Function at 0x588590
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x70f66f
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push esi
push edi
mov eax, dword [0x7e6410]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
lea ecx, [edi + 0x60]
call fcn.00429050
lea ecx, [edi + 0x6c]
mov dword [ebp - 4], 0
call fcn.00429050
lea ecx, [edi + 0x70]
mov byte [ebp - 4], 1
call fcn.00429050
lea ecx, [edi + 0x74]
mov byte [ebp - 4], 2
call fcn.00429050
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 3
call fcn.00429050
lea ecx, [edi + 0x7c]
mov byte [ebp - 4], 4
call fcn.00429050
lea ecx, [edi + 0x80]
mov byte [ebp - 4], 5
call fcn.00429050
lea ecx, [edi + 0x88]
push 0xa
call fcn.0042a540
lea ecx, [edi + 0xd0]
mov byte [ebp - 4], 7
call fcn.00429050
lea ecx, [edi + 0xd4]
mov byte [ebp - 4], 8
call fcn.00429050
lea ecx, [edi + 0xd8]
mov byte [ebp - 4], 9
call fcn.00429050
lea ecx, [edi + 0xe4]
mov byte [ebp - 4], 0xa
call fcn.00429050
lea ecx, [edi + 0xf0]
mov byte [ebp - 4], 0xb
mov dword [edi + 0xec], 1
call fcn.00429050
lea ecx, [edi + 0xf8]
mov byte [ebp - 4], 0xc
call fcn.00429050
xorps xmm0, xmm0
mov byte [ebp - 4], 0xd
lea ecx, [edi + 0x158]
movsd qword [edi + 0x148], xmm0
mov dword [edi + 0x150], 0
mov dword [edi + 0x154], 0
call fcn.0043fbb0
push 0xa
lea ecx, [edi + 0x168]
call fcn.0042a540
lea ecx, [edi + 0x188]
mov byte [ebp - 4], 0xf
call fcn.00429050
push 0xa
lea ecx, [edi + 0x208]
call fcn.00440ce0
lea ecx, [edi + 0x2a8]
mov byte [ebp - 4], 0x11
call fcn.00429050
mov dword [edi + 0x2e0], 0
mov dword [edi + 0x2e4], 0
mov dword [edi + 0x2e8], 0
lea ecx, [edi + 0x36c]
mov byte [ebp - 4], 0x13
mov dword [edi + 0x30c], 0
call fcn.00429050
lea ecx, [edi + 0x374]
mov byte [ebp - 4], 0x14
call fcn.00429050
lea ecx, [edi + 0x3a8]
mov byte [ebp - 4], 0x15
mov dword [edi + 0x378], 0xc
mov dword [edi + 0x380], 0
mov dword [edi + 0x384], 0
call fcn.00429050
lea ecx, [edi + 0x400]
mov byte [ebp - 4], 0x16
mov dword [edi + 0x3cc], 5
mov dword [edi + 0x3d0], 0
mov dword [edi + 0x3f0], 0
mov dword [edi + 0x3f4], 1
mov dword [edi + 0x3f8], 0
mov dword [edi + 0x3fc], 0
call fcn.00429050
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x790eb0
mov byte [ebp - 4], 0x17
call fcn.00428840
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x18
push eax
call fcn.005b6a10
mov ecx, esp
mov byte [ebp - 4], 0x19
push 0x744bc4
push eax
push ecx
call fcn.00428bd0
push 0x748fc4
lea eax, [edi + 0x404]
mov byte [ebp - 4], 0x1a
push str.DEFINE
push eax
call fcn.005b55c0
add esp, 0x18
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call fcn.00428810
lea ecx, [edi + 0x41c]
call fcn.00429050
lea ecx, [edi + 0x420]
mov byte [ebp - 4], 0x1d
call fcn.00429050
lea ecx, [edi + 0x428]
mov byte [ebp - 4], 0x1e
call fcn.00429050
mov byte [ebp - 4], 0x1f
mov dword [edi + 0x46c], 0
mov dword [edi + 0x488], 0
mov dword [edi + 0x494], 0
mov dword [edi + 0x498], 0
mov dword [edi + 0x49c], 0
mov dword [edi + 0x4a0], 1
mov dword [edi + 0x4a4], 0xa
mov dword [edi + 0x4a8], 0
lea ecx, [edi + 0x4b4]
mov dword [edi + 0x4ac], 0
mov dword [edi + 0x4b0], 0
call fcn.00429050
lea ecx, [edi + 0x4c8]
mov byte [ebp - 4], 0x20
call fcn.00429050
push 0x790eb0
lea ecx, [edi + 0x4f0]
mov byte [ebp - 4], 0x21
mov dword [edi + 0x4d0], 0
mov dword [edi + 0x4d4], 0
mov dword [edi + 0x4d8], 0
mov dword [edi + 0x4dc], 0
mov dword [edi + 0x4e0], 0
mov dword [edi + 0x4e4], 0
mov dword [edi + 0x4ec], 0
call fcn.00428840
push 0x790eb0
lea ecx, [edi + 0x4f4]
mov byte [ebp - 4], 0x22
call fcn.00428840
push 0x790eb0
lea ecx, [edi + 0x4f8]
mov byte [ebp - 4], 0x23
call fcn.00428840
push 0x790eb0
lea ecx, [edi + 0x500]
mov byte [ebp - 4], 0x24
mov dword [edi + 0x4fc], 0
call fcn.00428840
push 0x790eb0
lea ecx, [edi + 0x504]
mov byte [ebp - 4], 0x25
call fcn.00428840
mov dword [edi + 0x508], 0xffffffff
lea eax, [edi + 0x548]
mov dword [edi + 0x50c], 0xffffffff
mov dword [edi + 0x510], 0xffffffff
mov dword [edi + 0x514], 0xffffffff
mov dword [edi + 0x518], 0xffffffff
mov dword [edi + 0x51c], 0xffffffff
mov dword [edi + 0x520], 1
mov dword [edi + 0x524], 0
mov dword [edi + 0x528], 0
mov dword [edi + 0x52c], 1
mov dword [edi + 0x530], 0
mov dword [edi + 0x534], 0
mov dword [edi + 0x544], eax
mov dword [eax], 0
lea eax, [edi + 0x564]
mov dword [edi + 0x53c], 0x740c68
mov byte [edi + 0x540], 0
mov dword [edi + 0x54c], 0xc2c00000
mov dword [edi + 0x550], 0x447a0000
mov dword [edi + 0x554], 0x3a83126f
mov dword [edi + 0x560], eax
mov dword [eax], 0x42480000
lea eax, [edi + 0x58c]
mov dword [edi + 0x558], 0x740c70
mov byte [edi + 0x55c], 0
mov dword [edi + 0x568], 0x41200000
mov dword [edi + 0x56c], 0x41c80000
mov dword [edi + 0x570], 0x3f8ccccd
mov dword [edi + 0x574], 1
mov dword [edi + 0x578], 0x41800000
mov dword [edi + 0x57c], 3
mov dword [edi + 0x580], 0x740c78
mov byte [edi + 0x584], 0
mov dword [edi + 0x588], eax
mov dword [eax], 0
mov dword [edi + 0x590], 0x41200000
mov dword [edi + 0x594], 0x43480000
mov dword [edi + 0x598], 0xc1a00000
mov dword [edi + 0x59c], 0x40400000
lea eax, [edi + 0x5b0]
mov dword [edi + 0x5a0], 0x40800000
lea ecx, [edi + 0x620]
mov dword [edi + 0x5ac], eax
mov dword [eax], 0xc1900000
lea eax, [edi + 0x5d0]
mov dword [edi + 0x5a4], 0x740c80
mov byte [edi + 0x5a8], 0
mov dword [edi + 0x5b4], 0x41700000
mov dword [edi + 0x5b8], 0x45160000
mov dword [edi + 0x5bc], 0x45160000
mov dword [edi + 0x5c0], 0x45fa0000
mov dword [edi + 0x5cc], eax
mov dword [eax], 0x42480000
lea eax, [edi + 0x5f0]
mov dword [edi + 0x5c4], 0x740c88
mov byte [edi + 0x5c8], 0
mov dword [edi + 0x5d4], 0x42480000
mov dword [edi + 0x5d8], 0x43fa0000
mov dword [edi + 0x5dc], 0x43fa0000
mov dword [edi + 0x5e0], 0
mov dword [edi + 0x5ec], eax
mov dword [eax], 0x42480000
lea eax, [edi + 0x618]
mov dword [edi + 0x5e4], 0x740c90
mov byte [edi + 0x5e8], 0
mov dword [edi + 0x5f4], 0x42c80000
mov dword [edi + 0x5f8], 0xc2480000
mov dword [edi + 0x5fc], 0x3e800000
mov dword [edi + 0x600], 1
mov dword [edi + 0x604], 0x40000000
mov dword [edi + 0x608], 2
mov dword [edi + 0x60c], 0x740c98
mov byte [edi + 0x610], 0
mov dword [edi + 0x614], eax
mov dword [eax], 0x14
mov dword [edi + 0x61c], 1
call fcn.0052d9e0
mov dword [edi + 0x668], 0x3dcccccd
lea eax, [edi + 0x668]
mov dword [edi + 0x664], eax
lea esi, [edi + 0x67c]
mov dword [edi + 0x65c], 0x740ca8
lea eax, [ebp - 0x38]
mov byte [edi + 0x660], 0
mov dword [edi + 0x66c], 0xffffffff
push 0
push eax
mov dword [edi + 0x670], 0x740cb0
mov byte [edi + 0x674], 0
mov dword [edi + 0x678], esi
mov dword [edi + 0x690], 0
mov dword [edi + 0x694], 0xffffffff
call fcn.005323b0
push 0
movdqu xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movdqu xmmword [esi], xmm0
movq qword [esi + 0x10], xmm1
mov dword [esi + 0x18], eax
lea eax, [edi + 0x6a4]
mov dword [edi + 0x6a0], eax
lea esi, [edi + 0x6c8]
mov dword [eax], 0x3f4ccccd
lea eax, [ebp - 0x38]
mov dword [edi + 0x698], 0x740cb8
mov byte [edi + 0x69c], 0
mov dword [edi + 0x6a8], 0x3ecccccd
mov dword [edi + 0x6ac], 0x3f19999a
mov dword [edi + 0x6b0], 0x3f800000
mov dword [edi + 0x6b4], 0x40800000
mov dword [edi + 0x6b8], 0xffffffff
push eax
mov dword [edi + 0x6bc], 0x740cc0
mov byte [edi + 0x6c0], 0
mov dword [edi + 0x6c4], esi
mov dword [edi + 0x6e0], 0xffffffff
call fcn.00532040
movdqu xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movdqu xmmword [esi], xmm0
push 0
movq qword [esi + 0x10], xmm1
mov dword [esi + 0x18], eax
lea eax, [ebp - 0x38]
lea esi, [edi + 0x6f0]
mov dword [edi + 0x6e4], 0x740cc8
push eax
mov byte [edi + 0x6e8], 0
mov dword [edi + 0x6ec], esi
mov dword [edi + 0x708], 0xffffffff
call fcn.00532520
push 0
movdqu xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movdqu xmmword [esi], xmm0
movq qword [esi + 0x10], xmm1
mov dword [esi + 0x18], eax
lea eax, [ebp - 0x34]
lea esi, [edi + 0x718]
mov dword [edi + 0x70c], 0x740cd0
push eax
mov byte [edi + 0x710], 0
mov dword [edi + 0x714], esi
mov dword [edi + 0x728], 0
mov dword [edi + 0x72c], 0xffffffff
call fcn.005322d0
push 0
movdqu xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
lea eax, [ebp - 0x34]
movdqu xmmword [esi], xmm0
push eax
movq qword [esi + 0x10], xmm1
lea esi, [edi + 0x73c]
mov dword [edi + 0x730], 0x740cd8
mov byte [edi + 0x734], 0
mov dword [edi + 0x738], esi
mov dword [edi + 0x750], 0xffffffff
call fcn.00532210
push 0
movdqu xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
lea eax, [ebp - 0x38]
movdqu xmmword [esi], xmm0
push eax
movq qword [esi + 0x10], xmm1
lea esi, [edi + 0x760]
mov dword [edi + 0x754], 0x740ce0
mov byte [edi + 0x758], 0
mov dword [edi + 0x75c], esi
mov dword [edi + 0x778], 0xffffffff
call fcn.005320d0
add esp, 0x30
movdqu xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movdqu xmmword [esi], xmm0
