Function at 0x5129c0
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5177d0
mov eax, dword fs:[0]
push eax
mov eax, 0x11d8
call fcn.004ab910
mov eax, dword [0x56bbe0]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x11e0], ecx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x18], 0xffffffff
mov eax, dword [ebp - 0x11e0]
cmp dword [eax + 0x4c0], 0
je 0x512a1a
mov eax, dword [ebp - 0x18]
jmp 0x513114
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
push ecx
call fcn.00405b41
mov ecx, eax
call fcn.00404bdd
test eax, eax
je 0x5130fd
push 1
mov ecx, dword [ebp - 0x11e0]
call fcn.0050e720
mov byte [ebp - 0x3c], 0x31
mov byte [ebp - 0x3b], 0x62
mov byte [ebp - 0x3a], 0x33
mov byte [ebp - 0x39], 0x30
mov byte [ebp - 0x38], 0x34
mov byte [ebp - 0x37], 0x63
mov byte [ebp - 0x36], 0x37
mov byte [ebp - 0x35], 0x61
mov byte [ebp - 0x34], 0x32
mov byte [ebp - 0x33], 0x64
mov byte [ebp - 0x32], 0x30
mov byte [ebp - 0x31], 0x30
mov byte [ebp - 0x30], 0x34
mov byte [ebp - 0x2f], 0x37
mov byte [ebp - 0x2e], 0x31
mov byte [ebp - 0x2d], 0x30
mov byte [ebp - 0x2c], 0
mov edx, dword [ebp - 0x11e0]
mov eax, dword [edx + 0x4cc]
mov dword [ebp - 0x4c4], eax
lea ecx, [ebp - 0x4bc]
call fcn.004ed820
mov dword [ebp - 4], 0
push 0x10
push 0x10
mov ecx, dword [0x56d1ac]
push ecx
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x4bc]
call fcn.004ed120
push 0
mov eax, dword [ebp - 0x4c4]
push eax
mov ecx, dword [ebp - 0x11e0]
mov edx, dword [ecx + 0x4d0]
push edx
mov eax, dword [ebp - 0x11e0]
mov ecx, dword [eax + 0x4d0]
push ecx
lea ecx, [ebp - 0x4bc]
call fcn.004edbd0
push 0x540d40
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
je 0x5130dd
push 0x540d58
mov edx, dword [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4e4], eax
push 0x540d68
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4d4], eax
push 0x540d7c
mov ecx, dword [ebp - 0x4c0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4dc], eax
push 0x540d90
mov edx, dword [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4d0], eax
push 0x540da4
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4cc], eax
push 0x540db8
mov ecx, dword [ebp - 0x4c0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4e0], eax
push str.InternetSetOptionA
mov edx, dword [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4d8], eax
push str.InternetQueryOptionA
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4e4], 0
je 0x5130d0
cmp dword [ebp - 0x4cc], 0
je 0x5130d0
cmp dword [ebp - 0x4d4], 0
je 0x5130d0
cmp dword [ebp - 0x4dc], 0
je 0x5130d0
cmp dword [ebp - 0x4d0], 0
je 0x5130d0
cmp dword [ebp - 0x4e0], 0
je 0x5130d0
cmp dword [ebp - 0x4d8], 0
je 0x5130d0
cmp dword [ebp - 0x4c8], 0
je 0x5130d0
push 0
push 0
push 0
push 0
push 0x540df8
call dword [ebp - 0x4e4]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
je 0x5130c7
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f0], 4
lea ecx, [ebp - 0x4f0]
push ecx
lea edx, [ebp - 0x4f8]
push edx
push 5
mov eax, dword [ebp - 0x4e8]
push eax
call dword [ebp - 0x4c8]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x4f8], 0xea60
mov ecx, dword [ebp - 0x4f0]
push ecx
lea edx, [ebp - 0x4f8]
push edx
push 5
mov eax, dword [ebp - 0x4e8]
push eax
call dword [ebp - 0x4d8]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x4f4], 1
mov ecx, dword [ebp - 0x4f4]
push ecx
push 0
push 3
push 0x540e00
push 0x540e08
push 0x50
push 0x540e10
mov edx, dword [ebp - 0x4e8]
push edx
call dword [ebp - 0x4dc]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0
je 0x5130ac
mov eax, dword [ebp - 0x4f4]
push eax
push SysReAllocString
push 0
push 0
push 0
push str.index.php
push 0x540e30
mov ecx, dword [ebp - 0x4ec]
push ecx
call dword [ebp - 0x4d4]
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0
je 0x513091
push 0x1000
call fcn.00498aad
add esp, 4
mov dword [ebp - 0x11d8], eax
mov edx, dword [ebp - 0x11d8]
mov dword [ebp - 0x708], edx
push 0
push 0
push 0x100
lea eax, [ebp - 0x704]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x600], eax
push 0
push 0
push 0x100
lea edx, [ebp - 0x5fc]
push edx
push 0xffffffffffffffff
