Function at 0x40900c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
push ebx
push esi
push edi
push 0x6f
pop eax
push 0x6c
mov word [ebp - 0x2c], ax
mov esi, ecx
pop eax
push 0x65
pop ecx
push 0x33
pop ebx
push 0x32
pop edi
push 0x2e
movaps xmm0, xmmword [0x433f60]
mov word [ebp - 0x2a], ax
mov word [ebp - 0x1e], ax
mov word [ebp - 0x1c], ax
xor eax, eax
mov dword [ebp - 0x48], edx
pop edx
push 0x64
mov word [ebp - 0x28], cx
pop ecx
push 0x73
mov word [ebp - 0x1a], ax
pop eax
push 0x68
mov word [ebp - 0x44], ax
pop eax
push 0x65
mov word [ebp - 0x42], ax
pop eax
mov word [ebp - 0x40], ax
push 0x6c
pop eax
mov word [ebp - 0x3e], ax
mov word [ebp - 0x3c], ax
mov word [ebp - 0x32], ax
mov word [ebp - 0x30], ax
xor eax, eax
movups xmmword [ebp - 0x98], xmm0
mov word [ebp - 0x20], cx
movaps xmm0, xmmword [0x433f70]
mov word [ebp - 0x34], cx
xor ecx, ecx
mov word [ebp - 0x2e], ax
push 0x65
pop eax
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 2], cl
movaps xmm0, xmmword [str.SHGetSpecialFoldCoCreateInstanceSHCreateItemFrom]
mov byte [ebp - 0x88], cl
mov byte [ebp - 0x51], cl
mov byte [ebp - 0x6d], cl
mov ecx, 0xa6c05a5
mov word [ebp - 0x26], bx
mov word [ebp - 0x24], di
mov word [ebp - 0x22], dx
mov word [ebp - 0x3a], bx
mov word [ebp - 0x38], di
mov word [ebp - 0x36], dx
mov dword [ebp - 0x10], 0x6e496f43
mov dword [ebp - 0xc], 0x61697469
mov word [ebp - 8], 0x696c
mov byte [ebp - 6], 0x7a
mov byte [ebp - 5], al
mov word [ebp - 4], 0x7845
mov dword [ebp - 0x5c], 0x73726150
mov dword [ebp - 0x58], 0x4e676e69
mov word [ebp - 0x54], 0x6d61
mov byte [ebp - 0x52], al
movups xmmword [ebp - 0x84], xmm0
mov byte [ebp - 0x74], al
mov dword [ebp - 0x73], 0x74615072
mov word [ebp - 0x6f], 0x5768
call fcn.0040aaff
mov ebx, eax
mov ecx, 0x7c8fc32d
call fcn.0040aaff
mov edx, 0x6b0b6c41
mov ecx, ebx
mov edi, eax
call fcn.0040abce
mov dword [esi + 4], eax
test eax, eax
jne 0x40914f
xor eax, eax
jmp 0x40924d
mov edx, 0xb36512fe
mov ecx, ebx
call fcn.0040abce
mov dword [esi + 8], eax
test eax, eax
je 0x409148
mov edx, 0xddaa21db
mov ecx, ebx
call fcn.0040abce
mov dword [esi], eax
test eax, eax
je 0x409148
mov edx, 0x1a81e3c8
mov ecx, edi
call fcn.0040abce
mov dword [esi + 0x1c], eax
test eax, eax
je 0x409148
mov edx, 0x93baa38f
mov ecx, edi
call fcn.0040abce
mov dword [esi + 0x20], eax
test eax, eax
je 0x409148
mov edx, 0x2a889dd7
mov ecx, edi
call fcn.0040abce
mov dword [esi + 0xc], eax
test eax, eax
je 0x409148
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x50]
push eax
call dword [esi + 4]
lea eax, [ebp - 0x14]
xor edi, edi
push eax
lea eax, [ebp - 0x50]
push eax
push edi
push edi
call dword [esi]
test eax, eax
js 0x409148
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x50]
push eax
call dword [esi + 4]
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x50]
push eax
push edi
push edi
call dword [esi]
test eax, eax
js 0x409148
lea eax, [ebp - 0x98]
push eax
push dword [ebp - 0x14]
call dword [esi + 0xc]
mov dword [esi + 0x10], eax
test eax, eax
je 0x409148
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
call dword [esi + 0xc]
mov dword [esi + 0x24], eax
test eax, eax
je 0x409148
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x18]
call dword [esi + 0xc]
mov dword [esi + 0x18], eax
test eax, eax
je 0x409148
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x18]
call dword [esi + 0xc]
xor edx, edx
mov dword [esi + 0x14], eax
inc edx
test eax, eax
jne 0x40924b
mov ecx, dword [ebp - 0x48]
mov dword [ecx], edx
mov eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret