Function at 0x4059e8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff9c8
push ebx
push esi
push edi
mov eax, 0x55fc28
call fcn.0054fc68
mov word [ebp - 0x18c], 0xc
lea edx, [ebp - 0x20]
push edx
call fcn.00406218
pop ecx
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0x18
mov word [ebp - 0x18c], 0x24
mov esi, str.QQ.exeTIM.exeCommon.dll_lu_02X_s_____sp
lea edi, [ebp - 0x1b4]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x18c], 0x24
mov word [ebp - 0x18c], 0x48
push 0x18
lea eax, [ebp - 0x1b4]
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0xe8]
push edx
call fcn.00406630
add esp, 0x10
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0x3c
mov word [ebp - 0x18c], 0x54
add esp, 0xffffffd8
lea ecx, [ebp - 0xe8]
push ecx
lea eax, [esp + 4]
push eax
call fcn.00402620
add esp, 8
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0x60
push dword [ebp + 0xc]
lea edx, [ebp - 0x128]
push edx
mov word [ebp - 0x18c], 0x54
dec dword [ebp - 0x180]
call fcn.00406774
add esp, 0x30
lea ecx, [ebp - 0x128]
push ecx
inc dword [ebp - 0x180]
mov eax, dword [ebp + 0xc]
add eax, 8
push eax
call fcn.00406264
add esp, 8
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0x128]
push edx
call fcn.00404fdc
add esp, 8
mov esi, 0x55f874
lea edi, [ebp - 0x1d0]
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x18c], 0x3c
mov word [ebp - 0x18c], 0x78
push 0x1c
lea eax, [ebp - 0x1d0]
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0x150]
push edx
call fcn.00406630
add esp, 0x10
lea ecx, [ebp - 0x150]
push ecx
inc dword [ebp - 0x180]
lea eax, [ebp - 0xe8]
push eax
call fcn.004063f4
add esp, 8
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0x150]
push edx
call fcn.004025dc
add esp, 8
mov word [ebp - 0x18c], 0x84
add esp, 0xffffffd8
lea ecx, [ebp - 0xe8]
push ecx
lea eax, [esp + 4]
push eax
call fcn.00402620
add esp, 8
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0x90
push dword [ebp + 0xc]
lea edx, [ebp - 0x108]
push edx
mov word [ebp - 0x18c], 0x84
dec dword [ebp - 0x180]
call fcn.00406774
add esp, 0x30
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0x3c
lea ecx, [ebp - 0x108]
push ecx
call fcn.00406408
pop ecx
test al, al
jne 0x405c34
xor eax, eax
mov dword [ebp - 0x1d4], eax
mov word [ebp - 0x18c], 0x3c
jmp 0x405c1a
push dword [ebp - 0x1d4]
lea edx, [ebp - 0x108]
push edx
call fcn.00406420
add esp, 8
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 8
push ecx
call fcn.00406434
add esp, 8
inc dword [ebp - 0x1d4]
push dword [ebp - 0x1d4]
lea eax, [ebp - 0x108]
push eax
call fcn.00406420
add esp, 8
cmp dword [eax], 0
jne 0x405bef
mov edx, dword [ebp + 0xc]
add edx, 8
push edx
call fcn.00406408
pop ecx
test al, al
jne 0x405c57
mov ecx, dword [ebp + 0xc]
add ecx, 8
push ecx
call fcn.0040649c
pop ecx
cmp eax, 1
jae 0x405c63
push 0x7d0
call sub.KERNEL32.DLL_Sleep
jmp 0x405c93
dec dword [ebp - 0x180]
push 2
lea eax, [ebp - 0x108]
push eax
call fcn.00404fdc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0xe8]
push edx
call fcn.004025dc
add esp, 8
jmp 0x405ccf
dec dword [ebp - 0x180]
push 2
lea ecx, [ebp - 0x108]
push ecx
call fcn.00404fdc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea eax, [ebp - 0xe8]
push eax
call fcn.004025dc
add esp, 8
mov word [ebp - 0x18c], 0x24
jmp 0x405a29
mov esi, 0x55f890
lea edi, [ebp - 0x1fc]
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x18c], 0x24
mov word [ebp - 0x18c], 0xb4
push 0x28
lea eax, [ebp - 0x1fc]
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0x48]
push edx
call fcn.00406630
add esp, 0x10
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0xa8
mov ecx, dword [0x55f8b8]
mov dword [ebp - 0x208], ecx
mov ecx, dword [0x55f8bc]
mov dword [ebp - 0x204], ecx
mov ecx, dword [0x55f8c0]
mov dword [ebp - 0x200], ecx
mov word [ebp - 0x18c], 0xcc
push 0xc
lea eax, [ebp - 0x208]
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0x70]
push edx
call fcn.00406630
add esp, 0x10
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0xa8
mov esi, 0x55f8c4
lea edi, [ebp - 0x218]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x18c], 0xe4
push 0x10
lea eax, [ebp - 0x218]
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0x98]
push edx
call fcn.00406630
add esp, 0x10
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0xa8
mov esi, 0x55f8d4
lea edi, [ebp - 0x238]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x18c], 0xfc
push 0x20
lea eax, [ebp - 0x238]
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0xc0]
push edx
call fcn.00406630
add esp, 0x10
inc dword [ebp - 0x180]
mov word [ebp - 0x18c], 0xa8
xor ecx, ecx
mov dword [ebp - 0x23c], ecx
mov word [ebp - 0x18c], 0xa8
jmp 0x406052
push dword [ebp - 0x23c]
mov eax, dword [ebp + 0xc]
add eax, 8
push eax
call fcn.00406420
add esp, 8
mov edx, dword [eax]
mov dword [ebp - 0x240], edx
mov word [ebp - 0x18c], 0xa8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0xffffffff
push dword [ebp - 0x240]
push 0
push 0x1fffff
call sub.KERNEL32.DLL_OpenProcess
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
lea eax, [ebp - 0x48]
push eax
call fcn.004034e0
pop ecx
push eax
push dword [ebp - 0x240]
push dword [ebp + 0xc]
call fcn.004066d8
add esp, 0xc
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
add ecx, 0x28ca90
mov dword [ebp - 0x248], ecx
push dword [ebp - 0x248]
push dword [ebp + 0xc]
call fcn.00406a14
add esp, 8
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], edx
cmp dword [ebp - 0x24c], 0
jne 0x405eb5
cmp dword [ebp - 0x250], 0
je 0x40604c
push dword [ebp - 0x24c]
push dword [ebp - 0x250]
lea edx, [ebp - 0x70]
push edx
call fcn.004034e0
pop ecx
push eax
lea ecx, [ebp - 0x360]
push ecx
call fcn.00552450
add esp, 0x10
mov byte [ebp - 0x355], 0
mov eax, dword [0x55f8f4]
mov dword [ebp - 0x25c], eax
mov eax, dword [0x55f8f8]
mov dword [ebp - 0x258], eax
mov ax, word [0x55f8fc]
mov word [ebp - 0x254], ax
push 0xa
lea edx, [ebp - 0x25c]
push edx
push dword [ebp - 0x240]
push dword [ebp + 0xc]
call fcn.00406a3c
add esp, 0x10
mov dword [ebp - 0x264], eax
add dword [ebp - 0x264], 8
push 0
push 0x70
lea ecx, [ebp - 0x3d0]
push ecx
push dword [ebp - 0x264]
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.KERNEL32.DLL_ReadProcessMemory
mov edx, dword [ebp + 0xc]
push dword [edx]
call sub.KERNEL32.DLL_CloseHandle
xor ecx, ecx
mov dword [ebp - 0x268], ecx
xor eax, eax
mov dword [ebp - 0x26c], eax
mov word [ebp - 0x18c], 0xa8
cmp dword [ebp - 0x26c], 0x70
jae 0x405fc4
mov edx, dword [ebp - 0x26c]
xor ecx, ecx
mov cl, byte [ebp + edx - 0x3d0]
push ecx
lea eax, [ebp - 0x98]
push eax
call fcn.004034e0
pop ecx
push eax
lea edx, [ebp - 0x4d0]
add edx, dword [ebp - 0x268]
push edx
call fcn.00552450
add esp, 0xc
add dword [ebp - 0x268], eax
inc dword [ebp - 0x26c]
cmp dword [ebp - 0x26c], 0x70
jb 0x405f7c
mov byte [ebp - 0x3d1], 0
lea ecx, [ebp - 0x4d0]
push ecx
lea eax, [ebp - 0x360]
push eax
lea edx, [ebp - 0xc0]
push edx
call fcn.004034e0
pop ecx
push eax
lea ecx, [ebp - 0x638]
push ecx
call fcn.00552450
add esp, 0x10
mov byte [ebp - 0x4d1], 0
mov word [ebp - 0x18c], 0x114
lea eax, [ebp - 0x638]
push eax
lea edx, [ebp - 0x178]
push edx
call fcn.004031d0
add esp, 8
inc dword [ebp - 0x180]
lea ecx, [ebp - 0x178]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.004064c4
add esp, 8
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0x178]
push edx
call fcn.004025dc
add esp, 8
inc dword [ebp - 0x23c]
mov ecx, dword [ebp + 0xc]
add ecx, 8
push ecx
call fcn.0040649c
pop ecx
cmp eax, dword [ebp - 0x23c]
ja 0x405e0e
lea eax, [ebp - 0x20]
push eax
call fcn.00403348
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0xc]
add eax, 8
push eax
call fcn.0040649c
pop ecx
cmp ebx, eax
jae 0x406140
push 0x7d0
call sub.KERNEL32.DLL_Sleep
mov word [ebp - 0x18c], 0x120
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004059e8
add esp, 8
mov eax, dword [ebp + 8]
mov word [ebp - 0x18c], 0x12c
push eax
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0xc0]
push edx
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea ecx, [ebp - 0x98]
push ecx
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea eax, [ebp - 0x70]
push eax
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0x48]
push edx
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea ecx, [ebp - 0x20]
push ecx
call fcn.00403240
add esp, 8
pop eax
mov word [ebp - 0x18c], 0xa8
mov edx, dword [ebp - 0x19c]
mov dword fs:[0], edx
jmp 0x40620e
dec dword [ebp - 0x180]
push 2
lea ecx, [ebp - 0xc0]
push ecx
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea eax, [ebp - 0x98]
push eax
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0x70]
push edx
call fcn.004025dc
add esp, 8
dec dword [ebp - 0x180]
push 2
lea ecx, [ebp - 0x48]
push ecx
call fcn.004025dc
add esp, 8
mov word [ebp - 0x18c], 0x24
mov word [ebp - 0x18c], 0x18
jmp 0x4061b8
mov word [ebp - 0x18c], 0x144
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 8]
call fcn.0040652c
add esp, 8
mov eax, dword [ebp + 8]
mov word [ebp - 0x18c], 0x150
push eax
dec dword [ebp - 0x180]
push 2
lea edx, [ebp - 0x20]
push edx
call fcn.00403240
add esp, 8
pop eax
mov word [ebp - 0x18c], 0x144
inc dword [ebp - 0x180]
mov edx, dword [ebp - 0x19c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret