Function at 0x516f90
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x5cefcb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
mov dword [esp + 4], esi
mov eax, dword [0x636cb4]
mov dword [esp + 0x10], 0x4f
test eax, eax
je 0x516fee
push 0x636cc8
call fcn.00517890
push 0x636cc4
call fcn.00517890
push 0x636cb8
call fcn.00517890
push 0x636cbc
call fcn.00517890
add esp, 0x10
call fcn.00517620
lea ecx, [esi + 0x768]
mov byte [esp + 0x10], 0x4e
call fcn.00516440
lea ecx, [esi + 0x750]
mov byte [esp + 0x10], 0x4d
call fcn.00516440
lea ecx, [esi + 0x738]
mov byte [esp + 0x10], 0x4c
call fcn.00516440
lea ecx, [esi + 0x720]
mov byte [esp + 0x10], 0x4b
call fcn.00516440
lea ecx, [esi + 0x708]
mov byte [esp + 0x10], 0x4a
call fcn.00516440
lea ecx, [esi + 0x6f0]
mov byte [esp + 0x10], 0x49
call fcn.00516440
lea ecx, [esi + 0x6d8]
mov byte [esp + 0x10], 0x48
call fcn.00516440
lea ecx, [esi + 0x6c0]
mov byte [esp + 0x10], 0x47
call fcn.00516440
lea ecx, [esi + 0x6a8]
mov byte [esp + 0x10], 0x46
call fcn.00516440
lea ecx, [esi + 0x690]
mov byte [esp + 0x10], 0x45
call fcn.00516440
lea ecx, [esi + 0x678]
mov byte [esp + 0x10], 0x44
call fcn.00516440
lea ecx, [esi + 0x660]
mov byte [esp + 0x10], 0x43
call fcn.00516440
lea ecx, [esi + 0x648]
mov byte [esp + 0x10], 0x42
call fcn.00516440
lea ecx, [esi + 0x630]
mov byte [esp + 0x10], 0x41
call fcn.00516440
lea ecx, [esi + 0x618]
mov byte [esp + 0x10], 0x40
call fcn.00516440
lea ecx, [esi + 0x600]
mov byte [esp + 0x10], 0x3f
call fcn.00516440
lea ecx, [esi + 0x5e8]
mov byte [esp + 0x10], 0x3e
call fcn.00516440
lea ecx, [esi + 0x5d0]
mov byte [esp + 0x10], 0x3d
call fcn.00516440
lea ecx, [esi + 0x5b8]
mov byte [esp + 0x10], 0x3c
call fcn.00516440
lea ecx, [esi + 0x5a0]
mov byte [esp + 0x10], 0x3b
call fcn.00516440
lea ecx, [esi + 0x588]
mov byte [esp + 0x10], 0x3a
call fcn.00516440
lea ecx, [esi + 0x570]
mov byte [esp + 0x10], 0x39
call fcn.00516440
lea ecx, [esi + 0x558]
mov byte [esp + 0x10], 0x38
call fcn.00516440
lea ecx, [esi + 0x540]
mov byte [esp + 0x10], 0x37
call fcn.00516440
lea ecx, [esi + 0x528]
mov byte [esp + 0x10], 0x36
call fcn.00516440
lea ecx, [esi + 0x510]
mov byte [esp + 0x10], 0x35
call fcn.00516440
lea ecx, [esi + 0x4f8]
mov byte [esp + 0x10], 0x34
call fcn.00516440
lea ecx, [esi + 0x4e0]
mov byte [esp + 0x10], 0x33
call fcn.00516440
lea ecx, [esi + 0x4c8]
mov byte [esp + 0x10], 0x32
call fcn.00516440
lea ecx, [esi + 0x4b0]
mov byte [esp + 0x10], 0x31
call fcn.00516440
lea ecx, [esi + 0x498]
mov byte [esp + 0x10], 0x30
call fcn.00516440
lea ecx, [esi + 0x480]
mov byte [esp + 0x10], 0x2f
call fcn.00516440
lea ecx, [esi + 0x468]
mov byte [esp + 0x10], 0x2e
call fcn.00516440
lea ecx, [esi + 0x450]
mov byte [esp + 0x10], 0x2d
call fcn.00516440
lea ecx, [esi + 0x438]
mov byte [esp + 0x10], 0x2c
call fcn.00516440
lea ecx, [esi + 0x420]
mov byte [esp + 0x10], 0x2b
call fcn.00516440
lea ecx, [esi + 0x408]
mov byte [esp + 0x10], 0x2a
call fcn.00516440
lea ecx, [esi + 0x3f0]
