Function at 0x479c28
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
jp 0x479c33
jo 0x479c3e
xchg edi, esi
xchg edi, esi
jo 0x479c3b
jno 0x479c3e
mov edx, 0x26143d83
inc edi
add byte [ecx], al
cmp dword [0x472614], 1
jne 0x479d6e
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0048801b
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
xchg esi, eax
xchg esi, eax
add eax, 0x4d47
sub eax, 0x4d47
mov edx, edx
nop
jns 0x479ca2
jl 0x479c9e
js 0x479ca2
lcall 0xe980, 0xf04d8ac4
add dword [eax + 0x558af04d], ecx
cmc
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
cmp eax, dword [esp]
cmp ebx, 0xfc9
je 0x479d12
jne 0x479d0f
jne 0x479d12
mov ebx, 0x37483d83
inc edi
add byte [eax], al
cmp dword [0x473748], 0
jne 0x479d23
or eax, 0xffffffff
jmp 0x479f6b
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x473748]
push ecx
call fcn.00488963
mov dword [ebp - 4], eax
or esp, 0
jge 0x479d44
nop
jle 0x479d3e
lea esp, [esp]
jl 0x479d44
ljmp 0x558d:0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0048801b
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x479d64
mov eax, dword [ebp - 4]
mov dword [0x472614], eax
jmp 0x479d6c
or eax, 0xffffffff
jmp 0x479f6b
jmp 0x479d77
mov ecx, dword [0x472614]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
ror esp, 0
shr esp, 0
js 0x479da1
pushf
neg esi
neg esi
and esp, 0xffffffff
lea edx, [edx + 0x21bb]
sub edx, 0x21bb
popf
lea eax, [eax]
jns 0x479da1
jmp 0x5133e330
mov eax, dword [ebp - 0x14]
push eax
call fcn.00496b37
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0048801b
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
std
cld
xchg ebx, ebx
nop
add esp, 0
jge 0x479e0d
pushf
jne 0x479dfb
lea esp, [esp]
xchg edi, eax
xchg edi, eax
add edi, dword [esp]
sub edi, dword [esp]
popf
jns 0x479e0a
jl 0x479e0d
mov ecx, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jae 0x479e6e
jle 0x479e70
jle 0x479e78
mov esp, esp
jg 0x479e78
add eax, 0x483d8341
aaa
inc edi
add byte [eax], al
cmp dword [0x473748], 0
je 0x479eb6
xor eax, dword [esp + 0x10]
xor eax, dword [esp + 0x10]
xchg edx, ebx
xchg edx, ebx
jmp 0x479e8f
test esp, 0x2293
jg 0x479ea3
jp 0x479e99
mov esp, esp
xchg edx, eax
xchg edx, eax
xchg esi, eax
xchg esi, eax
jle 0x479ea3
xor eax, 0xf04d8d39
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x473748]
push edx
call fcn.00488963
mov dword [ebp - 4], eax
test dword [esp + 8], eax
shl ebx, 0
rol ebx, 7
rol ebx, 0x19
add ebx, 0
jnp 0x479ed1
jae 0x479eca
jle 0x479ecc
jmp 0x479ece
jp 0x479ed1
sub dword [edx + 0xc], 0x458d006a
invalid
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0048801b
add esp, 0xc
rol ebx, 0
xchg ebx, esi
xchg ebx, esi
jns 0x479eea
jg 0x479f01
pushf
cmp ebx, 0x466
push ebx
pop ebx
popf
jns 0x479efa
xchg edi, edi
je 0x479efe
jle 0x479f01
mov edi, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x479f36
xchg esp, esp
jmp 0x479f0b
ror esi, 1
rol esi, 1
je 0x479f2a
pushf
inc eax
dec eax
popf
jl 0x479f19
lea edx, [edx + 0x7b66]
lea edx, [edx - 0x7b66]
jmp 0x479f27
jne 0x479f2a
sub eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.00496b37
add esp, 4
jns 0x479f38
mov esp, esp
jne 0x479f3c
xchg edi, edi
jnp 0x479f4c
ja 0x479f42
jne 0x479f44
je 0x479f46
jne 0x479f48
jp 0x479f4c
lcall 0x8b52, 0x20558b1c
inc ebp
sbb al, 0x50
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
mov ecx, 0x31e7c890
push edi
test dword [eax + 0x76], 0x5536f2ff
insb byte es:[edi], dx
sub eax, 0x78a8442e
push dword [eax]
mov ch, 0xac
dec ecx
mov al, byte gs:[0x9054c098]
push esp
jno 0x6f656b
xchg esi, eax
mov word [0xf52d0538], ax
iretd
int1
inc esp
inc esi
or eax, 0xd18bc403
jne 0x6f657d
and ebx, dword [ebx + 0x3011f28f]
or ah, byte [edx]
lcall 0xc2ff, 0x8f29f6c1
pop esi
cmp eax, 0x4fd6d6a1
and dl, dl
mov bl, 0x15
fld xword [ecx - 0x196b806d]
inc ebp
fisttp dword [edx + esi*8 - 0x7e]
xchg esp, eax
xchg si, ax
test esi, edi
mov ebp, 0x7254e508
movsb byte es:[edi], byte [esi]
push ds
mov dh, byte [0x9a6f1e8]
call 0xefe4e9c0
mov esi, 0xd0969ece
pop eax
add byte [edi + 0x7b], cl
or al, 0x93
push eax
pop ds
outsd dx, dword [esi]
cmp eax, 0x74c30e2a
jbe 0x6f65ed
push 0xffffffffffffffea
mov al, 0x69
cmc
mov ds, word [esi + 0x1e]
push ebp
dec ebx
in al, 0x58
test eax, 0x9c53d324
sbb al, 0x3a
out 0x4f, eax
sbb bl, dh
push edi
push dword [ecx - 0x48c68f46]
je 0x6f663f
insd dword es:[edi], dx
shr edx, cl
cmp al, 0x28
sbb eax, 0x1ea4b891
pop edx
loop 0x6f6612
xchg ecx, eax
mov eax, 0xe25a1ea4
push ds
imul ecx, dword [0x5164c351], 0x79
xchg esp, eax
rol dword [ebp - 0x514d8b08], 1
lcall 0xf2cc, 0x8d9a3a5d
test byte [esi + edi - 0x16], cl
test byte [esi + edi - 0x16], cl
adc dword [edx - 0x11], esp
cwde
lcall 0xc428, 0xbc8fab0b
or ebp, dword [ebx - 0x3bd74371]
rcl byte [eax + 0x54a7b7b3]
aam 0x54
inc ebp
out dx, eax
ja 0x6f6684
jae 0x6f666d
insd dword es:[edi], dx
imul edx, dword [esi - 0x59], 0x42
pushfd
hlt
mov edx, edx
imul ebx, dword [edx + eax*4 + 0x28], 0xab30c9eb
ja 0x6f6608
sub byte [eax], 0xeb
leave
xor byte [ebx + 0x4e33bd77], ch
cmp dword [ecx - 0xd], 9
pop eax
dec edi
xor ecx, dword [esi - 0x7d]
jns 0x6f6643
or dword [eax + 0x4f], ebx
xchg ebx, eax
insd dword es:[edi], dx
enter 0xffffffffffffc32d, 0x21
rcl byte [ebx - 0x73730b02]
lea ebx, [ecx + 0x19]
add eax, 0x240b12ef
outsd dx, dword [esi]
and eax, 0xd34a54f4
mov edx, 0xb6ab427b
mov al, ah
lodsb al, byte [esi]
retf
push 0x5f3f115d
test eax, 0xf0695c31
dec esi
stosb byte es:[edi], al
invalid