Function at 0x479b5e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [0x49dd48]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor esi, esi
push 0x4b8f
mov dword [ebp - 0x84], esi
call fcn.004355f2
push 0x4c58
mov dword [ebp - 0xc4], eax
call fcn.004355f2
push 0x4c5b
mov dword [ebp - 0xa4], eax
call fcn.004355f2
push 0x4b14
mov dword [ebp - 0x98], eax
call fcn.004355f2
push 0x4c5e
mov dword [ebp - 0xb0], eax
call fcn.004355f2
mov edi, eax
push 0x4b83
mov dword [ebp - 0x9c], edi
call fcn.004355f2
push 0x4b86
mov dword [ebp - 0xa0], eax
call fcn.004355f2
push 0x4a84
mov dword [ebp - 0x90], eax
call fcn.004355f2
push 0x4af0
mov dword [ebp - 0x8c], eax
call fcn.004355f2
push 0x4b4d
mov dword [ebp - 0xa8], eax
call fcn.004355f2
mov ebx, eax
push 0x30
mov dword [ebp - 0x88], ebx
call fcn.004355f2
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xa4], esi
je 0x47a015
cmp dword [ebp - 0x98], esi
je 0x47a015
cmp dword [ebp - 0xb0], esi
je 0x47a015
test edi, edi
je 0x47a015
cmp dword [ebp - 0xa0], esi
je 0x47a015
cmp dword [ebp - 0x90], esi
je 0x47a015
cmp dword [ebp - 0x8c], esi
je 0x47a015
cmp dword [ebp - 0xa8], esi
je 0x47a015
test ebx, ebx
je 0x47a015
cmp eax, 0xffffffff
je 0x47a015
and dword [ebp - 8], esi
mov ecx, 0x6f0050
and dword [ebp - 0x34], esi
mov eax, 0x740072
push 0x2000
push 1
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x30], 0x4c0041
mov dword [ebp - 0x2c], 0x430050
mov dword [ebp - 0x28], 0x500020
mov dword [ebp - 0x24], 0x72006f
mov dword [ebp - 0x20], 0x74
mov dword [ebp - 0x54], 0x57005c
mov dword [ebp - 0x50], 0x6e0069
mov dword [ebp - 0x4c], 0x6f0064
mov dword [ebp - 0x48], 0x730077
mov dword [ebp - 0x44], 0x41005c
mov dword [ebp - 0x40], 0x690070
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 0x73727363
mov dword [ebp - 0x18], 0x78652e73
mov dword [ebp - 0x14], 0x65
call fcn.00478d6e
mov edi, eax
test edi, edi
je 0x47a015
push 0x10
call fcn.0047afee
mov ebx, eax
mov dword [ebp - 0xb4], ebx
test ebx, ebx
je 0x47a00f
mov eax, dword [ebx]
lea esi, [ebx + 4]
and dword [ebp - 0xac], 0
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x78], esi
test eax, eax
je 0x47a003
mov ebx, dword [ebp - 0x84]
and dword [ebp - 0xe0], 0
and dword [ebp - 0xdc], 0
and dword [ebp - 0xd4], 0
and dword [ebp - 0xd0], 0
mov dword [ebp - 0xe4], 0x18
mov dword [ebp - 0xd8], 0x200
movzx eax, word [esi]
and dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xe4]
push eax
push 0x40
lea eax, [ebp - 0x94]
push eax
call dword [ebp - 0xa4]
test eax, eax
js 0x479f97
and dword [ebp - 0x74], 0
xor esi, esi
push 0x914
call fcn.004355f2
cmp eax, 0x1db0
jb 0x479de9
mov esi, 0x200
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x80]
push 2
push esi
push 0
push eax
movzx eax, word [edx + 6]
push 0xffffffffffffffff
push eax
push dword [ebp - 0x94]
call dword [ebp - 0x98]
mov esi, eax
test esi, esi
js 0x479e17
mov byte [ebp - 0x6e], 1
jmp 0x479ed4
push 0x914
mov byte [ebp - 0x6e], 0
mov byte [ebp - 0x6d], 0
call fcn.004355f2
cmp eax, 0x1770
jb 0x479ed4
lea eax, [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x78]
movzx eax, word [eax]
push eax
call dword [ebp - 0x8c]
mov esi, eax
test esi, esi
js 0x479f88
mov eax, dword [ebp - 0x78]
push 0x914
movzx eax, word [eax + 6]
mov dword [ebp - 0x80], eax
call fcn.004355f2
cmp eax, 0x1db0
mov eax, dword [ebp - 0x74]
jb 0x479e82
mov ecx, dword [ebp - 0xc4]
test ecx, ecx
je 0x479e82
cmp dword [ecx], eax
jne 0x479e82
or dword [ebp - 0x80], 0x80000000
push eax
call fcn.00479046
mov byte [ebp - 0x79], al
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x74]
call dword [ebp - 0xa0]
xor ecx, ecx
mov byte [ebp - 0x6d], 1
push ecx
lea eax, [ebp - 0xbc]
push eax
push ecx
push ecx
push 0x80000000
push dword [ebp - 0x80]
call dword [ebp - 0xa8]
test eax, eax
js 0x479ed4
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xbc]
mov eax, ecx
sub eax, dword [edx + 8]
neg eax
sbb eax, eax
and esi, eax
call dword [ebp - 0x88]
test esi, esi
js 0x479f50
mov esi, dword [ebp - 0xb0]
push 0
push 0x2000
push edi
push 2
push dword [ebp - 0x80]
call esi
test eax, eax
js 0x479f50
mov eax, dword [edi + 4]
test eax, eax
je 0x479f50
push 4
lea ecx, [ebp - 0x10]
push ecx
push eax
call fcn.0047d8e4
test eax, eax
je 0x479f1a
push 9
lea eax, [ebp - 0x30]
push eax
push dword [edi + 4]
call fcn.0047d8e4
test eax, eax
jne 0x479f50
push 0
push 0x2000
push edi
push 1
push dword [ebp - 0x80]
call esi
test eax, eax
js 0x479f50
mov eax, dword [edi + 4]
test eax, eax
je 0x479f50
push 0x10
lea ecx, [ebp - 0x54]
push ecx
push eax
call fcn.0047d870
test eax, eax
jne 0x479f50
mov eax, dword [ebp - 0x78]
movzx ebx, word [eax]
mov dword [ebp - 0x84], ebx
cmp byte [ebp - 0x6e], 1
jne 0x479f61
push dword [ebp - 0x80]
call dword [ebp - 0x9c]
jmp 0x479f88
cmp byte [ebp - 0x6d], 1
jne 0x479f88
lea eax, [ebp - 0x6c]
push eax
call dword [ebp - 0x90]
cmp byte [ebp - 0x79], 1
jne 0x479f7f
push dword [ebp - 0x74]
call fcn.004790ec
mov ecx, dword [ebp - 0x74]
call dword [ebp - 0x88]
push dword [ebp - 0x94]
call dword [ebp - 0x9c]
mov esi, dword [ebp - 0x78]
test ebx, ebx
je 0x479fde
lea eax, [ebp - 0x74]
push eax
push ebx
call dword [ebp - 0x8c]
test eax, eax
js 0x479fd6
mov eax, dword [ebp - 0x74]
lea ecx, [ebp - 0x1c]
add eax, dword [ebp - 0xc0]
push 0x10
push ecx
push eax
call fcn.0047d6d4
test eax, eax
je 0x479ffd
mov ecx, dword [ebp - 0x74]
xor ebx, ebx
mov dword [ebp - 0x84], ebx
call dword [ebp - 0x88]
jmp 0x479fde
xor ebx, ebx
mov dword [ebp - 0x84], ebx
mov eax, dword [ebp - 0xac]
add esi, 0x10
inc eax
mov dword [ebp - 0x78], esi
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0xb8]
jb 0x479d68
mov ebx, dword [ebp - 0xb4]
push ebx
call fcn.00478d8c
mov esi, dword [ebp - 0x84]
push edi
call fcn.00478d8c
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00489f30
mov esp, ebp
pop ebp
ret