Function at 0x471790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00474b40
add esp, 0xc
test esp, 0x596e
je 0x4717c5
pushf
add edi, dword [esp]
sub edi, dword [esp]
xchg ecx, ecx
xor esp, 0
popf
mov ecx, ecx
jne 0x4717c5
mov ebp, 0x45c666b0
call 0xe98ca021
mov al, 0x66
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x50
mov byte [ebp - 0x14], 0x71
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x4c
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x7a
mov byte [ebp - 0xe], 0x46
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x42
mov byte [ebp - 0xb], 0
and esp, 0xffffffff
rol edi, 3
ror edi, 3
ja 0x471821
pushf
shr esp, 0
or edi, edi
cmp esp, 0x3ba6
jae 0x471816
popf
mov esp, esp
mov edx, edx
jns 0x47181e
jbe 0x471821
mov ebp, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xc]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xf]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x10], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
and esp, 0xffffffff
jg 0x4718a3
pushf
add esp, 0
xor esp, 0
jl 0x471898
popf
jb 0x47189c
xchg ebx, ecx
xchg ebx, ecx
jle 0x4718a3
mov ecx, 0x10618e8
add byte [ebx - 0x76367a38], cl
dec ebp
cld
call 0x481ec0
mov ecx, eax
test ecx, ecx
mov dword [ebp - 4], ecx
jne 0x4718bf
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
inc esi
dec esi
jp 0x4718d6
lea eax, [eax + 0x4c3f]
lea eax, [eax - 0x4c3f]
jne 0x4718d1
jnp 0x4718d3
jnp 0x4718d6
lcall 0xe851, 0x52e8558d
inc eax
cli
add byte [eax], al
lea edx, [ebp - 0x18]
push edx
push ecx
call fcn.00481320
mov esi, eax
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
mov dword [ebp - 8], esi
call fcn.00474b40
add esp, 0xc
test esi, esi
jne 0x471907
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
lea ecx, [ecx + 0x1a71]
sub ecx, 0x1a71
push ebx
pop ebx
or ebx, ebx
jno 0x471930
pushf
cmp esp, 0x3e4a
neg edi
neg edi
jle 0x471927
popf
xchg ecx, ebx
xchg ecx, ebx
jo 0x471930
adc dword [esi - 0x18], 0xe88a
push esi
call fcn.004801c0
push 0xe
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.00474b40
add esp, 0x10
push ebx
add ebx, 0x4db5
ror ebx, 1
pop ebx
ror esp, 0
sub ecx, 0
shl esp, 0
jp 0x47196c
pushf
jp 0x47195f
and esp, 0xffffffff
ror ecx, 0
popf
jl 0x471969
jnp 0x47196c
mov eax, 0x45c666b0
call 0xe98ca1c8
mov al, 0x66
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x50
mov byte [ebp - 0x14], 0x71
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x4c
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x7a
mov byte [ebp - 0xe], 0x46
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x58
mov byte [ebp - 0xb], 0
xor edx, 0x2665
xor edx, 0x2665
lea edi, [edi]
shr esp, 0
ja 0x4719c1
mov esp, esp
jne 0x4719ba
mov ecx, ecx
jge 0x4719be
jbe 0x4719c1
lcall 0xed45, 0x8ae84d8a
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xc]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xf]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x10], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
or esi, esi
mov ecx, ecx
jg 0x471a3d
xchg edi, edi
xchg edx, ecx
xchg edx, ecx
xchg edi, eax
xchg edi, eax
lea esi, [esi]
jle 0x471a3d
ljmp 0xf77:0xc4c13a
rol esp, 0
ja 0x471a51
pushf
jle 0x471a46
popf
lea eax, [eax]
js 0x471a4c
jno 0x471a4e
jbe 0x471a51
mov esi, 0x8dfc458b
push ebp
call 0xc32f6aad
clc
add byte [eax], al
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x18]
push edx
push eax
call fcn.00481320
mov ebx, eax
nop
jl 0x471a6a
js 0x471a65
xchg esi, eax
xchg esi, eax
jge 0x471a6a
call 0x4dd428d8
call 0xe8981add
leave
xor byte [eax], al
add byte [ebx + 0x7c850cc4], al
and al, 0xc
push 0xe
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.00474b40
add esp, 0xc
test dword [esp + 0xc], edi
ror esp, 0
jbe 0x471aa4
pushf
jmp 0x471a87
xchg ecx, ecx
shl esi, 0
lea edi, [edi + 0x7b12]
lea edi, [edi - 0x7b12]
popf
ja 0x471a9c
je 0x471a9e
lea esp, [esp]
ja 0x471aa4
mov ebp, 0x2974db85
test ebx, ebx
je 0x471ad1
xchg edi, ecx
xchg edi, ecx
jo 0x471ac8
pushf
jle 0x471ab2
test esp, 0x332b
call fcn.00471abd