Function at 0x633629
Capabilities:
Encode data using base64
Encrypt data using aes

Disassembly:
neg edx
lea eax, reloc.WINMM.dll_midiStreamStop
dec ecx
jmp 0x63373a
call 0x63475c
adc eax, 0xf768d70d
mov bh, 0x66
invalid
cmp al, 0x61
call 0x6346ad
loope 0x5ffb34
push edx
pop ebp
adc eax, dword [edi]
adc dword [ebp + reloc.WINMM.dll_midiStreamStop], eax
retf 0x303c
cmp al, 0x30
jb 0x5ffc78
call fcn.00634735
xchg edi, eax
dec cl
leave
push 0x43124524
add al, 0x3e
aam 0x89
mov dl, 0x59
test al, 0x18
dec esp
lds edx, [ebp - 0x17]
cmpsd dword [esi], dword es:[edi]
rol byte [ecx], 1
add byte [ebx], dl
inc edi
adc al, 5
cmp al, 0x4a
mov ch, 0x64
mov dl, 4
or eax, 0xa231b687
fld qword [ebx]
call 0x63488f
stc
fdivr dword [ebx]
adc dh, byte [eax + 0x2717e91a]
xchg byte [edx - 0x7e], bh
test bl, dh
movsb byte es:[edi], byte [esi]
jmp 0x688c79
push si
lea esp, [esp + 2]
jmp 0x6347e8
jmp 0x6348d0
jmp 0x63487e
cmp bl, 0x30
jmp 0x634830
jmp 0x6349b7
cmp cl, 0x61
push bx
mov byte [esp], bl
jmp 0x634a47
push ebp
jmp 0x5ffc29
lea esp, [esp + 1]
lea esp, [esp + 3]
jmp 0x63491c
jmp 0x634937
jmp 0x63474d
cmp cl, 0x2b
pushal
jmp 0x634add
call fcn.00634a92
push 0xffffffffffffffae
inc ebp
pop esp
or eax, 0x953d208e
cwde
int3
pushfd
jmp 0x6355df
push esi
jmp 0x635dd1
jmp 0x635d13
call 0x635e5f
arpl word [edx - 0x24dcb05b], bx
fsubr dword [eax + 0x71]
inc esp
daa
fcmovne st(0), st(2)
das
out 0x11, al
nop
jmp 0x635d56
push esp
std
jns 0x5fff87
xchg esi, eax
sti
adc dword [edi], reloc.WINMM.dll_midiStreamStop
pop ebp
sub al, 0xd7
xchg byte [ecx], bl
push ss
sar byte [eax], cl
and eax, 0x37fcf218
invalid
mov bl, byte [ecx + 2]
jmp 0x5fff4a
clc
cmc
cmp bl, 0x41
sti
inc ecx
jb 0x5fffdb
jae 0x635f73
push 0x17c09446
call fcn.0060f454
hlt
cmp dl, 0x61
call fcn.00635ea9
jge 0x5fff92
pushal
jbe 0x5fff80
jne 0x5fff13
add ah, byte [ebx + eax*4]
call 0x4d48b5d4
pushal
call 0x635fce
add eax, dword [eax]
nop
jno 0x5fffc2
add eax, dword [esi + edi*8 + reloc.WINMM.dll_midiStreamStop]
invalid
inc byte [edx - 0x39f95f14]
sti
jo 0x5fff4d
fmul dword [ebp - 0x24]
fadd qword [eax - 0x7663cf06]
sub al, 0x24
cmp dl, 0x30
pushfd
mov dword [esp], ebp
jmp 0x635ed0
jmp 0x636149
dec ebx
or ebp, dword [edi + reloc.WINMM.dll_midiStreamStop]
add bh, bh
invalid
jmp 0x636467
jmp 0x635f9a
add bp, ax
xor eax, edi
jmp 0x633686
bswap ebp
lea edi, reloc.WINMM.dll_midiStreamStop
call 0x633630
lea esp, [esp + 0x2c]
xor eax, dword [ecx]
jmp 0x633a2d
pushal
mov edx, 0x6ad4207e
mov dh, byte [esp]
lea ebp, [edx*4]
bts esi, esi
jmp 0x633798
mov edx, dword [eax + 0xc]
mov ecx, edx
mov di, dx
mov edi, eax
call fcn.00633766
sub dword [edx + edi + reloc.WINMM.dll_midiStreamStop], esp
rol dword [ecx + 0x20], 1
shl dword [eax + edx*8 - 0x77], cl
jl 0x6337bf
mov dword [esp + 0x1c], edi
popal
sbb al, 0x61
xchg edx, ecx
neg cl
mov di, word [esp]
jmp 0x63377c
or byte [edi - 0x7d], dl
les eax, [ebx]
lea esp, [esp + 1]
mov edi, edx
call fcn.006337a7
and ecx, esi
call fcn.0063395d
mov edx, 0x34c5a22c
mov ch, byte [ecx + edi - 0x7c43757]
mov ds, word [edx]
mov bh, ch
sbb ch, byte [ecx + 0x244c88fb]
add ah, byte [esi - 1]
je 0x633815
add eax, ebp
jmp 0x6337f3
lea esp, [esp + 0x14]
and ecx, 0xff0000
jmp 0x633820
and al, 3
mov edi, dword [edi*4 + reloc.WINMM.dll_midiStreamStop]
jmp 0x6337f7
and edi, 0xff000000
push sp
lea esp, [esp + 2]
jmp 0x633860
and edx, esi
clc
mov edx, dword [edx*4 + reloc.WINMM.dll_midiStreamStop]
jmp 0x6338b4
xor ecx, edi
inc di
lea edi, reloc.WINMM.dll_midiStreamStop
mov edi, edx
jmp 0x633847
xor ecx, edi
sub esp, 7
pop edi
rcr di, cl
mov edi, 0x4f105c02
jmp 0x633898
lea edx, [edx*4]
lea edx, reloc.WINMM.dll_midiStreamStop
movzx edi, byte [edx]
pop edx
pushal
jmp 0x63386e
lea esp, [esp + 3]
and edx, ebp
mov di, bx
lea edi, [ecx + 0x2c]
jmp 0x6338d2
shr edi, 0x18
push edx
mov edx, edi
jmp 0x633884
lea esp, [esp + 0x20]
xor ecx, dword [ebx]
mov dh, cl
mov dh, ch
jmp 0x633918
xor ecx, edx
xor dh, bh
jmp 0x6338bc
lea esp, [esp + 0x10]
xor ecx, dword [eax]
mov dx, 0x7208
not dx
jmp 0x63393f
lea edi, [eax + 0x10]
lea edx, [edi + 0x16]
sub esp, 0x11
or dl, cl
lea esp, [esp + 1]
jmp 0x6338f9
mov dword [edi], ecx
mov edx, dword [esp]
jmp 0x63397a
add ebx, 4
neg dx
push bx
push word [esp + 1]
jmp 0x633929
xor edx, ecx
mov ch, byte [esp]
call 0x6339c4
arpl sp, sp
jp 0x63398d
in al, dx
pop eax
xchg edi, eax
adc dword [ecx + reloc.WINMM.dll_midiStreamStop], eax
xchg ebx, eax
mov edx, dword [eax + 4]
sub esp, 0x10
add esp, 2
mov byte [esp + 0xa], al
lea esp, [esp + 2]
jmp 0x633962
pop ebx
jmp 0x6339ad
mov ecx, dword [eax + 8]
sub esp, 0x14
sub esp, 8
jmp 0x6339e2
sbb dl, bl
jmp 0x633a06
xor ecx, edx
mov dx, si
mov dword [eax + 0x18], ecx
mov dx, word [esp]
jmp 0x6339cc
mov edx, esi
mov dword [esp + 8], eax
popal
jmp 0x633a12
push ebp
pushal
sbb si, 0x3916
btr edx, edx
jmp 0x6339f0
add ebp, 0xc
mov edx, dword [ebp]
pop ebp
sub esp, 2
call fcn.00633a4b
ljmp 0x228b
lea edi, [ecx + 0x10]
call 0x6337e9
xor edx, ecx
jmp 0x633a51
mov dword [eax + 0x1c], edx
clc
clc
lea esp, [esp + 0x30]
jmp 0x634670
pop ebx
ret
mov ebx, 0x5459f4d9
pop esi
pop ebp
xchg bl, bh
jmp 0x633a95
mov si, cx
pop eax
xchg ebx, ebp
pop edi
jmp 0x633aaf
xchg si, ax
lea ebx, [edx + esi]
lea ebx, [esp + esi]
mov ebp, 0x585dffab
push 0xa
jmp 0x633c60
cmp ebx, 0x60bd48
push sp
lea esp, [esp + 1]
lea esp, [esp + 1]
jne 0x5ff2fd
je 0x633ea0
lea esp, [esp + 0x20]
jb 0x5ffb0f
jae 0x6346c3
push ecx
aad 0x45
sub al, 0xdf
pop ds
les esi, [edi + 0x5e]
test eax, 0x413c018a
pushal
mov dword [esp + 0x17], esi
jmp 0x63468c
cmp al, 0x5a
jbe 0x5ffaf9
ja 0x5ffb0f
push si
call 0x634853
sub esp, 0x14
lea esp, [esp + 0x14]
cmp al, 0x7a
push di
lea esp, [esp + 2]
jmp 0x634799
cmp al, 0x2b
je 0x5ffaf9
cmp al, 0x2f
call fcn.00634737
mov byte [esp], bl
jmp 0x634782
lea esp, [esp + 4]
mov bl, byte [ecx + 1]
sub esp, 0x17
sub esp, 0x17
pop dword [esp + 0x1a]
jmp 0x634807
jbe 0x5ffaf9
ja 0x5ffb25
lea esp, [esp + 4]
jbe 0x5ffb5b
ja 0x5ffb75
mov byte [0x63f2cdd], al
mov cl, 0xf
xor byte [ebx + esi*4 - 0x47f0004], 0x5a
jb 0x5ffb75
cmp bl, 0x5a
pushfd
jmp 0x6347a5
xor al, byte [edi - 0x3d58c85e]
xor dword [edx + reloc.WINMM.dll_midiStreamStop], ecx
mov es, word [ebx + 0x648d1eec]
and al, 3
sub esp, 0x1e
lea esp, [esp + 3]
lea esp, [esp + 0x20]
cmp bl, 0x41
jmp 0x6347bb
cmp bl, 0x61
jb 0x5ffbc1
cmp bl, 0x7a
call fcn.0063482e
or ebx, dword [ecx + reloc.WINMM.dll_midiStreamStop]
imul edi, edx, 0x68
psubd mm1, qword [ebx + 0x5b]
mov dl, 0x8d
and al, 2
lea esp, [esp + 2]
lea esp, [esp + 0x28]
mov byte [ebp - 1], bl
cmc
sub esp, 5
jmp 0x6347d8
jb 0x5ffba1
cmp bl, 0x39
jbe 0x5ffb5b
ja 0x5ffba1
pop ss
xchg dword [edi], edx
jb 0x6347cb
xor dword [edi + reloc.WINMM.dll_midiStreamStop], ebp
stc
xchg ebp, eax
add al, 0x9c
lea esp, [esp + 2]
lea esp, [esp + 0xc]
jb 0x5ffb25
jae 0x6346d8
cmp bl, 0x2f
jmp 0x6348a5
cmp bl, 0x2b
push di
lea esp, [esp + 2]
je 0x5ffb5b
jne 0x634868
lea esp, [esp + 4]
mov dl, byte [ecx + 2]
pushfd
jmp 0x634a10
jne 0x5ffbf6
je 0x5ffb5b
leave
push edx
shl byte [edi - 0x35ac6fae], 0x65
xchg esp, eax
pop es
cmp dl, 0x61
push bp
mov word [esp], di
lea esp, [esp + 2]
jmp 0x6349d8
push si
lea esp, [esp + 2]
cmp dl, 0x5a
jbe 0x5ffbd7
ja 0x5ffb8b
cmc
cmp dl, 0x39
jbe 0x5ffbd7
ja 0x5ffc22
cmp dl, 0x2b
push ax
lea esp, [esp + 2]
jmp 0x634993
push sp
lea esp, [esp + 2]
cmp dl, 0x30
jb 0x5ffc22
jae 0x63490c
lea esp, [esp + 2]
je 0x5ffbd7
sub esp, 0x11
lea esp, [esp + 1]
jmp 0x634971
lea esp, [esp + 0x10]
cmp dl, 0x3d
jne 0x5ffbf6
je 0x5ffbd7
imul ecx, edi, 0x5f
cmp cl, cl
push eax
loop 0x6349ec
not byte [ecx + 0x6c1da260]
jg 0x6349a3
je 0x5ffbd7
test byte [esi], bh
mov dl, 0xfc
inc dword [eax - reloc.WINMM.dll_midiStreamStop]
invalid
cmp dl, 0x2f
call 0x634967
lea esp, [esp + 0x10]
and al, 0x10
cmp cl, 0x41