mov byte [esp + 0x10], 0x29
call fcn.00516440
lea ecx, [esi + 0x3d8]
mov byte [esp + 0x10], 0x28
call fcn.00516440
lea ecx, [esi + 0x3c0]
mov byte [esp + 0x10], 0x27
call fcn.00516440
lea ecx, [esi + 0x3a8]
mov byte [esp + 0x10], 0x26
call fcn.00516440
lea ecx, [esi + 0x390]
mov byte [esp + 0x10], 0x25
call fcn.00516440
lea ecx, [esi + 0x378]
mov byte [esp + 0x10], 0x24
call fcn.00516440
lea ecx, [esi + 0x360]
mov byte [esp + 0x10], 0x23
call fcn.00516440
lea ecx, [esi + 0x348]
mov byte [esp + 0x10], 0x22
call fcn.00516440
lea ecx, [esi + 0x330]
mov byte [esp + 0x10], 0x21
call fcn.00516440
lea ecx, [esi + 0x318]
mov byte [esp + 0x10], 0x20
call fcn.00516440
lea ecx, [esi + 0x300]
mov byte [esp + 0x10], 0x1f
call fcn.00516440
lea ecx, [esi + 0x2e8]
mov byte [esp + 0x10], 0x1e
call fcn.00516440
lea ecx, [esi + 0x2d0]
mov byte [esp + 0x10], 0x1d
call fcn.00516440
lea ecx, [esi + 0x2b8]
mov byte [esp + 0x10], 0x1c
call fcn.00516440
lea ecx, [esi + 0x2a0]
mov byte [esp + 0x10], 0x1b
call fcn.00516440
lea ecx, [esi + 0x288]
mov byte [esp + 0x10], 0x1a
call fcn.00516440
lea ecx, [esi + 0x270]
mov byte [esp + 0x10], 0x19
call fcn.00516440
lea ecx, [esi + 0x258]
mov byte [esp + 0x10], 0x18
call fcn.00516440
lea ecx, [esi + 0x240]
mov byte [esp + 0x10], 0x17
call fcn.00516440
lea ecx, [esi + 0x228]
mov byte [esp + 0x10], 0x16
call fcn.00516440
lea ecx, [esi + 0x210]
mov byte [esp + 0x10], 0x15
call fcn.00516440
lea ecx, [esi + 0x1f8]
mov byte [esp + 0x10], 0x14
call fcn.00516440
lea ecx, [esi + 0x1e0]
mov byte [esp + 0x10], 0x13
call fcn.00516440
lea ecx, [esi + 0x1c8]
mov byte [esp + 0x10], 0x12
call fcn.00516440
lea ecx, [esi + 0x1b0]
mov byte [esp + 0x10], 0x11
call fcn.00516440
lea ecx, [esi + 0x198]
mov byte [esp + 0x10], 0x10
call fcn.00516440
lea ecx, [esi + 0x180]
mov byte [esp + 0x10], 0xf
call fcn.00516440
lea ecx, [esi + 0x168]
mov byte [esp + 0x10], 0xe
call fcn.00516440
lea ecx, [esi + 0x150]
mov byte [esp + 0x10], 0xd
call fcn.00516440
lea ecx, [esi + 0x138]
mov byte [esp + 0x10], 0xc
call fcn.00516440
lea ecx, [esi + 0x120]
mov byte [esp + 0x10], 0xb
call fcn.00516440
lea ecx, [esi + 0x108]
mov byte [esp + 0x10], 0xa
call fcn.00516440
lea ecx, [esi + 0xf0]
mov byte [esp + 0x10], 9
call fcn.00516440
lea ecx, [esi + 0xd8]
mov byte [esp + 0x10], 8
call fcn.00516440
lea ecx, [esi + 0xc0]
mov byte [esp + 0x10], 7
call fcn.00516440
lea ecx, [esi + 0xa8]
mov byte [esp + 0x10], 6
call fcn.00516440
lea ecx, [esi + 0x90]
mov byte [esp + 0x10], 5
call fcn.00516440
lea ecx, [esi + 0x78]
mov byte [esp + 0x10], 4
call fcn.00516440
lea ecx, [esi + 0x60]
mov byte [esp + 0x10], 3
call fcn.00516440
lea ecx, [esi + 0x48]
mov byte [esp + 0x10], 2
call fcn.00516440
lea ecx, [esi + 0x30]
mov byte [esp + 0x10], 1
call fcn.00516440
lea ecx, [esi + 0x18]
mov byte [esp + 0x10], 0
call fcn.00516440
mov ecx, esi
mov dword [esp + 0x10], 0xffffffff
call fcn.00516440
mov ecx, dword [esp + 8]
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret