Function at 0x20047052
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.2004f9af
add esp, 0xc
cmp esi, dword [esp + 8]
jno 0x20047071
jns 0x20047079
jge 0x20047075
js 0x20047079
or dword [esi], 0x75f345c6
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xe], 0x73
mov byte [ebp - 9], 0x6f
mov byte [ebp - 8], 0x67
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 6], 0x58
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 5], 0
mov byte [ebp - 0xb], 0x71
mov byte [ebp - 0xa], 0x4a
mov byte [ebp - 7], 0x70
lea eax, [eax + 0x292b]
lea eax, [eax - 0x292b]
jp 0x200470dd
pushf
rol eax, 0
cmp esp, 0x6a12
popf
jmp 0x200470d6
je 0x200470d8
xchg edx, edx
jnp 0x200470dd
mov edx, 0x80ec4d8a
jmp 0xc51f8e7
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
and eax, eax
cmp ebx, dword [esp + 4]
jne 0x2004717a
pushf
cmp esp, 0x64e5
popf
xchg ebx, edi
xchg ebx, edi
jae 0x20047177
je 0x2004717a
add eax, 0x14754e8
add byte [ecx + 0x7d83fc45], cl
cld
add byte [ebp + 5], dh
call fcn.2005b8d3
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x2004718d
jmp 0x20047244
sub esp, 0
jg 0x20047192
add edx, 0x573e
sub edx, 0x573e
ror esp, 0
ja 0x200471a9
ja 0x200471a5
jbe 0x200471a9
jmp 0xc51feb7
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.2004d43e
mov dword [ebp - 0x18], eax
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.2004f9af
add esp, 0xc
mov esp, esp
jle 0x200471da
pushf
jmp 0x200471d1
popf
jmp 0x200471d5
xchg esi, esi
jg 0x200471da
jmp 0x20ecef61
cmp dword [ebp - 0x18], 0
jne 0x200471e2
jmp 0x20047244
xchg esi, esi
std
cld
ror edi, 0x1a
rol edi, 0x1a
jno 0x200471f8
jno 0x200471f0
xchg esp, esp
jo 0x200471f4
jo 0x200471f8
mov ebx, 0xe84d8b8e
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.2006a497
add esp, 4
push edx
pop edx
rol esi, 0xa
rol esi, 0x16
cmp esi, edi
jp 0x2004723d
pushf
xor ebx, dword [esp]
xor ebx, dword [esp]
push eax
add eax, 0x9d8
ror eax, 0x1e
pop eax
neg eax
neg eax
ror edx, 3
rol edx, 3
popf
lea esi, [esi + 0x199f]
lea esi, [esi - 0x199f]
jnp 0x2004723d
ljmp 0x55ff:0x5208558b
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4