Function at 0x52615c
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x526164
push ebx
push esi
push edi
mov dword [ebp - 4], edx
xor eax, eax
push ebp
push 0x52642d
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x417378]
call fcn.00403390
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x5263f5
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x4364b4]
call fcn.004365b4
mov esi, eax
mov edx, 0x80000002
mov eax, esi
call fcn.00436690
xor ecx, ecx
mov edx, 0x526444
mov eax, esi
call fcn.004366f4
test al, al
je 0x526237
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00436948
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x526237
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x52647c
push 0x526488
lea ecx, [ebp - 0x14]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x14]
push 0x526498
lea ecx, [ebp - 0x1c]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
mov eax, esi
call fcn.00436ab4
push dword [ebp - 0x18]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404534
inc ebx
dec dword [ebp - 0x10]
jne 0x5261e5
mov eax, esi
call fcn.00436660
xor ecx, ecx
mov edx, 0x5264a4
mov eax, esi
call fcn.004366f4
test al, al
je 0x5262bf
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00436948
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5262bf
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x52647c
push 0x5264e0
lea ecx, [ebp - 0x20]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x20]
push 0x526498
lea ecx, [ebp - 0x28]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
mov eax, esi
call fcn.00436ab4
push dword [ebp - 0x24]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404534
inc ebx
dec dword [ebp - 0x10]
jne 0x52626d
mov eax, esi
call fcn.00436660
mov edx, 0x80000001
mov eax, esi
call fcn.00436690
xor ecx, ecx
mov edx, 0x526444
mov eax, esi
call fcn.004366f4
test al, al
je 0x526353
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00436948
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x526353
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x52647c
push 0x5264f4
lea ecx, [ebp - 0x2c]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x2c]
push 0x526498
lea ecx, [ebp - 0x34]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
mov eax, esi
call fcn.00436ab4
push dword [ebp - 0x30]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404534
inc ebx
dec dword [ebp - 0x10]
jne 0x526301
mov eax, esi
call fcn.00436660
xor ecx, ecx
mov edx, 0x5264a4
mov eax, esi
call fcn.004366f4
test al, al
je 0x5263db
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.00436880
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5263db
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
push dword [ebp - 8]
push 0x52647c
push 0x526504
lea ecx, [ebp - 0x38]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x38]
push 0x526498
lea ecx, [ebp - 0x40]
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x3c]
mov eax, esi
call fcn.00436ab4
push dword [ebp - 0x3c]
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404534
inc ebx
dec dword [ebp - 0x10]
jne 0x526389
mov eax, esi
call fcn.00436660
mov dl, 1
mov eax, esi
mov ecx, dword [eax]
call dword [ecx - 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5263ff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.00404208
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x526434
lea eax, [ebp - 0x40]
mov edx, 0xc
call fcn.004041d8
lea eax, [ebp - 8]
call fcn.004041b4
ret