jmp 0x6349ee
mov cl, byte [ecx + 3]
sub esp, 0x12
mov dword [esp + 2], edx
lea esp, [esp + 2]
jmp 0x6349a1
jb 0x5ffc43
cmc
cmp dl, 0x7a
jbe 0x5ffbd7
ja 0x5ffc43
cld
dec dword [edi]
sbb byte [eax], 0xb2
cld
invalid
jb 0x5ffc0c
call 0x6349fa
mov eax, 0x3ee8f9
add byte [eax], al
sahf
pop ds
invalid
mov word [esp + 1], di
lea esp, [esp + 4]
cmp dl, 0x41
jb 0x5ffb8b
jae 0x6348f7
cmp cl, 0x5a
jmp 0x634a70
lea esp, [esp + 2]
jb 0x5ffca4
cmc
sub esp, 3
lea esp, [esp + 3]
jmp 0x634abe
jbe 0x5ffc59
ja 0x5ffc0c
lea esp, [esp + 4]
cmp cl, 0x30
jmp 0x634a9b
jb 0x5ffc8e
cmp cl, 0x39
push bx
lea esp, [esp]
jmp 0x634acd
cmp cl, 0x7a
jbe 0x5ffc59
ja 0x5ffca4
lea esp, [esp + 2]
jbe 0x5ffc59
ja 0x5ffc8e
lea esp, [esp + 0x20]
je 0x5ffc59
jne 0x63604b
mov bl, dh
mov bl, byte [esp]
and eax, edx
lea ebx, reloc.WINMM.dll_midiStreamStop
mov bx, word [esp]
push eax
jmp 0x636115
push eax
push dword [esp + 3]
jmp 0x636087
mov eax, dword [esp]
jmp 0x6361da
cmp al, 0x39
call 0x6361c4
lodsb al, byte [esi]
movsb byte es:[edi], byte ss:[esi]
ret
cmp al, 0x2f
jmp 0x636191
push esi
jmp 0x63626c
push ebp
jmp 0x636172
push ebp
mov al, byte [0x42e81ae3]
pop es
add byte [eax], al
call 0x6362c8
jg 0x635b7d
or al, 0xff
dec ebp
outsd dx, dword [esi]
out 0x74, al
adc ebp, esi
sub dl, byte [edi - 0x74973602]
pushfd
jmp 0x636362
movzx edx, bl
cmc
jmp 0x635c05
jmp 0x6363dd
cmp bl, 0x39
jmp 0x6363b3
jmp 0x6363c2
sub edx, 0x47
jmp 0x635c4b
cmp cl, 0x2b
jmp 0x635c79
cmp cl, 0x2f
jmp 0x635c82
jmp 0x635c33
jne 0x635c61
push 0x3e
jmp 0x635f07
jne 0x635dbb
je 0x6363f9
add al, 0x9a
or byte [edi - 0x66], ch
pop ebx
jnp 0x635ce8
int 0x5c
scasd eax, dword es:[edi]
lea esp, [esp + 8]
cmp dword [ebp + 0xc], 3
jne 0x5ffd52
mov bl, 0x2a
jmp 0x63582c
cmp al, 0x5a
call 0x635d03
invalid
and bl, byte [ebp + ebx - 0x64d82b73]
in al, dx
inc esi
sub esp, 0xc
lea esp, [esp + 0x24]
cmp al, 0x41
jb 0x5ffedf
jae 0x635cdc
lea esp, [esp + 4]
jbe 0x5ffec9
ja 0x5ffedf
cmp al, 0x61
jb 0x5fff0b
sub esp, 0xc
pop word [esp + 7]
lea esp, [esp + 2]
jmp 0x635d44
lea esp, [esp + 8]
cmp al, 0x7a
jbe 0x5ffec9
ja 0x5fff0b
cmp al, 0x30
push si
lea esp, [esp + 2]
jmp 0x635d9a
jbe 0x5ffec9
ja 0x5ffef5
retf
jb 0x5ffef5
cmp al, 0x39
push ax
lea esp, [esp + 2]
jmp 0x635d84
jmp 0x636416
lea esp, [esp + 4]
mov dl, byte [ecx + 1]
cmp dl, 0x41
call fcn.00635e16
pop ecx
salc
inc esp
and ebx, esi
imul ecx, ecx, 0x4b
fstp xword [esi - 0x139e04b3]
bound eax, qword [0x587937f4]
jne 0x5fffaf
je 0x5ffec9
lea esp, [esp + 2]
jmp 0x635e3f
lea esp, [esp + 4]
jb 0x5fff67
push sp
lea esp, [esp]
lea esp, [esp + 2]
jmp 0x635e83
lea esp, [esp + 0x20]
jbe 0x5fff41
ja 0x5fff67
mov ah, 0x20
mov dh, 0xd1
and byte [ebx + 0x63f2cdd], dl
mov cl, 0x80
cli
pop edx
cmp dl, 0x5a
pushal
push word [esp + 0x12]
pop word [esp + 0xc]
jmp 0x635e68
lea esp, [esp + 4]
jb 0x5fff7d
sub esp, 0x16
clc
jmp 0x635f33
call 0x6363e3
stosb byte es:[edi], al
cmp ebp, dword [ebx - reloc.WINMM.dll_midiStreamStop]
sbb al, 0xb2
aad 0x24
xchg edi, eax
jmp 0x7e260a25
jbe 0x5fff41
ja 0x5fff7d
push ebx
into
pop esp
cmp edx, esi
push 0xd05126df
pop dword [esp + 0xa]
lea esp, [esp + 2]
lea esp, [esp + 0x10]
cmp dl, 0x39
jmp 0x635f1d
sub esp, 0xe
lea esp, [esp + 2]
jmp 0x635fb0
je 0x5fff41
cmp bl, 0x61
call fcn.0063601a
clc
jg 0x635f94
mov bh, byte [ecx + 0x31]
salc
push eax
invalid
lea esp, [esp + 0xc]
cmp bl, 0x5a
jbe 0x5fffc5
ja 0x5fffdb
sub dh, byte [ebx + 0x7b54623]
and dword ss:[eax - 0x5d], esp
invalid
cmp cl, 0x2f
je 0x5ffc59
call fcn.006351ce
lea esp, [esp + 4]
cmp cl, 0x61
jmp 0x63607b
jb 0x635a7c
clc
cmp cl, 0x7a
jmp 0x6360ac
lea esp, [esp + 8]
cmp cl, 0x30
call 0x6360b8
stosb byte es:[edi], al
sub edi, dword [ebx - reloc.WINMM.dll_midiStreamStop]
dec esp
ret 0x54a5
jbe 0x635aed
ja 0x635a7c
pop word [esp]
lea esp, [esp + 2]
jmp 0x6360f2
jb 0x635a66
call 0x6360db
lea esp, [esp + 4]
jbe 0x635aed
ja 0x635a66
pop ecx
stc
invalid
aad 0x44
neg esi
sub dword [eax - 0x15], ecx
jmp 0x6360fd
lea esp, [esp + 4]
lea esp, [esp + 4]
cmp cl, 0x2b
pushal
lea esp, [esp + 0x20]
jmp 0x636127
je 0x635aed
pushal
jmp 0x63615f
mov eax, 0x403
jmp 0x63618f
add bl, ch
aas
xchg dword [edi], edx
xchg edx, esp
adc dword [ecx + reloc.WINMM.dll_midiStreamStop], esp
mov byte [ecx - 0x5b], cl
aam 0x47
lea esp, [esp + 0x20]
cmp cl, 0x2f
je 0x635aed
jne 0x5fffaf
lea esp, [esp + 4]
cmp al, 0x2b
jne 0x635abe
je 0x6361bd
clc
insb byte es:[edi], dx
loop 0x636109
je 0x63614d
out dx, al
jns 0x636172
mov byte [ebx - 0x38], bh
fdivr dword [ebx]
adc bl, byte [ebx - 0x3d]
pop ebx
ret
jne 0x635aa8
push edx
pushal
lea esp, [esp + 0x24]
jmp 0x6361a3
push 0x3f
jmp 0x635a92
push 0x3e
jmp 0x635a92
lea esp, [esp + 4]
jmp 0x635ad4
cmp dl, 0x2b
call 0x636256
push 0x3e
jmp 0x635b81
lea esp, [esp + 4]
cmp bl, 0x2f
jmp 0x636383
jne 0x635bea
pushfd
lea esp, [esp + 4]
push 0x3f
jmp 0x635c00
ja 0x635c25
clc
add edx, 4
jmp 0x635c4b
cmp bl, 0x5a
ja 0x635c77
call fcn.00635c2a
lds ebx, [ebx - 0x35]
scasb al, byte es:[edi]
pop ebp
ljmp 0x75c4
pop edx
jmp 0x635c4b
push 0x3f
jmp 0x635f07
cmp cl, 0x39
pushal
call fcn.00636400
movzx ecx, cl
jmp 0x636445
add ecx, 4
jmp 0x635d6e
mov cl, byte [ecx + 3]
call 0x636242
push 0xf7839fb7
call fcn.00611734
invalid