Function at 0x472ceb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00491fdc
add esp, 0xc
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
nop
jl 0x472d15
xchg esp, esp
jge 0x472d15
mov ecx, 0xe845c696
inc esp
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x13], 0x54
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x65
mov byte [ebp - 0x17], 0x6d
mov byte [ebp - 0x12], 0x66
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0x16], 0x70
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0xc], 0x49
mov byte [ebp - 7], 0x66
mov byte [ebp - 0x15], 0x74
mov byte [ebp - 0x10], 0x77
mov byte [ebp - 0xb], 0x62
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x6f
xor esi, edx
xor esi, edx
js 0x472d7b
pushf
or ebx, ebx
push edi
pop edi
and esp, 0xffffffff
popf
jle 0x472d74
xchg edi, edi
jmp 0x472d78
jns 0x472d7b
mov eax, 0x80e84d8a
jmp 0xe894b585
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
rol edx, 0x17
ror edx, 0x17
or edi, 0
jg 0x472e32
pushf
and esp, 0xffffffff
test dword [esp + 4], edx
popf
lea ecx, [ecx]
jle 0x472e32
mov eax, 0xffec46e8
dec dword [ecx + 0x7d83fc45]
cld
add byte [ebp + 7], dh
call 0x471a7d
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x472e47
xor eax, eax
jmp 0x472edb
xor edx, edi
xor edx, edi
or esp, 0
jne 0x472e66
jmp 0x472e52
mov esp, esp
lea ebx, [ebx]
lea edx, [edx + 0x425]
lea edx, [edx - 0x425]
je 0x472e66
add eax, 0xe84d8d28
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.00492398
mov dword [ebp - 0x1c], eax
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00491fdc
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jne 0x472e90
xor eax, eax
jmp 0x472edb
js 0x472e92
je 0x472ea1
pushf
xchg ebx, esi
xchg ebx, esi
popf
js 0x472e9e
jne 0x472ea1
or dword [ebx - 0x17ae1bb3], 0x28a24
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0049b8ce
add esp, 4
cmp ecx, 0x1c17
cld
jo 0x472ed4
pushf
cmp esi, dword [esp]
not ebx
not ebx
popf
mov ebx, ebx
lea ebx, [ebx + 0x1f1e]
lea ebx, [ebx - 0x1f1e]
js 0x472ed1
jno 0x472ed4
mov ebp, 0x5208558b
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4