Function at 0x4563a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5406ba
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esi
mov dword [esi], method.CWinApp.virtual_0
mov dword [ebp - 4], 0x2f
call fcn.0045e920
mov ecx, esi
call fcn.00456b10
mov ecx, esi
call fcn.00456bd0
mov ecx, esi
call fcn.00424ca0
mov ecx, esi
call fcn.00456c90
jmp 0x4563f3
mov eax, dword [esi + 0x9dc]
test eax, eax
je 0x456404
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [esi + 0x9b8]
mov byte [ebp - 4], 0x2e
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x9a4]
mov byte [ebp - 4], 0x2d
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x990]
mov byte [ebp - 4], 0x2c
call fcn.00518692
mov eax, dword [esi + 0x980]
mov dword [esi + 0x97c], 0x550c4c
test eax, eax
je 0x45645a
push eax
call fcn.0051a4ef
add esp, 4
mov eax, dword [esi + 0x96c]
mov dword [esi + 0x968], 0x550c40
test eax, eax
je 0x456477
push eax
call fcn.0051a4ef
add esp, 4
push ebx
lea ecx, [esi + 0x964]
mov byte [ebp - 4], 0x29
call fcn.00519616
lea ecx, [esi + 0x948]
mov byte [ebp - 4], 0x28
call fcn.0051ea6d
lea ecx, [esi + 0x930]
mov byte [ebp - 4], 0x27
call fcn.00518234
lea ecx, [esi + 0x920]
mov byte [ebp - 4], 0x26
call fcn.00519616
lea ecx, [esi + 0x918]
mov dword [ebp - 0x14], ecx
mov dword [ecx], vtable.CGdiObject.0
mov byte [ebp - 4], 0x30
call fcn.0052259c
lea ecx, [esi + 0x910]
mov byte [ebp - 4], 0x24
call fcn.00519616
lea ecx, [esi + 0x908]
mov byte [ebp - 4], 0x23
call fcn.00519616
lea ecx, [esi + 0x8b8]
mov byte [ebp - 4], 0x22
call fcn.00519616
lea ecx, [esi + 0x8a0]
mov byte [ebp - 4], 0x21
call fcn.00519616
lea ecx, [esi + 0x898]
mov byte [ebp - 4], 0x20
call fcn.00519616
lea ecx, [esi + 0x894]
mov byte [ebp - 4], 0x1f
call fcn.00519616
lea ecx, [esi + 0x7f4]
mov byte [ebp - 4], 0x1e
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x7e0]
mov byte [ebp - 4], 0x1d
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x7cc]
mov byte [ebp - 4], 0x1c
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x794]
mov byte [ebp - 4], 0x1b
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x780]
mov byte [ebp - 4], 0x1a
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x76c]
mov byte [ebp - 4], 0x19
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x6bc]
mov byte [ebp - 4], 0x18
call fcn.004e6160
lea ecx, [esi + 0x6a8]
mov byte [ebp - 4], 0x17
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x694]
mov byte [ebp - 4], 0x16
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x680]
mov byte [ebp - 4], 0x15
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x65c]
mov byte [ebp - 4], 0x14
mov dword [ecx], 0x54d7d0
call fcn.00473310
mov byte [ebp - 4], 0x13
lea ecx, [esi + 0x648]
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x634]
mov byte [ebp - 4], 0x12
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x620]
mov byte [ebp - 4], 0x11
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x60c]
mov byte [ebp - 4], 0x10
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x4cc]
mov byte [ebp - 4], 0xf
call fcn.0050140e
lea ecx, [esi + 0x4c0]
mov byte [ebp - 4], 0xe
call fcn.0050140e
lea ecx, [esi + 0x498]
mov byte [ebp - 4], 0xd
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x494]
mov byte [ebp - 4], 0xc
call fcn.00519616
lea ecx, [esi + 0x480]
mov byte [ebp - 4], 0xb
call fcn.00518234
lea ecx, [esi + 0x46c]
mov byte [ebp - 4], 0xa
call fcn.00518a16
lea ecx, [esi + 0x458]
mov byte [ebp - 4], 9
call fcn.00518a16
lea ecx, [esi + 0x444]
mov byte [ebp - 4], 8
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x430]
mov byte [ebp - 4], 7
call fcn.00518692
lea ecx, [esi + 0x41c]
mov byte [ebp - 4], 6
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [esi + 0x408]
mov byte [ebp - 4], 5
call fcn.00518692
lea ecx, [esi + 0x3f4]
mov byte [ebp - 4], 4
call fcn.00518234
lea ecx, [esi + 0x3ec]
mov byte [ebp - 4], 3
call fcn.0050140e
lea ecx, [esi + 0x3d4]
mov byte [ebp - 4], 2
call fcn.00518692
lea ecx, [esi + 0x3b4]
mov dword [ebp - 0x14], ecx
mov dword [ecx], vtable.CGdiObject.0
mov byte [ebp - 4], 0x31
call fcn.0052259c
lea edi, [esi + 0xc0]
mov dword [ebp - 0x14], edi
mov ecx, edi
mov byte [ebp - 4], 0x4a
call fcn.0044ffb0
lea ecx, [edi + 0x2cc]
mov byte [ebp - 4], 0x49
call fcn.00519616
