Function at 0x47f320
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x61492e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x80
push ebx
push ebp
push esi
push edi
lea ecx, [esp + 0x1c]
call fcn.004ae400
xor ebp, ebp
lea ecx, [esp + 0x1c]
mov dword [esp + 0x98], ebp
call fcn.004ae450
test eax, eax
mov bl, 0x78
je 0x47f5d9
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
call fcn.005fa5ce
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
push 0x6c314c
push edx
mov byte [esp + 0xa4], 1
call fcn.005de570
add esp, 0xc
cmp eax, 1
jne 0x47f438
mov esi, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
fld qword [0x635b30]
not ecx
dec ecx
cmp ecx, 0x20
jae 0x47f43e
jmp 0x47f3bf
fld qword [esp + 0x2c]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x24], eax
fild qword [esp + 0x24]
fmul st(1)
call fcn.005de5f4
fadd qword [0x635b28]
lea ecx, [esp + 0x10]
mov esi, eax
push ecx
lea ecx, [esp + 0x18]
fstp qword [esp + 0x30]
call fcn.005fa5ce
mov edx, dword [esp + 0x14]
push esi
push edx
lea eax, [esp + 0x18]
push 0x6c3144
push eax
mov byte [esp + 0xa8], 2
call fcn.005f368b
add esp, 0x10
lea ecx, [esp + 0x14]
mov byte [esp + 0x98], 1
call fcn.005fa859
mov esi, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x20
jb 0x47f3bb
jmp 0x47f440
mov esi, dword [esp + 0x10]
jmp 0x47f440
fstp st(0)
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x1f
jbe 0x47f5c8
mov ecx, 6
mov eax, 0x2d2d2d2d
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
xor eax, eax
lea edi, [esi + 0x1f]
mov cl, byte [edi]
mov byte [esp + eax + 0x50], cl
inc eax
dec edi
cmp eax, 8
jl 0x47f46a
cmp eax, 0xc
mov ecx, 9
jge 0x47f49c
mov edi, esi
mov ebp, 0xc
sub edi, eax
sub ebp, eax
add edi, 0x1f
add eax, ebp
mov dl, byte [edi]
mov byte [esp + ecx + 0x50], dl
inc ecx
dec edi
dec ebp
jne 0x47f491
inc ecx
cmp eax, 0x10
jge 0x47f4bd
mov edi, esi
mov ebp, 0x10
sub edi, eax
sub ebp, eax
add edi, 0x1f
add eax, ebp
mov dl, byte [edi]
mov byte [esp + ecx + 0x50], dl
inc ecx
dec edi
dec ebp
jne 0x47f4b2
inc ecx
cmp eax, 0x14
jge 0x47f4de
mov edi, esi
mov ebp, 0x14
sub edi, eax
sub ebp, eax
add edi, 0x1f
add eax, ebp
mov dl, byte [edi]
mov byte [esp + ecx + 0x50], dl
inc ecx
dec edi
dec ebp
jne 0x47f4d3
inc ecx
cmp eax, 0x20
jge 0x47f4fd
sub esi, eax
mov edx, 0x20
add esi, 0x1f
lea edi, [esp + ecx + 0x50]
sub edx, eax
mov al, byte [esi]
mov byte [edi], al
inc edi
dec esi
dec edx
jne 0x47f4f4
lea edi, [esp + 0x34]
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0x34], 0x58
mov byte [esp + 0x35], 0x64
mov byte [esp + 0x36], 0x6d
mov byte [esp + 0x37], 0x7f
mov byte [esp + 0x38], 0x7c
mov byte [esp + 0x39], 0x6a
mov byte [esp + 0x3a], 0x79
mov byte [esp + 0x3b], 0x6e
mov byte [esp + 0x3c], 0x57
mov byte [esp + 0x3d], 0x48
mov byte [esp + 0x3e], 0x67
mov byte [esp + 0x3f], 0x6a
mov byte [esp + 0x40], bl
mov byte [esp + 0x41], bl
mov byte [esp + 0x42], 0x6e
mov byte [esp + 0x43], bl
mov byte [esp + 0x44], 0x57
mov byte [esp + 0x45], 0x48
mov byte [esp + 0x46], 0x47
mov byte [esp + 0x47], 0x58
