Function at 0x47f39e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0048801b
add esp, 0xc
cmp edi, dword [esp + 0xc]
xchg edi, edi
jns 0x47f3bf
jo 0x47f3dd
pushf
xchg edx, eax
xchg edx, eax
dec eax
inc eax
xchg edi, edx
xchg edi, edx
push edx
add edx, 0x6235
ror edx, 0x13
pop edx
popf
jl 0x47f3da
jno 0x47f3dd
mov esi, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
or esp, 0
not esi
not esi
jne 0x47f439
pushf
lea edx, [edx]
jnp 0x47f430
popf
js 0x47f434
jp 0x47f436
je 0x47f439
mov esi, 0x80e44d8a
jmp 0xe4957c43
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
nop
test dword [esp], edx
ror esp, 0
je 0x47f4de
xchg ecx, ecx
lea ecx, [ecx + 0x6b9a]
lea ecx, [ecx - 0x6b9a]
jne 0x47f4de
xor eax, 0x18c10e8
add byte [ecx + 0x7d83fc45], cl
cld
add byte [ebp + 7], dh
call fcn.004980f3
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x47f4f3
xor eax, eax
jmp 0x47f794
jo 0x47f4f5
jb 0x47f4fe
lea esp, [esp]
jae 0x47f4fe
xor eax, 0xe4558d2c
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.00488963
mov dword [ebp - 0x20], eax
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0048801b
add esp, 0xc
xchg ebx, ebx
jge 0x47f522
jb 0x47f524
ja 0x47f533
pushf
jg 0x47f52a
popf
jb 0x47f52e
js 0x47f530
jbe 0x47f533
call 0x12872ba
cmp dword [ebp - 0x20], 0
jne 0x47f540
xor eax, eax
jmp 0x47f794
xchg ecx, ecx
dec ebx
inc ebx
jl 0x47f559
pushf
jnp 0x47f54a
jo 0x47f54c
xchg esp, esp
or esi, esi
popf
mov ecx, ecx
jae 0x47f556
jge 0x47f559
jmp 0x53284ae8
mov edx, dword [ebp - 0x20]
push edx
call fcn.00496b37
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0048801b
add esp, 0xc
nop
js 0x47f582
jg 0x47f57a
jmp 0x47f57c
mov esp, esp
jns 0x47f582
or dword [ecx - 0x3a], 0xc648e445
inc ebp
jmp 0xee8dbbf2
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
xchg edi, edi
jns 0x47f5d1
jne 0x47f5cc
js 0x47f5d1
sub eax, 0x4d8a7bcc
in al, 0x80
jmp 0xe4957ddb
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
and esi, esi
sub esp, 0
jbe 0x47f663
jle 0x47f66c
lea ebx, [ebx]
mov ebx, ebx
jg 0x47f66c
add dword [ebx + 0x4737483d], 0x38740000
cmp dword [0x473748], 0
je 0x47f6ad
cmp edx, esi
lea edi, [edi + 0xbaf]
lea edi, [edi - 0xbaf]
jne 0x47f69b
pushf
cmp ecx, dword [esp]
neg edi
neg edi
and edi, edi
popf
jb 0x47f694
xchg esi, ecx
xchg esi, ecx
je 0x47f69b
or dword [ebp - 0x5ead1bab], 0x473748
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x473748]
push eax
call fcn.00488963
mov dword [ebp - 8], eax
push eax
add eax, 0x35ad
ror eax, 0x12
pop eax
xchg ecx, edx
xchg ecx, edx
jae 0x47f6e1
pushf
xor ecx, 0x76eb
xor ecx, 0x76eb
and esp, 0xffffffff
popf
lea edx, [edx + 0x2834]
lea edx, [edx - 0x2834]
jl 0x47f6de
jb 0x47f6e1
jmp 0xb2084f
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0048801b
add esp, 0xc
test esp, 0x2142
dec eax
inc eax
jbe 0x47f6fb
xor esp, 0
jae 0x47f715
pushf
add esp, 0
mov esp, esp
push edx
pop edx
popf
jp 0x47f70d
mov esp, esp
lea esp, [esp]
jb 0x47f715
xor eax, 0xf87d83
cmp dword [ebp - 8], 0
je 0x47f76e
cmp eax, dword [esp + 8]
push eax
add eax, 0x28c7
ror eax, 8
pop eax
lea ecx, [ecx + 0x68b]
lea ecx, [ecx - 0x68b]
call fcn.0047f73a