Function at 0x638880
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00632000
add esp, 0xc
shl edi, 0
xor ecx, 0
jl 0x6388a7
lea edi, [edi]
jge 0x6388a7
mov ebx, 0xb065b2b2
mov cl, 0x6d
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], dl
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], dl
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], al
lea edx, [edx]
ja 0x6388ee
jp 0x6388f0
lea ecx, [ecx + 0x56cb]
lea ecx, [ecx - 0x56cb]
jns 0x638911
lea esi, [esi + 0x2591]
lea esi, [esi - 0x2591]
nop
jmp 0x63890d
js 0x638911
mov edi, 0xe44d8a24
mov cl, byte [ebp - 0x1c]
mov al, byte [ebp - 0x17]
mov bl, byte [ebp - 0x12]
mov dl, byte [ebp - 0xd]
dec cl
dec al
mov byte [ebp - 0x1c], cl
mov cl, byte [ebp - 0x1b]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x16]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0x11]
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x1a]
dec cl
dec al
mov byte [ebp - 0x1b], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0x19]
mov byte [ebp - 0x1a], dl
mov dl, byte [ebp - 0x14]
dec cl
dec al
mov byte [ebp - 0x15], cl
mov cl, byte [ebp - 0xf]
dec bl
mov byte [ebp - 0x10], al
mov al, byte [ebp - 0x18]
dec dl
mov byte [ebp - 0x19], bl
mov bl, byte [ebp - 0x13]
mov byte [ebp - 0x14], dl
mov dl, byte [ebp - 0xe]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], al
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], dl
xor ebx, ecx
xor ebx, ecx
jp 0x638997
jbe 0x638999
jnp 0x6389b1
pushf
ror ebx, 0x15
ror ebx, 0xb
sub edx, 0
popf
jns 0x6389aa
xchg esi, edi
xchg esi, edi
jp 0x6389b1
mov esi, 0xfed30ae8
inc dword [ebp + 0x5f0975c0]
call fcn.00625cc0
test eax, eax
jne 0x6389c3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
or esi, 0
mov ecx, ecx
shl edi, 0
je 0x6389ed
pushf
cmp eax, dword [esp]
std
cld
or ecx, ecx
test esp, 0x2695
popf
lea edi, [edi + 0x4605]
lea edi, [edi - 0x4605]
jne 0x6389ed
or dword [ebp + 0x5051e44d], 0xff2799e8
jmp [edx + 0x11]
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.0062b190
push 0x11
lea edx, [ebp - 0x1c]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.00632000
add esp, 0xc
cmp ebx, 0x211b
or eax, 0
jle 0x638a26
xchg esp, esp
xchg edx, ecx
xchg edx, ecx
jb 0x638a1f
js 0x638a21
jg 0x638a26
mov ebx, 0xf685f988
test esi, esi
jne 0x638a35
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ebx, [ebx + 0x5ea0]
sub ebx, 0x5ea0
jge 0x638a61
pushf
test eax, 0x50c9
jno 0x638a4c
and edi, edi
popf
lea edx, [edx + 0x3e76]
lea edx, [edx - 0x3e76]
jbe 0x638a5e
jl 0x638a61
add eax, 0x2e39e856
invalid
push esi
call fcn.0061b8a0
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00632000
add esp, 0x10
test esp, 0x7dbd
clc
jne 0x638a89
nop
jg 0x638a83
lea eax, [eax]
je 0x638a89
ljmp 0xb166:0xb065b25b
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], dl
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], dl
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], al
push eax
pop eax
jge 0x638ada
xchg esi, esi
mov ebx, ebx
lea esp, [esp]
jl 0x638ada
jmp 0x8b47d068
mov al, byte [ebp - 0x1c]
mov bl, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
mov cl, byte [ebp - 0xd]
dec al
dec bl
mov byte [ebp - 0x1c], al
mov al, byte [ebp - 0x1b]
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x16]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x11]
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0x1a]
dec al
dec bl
mov byte [ebp - 0x1b], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x19]
mov byte [ebp - 0x1a], cl
mov cl, byte [ebp - 0x14]
dec al
dec bl
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0xf]
dec dl
mov byte [ebp - 0x10], bl
mov bl, byte [ebp - 0x18]
dec cl
mov byte [ebp - 0x19], dl
mov dl, byte [ebp - 0x13]
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0xe]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], cl
cld
ror eax, 0x10
rol eax, 0x10
xchg ecx, edi
xchg ecx, edi
js 0x638b70
je 0x638b69
xchg edi, eax
xchg edi, eax
xchg esi, esi
jns 0x638b70
call 0x61a67815
add byte [ebp - 0xadf8b40], al
mov eax, dword [0x6142ec]
test eax, eax
je 0x638b99
cmc
jl 0x638b7c
jmp 0x638b7e
js 0x638b86
je 0x638b82
jns 0x638b86
add eax, 0xec158be9
inc edx
popal
add byte [ebp + 0x5251e44d], cl
mov edx, dword [0x6142ec]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call fcn.0062b190
mov dword [ebp - 4], eax
xor edi, dword [esp]
xor edi, dword [esp]
ror ebx, 0
jno 0x638bb0
mov esi, esi
jl 0x638ba8
xchg edx, edi
xchg edx, edi
jo 0x638bb0
add eax, 0x8d116a03
inc ebp
in al, 0x6a
add byte [eax - 0x18], dl
inc ebx
xchg esp, eax
invalid
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00632000
add esp, 0xc
and ecx, ecx
shr esp, 0
jp 0x638bec
pushf
lea eax, [eax + 0x227c]
lea eax, [eax - 0x227c]
xor esp, 0
mov edx, edx
call 0x638bdf
lea esp, [esp + 4]
popf
lea ecx, [ecx]
js 0x638be9
jnp 0x638bec
jmp 0x865fd17b
mov eax, dword [ebp - 4]
test eax, eax
je 0x638c10
jne 0x638bf5
jo 0x638c07
pushf
jo 0x638bfb
cmp eax, 0x3484
popf
mov esp, esp
jno 0x638c07
call 0x2cf7745b
invalid
push eax
call fcn.0061b8a0
add esp, 4
xchg edi, edi
cmp ecx, edi
and esp, 0xffffffff
jb 0x638c2d
pushf
lea eax, [eax]
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
cld
popf
js 0x638c2a
jae 0x638c2d
xor eax, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4