Function at 0x47cd10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00474b40
add esp, 0xc
not esi
not esi
cmp edi, dword [esp]
add edx, dword [esp]
sub edx, dword [esp]
test esp, 0x5243
jnp 0x47cd44
mov esp, esp
jp 0x47cd44
and dword [edx], 0x45c666b3
in al, 0x53
mov bl, 0x66
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], bl
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x52
mov byte [ebp - 0x18], 0x76
mov byte [ebp - 0x17], bl
mov byte [ebp - 0x16], 0x73
mov byte [ebp - 0x15], 0x7a
mov byte [ebp - 0x14], 0x57
mov byte [ebp - 0x13], 0x62
mov byte [ebp - 0x12], 0x6d
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0xc], 0
je 0x47cd89
je 0x47cda2
pushf
xor eax, 0x41de
xor eax, 0x41de
popf
jns 0x47cd9b
jle 0x47cd9d
jp 0x47cd9f
jne 0x47cda2
jmp 0x8b2c1b30
mov cl, byte [ebp - 0x1c]
mov al, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0x1c], cl
mov cl, byte [ebp - 0xd]
dec al
dec dl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x1b]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x16]
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0x11]
dec al
dec dl
mov byte [ebp - 0x1b], al
mov al, byte [ebp - 0x1a]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
dec al
dec dl
mov byte [ebp - 0x1a], al
mov al, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xf]
dec al
dec dl
mov byte [ebp - 0x19], al
mov al, byte [ebp - 0x18]
dec cl
mov byte [ebp - 0x14], dl
mov dl, byte [ebp - 0x13]
mov byte [ebp - 0xf], cl
mov cl, byte [ebp - 0xe]
dec al
dec dl
dec cl
mov byte [ebp - 0x18], al
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], cl
shr edi, 0
add esi, 0
std
cld
mov edx, edx
jae 0x47ce3b
pushf
jb 0x47ce32
and edi, edi
popf
xchg esp, esp
jb 0x47ce3b
sub eax, 0x5080e8
add byte [ebx + 0x75f685f0], cl
push cs
call 0x481ec0
mov esi, eax
test esi, esi
jne 0x47ce54
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
test dword [esp], eax
ja 0x47ce5f
xchg edi, eax
xchg edi, eax
jbe 0x47ce5f
mov esp, 0xe44d8d15
lea ecx, [ebp - 0x1c]
push ecx
push esi
call fcn.00481320
push 0x11
lea edx, [ebp - 0x1c]
mov edi, eax
push 0
push edx
mov dword [ebp - 8], edi
call fcn.00474b40
add esp, 0xc
test edi, edi
jne 0x47ce90
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
jbe 0x47ce92
js 0x47ce94
xor esp, 0
jns 0x47cea0
mov esp, esp
jns 0x47ce9d
js 0x47cea0
lcall 0, 0x331ae857
push edi
call fcn.004801c0
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00474b40
add esp, 0x10
lea edx, [edx + 0x32df]
lea edx, [edx - 0x32df]
js 0x47ced9
pushf
and edx, 0xffffffff
call 0x47cece
lea esp, [esp + 4]
popf
jmp 0x47ced6
jns 0x47ced9
mov esp, 0x53e445c6
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], bl
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x52
mov byte [ebp - 0x18], 0x76
mov byte [ebp - 0x17], bl
mov byte [ebp - 0x16], 0x73
mov byte [ebp - 0x15], 0x7a
mov byte [ebp - 0x14], 0x57
mov byte [ebp - 0x13], 0x62
mov byte [ebp - 0x12], 0x6d
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
xor edx, 0
jb 0x47cf30
pushf
mov esp, esp
jae 0x47cf25
popf
jp 0x47cf29
jg 0x47cf2b
mov esp, esp
jae 0x47cf30
ljmp 0xe94d:0x8ae4558a
mov dl, byte [ebp - 0x1c]
mov cl, byte [ebp - 0x17]
mov al, byte [ebp - 0x12]
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0x1c], dl
mov dl, byte [ebp - 0x1b]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x1a]
dec dl
dec cl
mov byte [ebp - 0x1b], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x19]
mov byte [ebp - 0x1a], bl
mov bl, byte [ebp - 0x14]
dec dl
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
dec al
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0x18]
dec bl
mov byte [ebp - 0x19], al
mov al, byte [ebp - 0x13]
mov byte [ebp - 0x14], bl
mov bl, byte [ebp - 0xe]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0x18], cl
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], bl
clc
xor esp, 0
rol ebx, 0
jb 0x47cfc3
jmp 0x47cfbb
lea eax, [eax]
jp 0x47cfbf
jae 0x47cfc3
call 0x10c90fa
rol esp, 0
lea esp, [esp]
sub edx, 0
lea ecx, [ecx + 0x3e9b]
lea ecx, [ecx - 0x3e9b]
jle 0x47cfe4
jle 0x47cfdc
xchg esp, esp
js 0x47cfe0
jg 0x47cfe4
mov ebx, 0xe44d8da8
lea ecx, [ebp - 0x1c]
push ecx
push esi
call fcn.00481320
mov dword [ebp - 4], eax
cmp esi, dword [esp]
xchg ebx, edx
xchg ebx, edx
js 0x47d009
pushf
ja 0x47cffe
popf
jl 0x47d002
jo 0x47d004
xchg ebx, ebx
jns 0x47d009
sub dword [edx + 0x11], 0x6ae4558d
add byte [edx - 0x18], dl
sub bh, byte [ebx - 1]
inc dword [ebx - 0x37ef33c]
push edi
add byte [eax], al
push 0x11
lea edx, [ebp - 0x1c]
push 0
push edx
call fcn.00474b40
add esp, 0xc
cmp esp, 0x57f2
cmp ebx, edi
sub esi, 0
rol edx, 0
ja 0x47d02f
lea edi, [edi]
jbe 0x47d02f
mov edx, 0xfc458be7
mov eax, dword [ebp - 4]
test eax, eax
je 0x47d059
cmp esp, 0x41f0
jo 0x47d050
pushf
sub ecx, 0
ror edi, 0xf
rol edi, 0xf
popf
jo 0x47d04d
jno 0x47d050
add eax, 0x316ae850
add byte [eax], al
push eax
call fcn.004801c0
add esp, 4
jp 0x47d05b
jae 0x47d062
jo 0x47d05f
jb 0x47d062
add eax, 0x8b1c458b
dec ebp
sbb byte [ebx - 0x74afebab], cl
inc ebp
adc byte [ecx - 0x75], dl
dec ebp
or al, 0x52
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18