mov byte [esp + 0x48], 0x42
mov byte [esp + 0x49], 0x4f
mov byte [esp + 0x4a], 0x57
mov byte [esp + 0x4b], 0x70
mov byte [esp + 0x4c], 0x2e
mov byte [esp + 0x4d], bl
mov byte [esp + 0x4e], 0x76
mov byte [esp + 0x4f], 0
xor ebp, ebp
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x74], 0
cmp ecx, ebp
jle 0x47f5ae
mov dl, byte [esp + eax + 0x34]
xor dl, 0xb
mov byte [esp + eax + 0x34], dl
inc eax
cmp eax, ecx
jl 0x47f59e
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0x50]
lea edx, [esp + 0x34]
push ecx
push edx
push eax
call fcn.005f368b
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x98], 0
call fcn.005fa859
mov esi, dword [esp + 0xa0]
or ecx, 0xffffffff
xor eax, eax
mov edi, dword [esi]
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x47f77c
mov al, 0x32
mov cl, 0x26
mov byte [esp + 0x5c], bl
mov byte [esp + 0x5d], bl
mov byte [esp + 0x5f], bl
mov dl, 0x3f
mov byte [esp + 0x6d], al
mov byte [esp + 0x70], cl
mov bl, 0x33
mov byte [esp + 0x75], cl
mov byte [esp + 0x77], al
mov byte [esp + 0x7a], cl
mov byte [esp + 0x7b], al
mov byte [esp + 0x7c], al
mov byte [esp + 0x7f], cl
mov byte [esp + 0x87], al
lea edi, [esp + 0x50]
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0x50], 0x58
mov byte [esp + 0x51], 0x64
mov byte [esp + 0x52], 0x6d
mov byte [esp + 0x53], 0x7f
mov byte [esp + 0x54], 0x7c
mov byte [esp + 0x55], 0x6a
mov byte [esp + 0x56], 0x79
mov byte [esp + 0x57], 0x6e
mov byte [esp + 0x58], 0x57
mov byte [esp + 0x59], 0x48
mov byte [esp + 0x5a], 0x67
mov byte [esp + 0x5b], 0x6a
mov byte [esp + 0x5e], 0x6e
mov byte [esp + 0x60], 0x57
mov byte [esp + 0x61], 0x48
mov byte [esp + 0x62], 0x47
mov byte [esp + 0x63], 0x58
mov byte [esp + 0x64], 0x42
mov byte [esp + 0x65], 0x4f
mov byte [esp + 0x66], 0x57
mov byte [esp + 0x67], 0x70
mov byte [esp + 0x68], dl
mov byte [esp + 0x69], 0x3e
mov byte [esp + 0x6a], 0x4f
mov byte [esp + 0x6b], 0x3c
mov byte [esp + 0x6c], 0x4a
mov byte [esp + 0x6e], 0x4d
mov byte [esp + 0x6f], 0x4e
mov byte [esp + 0x71], 0x3a
mov byte [esp + 0x72], 0x48
mov byte [esp + 0x73], bl
mov byte [esp + 0x74], dl
mov byte [esp + 0x76], dl
mov byte [esp + 0x78], bl
mov byte [esp + 0x79], dl
mov byte [esp + 0x7d], 0x3e
mov byte [esp + 0x7e], 0x3a
mov byte [esp + 0x80], bl
mov byte [esp + 0x81], 0x4d
mov byte [esp + 0x82], 0x4f
mov byte [esp + 0x83], 0x3d
mov byte [esp + 0x84], 0x4f
mov byte [esp + 0x85], 0x39
mov byte [esp + 0x86], 0x38
mov byte [esp + 0x88], 0x4e
mov byte [esp + 0x89], 0x3c
mov byte [esp + 0x8a], 0x48
mov byte [esp + 0x8b], 0x3a
mov byte [esp + 0x8c], 0x76
mov byte [esp + 0x8d], 0
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, ebp
jle 0x47f769
mov bl, byte [esp + eax + 0x50]
xor bl, 0xb
mov byte [esp + eax + 0x50], bl
inc eax
cmp eax, ecx
jl 0x47f759
lea ecx, [esp + 0x50]
push ecx
push 0x6bc090
push esi
call fcn.005f368b
add esp, 0xc
lea ecx, [esp + 0x1c]
mov dword [esp + 0x98], 0xffffffff
call fcn.004ae440
mov ecx, dword [esp + 0x90]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x8c
ret 4