Function at 0x402490
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff0
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push eax
mov eax, 0x29d8
call fcn.0040eec0
mov ecx, 0xb
sub esp, eax
mov eax, dword [esp + eax]
mov dword [ebp - 0x29b4], edx
mov dword [ebp - 0x2996], 0x2f75646f
mov edi, eax
lea eax, [ebp - 0x299a]
mov dword [ebp - 0x299a], 0x686f6876
mov edx, eax
lea eax, [ebp - 0x281c]
mov dword [ebp - 0x2993], 0x6d6d652f
call fcn.004019a0
mov eax, dword [ebp - 0x281c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov ebx, eax
lea ecx, [ebp - 0x281c]
call fcn.0049dd80
test ebx, ebx
je 0x402830
movdqu xmm0, xmmword [0x4bf280]
lea eax, [ebp - 0x298f]
mov ecx, 0xd
movdqu xmm1, xmmword [0x4bf290]
movdqu xmm2, xmmword [0x4bf2a0]
mov edx, eax
lea eax, [ebp - 0x281c]
mov dword [ebp - 0x298b], 0x75646f73
mov dword [ebp - 0x298f], 0x64756f48
movups xmmword [ebp - 0x2962], xmm2
mov dword [ebp - 0x298a], 0x4e75646f
mov dword [ebp - 0x2986], 0x406f6471
mov dword [ebp - 0x2953], 0x646d656f
movups xmmword [ebp - 0x2982], xmm0
movups xmmword [ebp - 0x2972], xmm1
call fcn.004019a0
mov eax, dword [ebp - 0x281c]
mov dword [esp], ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 4], eax
call esi
sub esp, 8
lea ecx, [ebp - 0x281c]
mov dword [ebp - 0x29b0], eax
call fcn.0049dd80
lea eax, [ebp - 0x281c]
mov ecx, 0x10
lea edx, [ebp - 0x2982]
call fcn.004019a0
mov eax, dword [ebp - 0x281c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call esi
sub esp, 8
lea ecx, [ebp - 0x281c]
mov dword [ebp - 0x29b8], eax
call fcn.0049dd80
lea eax, [ebp - 0x281c]
mov ecx, 0x10
lea edx, [ebp - 0x2972]
call fcn.004019a0
mov eax, dword [ebp - 0x281c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call esi
sub esp, 8
lea ecx, [ebp - 0x281c]
mov dword [ebp - 0x29ac], eax
call fcn.0049dd80
lea eax, [ebp - 0x281c]
mov ecx, 0x13
lea edx, [ebp - 0x2962]
call fcn.004019a0
mov eax, dword [ebp - 0x281c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call esi
sub esp, 8
lea ecx, [ebp - 0x281c]
lea esi, [ebp - 0x294f]
mov dword [ebp - 0x29bc], eax
call fcn.0049dd80
mov edx, esi
lea esi, [ebp - 0x281c]
movdqu xmm3, xmmword [0x4bf2b0]
movdqu xmm4, xmmword [0x4bf2c0]
mov eax, esi
mov ecx, 0x3f
movdqu xmm5, xmmword [0x4bf2d0]
movdqu xmm6, xmmword [0x4bf2e0]
movups xmmword [ebp - 0x294f], xmm3
movups xmmword [ebp - 0x292f], xmm5
movups xmmword [ebp - 0x293f], xmm4
movups xmmword [ebp - 0x2920], xmm6
call fcn.004019a0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x281c]
mov dword [esp], eax
mov ebx, dword [ebp - 0x29b0]
call ebx
sub esp, 0x14
mov ebx, eax
mov ecx, esi
call fcn.0049dd80
test ebx, ebx
je 0x402830
xor eax, eax
mov dword [esp + 0x10], 0xa4080000
mov dword [esp + 0x14], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov eax, dword [edi]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov edi, dword [ebp - 0x29b8]
call edi
sub esp, 0x18
mov esi, eax
test eax, eax
je 0x402853
xor eax, eax
lea edi, [ebp - 0x281c]
mov dword [ebp - 0x29a0], eax
xor eax, eax
mov dword [esp + 8], 0x2801
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.msvcrt.dll_memset
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x29b4]
lea ecx, [ebp - 0x2910]
mov dword [esp], eax
call fcn.00491110
push eax
lea ecx, [ebp - 0x28e8]
push eax
call fcn.0042ba80
test al, al
je 0x40283c
xor edi, edi
lea ecx, [ebp - 0x2910]
mov dword [esp + 8], edi
mov dword [esp], edi
mov dword [esp + 4], edi
call fcn.004746b0
mov dword [ebp - 0x29a0], 1
sub esp, 0xc
lea edi, [ebp - 0x29a0]
jmp 0x40281b
lea eax, [ebp - 0x281c]
mov dword [esp + 8], 0x2801
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0x281c]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x2800
mov dword [esp + 4], eax
mov dword [esp], esi
mov eax, dword [ebp - 0x29ac]
call eax
mov eax, dword [ebp - 0x29a0]
sub esp, 0x10
lea ecx, [ebp - 0x2910]
mov dword [esp + 4], eax
lea eax, [ebp - 0x281c]
mov dword [esp], eax
call fcn.00474890
sub esp, 8
mov ecx, dword [ebp - 0x29a0]
test ecx, ecx
jne 0x4027b8
lea ecx, [ebp - 0x2910]
call fcn.00491750
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
lea ecx, [ebp - 0x2910]
call fcn.00491750
mov dword [esp], esi
mov eax, dword [ebp - 0x29bc]
call eax
push edx
mov dword [esp], ebx
mov eax, dword [ebp - 0x29bc]
call eax
push eax
jmp 0x402830