Function at 0x47761d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4a5076
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x234
push ebx
push esi
push edi
xor ebx, ebx
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x141]
mov byte [esp + 0x140], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, pe_nt_image_headers32
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
stosb byte es:[edi], al
call fcn.0050d46e
mov eax, dword [esp + 0x254]
mov dword [esp + 0x248], 1
and eax, 0xffff
sub eax, ebx
je 0x477771
dec eax
je 0x47760b
dec eax
jne 0x4778f7
lea eax, [esp + 0x38]
lea ecx, [esp + 0x140]
push eax
push ecx
push 0x4d76fc
push 0x38
push 0x4ceed4
call fcn.004c62b8
add esp, 0x14
test eax, eax
je 0x4774d6
lea eax, [esp + 0x140]
jmp 0x4778ed
lea ecx, [esp + 0xc]
call fcn.0050d46e
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x28
mov byte [esp + 0x12], cl
mov byte [esp + 0x22], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x2c], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], bl
lea edx, [esp + 0x30]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x40]
push edx
push eax
push 0x4d76fc
lea ecx, [esp + 0x1c]
push 0x20
push ecx
mov byte [esp + 0x25c], 4
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x27], 0x32
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x2a], 0x12
mov byte [esp + 0x2c], 0xc9
mov byte [esp + 0x2d], 0x78
mov byte [esp + 0x2e], 0xea
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x8f
mov byte [esp + 0x31], 0x53
mov byte [esp + 0x32], 0xcf
mov byte [esp + 0x33], 0x63
mov byte [esp + 0x34], 0x3b
mov byte [esp + 0x35], 0x5d
mov byte [esp + 0x37], 0xaf
mov byte [esp + 0x38], 0x51
mov byte [esp + 0x39], 0x27
mov byte [esp + 0x3b], 0x13
mov byte [esp + 0x3c], 0x40
mov byte [esp + 0x3d], 0xf6
mov byte [esp + 0x3e], 0x7d
mov byte [esp + 0x3f], 0x5a
mov byte [esp + 0x41], 0xeb
mov byte [esp + 0x42], 0xaa
mov byte [esp + 0x43], 0xe1
mov dword [esp + 0x44], esi
call fcn.004c62b8
add esp, 0x14
test eax, eax
lea eax, [esp + 0x40]
jne 0x4775ca
mov eax, 0x4cf218
push eax
lea ecx, [esp + 0x10]
call fcn.0050d47a
push 0x4cf214
push 0x4cf210
lea ecx, [esp + 0x14]
call fcn.0050d6ae
push 0x4cf208
push 0x4cf204
lea ecx, [esp + 0x14]
call fcn.0050d6ae
mov byte [esp + 0x248], 1
lea ecx, [esp + 0xc]
jmp 0x4778d2
lea edx, [esp + 0x38]
lea eax, [esp + 0x140]
push edx
push eax
push 0x4d76fc
push 0x38
push 0x4cee4c
call fcn.004c62b8
add esp, 0x14
test eax, eax
je 0x47763c
lea eax, [esp + 0x140]
jmp 0x4778ed
lea ecx, [esp + 0xc]
call fcn.0050d46e
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x28
mov byte [esp + 0x12], cl
mov byte [esp + 0x22], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x2c], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], bl
lea edx, [esp + 0x40]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x30]
mov byte [esp + 0x248], 3
push ecx
push edx
stosb byte es:[edi], al
push 0x4d76fc
lea eax, [esp + 0x1c]
push 0x20
push eax
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x27], 0x32
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x2a], 0x12
mov byte [esp + 0x2c], 0xc9
mov byte [esp + 0x2d], 0x78
mov byte [esp + 0x2e], 0xea
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x8f
mov byte [esp + 0x31], 0x53
mov byte [esp + 0x32], 0xcf
mov byte [esp + 0x33], 0x63
mov byte [esp + 0x34], 0x3b
mov byte [esp + 0x35], 0x5d
mov byte [esp + 0x37], 0xaf
mov byte [esp + 0x38], 0x51
mov byte [esp + 0x39], 0x27
mov byte [esp + 0x3b], 0x13
mov byte [esp + 0x3c], 0x40
mov byte [esp + 0x3d], 0xf6
mov byte [esp + 0x3e], 0x7d
mov byte [esp + 0x3f], 0x5a
mov byte [esp + 0x41], 0xeb
mov byte [esp + 0x42], 0xaa
mov byte [esp + 0x43], 0xe1
mov dword [esp + 0x44], esi
call fcn.004c62b8
add esp, 0x14
test eax, eax
lea eax, [esp + 0x40]
jne 0x477730
mov eax, 0x4cf218
push eax
lea ecx, [esp + 0x10]
call fcn.0050d47a
push 0x4cf214
push 0x4cf210
lea ecx, [esp + 0x14]
call fcn.0050d6ae
push 0x4cf208
push 0x4cf204
lea ecx, [esp + 0x14]
call fcn.0050d6ae
mov byte [esp + 0x248], 1
lea ecx, [esp + 0xc]
jmp 0x4778d2
lea ecx, [esp + 0x38]
lea edx, [esp + 0x140]
push ecx
push edx
push 0x4d76fc
push 0x38
push 0x4cee14
call fcn.004c62b8
add esp, 0x14
test eax, eax
je 0x4777a2
lea eax, [esp + 0x140]
jmp 0x4778ed
lea ecx, [esp + 0xc]
call fcn.0050d46e
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x28
mov byte [esp + 0x12], cl
mov byte [esp + 0x22], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x2c], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], bl
lea edx, [esp + 0x10]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x30]
lea ecx, [esp + 0x40]
push eax
push ecx
push 0x4d76fc
push 0x20
push edx
mov byte [esp + 0x25c], 2
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x27], 0x32
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x2a], 0x12
mov byte [esp + 0x2c], 0xc9
mov byte [esp + 0x2d], 0x78
mov byte [esp + 0x2e], 0xea
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x8f
mov byte [esp + 0x31], 0x53
mov byte [esp + 0x32], 0xcf
mov byte [esp + 0x33], 0x63
mov byte [esp + 0x34], 0x3b
mov byte [esp + 0x35], 0x5d
mov byte [esp + 0x37], 0xaf
mov byte [esp + 0x38], 0x51
mov byte [esp + 0x39], 0x27
mov byte [esp + 0x3b], 0x13
mov byte [esp + 0x3c], 0x40
mov byte [esp + 0x3d], 0xf6
mov byte [esp + 0x3e], 0x7d
mov byte [esp + 0x3f], 0x5a
mov byte [esp + 0x41], 0xeb
mov byte [esp + 0x42], 0xaa
mov byte [esp + 0x43], 0xe1
mov dword [esp + 0x44], esi
call fcn.004c62b8
add esp, 0x14
test eax, eax
lea eax, [esp + 0x40]
jne 0x477896
mov eax, 0x4cf218
push eax
lea ecx, [esp + 0x10]
call fcn.0050d47a
push 0x4cf214
push 0x4cf210
lea ecx, [esp + 0x14]
call fcn.0050d6ae
push 0x4cf208
push 0x4cf204
lea ecx, [esp + 0x14]
call fcn.0050d6ae
mov byte [esp + 0x248], 1
lea ecx, [esp + 0xc]
call fcn.0050d468
mov esi, dword [fcn.004b46f4]
call esi
mov edi, eax
call esi
imul edi, eax
call edi
mov eax, 0x4d85a8
push eax
lea ecx, [esp + 0x38]
call fcn.0050d47a
mov esi, dword [esp + 0x250]
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.0050d618
mov dword [esp + 0x3c], 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x248], bl
call fcn.0050d468
mov ecx, dword [esp + 0x240]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x240
ret