Function at 0x636dec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x6b476c
call fcn.0067aec0
sub esp, 0x38
push ebx
push esi
push edi
lea ecx, [ebp - 0x10]
push dword [ebp + 0xc]
call fcn.006791d4
mov eax, dword [ebp - 0x10]
push dword [ebp + 8]
xor ebx, ebx
mov esi, dword [eax - 8]
mov dword [ebp - 4], ebx
call dword [0x6bbe8c]
cmp esi, eax
jg 0x636e88
mov dword [ebp - 0x30], ebx
push dword [ebp + 8]
mov byte [ebp - 4], 1
call fcn.006376cd
mov edi, eax
pop ecx
cmp edi, ebx
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], edi
je 0x636e88
mov dword [ebp + 0xc], ebx
mov esi, dword [ebp + 0x18]
mov byte [ebp - 4], 2
cmp esi, ebx
mov dword [ebp - 0x14], esi
jge 0x636e50
xor eax, eax
jmp 0x636e52
mov eax, esi
mov ecx, dword [edi]
lea edx, [ebp + 0xc]
push edx
push eax
push dword [ebp + 0x14]
push edi
call dword [ecx + 0x60]
cmp eax, ebx
je 0x636e77
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x636e7e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x636e7e
mov eax, dword [ebp + 0xc]
cmp eax, ebx
jne 0x636e9b
mov eax, dword [edi]
and byte [ebp - 4], 0
push edi
call dword [eax + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.006791bc
xor eax, eax
jmp 0x63716b
push dword [ebp + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c]
mov eax, dword [ebp + 0xc]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x24], esi
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
mov eax, dword [ebp + 0xc]
lea edx, [ebp - 0x34]
mov dword [ebp - 0x34], ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
lea ecx, [ebp - 0x10]
call fcn.0067a764
push eax
call dword [0x6bba8c]
mov dword [ebp + 0x18], eax
cmp esi, ebx
mov byte [ebp - 4], 3
jge 0x636ff1
cmp esi, 0xffffffff
jge 0x636ff1
or dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp + 8]
call fcn.006791ce
push str.File:
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0067933c
lea eax, [ebp - 0x2c]
push str.E:Gosha.CPPAmlPagesTomUtil.cpp
push eax
call fcn.00485e0e
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.006791da
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.006791bc
push str.__Function:
lea ecx, [ebp + 8]
call fcn.0067933c
push str.CTomUtil::FindText_As_TOMSettings
lea ecx, [ebp + 8]
call fcn.0067933c
push str.__Line:
lea ecx, [ebp + 8]
call fcn.0067933c
lea eax, [ebp - 0x2c]
push 0x374
push eax
call fcn.004872be
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.006791da
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.006791bc
push str.__Invalid_lEnd_Value:
lea ecx, [ebp + 8]
call fcn.0067933c
lea eax, [ebp - 0x2c]
push esi
push eax
call fcn.004872be
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call fcn.006791da
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.006791bc
push str.__IN_lEnd_Value:
lea ecx, [ebp + 8]
call fcn.0067933c
lea eax, [ebp - 0x2c]
push esi
push eax
call fcn.004872be
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 8
call fcn.006791da
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.006791bc
mov byte [ebp - 4], 3
lea ecx, [ebp + 8]
call fcn.006791bc
push dword [ebp - 0x14]
push dword [ebp + 0x14]
call fcn.00637296
pop ecx
lea edx, [ebp - 0x1c]
pop ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
push edx
push dword [ebp + 0x10]
mov dword [ebp - 0x1c], ebx
mov ecx, dword [eax]
mov dword [ebp + 8], ebx
push dword [ebp - 0x2c]
push dword [ebp + 0x18]
push eax
call dword [ecx + 0xb0]
mov esi, dword [reloc.OLEAUT32.dll_SysStringLen]
test eax, eax
jne 0x63713c
mov ebx, 0x12c
inc dword [ebp + 8]
cmp dword [ebp + 8], ebx
jae 0x63717a
and dword [ebp - 0x44], 0
xor eax, eax
lea edi, [ebp - 0x40]
lea edx, [ebp - 0x44]
stosd dword es:[edi], eax
mov eax, dword [ebp + 0xc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
and dword [ebp - 0x18], 0
lea edi, [ecx + eax]
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x40], edi
push dword [ebp + 0xc]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
call fcn.006372a9
add esp, 0x18
mov byte [ebp + 0x17], al
test al, al
je 0x6370b1
mov eax, dword [ebp - 0x18]
and eax, 1
test al, al
jne 0x6370b1
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x28], 0xffffffff
lea edx, [ebp - 0x28]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x28]
sub eax, edi
test eax, eax
jle 0x6370b1
add dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
test ecx, ecx
jle 0x6370bd
cmp dword [ebp - 0x44], ecx
jg 0x637139
cmp byte [ebp + 0x17], 0
je 0x63726e
mov eax, dword [ebp - 0x18]
and eax, 1
test al, al
jne 0x6370dc
mov eax, dword [ebp + 0xc]
push ecx
push edi
push eax
mov edx, dword [eax]
call dword [edx + 0x70]
mov eax, dword [ebp - 0x18]
and eax, 2
cmp al, 2
jne 0x637102
lea ecx, [ebp - 0x10]
call fcn.0067a764
push dword [ebp + 0x18]
mov dword [ebp + 0x14], eax
call esi
push dword [ebp + 0x14]
call dword [0x6bba8c]
mov dword [ebp + 0x18], eax
mov eax, dword [ebp + 0xc]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
cmp dword [ebp - 0x24], 0
je 0x637114
jle 0x637139
lea edx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
push edx
and dword [ebp - 0x1c], 0
push dword [ebp + 0x10]
mov ecx, dword [eax]
push dword [ebp - 0x2c]
push dword [ebp + 0x18]
push eax
call dword [ecx + 0xb0]
test eax, eax
je 0x637033
mov edi, dword [ebp - 0x20]
push dword [ebp + 0x18]
call esi
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
test eax, eax
je 0x637152
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [edi]
and byte [ebp - 4], 0
push edi
call dword [eax + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.006791bc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
lea ecx, [ebp + 0x14]
call fcn.006791ce
push dword [ebp + 8]
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 9
push eax
call fcn.004872be
mov edi, eax
lea eax, [ebp - 0x38]
push ebx
push eax
mov byte [ebp - 4], 0xa
call fcn.004872be
add esp, 0x10
mov ebx, eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x14]
push str.Founded_count_great_than_BUG_MAX_COUNT_in_CTomUtil::FindText__search__
push eax
call fcn.006791f2
push str.___BUG_MAX_COUNT
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
push eax
call fcn.006791ec
push ebx
push eax
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0xd
push eax
call fcn.006791e6
push str.nCount_
push eax
lea eax, [ebp + 0x20]
mov byte [ebp - 4], 0xe
push eax
call fcn.006791ec
push edi
push eax
lea eax, [ebp + 0x10]
mov byte [ebp - 4], 0xf
push eax
call fcn.006791e6
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x10
call fcn.006791e0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xf
call fcn.006791bc
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0xe
call fcn.006791bc
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xd
call fcn.006791bc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.006791bc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call fcn.006791bc
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.006791bc
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.006791bc
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x14]
call fcn.006791bc
push dword [ebp + 0x18]
call esi
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
test eax, eax
je 0x637284
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
and byte [ebp - 4], 0
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x63715c