Function at 0x55b9e4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xffffff50
push ebx
push esi
push edi
mov dword [ebp - 0x1094], ecx
mov dword [ebp - 0x10b0], edx
mov dword [ebp - 0x10ac], eax
mov dword [ebp - 0x1098], 0xffffffff
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x200000
xor eax, eax
push ebp
push 0x55bd9f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x108f]
xor ecx, ecx
mov edx, 0x108f
call fcn.00403464
mov word [ebp - 0x108f], 0x2c
mov byte [ebp - 0x108c], 0
mov byte [ebp - 0x108b], 0
mov byte [ebp - 0x108a], 0
mov byte [ebp - 0x1089], 0xc
mov byte [ebp - 0x1088], 0x18
mov byte [ebp - 0x1087], 0
mov dword [ebp - 0x1083], 0x200
mov dword [ebp - 0x107f], 2
lea eax, [ebp - 0x1043]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x107b], eax
lea eax, [ebp - 0x1063]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x1077], eax
mov byte [ebp - 0x1073], 0xa1
mov byte [ebp - 0x1072], 0x80
mov byte [ebp - 0x1071], 0
mov byte [ebp - 0x1070], 0
mov byte [ebp - 0x106f], 2
mov byte [ebp - 0x106e], 0
mov byte [ebp - 0x106d], 0
mov byte [ebp - 0x106c], 0
mov byte [ebp - 0x106b], 0
mov byte [ebp - 0x106a], 0
mov byte [ebp - 0x1069], 0
mov byte [ebp - 0x1068], 0
mov byte [ebp - 0x1043], 0x4e
mov byte [ebp - 0x1042], 0x56
mov byte [ebp - 0x1041], 0x4d
mov byte [ebp - 0x1040], 0x45
mov al, byte [ebp - 0x1094]
and al, 0xff
mov byte [ebp - 0x103b], al
mov byte [ebp - 0x1039], 0x56
mov al, byte [ebp + 0x24]
and al, 0xff
mov byte [ebp - 0x1037], al
mov eax, dword [ebp + 0x24]
shr eax, 8
and al, 0xff
mov byte [ebp - 0x1036], al
mov eax, dword [ebp + 0x24]
shr eax, 0x10
and al, 0xff
mov byte [ebp - 0x1035], al
mov eax, dword [ebp + 0x24]
shr eax, 0x18
and al, 0xff
mov byte [ebp - 0x1034], al
mov byte [ebp - 0x1022], 0x40
mov byte [ebp - 0x1021], 0x7a
mov al, byte [ebp + 0x28]
and al, 0xff
mov byte [ebp - 0x1013], al
mov eax, dword [ebp + 0x28]
shr eax, 8
and al, 0xff
mov byte [ebp - 0x1012], al
mov eax, dword [ebp + 0x28]
shr eax, 0x10
and al, 0xff
mov byte [ebp - 0x1011], al
mov eax, dword [ebp + 0x28]
shr eax, 0x18
and al, 0xff
mov byte [ebp - 0x1010], al
mov eax, dword [ebp - 0x107b]
add eax, dword [ebp - 0x1083]
mov dword [ebp - 0x10a0], eax
push 0
lea eax, [ebp - 0x109c]
push eax
mov eax, dword [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x108f]
push eax
mov eax, dword [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x108f]
push eax
push 0x4d004
mov eax, dword [ebp + 8]
push eax
call sub.kernel32.dll_DeviceIoControl
test eax, eax
jne 0x55bc09
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 0x1098], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55bda9
mov word [ebp - 0x108f], 0x2c
mov byte [ebp - 0x108c], 0
mov byte [ebp - 0x108b], 0
mov byte [ebp - 0x108a], 0
mov byte [ebp - 0x1089], 0xc
mov byte [ebp - 0x1088], 0x18
mov byte [ebp - 0x1087], 1
mov dword [ebp - 0x1083], 0x200
mov dword [ebp - 0x107f], 2
lea eax, [ebp - 0x1043]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x107b], eax
lea eax, [ebp - 0x1063]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x1077], eax
mov byte [ebp - 0x1073], 0xa1
mov byte [ebp - 0x1072], 0x82
mov byte [ebp - 0x1071], 0
mov byte [ebp - 0x1070], 0
mov byte [ebp - 0x106f], 2
mov byte [ebp - 0x106e], 0
mov byte [ebp - 0x106d], 0
mov byte [ebp - 0x106c], 0
mov byte [ebp - 0x106b], 0
mov byte [ebp - 0x106a], 0
mov byte [ebp - 0x1069], 0
mov byte [ebp - 0x1068], 0
mov eax, dword [ebp - 0x107b]
add eax, dword [ebp - 0x1083]
mov dword [ebp - 0x10a0], eax
push 0
lea eax, [ebp - 0x109c]
push eax
mov eax, dword [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x108f]
push eax
mov eax, dword [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x108f]
push eax
push 0x4d004
mov eax, dword [ebp + 8]
push eax
call sub.kernel32.dll_DeviceIoControl
test eax, eax
jne 0x55bd2a
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 0x1098], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55bda9
xor eax, eax
mov dword [ebp - 0x10a4], eax
xor eax, eax
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0x10a8]
movzx eax, byte [ebp + eax - 0x1043]
add dword [ebp - 0x10a4], eax
inc dword [ebp - 0x10a8]
cmp dword [ebp - 0x10a8], 0x200
jne 0x55bd3a
cmp dword [ebp - 0x10a4], 0
jne 0x55bd73
mov dword [ebp - 0x1098], 0xffffff9e
mov edx, dword [ebp + 0x10]
lea eax, [ebp - 0x1043]
mov ecx, 0x1000
call fcn.00402a80
mov eax, dword [ebp + 0x14]
xor edx, edx
mov dword [eax], edx
xor eax, eax
mov dword [ebp - 0x1098], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55bda9
mov eax, dword [ebp - 0x1098]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24