Function at 0x516a18
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Create process on windows
Get number of processors
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports
Self delete
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x516a20
push ecx
push ebx
push esi
push edi
mov eax, 0x516578
call fcn.00407164
mov ebx, dword [0x534cd8]
xor eax, eax
push ebp
push 0x517d34
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, dword [0x534d20]
mov dword [eax], 0x1e
mov eax, ebx
mov edx, 0x517d4c
call fcn.00403e78
lea eax, [ebx + 4]
mov edx, 0x517d64
call fcn.00403e78
lea eax, [ebx + 8]
mov edx, 0x517d84
call fcn.00403e78
lea eax, [ebx + 0xc]
mov edx, 0x517d94
call fcn.00403e78
lea eax, [ebx + 0x10]
mov edx, 0x517dac
call fcn.00403e78
lea eax, [ebx + 0x14]
mov edx, 0x517dc8
call fcn.00403e78
lea eax, [ebx + 0x18]
mov edx, 0x517de4
call fcn.00403e78
lea eax, [ebx + 0x1c]
mov edx, 0x517e04
call fcn.00403e78
lea eax, [ebx + 0x20]
mov edx, 0x517e28
call fcn.00403e78
lea eax, [ebx + 0x24]
mov edx, 0x517e3c
call fcn.00403e78
lea eax, [ebx + 0x28]
mov edx, 0x517e70
call fcn.00403e78
lea eax, [ebx + 0x2c]
mov edx, 0x517e8c
call fcn.00403e78
lea eax, [ebx + 0x30]
mov edx, 0x517ea4
call fcn.00403e78
lea eax, [ebx + 0x34]
mov edx, 0x517ec4
call fcn.00403e78
lea eax, [ebx + 0x38]
mov edx, 0x517ef4
call fcn.00403e78
lea eax, [ebx + 0x3c]
mov edx, 0x517f48
call fcn.00403e78
lea eax, [ebx + 0x40]
mov edx, 0x517f5c
call fcn.00403e78
lea eax, [ebx + 0x44]
mov edx, 0x517f70
call fcn.00403e78
lea eax, [ebx + 0x48]
mov edx, 0x517fac
call fcn.00403e78
lea eax, [ebx + 0x4c]
mov edx, 0x517fe4
call fcn.00403e78
lea eax, [ebx + 0x50]
mov edx, 0x517ff8
call fcn.00403e78
lea eax, [ebx + 0x200]
mov edx, 0x518040
call fcn.00403e78
lea eax, [ebx + 0x54]
mov edx, 0x5180ac
call fcn.00403e78
lea eax, [ebx + 0x58]
mov edx, 0x5180bc
call fcn.00403e78
lea eax, [ebx + 0x5c]
mov edx, 0x518104
call fcn.00403e78
lea eax, [ebx + 0x60]
mov edx, 0x518118
call fcn.00403e78
lea eax, [ebx + 0x64]
mov edx, 0x51813c
call fcn.00403e78
lea eax, [ebx + 0x68]
mov edx, 0x518160
call fcn.00403e78
lea eax, [ebx + 0x204]
mov edx, 0x51819c
call fcn.00403e78
lea eax, [ebx + 0x6c]
mov edx, 0x5181ac
call fcn.00403e78
lea eax, [ebx + 0x70]
mov edx, 0x5181f4
call fcn.00403e78
lea eax, [ebx + 0x74]
mov edx, 0x518208
call fcn.00403e78
lea eax, [ebx + 0x78]
mov edx, 0x518228
call fcn.00403e78
lea eax, [ebx + 0x7c]
mov edx, 0x518248
call fcn.00403e78
lea eax, [ebx + 0x80]
mov edx, 0x518268
call fcn.00403e78
lea eax, [ebx + 0x84]
mov edx, 0x51827c
call fcn.00403e78
lea eax, [ebx + 0x88]
mov edx, 0x518290
call fcn.00403e78
lea eax, [ebx + 0x8c]
mov edx, 0x5182a4
call fcn.00403e78
lea eax, [ebx + 0x90]
mov edx, 0x5182c0
call fcn.00403e78
lea eax, [ebx + 0x94]
mov edx, 0x5182d8
call fcn.00403e78
lea eax, [ebx + 0x98]
mov edx, 0x5182f8
call fcn.00403e78
lea eax, [ebx + 0x9c]
mov edx, 0x518314
call fcn.00403e78
lea eax, [ebx + 0xa0]
mov edx, 0x518348
call fcn.00403e78
lea eax, [ebx + 0xa4]
mov edx, 0x518368
call fcn.00403e78
lea eax, [ebx + 0xa8]
mov edx, 0x51837c
call fcn.00403e78
lea eax, [ebx + 0xac]
mov edx, 0x5183a0
call fcn.00403e78
lea eax, [ebx + 0xb0]
mov edx, 0x5183c4
call fcn.00403e78
lea eax, [ebx + 0x20c]
mov edx, 0x51844c
call fcn.00403e78
lea eax, [ebx + 0x210]
mov edx, 0x51845c
call fcn.00403e78
lea eax, [ebx + 0xb4]
mov edx, 0x5184b0
call fcn.00403e78
lea eax, [ebx + 0xb8]
mov edx, 0x518500
call fcn.00403e78
lea eax, [ebx + 0xbc]
mov edx, 0x518524
call fcn.00403e78
lea eax, [ebx + 0xc0]
mov edx, 0x51856c
call fcn.00403e78
lea eax, [ebx + 0xc4]
mov edx, 0x51858c
call fcn.00403e78
lea eax, [ebx + 0xc8]
mov edx, 0x5185ac
call fcn.00403e78
lea eax, [ebx + 0xcc]
mov edx, 0x5185e0
call fcn.00403e78
lea eax, [ebx + 0xd0]
mov edx, 0x5185fc
call fcn.00403e78
lea eax, [ebx + 0xd4]
mov edx, 0x51861c
call fcn.00403e78
lea eax, [ebx + 0xd8]
mov edx, 0x518634
call fcn.00403e78
lea eax, [ebx + 0xdc]
mov edx, 0x518674
call fcn.00403e78
lea eax, [ebx + 0xe0]
mov edx, 0x518698
call fcn.00403e78
lea eax, [ebx + 0xe4]
mov edx, 0x5186c4
call fcn.00403e78
lea eax, [ebx + 0x220]
mov edx, 0x51819c
call fcn.00403e78
lea eax, [ebx + 0x224]
mov edx, 0x5186f0
call fcn.00403e78
lea eax, [ebx + 0xe8]
mov edx, 0x51872c
call fcn.00403e78
lea eax, [ebx + 0xec]
mov edx, 0x518748
call fcn.00403e78
lea eax, [ebx + 0x218]
mov edx, 0x518798
call fcn.00403e78
lea eax, [ebx + 0x21c]
mov edx, 0x5187b0
call fcn.00403e78
lea eax, [ebx + 0xf0]
mov edx, 0x518818
call fcn.00403e78
lea eax, [ebx + 0xf4]
mov edx, 0x518844
call fcn.00403e78
lea eax, [ebx + 0xf8]
mov edx, 0x51888c
call fcn.00403e78
lea eax, [ebx + 0xfc]
mov edx, 0x5188a4
call fcn.00403e78
lea eax, [ebx + 0x100]
mov edx, 0x5188d0
call fcn.00403e78
lea eax, [ebx + 0x104]
mov edx, 0x5188f0
call fcn.00403e78
lea eax, [ebx + 0x108]
mov edx, 0x518928
call fcn.00403e78
lea eax, [ebx + 0x10c]
mov edx, 0x518974
call fcn.00403e78
lea eax, [ebx + 0x110]
mov edx, 0x5189a4
call fcn.00403e78
lea eax, [ebx + 0x114]
mov edx, 0x5189c4
call fcn.00403e78
lea eax, [ebx + 0x118]
mov edx, 0x5189d8
call fcn.00403e78
lea eax, [ebx + 0x11c]
mov edx, 0x5189f4
call fcn.00403e78
lea eax, [ebx + 0x120]
mov edx, 0x518a24
call fcn.00403e78
lea eax, [ebx + 0x124]
mov edx, 0x518a40
call fcn.00403e78
lea eax, [ebx + 0x128]
mov edx, 0x518a60
call fcn.00403e78
lea eax, [ebx + 0x12c]
mov edx, 0x518a88
call fcn.00403e78
lea eax, [ebx + 0x130]
mov edx, 0x518ab4
call fcn.00403e78
lea eax, [ebx + 0x134]
mov edx, 0x518ae0
call fcn.00403e78
lea eax, [ebx + 0x138]
mov edx, 0x518b04
call fcn.00403e78
lea eax, [ebx + 0x13c]
mov edx, 0x518b2c
call fcn.00403e78
lea eax, [ebx + 0x140]
mov edx, 0x518b50
call fcn.00403e78
lea eax, [ebx + 0x144]
mov edx, 0x518b68
call fcn.00403e78
lea eax, [ebx + 0x148]
mov edx, 0x518a60
call fcn.00403e78
lea eax, [ebx + 0x14c]
mov edx, 0x518b84
call fcn.00403e78
lea eax, [ebx + 0x150]
mov edx, 0x518b9c
call fcn.00403e78
lea eax, [ebx + 0x154]
mov edx, 0x518bb0
call fcn.00403e78
lea eax, [ebx + 0x158]
mov edx, 0x518bd0
call fcn.00403e78
lea eax, [ebx + 0x15c]
mov edx, 0x518bf4
call fcn.00403e78
lea eax, [ebx + 0x160]
mov edx, 0x518c10
call fcn.00403e78
lea eax, [ebx + 0x164]
mov edx, 0x518c38
call fcn.00403e78
lea eax, [ebx + 0x168]
mov edx, 0x518c60
call fcn.00403e78
lea eax, [ebx + 0x16c]
mov edx, 0x518c8c
call fcn.00403e78
lea eax, [ebx + 0x170]
mov edx, 0x518cbc
call fcn.00403e78
lea eax, [ebx + 0x174]
mov edx, 0x518cd0
call fcn.00403e78
lea eax, [ebx + 0x178]
mov edx, 0x518ce0
call fcn.00403e78
lea eax, [ebx + 0x17c]
mov edx, 0x518d04
call fcn.00403e78
lea eax, [ebx + 0x180]
mov edx, 0x518d54
call fcn.00403e78
lea eax, [ebx + 0x184]
mov edx, 0x518d68
call fcn.00403e78
lea eax, [ebx + 0x188]
mov edx, 0x518d80
call fcn.00403e78
lea eax, [ebx + 0x18c]
mov edx, 0x518dd4
call fcn.00403e78
lea eax, [ebx + 0x190]
mov edx, 0x518df4
call fcn.00403e78
lea eax, [ebx + 0x194]
mov edx, 0x518e3c
call fcn.00403e78
lea eax, [ebx + 0x198]
mov edx, 0x518e58
call fcn.00403e78
lea eax, [ebx + 0x19c]
mov edx, 0x518e70
call fcn.00403e78
lea eax, [ebx + 0x1a0]
mov edx, 0x518ec8
call fcn.00403e78
lea eax, [ebx + 0x1a4]
mov edx, 0x518f0c
call fcn.00403e78
lea eax, [ebx + 0x1a8]
mov edx, 0x518f30
call fcn.00403e78
lea eax, [ebx + 0x1ac]
mov edx, 0x518f50
call fcn.00403e78
lea eax, [ebx + 0x1b0]
mov edx, 0x518f68
call fcn.00403e78
lea eax, [ebx + 0x1b4]
mov edx, 0x518fa4
call fcn.00403e78
lea eax, [ebx + 0x1b8]
mov edx, 0x518fb8
call fcn.00403e78
lea eax, [ebx + 0x1bc]
mov edx, 0x518fdc
call fcn.00403e78
lea eax, [ebx + 0x1c0]
mov edx, 0x519000
call fcn.00403e78
lea eax, [ebx + 0x1c4]
mov edx, 0x519010
call fcn.00403e78
lea eax, [ebx + 0x1c8]
mov edx, 0x519020
call fcn.00403e78
lea eax, [ebx + 0x1cc]
mov edx, 0x519034
call fcn.00403e78
lea eax, [ebx + 0x1d0]
mov edx, 0x519054
call fcn.00403e78
lea eax, [ebx + 0x1d4]
mov edx, 0x519074
call fcn.00403e78
lea eax, [ebx + 0x1d8]
mov edx, 0x519094
call fcn.00403e78
lea eax, [ebx + 0x1dc]
mov edx, 0x5190b4
call fcn.00403e78
lea eax, [ebx + 0x1e0]
mov edx, 0x5190d8
call fcn.00403e78
lea eax, [ebx + 0x1e4]
mov edx, 0x5190f4
call fcn.00403e78
lea eax, [ebx + 0x1e8]
mov edx, 0x519110
call fcn.00403e78
lea eax, [ebx + 0x1ec]
mov edx, 0x519124
call fcn.00403e78
lea eax, [ebx + 0x1f0]
mov edx, 0x519154
call fcn.00403e78
lea eax, [ebx + 0x1f4]
mov edx, 0x517d64
call fcn.00403e78
lea eax, [ebx + 0x1f8]
mov edx, 0x517d94
call fcn.00403e78
lea eax, [ebx + 0x1fc]
mov edx, 0x519168
call fcn.00403e78
lea eax, [ebx + 0x228]
mov edx, 0x519184
call fcn.00403e78
lea eax, [ebx + 0x22c]
mov edx, 0x5191a0
call fcn.00403e78
lea eax, [ebx + 0x230]
mov edx, 0x5191c0
call fcn.00403e78
lea eax, [ebx + 0x234]
mov edx, 0x5191dc
call fcn.00403e78
lea eax, [ebx + 0x238]
mov edx, 0x51926c
call fcn.00403e78
lea eax, [ebx + 0x23c]
mov edx, 0x51929c
call fcn.00403e78
lea eax, [ebx + 0x240]
mov edx, 0x5192f4
call fcn.00403e78
lea eax, [ebx + 0x244]
mov edx, 0x519314
call fcn.00403e78
lea eax, [ebx + 0x248]
mov edx, 0x519348
call fcn.00403e78
lea eax, [ebx + 0x24c]
mov edx, 0x519360
call fcn.00403e78
lea eax, [ebx + 0x250]
mov edx, 0x519418
call fcn.00403e78
lea eax, [ebx + 0x254]
mov edx, 0x51942c
call fcn.00403e78
lea eax, [ebx + 0x258]
mov edx, 0x519450
call fcn.00403e78
lea eax, [ebx + 0x25c]
mov edx, 0x519464
call fcn.00403e78
lea eax, [ebx + 0x260]
mov edx, 0x519494
call fcn.00403e78
lea eax, [ebx + 0x264]
mov edx, 0x5194c4
call fcn.00403e78
lea eax, [ebx + 0x268]
mov edx, 0x5194dc
call fcn.00403e78
lea eax, [ebx + 0x26c]
mov edx, 0x5194f0
call fcn.00403e78
lea eax, [ebx + 0x270]
mov edx, 0x51950c
call fcn.00403e78
lea eax, [ebx + 0x274]
mov edx, 0x51952c
call fcn.00403e78
lea eax, [ebx + 0x278]
mov edx, 0x519558
call fcn.00403e78
lea eax, [ebx + 0x27c]
mov edx, 0x519584
call fcn.00403e78
lea eax, [ebx + 0x280]
mov edx, 0x5195a0
call fcn.00403e78
lea eax, [ebx + 0x284]
mov edx, 0x5195d0
call fcn.00403e78
lea eax, [ebx + 0x288]
mov edx, 0x5195e4
call fcn.00403e78
lea eax, [ebx + 0x28c]
mov edx, 0x5195f8
call fcn.00403e78
lea eax, [ebx + 0x290]
mov edx, 0x519610
call fcn.00403e78
lea eax, [ebx + 0x294]
mov edx, 0x51962c
call fcn.00403e78
lea eax, [ebx + 0x298]
mov edx, 0x519658
call fcn.00403e78
lea eax, [ebx + 0x29c]
mov edx, 0x519694
call fcn.00403e78
lea eax, [ebx + 0x2a0]
mov edx, 0x5196bc
call fcn.00403e78
lea eax, [ebx + 0x2a8]
mov edx, 0x5196e8
call fcn.00403e78
lea eax, [ebx + 0x2ac]
mov edx, 0x519714
call fcn.00403e78
lea eax, [ebx + 0x2b0]
mov edx, 0x519728
call fcn.00403e78
lea eax, [ebx + 0x2b4]
mov edx, 0x51974c
call fcn.00403e78
lea eax, [ebx + 0x2b8]
mov edx, 0x519764
call fcn.00403e78
lea eax, [ebx + 0x2bc]
mov edx, 0x519774
call fcn.00403e78
lea eax, [ebx + 0x2c0]
mov edx, 0x519794
call fcn.00403e78
lea eax, [ebx + 0x2c4]
mov edx, 0x5197b4
call fcn.00403e78
lea eax, [ebx + 0x2c8]
mov edx, 0x5197cc
call fcn.00403e78
lea eax, [ebx + 0x2cc]
mov edx, 0x5197dc
call fcn.00403e78
lea edx, [ebp - 0x14]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.004098b0
mov eax, dword [ebp - 0x10]
mov edx, 0x5197f4
call fcn.004041b4
je 0x51763d
lea edx, [ebp - 0x1c]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.004098b0
mov eax, dword [ebp - 0x18]
mov edx, 0x519808
call fcn.004041b4
je 0x51763d
lea edx, [ebp - 0x24]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.004098b0
mov eax, dword [ebp - 0x20]
mov edx, 0x51981c
call fcn.004041b4
jne 0x51770d
xor eax, eax
push ebp
push 0x51765f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x519834
call fcn.0050c3f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x517669
xor ebx, ebx
xor eax, eax
push ebp
push 0x5176b2
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x2c]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.004097e8
lea eax, [ebp - 0x28]
mov edx, 0x519834
call fcn.004040ac
mov eax, dword [ebp - 0x28]
call fcn.00458010
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5176be
test bl, bl
jne 0x51763d
push 5
push 0
push 0
lea edx, [ebp - 0x34]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.004097e8
lea eax, [ebp - 0x30]
mov edx, 0x519834
call fcn.004040ac
mov eax, dword [ebp - 0x30]
call fcn.00404268
push eax
push 0x519844
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x517d19
lea edx, [ebp - 0x3c]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
call fcn.004097e8
lea eax, [ebp - 0x38]
mov edx, 0x51981c
call fcn.004040ac
mov eax, dword [ebp - 0x38]
call fcn.00409698
lea edx, [ebp - 0x44]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.004097e8
lea eax, [ebp - 0x40]
mov edx, 0x5197f4
call fcn.004040ac
mov eax, dword [ebp - 0x40]
call fcn.00409698
lea edx, [ebp - 0x4c]
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.00450c28
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.004097e8
lea eax, [ebp - 0x48]
mov edx, 0x519808
call fcn.004040ac
mov eax, dword [ebp - 0x48]
call fcn.00409698
mov eax, dword [0x535040]
mov eax, dword [eax]
call fcn.004506c8
mov eax, dword [0x535040]
mov eax, dword [eax]
mov edx, 0x519854
call fcn.004502cc
xor eax, eax
push ebp
push 0x517939
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x458670]
call fcn.00458770
mov dword [0x537be8], eax
xor eax, eax
push ebp
push 0x51790f
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000001
mov eax, dword [0x537be8]
call fcn.00458810
xor ecx, ecx
xor edx, edx
mov eax, dword [0x537be8]
call fcn.00458954
test al, al
je 0x517905
mov edx, 0x519880
mov eax, dword [0x537be8]
call fcn.00459224
test al, al
je 0x51783d
mov edx, 0x519880
mov eax, dword [0x537be8]
call fcn.00459020
test eax, eax
jns 0x517832
add eax, 7
sar eax, 3
mov edx, dword [0x534d20]
mov dword [edx], eax
mov edx, 0x519890
mov eax, dword [0x537be8]
call fcn.00459224
test al, al
je 0x5178c7
mov edx, 0x519890
mov eax, dword [0x537be8]
call fcn.004590d0
fstp qword [ebp - 0x54]
wait
call fcn.0040a814
fcomp qword [ebp - 0x54]
fnstsw ax
sahf
je 0x5178c7
mov edx, 0x519880
mov eax, dword [0x537be8]
call fcn.00459224
test al, al
je 0x5178bf
mov edx, 0x519880
mov eax, dword [0x537be8]
call fcn.00459020
test eax, eax
jns 0x517899
add eax, 7
sar eax, 3
mov edx, dword [0x534d20]
mov dword [edx], eax
mov eax, dword [0x534d20]
dec dword [eax]
mov eax, dword [0x534d20]
cmp dword [eax], 1
jge 0x5178c7
mov eax, dword [0x534bcc]
mov byte [eax], 1
jmp 0x5178c7
mov eax, dword [0x534bcc]
mov byte [eax], 1
mov eax, dword [0x534bcc]
cmp byte [eax], 0
jne 0x517905
call fcn.0040a814
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 0x519890
mov eax, dword [0x537be8]
call fcn.004590bc
mov eax, dword [0x534d20]
mov ecx, dword [eax]
shl ecx, 3
mov edx, 0x519880
mov eax, dword [0x537be8]
call fcn.0045900c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x517921
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x517940
mov eax, dword [0x537be8]
call fcn.004030bc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x517d3b
lea eax, [ebp - 0x4c]
mov edx, 0x10
call fcn.00403e48
ret