Function at 0x10479aa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
lea esp, [esp + 4]
jp 0x104773d
cmp eax, ecx
jb 0x1047755
ja 0x1047743
jno 0x1047745
lea ebx, [ebx + 0x769a]
lea ebx, [ebx - 0x769a]
jae 0x1047755
mov edx, 0xec45c79c
adc eax, dword [eax]
add byte [eax], al
mov dword [ebp - 0x14], 0x13
mov dword [ebp - 0x18], 0
jmp 0x104776e
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1047b32
or edi, 0
test edx, 0x3182
and esi, 0xffffffff
jo 0x1047793
add byte [ebx + 0xd70ffe6], al
je 0x1047788
jno 0x104778a
mov esp, esp
xchg esi, ebx
xchg esi, ebx
jno 0x1047793
mov edi, 0x89e84d8b
dec ebp
in al, 0x83
jge 0x1047780
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x10477a6
add ecx, dword [edi]
xchg edx, edx
add al, byte [eax]
add byte [ebx + 0x24ffe455], cl
invalid
and al, 0x95
pop edx
jnp 0x10477b0
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x1047b5a]
add dword [edx + 0xc], ebp
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0104731c
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
add esp, 0
xor ecx, 0x66c6
xor ecx, 0x66c6
not ebx
not ebx
ja 0x104780e
add byte [ebp - 0x17af0fbb], cl
invalid
pushf
sub esp, 0
or ebx, 0
jns 0x10477fc
rol esi, 6
ror esi, 6
popf
jg 0x1047806
lea esp, [esp]
mov edx, edx
jbe 0x104780e
mov eax, 0x80f04d8a
jmp 0xf1520018
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x10477a6
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0104731c
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
jp 0x1047882
xor eax, edx
xor eax, edx
rol eax, 0x1d
ror eax, 0x1d
jb 0x10478aa
pushf
clc
jno 0x1047893
lea eax, [eax + 0x3497]
lea eax, [eax - 0x3497]
jno 0x10478a1
popf
jo 0x10478a5
jb 0x10478a7
jae 0x10478aa
or dword [edx + 0x12cf045], 0x8af04588
dec ebp
cmc
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x10477a6
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0104731c
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
cmp ecx, dword [esp]
lea ecx, [ecx]
jg 0x1047946
pushf
cmp esi, dword [esp + 4]
jp 0x104793a
popf
lea esp, [esp]
mov ecx, ecx
jne 0x1047943
jle 0x1047946
mov esi, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x10477a6
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0104731c
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
xor esi, dword [esp + 8]
xor esi, dword [esp + 8]
jle 0x10479f4
lea esi, [esi + 0x2146]
lea esi, [esi - 0x2146]
clc
jo 0x1047a16
pushf
test edi, 0x4d55
popf
jbe 0x1047a0f
jno 0x1047a11
jo 0x1047a13
jno 0x1047a16
jmp 0x81f4cfa4
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
clc
jae 0x1047a88
pushf
or edi, 0
jle 0x1047a7f
popf
lea ecx, [ecx]
jnp 0x1047a85
jb 0x1047a88
add eax, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.010539b9
mov dword [ebp - 4], eax
std
cld
xchg esi, eax
xchg esi, eax
jne 0x1047ab2
lea esp, [esp]
jge 0x1047aae
je 0x1047ab2
mov esp, 0x6a0c6aba
add byte [ebp - 0x17ad0fab], cl
pop ebp
clc
invalid
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0104731c
add esp, 0xc
mov edi, edi
call 0x1047ac9
add esp, 4
shl esi, 0
xchg ecx, edx
xchg ecx, edx
je 0x1047ade
jnp 0x1047ad7
lea ebx, [ebx]
js 0x1047adb
jne 0x1047ade
add dword [ebx + 0x74fffc7d], 0xf7007749
sal bh, 1
ror byte [ebp + 0x15d69b], 1
add byte [ebp - 0x15d565], cl
push dword [ebx + ecx + 0x66]
pushfd
cmp dword [ebp - 4], 0xffffffff
je 0x1047b2d
ja 0x1047ae6
not eax
not eax
lea ebx, [ebx + 0x15d6]
lea ebx, [ebx - 0x15d6]
je 0x1047b03
pushf
clc
stc
popf
jl 0x1047b00
jne 0x1047b03
mov ebx, 0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.01061f3f
call 0x1047b11
lea esp, [esp + 4]
jae 0x1047b24
js 0x1047b19
jo 0x1047b1b
xchg ecx, edx
xchg ecx, edx
jmp 0x1047b21
jb 0x1047b24
mov ebx, 0x12ec45c7
add byte [eax], al
add bl, ch
add eax, 0xfffc33e9
inc dword [ebx - 0x133eff34]
add ch, bh
mov dword [ebp - 0x14], 0x12
jmp 0x1047b32
jmp 0x1047765
or esp, 0
shr esp, 0
std
cld
jg 0x1047b50
pushf
ror edx, 5
rol edx, 5
ror esp, 0
popf
jg 0x1047b4b
jbe 0x1047b4d
jle 0x1047b50
xor eax, 0x5fec458b
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret