Function at 0x55a2cc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xffffff50
push ebx
push esi
push edi
mov dword [ebp - 0x109c], ecx
mov dword [ebp - 0x1098], edx
mov dword [ebp - 0x1094], eax
mov dword [ebp - 0x10a0], 0xffffffff
xor eax, eax
push ebp
push 0x55a64b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x108f]
xor ecx, ecx
mov edx, 0x108f
call fcn.00403464
mov word [ebp - 0x108f], 0x2c
mov byte [ebp - 0x108c], 0
mov byte [ebp - 0x108b], 0
mov byte [ebp - 0x108a], 0
mov byte [ebp - 0x1089], 0xc
mov byte [ebp - 0x1088], 0x18
mov byte [ebp - 0x1087], 0
mov dword [ebp - 0x1083], 0x200
mov dword [ebp - 0x107f], 2
lea eax, [ebp - 0x1043]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x107b], eax
lea eax, [ebp - 0x1063]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x1077], eax
mov byte [ebp - 0x1073], 0xa1
mov byte [ebp - 0x1072], 0x80
mov byte [ebp - 0x1071], 0
mov byte [ebp - 0x1070], 0
mov byte [ebp - 0x106f], 2
mov byte [ebp - 0x106e], 0
mov byte [ebp - 0x106d], 0
mov byte [ebp - 0x106c], 0
mov byte [ebp - 0x106b], 0
mov byte [ebp - 0x106a], 0
mov byte [ebp - 0x1069], 0
mov byte [ebp - 0x1068], 0
mov byte [ebp - 0x1043], 0x4e
mov byte [ebp - 0x1042], 0x56
mov byte [ebp - 0x1041], 0x4d
mov byte [ebp - 0x1040], 0x45
mov byte [ebp - 0x103b], 2
mov byte [ebp - 0x1039], 0x56
mov byte [ebp - 0x1037], 0xff
mov byte [ebp - 0x1036], 0xff
mov byte [ebp - 0x1035], 0xff
mov byte [ebp - 0x1034], 0xff
mov byte [ebp - 0x1022], 0x40
mov byte [ebp - 0x1021], 0x7a
mov al, byte [ebp - 0x1098]
mov byte [ebp - 0x1013], al
mov byte [ebp - 0x1011], 0x7f
mov eax, dword [ebp - 0x107b]
add eax, dword [ebp - 0x1083]
mov dword [ebp - 0x10a8], eax
push 0
lea eax, [ebp - 0x10a4]
push eax
mov eax, dword [ebp - 0x10a8]
push eax
lea eax, [ebp - 0x108f]
push eax
mov eax, dword [ebp - 0x10a8]
push eax
lea eax, [ebp - 0x108f]
push eax
push 0x4d004
mov eax, dword [ebp - 0x1094]
push eax
call sub.kernel32.dll_DeviceIoControl
test eax, eax
jne 0x55a4a9
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 0x10a0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55a655
mov word [ebp - 0x108f], 0x2c
mov byte [ebp - 0x108c], 0
mov byte [ebp - 0x108b], 0
mov byte [ebp - 0x108a], 0
mov byte [ebp - 0x1089], 0xc
mov byte [ebp - 0x1088], 0x18
mov byte [ebp - 0x1087], 1
mov dword [ebp - 0x1083], 0x200
mov dword [ebp - 0x107f], 2
lea eax, [ebp - 0x1043]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x107b], eax
lea eax, [ebp - 0x1063]
lea edx, [ebp - 0x108f]
sub eax, edx
mov dword [ebp - 0x1077], eax
mov byte [ebp - 0x1073], 0xa1
mov byte [ebp - 0x1072], 0x82
mov byte [ebp - 0x1071], 0
mov byte [ebp - 0x1070], 0
mov byte [ebp - 0x106f], 2
mov byte [ebp - 0x106e], 0
mov byte [ebp - 0x106d], 0
mov byte [ebp - 0x106c], 0
mov byte [ebp - 0x106b], 0
mov byte [ebp - 0x106a], 0
mov byte [ebp - 0x1069], 0
mov byte [ebp - 0x1068], 0
mov eax, dword [ebp - 0x107b]
add eax, dword [ebp - 0x1083]
mov dword [ebp - 0x10a8], eax
push 0
lea eax, [ebp - 0x10a4]
push eax
mov eax, dword [ebp - 0x10a8]
push eax
lea eax, [ebp - 0x108f]
push eax
mov eax, dword [ebp - 0x10a8]
push eax
lea eax, [ebp - 0x108f]
push eax
push 0x4d004
mov eax, dword [ebp - 0x1094]
push eax
call sub.kernel32.dll_DeviceIoControl
test eax, eax
jne 0x55a5d0
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 0x10a0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55a655
xor eax, eax
mov dword [ebp - 0x10ac], eax
xor eax, eax
mov dword [ebp - 0x10b0], eax
mov eax, dword [ebp - 0x10b0]
movzx eax, byte [ebp + eax - 0x1043]
add dword [ebp - 0x10ac], eax
inc dword [ebp - 0x10b0]
cmp dword [ebp - 0x10b0], 0x200
jne 0x55a5e0
cmp dword [ebp - 0x10ac], 0
jne 0x55a623
mov dword [ebp - 0x10a0], 0xffffff9e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55a655
mov edx, dword [ebp - 0x109c]
lea eax, [ebp - 0x1043]
mov ecx, 0x1000
call fcn.00402a80
xor eax, eax
mov dword [ebp - 0x10a0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55a655
mov eax, dword [ebp - 0x10a0]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret