Function at 0x620bd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
shl edi, 0
shl esp, 0
jp 0x620bfe
pushf
cmp edi, dword [esp]
cmp edi, dword [esp]
popf
xchg esi, esi
lea edx, [edx]
lea ecx, [ecx + 0x416]
lea ecx, [ecx - 0x416]
jnp 0x620bfe
add eax, 0x6a126a
push 0x12
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0061511f
add esp, 0xc
mov byte [ebp - 0x1c], 0x4a
mov byte [ebp - 0x1b], 0x74
mov byte [ebp - 0x1a], 0x45
mov byte [ebp - 0x19], 0x66
mov byte [ebp - 0x18], 0x63
mov byte [ebp - 0x17], 0x76
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x68
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0x12], 0x51
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0xf], 0x74
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 0xb], 0
test esi, 0x458f
test eax, 0x7f86
js 0x620c6a
jmp 0x620c65
jg 0x620c67
jns 0x620c6a
ljmp 0x1e9:0x80e44d8a
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
jbe 0x620d00
lea ebx, [ebx]
add esi, dword [esp]
sub esi, dword [esp]
jns 0x620d1d
pushf
lea eax, [eax]
lea ecx, [ecx]
jmp 0x620d12
popf
mov esi, esi
mov edx, edx
jae 0x620d1a
js 0x620d1d
mov esp, 0x603ed0a1
add byte [ecx + 0x7af845], cl
mov eax, dword [0x603ed0]
mov dword [ebp - 8], eax
jp 0x620d27
push ebx
pop ebx
xchg edx, edx
rol esp, 0
jle 0x620d52
pushf
mov eax, eax
xor esp, 0
test esp, 0x36e3
popf
xchg esi, ebx
xchg esi, ebx
lea esi, [esi + 0x4a27]
lea esi, [esi - 0x4a27]
jg 0x620d52
mov ecx, 0xf87d83
cmp dword [ebp - 8], 0
je 0x620d93
cmp edi, dword [esp]
jne 0x620d5d
js 0x620d5f
je 0x620d6f
pushf
jp 0x620d65
je 0x620d67
popf
nop
xchg edi, edi
jne 0x620d6f
mov eax, 0x51e44d8d
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.0060bf28
mov dword [ebp - 4], eax
rol eax, 4
ror eax, 4
jle 0x620d8d
lea ecx, [ecx]
jg 0x620d8d
mov edx, 0xfc458b4b
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
xor esi, 0
not esi
not esi
jge 0x620da8
jl 0x620d9e
jge 0x620da0
xchg esi, ebx
xchg esi, ebx
jl 0x620da8
call 0x6a74786c
add byte [ebp - 0x17ae1bb3], cl
push 0x43
invalid
push 0x12
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0061511f
add esp, 0xc
jg 0x620dba
lea eax, [eax + 0xcfa]
lea eax, [eax - 0xcfa]
jae 0x620ddf
pushf
shl esp, 0
xchg esp, esp
cmp esi, 0x1cb8
xchg esp, esp
popf
lea esp, [esp]
jb 0x620ddf
xor eax, 0xe07d83
cmp dword [ebp - 0x20], 0
je 0x620e37
test esp, 0x2ac3
jno 0x620e04
pushf
and ebx, 0xffffffff
xchg esp, esp
jae 0x620df6
shr esp, 0
popf
xchg edx, edx
xchg edi, edi
xchg esp, esp
jo 0x620e04
cmp edi, 0xc085e055
call dword [ebp - 0x20]
test eax, eax
je 0x620e37
jns 0x620e0d
shr esp, 0
call 0x620e15
lea esp, [esp + 4]
jno 0x620e30
pushf
jae 0x620e1f
ror esp, 0
stc
not eax
not eax
popf
lea ebx, [ebx]
xchg edi, edi
jo 0x620e30
add eax, 0xcb8
add bl, ch
xor eax, 0x1e2df681
add byte [eax], al
mov eax, 0xc
jmp 0x620e6c
xor esi, 0x1e2d
xor esi, 0x1e2d
xor eax, dword [esp]
xor eax, dword [esp]
jle 0x620e67
pushf
ror ecx, 0x18
ror ecx, 8
jne 0x620e55
nop
cmp esi, 0x714a
popf
jbe 0x620e60
jle 0x620e62
xchg esp, esp
jg 0x620e67
mov edi, 0x24b8
add byte [edi + 0x5e], bl
mov eax, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret