Function at 0x573290
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58dd47
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x5ebfc4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
push 0
call fcn.00408a65
mov eax, dword [eax + 4]
push dword [eax + 0xdc]
call fcn.00408a65
push ecx
mov esi, esp
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x18], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xd4]
sub eax, 0x10
push eax
call fcn.00401f10
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov dword [ebp - 4], 0
call fcn.00408a65
mov eax, dword [eax + 4]
push dword [eax + 0xd8]
call fcn.00408a65
push ecx
mov esi, esp
mov dword [ebp - 0x18], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xd0]
sub eax, 0x10
push eax
call fcn.00401f10
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
mov dword [ebp - 4], 0xffffffff
call fcn.00576e30
mov dword [ebp - 4], 1
mov dword [edi], vtable.CDiskMarkDlg.0
call fcn.00407271
test eax, eax
je 0x5739df
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
cmp ecx, 0x5940e4
jne 0x5739e9
lock inc dword [eax + 0x14]
add eax, 8
add eax, 0x10
mov dword [edi + 0x4d8], eax
mov byte [ebp - 4], 2
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x5739f2
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x4dc], eax
mov byte [ebp - 4], 3
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x5739f9
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x4e0], eax
mov byte [ebp - 4], 4
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a00
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x4e4], eax
mov byte [ebp - 4], 5
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a07
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x4e8], eax
mov byte [ebp - 4], 6
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a0e
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x4ec], eax
mov byte [ebp - 4], 7
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a15
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x4f0], eax
mov byte [ebp - 4], 8
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a1c
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x570], eax
mov byte [ebp - 4], 9
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a23
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x574], eax
mov byte [ebp - 4], 0xa
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a2a
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x578], eax
mov byte [ebp - 4], 0xb
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a31
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x57c], eax
mov byte [ebp - 4], 0xc
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a38
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x580], eax
mov byte [ebp - 4], 0xd
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a3f
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x584], eax
mov byte [ebp - 4], 0xe
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a46
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x588], eax
mov byte [ebp - 4], 0xf
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a4d
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x58c], eax
mov byte [ebp - 4], 0x10
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a54
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x590], eax
mov byte [ebp - 4], 0x11
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a5b
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x594], eax
mov byte [ebp - 4], 0x12
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a62
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x598], eax
mov byte [ebp - 4], 0x13
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x5739df
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x573a69
