Function at 0x476de0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ed861
mov eax, dword fs:[0]
push eax
sub esp, 0x48c
mov eax, dword [0x52610c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x494], edi
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x458], 0x371715f
mov dword [ebp - 0x454], 0x3931303c
mov dword [ebp - 0x450], 0x36713836
mov word [ebp - 0x44c], 0x3631
mov byte [ebp - 0x44a], 0
lea ecx, [ebp - 0x470]
mov dword [ebp - 4], 0
call fcn.00477be0
mov edx, eax
mov byte [ebp - 4], 1
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x457]
xor al, byte [ebp - 0x458]
mov byte [ebp + ecx - 0x449], al
inc ecx
cmp ecx, 0xd
jb 0x476e70
lea eax, [ebp - 0x449]
mov byte [ebp - 0x43c], 0
push eax
push edx
lea eax, [ebp - 0x488]
push eax
call fcn.004078b0
add esp, 0xc
mov eax, dword [ebp - 0x45c]
cmp eax, 0x10
jb 0x476ec6
inc eax
lea ecx, [ebp - 0x470]
push eax
push dword [ebp - 0x470]
call fcn.00409950
mov dword [ebp - 0x45c], 0xf
mov dword [ebp - 0x460], 0
mov byte [ebp - 0x470], 0
push 0x400
mov byte [ebp - 4], 4
lea eax, [ebp - 0x410]
xorps xmm0, xmm0
mov dword [ebp - 0x44f], 0
push 0
push eax
movq qword [ebp - 0x457], xmm0
mov word [ebp - 0x44b], 0
call fcn.004b8fe0
xor bh, bh
mov dword [ebp - 0x424], 0x4043574
mov byte [ebp - 0x489], bh
lea esi, [ebp - 0x488]
mov byte [ebp - 0x41c], bh
add esp, 0xc
cmp dword [ebp - 0x474], 0x10
mov bh, 0x7c
mov byte [ebp - 0x48a], bh
mov al, 0x35
cmovae esi, dword [ebp - 0x488]
mov bh, 0x7d
xor al, byte [ebp - 0x424]
mov cl, 4
mov byte [ebp - 0x48b], bh
mov dl, cl
mov byte [ebp - 0x41b], al
mov bh, 0x75
mov al, byte [ebp - 0x424]
mov ah, 0x1d
xor cl, al
mov byte [ebp - 0x48c], bh
xor dl, al
mov dword [ebp - 0x438], 0x7d7c7013
xor ah, al
mov byte [ebp - 0x41a], cl
mov cl, byte [ebp - 0x438]
mov bh, 0x7a
mov byte [ebp - 0x48d], bh
mov bl, 0x38
xor bl, al
mov byte [ebp - 0x417], ah
mov bh, 0x74
mov dword [ebp - 0x420], 0x71d38
mov byte [ebp - 0x48e], bh
mov ch, 7
mov bh, byte [ebp - 0x489]
xor ch, al
xor bh, al
mov dword [ebp - 0x434], 0x747a75
mov al, byte [ebp - 0x48a]
mov dh, 0x70
xor al, cl
mov byte [ebp - 0x419], dl
mov byte [ebp - 0x42f], al
xor dh, cl
mov al, byte [ebp - 0x48b]
xor al, cl
mov byte [ebp - 0x418], bl
mov byte [ebp - 0x42e], al
mov al, byte [ebp - 0x48c]
xor al, cl
mov byte [ebp - 0x416], ch
mov byte [ebp - 0x42d], al
mov al, byte [ebp - 0x48d]
xor al, cl
mov byte [ebp - 0x415], bh
mov byte [ebp - 0x42c], al
mov al, byte [ebp - 0x48e]
xor al, cl
mov byte [ebp - 0x414], 0
push esi
mov byte [ebp - 0x42b], al
lea eax, [ebp - 0x410]
mov byte [ebp - 0x430], dh
mov byte [ebp - 0x42a], 0
push 0x400
push eax
push 0x507250
lea eax, [ebp - 0x41b]
push eax
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], 0
mov byte [edi], 0
cmp byte [ebp - 0x410], 0
jne 0x477087
xor eax, eax
jmp 0x477099
lea eax, [ebp - 0x410]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x477090
sub eax, edx
push eax
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00409aa0
mov ecx, dword [ebp - 0x474]
cmp ecx, 0x10
jb 0x4770c6
inc ecx
push ecx
push dword [ebp - 0x488]
lea ecx, [ebp - 0x488]
call fcn.00409950
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049fc55
mov esp, ebp
pop ebp
ret