movq qword [esi + 0x10], xmm1
mov dword [esi + 0x18], eax
lea eax, [edi + 0x788]
mov dword [edi + 0x784], eax
mov dword [eax], 0
lea eax, [edi + 0x7ac]
mov dword [edi + 0x77c], 0x740ce8
mov byte [edi + 0x780], 0
mov dword [edi + 0x78c], 0x40200000
mov dword [edi + 0x794], 0x42fa0000
mov dword [edi + 0x798], 0
mov dword [edi + 0x79c], 0xffffffff
mov dword [edi + 0x7a0], 0x740cf0
mov byte [edi + 0x7a4], 0
mov dword [edi + 0x7a8], eax
mov dword [edi + 0x7b0], 0x3f800000
mov dword [eax], 0xffffffff
mov dword [edi + 0x7b4], 0
mov dword [edi + 0x7b8], 0
mov dword [edi + 0x7bc], 0
lea ecx, [edi + 0x7d4]
mov byte [ebp - 4], 0x27
mov dword [edi + 0x7c8], 0
mov dword [edi + 0x7cc], 0
mov dword [edi + 0x7d0], 0
call fcn.00429050
lea ecx, [edi + 0x7d8]
mov byte [ebp - 4], 0x28
call fcn.00429050
lea ecx, [edi + 0x7dc]
mov byte [ebp - 4], 0x29
call fcn.00429050
lea ecx, [edi + 0x830]
mov byte [ebp - 4], 0x2a
mov dword [edi + 0x7e0], 0
mov dword [edi + 0x7e4], 1
mov dword [edi + 0x7e8], 0
mov dword [edi + 0x7ec], 0
mov dword [edi + 0x7f0], 0
mov dword [edi + 0x7f4], 0
mov dword [edi + 0x7f8], 0
mov dword [edi + 0x7fc], 0
mov dword [edi + 0x800], 0
mov dword [edi + 0x804], 0
mov dword [edi + 0x808], 0
mov dword [edi + 0x80c], 0
mov dword [edi + 0x810], 0
mov dword [edi + 0x814], 0
mov dword [edi + 0x818], 0
mov dword [edi + 0x81c], 0
mov dword [edi + 0x820], 0
mov dword [edi + 0x824], 0
mov dword [edi + 0x828], 0
mov dword [edi + 0x82c], 0
call fcn.00429050
lea ecx, [edi + 0x834]
mov byte [ebp - 4], 0x2b
call fcn.00429050
lea ecx, [edi + 0x838]
mov byte [ebp - 4], 0x2c
mov dword [edi + 0x838], 0
mov dword [edi + 0x83c], 0
call fcn.005a1a20
mov dword [edi + 0x838], eax
lea ecx, [edi + 0x840]
mov byte [ebp - 4], 0x2d
mov dword [edi + 0x840], 0
mov dword [edi + 0x844], 0
call fcn.005a1a20
mov dword [edi + 0x840], eax
lea ecx, [edi + 0x880]
mov byte [ebp - 4], 0x2e
mov dword [edi + 0x848], 0
mov dword [edi + 0x84c], 0
mov dword [edi + 0x850], 0
mov dword [edi + 0x854], 0
mov dword [edi + 0x858], 0
mov dword [edi + 0x85c], 0
mov dword [edi + 0x860], 0
mov dword [edi + 0x864], 0
mov dword [edi + 0x868], 0
mov dword [edi + 0x86c], 0
mov dword [edi + 0x870], 0
mov dword [edi + 0x874], 0
mov dword [edi + 0x878], 0
mov dword [edi + 0x87c], 0
call fcn.00429050
mov byte [ebp - 4], 0x2f
mov dword [edi + 0x884], 0
mov dword [edi + 0x888], 0
mov dword [edi + 0x88c], 0
mov dword [edi + 0x890], 0
lea ecx, [edi + 0x89c]
mov dword [edi + 0x894], 0
mov dword [edi + 0x898], 0
call fcn.00429050
push 0x4c
mov byte [ebp - 4], 0x30
mov dword [edi], 0
mov dword [edi + 0xf4], 0
call fcn.00428650
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x31
test eax, eax
je 0x58917c
mov ecx, eax
call fcn.00636c50
jmp 0x58917e
xor eax, eax
mov dword [edi + 0x538], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x7f0], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret