Function at 0x10006a0d
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
jae 0x100069b3
jmp 0x100069ae
call fcn.100069b5
jae 0x100069ae
add esp, 4
jmp 0x100069ba
dec dword [esp]
jno 0x100069bf
jns 0x100069aa
jp 0x100069c3
add esp, 4
popf
jmp 0x100069ca
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100069e3
jne 0x100069e3
call 0x1fc09d37
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10006ea0
clc
jae 0x100069fe
mov esp, ebx
pushf
push 0xa
jae 0x10006a0b
jmp 0x10006a06
call 0x10006a0d
jae 0x10006a06
add esp, 4
jmp 0x10006a12
dec dword [esp]
jno 0x10006a17
jns 0x10006a02
jp 0x10006a1b
add esp, 4
popf
jmp 0x10006a22
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10006a3b
jne 0x10006a3b
fdivr qword [ebx + eax - 0x15]
add ebx, esp
jl 0x10006a40
jmp 0x10006a42
je 0x10006a3d
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10006a5c
jne 0x10006a5b
call 0x93045ae3
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10006a6a
jne 0x10006a6a
call 0x106a6ad8
push 0
push 0
push 0
push 0x10005920
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x10006b5d
mov byte [ebp - 0x34], 0x45
mov byte [ebp - 0x33], 0x52
mov byte [ebp - 0x32], 0x52
mov byte [ebp - 0x31], 0x4f
mov byte [ebp - 0x30], 0x52
mov byte [ebp - 0x2f], 0x21
mov byte [ebp - 0x2e], 0x20
mov byte [ebp - 0x2d], 0x54
mov byte [ebp - 0x2c], 0x68
mov byte [ebp - 0x2b], 0x72
mov byte [ebp - 0x2a], 0x65
mov byte [ebp - 0x29], 0x61
mov byte [ebp - 0x28], 0x64
mov byte [ebp - 0x27], 0x20
mov byte [ebp - 0x26], 0x63
mov byte [ebp - 0x25], 0x72
mov byte [ebp - 0x24], 0x65
mov byte [ebp - 0x23], 0x61
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x6f
mov byte [ebp - 0x1f], 0x6e
mov byte [ebp - 0x1e], 0x20
mov byte [ebp - 0x1d], 0x66
mov byte [ebp - 0x1c], 0x61
mov byte [ebp - 0x1b], 0x69
mov byte [ebp - 0x1a], 0x6c
mov byte [ebp - 0x19], 0x65
mov byte [ebp - 0x18], 0x64
mov byte [ebp - 0x17], 0x2c
mov byte [ebp - 0x16], 0x20
mov byte [ebp - 0x15], 0x54
mov byte [ebp - 0x14], 0x68
mov byte [ebp - 0x13], 0x72
mov byte [ebp - 0x12], 0x65
mov byte [ebp - 0x11], 0x61
mov byte [ebp - 0x10], 0x64
mov byte [ebp - 0xf], 0x20
mov byte [ebp - 0xe], 0x43
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 0xc], 0x64
mov byte [ebp - 0xb], 0x65
mov byte [ebp - 0xa], 0x20
mov byte [ebp - 9], 0x30
mov byte [ebp - 8], 0x78
mov byte [ebp - 7], 0x32
mov byte [ebp - 6], 0x21
mov byte [ebp - 5], 0
lea eax, [ebp - 0x34]
push eax
call fcn.10029c20
add esp, 4
call fcn.10020a80
xor eax, eax
test eax, eax
je 0x10006b66
jne 0x10006b65
call 0x93045bed
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov ebx, 0x73f8fb74
add bh, bl
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10006b74
jmp 0x10006b76
je 0x10006b71
clc
jae 0x10006b7b
sti
mov ebx, 0x1750374
je 0x10006b80
jne 0x10006b80
mov ebx, 0xa6a9c66
pushf
push 0xa
jae 0x10006b8d
jmp 0x10006b88
call 0x10006b8f
jae 0x10006b88
add esp, 4
jmp 0x10006b94
dec dword [esp]
jno 0x10006b99
jns 0x10006b84
jp 0x10006b9d
add esp, 4
popf
jmp 0x10006ba4
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10006bbd
jne 0x10006bbd
call 0x1fc09f11
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1003a016
mov esp, ebp
pop ebp
ret