Function at 0x526170
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x5d1852
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
xor edi, edi
push edi
mov esi, ecx
push eax
push 0xf8
mov dword [esp + 0x1c], esi
call fcn.00532520
mov dword [esp + 0x1c], edi
mov dword [esi + 0x98], 0x5e59b4
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa8], edi
mov dword [esi + 0xa4], edi
mov dword [esi + 0xa0], edi
mov ecx, dword [0x639698]
mov eax, dword [0x719448]
lea ebx, [esi + 0xac]
mov dword [esp + 0x24], ebx
mov dword [ebx], ecx
push eax
lea ecx, [ebx + 4]
mov byte [esp + 0x20], 2
call fcn.00593749
push 0x6335a8
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 3
call fcn.00593749
push 0x637654
mov ecx, ebx
mov byte [esp + 0x20], 4
call fcn.004294f0
mov edx, dword [0x639698]
mov eax, dword [0x719448]
lea ebx, [esi + 0xb8]
mov dword [esp + 0x24], ebx
mov dword [ebx], edx
push eax
lea ecx, [ebx + 4]
mov byte [esp + 0x20], 6
call fcn.00593749
push 0x633588
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 7
call fcn.00593749
push 0x637644
mov ecx, ebx
mov byte [esp + 0x20], 8
call fcn.004294f0
mov ecx, dword [0x639698]
mov eax, dword [0x719448]
lea ebx, [esi + 0xc4]
mov dword [esp + 0x24], ebx
mov dword [ebx], ecx
push eax
lea ecx, [ebx + 4]
mov byte [esp + 0x20], 0xa
call fcn.00593749
push 0x637638
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 0xb
call fcn.00593749
mov byte [esp + 0x1c], 0xc
push 0x637624
mov ecx, ebx
call fcn.004294f0
mov edx, dword [0x639698]
mov eax, dword [0x719448]
lea ebx, [esi + 0xd0]
mov dword [esp + 0x24], ebx
mov dword [ebx], edx
push eax
lea ecx, [ebx + 4]
mov byte [esp + 0x20], 0xe
call fcn.00593749
push 0x63761c
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 0xf
call fcn.00593749
push 0x637608
mov ecx, ebx
mov byte [esp + 0x20], 0x10
call fcn.004294f0
mov eax, dword [0x719448]
lea ebx, [esi + 0xdc]
push eax
mov byte [esp + 0x20], 0x11
lea ecx, [ebx + 4]
mov dword [esp + 0x28], ebx
call fcn.00593749
push 0x62f644
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 0x12
call fcn.00593749
push 0x50
mov ecx, ebx
mov byte [esp + 0x20], 0x13
call fcn.00410c40
mov ecx, dword [0x719448]
lea ebx, [esi + 0xe8]
push ecx
mov byte [esp + 0x20], 0x14
lea ecx, [ebx + 4]
mov dword [esp + 0x28], ebx
call fcn.00593749
push 0x6375fc
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 0x15
call fcn.00593749
push edi
mov ecx, ebx
mov byte [esp + 0x20], 0x16
call fcn.00410c40
mov edx, dword [0x719448]
lea ebx, [esi + 0xf4]
push edx
mov byte [esp + 0x20], 0x17
lea ebp, [ebx + 4]
mov dword [esp + 0x28], ebx
mov ecx, ebp
call fcn.00593749
lea ecx, [ebx + 8]
push 0x6375f4
mov byte [esp + 0x20], 0x18
call fcn.00593749
mov eax, dword [ebx + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x28], 0x19
call fcn.004ed500
mov dword [ebx], eax
mov eax, dword [0x719448]
lea ebx, [esi + 0x100]
push eax
mov byte [esp + 0x20], 0x1a
lea ecx, [ebx + 4]
mov dword [esp + 0x28], ebx
call fcn.00593749
push 0x6375ec
lea ecx, [ebx + 8]
mov byte [esp + 0x20], 0x1b
call fcn.00593749
push 1
mov ecx, ebx
mov byte [esp + 0x20], 0x1c
call fcn.00410c40
mov edx, dword [0x719448]
lea ebx, [esi + 0x10c]
push edx
mov byte [esp + 0x20], 0x1d
lea ecx, [ebx + 4]
mov dword [esp + 0x28], ebx
call fcn.00593749
lea ecx, [ebx + 8]
push 0x6375e0
mov byte [esp + 0x20], 0x1e
call fcn.00593749
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
push edi
push eax
push ecx
mov ecx, 0x6646a8
mov byte [esp + 0x28], 0x1f
call fcn.004ed500
mov dword [ebx], eax
mov eax, dword [0x719448]
lea ebp, [esi + 0x118]
push eax
mov byte [esp + 0x20], 0x20
lea ecx, [ebp + 4]
mov dword [esp + 0x28], ebp
call fcn.00593749
push 0x6375d0
lea ecx, [ebp + 8]
mov byte [esp + 0x20], 0x21
call fcn.00593749
push 0xa
mov ecx, ebp
mov byte [esp + 0x20], 0x22
call fcn.00410c40
mov ecx, dword [0x719448]
lea ebp, [esi + 0x124]
push ecx
mov byte [esp + 0x20], 0x23
lea ecx, [ebp + 4]
mov dword [esp + 0x28], ebp
call fcn.00593749
push 0x6375c8
lea ecx, [ebp + 8]
mov byte [esp + 0x20], 0x24
call fcn.00593749
push edi
mov ecx, ebp
mov byte [esp + 0x20], 0x25
call fcn.00410c40
mov byte [esp + 0x1c], 0x26
lea ecx, [esi + 0x138]
call fcn.0058c6ea
mov edx, dword [0x719448]
lea ebp, [esi + 0x140]
push edx
mov byte [esp + 0x20], 0x27
lea ecx, [ebp + 4]
mov dword [esp + 0x28], ebp
call fcn.00593749
lea ecx, [ebp + 8]
push 0x6375b0
mov byte [esp + 0x20], 0x28
call fcn.00593749
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 4]
push edi
push eax
push ecx
mov ecx, 0x6646a8
mov byte [esp + 0x28], 0x29
call fcn.004ed500
mov dword [ebp], eax
push fcn.00410bc0
push fcn.004295f0
push 5
lea eax, [esi + 0x150]
push 0xc
push eax
mov byte [esp + 0x30], 0x2a
call fcn.00573af2
mov ecx, dword [0x719448]
lea ebp, [esi + 0x18c]
push ecx
mov byte [esp + 0x20], 0x2b
lea ecx, [ebp + 4]
mov dword [esp + 0x28], ebp
call fcn.00593749
push 0x62ecb0
lea ecx, [ebp + 8]
mov byte [esp + 0x20], 0x2c
call fcn.00593749
push 1
mov ecx, ebp
mov byte [esp + 0x20], 0x2d
call fcn.00410c40
mov edx, dword [0x719448]
lea ebp, [esi + 0x198]
push edx
mov byte [esp + 0x20], 0x2e
lea ecx, [ebp + 4]
mov dword [esp + 0x28], ebp
call fcn.00593749
push 0x6375a0
lea ecx, [ebp + 8]
mov byte [esp + 0x20], 0x2f
call fcn.00593749
push edi
mov ecx, ebp
mov byte [esp + 0x20], 0x30
call fcn.00410c40
lea ebp, [esi + 0x1a4]
mov byte [esp + 0x1c], 0x31
mov ecx, ebp
call fcn.0058f7c8
mov dword [ebp], 0x5f1680
lea ecx, [esi + 0x1e0]
mov byte [esp + 0x1c], 0x32
call fcn.004fde00
mov byte [esp + 0x1c], 0x33
lea ecx, [esi + 0x21c]
call fcn.004f5f00
lea ecx, [esi + 0x258]
mov byte [esp + 0x1c], 0x34
call fcn.004f5f00
lea ecx, [esi + 0x294]
mov byte [esp + 0x1c], 0x35
call fcn.004f5f00
lea ecx, [esi + 0x2d0]
mov byte [esp + 0x1c], 0x36
call fcn.004f5f00
mov eax, dword [0x639698]
mov dword [esi + 0x330], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x334], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x338], edx
mov eax, dword [0x639698]
mov dword [esi + 0x33c], eax
mov edx, dword [0x719448]
lea ebp, [esi + 0x350]
push edx
mov byte [esp + 0x20], 0x3b
lea ecx, [ebp + 4]
mov dword [esp + 0x28], ebp
call fcn.00593749
lea ecx, [ebp + 8]
push 0x637594
mov byte [esp + 0x20], 0x3c
call fcn.00593749
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 4]
push edi
push eax
push ecx
mov ecx, 0x6646a8
mov byte [esp + 0x28], 0x3d
call fcn.004ed500
mov dword [ebp], eax
lea ecx, [esi + 0x368]
mov byte [esp + 0x1c], 0x3e
call fcn.0052bc40
mov eax, dword [ebx]
or ebx, 0xffffffff
mov dword [esi], 0x5eb8d0
mov dword [esi + 0x30c], eax
mov dword [esi + 0x14c], edi
mov dword [esi + 0x130], ebx
mov dword [esi + 0x134], edi
mov dword [esi + 0x324], edi
mov dword [esi + 0x314], edi
mov dword [esi + 0x31c], edi
mov dword [esi + 0x318], edi
mov dword [esi + 0x310], edi
mov dword [esi + 0x320], edi
mov ecx, dword [0x63fd4c]
push 0x379
mov byte [esp + 0x20], 0x3f
call fcn.0046bc80
mov ecx, dword [0x63fd4c]
xor eax, eax
mov edx, dword [ecx + 0x8f44]
mov ecx, dword [edx - 8]
mov dword [esi + 0x35c], edi
cmp ecx, edi
mov dword [esi + 0x328], edi
setne al
mov dword [esi + 0x340], eax
mov dword [esi + 0x32c], edi
mov ecx, dword [esp + 0x14]
xor eax, eax
mov dword [esi + 0x360], eax
mov dword [esi + 0x348], edi
mov dword [esi + 0x418], edi
mov dword [esi + 0x364], edi
mov dword [esi + 0x404], edi
mov dword [esi + 0x408], edi
mov dword [esi + 0x40c], edi
mov dword [esi + 0x34c], edi
mov dword [esi + 0x41c], edi
mov dword [esi + 0x68], 1
mov dword [esi + 0x410], ebx
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4