mov eax, dword [ebp + 0xc]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x604], eax
lea ecx, [ebp - 0x5fc]
push ecx
lea edx, [ebp - 0x704]
push edx
push str.user_name_suser_email_sraw_cvf
push 0x1000
mov eax, dword [ebp - 0x708]
push eax
call fcn.004aa595
add esp, 0x14
mov dword [ebp - 0x70c], 0
jmp 0x512df5
mov ecx, dword [ebp - 0x70c]
add ecx, 1
mov dword [ebp - 0x70c], ecx
mov edx, dword [ebp - 0x70c]
cmp edx, dword [ebp - 0x4c4]
jge 0x512e4d
mov eax, dword [ebp - 0x11e0]
mov ecx, dword [eax + 0x4d0]
mov edx, dword [ebp - 0x70c]
movzx eax, byte [ecx + edx]
push eax
push 0x540e5c
push 8
lea ecx, [ebp - 0x714]
push ecx
call fcn.004aa595
add esp, 0x10
lea edx, [ebp - 0x714]
push edx
push 0x1000
mov eax, dword [ebp - 0x708]
push eax
call fcn.004aa5b3
add esp, 0xc
jmp 0x512de6
mov dword [ebp - 0x70c], 0
jmp 0x512e68
mov ecx, dword [ebp - 0x70c]
add ecx, 1
mov dword [ebp - 0x70c], ecx
cmp dword [ebp - 0x70c], 4
jge 0x512eb6
mov edx, dword [ebp - 0x70c]
mov eax, dword [0x57705c]
mov ecx, dword [eax + edx*4]
add ecx, 5
push ecx
push str._02d
push 8
lea edx, [ebp - 0x714]
push edx
call fcn.004aa595
add esp, 0x10
lea eax, [ebp - 0x714]
push eax
push 0x1000
mov ecx, dword [ebp - 0x708]
push ecx
call fcn.004aa5b3
add esp, 0xc
jmp 0x512e59
mov edx, dword [ebp - 0x708]
push edx
call fcn.004a9fb0
add esp, 4
mov dword [ebp - 0x4c4], eax
xor eax, eax
cmp dword [ebp + 0x10], 1
sete al
push eax
push str.publish_dsendok
push 0x40
lea ecx, [ebp - 0x754]
push ecx
call fcn.004aa595
add esp, 0x10
lea edx, [ebp - 0x754]
push edx
push 0x1000
mov eax, dword [ebp - 0x708]
push eax
call fcn.004aa5b3
add esp, 0xc
mov ecx, dword [ebp - 0x708]
push ecx
call fcn.004a9fb0
add esp, 4
mov dword [ebp - 0x4c4], eax
mov edx, dword [ebp - 0x708]
push edx
call fcn.004a9fb0
add esp, 4
push eax
mov eax, dword [ebp - 0x708]
push eax
push 0xffffffffffffffff
push 0x540e80
mov ecx, dword [ebp - 0x4fc]
push ecx
call dword [ebp - 0x4d0]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x51305b
push 0x800
push 0
lea edx, [ebp - 0x1164]
push edx
call fcn.004aa1b0
add esp, 0xc
mov dword [ebp - 0x758], 0
lea eax, [ebp - 0x758]
push eax
push 0x800
lea ecx, [ebp - 0x1164]
push ecx
mov edx, dword [ebp - 0x4fc]
push edx
call dword [ebp - 0x4e0]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x513059
cmp dword [ebp - 0x758], 0
jbe 0x513059
mov eax, dword [ebp - 0x758]
mov byte [ebp + eax - 0x1164], 0
mov dword [ebp - 0x18], 0x63
lea ecx, [ebp - 0x960]
push ecx
lea edx, [ebp - 0x18]
push edx
push str._d__d
lea eax, [ebp - 0x1164]
push eax
call fcn.004aa691
add esp, 0x10
mov dword [ebp - 0x1168], eax
cmp dword [ebp - 0x1168], 0
je 0x513059
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x11e4], ecx
cmp dword [ebp - 0x11e4], 0
je 0x513004
jmp 0x513059
mov edx, dword [ebp - 0x960]
mov dword [0x57603c], edx
mov eax, dword [0x57603c]
push eax
push str.http:__valid.canardpc.com__d
push 0x100
lea ecx, [ebp - 0x95c]
push ecx
call fcn.00404c6d
add esp, 0x10
lea ecx, [ebp - 0x11d4]
call fcn.004fee30
push 5
lea edx, [ebp - 0x95c]
push edx
lea ecx, [ebp - 0x11d4]
call fcn.004fe700
lea ecx, [ebp - 0x11d4]
call fcn.004fed90
jmp 0x513064
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x11dc], eax
mov ecx, dword [ebp - 0x11dc]
push ecx
call fcn.00498aa2
add esp, 4
mov edx, dword [ebp - 0x4fc]
push edx
call dword [ebp - 0x4cc]
mov dword [ebp - 0x40], eax
jmp 0x51309a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4ec]
push eax
call dword [ebp - 0x4cc]
mov dword [ebp - 0x40], eax
jmp 0x5130b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x4e8]
push ecx
call dword [ebp - 0x4cc]
mov dword [ebp - 0x40], eax
jmp 0x5130d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x4c0]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.00405b41
mov ecx, eax
call fcn.00404748
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4bc]
call fcn.004ed800
jmp 0x513104
mov dword [ebp - 0x18], 0xfffffffe
cmp dword [ebp - 0x18], 0xffffffff
je 0x513111
mov eax, dword [ebp - 0x18]
jmp 0x513114
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004a9399
mov esp, ebp
pop ebp
ret 0xc