Function at 0x638ba0a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword [0x63aa7440]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x638ba575
sub esp, 0x130
mov eax, 0
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov byte [esp + 0x23], 0
mov byte [esp + 0x134], 0
mov dword [esp + 0xe1], 0
lea edi, [esp + 0xe4]
xor eax, eax
call fcn.637ac326
mov byte [esp + 0xe1], 0x53
mov word [esp + 0xe2], 0x5359
mov dword [esp + 0xe4], 0x5c4d4554
mov dword [esp + 0xe8], 0x72727543
mov dword [esp + 0xec], 0x43746e65
mov dword [esp + 0xf0], 0x72746e6f
mov dword [esp + 0xf4], 0x65536c6f
mov dword [esp + 0xf8], 0x6f435c74
mov dword [esp + 0xfc], 0x6f72746e
mov dword [esp + 0x100], 0x49435c6c
mov dword [esp + 0x104], 0x7365545c
mov dword [esp + 0x108], 0x676e6974
lea ecx, [esp + 0x84]
mov dword [esp], ecx
lea ecx, [esp + 0xe1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2b
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], 0x80000002
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.638b8b70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x638ba55a
mov eax, dword [esp + 0x10]
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
lea ecx, [0x638ba5c0]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], eax
lea ecx, [esp + 0x11c]
mov dword [esp + 0x128], ecx
mov byte [esp + 0x23], 1
mov dword [esp], eax
lea eax, [0x63936f3c]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
call fcn.638b8e80
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x638ba53b
lea edi, [esp + 0xc1]
xor eax, eax
call fcn.637ac328
mov dword [esp + 0xc1], 0x54535953
mov dword [esp + 0xc5], 0x435c4d45
mov dword [esp + 0xc9], 0x65727275
mov dword [esp + 0xcd], 0x6f43746e
mov dword [esp + 0xd1], 0x6f72746e
mov dword [esp + 0xd5], 0x7465536c
mov dword [esp + 0xd9], 0x6e6f435c
mov dword [esp + 0xdd], 0x6c6f7274
lea ecx, [esp + 0x64]
mov dword [esp], ecx
lea ecx, [esp + 0xc1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.63794310
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], 0x80000002
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.638b8b70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x638ba51c
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10c], eax
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
lea ecx, [0x638ba580]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
lea ecx, [esp + 0x114]
mov dword [esp + 0x12c], ecx
mov byte [esp + 0x23], 3
mov dword [esp + 0xaf], 0
mov dword [esp + 0xb1], 0
mov dword [esp + 0xb5], 0
mov dword [esp + 0xb9], 0
mov dword [esp + 0xbd], 0
mov word [esp + 0xaf], 0x7953
mov dword [esp + 0xb1], 0x6d657473
mov dword [esp + 0xb5], 0x72617453
mov dword [esp + 0xb9], 0x74704f74
mov dword [esp + 0xbd], 0x736e6f69
lea ecx, [esp + 0x44]
mov dword [esp], ecx
lea ecx, [esp + 0xaf]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x12
call fcn.63794310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.638b8e80
mov eax, dword [esp + 0x18]
test eax, eax
je 0x638ba4be
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.637cebf0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x124], ecx
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa7], 0
mov dword [esp + 0xab], 0
mov byte [esp + 0xa4], 0x54
mov word [esp + 0xa5], 0x5345
mov dword [esp + 0xa7], 0x47495354
mov dword [esp + 0xab], 0x474e494e
lea edx, [esp + 0x24]
mov dword [esp], edx
lea edx, [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
call fcn.63794310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.637cebf0
mov eax, dword [esp + 0x110]
cmp dword [esp + 0xc], eax
jne 0x638ba4be
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x124]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.63743940
movzx eax, byte [esp + 0xc]
test al, al
jne 0x638ba4ed
mov byte [esp + 0x134], 0
mov byte [esp + 0x23], 1
mov edx, dword [esp + 0x12c]
mov eax, dword [edx]
call eax
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 1
mov byte [esp + 0x23], 1
mov edx, dword [esp + 0x12c]
mov eax, dword [edx]
call eax
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 0
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 1
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 0
add esp, 0x130
ret
call fcn.637aaca0
jmp fcn.638ba0a0