Function at 0x6308898b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov edx, 0x6315fe80
xor eax, eax
mov ecx, 0x200
mov ebp, esp
push edi
push esi
push ebx
mov edi, edx
mov edx, 0x6315fc80
lea ebx, [ebp - 0x418]
lea esi, [ebp - 0x618]
sub esp, 0x63c
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, pe_nt_image_headers32
mov edx, 0x6315f480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315ec80
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315e480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315dc80
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315d480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315cc80
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315c480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315bc80
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315b480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315ac80
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x6315a480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x63159c80
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
mov edx, 0x63159480
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x200
rep stosd dword es:[edi], eax
mov edi, ebx
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [esp], 0x6315fe80
mov edi, esi
mov dword [esp + 4], eax
call fcn.63087db1
mov dword [esp], ebx
mov dword [esp + 4], 0x6315fe80
call fcn.63087f17
mov dword [esp + 4], ebx
mov dword [esp], 0x6315fc80
lea ebx, [ebp - 0x218]
call fcn.63087f73
mov dword [esp + 4], 0x6315fe80
mov dword [esp], 0x6315f480
call fcn.63087fc4
mov dword [esp], 0x6315f480
call fcn.63085ed2
mov dword [esp + 4], 0x63160680
mov dword [esp], 0x400
call dword [0x631e5524]
push ecx
push ecx
mov dword [esp], 0x63160680
call fcn.63085ed2
mov dword [esp + 4], 0x1a
mov dword [esp], 0x63160e80
call fcn.6308619f
mov dword [esp], 0x63160e80
call fcn.63085ed2
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov edi, ebx
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x630c463e
mov edi, esi
call fcn.6308885e
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [esp + 8], 0x100
call fcn.630abc08
mov dword [esp + 4], 0x63160e80
mov dword [esp], 0x6315ec80
call fcn.630abb60
mov dword [esp + 4], ebx
mov dword [esp], 0x6315ec80
call fcn.630abb70
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov edi, ebx
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x630c4656
mov edi, esi
call fcn.6308885e
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [esp + 8], 0x100
call fcn.630abc08
mov dword [esp + 4], 0x63160680
mov dword [esp], 0x6315e480
call fcn.630abb60
mov dword [esp + 4], ebx
mov dword [esp], 0x6315e480
call fcn.630abb70
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov edi, ebx
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x630c466a
call fcn.6308885e
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [esp + 8], 0x100
call fcn.630abc08
mov dword [esp + 4], 0x63160e80
mov dword [esp], 0x6315dc80
call fcn.630abb60
mov dword [esp + 4], ebx
mov dword [esp], 0x6315dc80
lea ebx, [ebp - 0x518]
call fcn.630abb70
mov dword [esp + 4], 0x6315ec80
mov dword [esp], 0x6315d480
mov edi, ebx
call fcn.630abb60
mov dword [esp + 4], 0x63163680
mov dword [esp], 0x6315d480
call fcn.630abb70
mov dword [esp + 4], 0x630c4688
mov dword [esp], 0x6315d480
call fcn.630abb70
mov dword [esp + 4], 0x630c4692
mov dword [esp], 0x6315cc80
call fcn.630abb60
mov dword [esp + 4], 0x6315e480
mov dword [esp], 0x6315cc80
call fcn.630abb70
mov dword [esp + 4], 0x63163480
mov dword [esp], 0x6315cc80
call fcn.630abb70
mov dword [esp + 4], 0x630c4688
mov dword [esp], 0x6315cc80
call fcn.630abb70
mov dword [esp + 4], 7
mov dword [esp], 0x6315c480
call fcn.6308619f
mov dword [esp], 0x6315c480
call fcn.63085ed2
mov dword [esp + 4], 0x63163780
mov dword [esp], 0x6315c480
call fcn.630abb70
mov dword [esp + 4], 0x630c4688
mov dword [esp], 0x6315c480
call fcn.630abb70
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x61c]
mov dword [esp + 4], ebx
mov dword [esp], 0x100
call dword [0x631e5510]
push esi
push esi
xor esi, esi
mov al, byte [ebx + esi]
test al, al
jne 0x63088d5a
add esi, 4
cmp esi, 0x100
jne 0x63088d30
lea eax, [ebp - 0x61c]
mov dword [esp + 4], 0x630c4790
mov dword [esp], eax
call fcn.630abbb0
jmp 0x63088d9d
movsx edx, al
mov dword [esp], edx
mov dword [ebp - 0x62c], edx
call dword [0x631e56ec]
and eax, 0xfffffffd
cmp eax, 0x61
je 0x63088d37
mov edx, dword [ebp - 0x62c]
mov dword [esp + 4], 0x630c469c
mov dword [esp], edi
mov dword [esp + 8], edx
call fcn.630abbd0
mov dword [esp], edi
call dword [0x631e5500]
cmp eax, 3
push edx
jne 0x63088d37
movsx eax, byte [ebp - 0x61c]
mov dword [esp + 0xc], 0x63163280
mov dword [esp + 4], 0x630c46a2
mov dword [esp], 0x6315b480
mov dword [esp + 8], eax
call fcn.63082180
mov dword [esp + 4], 0x6315b480
mov dword [esp], 0x6315bc80
call fcn.630abb60
mov dword [esp + 4], 0x63163380
mov dword [esp], 0x6315bc80
call fcn.630abb70
mov dword [esp + 4], 0x630c4688
mov dword [esp], 0x6315bc80
call fcn.630abb70
mov dword [esp + 4], 0x63160680
mov dword [esp], 0x6315ac80
call fcn.630abb60
mov dword [esp + 4], 0x630c46d0
mov dword [esp], 0x6315ac80
call fcn.630abb70
mov dword [esp + 4], 0x63160680
mov dword [esp], 0x6315a480
call fcn.630abb60
mov dword [esp + 4], 0x630c4700
mov dword [esp], 0x6315a480
call fcn.630abb70
mov dword [esp + 4], 0x63160680
mov dword [esp], 0x63159c80
call fcn.630abb60
mov dword [esp + 4], 0x630c4730
mov dword [esp], 0x63159c80
call fcn.630abb70
mov dword [esp + 4], 0x63160680
mov dword [esp], 0x63159480
call fcn.630abb60
mov dword [esp + 4], 0x630c4760
mov dword [esp], 0x63159480
call fcn.630abb70
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret