Function at 0x6449c790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov edx, 0x644e6f20
mov ebp, esp
push edi
mov edi, edx
push esi
push ebx
mov ebx, ecx
sub esp, 0x3c
mov eax, dword [ebp + 8]
mov dword [ecx + 8], 0x30
mov dword [0x644e6e08], 0
mov dword [ecx], eax
xor eax, eax
mov ecx, 0x30
rep stosd dword es:[edi], eax
mov dword [ebx + 4], edx
mov edx, 0x644e6e20
mov ecx, 0x30
mov edi, edx
mov dword [ebx + 0xc], edx
rep stosd dword es:[edi], eax
mov dword [ebx + 0x10], 0x644e6e04
mov dword [0x644e6e0c], 0
mov dword [0x644e6e10], 0
mov dword [0x644e6e14], 0
mov dword [0x644e6e18], 0
mov dword [0x644e6e04], 0x644e68e0
call fcn.6449d890
mov ecx, 0x644e6900
movzx eax, word [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov word [0x644e68e0], ax
call fcn.64499440
sub esp, 0xc
mov ecx, ebx
mov dword [esp + 4], 0x644e6900
mov dword [esp], 0x644e7180
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6ee0
mov dword [esp], 1
call fcn.644b9030
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6ee0
mov dword [esp], 0x644e71f8
call fcn.6449bf60
sub esp, 8
xor ecx, ecx
mov dword [0x644e6464], 1
mov dword [esp], 0
mov word [0x644e6484], cx
mov ecx, 0x644e6348
mov dword [0x644e6460], 0x644f2560
mov dword [0x644e6468], 0
mov dword [0x644e646c], 0
mov byte [0x644e6470], 0
mov dword [0x644e6474], 0
mov dword [0x644e6478], 0
mov dword [0x644e647c], 0
mov dword [0x644e6480], 0
mov byte [0x644e64c4], 0
mov dword [0x644e634c], 1
mov dword [0x644e6348], 0x644f1e98
mov dword [0x644e6350], 0x644e6460
call fcn.644b84a0
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6348
mov dword [esp], 0x644e71c8
call fcn.6449bf60
mov dword [0x644e6fe4], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6fe0
mov dword [esp], 0x644e7208
mov dword [0x644e6fe0], 0x644f2bf8
call fcn.6449bf60
mov dword [0x644e6ff4], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6ff0
mov dword [esp], 0x644e7210
mov dword [0x644e6ff0], 0x644f2c70
call fcn.6449bf60
mov dword [0x644e6efc], 1
sub esp, 8
mov dword [0x644e6ef8], 0x644f1e28
call fcn.6449d8a0
mov dword [esp + 4], 0x644e6ef8
mov ecx, ebx
mov dword [esp], 0x644e71b8
mov dword [0x644e6f00], eax
call fcn.6449bf60
sub esp, 8
xor edx, edx
mov ecx, 0x644e63f0
mov dword [0x644e6764], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [0x644e6760], 0x644f2698
mov dword [0x644e6768], 0
mov dword [0x644e676c], 0
mov word [0x644e6770], dx
mov byte [0x644e6772], 0
mov dword [0x644e6774], 0
mov dword [0x644e6778], 0
mov dword [0x644e677c], 0
mov dword [0x644e6780], 0
mov dword [0x644e6784], 0
mov dword [0x644e6788], 0
mov dword [0x644e678c], 0
mov dword [0x644e6790], 0
mov dword [0x644e6794], 0
mov byte [0x644e67a3], 0
mov dword [0x644e63f4], 1
mov dword [0x644e63f0], 0x644f19e0
mov dword [0x644e63f8], 0x644e6760
call fcn.644a2af0
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e63f0
mov dword [esp], 0x644e71a8
call fcn.6449bf60
sub esp, 8
xor eax, eax
mov ecx, 0x644e63fc
mov dword [0x644e67c4], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [0x644e67c0], 0x644f26a8
mov dword [0x644e67c8], 0
mov dword [0x644e67cc], 0
mov word [0x644e67d0], ax
mov byte [0x644e67d2], 0
mov dword [0x644e67d4], 0
mov dword [0x644e67d8], 0
mov dword [0x644e67dc], 0
mov dword [0x644e67e0], 0
mov dword [0x644e67e4], 0
mov dword [0x644e67e8], 0
mov dword [0x644e67ec], 0
mov dword [0x644e67f0], 0
mov dword [0x644e67f4], 0
mov byte [0x644e6803], 0
mov dword [0x644e6400], 1
mov dword [0x644e63fc], 0x644f1a14
mov dword [0x644e6404], 0x644e67c0
call fcn.644a2ec0
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e63fc
mov dword [esp], 0x644e71ac
call fcn.6449bf60
mov dword [0x644e6394], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6390
mov dword [esp], 0x644e71d8
mov dword [0x644e6390], 0x644f1f38
call fcn.6449bf60
mov dword [0x644e63a4], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e63a0
mov dword [esp], 0x644e71e0
mov dword [0x644e63a0], 0x644f1f68
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e63b0
mov dword [0x644e65a4], 1
mov dword [0x644e65a0], 0x644f2594
mov dword [0x644e65a8], 0
mov dword [0x644e65ac], 0
mov dword [0x644e65b0], 0
mov dword [0x644e65b4], 0
mov dword [0x644e65b8], 0
mov dword [0x644e65bc], 0
mov dword [0x644e65c0], 0
mov dword [0x644e65c4], 0
mov dword [0x644e65c8], 0
mov dword [0x644e65cc], 0
mov dword [0x644e65d0], 0
mov dword [0x644e65d4], 0
mov dword [0x644e65d8], 0
mov dword [0x644e65dc], 0
mov dword [0x644e65e0], 0
mov dword [0x644e65e4], 0
mov dword [0x644e65e8], 0
mov dword [0x644e65ec], 0
mov dword [0x644e65f0], 0
mov dword [0x644e65f4], 0
mov dword [0x644e65f8], 0
mov dword [0x644e65fc], 0
mov dword [0x644e6600], 0
mov dword [0x644e6604], 0
mov dword [0x644e6608], 0
mov dword [0x644e660c], 0
mov dword [0x644e6610], 0
mov dword [0x644e6614], 0
mov dword [0x644e6618], 0
mov dword [0x644e661c], 0
mov dword [0x644e6620], 0
mov dword [esp + 4], 1
mov dword [esp], 0x644e65a0
mov dword [0x644e6624], 0
mov dword [0x644e6628], 0
mov dword [0x644e662c], 0
mov dword [0x644e6630], 0
mov dword [0x644e6634], 0
mov dword [0x644e6638], 0
mov dword [0x644e663c], 0
mov dword [0x644e6640], 0
mov dword [0x644e6644], 0
mov dword [0x644e6648], 0
mov dword [0x644e664c], 0
mov dword [0x644e6650], 0
mov dword [0x644e6654], 0
mov dword [0x644e6658], 0
mov dword [0x644e665c], 0
mov dword [0x644e6660], 0
mov byte [0x644e6664], 0
call fcn.64478050
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e63b0
mov dword [esp], 0x644e7048
call fcn.6449bf60
mov dword [0x644e6364], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6360
mov dword [esp], 0x644e71d0
mov dword [0x644e6360], 0x644f1ee0
call fcn.6449bf60
mov dword [0x644e6374], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6370
mov dword [esp], 0x644e7238
mov dword [0x644e6370], 0x644f2dc4
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6328
mov dword [esp], 1
call fcn.644b81c0
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6328
mov dword [esp], 0x644e71c0
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6b20
mov dword [esp], 1
call fcn.64499700
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6b20
mov dword [esp], 0x644e7184
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6eec
mov dword [esp], 1
call fcn.644b9130
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6eec
mov dword [esp], 0x644e71fc
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6354
mov dword [0x644e64e4], 1
mov dword [esp], 0
mov dword [0x644e64e0], 0x644f2570
mov dword [0x644e64e8], 0
mov dword [0x644e64ec], 0
mov byte [0x644e64f0], 0
mov dword [0x644e64f4], 0
mov dword [0x644e64f8], 0
mov dword [0x644e64fc], 0
mov dword [0x644e6500], 0
mov dword [0x644e6504], 0
mov byte [0x644e6584], 0
mov dword [0x644e6358], 1
mov dword [0x644e6354], 0x644f1ebc
mov dword [0x644e635c], 0x644e64e0
call fcn.644b87f0
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6354
mov dword [esp], 0x644e71cc
call fcn.6449bf60
mov dword [0x644e6fec], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6fe8
mov dword [esp], 0x644e720c
mov dword [0x644e6fe8], 0x644f2c34
call fcn.6449bf60
mov dword [0x644e6ffc], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6ff8
mov dword [esp], 0x644e7214
mov dword [0x644e6ff8], 0x644f2ca0
call fcn.6449bf60
mov dword [0x644e6f08], 1
sub esp, 8
mov dword [0x644e6f04], 0x644f1e44
call fcn.6449d8a0
mov dword [esp + 4], 0x644e6f04
mov ecx, ebx
mov dword [esp], 0x644e71bc
mov dword [0x644e6f0c], eax
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6408
mov dword [0x644e6824], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [0x644e6820], 0x644f26b8
mov dword [0x644e6828], 0
mov dword [0x644e682c], 0
mov byte [0x644e6830], 0
mov dword [0x644e6832], 0
mov dword [0x644e6838], 0
mov dword [0x644e683c], 0
mov dword [0x644e6840], 0
mov dword [0x644e6844], 0
mov dword [0x644e6848], 0
mov dword [0x644e684c], 0
mov dword [0x644e6850], 0
mov dword [0x644e6854], 0
mov dword [0x644e6858], 0
mov byte [0x644e6872], 0
mov dword [0x644e640c], 1
mov dword [0x644e6408], 0x644f1a48
mov dword [0x644e6410], 0x644e6820
call fcn.644a3290
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6408
mov dword [esp], 0x644e71b0
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6414
mov dword [0x644e6884], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [0x644e6880], 0x644f26c8
mov dword [0x644e6888], 0
mov dword [0x644e688c], 0
mov byte [0x644e6890], 0
mov dword [0x644e6892], 0
mov dword [0x644e6898], 0
mov dword [0x644e689c], 0
mov dword [0x644e68a0], 0
mov dword [0x644e68a4], 0
mov dword [0x644e68a8], 0
mov dword [0x644e68ac], 0
mov dword [0x644e68b0], 0
mov dword [0x644e68b4], 0
mov dword [0x644e68b8], 0
mov byte [0x644e68d2], 0
mov dword [0x644e6418], 1
mov dword [0x644e6414], 0x644f1a7c
mov dword [0x644e641c], 0x644e6880
call fcn.644a3660
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6414
mov dword [esp], 0x644e71b4
call fcn.6449bf60
mov dword [0x644e639c], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6398
mov dword [esp], 0x644e71dc
mov dword [0x644e6398], 0x644f1f50
call fcn.6449bf60
mov dword [0x644e63ac], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e63a8
mov dword [esp], 0x644e71e4
mov dword [0x644e63a8], 0x644f1f80
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e63c4
mov dword [0x644e6684], 1
mov dword [0x644e6680], 0x644f25a4
mov dword [0x644e6688], 0
mov dword [0x644e668c], 0
mov dword [0x644e6690], 0
mov dword [0x644e6694], 0
mov dword [0x644e6698], 0
mov dword [0x644e669c], 0
mov dword [0x644e66a0], 0
mov dword [0x644e66a4], 0
mov dword [0x644e66a8], 0
mov dword [0x644e66ac], 0
mov dword [0x644e66b0], 0
mov dword [0x644e66b4], 0
mov dword [0x644e66b8], 0
mov dword [0x644e66bc], 0
mov dword [0x644e66c0], 0
mov dword [0x644e66c4], 0
mov dword [0x644e66c8], 0
mov dword [0x644e66cc], 0
mov dword [0x644e66d0], 0
