Function at 0x474920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00466b40
add esp, 0xc
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
mov esp, esp
xchg esp, esp
and ecx, ecx
jae 0x474956
pushf
jno 0x47494d
popf
jl 0x474951
jl 0x474953
jb 0x474956
add eax, 0x45c666b0
call 0xed8cd1af
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
or esi, 0
cld
js 0x47499c
pushf
cmp eax, dword [esp + 0x10]
popf
jbe 0x474999
jns 0x47499c
mov edi, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x14]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
jp 0x4749fe
test dword [esp], edx
xchg edx, edx
je 0x474a15
pushf
jp 0x474a09
xchg ecx, eax
xchg ecx, eax
test edi, eax
popf
lea esp, [esp]
jne 0x474a15
call 0x3bf101
inc dword [ebp - 0x3ba7640]
call 0x473ec0
test eax, eax
mov dword [ebp - 4], eax
jne 0x474a2a
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
clc
ror esi, 0x11
ror esi, 0xf
jns 0x474a4c
pushf
jne 0x474a37
push edx
pop edx
popf
lea edi, [edi + 0x1e2c]
lea edi, [edi - 0x1e2c]
xchg edx, edx
js 0x474a4c
call 0x522f97dd
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00473320
push 0xd
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.00466b40
add esp, 0xc
test esi, esi
jne 0x474a7a
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor esp, 0
jge 0x474a94
pushf
jle 0x474a83
cmp edx, dword [esp]
jae 0x474a88
add eax, 0
popf
lea ecx, [ecx]
jb 0x474a91
jl 0x474a94
add eax, 0xd726e856
invalid
push esi
call fcn.004721c0
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00466b40
add esp, 0x10
lea eax, [eax]
and ebx, 0xffffffff
jo 0x474ab1
inc ebx
dec ebx
jne 0x474ad7
pushf
xor edi, 0x2f64
xor edi, 0x2f64
jns 0x474ac5
test dword [esp + 4], esi
shr esi, 0
popf
xchg edi, edi
je 0x474ad2
jo 0x474ad4
je 0x474ad7
add eax, 0x45c666b0
call 0xed8cd330
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
jb 0x474b0c
jo 0x474b0e
jo 0x474b21
pushf
jnp 0x474b14
jg 0x474b16
std
cld
mov esi, esi
popf
jl 0x474b1e
jno 0x474b21
mov esi, 0x8ae8458a
pop ebp
in eax, dx
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 0x17]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x12]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0xd]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0x16]
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x11]
dec al
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0xf]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x10], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
and esp, 0xffffffff
xor edi, dword [esp]
xor edi, dword [esp]
xor esi, 0
ja 0x474b94
je 0x474b91
jbe 0x474b94
mov esp, 0x18cec1f9
stc
ror esi, 0x18
rol esi, 0x18
xchg edi, edx
xchg edi, edx
jo 0x474ba8
xchg ecx, ebx
xchg ecx, ebx
jno 0x474ba8
mov edx, 0x8dfc558b
dec ebp
call 0x6c2f9e03
out 0xff, eax
dec dword [ebx - 0x3a27628]
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00473320
mov ebx, eax
mov dword [ebp - 4], ebx
jo 0x474bbc
jo 0x474bc9
pushf
jg 0x474bc2
popf
jno 0x474bc6
jno 0x474bc9
xor eax, 0x458d0d6a
call 0xe8974c3c
push 0x1f
invalid
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00466b40
add esp, 0xc
or esi, esi
rol edi, 0
xor ecx, 0x78c7
xor ecx, 0x78c7
jae 0x474bfc
pushf
cmp esp, 0x5646
nop
popf
mov esi, esi
jb 0x474bfc
lcall 0x74, 0x1b74db85
test ebx, ebx
je 0x474c1b
je 0x474c02
jbe 0x474c0f
pushf
mov ebx, ebx
popf
ja 0x474c0c
ja 0x474c0f
mov esp, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004721c0
add esp, 4
jo 0x474c1d
xchg edi, eax
xchg edi, eax
ja 0x474c21
jo 0x474c28
jno 0x474c25
jno 0x474c28
mov edx, 0x8b10558b
inc ebp
or al, 0x8b
dec ebp
or byte [edx + 0x50], dl
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc