Function at 0x47a280
Capabilities:
Contain obfuscated stackstrings
Write file on windows

Disassembly:
sub esp, 0x1e8
mov eax, dword [0x613ad0]
xor eax, esp
mov dword [esp + 0x1e4], eax
mov eax, dword [esp + 0x1f8]
mov ecx, dword [esp + 0x1ec]
push ebx
mov ebx, dword [eax + 4]
push ebp
push edi
mov edi, dword [esp + 0x208]
mov dword [esp + 0x24], eax
mov eax, dword [eax + 8]
push 0x5da6e0
push ecx
mov dword [esp + 0x5c], edi
mov dword [esp + 0x3c], eax
call fcn.005ac643
mov ebp, eax
add esp, 8
test ebp, ebp
mov dword [esp + 0x20], ebp
jne 0x47a2f1
pop edi
lea eax, [ebp + 3]
pop ebp
pop ebx
mov ecx, dword [esp + 0x1e4]
xor ecx, esp
call fcn.005aac48
add esp, 0x1e8
ret
push ebp
push 6
push 1
push str.GIF89a
call fcn.005acf21
add esp, 0x10
cmp eax, 6
jne 0x47a373
mov eax, dword [esp + 0x34]
mov byte [esp + 0x18a], al
sar eax, 8
mov byte [esp + 0x18b], al
mov al, byte [edi + 0xe]
sub al, 1
mov cl, 0x11
imul cl
push ebp
push 7
mov byte [esp + 0x190], bl
lea edx, [esp + 0x190]
or al, 0x80
push 1
sar ebx, 8
push edx
mov byte [esp + 0x199], bl
mov byte [esp + 0x19c], al
mov byte [esp + 0x19d], 0
mov byte [esp + 0x19e], 0
call fcn.005acf21
add esp, 0x10
cmp eax, 7
je 0x47a390
push ebp
call fcn.005ac46d
add esp, 4
pop edi
pop ebp
mov eax, 8
pop ebx
mov ecx, dword [esp + 0x1e4]
xor ecx, esp
call fcn.005aac48
add esp, 0x1e8
ret
mov cl, byte [edi + 0xe]
mov eax, 1
shl eax, cl
xor ebx, ebx
push esi
lea esi, [edi + 0x28]
test eax, eax
jle 0x47a3e7
mov cl, byte [esi + 2]
mov dl, byte [esi + 1]
mov al, byte [esi]
push ebp
push 3
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
push 1
push ecx
mov byte [esp + 0x21], dl
mov byte [esp + 0x22], al
call fcn.005acf21
add esp, 0x10
cmp eax, 3
jne 0x47a4a9
mov cl, byte [edi + 0xe]
mov edx, 1
shl edx, cl
add ebx, 1
add esi, 4
cmp ebx, edx
jl 0x47a3a4
mov eax, dword [esp + 0x204]
test eax, eax
jl 0x47a4bc
mov byte [esp + 0x1b0], al
push ebp
sar eax, 8
push 0x13
mov byte [esp + 0x1b9], al
mov cl, 0x45
lea eax, [esp + 0x1a8]
push 1
push eax
mov byte [esp + 0x1b0], 0x21
mov byte [esp + 0x1b1], 0xff
mov byte [esp + 0x1b2], 0xb
mov byte [esp + 0x1b3], 0x4e
mov byte [esp + 0x1b4], cl
mov byte [esp + 0x1b5], 0x54
mov byte [esp + 0x1b6], 0x53
mov byte [esp + 0x1b7], 0x43
mov byte [esp + 0x1b8], 0x41
mov byte [esp + 0x1b9], 0x50
mov byte [esp + 0x1ba], cl
mov byte [esp + 0x1bb], 0x32
mov byte [esp + 0x1bc], 0x2e
mov byte [esp + 0x1bd], 0x30
mov byte [esp + 0x1be], 3
mov byte [esp + 0x1bf], 1
mov byte [esp + 0x1c2], 0
call fcn.005acf21
add esp, 0x10
cmp eax, 0x13
je 0x47a4bc
push ebp
call fcn.005ac46d
add esp, 4
mov eax, 8
jmp 0x47ab56
cmp dword [esp + 0x200], 0
mov dword [esp + 0x38], 0
jle 0x47ab2b
mov ecx, dword [esp + 0x28]
add ecx, 0x1c
mov dword [esp + 0x50], ecx
lea ecx, [ecx]
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
movzx ecx, word [ebx + 0xe]
mov eax, dword [esi - 0x14]
mov edx, dword [esi - 0x18]
mov dword [esp + 0x28], eax
movzx eax, cx
imul eax, edx
add eax, 0x1f
mov dword [esp + 0x68], edx
cdq
and edx, 0x1f
add eax, edx
mov edx, dword [esi + 0x20]
sar eax, 5
add eax, eax
add eax, eax
cmp cx, 1
mov dword [esp + 0x5c], eax
mov dword [esp + 0x40], edx
je 0x47a535
movzx eax, word [ebx + 0xe]
cmp ax, 4
je 0x47a535
cmp ax, 8
jne 0x47ab6f
cmp dword [esi], 0
mov byte [esp + 0x184], 0x21
mov byte [esp + 0x185], 0xf9
mov byte [esp + 0x186], 4
mov byte [esp + 0x187], 0
je 0x47a562
mov byte [esp + 0x187], 1
cmp dword [esi + 0xc], 0
je 0x47a570
or byte [esp + 0x187], 8
cmp dword [esi + 0x14], 0
je 0x47a57e
or byte [esp + 0x187], 4
cmp dword [esi + 0x10], 0
je 0x47a58c
or byte [esp + 0x187], 2
mov edi, dword [esp + 0x24]
mov al, byte [esi - 8]
mov ecx, dword [esi - 8]
mov dl, byte [esi + 4]
push edi
push 8
mov byte [esp + 0x190], al
lea eax, [esp + 0x18c]
sar ecx, 8
push 1
push eax
mov byte [esp + 0x199], cl
mov byte [esp + 0x19a], dl
mov byte [esp + 0x19b], 0
call fcn.005acf21
add esp, 0x10
cmp eax, 8
push edi
jne 0x47ac1b
movzx ecx, byte [esi - 0x10]
movzx eax, byte [esi - 0xc]
mov edx, dword [esi - 0x10]
mov byte [esp + 0x199], cl
mov ecx, dword [esi - 0xc]
mov byte [esp + 0x19b], al
mov eax, dword [esi - 0x18]
sar edx, 8
sar ecx, 8
sar eax, 8
mov byte [esp + 0x19a], dl
mov dl, byte [esi - 0x18]
mov byte [esp + 0x19c], cl
movzx ecx, byte [esi - 0x14]
mov byte [esp + 0x19e], al
movzx eax, byte [ebx + 0xe]
mov byte [esp + 0x19d], dl
mov edx, dword [esi - 0x14]
push 0xa
mov byte [esp + 0x1a3], cl
lea ecx, [esp + 0x19c]
sar edx, 8
sub al, 1
push 1
push ecx
mov byte [esp + 0x1a4], 0x2c
mov byte [esp + 0x1ac], dl
mov byte [esp + 0x1ad], al
call fcn.005acf21
add esp, 0x10
cmp eax, 0xa
jne 0x47ab76
push 0xfa00
call fcn.00475c60
mov ebp, eax
add esp, 4
test ebp, ebp
mov dword [esp + 0x2c], ebp
je 0x47ab86
push 0x8004
call fcn.00475c60
mov esi, eax
add esp, 4
test esi, esi
mov dword [esp + 0x10], esi
je 0x47ab96
movzx ebx, word [ebx + 0xe]
add ebx, 1
cmp ebx, 2
mov dword [esp + 0x60], ebx
jne 0x47a6b8
mov ebx, 3
mov dword [esp + 0x60], ebx
push edi
push 1
mov dl, bl
lea eax, [esp + 0x1f]
sub dl, 1
push 1
push eax
mov byte [esp + 0x27], dl
call fcn.005acf21
add esp, 0x10
cmp eax, 1
jne 0x47abac
mov cl, byte [esp + 0x17]
mov edx, eax
shl edx, cl
push 0x101
push 0
mov dword [esp + 0x7c], edi
movzx esi, dx
lea eax, [esi + 1]
movzx ecx, ax
lea edx, [esp + 0x88]
push edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], ebx
call fcn.00475d50
movzx eax, si
add esp, 0xc
lea esi, [esp + 0x74]
mov dword [esp + 0x6c], eax
call fcn.004798f0
test al, al
je 0x47abc8
mov edi, dword [esp + 0x10]
xor eax, eax
mov ecx, 0x2001
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x5c]
add eax, 0xffffffff
imul ecx, eax
add ecx, dword [esp + 0x40]
xor edx, edx
cmp eax, edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x48], edx
mov dword [esp + 0x34], edx
mov dword [esp + 0x18], edx
mov ebp, 0x2001
mov dword [esp + 0x28], ecx
mov dword [esp + 0x40], eax
jl 0x47aabe
lea esp, [esp]
cmp dword [esp + 0x68], edx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x1c], ecx
jle 0x47aaa7
jmp 0x47a798
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x58]
movzx ecx, word [eax + 0xe]
cmp ecx, 4
je 0x47a7e6
cmp ecx, 8
je 0x47a7d7
mov eax, edx
and eax, 7
cmp eax, 7
jne 0x47a7c6
mov eax, dword [esp + 0x1c]
mov bl, byte [eax]
and bl, 1
add eax, 1
mov dword [esp + 0x1c], eax
jmp 0x47a800
mov edx, dword [esp + 0x1c]
mov bl, byte [edx]
mov cl, 7
sub cl, al
shr bl, cl
and bl, 1
jmp 0x47a800
mov eax, dword [esp + 0x1c]
mov bl, byte [eax]
add eax, 1
mov dword [esp + 0x1c], eax
jmp 0x47a800
test dl, 1
mov eax, dword [esp + 0x1c]
mov bl, byte [eax]
je 0x47a7fd
and bl, 0xf
add eax, 1
mov dword [esp + 0x1c], eax
jmp 0x47a800
shr bl, 4
mov eax, dword [esp + 0x18]
add eax, 1
cmp eax, 1
mov byte [esp + 0x1b4], al
mov dword [esp + 0x18], eax
mov byte [esp + eax + 0x1b4], bl
jne 0x47a83a
movzx cx, bl
movzx ebp, bl
movzx edx, cx
add ebp, 3
mov dword [esp + 0x3c], edx
imul ebp, ebp, 0x12d
jmp 0x47aa88
movzx ecx, bl
add eax, ecx
imul ebp, eax
mov eax, 0x3ffe001
mul ebp
shr edx, 7
imul edx, edx, 0x2001
mov edi, ebp
mov dword [esp + 0x70], ecx
mov dword [esp + 0x54], ebp
sub edi, edx
mov dword [esp + 0x64], 0
jmp 0x47a870
add edi, 1
cmp edi, 0x2001
jb 0x47a87d
xor edi, edi
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + edi*4]
test edx, edx
je 0x47a93b
mov eax, dword [esp + 0x18]
add eax, 1
add edx, 2
cmp eax, 4
lea ecx, [esp + 0x1b4]
jb 0x47a8b6
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x47a8ba
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x47a8a2
test eax, eax
je 0x47a91f
movzx esi, byte [edx]
movzx ebp, byte [ecx]
sub esi, ebp
jne 0x47a909
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x47a91b
movzx esi, byte [edx]
movzx ebp, byte [ecx]
sub esi, ebp
jne 0x47a909
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x47a91b
movzx esi, byte [edx]
movzx ebp, byte [ecx]
sub esi, ebp
jne 0x47a909
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x47a91b
movzx esi, byte [edx]
movzx edx, byte [ecx]
sub esi, edx
je 0x47a91b
test esi, esi
mov ebp, dword [esp + 0x54]
mov eax, 1
jg 0x47a921
or eax, 0xffffffff
jmp 0x47a921
mov ebp, dword [esp + 0x54]
xor eax, eax
test eax, eax
je 0x47a93b
mov eax, dword [esp + 0x64]
add eax, 1
cmp eax, 0x2001
mov dword [esp + 0x64], eax
jb 0x47a870
mov eax, dword [esp + 0x10]
mov eax, dword [eax + edi*4]
test eax, eax
je 0x47a96e
mov ecx, dword [esp + 0x18]
add ecx, 3
cmp ecx, 0x40
jae 0x47a96e
movzx dx, byte [eax + 1]
movzx ax, byte [eax]
shl dx, 8
add dx, ax
movzx ecx, dx
mov dword [esp + 0x3c], ecx
jmp 0x47aa88
movzx eax, word [esp + 0x3c]
lea esi, [esp + 0x74]
call fcn.004798f0
test al, al
mov edx, dword [esp + 0x10]
je 0x47abef
mov ebp, 1
add dword [esp + 0x30], ebp
cmp dword [edx + edi*4], 0
jne 0x47a9e1
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
add ecx, eax
mov eax, dword [esp + 0x2c]
movzx ecx, cx
add eax, esi
mov dword [edx + edi*4], eax
mov byte [eax], cl
mov byte [eax + 1], ch
mov ecx, dword [esp + 0x18]
add ecx, ebp
push ecx
lea edx, [esp + 0x1b8]
push edx
add eax, 2
push eax
call fcn.00475db0
mov eax, dword [esp + 0x24]
lea ecx, [esi + eax + 3]
add esp, 0xc
add dword [esp + 0x48], ebp
mov dword [esp + 0x34], ecx
movzx eax, word [esp + 0x44]
mov ecx, dword [esp + 0x30]
mov esi, ebp
mov ebp, dword [esp + 0x70]
add eax, ecx
mov ecx, dword [esp + 0x7c]
movzx dx, bl
mov edi, esi
shl edi, cl
add ebp, 3
movzx edx, dx
imul ebp, ebp, 0x12d
cmp eax, edi
mov byte [esp + 0x1b4], 1
mov dword [esp + 0x18], esi
mov byte [esp + 0x1b5], bl
mov dword [esp + 0x3c], edx
jne 0x47aa29
add dword [esp + 0x7c], esi
cmp eax, 0xffd
jg 0x47aa3e
mov eax, dword [esp + 0x34]
add eax, 0x40
cmp eax, 0xfa00
jle 0x47aa88
movzx eax, dx
lea esi, [esp + 0x74]
call fcn.004798f0
test al, al
je 0x47abeb
mov eax, dword [esp + 0x6c]
call fcn.004798f0
test al, al
je 0x47abeb
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x7c], ecx
mov ecx, 0x2001
mov dword [esp + 0x30], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], eax
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x4c]
add eax, 1
cmp eax, dword [esp + 0x68]
mov dword [esp + 0x4c], eax
jl 0x47a794
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
xor edx, edx
sub ecx, dword [esp + 0x5c]
sub eax, 1
cmp eax, edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x28], ecx
jge 0x47a780
mov edx, dword [esp + 0x10]
push edx
call fcn.00475cc0
mov eax, dword [esp + 0x30]
push eax
call fcn.00475cc0
movzx eax, word [esp + 0x44]
add esp, 8
lea esi, [esp + 0x74]
call fcn.004798f0
test al, al
je 0x47ac16
movzx eax, word [esp + 0x44]
call fcn.004798f0
test al, al
je 0x47ac16
call fcn.00479990
test al, al
je 0x47ac16
mov eax, dword [esp + 0x38]
add dword [esp + 0x50], 0x44
add eax, 1
cmp eax, dword [esp + 0x200]
mov dword [esp + 0x38], eax
jl 0x47a4e0
mov ebp, dword [esp + 0x24]
push ebp
push 1
lea eax, [esp + 0x2b]
push 1
push eax
mov byte [esp + 0x33], 0x3b
call fcn.005acf21
add esp, 0x10
cmp eax, 1
jne 0x47ac23
push ebp
call fcn.005ac46d
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x1f4]
pop esi
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.005aac48
add esp, 0x1e8
ret
mov eax, 2
jmp 0x47ab56
push edi
call fcn.005ac46d
add esp, 4
mov eax, 8
jmp 0x47ab56
push edi
call fcn.005ac46d
add esp, 4
mov eax, 1
jmp 0x47ab56
push ebp
call fcn.00475cc0
push edi
call fcn.005ac46d
add esp, 8
mov eax, 1
jmp 0x47ab56
push esi
call fcn.00475cc0
push ebp
call fcn.00475cc0
push edi
call fcn.005ac46d
add esp, 0xc
mov eax, 8
jmp 0x47ab56
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00475cc0
push ebp
call fcn.00475cc0
push edi
call fcn.005ac46d
add esp, 0xc
mov eax, 8
jmp 0x47ab56
mov edx, dword [esp + 0x10]
push edx
call fcn.00475cc0
mov eax, dword [esp + 0x30]
push eax
call fcn.00475cc0
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.005ac46d
add esp, 0xc
mov eax, 8
jmp 0x47ab56
mov edx, dword [esp + 0x24]
push edx
call fcn.005ac46d
add esp, 4
mov eax, 8
jmp 0x47ab56