Function at 0x638b9020
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword [0x63aa7440]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x3b4]
cmp eax, dword [ecx + 8]
jbe 0x638ba08e
sub esp, 0x434
lea edi, [esp + 0x39c]
xor eax, eax
call fcn.637ac30a
mov dword [esp + 0x2bf], 0
lea edi, [esp + 0x2c2]
call fcn.637ac32b
mov byte [esp + 0x2bf], 0x43
mov word [esp + 0x2c0], 0x5c3a
mov dword [esp + 0x2c2], 0x676f7250
mov dword [esp + 0x2c6], 0x206d6172
mov dword [esp + 0x2ca], 0x656c6946
mov dword [esp + 0x2ce], 0x4d565c73
mov dword [esp + 0x2d2], 0x65726177
mov dword [esp], 0
lea ecx, [esp + 0x2bf]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x17
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3a0], edx
mov dword [esp + 0x39c], ecx
mov dword [esp + 0x2a5], 0
lea edi, [esp + 0x2a7]
xor eax, eax
call fcn.637ac32a
mov word [esp + 0x2a5], 0x3a43
mov dword [esp + 0x2a7], 0x6f72505c
mov dword [esp + 0x2ab], 0x6d617267
mov dword [esp + 0x2af], 0x6c694620
mov dword [esp + 0x2b3], 0x505c7365
mov dword [esp + 0x2b7], 0x6c617261
mov dword [esp + 0x2bb], 0x736c656c
mov dword [esp], 0
lea ecx, [esp + 0x2a5]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1a
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3a8], edx
mov dword [esp + 0x3a4], ecx
mov dword [esp + 0x27e], 0
lea edi, [esp + 0x281]
xor eax, eax
call fcn.637ac327
mov byte [esp + 0x27e], 0x43
mov word [esp + 0x27f], 0x5c3a
mov dword [esp + 0x281], 0x646e6977
mov dword [esp + 0x285], 0x5c73776f
mov dword [esp + 0x289], 0x74737953
mov dword [esp + 0x28d], 0x32336d65
mov dword [esp + 0x291], 0x6972445c
mov dword [esp + 0x295], 0x73726576
mov dword [esp + 0x299], 0x6d6d565c
mov dword [esp + 0x29d], 0x6573756f
mov dword [esp + 0x2a1], 0x7379732e
mov dword [esp], 0
lea ecx, [esp + 0x27e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x27
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3b0], edx
mov dword [esp + 0x3ac], ecx
mov dword [esp + 0x258], 0
lea edi, [esp + 0x25a]
xor eax, eax
call fcn.637ac327
mov word [esp + 0x258], 0x3a43
mov dword [esp + 0x25a], 0x6e69775c
mov dword [esp + 0x25e], 0x73776f64
mov dword [esp + 0x262], 0x7379535c
mov dword [esp + 0x266], 0x336d6574
mov dword [esp + 0x26a], 0x72445c32
mov dword [esp + 0x26e], 0x72657669
mov dword [esp + 0x272], 0x6d765c73
mov dword [esp + 0x276], 0x79617274
mov dword [esp + 0x27a], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0x258]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x26
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3b8], edx
mov dword [esp + 0x3b4], ecx
mov dword [esp + 0x22d], 0
lea edi, [esp + 0x230]
xor eax, eax
call fcn.637ac326
mov byte [esp + 0x22d], 0x43
mov word [esp + 0x22e], 0x5c3a
mov dword [esp + 0x230], 0x646e6977
mov dword [esp + 0x234], 0x5c73776f
mov dword [esp + 0x238], 0x74737953
mov dword [esp + 0x23c], 0x32336d65
mov dword [esp + 0x240], 0x6972445c
mov dword [esp + 0x244], 0x73726576
mov dword [esp + 0x248], 0x544d565c
mov dword [esp + 0x24c], 0x736c6f6f
mov dword [esp + 0x250], 0x6b6f6f48
mov dword [esp + 0x254], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0x22d]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2b
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3c0], edx
mov dword [esp + 0x3bc], ecx
mov dword [esp + 0x203], 0
lea edi, [esp + 0x205]
xor eax, eax
call fcn.637ac326
mov word [esp + 0x203], 0x3a43
mov dword [esp + 0x205], 0x6e69775c
mov dword [esp + 0x209], 0x73776f64
mov dword [esp + 0x20d], 0x7379535c
mov dword [esp + 0x211], 0x336d6574
mov dword [esp + 0x215], 0x72445c32
mov dword [esp + 0x219], 0x72657669
mov dword [esp + 0x21d], 0x6d765c73
mov dword [esp + 0x221], 0x73756f6d
mov dword [esp + 0x225], 0x72657665
mov dword [esp + 0x229], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0x203]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2a
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3c8], edx
mov dword [esp + 0x3c4], ecx
mov dword [esp + 0x1dd], 0
lea edi, [esp + 0x1df]
xor eax, eax
call fcn.637ac327
mov word [esp + 0x1dd], 0x3a43
mov dword [esp + 0x1df], 0x6e69775c
mov dword [esp + 0x1e3], 0x73776f64
mov dword [esp + 0x1e7], 0x7379535c
mov dword [esp + 0x1eb], 0x336d6574
mov dword [esp + 0x1ef], 0x72445c32
mov dword [esp + 0x1f3], 0x72657669
mov dword [esp + 0x1f7], 0x6d765c73
mov dword [esp + 0x1fb], 0x73666768
mov dword [esp + 0x1ff], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0x1dd]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x26
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3d0], edx
mov dword [esp + 0x3cc], ecx
mov dword [esp + 0x1b3], 0
lea edi, [esp + 0x1b5]
xor eax, eax
call fcn.637ac326
mov word [esp + 0x1b3], 0x3a43
mov dword [esp + 0x1b5], 0x6e69775c
mov dword [esp + 0x1b9], 0x73776f64
mov dword [esp + 0x1bd], 0x7379535c
mov dword [esp + 0x1c1], 0x336d6574
mov dword [esp + 0x1c5], 0x72445c32
mov dword [esp + 0x1c9], 0x72657669
mov dword [esp + 0x1cd], 0x6d765c73
mov dword [esp + 0x1d1], 0x73657547
mov dword [esp + 0x1d5], 0x62694c74
mov dword [esp + 0x1d9], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0x1b3]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2a
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3d8], edx
mov dword [esp + 0x3d4], ecx
mov dword [esp + 0x18a], 0
lea edi, [esp + 0x18b]
xor eax, eax
call fcn.637ac326
mov byte [esp + 0x18a], 0x43
mov dword [esp + 0x18b], 0x69775c3a
mov dword [esp + 0x18f], 0x776f646e
mov dword [esp + 0x193], 0x79535c73
mov dword [esp + 0x197], 0x6d657473
mov dword [esp + 0x19b], 0x445c3233
mov dword [esp + 0x19f], 0x65766972
mov dword [esp + 0x1a3], 0x565c7372
mov dword [esp + 0x1a7], 0x4d786f42
mov dword [esp + 0x1ab], 0x6573756f
mov dword [esp + 0x1af], 0x7379732e
mov dword [esp], 0
lea ecx, [esp + 0x18a]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x29
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3e0], edx
mov dword [esp + 0x3dc], ecx
mov dword [esp + 0x161], 0
lea edi, [esp + 0x162]
xor eax, eax
call fcn.637ac326
mov byte [esp + 0x161], 0x43
mov dword [esp + 0x162], 0x69775c3a
mov dword [esp + 0x166], 0x776f646e
mov dword [esp + 0x16a], 0x79535c73
mov dword [esp + 0x16e], 0x6d657473
mov dword [esp + 0x172], 0x445c3233
mov dword [esp + 0x176], 0x65766972
mov dword [esp + 0x17a], 0x565c7372
mov dword [esp + 0x17e], 0x47786f42
mov dword [esp + 0x182], 0x74736575
mov dword [esp + 0x186], 0x7379732e
mov dword [esp], 0
lea ecx, [esp + 0x161]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x29
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3e8], edx
mov dword [esp + 0x3e4], ecx
mov dword [esp + 0x13b], 0
lea edi, [esp + 0x13d]
xor eax, eax
call fcn.637ac327
mov word [esp + 0x13b], 0x3a43
mov dword [esp + 0x13d], 0x6e69775c
mov dword [esp + 0x141], 0x73776f64
mov dword [esp + 0x145], 0x7379535c
mov dword [esp + 0x149], 0x336d6574
mov dword [esp + 0x14d], 0x72445c32
mov dword [esp + 0x151], 0x72657669
mov dword [esp + 0x155], 0x42565c73
mov dword [esp + 0x159], 0x4653786f
mov dword [esp + 0x15d], 0x7379732e
mov dword [esp], 0
lea ecx, [esp + 0x13b]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x26
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3f0], edx
mov dword [esp + 0x3ec], ecx
mov dword [esp + 0x112], 0
lea edi, [esp + 0x113]
xor eax, eax
call fcn.637ac326
mov byte [esp + 0x112], 0x43
mov dword [esp + 0x113], 0x69775c3a
mov dword [esp + 0x117], 0x776f646e
mov dword [esp + 0x11b], 0x79535c73
mov dword [esp + 0x11f], 0x6d657473
mov dword [esp + 0x123], 0x445c3233
mov dword [esp + 0x127], 0x65766972
mov dword [esp + 0x12b], 0x565c7372
mov dword [esp + 0x12f], 0x56786f42
mov dword [esp + 0x133], 0x6f656469
mov dword [esp + 0x137], 0x7379732e
mov dword [esp], 0
lea ecx, [esp + 0x112]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x29
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3f8], edx
mov dword [esp + 0x3f4], ecx
lea edi, [esp + 0xf2]
xor eax, eax
call fcn.637ac328
mov dword [esp + 0xf2], 0x775c3a43
mov dword [esp + 0xf6], 0x6f646e69
mov dword [esp + 0xfa], 0x535c7377
mov dword [esp + 0xfe], 0x65747379
mov dword [esp + 0x102], 0x5c32336d
mov dword [esp + 0x106], 0x786f6276
mov dword [esp + 0x10a], 0x70736964
mov dword [esp + 0x10e], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0xf2]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x400], edx
mov dword [esp + 0x3fc], ecx
lea edi, [esp + 0xd2]
xor eax, eax
call fcn.637ac328
mov dword [esp + 0xd2], 0x775c3a43
mov dword [esp + 0xd6], 0x6f646e69
mov dword [esp + 0xda], 0x535c7377
mov dword [esp + 0xde], 0x65747379
mov dword [esp + 0xe2], 0x5c32336d
mov dword [esp + 0xe6], 0x786f6276
mov dword [esp + 0xea], 0x6b6f6f68
mov dword [esp + 0xee], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0xd2]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x408], edx
mov dword [esp + 0x404], ecx
mov dword [esp + 0xab], 0
lea edi, [esp + 0xae]
xor eax, eax
call fcn.637ac327
mov byte [esp + 0xab], 0x43
mov word [esp + 0xac], 0x5c3a
mov dword [esp + 0xae], 0x646e6977
mov dword [esp + 0xb2], 0x5c73776f
mov dword [esp + 0xb6], 0x74737953
mov dword [esp + 0xba], 0x32336d65
mov dword [esp + 0xbe], 0x6f62765c
mov dword [esp + 0xc2], 0x6c676f78
mov dword [esp + 0xc6], 0x6f727265
mov dword [esp + 0xca], 0x75707372
mov dword [esp + 0xce], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0xab]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x27
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x410], edx
mov dword [esp + 0x40c], ecx
mov dword [esp + 0x7e], 0
lea edi, [esp + 0x7f]
xor eax, eax
call fcn.637ac325
mov byte [esp + 0x7e], 0x43
mov dword [esp + 0x7f], 0x69775c3a
mov dword [esp + 0x83], 0x776f646e
mov dword [esp + 0x87], 0x79535c73
mov dword [esp + 0x8b], 0x6d657473
mov dword [esp + 0x8f], 0x765c3233
mov dword [esp + 0x93], 0x6f786f62
mov dword [esp + 0x97], 0x61706c67
mov dword [esp + 0x9b], 0x68747373
mov dword [esp + 0x9f], 0x67756f72
mov dword [esp + 0xa3], 0x75707368
mov dword [esp + 0xa7], 0x6c6c642e
mov dword [esp], 0
lea ecx, [esp + 0x7e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2d
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x418], edx
mov dword [esp + 0x414], ecx
mov dword [esp + 0x5b], 0
lea edi, [esp + 0x5e]
xor eax, eax
call fcn.637ac328
mov byte [esp + 0x5b], 0x43
mov word [esp + 0x5c], 0x5c3a
mov dword [esp + 0x5e], 0x646e6977
mov dword [esp + 0x62], 0x5c73776f
mov dword [esp + 0x66], 0x74737953
mov dword [esp + 0x6a], 0x32336d65
mov dword [esp + 0x6e], 0x6f62765c
mov dword [esp + 0x72], 0x72657378
mov dword [esp + 0x76], 0x65636976
mov dword [esp + 0x7a], 0x6578652e
mov dword [esp], 0
lea ecx, [esp + 0x5b]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x23
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x420], edx
mov dword [esp + 0x41c], ecx
lea edi, [esp + 0x3b]
xor eax, eax
call fcn.637ac328
mov dword [esp + 0x3b], 0x775c3a43
mov dword [esp + 0x3f], 0x6f646e69
mov dword [esp + 0x43], 0x535c7377
mov dword [esp + 0x47], 0x65747379
mov dword [esp + 0x4b], 0x5c32336d
mov dword [esp + 0x4f], 0x786f6276
mov dword [esp + 0x53], 0x79617274
mov dword [esp + 0x57], 0x6578652e
mov dword [esp], 0
lea ecx, [esp + 0x3b]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x428], edx
mov dword [esp + 0x424], ecx
mov dword [esp + 0x18], 0
lea edi, [esp + 0x1b]
xor eax, eax
call fcn.637ac328
mov byte [esp + 0x18], 0x43
mov word [esp + 0x19], 0x5c3a
mov dword [esp + 0x1b], 0x646e6977
mov dword [esp + 0x1f], 0x5c73776f
mov dword [esp + 0x23], 0x74737953
mov dword [esp + 0x27], 0x32336d65
mov dword [esp + 0x2b], 0x6f42565c
mov dword [esp + 0x2f], 0x6e6f4378
mov dword [esp + 0x33], 0x6c6f7274
mov dword [esp + 0x37], 0x6578652e
mov dword [esp], 0
lea ecx, [esp + 0x18]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x23
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x430], edx
mov dword [esp + 0x42c], ecx
xor eax, eax
jmp 0x638b9d7e
mov ecx, dword [esp + 0x398]
lea eax, [ecx + 1]
cmp eax, 0x13
jge 0x638b9dba
mov dword [esp + 0x398], eax
lea ecx, [esp + eax*8 + 0x39c]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.638b8960
movzx eax, byte [esp + 8]
test al, al
je 0x638b9d74
mov byte [esp + 0x438], 1
add esp, 0x434
ret
mov dword [esp + 0x2d6], 0
lea edi, [esp + 0x2d8]
xor eax, eax
call fcn.637ac300
mov word [esp + 0x2d6], 0x6d76
mov dword [esp + 0x2d8], 0x6c6f6f74
mov dword [esp + 0x2dc], 0x652e6473
mov dword [esp + 0x2e0], 0x702c6578
mov dword [esp + 0x2e4], 0x635f6c72
mov dword [esp + 0x2e8], 0x78652e63
mov dword [esp + 0x2ec], 0x54502c65
mov dword [esp + 0x2f0], 0x65674149
mov dword [esp + 0x2f4], 0x652e746e
mov dword [esp + 0x2f8], 0x702c6578
mov dword [esp + 0x2fc], 0x745f6c72
mov dword [esp + 0x300], 0x736c6f6f
mov dword [esp + 0x304], 0x6578652e
mov dword [esp + 0x308], 0x6c72702c
mov dword [esp + 0x30c], 0x6f6f745f
mov dword [esp + 0x310], 0x735f736c
mov dword [esp + 0x314], 0x69767265
mov dword [esp + 0x318], 0x652e6563
mov dword [esp + 0x31c], 0x762c6578
mov dword [esp + 0x320], 0x7261776d
mov dword [esp + 0x324], 0x61727465
mov dword [esp + 0x328], 0x78652e74
mov dword [esp + 0x32c], 0x6d562c65
mov dword [esp + 0x330], 0x65726177
mov dword [esp + 0x334], 0x72657375
mov dword [esp + 0x338], 0x6578652e
mov dword [esp + 0x33c], 0x616d562c
mov dword [esp + 0x340], 0x6c687463
mov dword [esp + 0x344], 0x78652e70
mov dword [esp + 0x348], 0x62762c65
mov dword [esp + 0x34c], 0x6573786f
mov dword [esp + 0x350], 0x63697672
mov dword [esp + 0x354], 0x78652e65
mov dword [esp + 0x358], 0x62762c65
mov dword [esp + 0x35c], 0x7274786f
mov dword [esp + 0x360], 0x652e7961
mov dword [esp + 0x364], 0x782c6578
mov dword [esp + 0x368], 0x65736e65
mov dword [esp + 0x36c], 0x63697672
mov dword [esp + 0x370], 0x78652e65
mov dword [esp + 0x374], 0x65712c65
mov dword [esp + 0x378], 0x672d756d
mov dword [esp + 0x37c], 0x78652e61
mov dword [esp + 0x380], 0x6d762c65
mov dword [esp + 0x384], 0x76727375
mov dword [esp + 0x388], 0x78652e63
mov dword [esp + 0x38c], 0x6d762c65
mov dword [esp + 0x390], 0x63767273
mov dword [esp + 0x394], 0x6578652e
mov dword [esp], 0
lea ecx, [esp + 0x2d6]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xc2
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.6386f730
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x638ba07f
call fcn.638ba600
movzx eax, byte [esp]
test al, al
jne 0x638ba070
call fcn.638ba0a0
movzx eax, byte [esp]
test al, al
je 0x638ba061
mov byte [esp + 0x438], 1
add esp, 0x434
ret
mov byte [esp + 0x438], 0
add esp, 0x434
ret
mov byte [esp + 0x438], 1
add esp, 0x434
ret
mov byte [esp + 0x438], 1
add esp, 0x434
ret
call fcn.637aaca0
jmp fcn.638b9020