Function at 0x5387b0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x610086
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x150
push ebx
push ebp
push esi
mov esi, ecx
mov ebx, 0xff
mov al, 0xea
mov cl, 0xc6
mov dl, 0x7e
push edi
mov dword [esp + 0x124], esi
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 0xfc
mov byte [esp + 0x25], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x27], 0xb4
mov byte [esp + 0x28], 0xb4
mov byte [esp + 0x29], 0xb4
mov byte [esp + 0x2a], cl
mov byte [esp + 0x2b], 0xfc
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], bl
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], al
mov byte [esp + 0x34], al
mov byte [esp + 0x35], al
mov byte [esp + 0x36], al
mov byte [esp + 0x37], cl
mov byte [esp + 0x38], 0xb4
mov byte [esp + 0x39], 0x90
mov byte [esp + 0x3a], dl
mov byte [esp + 0x3b], dl
mov byte [esp + 0x3c], cl
mov byte [esp + 0x3d], bl
mov byte [esp + 0x3e], bl
mov byte [esp + 0x3f], bl
mov byte [esp + 0x40], bl
mov byte [esp + 0x41], bl
mov byte [esp + 0x42], al
mov byte [esp + 0x43], 0xfc
mov byte [esp + 0x44], 0xfc
mov byte [esp + 0x45], al
mov byte [esp + 0x46], al
mov byte [esp + 0x47], cl
mov byte [esp + 0x48], 0xb4
mov byte [esp + 0x49], 0x90
mov byte [esp + 0x4a], dl
mov byte [esp + 0x4b], 0x6c
mov byte [esp + 0x4c], 0x5a
mov byte [esp + 0x4d], 0x90
mov byte [esp + 0x4e], bl
mov byte [esp + 0x4f], bl
mov byte [esp + 0x50], bl
mov byte [esp + 0x51], al
mov byte [esp + 0x52], 0xfc
mov byte [esp + 0x53], 0xfc
mov byte [esp + 0x54], 0xfc
mov byte [esp + 0x55], al
mov byte [esp + 0x56], al
mov byte [esp + 0x57], cl
mov byte [esp + 0x58], 0xb4
mov byte [esp + 0x59], 0x90
mov byte [esp + 0x5a], dl
mov byte [esp + 0x5b], 0x6c
mov byte [esp + 0x5c], 0x5a
mov byte [esp + 0x5d], 0x36
mov byte [esp + 0x5e], dl
mov byte [esp + 0x5f], bl
mov byte [esp + 0x60], al
mov byte [esp + 0x61], 0xfc
mov byte [esp + 0x62], 0xfc
mov byte [esp + 0x63], 0xfc
mov byte [esp + 0x64], 0xfc
mov byte [esp + 0x65], al
mov byte [esp + 0x66], al
mov byte [esp + 0x67], cl
mov byte [esp + 0x68], 0xb4
mov byte [esp + 0x69], 0x90
mov byte [esp + 0x6a], dl
mov byte [esp + 0x6b], 0x6c
mov byte [esp + 0x6c], 0x5a
mov byte [esp + 0x6d], 0x36
mov byte [esp + 0x6e], 0x24
mov byte [esp + 0x6f], al
mov byte [esp + 0x70], al
mov byte [esp + 0x71], 0xfc
mov byte [esp + 0x72], 0xfc
mov byte [esp + 0x73], 0xfc
mov byte [esp + 0x74], 0xfc
mov byte [esp + 0x75], al
mov byte [esp + 0x76], al
mov byte [esp + 0x77], cl
mov byte [esp + 0x78], 0xb4
mov byte [esp + 0x79], 0x90
mov byte [esp + 0x7a], dl
mov byte [esp + 0x7b], 0x6c
mov byte [esp + 0x7c], 0x48
mov byte [esp + 0x7d], 0x36
mov byte [esp + 0x7e], 0x24
mov byte [esp + 0x7f], 0x5a
mov byte [esp + 0x80], al
mov byte [esp + 0x81], al
mov byte [esp + 0x82], al
mov byte [esp + 0x83], al
mov byte [esp + 0x84], al
mov byte [esp + 0x85], al
mov byte [esp + 0x86], cl
mov byte [esp + 0x87], 0xb4
mov byte [esp + 0x88], 0x90
mov byte [esp + 0x89], 0x90
mov byte [esp + 0x8a], dl
mov byte [esp + 0x8b], 0x6c
mov byte [esp + 0x8c], 0x48
mov byte [esp + 0x8d], 0x24
mov byte [esp + 0x8e], 0x12
mov byte [esp + 0x8f], 0x24
mov byte [esp + 0x90], cl
mov byte [esp + 0x91], al
mov byte [esp + 0x92], al
mov byte [esp + 0x93], al
mov byte [esp + 0x94], cl
mov byte [esp + 0x95], cl
mov byte [esp + 0x96], cl
mov byte [esp + 0x97], 0xb4
mov byte [esp + 0x98], 0x90
mov byte [esp + 0x99], dl
mov byte [esp + 0x9a], dl
mov byte [esp + 0x9b], 0x48
mov byte [esp + 0x9c], 0x36
mov byte [esp + 0x9d], 0x24
mov byte [esp + 0x9e], 0x12
