Function at 0x4596be
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50c
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov edi, str.Q_Dir___Document
xor ebx, ebx
mov eax, edi
test eax, eax
jne 0x4596e1
xor eax, eax
jmp 0x4596e4
push edi
call esi
push edi
push eax
mov ecx, 0x496338
call fcn.0040148c
mov edi, str..qdr
mov eax, edi
test eax, eax
je 0x4596fe
push edi
call esi
push edi
push eax
mov ecx, 0x496334
call fcn.0040148c
mov eax, dword [0x481530]
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 0x2c], 0x44
mov byte [ebp - 0x2b], 0x69
mov byte [ebp - 0x2a], 0x72
mov byte [ebp - 0x29], 0x50
mov byte [ebp - 0x28], 0x72
mov byte [ebp - 0x27], 0x69
mov byte [ebp - 0x26], 0x6e
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x4f
mov byte [ebp - 0x23], 0x4b
mov byte [ebp - 0x22], bl
call fcn.00401571
mov eax, dword [0x481530]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xc]
push eax
mov byte [ebp - 0xc], 0x36
mov byte [ebp - 0xb], 0x2e
mov byte [ebp - 0xa], 0x39
mov byte [ebp - 9], 0x36
mov byte [ebp - 8], bl
call fcn.00401571
lea eax, [ebp - 0x78]
push eax
push 0x487e2c
call fcn.00459663
pop ecx
lea eax, [ebp - 0x78]
pop ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.00401571
lea eax, [ebp - 0x10]
mov ecx, 0x494f54
push eax
call fcn.00401521
lea eax, [ebp - 0x10]
mov ecx, 0x494f4c
push eax
call fcn.00401521
lea eax, [ebp - 0x10]
mov ecx, 0x4950a8
push eax
call fcn.00401521
lea eax, [ebp - 0x14]
mov edi, 0x4950a0
push eax
mov ecx, edi
call fcn.00401521
push edi
mov ecx, 0x49509c
call fcn.00401521
push dword [ebp + 8]
call esi
cmp eax, 5
mov edi, 0x496328
jle 0x45981f
push dword [ebp + 8]
call esi
cmp eax, 0x209
jge 0x45981f
cmp dword [ebp + 8], ebx
jne 0x4597f5
xor eax, eax
jmp 0x4597fa
push dword [ebp + 8]
call esi
push dword [ebp + 8]
mov ecx, edi
push eax
call fcn.0040148c
call fcn.00429722
test eax, eax
je 0x459816
push 1
pop ebx
jmp 0x459d72
call fcn.004523f0
test eax, eax
jne 0x45980e
cmp dword [ebp + 8], ebx
je 0x4598f0
push dword [ebp + 8]
call esi
push 0x484d68
lea ecx, [ebp - 4]
mov dword [ebp - 0xc], eax
call fcn.00407ed4
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax - 8]
jne 0x459866
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x459866
push 1
call fcn.004307d9
pop ecx
lea ecx, [ebp - 4]
jmp 0x459c39
lea ecx, [ebp - 4]
call fcn.0040139b
push dword [ebp + 8]
call esi
push dword [ebp + 8]
mov ecx, edi
push eax
call fcn.0040148c
push str.RegisterAdminKey4_EEETWETRFSD
lea ecx, [ebp - 0x1c]
call fcn.00407ed4
push ebx
mov ecx, edi
push dword [ebp - 0x1c]
call fcn.00401799
test eax, eax
jl 0x4598f7
mov eax, dword [ebp - 0x1c]
push ebx
mov ecx, edi
mov esi, dword [eax - 8]
call fcn.004016d3
lea eax, [eax + esi*2]
lea ecx, [ebp + 8]
push eax
call fcn.00407ed4
push 1
push dword [ebp + 8]
call fcn.0046d82b
pop ecx
push eax
call fcn.00408e85
pop ecx
mov esi, eax
pop ecx
lea ecx, [ebp + 8]
call fcn.0040139b
lea ecx, [ebp - 0x1c]
call fcn.0040139b
lea ecx, [ebp - 0x14]
call fcn.0040139b
lea ecx, [ebp - 0x10]
call fcn.0040139b
mov eax, esi
jmp 0x459d84
xor eax, eax
jmp 0x459873
lea ecx, [ebp - 0x60]
call fcn.0045a49d
lea ecx, [ebp - 0x54]
call fcn.0045a49d
lea eax, [ebp - 0x64]
mov ecx, 0x496340
push eax
mov dword [ebp - 0x64], 0x47cbc0
call fcn.00459567
mov eax, dword [0x496328]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push ecx
cmp dword [eax - 0xc], ebx
mov ecx, esp
jl 0x459939
mov dword [ecx], eax
sub eax, 0xc
push eax
call esi
jmp 0x45994b
mov eax, dword [0x481530]
mov dword [ecx], eax
push dword [0x496328]
call fcn.004080f7
call fcn.00405f13
cmp eax, ebx
pop ecx
je 0x459974
push 1
pop ebx
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x54]
call fcn.00417dcc
lea ecx, [ebp - 0x60]
call fcn.00417dcc
jmp 0x459d6a
mov ecx, 0x496594
call fcn.00448595
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [0x492860]
push 0x492868
push dword [0x494f54]
call fcn.00447ee1
add esp, 0x14
cmp eax, ebx
mov dword [0x492860], eax
je 0x4599a9
call fcn.00459631
push ebx
push 0x487de0
mov ecx, edi
call fcn.00401799
test eax, eax
jne 0x459a37
mov eax, dword [0x481530]
push 0x23
push 1
mov dword [ebp + 8], eax
push dword [0x496328]
lea eax, [ebp + 8]
push eax
call fcn.004636d1
add esp, 0x10
test eax, eax
je 0x459a15
push 0x487ddc
lea ecx, [ebp - 4]
call fcn.004013c7
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004015b5
push eax
mov ecx, 0x496430
call fcn.00401521
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea ecx, [ebp - 4]
call fcn.0040139b
call fcn.00432cf1
lea ecx, [ebp + 8]
call fcn.0040139b
lea ecx, [ebp - 0x54]
call fcn.00417dcc
lea ecx, [ebp - 0x60]
call fcn.00417dcc
jmp 0x459c36
lea ecx, [ebp - 0x50c]
call fcn.00433cc6
push str.GUID__31
lea ecx, [ebp - 4]
call fcn.004013c7
mov eax, dword [0x494f4c]
cmp dword [eax - 0xc], ebx
jl 0x459a64
mov dword [ebp + 8], eax
add eax, 0xfffffff4
push eax
call esi
jmp 0x459a76
mov ecx, dword [0x481530]
push eax
mov dword [ebp + 8], ecx
lea ecx, [ebp + 8]
call fcn.004080f7
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004015b5
push dword [eax]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
lea ecx, [ebp - 0xc]
mov dword [0x496410], eax
call fcn.0040139b
lea ecx, [ebp + 8]
call fcn.0040139b
lea ecx, [ebp - 4]
call fcn.0040139b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0xb7
je 0x459ac7
call esi
cmp eax, 5
mov byte [ebp + 0xb], bl
jne 0x459acb
mov byte [ebp + 0xb], 1
push 0x487dcc
lea ecx, [ebp - 0xc]
call fcn.004013c7
push eax
lea eax, [ebp - 0x18]
push 0x494f4c
push eax
call fcn.004015b5
lea ecx, [ebp - 0xc]
call fcn.0040139b
mov esi, 0x481864
lea ecx, [ebp - 0x20]
push esi
call fcn.00407ed4
push ebx
push 0x484d5c
mov ecx, edi
call fcn.00401799
test eax, eax
jne 0x459b74
push edi
lea ecx, [ebp - 4]
call fcn.00401355
lea eax, [ebp - 4]
push eax
call fcn.004303b3
pop ecx
test eax, eax
lea ecx, [ebp - 4]
je 0x459b6f
call fcn.0040139b
lea ecx, [ebp - 0x20]
call fcn.0040139b
lea ecx, [ebp - 0x18]
call fcn.0040139b
lea ecx, [ebp - 0x50c]
call fcn.00459d9e
lea ecx, [ebp - 0x64]
call fcn.00459d89
lea ecx, [ebp - 0x1c]
call fcn.0040139b
lea ecx, [ebp - 0x14]
call fcn.0040139b
lea ecx, [ebp - 0x10]
call fcn.0040139b
xor eax, eax
jmp 0x459d84
call fcn.0040139b
cmp byte [ebp + 0xb], bl
je 0x459c97
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [0x492b14]
push str.default_new_tab
push esi
call fcn.00447ee1
add esp, 0x14
cmp eax, ebx
mov dword [0x492b14], eax
je 0x459c56
push ebx
push 0x484d5c
mov ecx, edi
call fcn.00401799
test eax, eax
jne 0x459c56
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push 0x459489
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [ebp + 8], ebx
je 0x459c56
mov eax, dword [0x496328]
mov esi, 0x2774
mov ecx, edi
mov eax, dword [eax - 8]
mov dword [ebp - 0x2c], esi
lea eax, [eax + eax + 2]
push eax
mov dword [ebp - 0x28], eax
call fcn.004016d3
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push 0x4a
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, esi
jne 0x459c56
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x20]
call fcn.0040139b
lea ecx, [ebp - 0x18]
call fcn.0040139b
lea ecx, [ebp - 0x50c]
call fcn.00459d9e
lea ecx, [ebp - 0x64]
call fcn.00459d89
lea ecx, [ebp - 0x1c]
call fcn.0040139b
lea ecx, [ebp - 0x14]
call fcn.0040139b
lea ecx, [ebp - 0x10]
call fcn.0040139b
push 1
pop eax
jmp 0x459d84
cmp dword [0x494f58], ebx
je 0x459c78
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [0x496414]
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.00447ee1
add esp, 0x14
jmp 0x459c8f
push ebx
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
call fcn.00401355
mov ecx, 0x496594
call fcn.00448172
inc eax
mov dword [0x496414], eax
jmp 0x459c9c
mov eax, dword [0x496414]
cmp dword [0x494f58], ebx
je 0x459cb6
push ebx
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.00447ea0
add esp, 0x10
jmp 0x459ccd
push eax
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
call fcn.00401355
mov ecx, 0x496594
call fcn.004481e5
call fcn.00406746
test eax, eax
jne 0x459ce3
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x459d47
push ebx
push 1
push 0x482060
push dword [0x4950a8]
call fcn.00447ea0
add esp, 0x10
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
push ebx
call fcn.00411a35
push ebx
lea ecx, [ebp - 0x50c]
call fcn.0045a4c0
test eax, eax
jne 0x459d27
push ebx
push ebx
push str.Main_window_creation_failed__n
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x459d47
lea ecx, [ebp - 0x64]
call fcn.004594cc
mov ecx, 0x496340
mov ebx, eax
call fcn.004595a6
push dword [0x496410]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x20]
call fcn.0040139b
lea ecx, [ebp - 0x18]
call fcn.0040139b
lea ecx, [ebp - 0x50c]
call fcn.00459d9e
lea ecx, [ebp - 0x64]
call fcn.00459d89
lea ecx, [ebp - 0x1c]
call fcn.0040139b
lea ecx, [ebp - 0x14]
call fcn.0040139b
lea ecx, [ebp - 0x10]
call fcn.0040139b
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret