push 0x6a4026
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
call fcn.006a14f0
mov eax, dword [ebp + 8]
mov edx, edi
call fcn.00409ef0
mov eax, dword [ebp + 8]
mov byte [eax + 4], 3
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov esi, eax
lea eax, [ebp - 0x14]
mov ecx, edi
mov edx, 0x6a4044
call fcn.0040a8a8
mov edx, dword [ebp - 0x14]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea ecx, [ebp - 0x1c]
xor edx, edx
mov eax, ebx
call fcn.006a3238
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, 0x6a405c
call fcn.0040a8a8
mov edx, dword [ebp - 0x18]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov ecx, dword [0x7c7a6c]
mov ecx, dword [ecx]
lea eax, [ebp - 0x20]
mov edx, 0x6a4080
call fcn.0040a8a8
mov edx, dword [ebp - 0x20]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov ecx, dword [0x7c81e8]
mov ecx, dword [ecx]
lea eax, [ebp - 0x24]
mov edx, 0x6a40a0
call fcn.0040a8a8
mov edx, dword [ebp - 0x24]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea edx, [ebp - 0x2c]
movzx eax, byte [ebp - 9]
call fcn.0042419c
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
mov edx, 0x6a40bc
call fcn.0040a8a8
mov edx, dword [ebp - 0x28]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x30]
mov ecx, dword [ebp + 0x10]
mov edx, 0x6a40dc
call fcn.0040a8a8
mov edx, dword [ebp - 0x30]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
cmp dword [ebp + 0xc], 0
je 0x6a37f4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp + 0xc]
mov edx, 0x6a40f8
call fcn.0040a8a8
mov edx, dword [ebp - 0x34]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [0x7c8a50]
cmp dword [eax], 0
je 0x6a381d
mov ecx, dword [0x7c8a50]
mov ecx, dword [ecx]
lea eax, [ebp - 0x38]
mov edx, 0x6a4114
call fcn.0040a8a8
mov edx, dword [ebp - 0x38]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x3c]
push eax
mov word [ebp - 0x13c], 0x31
mov byte [ebp - 0x138], 9
mov word [ebp - 0x134], 0x30
mov byte [ebp - 0x130], 9
mov word [ebp - 0x12c], 0x36
mov byte [ebp - 0x128], 9
mov word [ebp - 0x124], 0x38
mov byte [ebp - 0x120], 9
mov word [ebp - 0x11c], 0x31
mov byte [ebp - 0x118], 9
mov word [ebp - 0x114], 0x37
mov byte [ebp - 0x110], 9
mov word [ebp - 0x10c], 0x62
mov byte [ebp - 0x108], 9
mov word [ebp - 0x104], 0x37
mov byte [ebp - 0x100], 9
mov word [ebp - 0xfc], 0x65
mov byte [ebp - 0xf8], 9
mov word [ebp - 0xf4], 0x63
mov byte [ebp - 0xf0], 9
mov word [ebp - 0xec], 0x32
mov byte [ebp - 0xe8], 9
mov word [ebp - 0xe4], 0x35
mov byte [ebp - 0xe0], 9
mov word [ebp - 0xdc], 0x34
mov byte [ebp - 0xd8], 9
mov word [ebp - 0xd4], 0x35
mov byte [ebp - 0xd0], 9
mov word [ebp - 0xcc], 0x62
mov byte [ebp - 0xc8], 9
mov word [ebp - 0xc4], 0x34
mov byte [ebp - 0xc0], 9
mov word [ebp - 0xbc], 0x66
mov byte [ebp - 0xb8], 9
mov word [ebp - 0xb4], 0x66
mov byte [ebp - 0xb0], 9
mov word [ebp - 0xac], 0x34
mov byte [ebp - 0xa8], 9
mov word [ebp - 0xa4], 0x32
mov byte [ebp - 0xa0], 9
mov word [ebp - 0x9c], 0x37
mov byte [ebp - 0x98], 9
mov word [ebp - 0x94], 0x62
mov byte [ebp - 0x90], 9
mov word [ebp - 0x8c], 0x65
mov byte [ebp - 0x88], 9
mov word [ebp - 0x84], 0x39
mov byte [ebp - 0x80], 9
mov word [ebp - 0x7c], 0x65
mov byte [ebp - 0x78], 9
mov word [ebp - 0x74], 0x31
mov byte [ebp - 0x70], 9
mov word [ebp - 0x6c], 0x37
mov byte [ebp - 0x68], 9
mov word [ebp - 0x64], 0x61
mov byte [ebp - 0x60], 9
mov word [ebp - 0x5c], 0x31
mov byte [ebp - 0x58], 9
mov word [ebp - 0x54], 0x34
mov byte [ebp - 0x50], 9
mov word [ebp - 0x4c], 0x30
mov byte [ebp - 0x48], 9
mov word [ebp - 0x44], 0x31
mov byte [ebp - 0x40], 9
lea edx, [ebp - 0x13c]
mov ecx, 0x1f
mov eax, 0x6a4130
call fcn.00425904
mov eax, dword [ebp - 0x3c]
push eax
lea edx, [ebp - 0x144]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x144]
lea edx, [ebp - 0x140]
call fcn.0042385c
mov eax, dword [ebp - 0x140]
lea ecx, [ebp - 4]
pop edx
call fcn.006a1994
lea eax, [ebp - 0x148]
push eax
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [0x64e92c]
call fcn.0064fa88
mov edx, dword [ebp - 0x148]
lea eax, [ebp - 4]
call fcn.00409f38
mov eax, dword [0x7c8af8]
push dword [eax]
push 0x6a41c0
push dword [ebp - 4]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040a930
mov eax, dword [ebp - 4]
call fcn.006a1a28
mov dword [ebp - 0x10], eax
mov eax, esi
call fcn.00407e28
xor edx, edx
push ebp
push 0x6a3fe5
push dword fs:[edx]
mov dword fs:[edx], esp
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x14c]
mov ecx, 1
mov edx, eax
mov eax, 0x6a41fc
call fcn.0040ab74
test eax, eax
jne 0x6a3b23
lea ecx, [ebp - 0x158]
xor edx, edx
mov eax, ebx
call fcn.006a3238
mov eax, dword [ebp - 0x158]
push eax
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x160]
lea edx, [ebp - 0x15c]
call fcn.0042385c
mov eax, dword [ebp - 0x15c]
lea ecx, [ebp - 0x154]
pop edx
call fcn.006a186c
mov eax, dword [ebp - 0x154]
lea edx, [ebp - 0x150]
call fcn.0042385c
mov edx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x6a3b5a
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
lea ecx, [ebp - 0x164]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x164]
mov edx, 0x6a41fc
call fcn.0040a9e0
je 0x6a3b6e
mov eax, 0x6a4218
call fcn.006a146c
call fcn.004092ec
jmp 0x6a3fec
lea ecx, [ebp - 0x16c]
mov edx, 0x6a4244
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x16c]
lea edx, [ebp - 0x168]
call fcn.00423750
mov eax, dword [ebp - 0x168]
lea edx, [ebp - 8]
call fcn.0042385c
mov eax, dword [ebp - 8]
mov edx, 0x6a4260
call fcn.0040a9e0