mov dword [0x644e66d4], 0
mov dword [0x644e66d8], 0
mov dword [0x644e66dc], 0
mov dword [0x644e66e0], 0
mov dword [0x644e66e4], 0
mov dword [0x644e66e8], 0
mov dword [0x644e66ec], 0
mov dword [0x644e66f0], 0
mov dword [0x644e66f4], 0
mov dword [0x644e66f8], 0
mov dword [0x644e66fc], 0
mov dword [0x644e6700], 0
mov dword [esp + 4], 1
mov dword [esp], 0x644e6680
mov dword [0x644e6704], 0
mov dword [0x644e6708], 0
mov dword [0x644e670c], 0
mov dword [0x644e6710], 0
mov dword [0x644e6714], 0
mov dword [0x644e6718], 0
mov dword [0x644e671c], 0
mov dword [0x644e6720], 0
mov dword [0x644e6724], 0
mov dword [0x644e6728], 0
mov dword [0x644e672c], 0
mov dword [0x644e6730], 0
mov dword [0x644e6734], 0
mov dword [0x644e6738], 0
mov dword [0x644e673c], 0
mov dword [0x644e6740], 0
mov byte [0x644e6744], 0
call fcn.644787d0
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e63c4
mov dword [esp], 0x644e704c
call fcn.6449bf60
mov dword [0x644e636c], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6368
mov dword [esp], 0x644e71d4
mov dword [0x644e6368], 0x644f1f0c
call fcn.6449bf60
mov dword [0x644e637c], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6378
mov dword [esp], 0x644e723c
mov dword [0x644e6378], 0x644f2dd8
call fcn.6449bf60
sub esp, 8
mov ecx, 0x644e6338
mov dword [esp], 1
call fcn.644b8350
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0x644e6338
mov dword [esp], 0x644e71c4
call fcn.6449bf60
mov dword [0x644e6384], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6380
mov dword [esp], 0x644e71f4
mov dword [0x644e6380], 0x644f2b3c
call fcn.6449bf60
mov dword [0x644e638c], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6388
mov dword [esp], 0x644e71ec
mov dword [0x644e6388], 0x644f2ae4
call fcn.6449bf60
mov dword [0x644e6424], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6420
mov dword [esp], 0x644e71f0
mov dword [0x644e6420], 0x644f2b10
call fcn.6449bf60
mov dword [0x644e642c], 1
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 0x644e6428
mov dword [esp], 0x644e71e8
mov dword [0x644e6428], 0x644f2ab8
call fcn.6449bf60
sub esp, 8
lea eax, [ebp - 0x30]
mov ecx, ebx
mov dword [ebp - 0x30], 0x644e6460
mov dword [esp], eax
mov dword [ebp - 0x2c], 0x644e6760
mov dword [ebp - 0x28], 0x644e67c0
mov dword [ebp - 0x24], 0x644e64e0
mov dword [ebp - 0x20], 0x644e6820
mov dword [ebp - 0x1c], 0x644e6880
call fcn.6449aed0
sub esp, 4
mov esi, dword [ebx + 0xc]
mov ecx, 0x644e71c8
call fcn.6442ab80
mov ecx, 0x644e71a8
mov dword [esi + eax*4], 0x644e6460
mov esi, dword [ebx + 0xc]
call fcn.6442ab80
mov ecx, 0x644e71ac
mov dword [esi + eax*4], 0x644e6760
mov esi, dword [ebx + 0xc]
call fcn.6442ab80
mov ecx, 0x644e7048
mov dword [esi + eax*4], 0x644e67c0
mov esi, dword [ebx + 0xc]
call fcn.6442ab80
mov ecx, 0x644e71cc
mov dword [esi + eax*4], 0x644e65a0
mov esi, dword [ebx + 0xc]
call fcn.6442ab80
mov ecx, 0x644e71b0
mov dword [esi + eax*4], 0x644e64e0
mov esi, dword [ebx + 0xc]
call fcn.6442ab80
mov ecx, 0x644e71b4
mov dword [esi + eax*4], 0x644e6820
mov esi, dword [ebx + 0xc]
call fcn.6442ab80
mov ebx, dword [ebx + 0xc]
mov ecx, 0x644e704c
mov dword [esi + eax*4], 0x644e6880
call fcn.6442ab80
mov dword [ebx + eax*4], 0x644e6680
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 4