Function at 0x58ccf0
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x99
push 0
push 0
dec ecx
jne 0x58ccf8
push ecx
push ebx
mov ebx, 0x96f038
xor eax, eax
push ebp
push 0x58e215
push dword fs:[eax]
mov dword fs:[eax], esp
mov word [ebp - 0xc], pe_nt_image_headers32
mov word [ebp - 0xa], pe_nt_image_headers32
mov word [ebp - 8], pe_nt_image_headers32
mov word [ebp - 6], pe_nt_image_headers32
mov word [ebp - 4], 3
mov word [ebp - 2], 0xb
lea eax, [ebp - 0xc]
push eax
push 5
mov ecx, 0x58a1bc
mov edx, 0x58e22c
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x14], pe_nt_image_headers32
mov word [ebp - 0x12], pe_nt_image_headers32
mov word [ebp - 0x10], pe_nt_image_headers32
mov word [ebp - 0xe], 0x3ed
lea eax, [ebp - 0x14]
push eax
push 3
mov ecx, 0x58a5cc
mov edx, 0x58e240
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], pe_nt_image_headers32
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x58a4d8
mov edx, 0x58e250
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x5884a4
mov edx, 0x58e268
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], 0xb
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x588cc0
mov edx, 0x58e27c
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x588264
mov edx, 0x58e294
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x5882e8
mov edx, 0x58e2a8
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x58836c
mov edx, 0x58e2bc
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x58825c
mov edx, 0x58e2d0
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x14], 3
mov word [ebp - 0x12], pe_nt_image_headers32
mov word [ebp - 0x10], pe_nt_image_headers32
mov word [ebp - 0xe], 3
lea eax, [ebp - 0x14]
push eax
push 3
mov ecx, 0x588520
mov edx, 0x58e2e4
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x14], 3
mov word [ebp - 0x12], pe_nt_image_headers32
mov word [ebp - 0x10], 0x3ed
mov word [ebp - 0xe], 3
lea eax, [ebp - 0x14]
push eax
push 3
mov ecx, 0x588770
mov edx, 0x58e2f8
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x588ac8
mov edx, 0x58e30c
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x588bc4
mov edx, 0x58e320
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x24], 0x3eb
mov word [ebp - 0x22], 3
mov word [ebp - 0x20], 3
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x588078
mov edx, 0x58e334
mov eax, dword [ebx]
call fcn.004b0e2c
mov eax, 0x58e34c
mov dword [ebp - 0x48], eax
mov eax, 0x58e35c
mov dword [ebp - 0x44], eax
mov eax, 0x58e36c
mov dword [ebp - 0x40], eax
mov eax, 0x58e37c
mov dword [ebp - 0x3c], eax
mov eax, 0x58e398
mov dword [ebp - 0x38], eax
mov eax, 0x58e3b4
mov dword [ebp - 0x34], eax
mov eax, 0x58e3d0
mov dword [ebp - 0x30], eax
mov eax, 0x58e3ec
mov dword [ebp - 0x2c], eax
mov eax, 0x58e40c
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x48]
mov ecx, 8
mov eax, dword [ebx]
call fcn.004b12cc
mov eax, 0x58e42c
mov dword [ebp - 0x80], eax
mov eax, 0x58e43c
mov dword [ebp - 0x7c], eax
mov eax, 0x58e454
mov dword [ebp - 0x78], eax
mov eax, 0x58e468
mov dword [ebp - 0x74], eax
mov eax, 0x58e484
mov dword [ebp - 0x70], eax
mov eax, 0x58e4a0
mov dword [ebp - 0x6c], eax
mov eax, 0x58e4b4
mov dword [ebp - 0x68], eax
mov eax, 0x58e4d0
mov dword [ebp - 0x64], eax
mov eax, 0x58e4e0
mov dword [ebp - 0x60], eax
mov eax, 0x58e4f4
mov dword [ebp - 0x5c], eax
mov eax, 0x58e510
mov dword [ebp - 0x58], eax
mov eax, 0x58e524
mov dword [ebp - 0x54], eax
mov eax, 0x58e538
mov dword [ebp - 0x50], eax
mov eax, 0x58e550
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x80]
mov ecx, 0xd
mov eax, dword [ebx]
call fcn.004b12cc
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x587aa0
mov edx, 0x58e568
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x90]
xor edx, edx
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x90]
mov edx, 0x58e578
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0xa0]
mov edx, 1
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0xa0]
mov edx, 0x58e588
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0xb0]
mov edx, 2
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0xb0]
mov edx, 0x58e59c
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0xc0]
mov edx, 3
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0xc0]
mov edx, 0x58e5ac
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0xd0]
mov edx, 4
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0xd0]
mov edx, 0x58e5c0
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0xe0]
mov edx, 5
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0xe0]
mov edx, 0x58e5d4
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0xf0]
mov edx, 6
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0xf0]
mov edx, 0x58e5e8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x100]
mov edx, 7
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x100]
mov edx, 0x58e600
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x110]
mov edx, 8
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x110]
mov edx, 0x58e618
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x120]
mov edx, 9
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x120]
mov edx, 0x58e62c
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x130]
mov edx, 0xa
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x130]
mov edx, 0x58e640
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x140]
mov edx, 0xb
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x140]
mov edx, 0x58e654
mov eax, dword [ebx]
call fcn.004b0ea8
mov word [ebp - 0x24], 0x3ee
mov word [ebp - 0x22], 3
mov word [ebp - 0x20], pe_nt_image_headers32
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x587d6c
mov edx, 0x58e668
mov eax, dword [ebx]
call fcn.004b0e2c
mov eax, 0x58e67c
mov dword [ebp - 0x150], eax
mov eax, 0x58e688
mov dword [ebp - 0x14c], eax
mov eax, 0x58e694
mov dword [ebp - 0x148], eax
mov eax, 0x58e6a4
mov dword [ebp - 0x144], eax
lea edx, [ebp - 0x150]
mov ecx, 3
mov eax, dword [ebx]
call fcn.004b12cc
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x589c68
mov edx, 0x58e6b4
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], pe_nt_image_headers32
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x589cb8
mov edx, 0x58e6c8
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x5899ac
mov edx, 0x58e6d8
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x589af4
mov edx, 0x58e6e8
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x588e7c
mov edx, 0x58e6f8
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], 3
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x58914c
mov edx, 0x58e708
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], 3
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x588fcc
mov edx, 0x58e71c
mov eax, dword [ebx]
call fcn.004b0db0
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x588f04
mov edx, 0x58e734
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x588f18
mov edx, 0x58e744
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x588f2c
mov edx, 0x58e758
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], 3
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x588f40
mov edx, 0x58e76c
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x5889e8
mov edx, 0x58e784
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x588a58
mov edx, 0x58e794
mov eax, dword [ebx]
call fcn.004b0e2c
mov eax, 0x58e7a8
mov dword [ebp - 0x14], eax
mov eax, 0x58e7bc
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x14]
mov ecx, 1
mov eax, dword [ebx]
call fcn.004b12cc
mov word [ebp - 0x24], pe_nt_image_headers32
mov word [ebp - 0x22], pe_nt_image_headers32
mov word [ebp - 0x20], 3
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x5898c4
mov edx, 0x58e7d0
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x24], pe_nt_image_headers32
mov word [ebp - 0x22], pe_nt_image_headers32
mov word [ebp - 0x20], 3
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x5897c8
mov edx, 0x58e7e4
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x24], pe_nt_image_headers32
mov word [ebp - 0x22], pe_nt_image_headers32
mov word [ebp - 0x20], 3
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x589718
mov edx, 0x58e7f8
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], pe_nt_image_headers32
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x589a18
mov edx, 0x58e80c
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x587724
mov edx, 0x58e820
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x587a24
mov edx, 0x58e834
mov eax, dword [ebx]
call fcn.004b0e2c
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x587a60
mov edx, 0x58e844
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x5879a0
mov edx, 0x58e854
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x587908
mov edx, 0x58e86c
mov eax, dword [ebx]
call fcn.004b0db0
mov eax, 0x58e884
mov dword [ebp - 0x16c], eax
mov eax, 0x58e89c
mov dword [ebp - 0x168], eax
mov eax, 0x58e8b8
mov dword [ebp - 0x164], eax
mov eax, 0x58e8d0
mov dword [ebp - 0x160], eax
mov eax, 0x58e8e4
mov dword [ebp - 0x15c], eax
mov eax, 0x58e8fc
mov dword [ebp - 0x158], eax
mov eax, 0x58e910
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x16c]
mov ecx, 6
mov eax, dword [ebx]
call fcn.004b12cc
mov word [ebp - 0x1c], 3
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x58785c
mov edx, 0x58e928
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], 0xb
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x5876cc
mov edx, 0x58e940
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x24], 0x3eb
mov word [ebp - 0x22], pe_nt_image_headers32
mov word [ebp - 0x20], pe_nt_image_headers32
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x5873c8
mov edx, 0x58e954
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], pe_nt_image_headers32
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x58749c
mov edx, 0x58e964
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x18], 3
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x587560
mov edx, 0x58e978
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], 0x3eb
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x5875e0
mov edx, 0x58e990
mov eax, dword [ebx]
call fcn.004b0db0
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x587988
mov edx, 0x58e9a0
mov eax, dword [ebx]
call fcn.004b0db0
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
mov ecx, 0x587648
mov edx, 0x58e9b8
mov eax, dword [ebx]
call fcn.004b0db0
lea edx, [ebp - 0x180]
mov eax, 0x10
call fcn.00409ac4
mov edx, dword [ebp - 0x180]
lea eax, [ebp - 0x17c]
call fcn.004157fc
lea ecx, [ebp - 0x17c]
mov edx, 0x58e9cc
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x190]
mov edx, 0x112
mov cl, 2
call fcn.004155c8
lea ecx, [ebp - 0x190]
mov edx, 0x58e9e0
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x1a0]
xor edx, edx
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x1a0]
mov edx, 0x58e9f8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x1b0]
mov edx, 1
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x1b0]
mov edx, 0x58ea08
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x1c0]
mov edx, 2
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x1c0]
mov edx, 0x58ea1c
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x1d0]
mov edx, 3
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x1d0]
mov edx, 0x58ea30
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x1e0]
mov edx, 5
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x1e0]
mov edx, 0x58ea40
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x1f0]
mov edx, 6
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x1f0]
mov edx, 0x58ea50
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x200]
mov edx, 7
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x200]
mov edx, 0x58ea64
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x210]
mov edx, 8
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x210]
mov edx, 0x58ea78
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x220]
mov edx, 0xa
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x220]
mov edx, 0x58ea90
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x230]
mov edx, 0xb
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x230]
mov edx, 0x58eaa4
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x240]
mov edx, 0xc
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x240]
mov edx, 0x58eabc
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x250]
mov edx, 0xd
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x250]
mov edx, 0x58ead0
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x260]
mov edx, 0xe
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x260]
mov edx, 0x58eae4
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x270]
mov edx, 0xf
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x270]
mov edx, 0x58eb00
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x280]
mov edx, 0x11
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x280]
mov edx, 0x58eb14
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x290]
mov edx, 0x12
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x290]
mov edx, 0x58eb30
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x2a0]
mov edx, 0x13
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x2a0]
mov edx, 0x58eb40
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x2b0]
mov edx, 0x14
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x2b0]
mov edx, 0x58eb58
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x2c0]
mov edx, 0x15
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x2c0]
mov edx, 0x58eb70
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x2d0]
mov edx, 0x18
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x2d0]
mov edx, 0x58eb8c
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x2e0]
mov edx, 0x19
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x2e0]
mov edx, 0x58eba4
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x2f0]
mov edx, 0x1a
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x2f0]
mov edx, 0x58ebb8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x300]
mov edx, 0x1a
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x300]
mov edx, 0x58ebd0
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x310]
mov edx, 0x1b
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x310]
mov edx, 0x58ebec
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x320]
mov edx, 0x1c
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x320]
mov edx, 0x58ec08
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x330]
mov edx, 0x1d
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x330]
mov edx, 0x58ec20
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x340]
mov edx, 0x1e
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x340]
mov edx, 0x58ec38
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x350]
mov edx, 0x1f
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x350]
mov edx, 0x58ec50
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x360]
mov edx, 0x20
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x360]
mov edx, 0x58ec68
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x370]
mov edx, 0x21
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x370]
mov edx, 0x58ec80
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x380]
mov edx, 0x22
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x380]
mov edx, 0x58ec9c
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x390]
mov edx, 0x23
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x390]
mov edx, 0x58ecb8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x3a0]
mov edx, 0x24
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x3a0]
mov edx, 0x58ecd0
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x3b0]
mov edx, 0x26
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x3b0]
mov edx, 0x58ecec
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x3c0]
mov edx, 0x27
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x3c0]
mov edx, 0x58ed04
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x3d0]
mov edx, 0x53
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x3d0]
mov edx, 0x58ed20
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x3e0]
mov edx, 0x48
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x3e0]
mov edx, 0x58ed30
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x3f0]
mov edx, 0x46
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x3f0]
mov edx, 0x58ed44
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x400]
mov edx, 0x47
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x400]
mov edx, 0x58ed64
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x410]
mov edx, 0x4a
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x410]
mov edx, 0x58ed80
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x420]
mov edx, 0x4e
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x420]
mov edx, 0x58ed94
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x430]
mov edx, 0x7e
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x430]
mov edx, 0x58eda8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x440]
mov edx, 0xff
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x440]
mov edx, 0x58edc4
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x450]
mov edx, dword [0x59bb04]
mov edx, dword [edx]
mov edx, dword [edx + 0x30]
mov cl, 4
call fcn.004155c8
lea ecx, [ebp - 0x450]
mov edx, 0x58edd8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x460]
mov edx, 0xf170
mov cl, 2
call fcn.004155c8
lea ecx, [ebp - 0x460]
mov edx, 0x58edec
mov eax, dword [ebx]
call fcn.004b0ea8
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], pe_nt_image_headers32
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x5856a0
mov edx, 0x58ee04
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x14], 3
mov word [ebp - 0x12], 3
mov word [ebp - 0x10], 3
mov word [ebp - 0xe], 3
lea eax, [ebp - 0x14]
push eax
push 3
mov ecx, 0x585984
mov edx, 0x58ee18
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], 0xb
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x585a44
mov edx, 0x58ee30
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], 3
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x585b50
mov edx, 0x58ee48
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x585bc0
mov edx, 0x58ee60
mov eax, dword [ebx]
call fcn.004b0db0
lea eax, [ebp - 0x470]
xor edx, edx
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x470]
mov edx, 0x58ee7c
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x480]
mov edx, 1
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x480]
mov edx, 0x58ee90
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x490]
mov edx, 1
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x490]
mov edx, 0x58eea8
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x4a0]
mov edx, 4
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x4a0]
mov edx, 0x58eebc
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x4b0]
mov edx, 8
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x4b0]
mov edx, 0x58eed0
mov eax, dword [ebx]
call fcn.004b0ea8
lea eax, [ebp - 0x4c0]
mov edx, 0x10
mov cl, 1
call fcn.004155c8
lea ecx, [ebp - 0x4c0]
mov edx, 0x58eee8
mov eax, dword [ebx]
call fcn.004b0ea8
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], 0x3ec
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x58722c
mov edx, 0x58ef00
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x14], pe_nt_image_headers32
mov word [ebp - 0x12], pe_nt_image_headers32
mov word [ebp - 0x10], 0xb
mov word [ebp - 0xe], 0x3ec
lea eax, [ebp - 0x14]
push eax
push 3
mov ecx, 0x586e18
mov edx, 0x58ef10
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], 0x3eb
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x585d8c
mov edx, 0x58ef24
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], 0x3eb
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x585e00
mov edx, 0x58ef38
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], pe_nt_image_headers32
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x585ee0
mov edx, 0x58ef50
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x24], 0x3eb
mov word [ebp - 0x22], 3
mov word [ebp - 0x20], pe_nt_image_headers32
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x585fc8
mov edx, 0x58ef60
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], 0x3eb
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x586078
mov edx, 0x58ef74
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x24], 0x3eb
mov word [ebp - 0x22], 3
mov word [ebp - 0x20], 3
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x5860f8
mov edx, 0x58ef88
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x1c], 0x3eb
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x585f70
mov edx, 0x58efa0
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x4cc], pe_nt_image_headers32
mov word [ebp - 0x4ca], pe_nt_image_headers32
mov word [ebp - 0x4c8], pe_nt_image_headers32
mov word [ebp - 0x4c6], 3
mov word [ebp - 0x4c4], 0xb
lea eax, [ebp - 0x4cc]
push eax
push 4
mov ecx, 0x5867ac
mov edx, 0x58efb4
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x4cc], pe_nt_image_headers32
mov word [ebp - 0x4ca], pe_nt_image_headers32
mov word [ebp - 0x4c8], pe_nt_image_headers32
mov word [ebp - 0x4c6], 3
mov word [ebp - 0x4c4], 0xb
lea eax, [ebp - 0x4cc]
push eax
push 4
mov ecx, 0x586924
mov edx, 0x58efc8
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x4cc], pe_nt_image_headers32
mov word [ebp - 0x4ca], pe_nt_image_headers32
mov word [ebp - 0x4c8], pe_nt_image_headers32
mov word [ebp - 0x4c6], 3
mov word [ebp - 0x4c4], 0xb
lea eax, [ebp - 0x4cc]
push eax
push 4
mov ecx, 0x586a94
mov edx, 0x58efe0
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x4cc], pe_nt_image_headers32
mov word [ebp - 0x4ca], pe_nt_image_headers32
mov word [ebp - 0x4c8], pe_nt_image_headers32
mov word [ebp - 0x4c6], 3
mov word [ebp - 0x4c4], 0xb
lea eax, [ebp - 0x4cc]
push eax
push 4
mov ecx, 0x586c0c
mov edx, 0x58eff4
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x586730
mov edx, 0x58f00c
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], 0x3ee
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x586690
mov edx, 0x58f024
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x24], 0x3ee
mov word [ebp - 0x22], 3
mov word [ebp - 0x20], 3
lea eax, [ebp - 0x24]
push eax
push 2
mov ecx, 0x5858ac
mov edx, 0x58f040
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x589e0c
mov edx, 0x58f050
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], 3
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x58a0e0
mov edx, 0x58f060
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x589d60
mov edx, 0x58f074
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x1c], pe_nt_image_headers32
lea eax, [ebp - 0x1c]
push eax
push 0
mov ecx, 0x589b9c
mov edx, 0x58f088
mov eax, dword [ebx]
call fcn.004b0db0
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], 0x3eb
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x586590
mov edx, 0x58f098
mov eax, dword [ebx]
call fcn.004b0e2c
mov word [ebp - 0x18], pe_nt_image_headers32
mov word [ebp - 0x16], 0x3eb
lea eax, [ebp - 0x18]
push eax
push 1
mov ecx, 0x58649c
mov edx, 0x58f0b0
mov eax, dword [ebx]
call fcn.004b0e2c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x58e21c
lea eax, [ebp - 0x4c0]
mov edx, dword [0x401104]
mov ecx, 0x34
call fcn.00405964
lea eax, [ebp - 0x180]
call fcn.00404dd8
lea eax, [ebp - 0x17c]
call fcn.004111d4
lea eax, [ebp - 0x140]
mov edx, dword [0x401104]
mov ecx, 0xc
call fcn.00405964
ret