Function at 0x4575f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x540f07
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
xor ebx, ebx
push edi
mov esi, ecx
push ebx
mov dword [ebp - 0x10], esi
call fcn.00535e20
lea edi, [esi + 0xc0]
mov dword [ebp - 4], ebx
mov ecx, edi
mov dword [ebp - 0x14], edi
call fcn.004473a0
lea ecx, [edi + 0x3c]
call fcn.0040c320
lea ecx, [edi + 0x94]
mov byte [ebp - 4], 1
call fcn.00518561
lea ecx, [edi + 0xa8]
mov byte [ebp - 4], 2
call fcn.005189bf
lea ecx, [edi + 0xbc]
mov byte [ebp - 4], 3
call fcn.00473490
mov dword [edi + 0xbc], 0x54d910
lea ecx, [edi + 0xd0]
mov byte [ebp - 4], 4
call fcn.005189bf
lea ecx, [edi + 0xe4]
mov byte [ebp - 4], 5
call fcn.005189bf
lea ecx, [edi + 0xf8]
mov byte [ebp - 4], 6
call fcn.00518561
lea ecx, [edi + 0x120]
mov byte [ebp - 4], 7
call fcn.00473490
mov eax, dword [0x596a0c]
mov dword [edi + 0x134], eax
mov ecx, dword [0x596a0c]
mov dword [edi + 0x138], ecx
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0xa
call fcn.00518561
lea ecx, [edi + 0x154]
mov byte [ebp - 4], 0xb
call fcn.0040c9a0
lea ecx, [edi + 0x168]
mov byte [ebp - 4], 0xc
call fcn.0040c580
lea ecx, [edi + 0x180]
mov byte [ebp - 4], 0xd
call fcn.005189bf
push ebx
lea ecx, [edi + 0x194]
mov byte [ebp - 4], 0xe
call fcn.0040bee0
push ebx
lea ecx, [edi + 0x1b4]
mov byte [ebp - 4], 0xf
call fcn.0040c230
mov byte [ebp - 4], 0x10
push ebx
lea ecx, [edi + 0x1d0]
call fcn.0040c140
push ebx
lea ecx, [edi + 0x1f0]
mov byte [ebp - 4], 0x11
call fcn.0040c290
push ebx
lea ecx, [edi + 0x20c]
mov byte [ebp - 4], 0x12
call fcn.0040c260
push ebx
lea ecx, [edi + 0x228]
mov byte [ebp - 4], 0x13
call fcn.0040c2c0
push ebx
lea ecx, [edi + 0x244]
mov byte [ebp - 4], 0x14
call fcn.0040c000
push ebx
lea ecx, [edi + 0x260]
mov byte [ebp - 4], 0x15
call fcn.0040c060
lea ecx, [edi + 0x280]
mov byte [ebp - 4], 0x16
call fcn.0040c2f0
mov edx, dword [0x596a0c]
mov dword [edi + 0x2c8], edx
mov eax, dword [0x596a0c]
mov dword [edi + 0x2cc], eax
lea ecx, [edi + 0x110]
mov byte [ebp - 4], 0x19
push ecx
mov dword [edi + 0x17c], 0xffff
mov dword [edi + 0x2c4], ebx
mov dword [edi + 0x13c], ebx
mov dword [edi + 0x10c], ebx
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 5
push ebx
lea ecx, [edi + 0x94]
mov dword [edi + 0x2d8], ebx
mov dword [edi + 0x2d4], ebx
mov dword [edi + 0x2dc], ebx
mov dword [edi + 0x2e0], ebx
mov dword [edi + 0x2e4], ebx
mov dword [edi + 0x2ec], ebx
mov dword [edi + 0x2e8], ebx
call fcn.005185f4
push 5
push ebx
lea ecx, [edi + 0xa8]
call fcn.00518a1f
push 5
push ebx
lea ecx, [edi + 0xd0]
call fcn.00518a1f
push 5
push ebx
lea ecx, [edi + 0xe4]
call fcn.00518a1f
push 5
push ebx
lea ecx, [edi + 0xf8]
call fcn.005185f4
mov dword [edi + 0x22c], edi
mov dword [edi + 0x27c], edi
mov dword [edi + 0x248], edi
mov dword [edi + 0x1f4], edi
mov dword [edi + 0x210], edi
mov dword [edi + 0x1ec], edi
mov dword [edi + 0x1b8], edi
mov dword [edi + 0x1b0], edi
push 0x28
add edi, 0x29c
push edi
call fcn.004743c0
add esp, 8
mov dword [esi + 0x3b8], ebx
mov dword [esi + 0x3b4], 0x54df6c
lea ecx, [esi + 0x3d4]
mov byte [ebp - 4], 0x1b
call fcn.005189bf
push ebx
mov edi, 1
push ebx
push edi
push ebx
lea ecx, [esi + 0x3ec]
mov byte [ebp - 4], 0x1c
call fcn.00501700
lea ecx, [esi + 0x3f4]
mov byte [ebp - 4], 0x1d
call fcn.00518561
lea ecx, [esi + 0x408]
mov byte [ebp - 4], 0x1e
call fcn.005189bf
lea ecx, [esi + 0x41c]
mov byte [ebp - 4], 0x1f
call fcn.00473490
mov dword [esi + 0x41c], 0x54d910
lea ecx, [esi + 0x430]
mov byte [ebp - 4], 0x20
call fcn.005189bf
lea ecx, [esi + 0x444]
mov byte [ebp - 4], 0x21
call fcn.00473490
lea ecx, [esi + 0x458]
mov byte [ebp - 4], 0x22
call fcn.00518d43
lea ecx, [esi + 0x46c]
mov byte [ebp - 4], 0x23
call fcn.00518d43
lea ecx, [esi + 0x480]
mov byte [ebp - 4], 0x24
call fcn.00518561
mov edx, dword [0x596a0c]
mov dword [esi + 0x494], edx
lea ecx, [esi + 0x498]
mov byte [ebp - 4], 0x26
call fcn.00473490
push ebx
push ebx
push ebx
push ebx
lea ecx, [esi + 0x4c0]
mov byte [ebp - 4], 0x27
call fcn.00501700
push ebx
push ebx
push ebx
push ebx
lea ecx, [esi + 0x4cc]
mov byte [ebp - 4], 0x28
call fcn.00501700
lea ecx, [esi + 0x60c]
mov byte [ebp - 4], 0x29
call fcn.00473490
mov dword [esi + 0x60c], 0x54d910
lea ecx, [esi + 0x620]
mov byte [ebp - 4], 0x2a
call fcn.00473490
mov dword [esi + 0x620], 0x54d910
lea ecx, [esi + 0x634]
mov byte [ebp - 4], 0x2b
call fcn.00473490
mov dword [esi + 0x634], 0x54d910
lea ecx, [esi + 0x648]
mov byte [ebp - 4], 0x2c
call fcn.00473490
mov dword [esi + 0x648], 0x54d910
lea ecx, [esi + 0x65c]
mov byte [ebp - 4], 0x2d
call fcn.00473490
mov dword [esi + 0x65c], 0x54d910
lea ecx, [esi + 0x680]
mov byte [ebp - 4], 0x2e
call fcn.00473490
mov dword [esi + 0x680], 0x54d910
lea ecx, [esi + 0x694]
mov byte [ebp - 4], 0x2f
call fcn.00473490
mov dword [esi + 0x694], 0x54d910
lea ecx, [esi + 0x6a8]
mov byte [ebp - 4], 0x30
call fcn.00473490
mov dword [esi + 0x6a8], 0x54d910
lea ecx, [esi + 0x6bc]
mov byte [ebp - 4], 0x31
call fcn.004e63f0
lea ecx, [esi + 0x76c]
mov byte [ebp - 4], 0x32
call fcn.00473490
mov dword [esi + 0x76c], 0x54d910
lea ecx, [esi + 0x780]
mov byte [ebp - 4], 0x33
call fcn.00473490
mov dword [esi + 0x780], 0x54d910
lea ecx, [esi + 0x794]
mov byte [ebp - 4], 0x34
call fcn.00473490
mov dword [esi + 0x794], 0x54d910
lea ecx, [esi + 0x7cc]
mov byte [ebp - 4], 0x35
call fcn.00473490
mov dword [esi + 0x7cc], 0x54d910
lea ecx, [esi + 0x7e0]
mov byte [ebp - 4], 0x36
call fcn.00473490
mov dword [esi + 0x7e0], 0x54d910
lea ecx, [esi + 0x7f4]
mov byte [ebp - 4], 0x37
call fcn.00473490
mov dword [esi + 0x7f4], 0x54d910
mov eax, dword [0x596a0c]
mov dword [esi + 0x894], eax
mov ecx, dword [0x596a0c]
mov dword [esi + 0x898], ecx
mov edx, dword [0x596a0c]
mov dword [esi + 0x8a0], edx
mov eax, dword [0x596a0c]
mov dword [esi + 0x8b8], eax
mov ecx, dword [0x596a0c]
mov dword [esi + 0x908], ecx
mov edx, dword [0x596a0c]
mov dword [esi + 0x910], edx
mov dword [esi + 0x91c], ebx
mov dword [esi + 0x918], 0x55620c
mov eax, dword [0x596a0c]
mov dword [esi + 0x920], eax
lea ecx, [esi + 0x930]
mov byte [ebp - 4], 0x40
call fcn.00518561
lea ecx, [esi + 0x948]
mov byte [ebp - 4], 0x41
call fcn.0051ed78
mov ecx, dword [0x596a0c]
mov dword [esi + 0x964], ecx
mov dword [esi + 0x968], 0x550c40
mov dword [esi + 0x96c], ebx
mov dword [esi + 0x978], ebx
mov dword [esi + 0x974], ebx
mov dword [esi + 0x970], ebx
mov dword [esi + 0x97c], 0x550c4c
mov dword [esi + 0x980], ebx
mov dword [esi + 0x98c], ebx
mov dword [esi + 0x988], ebx
mov dword [esi + 0x984], ebx
lea ecx, [esi + 0x990]
mov byte [ebp - 4], 0x45
call fcn.005189bf
lea ecx, [esi + 0x9a4]
mov byte [ebp - 4], 0x46
call fcn.00473490
mov dword [esi + 0x9a4], 0x54d910
lea ecx, [esi + 0x9b8]
mov byte [ebp - 4], 0x47
call fcn.00473490
mov dword [esi + 0x9b8], 0x54d910
mov dword [esi], method.CWinApp.virtual_0
mov dword [esi + 0x928], ebx
mov byte [esi + 0x8c0], bl
mov dword [esi + 0x674], 0x3c9d6110
mov dword [esi + 0x678], edi
mov dword [esi + 0x888], ebx
mov dword [esi + 0x904], ebx
mov dword [esi + 0x890], ebx
mov dword [esi + 0x3e8], ebx
call 0x457c36
add dword [esp], 6
ret