Function at 0x526ac0
Capabilities:
Inspect load icon resource

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57c4cd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x98
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xorps xmm0, xmm0
push edi
push 0
mov edi, ecx
mov dword [ebp - 0x78], 0
movlpd qword [ebp - 0x70], xmm0
movlpd qword [ebp - 0x60], xmm0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x7c], 0x30
mov dword [ebp - 0x74], 0x5273d0
call esi
sub esp, 0x18
mov dword [ebp - 0x68], eax
mov ecx, esp
push 0x5c5484
call fcn.0042d2f0
lea ecx, [ebp - 0x18]
call fcn.00443a10
add esp, 0x18
lea edx, [ebp - 0xa4]
mov ecx, dword [eax]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x526b55
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526b81
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x67
lea eax, [ebp - 0xa4]
push 0
mov dword [ebp - 0x54], eax
call esi
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x526e37
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x526f95
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push str.WUZ5jTCk0DFigsqJQ0
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0
call fcn.0042db40
test al, al
jne 0x526bf0
push 0x13
push str.WUZ5jTCk0DFigsqJQ0
lea ecx, [ebp - 0x18]
call fcn.0042de80
mov dword [ebp - 4], 1
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x526f9f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.NjNvdTURWUCA5aUUhwUc0swBKERB
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.0042db40
test al, al
jne 0x526c37
push 0x1d
push str.NjNvdTURWUCA5aUUhwUc0swBKERB
lea ecx, [ebp - 0x28]
call fcn.0042de80
mov byte [ebp - 4], 3
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x526fa9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x5908b4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.0042db40
test al, al
jne 0x526c7b
push 0
push 0x5908b4
lea ecx, [ebp - 0x24]
call fcn.0042de80
mov byte [ebp - 4], 5
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x526fb3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x5908b4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.0042db40
test al, al
jne 0x526cbf
push 0
push 0x5908b4
lea ecx, [ebp - 0x20]
call fcn.0042de80
mov byte [ebp - 4], 7
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x526fbd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x5908b4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.0042db40
test al, al
jne 0x526d03
push 0
push 0x5908b4
lea ecx, [ebp - 0x1c]
call fcn.0042de80
push ecx
mov byte [ebp - 4], 9
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x2c], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x34]
mov dword [esi], eax
call fcn.00443e40
mov edi, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x30]
mov dword [esi], eax
call fcn.00443e40
add esp, 4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
push ecx
lea ecx, [ebp - 0x20]
mov edx, edi
push ecx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.00454fe0
mov edx, dword [ebp - 0x30]
or esi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526d8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526da6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526dc0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526dda
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526df4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526e0b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x526f82
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x22
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
push str.QnM2XVxIwvFhYyBAxYERNhxELMmI6mVTgs
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x4c], xmm0
call fcn.0042c350
push 0
mov dword [ebp - 4], 0xc
call esi
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x4c]
mov ecx, esp
push eax
call fcn.0042d2f0
lea ecx, [ebp - 0x14]
call fcn.00443a10
add esp, 0x18
push 0
push esi
push 0
push 0
push 0
push SysReAllocString
push 0
push SysReAllocString
push 0xcf0000
push dword [eax]
lea eax, [ebp - 0xa4]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, dword [ebp - 0x14]
mov dword [edi + 0x3c0], eax
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x526ecd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [edi + 0x3c0], 0
je 0x526f4c
push 0x6b
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x308
lea ecx, [edi + 0x18]
mov esi, eax
push 0
push ecx
call fcn.0054bbf0
add esp, 0xc
lea ecx, [edi + 0x324]
push 0x98
push 0
push ecx
call fcn.0054bbf0
mov eax, dword [edi + 0x3c0]
add esp, 0xc
mov dword [edi], 0x3bc
mov dword [edi + 4], eax
mov dword [edi + 8], 0x6b
push edi
push 0
mov dword [edi + 0xc], 7
mov dword [edi + 0x14], esi
mov dword [edi + 0x10], 0x432
mov dword [edi + 0x320], 4
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov ecx, dword [ebp - 0x38]
cmp ecx, 8
jb 0x526f82
mov edx, dword [ebp - 0x4c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x526f78
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x526fc7
push ecx
push edx
call fcn.00549e44
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
call fcn.0054ed2f
int3