Function at 0x479ada
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x47998c
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x479d1e
shr esi, 0
or ebx, 0
jbe 0x4799a4
js 0x4799a0
ja 0x4799a4
jmp 0xe895255c
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x4799b7
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x479d59]
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0048e238
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
cmp esp, 0x91b
and ecx, 0xffffffff
jbe 0x4799f9
test esi, 0x1e46
jbe 0x479a0c
jnp 0x479a03
mov edi, edi
jl 0x479a07
xchg ecx, ecx
ja 0x479a0c
xor eax, 0x80f04d8a
jmp 0xf0952216
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x4799b7
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0048e238
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
jle 0x479a80
jne 0x479a82
jl 0x479a99
pushf
call 0x479a8b
lea esp, [esp + 4]
and ecx, ecx
cmp eax, edi
popf
nop
jge 0x479a99
add eax, 0x2cf0458a
add dword [eax + 0x4d8af045], ecx
cmc
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x4799b7
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0048e238
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
dec edi
inc edi
jne 0x479b31
nop
lea ecx, [ecx + 0x33c9]
lea ecx, [ecx - 0x33c9]
xchg esi, esi
je 0x479b31
mov ebp, 0xf0558a5d
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x4799b7
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0048e238
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
xchg esp, esp
jne 0x479be4
lea ecx, [ecx]
nop
xchg edx, esi
xchg edx, esi
je 0x479be4
add eax, 0xf0558af9
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jge 0x479c45
lea edx, [edx]
je 0x479c49
add eax, 0x29d
sub eax, 0x29d
jne 0x479c60
jge 0x479c57
xchg ebx, eax
xchg ebx, eax
jb 0x479c5b
lea edx, [edx]
je 0x479c60
mov eax, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.0048d7ba
mov dword [ebp - 4], eax
jmp 0x479c7d
lea edi, [edi + 0x14d1]
sub edi, 0x14d1
add eax, dword [esp]
sub eax, dword [esp]
test esp, 0x5e94
jbe 0x479cad
pushf
cmp ecx, 0x360c
xchg esp, esp
jnp 0x479ca3
popf
jl 0x479ca7
lea esp, [esp]
ja 0x479cad
mov ebp, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0048e238
add esp, 0xc
xor esi, dword [esp]
xor esi, dword [esp]
test dword [esp], ebx
jns 0x479cd0
xchg ebx, ebx
xchg esp, esp
js 0x479cd0
jmp 0xfcc52063
cmp dword [ebp - 4], 0xffffffff
je 0x479d19
lea edi, [edi + 0x44c6]
sub edi, 0x44c6
push ecx
add ecx, 0x2795
ror ecx, 3
pop ecx
js 0x479cfb
pushf
sub esp, 0
popf
mov esi, esi
jns 0x479cfb
call 0x5143e28a
mov eax, dword [ebp - 4]
push eax
call fcn.004784b8
cmp ecx, dword [esp]
jno 0x479d10
xchg ecx, ecx
jo 0x479d10
mov eax, 0x45c76b38
in al, dx
adc al, byte [eax]
add byte [eax], al
mov dword [ebp - 0x14], 0x12
jmp 0x479d1e
jmp 0x479983
jno 0x479d20
and edx, 0xffffffff
not edi
not edi
xor esi, dword [esp + 0x10]
xor esi, dword [esp + 0x10]
jo 0x479d4f
pushf
xor ebx, 0x6a32
xor ebx, 0x6a32
xchg edi, edx
xchg edi, edx
test dword [esp], ecx
popf
jnp 0x479d4a
lea edi, [edi]
jno 0x479d4f
mov ebx, 0x5fec458b
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret