Function at 0x472100
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00474b40
add esp, 0xc
xchg esi, edx
xchg esi, edx
je 0x47212a
jne 0x472121
jmp 0x472123
jbe 0x472125
lea ecx, [ecx]
jne 0x47212a
mov ebx, 0x66b06db1
mov cl, 0x6d
mov al, 0x66
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x13], 0x54
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x65
mov byte [ebp - 0x17], cl
mov byte [ebp - 0x12], al
mov byte [ebp - 0xd], al
mov byte [ebp - 8], cl
mov byte [ebp - 0x16], 0x70
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0xc], 0x49
mov byte [ebp - 7], al
mov byte [ebp - 0x15], 0x74
mov byte [ebp - 0x10], 0x77
mov byte [ebp - 0xb], 0x62
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x6f
sub ebx, 0
xor ebx, 0x229d
xor ebx, 0x229d
or esp, 0
test edi, 0x1e91
jnp 0x472193
jns 0x472190
jp 0x472193
mov edx, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 9]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x17]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 9], bl
mov bl, byte [ebp - 8]
dec dl
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
mov byte [ebp - 8], bl
mov bl, byte [ebp - 7]
dec dl
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
mov byte [ebp - 7], bl
mov bl, byte [ebp - 0x14]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov cl, byte [ebp - 0xa]
dec dl
dec cl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
add esp, 0
cld
test esp, 0x7c92
jg 0x472241
pushf
jb 0x472233
sub esp, 0
jge 0x472238
jno 0x47223a
popf
xchg esi, esi
jle 0x472241
ljmp 0x8b00:0xfc7ae8
call 0x481ec0
mov edx, eax
test edx, edx
jne 0x472255
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
add ecx, 0
jmp 0x47225a
push ecx
add ecx, 0x6601
ror ecx, 0x1b
pop ecx
jns 0x47227c
pushf
jle 0x47226b
rol esp, 0
or edi, 0
popf
jo 0x472275
lea eax, [eax]
jne 0x472279
js 0x47227c
mov eax, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00481320
push 0x13
lea edx, [ebp - 0x18]
mov ebx, eax
push 0
push edx
mov dword [ebp - 4], ebx
call fcn.00474b40
add esp, 0xc
test ebx, ebx
jne 0x4722aa
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc esi
dec esi
cld
rol esi, 0x11
rol esi, 0xf
jge 0x4722be
je 0x4722b7
mov edi, edi
ja 0x4722bb
jl 0x4722be
mov ebp, 0xdefce853
add byte [eax], al
push ebx
call fcn.004801c0
add esp, 4
add ebx, 0
jl 0x4722cc
jle 0x4722e7
pushf
and edi, 0xffffffff
cmp esp, 0x4326
ror edi, 0
popf
xchg ecx, edx
xchg ecx, edx
jl 0x4722e4
jg 0x4722e7
mov ecx, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4