jne 0x6a3bca
mov eax, dword [ebp + 8]
mov byte [eax + 4], 3
mov eax, 0x6a427c
call fcn.006a146c
call fcn.004092ec
jmp 0x6a3fec
mov eax, dword [ebp - 8]
mov edx, 0x6a42a0
call fcn.0040a9e0
jne 0x6a3bf4
mov eax, dword [ebp + 8]
mov byte [eax + 4], 5
mov eax, 0x6a42c0
call fcn.006a146c
call fcn.004092ec
jmp 0x6a3fec
mov eax, dword [ebp - 8]
mov edx, 0x6a42e8
call fcn.0040a9e0
jne 0x6a3c0c
mov eax, dword [ebp + 8]
mov byte [eax + 4], 4
jmp 0x6a3c6f
mov eax, dword [ebp - 8]
mov edx, 0x6a4304
call fcn.0040a9e0
jne 0x6a3c24
mov eax, dword [ebp + 8]
mov byte [eax + 4], 6
jmp 0x6a3c6f
mov eax, dword [ebp - 8]
mov edx, 0x6a431c
call fcn.0040a9e0
jne 0x6a3c3c
mov eax, dword [ebp + 8]
mov byte [eax + 4], 7
jmp 0x6a3c6f
mov eax, dword [ebp - 8]
mov edx, 0x6a4338
call fcn.0040a9e0
jne 0x6a3c54
mov eax, dword [ebp + 8]
mov byte [eax + 4], 8
jmp 0x6a3c6f
mov eax, 0x6a4354
call fcn.006a146c
mov eax, dword [ebp + 8]
mov byte [eax + 4], 3
call fcn.004092ec
jmp 0x6a3fec
lea ecx, [ebp - 0x174]
mov edx, 0x6a4378
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x174]
lea edx, [ebp - 0x170]
call fcn.00423750
mov eax, dword [ebp - 0x170]
lea edx, [ebp - 8]
call fcn.0042385c
mov eax, dword [ebp - 8]
mov edx, 0x6a4390
call fcn.0040a9e0
jne 0x6a3cb9
mov eax, dword [ebp + 8]
mov byte [eax + 5], 1
jmp 0x6a3cfa
mov eax, dword [ebp - 8]
mov edx, 0x6a43b8
call fcn.0040a9e0
jne 0x6a3cd1
mov eax, dword [ebp + 8]
mov byte [eax + 5], 2
jmp 0x6a3cfa
mov eax, dword [ebp - 8]
mov edx, 0x6a43d4
call fcn.0040a9e0
jne 0x6a3ce9
mov eax, dword [ebp + 8]
mov byte [eax + 5], 3
jmp 0x6a3cfa
mov eax, 0x6a43f4
call fcn.006a146c
mov eax, dword [ebp + 8]
mov byte [eax + 5], 2
lea ecx, [ebp - 0x17c]
mov edx, 0x6a4414
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x17c]
lea edx, [ebp - 0x178]
call fcn.00423750
mov eax, dword [ebp - 0x178]
lea edx, [ebp - 8]
call fcn.0042385c
mov eax, dword [ebp - 8]
mov edx, 0x6a4430
call fcn.0040a9e0
jne 0x6a3d44
mov eax, dword [ebp + 8]
mov byte [eax + 6], 1
jmp 0x6a3d6d
mov eax, dword [ebp - 8]
mov edx, 0x6a4444
call fcn.0040a9e0
jne 0x6a3d5c
mov eax, dword [ebp + 8]
mov byte [eax + 6], 2
jmp 0x6a3d6d
mov eax, 0x6a4458
call fcn.006a146c
mov eax, dword [ebp + 8]
mov byte [eax + 6], 2
lea ecx, [ebp - 0x184]
mov edx, 0x6a447c
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x180]
call fcn.00423750
mov eax, dword [ebp - 0x180]
lea edx, [ebp - 8]
call fcn.0042385c
mov eax, dword [ebp - 8]
mov edx, 0x6a44a0
call fcn.0040a9e0
jne 0x6a3dba
mov eax, dword [ebp + 8]
mov byte [eax + 7], 1
jmp 0x6a3e64
mov eax, dword [ebp - 8]
mov edx, 0x6a44bc
call fcn.0040a9e0
jne 0x6a3dd5
mov eax, dword [ebp + 8]
mov byte [eax + 7], 2
jmp 0x6a3e64
mov eax, dword [ebp - 8]
mov edx, 0x6a44d4
call fcn.0040a9e0
jne 0x6a3ded
mov eax, dword [ebp + 8]
mov byte [eax + 7], 3
jmp 0x6a3e64
mov eax, dword [ebp - 8]
mov edx, 0x6a4338
call fcn.0040a9e0
jne 0x6a3e05
mov eax, dword [ebp + 8]
mov byte [eax + 7], 4
jmp 0x6a3e64
mov eax, dword [ebp - 8]
mov edx, 0x6a44f4
call fcn.0040a9e0
jne 0x6a3e1d
mov eax, dword [ebp + 8]
mov byte [eax + 7], 5
jmp 0x6a3e64
mov eax, dword [ebp - 8]
mov edx, 0x6a4514
call fcn.0040a9e0
jne 0x6a3e35
mov eax, dword [ebp + 8]
mov byte [eax + 7], 5
jmp 0x6a3e64
mov eax, 0x6a4530
call fcn.006a146c
lea eax, [ebp - 0x188]
mov ecx, dword [ebp - 8]
mov edx, 0x6a454c
call fcn.0040a8a8
mov eax, dword [ebp - 0x188]
call fcn.006a1730
mov eax, dword [ebp + 8]
mov byte [eax + 7], 1
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 7]
add al, 0xfd
sub al, 2
jae 0x6a3eab
lea ecx, [ebp - 0x190]
mov edx, 0x6a45ac
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x190]
lea edx, [ebp - 0x18c]
call fcn.0042385c
mov eax, dword [ebp - 0x18c]
or edx, 0xffffffff
call fcn.00424430
mov edx, dword [ebp + 8]
mov dword [edx + 0xc], eax
jmp 0x6a3eb5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 0xffffffff
lea ecx, [ebp - 0x198]
mov edx, 0x6a45cc
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x198]
lea edx, [ebp - 0x194]
call fcn.0042385c
mov eax, dword [ebp - 0x194]
mov edx, 1
call fcn.00424430
mov edx, dword [ebp + 8]
mov byte [edx + 8], al
lea ecx, [ebp - 0x1a0]
mov edx, 0x6a45f4
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x1a0]
lea edx, [ebp - 0x19c]
call fcn.0042385c
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp + 8]
add eax, 0x10
call fcn.00409ef0
lea ecx, [ebp - 0x1a8]
mov edx, 0x6a4610
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x1a8]
lea edx, [ebp - 0x1a4]
call fcn.0042385c
mov edx, dword [ebp - 0x1a4]
mov eax, dword [ebp + 8]
add eax, 0x14
call fcn.00409ef0
lea ecx, [ebp - 0x1b0]
mov edx, 0x6a462c
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x1b0]
lea edx, [ebp - 0x1ac]
call fcn.0042385c
mov eax, dword [ebp - 0x1ac]
call fcn.006a1258
mov eax, dword [ebp + 8]
fstp qword [eax + 0x18]
wait
lea ecx, [ebp - 0x1b8]
mov edx, 0x6a464c
mov eax, dword [ebp - 0x10]
call fcn.004a0138
mov eax, dword [ebp - 0x1b8]
lea edx, [ebp - 0x1b4]
call fcn.0042385c
mov eax, dword [ebp - 0x1b4]
call fcn.006a1258
mov eax, dword [ebp + 8]
fstp qword [eax + 0x28]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a3fec
mov eax, dword [ebp + 8]
call fcn.006a1534
mov eax, dword [ebp - 0x10]
call fcn.00407e28
pop eax
jmp eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a402d
lea eax, [ebp - 0x1b8]
mov edx, 0x1f
call fcn.00409b60
lea eax, [ebp - 0x3c]
mov edx, 0xb
call fcn.00409b60
lea eax, [ebp - 8]
mov edx, 2
call fcn.00409b60
pop eax
jmp eax