Function at 0x47fe90
Capabilities:
Create thread

Disassembly:
and byte [eax], al
add byte [ecx + 0x203086], cl
add bh, bh
adc eax, sym.imp.KERNEL32.dll_WaitForSingleObject
push esi
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0x49
ja 0x4800a1
stc
aaa
lea ebp, [bp - 0x5d81]
out 0xbe, eax
xor edx, dword [ebx]
lea edi, [esi + 0x4f]
pushal
dec esi
adc eax, dword [edi - 0x70]
inc edi
nop
mov ebx, 0x97ca815
xor eax, 0x1a1b096c
lodsb al, byte [esi]
mov ecx, 0x74b605f6
jne 0x47fe7d
popal
mov dword [0xf4f09d88], edi
in al, 0x4e
shr byte [esi - 0x57b5a42b], cl
test dword [ecx], 0x6e97396e
mov dword [0x74ab8b15], eax
mov word [ecx], ds
arpl word fs:[ebp + 0x919ccff], si
mov ebp, dword [ebx + 0x64198c74]
arpl word [ebp + 0x919ccff], si
loop 0x47feb4
jl 0x47ff16
test dword [esi + 0x51157484], 0x840f08f1
cmp ecx, ecx
inc eax
fadd st(5)
shl dword [edi - 0x1c], 1
pop esp
push ss
mov dh, 0xe4
loopne 0x47ff51
and eax, 0xcfe38b8
xor byte [ebp - 0x46790ef2], cl
cmp dword [esi + 0x7710fc2c], ebx
enter 0x13f1, 0xb
cld
adc byte [edi - 0x38], dh
int1
adc ecx, dword [ebx]
jle 0x47fee0
push ss
jmp 0xb6319692
mov ah, bl
push ebp
mov esp, 0xfc24fd7f
stc
sub cl, byte [esi]
sub ebp, ebx
adc bl, byte [edx + 0x7e]
mov word [edx - 0x3eea8374], fs
inc esp
push ebp
lds edi, [esi]
jne 0x47ff97
push es
jno 0x47ffca
lcall 0xc1c1, 0x7a13c9b
cmc
jnp 0x47ffcb
rol bl, 1
xor eax, 0x4333e0e9
in eax, dx
xchg ebx, eax
mov dh, bl
sub dword [edi + 0x2bc1f87d], esp
dec esp
mov esp, 0x68571729
cmc
sub ecx, 0x74
into
je 0x47ff67
and ecx, eax
or eax, 0x89213612
dec ecx
salc
mov bh, 0xac
outsd dx, dword [esi]
jmp 0x47ffc5
jns 0x480011
mov eax, ebp
out 0x48, al
dec eax
cld
xchg dword [edi - 0xf], esp
mov edi, 0xb26b743f
xchg dword [ecx + 2], edi
aas
das
fstp dword [ecx + eax*4]
int1
xor ch, byte [edi - 0x54]
dec edx
jecxz 0x480054
test eax, 0x10cb88
and edx, dword [esp - 5]
push eax
mov al, 0x22
or esp, edx
arpl word [edx - 0x3cfde9a0], dx
out 0x79, al
cmp bh, byte [0x7713e852]
invalid
ficom word [edi + 0x74]
mov ah, 0x9f
xchg ebp, eax
pop esi
or byte [esi + 0x7a], dl
sbb byte [ebx - 0x65fec504], cl
mov ch, 0xa2
dec ebp
push 0xf3982f72
iretd
mov ebx, 0x9b46b837
push cs
pslld mm0, mm1
pop esi
sbb eax, 0xe1aeef0b
loop 0x4800a1
xchg byte [ecx - 0x17], dl
push 0x78
dec ebx
sal byte [ebp + 0x5d], 1
into
in eax, dx
push 0x74e16ae1
inc edx
cmc
jns 0x4800bc
push esp
adc dl, 0x8a
leave
mov ecx, eax
fisubr word [edi + 0x3ac87173]
xor ecx, dword [esi + 0x1b]
les ecx, [ebx + 0x22]
test dword [edx], edx
cld
jle 0x4800f6
fnstenv [edi - 0x297f23a4]
add ah, byte [edi]
sub byte [ecx + 0x13ea2c2a], cl
pop edi
push edx
xor eax, eax
push eax
push eax
push esi
push 0x4800bb
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x2028], eax
pop esi
ret
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0x10
ja 0x4802d5
pop edi
stosb byte es:[edi], al
xchg esi, eax
jmp 0x48014b
into
dec ecx
and dword [edi - 0x2aec380b], ebp
iretd
invalid
aad 0x2d
sub dword [esi + edi*4 + 0x7b2d49d6], ebx
xchg edx, eax
jge 0x4800f1
push edi
iretd
mov esi, dword [ebp + 8]
test esi, esi
jne 0x4802e4
or eax, 0xffffffff
jmp 0x4803e7
mov eax, dword [esi + 0x201c]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x2020]
mov dword [esp + 0x1c], eax
call fcn.004ae8cf
xor ebx, ebx
jmp 0x4803bb
push 0xc8
push ebx
lea eax, [esp + 0x20]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x4803e5
cmp eax, 1
je 0x4803e5
cmp dword [esi + 0x200c], 0xffffffff
je 0x4803b6
lea edi, [esi + 0x2034]
mov ecx, edi
call fcn.004817d1
call fcn.004ae8cf
push ebx
lea ecx, [esp + 0x14]
push ecx
push ebx
push ebx
push ebx
push dword [esi + 0x200c]
call dword [eax + 0x2a0]
test eax, eax
je 0x4803c9
cmp dword [esp + 0x10], 8
jbe 0x4803af
call fcn.004ae8cf
push ebx
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
push ecx
push 8
lea ecx, [esp + 0x30]
push ecx
push dword [esi + 0x200c]
call dword [eax + 0x2a0]
test eax, eax
je 0x4803af
cmp dword [esp + 0x14], 8
jne 0x4803af
push dword [esp + 0x24]
call fcn.0047d015
test al, al
je 0x4803af
push ecx
lea eax, [esp + 0x2c]
push eax
mov ecx, esi
call fcn.0047d23a
mov ecx, edi
call fcn.004815ac
call fcn.004ae8cf
cmp dword [eax + 0x2a0], ebx
jne 0x480304
jmp 0x4803e5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 0x2090]
mov dword [esi + 0x2010], eax
test ecx, ecx
je 0x4803e5
push eax
push ebx
call ecx
pop ecx
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4