Function at 0x54f630
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x634aa7
mov eax, dword fs:[0]
push eax
mov eax, 0xd34c
call fcn.005b5230
mov eax, dword [0x6b278c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd304], ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00412530
mov ecx, eax
call fcn.0040b570
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd1bc]
push ecx
call fcn.00412530
mov ecx, eax
call fcn.0040c560
mov byte [ebp - 4], 1
push 0x656cc4
lea edx, [ebp - 0x2c]
push edx
call fcn.00412550
add esp, 8
movzx eax, al
test eax, eax
je 0x54f6b8
push str.empty
lea ecx, [ebp - 0x2c]
call fcn.0040e570
mov byte [ebp - 0xd064], 0
push 0x103
push 0
lea ecx, [ebp - 0xd063]
push ecx
call fcn.005b4de0
add esp, 0xc
push 0
call fcn.0054fed0
add esp, 4
push edx
push eax
push 0x656cd4
lea edx, [ebp - 0xd064]
push edx
call fcn.005b763d
add esp, 0x10
push str.EWrcgpvpcfgvnkdZsN6miQGlPGNndx16T
lea ecx, [ebp - 0x50]
call fcn.0040e3a0
mov byte [ebp - 4], 2
push 0x20
push 8
call fcn.004344d0
add esp, 8
push eax
lea eax, [ebp - 0xd1fc]
push eax
call fcn.0042fe90
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd1fc]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.0043a030
add esp, 8
mov byte [ebp - 4], 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd208], esp
lea eax, [ebp - 0x70]
push eax
call fcn.00410c40
mov dword [ebp - 0xd308], eax
mov ecx, dword [ebp - 0xd308]
mov dword [ebp - 0xd30c], ecx
mov byte [ebp - 4], 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd20c], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00410c40
mov dword [ebp - 0xd310], eax
mov eax, dword [ebp - 0xd310]
mov dword [ebp - 0xd314], eax
mov byte [ebp - 4], 6
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd210], esp
lea edx, [ebp - 0xd064]
push edx
call fcn.0040e3a0
mov dword [ebp - 0xd318], eax
lea eax, [ebp - 0xd1a0]
push eax
mov byte [ebp - 4], 4
call fcn.00430120
add esp, 0x58
mov dword [ebp - 0xd31c], eax
mov byte [ebp - 4], 7
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd214], esp
lea edx, [ebp - 0xd1a0]
push edx
call fcn.00410c40
mov dword [ebp - 0xd320], eax
lea eax, [ebp - 0xd230]
push eax
call fcn.0042fff0
add esp, 0x20
mov dword [ebp - 0xd324], eax
mov ecx, dword [ebp - 0xd324]
mov dword [ebp - 0xd328], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0xd328]
push edx
lea ecx, [ebp - 0xd1a0]
call fcn.0040e400
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd230]
call fcn.0040e3e0
mov byte [ebp - 0xd184], 0
push 0x103
push 0
lea eax, [ebp - 0xd183]
push eax
call fcn.005b4de0
add esp, 0xc
lea ecx, [ebp - 0xd1bc]
call fcn.0040e460
push eax
push str._uid_s
lea ecx, [ebp - 0xd184]
push ecx
call fcn.005b763d
add esp, 0xc
lea edx, [ebp - 0xd184]
push edx
lea ecx, [ebp - 0xd24c]
call fcn.0040e3a0
mov byte [ebp - 4], 9
lea eax, [ebp - 0xd24c]
push eax
lea ecx, [ebp - 0xd268]
push ecx
call fcn.00439f10
add esp, 8
mov dword [ebp - 0xd32c], eax
mov edx, dword [ebp - 0xd32c]
mov dword [ebp - 0xd330], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0xd330]
push eax
mov ecx, dword [ebp - 0xd304]
add ecx, 0x400
call fcn.0040e550
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd268]
call fcn.0040e530
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd24c]
call fcn.0040e3e0
mov ecx, dword [ebp - 0xd304]
add ecx, 0x93c
push ecx
lea edx, [ebp - 0xd1dc]
push edx
call fcn.0043a030
add esp, 8
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0xd184]
push eax
lea ecx, [ebp - 0xd1dc]
call fcn.0040e440
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd26c], esp
lea edx, [ebp - 0xd1dc]
push edx
call fcn.00410c40
mov dword [ebp - 0xd334], eax
lea eax, [ebp - 0xd288]
push eax
call fcn.00430890
add esp, 0x20
mov dword [ebp - 0xd338], eax
mov ecx, dword [ebp - 0xd338]
mov dword [ebp - 0xd33c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xd33c]
push edx
lea eax, [ebp - 0xd2a4]
push eax
call fcn.00439f10
add esp, 8
mov dword [ebp - 0xd340], eax
mov ecx, dword [ebp - 0xd340]
mov dword [ebp - 0xd344], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0xd344]
push edx
mov ecx, dword [ebp - 0xd304]
add ecx, 0x3e4
call fcn.0040e550
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd2a4]
call fcn.0040e530
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd288]
call fcn.0040e3e0
lea ecx, [ebp - 0xd1bc]
call fcn.0040e460
push eax
push str._u_s
lea eax, [ebp - 0xd184]
push eax
call fcn.005b763d
add esp, 0xc
lea ecx, [ebp - 0xd184]
push ecx
lea ecx, [ebp - 0xd2c0]
call fcn.0040e3a0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0xd2c0]
push edx
lea eax, [ebp - 0xd2dc]
push eax
call fcn.00439f10
add esp, 8
mov dword [ebp - 0xd348], eax
mov ecx, dword [ebp - 0xd348]
mov dword [ebp - 0xd34c], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0xd34c]
push edx
mov ecx, dword [ebp - 0xd304]
add ecx, 0x400
call fcn.0040e550
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xd2dc]
call fcn.0040e530
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd2c0]
call fcn.0040e3e0
lea ecx, [ebp - 0xcf5c]
call fcn.00560460
mov byte [ebp - 4], 0x10
push 0
lea ecx, [ebp - 0xd1dc]
call fcn.0040e460
push eax
push 0xffffffffffffffff
push 1
push 0
push 0
lea ecx, [ebp - 0xcf5c]
call fcn.00560480
mov dword [ebp - 0xd1c0], eax
cmp dword [ebp - 0xd1c0], 0
jne 0x54fb1b
mov dword [ebp - 0xd2e0], 0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xcf5c]
call fcn.00560470
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd1dc]
call fcn.0040e3e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd1a0]
call fcn.0040e3e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.0040e3e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd1fc]
call fcn.0040e530
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0040e3e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd1bc]
call fcn.0040e3e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0040e530
mov eax, dword [ebp - 0xd2e0]
jmp 0x54feb2
mov dword [ebp - 0x74], 0xb4
mov eax, dword [ebp - 0xcf4c]
add eax, 8
mov dword [ebp - 0x54], eax
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0xd078], eax
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0xd078]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0xd078]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xff0062
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x54]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xd078]
push edx
call dword [sym.imp.GDI32.dll_PatBlt]
mov dword [ebp - 0xd200], 0
jmp 0x54fb9e
mov eax, dword [ebp - 0xd200]
add eax, 1
mov dword [ebp - 0xd200], eax
mov ecx, dword [ebp - 0xd200]
cmp ecx, dword [ebp - 0xcf4c]
jge 0x54fc20
mov dword [ebp - 0xd204], 0
jmp 0x54fbc7
mov edx, dword [ebp - 0xd204]
add edx, 1
mov dword [ebp - 0xd204], edx
mov eax, dword [ebp - 0xd204]
cmp eax, dword [ebp - 0xcf4c]
jge 0x54fc1b
mov ecx, dword [ebp - 0xd200]
imul ecx, ecx, 0xb1
lea edx, [ebp + ecx - 0xcf48]
mov eax, dword [ebp - 0xd204]
movzx ecx, byte [edx + eax]
test ecx, ecx
je 0x54fc19
push 0
mov edx, dword [ebp - 0xd204]
add edx, 4
push edx
mov eax, dword [ebp - 0xd200]
add eax, 4
push eax
mov ecx, dword [ebp - 0xd078]
push ecx
call dword [sym.imp.GDI32.dll_SetPixel]
jmp 0x54fbb8
jmp 0x54fb8f
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x74]
push edx
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x78]
push edx
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0xd074], eax
push 0xcc0020
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x54]
push edx
push 0
push 0
mov eax, dword [ebp - 0xd078]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x74]
push edx
push 0
push 0
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
mov ecx, dword [ebp - 0xd074]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x10
call fcn.00532d60
add esp, 4
mov dword [ebp - 0xd2e8], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0xd2e8], 0
je 0x54fcd0
push 0x26200a
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
mov ecx, dword [ebp - 0xd2e8]
call fcn.00533230
mov dword [ebp - 0xd350], eax
jmp 0x54fcda
mov dword [ebp - 0xd350], 0
mov edx, dword [ebp - 0xd350]
mov dword [ebp - 0xd2e4], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0xd2e4]
mov dword [ebp - 0xd1e0], eax
mov ecx, dword [ebp - 0xd1e0]
push ecx
lea ecx, [ebp - 0xd070]
call fcn.00533010
mov byte [ebp - 4], 0x12
push 0
mov edx, dword [ebp - 0x78]
push edx
call fcn.0054ff90
add esp, 8
mov dword [ebp - 0xd068], eax
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xd068]
push edx
lea ecx, [ebp - 0xd070]
call fcn.00533410
push 0
lea ecx, [ebp - 0xd2ec]
call sym.demo.exe_public:_void___thiscall_DuiLib::STRINGorID::constructor_wchar_t_const__
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xd2ec]
push ecx
mov ecx, dword [ebp - 0xd1e0]
call fcn.00532c80
mov edx, dword [ebp - 0xd078]
push edx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [ebp - 0x34]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0xd1e0]
mov dword [ebp - 0xd2f4], eax
mov ecx, dword [ebp - 0xd2f4]
mov dword [ebp - 0xd2f0], ecx
cmp dword [ebp - 0xd2f0], 0
je 0x54fdc9
push 1
mov edx, dword [ebp - 0xd2f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xd2f0]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xd354], eax
jmp 0x54fdd3
mov dword [ebp - 0xd354], 0
mov eax, dword [ebp - 0xd068]
mov dword [ebp - 0xd2fc], eax
mov ecx, dword [ebp - 0xd2fc]
mov dword [ebp - 0xd2f8], ecx
cmp dword [ebp - 0xd2f8], 0
je 0x54fe10
push 1
mov edx, dword [ebp - 0xd2f8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xd2f8]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xd358], eax
jmp 0x54fe1a
mov dword [ebp - 0xd358], 0
mov eax, dword [ebp + 8]
xor ecx, ecx
cmp dword [eax], 0
setne cl
mov dword [ebp - 0xd300], ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xd070]
call fcn.00533060
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xcf5c]
call fcn.00560470
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd1dc]
call fcn.0040e3e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd1a0]
call fcn.0040e3e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.0040e3e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd1fc]
call fcn.0040e530
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0040e3e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd1bc]
call fcn.0040e3e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0040e530
mov eax, dword [ebp - 0xd300]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b4b30
mov esp, ebp
pop ebp
ret 4