mov byte [esp + 0x9f], 0x12
mov byte [esp + 0xa0], cl
mov byte [esp + 0xa1], cl
mov byte [esp + 0xa2], cl
mov byte [esp + 0xa3], cl
mov byte [esp + 0xa4], cl
mov byte [esp + 0xa5], 0xb4
mov byte [esp + 0xa6], 0xb4
mov byte [esp + 0xa7], 0x90
mov byte [esp + 0xa8], dl
mov byte [esp + 0xa9], dl
mov byte [esp + 0xaa], 0x6c
mov byte [esp + 0xab], 0x48
mov byte [esp + 0xac], 0x36
mov byte [esp + 0xad], 0x12
mov byte [esp + 0xae], 0x12
mov byte [esp + 0xaf], 0
mov byte [esp + 0xb0], cl
mov byte [esp + 0xb1], 0xb4
mov byte [esp + 0xb2], 0xb4
mov byte [esp + 0xb3], 0xb4
mov byte [esp + 0xb4], 0xb4
mov byte [esp + 0xb5], 0xb4
mov byte [esp + 0xb6], 0x90
mov byte [esp + 0xb7], dl
mov byte [esp + 0xb8], dl
mov byte [esp + 0xb9], 0x6c
mov byte [esp + 0xba], 0x5a
mov byte [esp + 0xbb], 0x36
mov byte [esp + 0xbc], 0x24
mov byte [esp + 0xbd], 0x12
mov byte [esp + 0xbe], 0
mov byte [esp + 0xbf], 0
mov byte [esp + 0xc0], cl
mov byte [esp + 0xc1], 0x90
mov byte [esp + 0xc2], 0x90
mov byte [esp + 0xc3], 0x90
mov byte [esp + 0xc4], 0x90
mov byte [esp + 0xc5], 0x90
mov byte [esp + 0xc6], dl
mov byte [esp + 0xc7], dl
mov byte [esp + 0xc8], 0x6c
mov byte [esp + 0xc9], 0x6c
mov byte [esp + 0xca], 0x48
mov byte [esp + 0xcb], 0x36
mov byte [esp + 0xcc], 0x24
mov byte [esp + 0xcd], 0x12
mov byte [esp + 0xce], 0
mov byte [esp + 0xcf], 0x36
mov byte [esp + 0xd0], 0xfc
mov byte [esp + 0xd1], 0x90
mov byte [esp + 0xd2], dl
mov byte [esp + 0xd3], dl
mov byte [esp + 0xd4], dl
mov byte [esp + 0xd5], dl
mov byte [esp + 0xd6], 0x6c
mov byte [esp + 0xd7], 0x6c
mov byte [esp + 0xd8], 0x5a
mov byte [esp + 0xd9], 0x5a
mov byte [esp + 0xda], 0x36
mov byte [esp + 0xdb], 0x24
mov byte [esp + 0xdc], 0x12
mov byte [esp + 0xdd], 0
mov byte [esp + 0xde], 0
mov byte [esp + 0xdf], 0xb4
mov byte [esp + 0xe0], bl
mov byte [esp + 0xe1], cl
mov byte [esp + 0xe2], 0x6c
mov byte [esp + 0xe3], 0x6c
mov byte [esp + 0xe4], 0x6c
mov byte [esp + 0xe5], 0x6c
mov byte [esp + 0xe6], 0x5a
mov byte [esp + 0xe7], 0x5a
mov byte [esp + 0xe8], 0x5a
mov byte [esp + 0xe9], 0x48
mov byte [esp + 0xea], 0x36
mov byte [esp + 0xeb], 0x24
mov byte [esp + 0xec], 0x12
mov byte [esp + 0xed], 0
mov byte [esp + 0xee], 0x48
mov byte [esp + 0xef], bl
mov byte [esp + 0xf0], bl
mov byte [esp + 0xf1], bl
mov byte [esp + 0xf2], 0xb4
mov byte [esp + 0xf3], 0x6c
mov byte [esp + 0xf4], 0x5a
mov byte [esp + 0xf5], 0x5a
mov byte [esp + 0xf6], 0x5a
mov byte [esp + 0xf7], 0x48
mov byte [esp + 0xf8], 0x48
mov byte [esp + 0xf9], 0x36
mov byte [esp + 0xfa], 0x24
mov byte [esp + 0xfb], 0x12
mov byte [esp + 0xfc], 0
mov byte [esp + 0xfd], 0x36
mov byte [esp + 0xfe], bl
mov byte [esp + 0xff], bl
mov byte [esp + 0x100], bl
mov byte [esp + 0x101], bl
mov byte [esp + 0x102], bl
mov byte [esp + 0x103], cl
mov byte [esp + 0x104], 0x5a
mov byte [esp + 0x105], 0x48
mov byte [esp + 0x106], 0x48
mov byte [esp + 0x107], 0x48
mov byte [esp + 0x108], 0x36
lea ecx, [esi + 0x584]
mov byte [esp + 0x109], 0x24
mov byte [esp + 0x10a], 0x24
mov byte [esp + 0x10b], 0x12
mov byte [esp + 0x10c], 0x6c
mov byte [esp + 0x10d], bl
mov byte [esp + 0x10e], bl
mov byte [esp + 0x10f], bl
mov byte [esp + 0x110], bl
mov byte [esp + 0x111], bl
mov byte [esp + 0x112], bl
mov byte [esp + 0x113], bl
mov byte [esp + 0x114], 0xfc
mov byte [esp + 0x115], 0xb4
mov byte [esp + 0x116], 0x6c
mov byte [esp + 0x117], 0x48
mov byte [esp + 0x118], 0x36
mov byte [esp + 0x119], 0x5a
mov byte [esp + 0x11a], dl
mov byte [esp + 0x11b], al
mov byte [esp + 0x11c], bl
mov byte [esp + 0x11d], bl
mov byte [esp + 0x11e], bl
mov byte [esp + 0x11f], bl
call fcn.005dd15e
mov eax, dword [esi + 0x4dc]
cmp eax, 0xffffffff
jne 0x538e70
mov eax, dword [esi + 0x4d8]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x4e8]
cmp eax, 0xffffffff
jne 0x538e8b
mov ecx, dword [esi + 0x4e4]
mov dword [esp + 0x14], ecx
jmp 0x538e8f
mov dword [esp + 0x14], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.005dfba6
push eax
lea ecx, [esp + 0x150]
call fcn.005e7b09
xor esi, esi
lea ecx, [esp + 0x13c]
mov dword [esp + 0x168], esi
call fcn.005e70a8
mov ebp, dword [esp + 0x150]
lea eax, [esp + 0x14c]
neg eax
sbb eax, eax
mov byte [esp + 0x168], 1
and eax, ebp
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x140]
call fcn.005e715f
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], vtable.CBitmap.0
mov edx, dword [esp + 0x150]
push 0x10
push 0x10
push edx
mov byte [esp + 0x174], 2
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x1c]
call fcn.005e7cfd
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x18]
neg eax
sbb eax, eax
and eax, ecx
push eax
mov eax, dword [esp + 0x144]
push eax
call fcn.005e72a0
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x10]
mov ebp, ecx
mov dword [esp + 0x120], esi
and ebp, ebx
mov esi, eax
mov edx, ebp
and esi, ebx
mov dword [esp + 0x14], ebp
sub edx, esi
mov dword [esp + 0x134], edx
xor edx, edx
mov dl, ch
mov edi, edx
xor edx, edx
and edi, ebx
mov dl, ah
shr ecx, 0x10
shr eax, 0x10
and edx, ebx
mov esi, edi
and ecx, ebx
and eax, ebx
sub esi, edx
mov dword [esp + 0x130], ecx
sub ecx, eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x128], ecx
jmp 0x538fa7
mov edi, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x120]
xor eax, eax
mov al, byte [esp + ecx + 0x20]
mov ecx, dword [esp + 0x134]
mov esi, eax
mov eax, 0x80808081
imul ecx, esi
imul ecx
add edx, ecx
mov ecx, dword [esp + 0x12c]
imul ecx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x80808081
sub ebp, edx
imul ecx
add edx, ecx
mov eax, 0x80808081
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, edi
mov edi, dword [esp + 0x128]
sub ecx, edx
imul edi, esi
imul edi
add edx, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [esp + 0x130]
sub eax, edx
cmp esi, ebx
jne 0x539027
mov eax, 0xff00
jmp 0x539036
xor edx, edx
and ebp, ebx
mov dh, al
mov dl, cl
shl edx, 8
or edx, ebp
mov eax, edx
mov esi, dword [esp + 0x120]
push eax
mov eax, esi
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x53904c
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, esi
cdq
mov ecx, dword [esp + 0x148]
and edx, 0xf
add eax, edx
sar eax, 4
push eax
push ecx
call dword [sym.imp.GDI32.dll_SetPixel]
inc esi
cmp esi, 0x100
mov dword [esp + 0x120], esi
jl 0x538f9f
mov eax, dword [esp + 0x138]
test eax, eax
je 0x539089
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x140]
push eax
push edx
call fcn.005e72a0
mov eax, dword [esp + 0x124]
push 0
push 1
push 0x19
push 0x10
push 0x10
lea ecx, [eax + 0x584]
call fcn.005dd1a7
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x124]
lea eax, [esp + 0x18]
push 0xff00
mov edx, dword [ecx + 0x588]
neg eax
sbb eax, eax
and eax, esi
push eax
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
mov dword [esp + 0x18], vtable.CGdiObject.0
lea ecx, [esp + 0x18]
mov byte [esp + 0x168], 3
call fcn.005e7d54
lea ecx, [esp + 0x13c]
mov byte [esp + 0x168], 0
call fcn.005e71dd
lea ecx, [esp + 0x14c]
mov dword [esp + 0x168], 0xffffffff
call fcn.005e7b7b
mov ecx, dword [esp + 0x160]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x15c
ret