Function at 0x10054b00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x10190dd2
mov eax, dword fs:[0]
push eax
sub esp, 0x804
mov eax, dword [0x101e5aec]
xor eax, esp
mov dword [esp + 0x800], eax
push ebp
push esi
push edi
mov eax, dword [0x101e5aec]
xor eax, esp
push eax
lea eax, [esp + 0x814]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x824]
xor edi, edi
push 0x103
lea eax, [esp + 0x509]
push edi
mov dword [esp + 0x20], edi
push eax
mov dword [esp + 0x28], ebp
mov byte [esp + 0x510], 0
call fcn.1012ea60
add esp, 0xc
push eax
pop eax
cmp dword [0x102ee4bc], edi
jne 0x10054d2a
mov al, 0x6c
mov cl, 0x64
mov dl, 0x74
mov byte [esp + 0x4d4], 0x6e
mov byte [esp + 0x4d5], dl
mov byte [esp + 0x4d6], cl
mov byte [esp + 0x4d7], al
mov byte [esp + 0x4d8], al
mov byte [esp + 0x4d9], 0x2e
mov byte [esp + 0x4da], cl
mov byte [esp + 0x4db], al
mov byte [esp + 0x4dc], al
mov byte [esp + 0x4dd], 0
cmp dword [0x101d0844], 0x309f
mov al, 0x6f
mov cl, 0x72
mov byte [esp + 0x4e3], al
mov byte [esp + 0x4ef], al
mov byte [esp + 0x4f5], al
mov byte [esp + 0x4f9], al
mov al, 0x73
mov byte [esp + 0x4e0], 0x4e
mov byte [esp + 0x4e1], dl
mov byte [esp + 0x4e2], 0x57
mov byte [esp + 0x4e4], 0x77
mov byte [esp + 0x4e5], 0x36
mov byte [esp + 0x4e6], 0x34
mov byte [esp + 0x4e7], 0x51
mov byte [esp + 0x4e8], 0x75
mov byte [esp + 0x4e9], 0x65
mov byte [esp + 0x4ea], cl
mov byte [esp + 0x4eb], 0x79
mov byte [esp + 0x4ec], 0x49
mov byte [esp + 0x4ed], 0x6e
mov byte [esp + 0x4ee], 0x66
mov byte [esp + 0x4f0], cl
mov byte [esp + 0x4f1], 0x6d
mov byte [esp + 0x4f2], 0x61
mov byte [esp + 0x4f3], dl
mov byte [esp + 0x4f4], 0x69
mov byte [esp + 0x4f6], 0x6e
mov byte [esp + 0x4f7], 0x50
mov byte [esp + 0x4f8], cl
mov byte [esp + 0x4fa], 0x63
mov byte [esp + 0x4fb], 0x65
mov byte [esp + 0x4fc], al
mov byte [esp + 0x4fd], al
mov byte [esp + 0x4fe], 0x36
mov byte [esp + 0x4ff], 0x34
mov byte [esp + 0x500], 0
cmp dword [0x101d0830], 0xffffc6e3
lea ecx, [esp + 0x4e0]
push ecx
lea edx, [esp + 0x4d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x102ee4bc], eax
cmp dword [0x101d082c], 0x5215
cmp dword [0x102ee4bc], edi
jne 0x10054d2a
lea eax, [esp + 0x17]
push eax
lea ecx, [esp + 0x508]
push ecx
mov ecx, ebp
call fcn.10004620
jmp 0x10054ecc
mov esi, dword [esp + 0x828]
push esi
call fcn.10052e60
add esp, 4
cmp dword [0x101d0830], 0x391c
mov ecx, eax
or ecx, edx
je 0x10054eb8
mov ebx, ebx
mov dword [esp + 0x10], edi
cmp dword [0x101d0830], 0x391c
lea ecx, [esp + 0x10]
push ecx
push 0x380
lea ecx, [esp + 0x15c]
push ecx
push edx
push eax
push esi
call fcn.10071fc0
add esp, 0x18
cmp dword [0x101d0828], 0xfffffa10
test al, al
je 0x10054eb8
mov al, al
mov ecx, dword [esp + 0x170]
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x170]
push 0x54
lea eax, [esp + 0x28]
push eax
push ecx
push edx
push esi
call fcn.10071fc0
add esp, 0x18
mov dl, dl
test al, al
je 0x10054eb8
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dl, dl
mov esi, esi
push edi
push 0xe0
lea edx, [esp + 0x7c]
push edx
push ecx
push eax
push esi
call fcn.10071fc0
add esp, 0x18
mov edx, edx
test al, al
je 0x10054eb8
push 0x206
lea eax, [esp + 0x60e]
push edi
push eax
mov word [esp + 0x614], di
call fcn.1012ea60
add esp, 0xc
mov ebp, ebp
cmp dword [esp + 0x82c], edi
je 0x10054e4e
movzx edx, word [esp + 0xcc]
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0xdc]
push edx
mov edx, dword [esp + 0xdc]
lea eax, [esp + 0x610]
push eax
push ecx
push edx
push esi
call fcn.10071fc0
add esp, 0x18
cmp dword [0x101d083c], 0x50d
jmp 0x10054e7f
movzx ecx, word [esp + 0xbc]
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0xcc]
push ecx
mov ecx, dword [esp + 0xcc]
lea edx, [esp + 0x610]
push edx
push eax
push ecx
push esi
call fcn.10071fc0
add esp, 0x18
push ecx
pop ecx
test al, al
je 0x10054eb8
cmp dword [0x101d0838], 0x7dd8
push edi
push edi
push 0x104
lea edx, [esp + 0x510]
push edx
push 0xffffffffffffffff
lea eax, [esp + 0x61c]
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp dword [0x101d0844], 0x309f
lea ecx, [esp + 0x17]
push ecx
lea edx, [esp + 0x508]
push edx
mov ecx, ebp
call fcn.10004620
mov dword [esp + 0x81c], edi
mov dword [esp + 0x18], 1
mov eax, ebp
mov ecx, dword [esp + 0x814]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x800]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x810
ret