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [edi + 0x59c], eax
lea ecx, [edi + 0x5c0]
mov byte [ebp - 4], 0x14
call fcn.0057d360
lea ecx, [edi + 0x7a8]
mov byte [ebp - 4], 0x15
call fcn.0057d360
lea ecx, [edi + 0x990]
mov byte [ebp - 4], 0x16
call fcn.0057d360
lea ecx, [edi + 0xb78]
mov byte [ebp - 4], 0x17
call fcn.0057d360
lea ecx, [edi + 0xd60]
mov byte [ebp - 4], 0x18
call fcn.0057d360
lea ecx, [edi + 0xf48]
mov byte [ebp - 4], 0x19
call fcn.00561f70
lea ecx, [edi + 0x10d8]
mov byte [ebp - 4], 0x1a
call fcn.0055fea0
lea ecx, [edi + 0x12b0]
mov byte [ebp - 4], 0x1b
call fcn.0055fea0
lea ecx, [edi + 0x1488]
mov byte [ebp - 4], 0x1c
call fcn.0055fea0
lea ecx, [edi + 0x1660]
mov byte [ebp - 4], 0x1d
call fcn.0055fea0
lea ecx, [edi + 0x1838]
mov byte [ebp - 4], 0x1e
call fcn.0055fea0
lea ecx, [edi + 0x1a10]
mov byte [ebp - 4], 0x1f
call fcn.0055fea0
lea ecx, [edi + 0x1be8]
mov byte [ebp - 4], 0x20
call fcn.0057d360
lea ecx, [edi + 0x1dd0]
mov byte [ebp - 4], 0x21
call fcn.0057d360
lea ecx, [edi + 0x1fb8]
mov byte [ebp - 4], 0x22
call fcn.0057d360
lea ecx, [edi + 0x21a0]
mov byte [ebp - 4], 0x23
call fcn.0057d360
lea ecx, [edi + 0x2388]
mov byte [ebp - 4], 0x24
call fcn.0057d360
lea ecx, [edi + 0x2570]
mov byte [ebp - 4], 0x25
call fcn.0057d360
lea ecx, [edi + 0x2758]
mov byte [ebp - 4], 0x26
call fcn.0057d360
mov byte [ebp - 4], 0x27
lea ecx, [edi + 0x2940]
call fcn.0057d360
lea esi, [edi + 0x2b28]
mov byte [ebp - 4], 0x28
mov ecx, esi
mov dword [ebp - 0x18], esi
call fcn.0040956f
mov dword [esi], vtable.CEditEx.0
mov dword [esi + 0x84], 0
mov dword [esi + 0x80], vtable.CFont.0
lea ecx, [edi + 0x2bb0]
mov byte [ebp - 4], 0x29
call fcn.00561f70
lea ecx, [edi + 0x2d40]
mov byte [ebp - 4], 0x2a
call fcn.00561f70
lea ecx, [edi + 0x2ed0]
mov byte [ebp - 4], 0x2b
call fcn.00561f70
lea ecx, [edi + 0x3060]
mov byte [ebp - 4], 0x2c
call fcn.00561f70
lea ecx, [edi + 0x31f0]
mov byte [ebp - 4], 0x2d
call fcn.0057d360
lea ecx, [edi + 0x33d8]
mov byte [ebp - 4], 0x2e
call fcn.0057d360
mov byte [ebp - 4], 0x2f
call fcn.00408a65
call fcn.00408a65
mov esi, dword [sym.imp.USER32.dll_LoadIconW]
push 0x82
mov eax, dword [eax + 0xc]
push eax
call esi
mov dword [edi + 0x5a0], eax
call fcn.00408a65
call fcn.00408a65
push 0x8a
mov eax, dword [eax + 0xc]
push eax
call esi
mov dword [edi + 0x5a4], eax
mov dword [edi + 0x5b4], 0
mov dword [edi + 0x5b8], 0
mov dword [edi + 0x5bc], 0
call fcn.00408a65
mov ebx, dword [edi + 0x59c]
sub ebx, 0x10
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xe0]
lea edx, [ecx - 0x10]
cmp edx, ebx
je 0x573973
cmp dword [ebx + 0xc], 0
jl 0x573964
mov eax, dword [edx]
cmp eax, dword [ebx]
jne 0x573964
push edx
call fcn.00401f10
add esp, 4
mov ecx, ebx
mov esi, eax
call fcn.004029d0
lea eax, [esi + 0x10]
mov dword [edi + 0x59c], eax
jmp 0x573973
push dword [ecx - 0xc]
push ecx
lea ecx, [edi + 0x59c]
call fcn.00402430
call fcn.00408a65
mov eax, dword [eax + 4]
push dword [eax + 0xe4]
lea eax, [edi + 0xf8]
push 0x104
push eax
call fcn.0054548f
add esp, 0xc
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
push 8
mov dword [edi + 0x560], eax
call fcn.00406393
add esp, 4
mov dword [ebp - 0x18], eax
test eax, eax
je 0x5739c1
mov dword [eax + 4], 0
mov dword [eax], vtable.CBrush.0
jmp 0x5739c3
xor eax, eax
mov dword [edi + 0x35c0], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.00402ab0
mov ecx, eax
call edx
jmp 0x57336c
call edx
jmp 0x57339f
call edx
jmp 0x5733d2
call edx
jmp 0x573405
call edx
jmp 0x573438
call edx
jmp 0x57346b
call edx
jmp 0x57349e
call edx
jmp 0x5734d1
call edx
jmp 0x573504
call edx
jmp 0x573537
call edx
jmp 0x57356a
call edx
jmp 0x57359d
call edx
jmp 0x5735d0
call edx
jmp 0x573603
call edx
jmp 0x573636
call edx
jmp 0x573669
call edx
jmp 0x57369c
call edx
jmp 0x5736cf
call edx
jmp 0x573702