Function at 0x447712
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004514ee
add esp, 0xc
and esp, 0xffffffff
js 0x447730
jge 0x447732
test eax, esi
jnp 0x447741
pushf
jae 0x44773a
popf
xchg esp, esp
jp 0x447741
mov ebx, 0x52e445c6
mov byte [ebp - 0x1c], 0x52
mov byte [ebp - 0x17], 0x54
mov byte [ebp - 0x12], 0x64
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x1b], 0x76
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 0x1a], 0x66
mov byte [ebp - 0x15], 0x73
mov byte [ebp - 0x10], 0x54
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x14], 0x77
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x7a
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x62
rol edi, 0x10
rol edi, 0x10
ror esp, 0
nop
rol esi, 0
jl 0x4477af
pushf
jo 0x4477a0
jge 0x4477a2
xor edx, dword [esp]
xor edx, dword [esp]
popf
js 0x4477ac
jge 0x4477af
call 0x8128c53d
jmp 0xe491ffb9
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
ja 0x44784d
xor ecx, dword [esp]
xor ecx, dword [esp]
je 0x44785d
xchg esp, esp
lea esp, [esp]
jne 0x44785d
mov edx, 0xfe1d27e8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 7], dh
call fcn.00429589
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x447872
xor eax, eax
jmp 0x447929
jp 0x447874
jns 0x447888
pushf
xchg esi, eax
xchg esi, eax
jp 0x44787c
ror esp, 0
popf
jge 0x447883
jle 0x447885
js 0x447888
lcall 0x558b, 0x51e44d8d
clc
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00452033
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004514ee
add esp, 0xc
cld
shr eax, 0
shl esp, 0
jbe 0x4478b6
jbe 0x4478b3
ja 0x4478b6
ljmp 0x475:0xfc7d83
cmp dword [ebp - 4], 0
jne 0x4478c0
xor eax, eax
jmp 0x447929
and esp, 0xffffffff
xor ecx, dword [esp + 4]
xor ecx, dword [esp + 4]
jmp 0x4478cd
jnp 0x4478ed
pushf
xor esi, dword [esp]
xor esi, dword [esp]
cmp edi, 0x6e23
xchg esp, esp
test dword [esp], ecx
popf
jae 0x4478e6
mov eax, eax
mov esp, esp
jp 0x4478ed
sub eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004545ec
add esp, 4
rol ebx, 0x17
rol ebx, 9
test eax, 0x2bfa
ror esp, 0
xchg edi, edx
xchg edi, edx
je 0x44791e
jg 0x44790f
lea esi, [esi + 0x5a3]
lea esi, [esi - 0x5a3]
jne 0x44791e
or dword [ebx - 0x74adf3ab], 0xff500845
push ebp
cld
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8