lea ecx, [edi + 0x2c8]
mov byte [ebp - 4], 0x48
call fcn.00519616
lea eax, [edi + 0x280]
mov dword [ebp - 0x18], eax
mov dword [eax], 0x54d900
lea ebx, [eax + 8]
mov byte [ebp - 4], 0x4b
mov ecx, ebx
mov dword [eax + 4], 0
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x47
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea eax, [edi + 0x260]
mov dword [ebp - 0x18], eax
mov dword [eax], fcn.004d28e0
lea ebx, [eax + 8]
mov byte [ebp - 4], 0x4c
mov ecx, ebx
mov dword [eax + 4], 0
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x46
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea ebx, [edi + 0x244]
mov dword [ebp - 0x18], ebx
mov dword [ebx], 0x54d820
mov ecx, ebx
mov byte [ebp - 4], 0x4d
call fcn.004d3300
mov dword [ebx], 0x54d7f4
add ebx, 8
mov byte [ebp - 4], 0x4e
mov ecx, ebx
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x45
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea ebx, [edi + 0x228]
mov dword [ebp - 0x18], ebx
mov dword [ebx], 0x54d8d4
mov ecx, ebx
mov byte [ebp - 4], 0x4f
call fcn.004c9290
mov dword [ebx], 0x54d7f4
add ebx, 8
mov byte [ebp - 4], 0x50
mov ecx, ebx
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x44
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea ebx, [edi + 0x20c]
mov dword [ebp - 0x18], ebx
mov dword [ebx], 0x54d878
mov ecx, ebx
mov byte [ebp - 4], 0x51
call fcn.004c80a0
mov dword [ebx], 0x54d7f4
add ebx, 8
mov byte [ebp - 4], 0x52
mov ecx, ebx
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x43
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea ebx, [edi + 0x1f0]
mov dword [ebp - 0x18], ebx
mov dword [ebx], 0x54d8a4
mov ecx, ebx
mov byte [ebp - 4], 0x53
call fcn.004c90f0
mov ecx, ebx
mov byte [ebp - 4], 0x42
call fcn.00402050
lea eax, [edi + 0x1d0]
mov dword [ebp - 0x18], eax
mov dword [eax], fcn.004d28e0
lea ebx, [eax + 8]
mov byte [ebp - 4], 0x54
mov ecx, ebx
mov dword [eax + 4], 0
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x41
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea ebx, [edi + 0x1b4]
mov dword [ebp - 0x18], ebx
mov dword [ebx], 0x54d84c
mov ecx, ebx
mov byte [ebp - 4], 0x55
call fcn.004c9450
mov ecx, ebx
mov byte [ebp - 4], 0x40
call fcn.00402050
lea eax, [edi + 0x194]
mov dword [ebp - 0x18], eax
mov dword [eax], fcn.004d28e0
lea ebx, [eax + 8]
mov byte [ebp - 4], 0x56
mov ecx, ebx
mov dword [eax + 4], 0
call fcn.00473310
mov ecx, ebx
mov byte [ebp - 4], 0x3f
mov dword [ebx], 0x54d7d0
call fcn.00473310
lea ecx, [edi + 0x180]
mov byte [ebp - 4], 0x3e
call fcn.00518692
mov eax, dword [edi + 0x16c]
mov dword [edi + method.CCommandLineInfo.virtual_0], 0x54d904
test eax, eax
pop ebx
je 0x456991
push eax
call fcn.0051a4ef
add esp, 4
lea ecx, [edi + 0x154]
mov byte [ebp - 4], 0x3c
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x3b
call fcn.00518234
lea ecx, [edi + 0x138]
mov byte [ebp - 4], 0x3a
call fcn.00519616
lea ecx, [edi + 0x134]
mov byte [ebp - 4], 0x39
call fcn.00519616
lea ecx, [edi + 0x120]
mov byte [ebp - 4], 0x38
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [edi + 0xf8]
mov byte [ebp - 4], 0x37
call fcn.00518234
lea ecx, [edi + 0xe4]
mov byte [ebp - 4], 0x36
call fcn.00518692
lea ecx, [edi + 0xd0]
mov byte [ebp - 4], 0x35
call fcn.00518692
lea ecx, [edi + 0xbc]
mov byte [ebp - 4], 0x34
mov dword [ecx], 0x54d7d0
call fcn.00473310
lea ecx, [edi + 0xa8]
mov byte [ebp - 4], 0x33
call fcn.00518692
lea ecx, [edi + 0x94]
mov byte [ebp - 4], 0x32
call fcn.00518234
add edi, 0x3c
mov dword [ebp - 0x18], edi
lea ecx, [edi + 0x24]
mov byte [ebp - 4], 0x5f
call fcn.00519616
lea ecx, [edi + 0x20]
mov byte [ebp - 4], 0x5e
call fcn.00519616
lea ecx, [edi + 0x1c]
mov byte [ebp - 4], 0x5d
call fcn.00519616
lea ecx, [edi + 0x18]
mov byte [ebp - 4], 0x5c
call fcn.00519616
lea ecx, [edi + 0x14]
mov byte [ebp - 4], 0x5b
call fcn.00519616
lea ecx, [edi + 0x10]
mov byte [ebp - 4], 0x5a
call fcn.00519616
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 0x59
call fcn.00519616
lea ecx, [edi + 8]
mov byte [ebp - 4], 0x58
call fcn.00519616
lea ecx, [edi + 4]
mov byte [ebp - 4], 0x57
call fcn.00519616
mov ecx, edi
mov byte [ebp - 4], 0
call fcn.00519616
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.00535e9e
pop edi
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret