Function at 0x47c5a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00474b40
add esp, 0xc
shr edx, 0
xor esi, edi
xor esi, edi
cmp ecx, dword [esp]
or ebx, 0
jl 0x47c5cf
jle 0x47c5ca
jb 0x47c5cc
jge 0x47c5cf
xor eax, 0x45c666b0
call 0xed8d8c20
jae fcn.0047c5a0
mov al, 0x66
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x46
inc ebp
inc esi
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x6a
mov byte [ebp - 0x15], 0x57
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x42
mov esp, esp
add eax, 0x4d4e
sub eax, 0x4d4e
jbe 0x47c615
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
js 0x47c642
pushf
rol ecx, 4
ror ecx, 4
inc ecx
dec ecx
ror eax, 5
ror eax, 0x1b
jns 0x47c631
popf
lea ebx, [ebx + 0x65e4]
lea ebx, [ebx - 0x65e4]
jns 0x47c642
mov ecx, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0x17]
mov bl, byte [ebp - 0x12]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0x10]
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x14]
dec cl
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0xf]
dec bl
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0x10], bl
mov bl, byte [ebp - 0xc]
mov byte [ebp - 0x14], dl
mov dl, byte [ebp - 0xe]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0xd], al
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xe], dl
cmp edi, 0x6dc3
jbe 0x47c6bd
lea edx, [edx]
jns 0x47c6b6
mov ebx, ebx
lea edx, [edx]
ja 0x47c6bd
call 0xfffd25a9
inc dword [ebp + 0x5f0975c0]
call fcn.00477c20
test eax, eax
jne 0x47c6cf
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
rol edx, 0x1f
rol edx, 1
xchg edx, edx
jle 0x47c6f0
pushf
jb 0x47c6dc
popf
lea ecx, [ecx + 0x348b]
lea ecx, [ecx - 0x348b]
lea esp, [esp]
jg 0x47c6f0
ljmp 0xe850:0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00481320
push 0xe
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.00474b40
add esp, 0xc
jg 0x47c711
jne 0x47c713
jle 0x47c715
and esp, 0xffffffff
jl 0x47c725
jle 0x47c71c
jae 0x47c71e
xchg edi, ecx
xchg edi, ecx
jge 0x47c725
mov ebx, 0xb75f685
test esi, esi
jne 0x47c734
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push edx
add edx, 0x409e
ror edx, 1
pop edx
shr esp, 0
add edx, 0
jb 0x47c74d
jo 0x47c748
jbe 0x47c74a
jae 0x47c74d
mov eax, 0x3a6de856
add byte [eax], al
push esi
call fcn.004801c0
test edx, ebx
test esp, 0x2a8
dec eax
inc eax
or edx, 0
jo 0x47c76f
jae 0x47c764
xchg edi, edi
jle 0x47c768
xchg edi, esi
xchg edi, esi
jno 0x47c76f
mov eax, 0x458d0e6a
call 0xe897c7e2
les eax, [ebx - 0x3b7c0001]
adc byte [eax + 0x661b7890], dl
pushfd
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00474b40
add esp, 0x10
nop
nop
js 0x47c79e
pushf
push edi
add edi, 0x605a
ror edi, 0x13
pop edi
cmp edi, dword [esp + 8]
ror esp, 0
popf
jae 0x47c79b
jns 0x47c79e
mov esp, 0x45c666b0
call 0xed8d8def
jae 0x47c76f
mov al, 0x66
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x46
inc ebp
inc esi
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x6a
mov byte [ebp - 0x15], 0x57
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x58
shl esi, 0
xchg edi, edi
xor esp, 0
jae 0x47c7e0
jae 0x47c7f2
pushf
rol esp, 0
popf
jno 0x47c7eb
xchg esi, ecx
xchg esi, ecx
jb 0x47c7f2
or dword [edx + 0x458ae84d], 0xe95d8aed
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x15]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x14]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xf]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xd]
dec cl
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0xe]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0xe], cl
cld
lea esi, [esi + 0x6939]
lea esi, [esi - 0x6939]
nop
jbe 0x47c86a
jnp 0x47c896
pushf
call fcn.0047c873