Function at 0x5c2240
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get kernel32 base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x71876a
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x7e6410]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [ebx + 4], 0
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], eax
mov dword [ebp - 4], 0
mov dword [ebx + 0x24], vtable.CWebBrowserEventReceiver.0
mov dword [ebx + 0x28], vtable.IOnSearch.0
lea ecx, [ebx + 0x350]
mov dword [ebx + 0x2c], vtable.IPlayerNotifier.0
mov dword [ebx + 0x30], vtable.IRadioNotifier.0
mov byte [ebp - 4], 1
mov dword [ebx], vtable.CMainWindow.0
mov dword [ebx + 0x24], vtable.CMainWindow.1.0
mov dword [ebx + 0x28], vtable.CMainWindow.2.0
mov dword [ebx + 0x2c], vtable.CMainWindow.3.0
mov dword [ebx + 0x30], vtable.CMainWindow.4.0
call fcn.0042cc40
lea ecx, [ebx + 0x3ac]
call fcn.0043fbb0
lea ecx, [ebx + 0x3bc]
call fcn.0043fbb0
mov dword [ebx + 0x694], 0
mov dword [ebx + 0x698], 0
mov dword [ebx + 0x69c], 0
mov dword [ebx + 0x6a0], 0
mov dword [ebx + 0x6a4], 0
mov dword [ebx + 0x6a8], 0
lea edi, [ebx + 0x6c4]
mov byte [ebp - 4], 6
mov ecx, edi
mov dword [ebx + 0x6ac], 0xffffffff
mov dword [ebx + 0x6b0], 0
mov byte [ebx + 0x6c0], 1
mov dword [ebp - 0x14], edi
call fcn.00429050
lea ecx, [edi + 4]
mov byte [ebp - 4], 7
call fcn.00429050
push 0x790eb0
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.00428a30
push 0x790eb0
lea ecx, [edi + 4]
call fcn.00428a30
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [ebx + 0x6e0], 0
mov dword [ebx + 0x6e4], 0
mov dword [ebx + 0x6e8], 0
lea ecx, [ebx + 0x710]
mov byte [ebp - 4], 0xa
call fcn.005c35f0
lea ecx, [ebx + 0x868]
mov byte [ebp - 4], 0xb
call fcn.005c35f0
lea ecx, [ebx + 0xa00]
mov byte [ebp - 4], 0xc
call fcn.00457520
mov byte [ebp - 4], 0xd
mov dword [ebx + 0xa6c], 0
mov dword [ebx + 0xa70], 0
mov dword [ebx + 0xa74], 0
mov dword [ebx + 0xa78], 0
mov dword [ebx + 0xa7c], 0
lea ecx, [ebx + 0xaac]
mov dword [ebx + 0xa80], 0
mov dword [ebx + 0xa84], 0
mov dword [ebx + 0xa88], 0
mov dword [ebx + 0xa8c], 0
mov dword [ebx + 0xa90], 0
mov dword [ebx + 0xa94], 0
mov dword [ebx + 0xa98], 0
mov dword [ebx + 0xa9c], 0
mov dword [ebx + 0xaa0], 0
mov dword [ebx + 0xaa4], 0
mov dword [ebx + 0xaa8], 0
call fcn.0043fbb0
lea ecx, [ebx + 0xabc]
mov byte [ebp - 4], 0xe
call fcn.0043fbb0
lea ecx, [ebx + 0xacc]
mov byte [ebp - 4], 0xf
call fcn.0043fbb0
lea ecx, [ebx + 0xaf4]
mov byte [ebp - 4], 0x10
call fcn.00664a80
lea ecx, [ebx + 0xb20]
mov byte [ebp - 4], 0x11
call fcn.00544730
lea ecx, [ebx + 0xb50]
mov byte [ebp - 4], 0x12
call fcn.005578d0
lea ecx, [ebx + 0xb80]
mov byte [ebp - 4], 0x13
call fcn.005a8b10
lea ecx, [ebx + 0x1470]
mov byte [ebp - 4], 0x14
call fcn.00429050
lea ecx, [ebx + 0x1488]
mov byte [ebp - 4], 0x15
call fcn.00429050
lea ecx, [ebx + 0x148c]
mov byte [ebp - 4], 0x16
call fcn.00429050
lea ecx, [ebx + 0x1498]
mov byte [ebp - 4], 0x17
call fcn.00429050
lea ecx, [ebx + 0x14b4]
mov byte [ebp - 4], 0x18
call fcn.00429050
lea ecx, [ebx + 0x14c0]
mov byte [ebp - 4], 0x19
call fcn.006a2f00
lea ecx, [ebx + 0x14f8]
mov byte [ebp - 4], 0x1a
mov dword [ebx + 0x14e8], 0
call fcn.00529940
lea ecx, [ebx + 0x155c]
mov byte [ebp - 4], 0x1b
call fcn.00429050
push 0xa
lea ecx, [ebx + 0x1564]
mov byte [ebp - 4], 0x1c
mov byte [ebx + 0x1560], 0
call fcn.00440ce0
lea ecx, [ebx + 0x1588]
mov byte [ebp - 4], 0x1d
call fcn.00429050
lea ecx, [ebx + 0x15e0]
mov byte [ebp - 4], 0x1e
mov dword [ebx + 0x15a8], 0
mov dword [ebx + 0x15ac], 0
mov dword [ebx + 0x15b0], 0
mov dword [ebx + 0x15b4], 0
mov dword [ebx + 0x15b8], 0
call fcn.005c35f0
lea ecx, [ebx + 0x1738]
mov byte [ebp - 4], 0x1f
mov dword [ebx + 0x1738], 0
mov dword [ebx + 0x173c], 0
call fcn.005de3b0
mov dword [ebx + 0x1738], eax
lea ecx, [ebx + 0x1740]
mov byte [ebp - 4], 0x20
mov dword [ebx + 0x1740], 0
mov dword [ebx + 0x1744], 0
call fcn.005de3e0
mov dword [ebx + 0x1740], eax
lea ecx, [ebx + 0x1758]
mov byte [ebp - 4], 0x21
call fcn.00429050
lea ecx, [ebx + 0x175c]
mov byte [ebp - 4], 0x22
call fcn.00429050
lea ecx, [ebx + 0x1760]
mov byte [ebp - 4], 0x23
call fcn.00429050
lea ecx, [ebx + 0x1764]
mov byte [ebp - 4], 0x24
call fcn.00429050
mov dword [ebx + 0x17b0], 3
mov dword [ebx + 0x17b4], 0
mov dword [ebx + 0x17b8], 0
mov dword [ebx + 0x17bc], 0
mov dword [ebx + 0x17c0], 0
mov dword [ebx + 0x17c4], 0
mov dword [ebx + 0x17c8], 0
lea ecx, [ebx + 0x17d4]
mov byte [ebp - 4], 0x26
mov dword [ebx + 0x17cc], 0
mov dword [ebx + 0x17d0], 0
call fcn.00429050
mov word [ebx + 0x17d8], 0
lea esi, [ebx + 0x17dc]
mov byte [ebx + 0x17da], 0
push 8
mov byte [ebp - 4], 0x27
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c2728
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea esi, [ebx + 0x17f0]
mov byte [ebp - 4], 0x28
push 8
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c277a
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea esi, [ebx + 0x1804]
mov byte [ebp - 4], 0x29
push 8
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c27cc
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea esi, [ebx + 0x1818]
mov byte [ebp - 4], 0x2a
push 8
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c281e
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea esi, [ebx + 0x182c]
mov byte [ebp - 4], 0x2b
push 8
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c2870
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea esi, [ebx + 0x1840]
mov byte [ebp - 4], 0x2c
push 8
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c28c2
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea esi, [ebx + 0x1854]
mov byte [ebp - 4], 0x2d
push 8
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00428650
add esp, 4
test eax, eax
jne 0x5c2914
call fcn.006b19e4
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
lea ecx, [ebx + 0x1868]
mov byte [ebp - 4], 0x2e
call fcn.00429050
mov dword [ebx + 0x1870], 0
lea ecx, [ebx + 0x1890]
mov dword [ebx + 0x188c], 0
mov byte [ebp - 4], 0x2f
mov dword [ebx + 0x1890], 0
mov dword [ebx + 0x1894], 0
call fcn.00536cc0
mov dword [ebx + 0x1890], eax
lea ecx, [ebx + 0x1898]
mov byte [ebp - 4], 0x30
mov dword [ebx + 0x1898], 0
mov dword [ebx + 0x189c], 0
call fcn.00536cc0
mov dword [ebx + 0x1898], eax
lea eax, [ebx + 0x18a4]
mov byte [ebp - 4], 0x31
push 2
push eax
mov byte [ebx + 0x18a0], 0
call fcn.006b20c3
add esp, 8
test eax, eax
je 0x5c29c5
push eax
call fcn.006b1c82
add esp, 4
mov byte [ebx + 0x18c0], 0
mov dword [ebx + 0x18c4], 0
mov dword [ebx + 0x18c8], 0
mov dword [ebx + 0x18cc], 0
push 0xa
lea ecx, [ebx + 0x18dc]
mov dword [ebx + 0x18d0], 0
mov dword [ebx + 0x18d4], 0
call fcn.0042a540
lea ecx, [ebx + 0x18f8]
mov byte [ebp - 4], 0x34
call fcn.005c3360
lea ecx, [ebx + 0x1944]
mov byte [ebp - 4], 0x35
mov dword [ebx + 0x1944], 0
mov dword [ebx + 0x1948], 0
call fcn.00536cc0
mov dword [ebx + 0x1944], eax
lea ecx, [ebx + 0x1950]
mov byte [ebp - 4], 0x36
mov dword [ebx + 0x194c], 0
call fcn.00429050
lea ecx, [ebx + 0x1954]
mov byte [ebp - 4], 0x37
call fcn.00429050
lea ecx, [ebx + 0x1958]
mov byte [ebp - 4], 0x38
call fcn.00429050
mov dword [0x7fa098], ebx
mov ecx, ebx
mov byte [ebp - 4], 0x39
mov dword [ebx + 0x38], 0
call fcn.00609980
push 0x790eb0
lea ecx, [ebx + 0x1588]
mov dword [ebx + 0x34], 0
mov dword [ebx + 0x158c], 0
mov dword [ebx + 0x14b8], 0
mov dword [ebx + 0x159c], 0
mov dword [ebx + 0xae0], 0
mov dword [ebx + 0xae4], 0
mov dword [ebx + 0x157c], 0
mov dword [ebx + 0x1580], 0
mov dword [ebx + 0x1584], 0
call fcn.00428a30
push 0x790eb0
lea ecx, [ebx + 0x175c]
call fcn.00428a30
mov dword [ebx + 0xa54], 0
mov dword [ebx + 0xa60], 0
mov dword [ebx + 0xa64], 0
mov dword [ebx + 0xa68], 0
mov dword [ebx + 0x146c], 0
mov ecx, dword [0x7f7170]
test ecx, ecx
je 0x5c2b56
mov eax, dword [ecx]
push 0x7425a0
push str.IDS_APP_NAME
call dword [eax + 8]
jmp 0x5c2b5b
mov eax, 0x790eb0
push eax
lea ecx, [ebx + 0x1470]
call fcn.00428a30
push 0x12c
mov dword [ebx + 0x1590], 0
mov dword [ebx + 0x1594], 0
mov dword [ebx + 0xadc], 0
mov dword [ebx + 0x14f0], 0
mov dword [ebx + 0x14f4], 0
mov dword [ebx + 0x14ec], 0
mov dword [ebx + 0x1480], 0
mov dword [ebx + 0x1474], 0
mov dword [ebx + 0x1478], 0x64
push dword [0x801a50]
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
push 0x790eb0
lea ecx, [ebx + 0x1488]
mov dword [ebx + 0x15a0], eax
mov dword [ebx + 0x15a4], 0
mov dword [ebx + 0x15bc], 0
mov dword [ebx + 0x15c0], 0
mov dword [ebx + 0x15c4], 0
mov dword [ebx + 0x15d8], 0
mov dword [ebx + 0x1748], 0
mov dword [ebx + 0x15c8], 0
mov dword [ebx + 0x15cc], 0
mov dword [ebx + 0x174c], 0
mov dword [ebx + 0x1750], 0
mov dword [ebx + 0x1754], 0
mov dword [ebx + 0x15d0], 0
mov dword [ebx + 0x15d4], 0
mov dword [ebx + 0xaec], 0
mov dword [ebx + 0x1768], 0
mov dword [ebx + 0x176c], 0
mov dword [ebx + 0x1770], 0
mov dword [ebx + 0x1774], 0
mov dword [ebx + 0x1778], 0
mov dword [ebx + 0x177c], 0
mov dword [ebx + 0x1780], 0
mov dword [ebx + 0x1784], 0
mov dword [ebx + 0x1788], 0
mov dword [ebx + 0x178c], 0
mov dword [ebx + 0x1790], 0
mov dword [ebx + 0x1794], 0
mov dword [ebx + 0x1798], 0
mov dword [ebx + 0x179c], 0
mov dword [ebx + 0x17a0], 0
mov dword [ebx + 0x17a4], 0
mov dword [ebx + 0x17a8], 0
mov dword [ebx + 0x17ac], 0
call fcn.00428a30
push 0x790eb0
lea ecx, [ebx + 0x148c]
call fcn.00428a30
mov dword [ebx + 0x1484], 0
lea ecx, [ebx + 0x1760]
mov eax, dword [0x7f7244]
mov dword [ebx + 0x9ec], eax
mov dword [ebx + 0x14bc], 0
mov dword [ebx + 0x9f0], 0
mov dword [ebx + 0x9f4], 0
mov dword [ebx + 0x9f8], 0
mov dword [ebx + 0x9fc], 0
mov dword [ebx + 0x14a0], 0
mov dword [ebx + 0x14a4], 0
mov dword [ebx + 0x14a8], 0
mov dword [ebx + 0x14ac], 0
push 0x790eb0
mov dword [ebx + 0x14b0], 0
call fcn.00428a30
push 0x790eb0
lea ecx, [ebx + 0x1764]
call fcn.00428a30
mov dword [ebx + 0x1490], 0xffffffff
lea ecx, [ebx + 0x1498]
push 0x790eb0
mov dword [ebx + 0x1494], 0
call fcn.00428a30
mov dword [ebx + 0x149c], 1
mov dword [ebx + 0xaf0], 0
mov dword [ebx + 0x1468], 0
mov dword [ebx + 0x18f4], 0
mov dword [ebx + 0x15a8], 0
mov dword [ebx + 0x15ac], 0
mov dword [ebx + 0x9c4], 0
mov dword [ebx + 0x9c8], 0
mov dword [ebx + 0x186c], 0
mov dword [ebx + 0x1874], 0xffffffff
push 0
mov dword [ebx + 0x1878], 0xffffffff
push 0
mov dword [ebx + 0x187c], 0xffffffff
mov dword [ebx + 0x1880], 0xffffffff
push 1
mov dword [ebx + 0x1884], 0
push 0
mov dword [ebx + 0x1888], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebx + 0x9c0], eax
lea eax, [ebx + 0x15e0]
mov dword [ebx + 0x17bc], 0
mov dword [ebx + 0x17c0], 0
mov dword [ebx + 0x17c4], 0
mov dword [ebx + 0x3cc], 0
mov dword [ebx + 0x18d8], 0
mov dword [0x7f8d30], eax
lea eax, [ebx + 0x18a8]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret