Function at 0x47ded0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x160
mov eax, dword [0x66f040]
xor eax, ebp
mov dword [ebp - 4], eax
movdqa xmm0, xmmword [0x64e1e0]
movdqu xmmword [ebp - 0x70], xmm0
push esi
movdqa xmm0, xmmword [0x64e640]
mov esi, ecx
movdqu xmmword [ebp - 0xe8], xmm0
push edi
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0x20], 0x6c64746e
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x1c], 0x6c642e6c
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x128], xmm0
mov word [ebp - 0x18], 0x6c
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0x60], 0x65626d75
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x58], xmm0
mov word [ebp - 0x5c], 0x7372
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0xd0], xmm0
mov byte [ebp - 0x5a], 0
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x150], 0x343658
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x154], 0x323358
movdqa xmm0, xmmword [0x64e640]
movdqu xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0xd8], 0x31312073
movdqa xmm0, xmmword [0x64e080]
mov byte [ebp - 0xd4], 0
mov dword [ebp - 0xf0], 0x30312073
mov byte [ebp - 0xec], 0
mov dword [ebp - 0x90], 0x2e382073
mov word [ebp - 0x8c], 0x31
mov dword [ebp - 0x118], 0x382073
mov dword [ebp - 0x104], 0x372073
mov dword [ebp - 0x48], 0x69562073
mov dword [ebp - 0x44], 0x617473
mov dword [ebp - 0xc0], 0x50582073
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x78], 0x30322073
mov word [ebp - 0x74], 0x3030
mov byte [ebp - 0x72], 0
mov dword [ebp - 0x30], 0x65532073
mov dword [ebp - 0x2c], 0x72657672
mov dword [ebp - 0x28], 0x30303220
mov word [ebp - 0x24], 0x33
movdqu xmmword [ebp - 0x13c], xmm0
mov byte [ebp - 0x12c], 0
call fcn.0045c870
movdqa xmm0, xmmword [0x64e050]
mov edi, eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0xa8], 0x64252e64
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 0xa4], 0
push eax
movdqu xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0x14], 0x6e6b6e75
mov dword [ebp - 0x10], 0x206e776f
mov dword [ebp - 0xc], 0x6f727265
mov word [ebp - 8], 0x72
call fcn.00401240
test eax, eax
jne 0x47e0f5
lea ecx, [ebp - 0x14]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47e0d0
sub ecx, edx
lea eax, [ebp - 0x14]
push ecx
push eax
mov ecx, esi
call fcn.00460200
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x160]
push ecx
call eax
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x160]
and ecx, 0xffff
mov eax, edx
mov dword [ebp - 0x15c], ecx
sub eax, 5
je 0x47e246
dec eax
je 0x47e1b6
sub eax, 4
je 0x47e163
push ecx
push dword [ebp - 0x158]
lea eax, [ebp - 0xb8]
push edx
push eax
push esi
call fcn.0048d090
add esp, 0x14
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp ecx, 0x55f0
mov dword [0x680460], 1
mov ecx, esi
jb 0x47e1a4
mov dword [0x68045c], 6
lea eax, [ebp - 0xe8]
push eax
call fcn.004600f0
push 0x64bd2c
mov ecx, esi
call fcn.004600f0
lea eax, [ebp - 0x150]
jmp 0x47e2c9
mov dword [0x68045c], 5
lea eax, [ebp - 0x100]
jmp 0x47e187
mov eax, dword [ebp - 0x158]
cmp eax, 1
jne 0x47e201
mov dword [0x68045c], 2
lea eax, [ebp - 0x114]
push eax
mov ecx, esi
call fcn.004600f0
push 0x64bd2c
mov ecx, esi
call fcn.004600f0
mov ecx, esi
test edi, edi
je 0x47e1f6
lea eax, [ebp - 0x150]
jmp 0x47e2cb
lea eax, [ebp - 0x154]
jmp 0x47e2cb
cmp eax, 2
jne 0x47e218
mov dword [0x68045c], 4
lea eax, [ebp - 0x128]
jmp 0x47e1d1
cmp eax, 3
jne 0x47e22f
mov dword [0x68045c], 4
lea eax, [ebp - 0xa0]
jmp 0x47e1d1
test eax, eax
jne 0x47e2d1
mov dword [0x68045c], 3
lea eax, [ebp - 0x58]
jmp 0x47e1d1
mov eax, dword [ebp - 0x158]
cmp eax, 1
jne 0x47e261
mov dword [0x68045c], eax
lea eax, [ebp - 0xd0]
jmp 0x47e1d1
cmp eax, 2
jne 0x47e29b
push 0x59
mov dword [0x68045c], 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x47e284
lea eax, [ebp - 0x40]
jmp 0x47e1d1
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x47e2d1
lea eax, [ebp - 0x14c]
jmp 0x47e1d1
test eax, eax
jne 0x47e2d1
lea eax, [ebp - 0x88]
mov ecx, esi
push eax
call fcn.004600f0
push 0x64bd2c
mov ecx, esi
call fcn.004600f0
lea eax, [ebp - 0x150]
test edi, edi
jne 0x47e2c9
lea eax, [ebp - 0x154]
mov ecx, esi
push eax
call fcn.004600f0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.005c02df
mov esp, ebp
pop ebp
ret