Function at 0x52bd90
Capabilities:
Create process on windows
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a4d92
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x6340c4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x90], ebx
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x98], esi
mov byte [esi], 0
cmp eax, 0x16
ja case.default.0x52bde7
jmp dword [eax*4 + 0x52cbb0]
test edi, edi
je 0x52cb8c
push dword [edi]
mov ecx, dword [ebx + 0xa0]
lea esi, [edi + 4]
push esi
call fcn.0053c5d0
push dword [edi]
mov ecx, dword [ebx + 0xa4]
push esi
add ecx, 0x544
call fcn.005380d0
mov eax, dword [ebp - 0x98]
lea ecx, [ebx + 0xe8]
mov byte [eax], 1
push dword [edi]
push esi
call fcn.00535560
push ecx
mov ecx, edi
call fcn.00485610
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [edi]
cmp dword [ebx + 0x150], ecx
setne al
mov byte [edi + 0x1a0], al
mov dword [ebx + 0x150], ecx
lea ecx, [ebp - 0x2c]
call fcn.005734f0
mov dword [ebp - 4], 0
mov eax, dword [ebx + 0x1f0]
sub eax, dword [ebx + 0x1ec]
mov edx, dword [edi]
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp edx, eax
jae 0x52bf11
push edx
lea eax, [ebp - 0x8c]
mov ecx, ebx
push eax
call fcn.00529b10
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00443fb0
push eax
lea ecx, [edi + 0x128]
call fcn.00444e70
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0
call fcn.00444fa0
push dword [edi]
lea eax, [ebp - 0x8c]
mov ecx, ebx
push eax
call fcn.00529b10
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00443fb0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00444ee0
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 3
push eax
mov ecx, ebx
call fcn.00529bb0
lea ecx, [ebp - 0x5c]
call fcn.00444ea0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0
call fcn.00444fa0
jmp 0x52bf5b
push 0x673b08
lea ecx, [ebp - 0x2c]
call fcn.00443fb0
push eax
lea ecx, [edi + 0x128]
call fcn.00444e70
push 0x673b08
lea ecx, [ebp - 0x2c]
call fcn.00443fb0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00444ee0
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 4
push eax
mov ecx, ebx
call fcn.00529bb0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0
call fcn.00444ea0
mov eax, dword [edi + 0x68]
lea ecx, [edi + 0x140]
push dword [eax*4 + 0x5df51c]
call fcn.00444e70
mov eax, dword [edi + 0x6c]
lea ecx, [edi + 0x158]
push dword [eax*4 + 0x5df51c]
call fcn.00444e70
mov ecx, dword [ebx + 0xa0]
push edi
call fcn.0053bfa0
mov ecx, dword [ebx + 0xa4]
add ecx, 0x544
push edi
call fcn.005387e0
lea ecx, [ebx + 0xe8]
mov byte [esi], 1
push edi
call fcn.00534bc0
push ecx
mov ecx, edi
call fcn.00485840
mov dword [ebp - 0x94], vtable.CInstanceSmartPtr_class_CMainFrame_.0
call fcn.00546620
mov esi, eax
mov dword [ebp - 0x90], esi
mov byte [ebp - 4], 5
test esi, esi
jne 0x52c00b
push eax
push eax
push 0xfe00000a
push str.CInstanceSmartPtr_CMainFrame_
push 0x45
push 0x553
push str.C:drone_srcGUIWindowsL2Module.cpp
push str.L2Module::processL2Messages
call fcn.00573980
add esp, 0x20
lea ecx, [ebp - 0x2c]
call fcn.005734b0
jmp 0x52cb8c
mov ecx, esi
call fcn.00545ad0
mov ecx, esi
call fcn.005465d0
lea ecx, [ebp - 0x2c]
call fcn.005734b0
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [ebx + 0xa4]
push edi
add ecx, 0x544
call fcn.00538020
push 1
push edi
call fcn.004c5d7f
add esp, 8
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
call fcn.0052b050
mov ecx, dword [ebx + 0xa4]
push edi
add ecx, 0x1d8
call fcn.00524c20
push ecx
mov ecx, edi
call fcn.00485d40
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov edx, dword [ebx + 0xd4]
lea esi, [ebx + 0xd0]
push ecx
mov ecx, dword [esi]
call fcn.00489620
mov eax, dword [esi]
add esp, 4
mov dword [esi + 4], eax
lea eax, [edi + 4]
cmp esi, eax
je 0x52c0b9
push dword [ebp - 0x90]
mov ecx, esi
push dword [eax + 4]
push dword [eax]
call fcn.0048a280
mov ecx, ebx
call fcn.0052b050
push dword [edi]
mov ecx, dword [ebx + 0xa4]
lea eax, [edi + 4]
push eax
add ecx, 0x1d8
call fcn.00524ac0
push ecx
mov ecx, edi
call fcn.00486170
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov al, byte [edi + 3]
mov byte [ebx + 0x18d], al
mov al, byte [edi + 6]
mov byte [ebx + 0x18c], al
mov eax, dword [edi + 8]
mov dword [ebx + 0x17c], eax
mov eax, dword [edi + 0xc]
mov dword [ebx + 0x180], eax
mov eax, dword [edi + 0x10]
mov dword [ebx + 0x184], eax
mov eax, dword [edi + 0x14]
mov dword [ebx + 0x188], eax
mov al, byte [edi + 0x18]
mov byte [ebx + 0x192], al
test al, al
je 0x52c134
mov al, byte [edi + 0x19]
jmp 0x52c136
xor al, al
mov byte [ebx + 0x193], al
mov al, byte [edi + 0x1a]
mov byte [ebx + 0x194], al
mov al, byte [edi]
mov byte [ebx + 0x178], al
mov dl, al
cmp byte [edi + 1], 0
je 0x52c15f
cmp dword [edi + 8], 0
je 0x52c15f
mov al, 1
jmp 0x52c161
xor al, al
mov byte [ebx + 0x179], al
mov cl, byte [edi + 2]
mov byte [ebx + 0x17a], cl
mov byte [ebp - 0x98], al
mov al, byte [edi + 5]
mov byte [ebx + 0x18e], al
movzx eax, byte [edi + 4]
push eax
push ecx
push dword [ebp - 0x98]
mov ecx, dword [ebx + 0xa4]
push edx
add ecx, 0x1d8
call fcn.00524600
movzx eax, byte [edi + 3]
mov ecx, dword [ebx + 0xa4]
push eax
add ecx, 0x544
call fcn.005381f0
push 0x1c
push edi
call fcn.004c5d7f
add esp, 8
jmp 0x52cb8c
mov ecx, dword [ebx + 0xa0]
test edi, edi
setne al
push eax
mov byte [ebx + 0x1b9], al
call fcn.0053b960
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [ebx + 0xa4]
add ecx, 0x544
push edi
call fcn.00538200
test byte [edi], 4
je 0x52c2ec
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 6
xor dl, dl
mov esi, dword [edi + 0xb0]
mov eax, dword [edi + 0xac]
sub esi, eax
sar esi, 5
test esi, esi
je 0x52c29d
xor edi, edi
lea ebx, [edi + 1]
nop dword [eax]
cmp dword [eax], 4
mov ecx, dword [eax + 4]
jne 0x52c25a
test ecx, ecx
je 0x52c256
cmp ecx, 1
je 0x52c256
cmp ecx, 2
jne 0x52c263
mov edi, eax
jmp 0x52c263
cmp dword [eax], 6
movzx edx, dl
cmove edx, ebx
add eax, 0x20
sub esi, ebx
jne 0x52c240
mov ebx, dword [ebp - 0x90]
test edi, edi
mov dword [ebp - 0x9c], edi
mov edi, dword [ebp - 0xa0]
je 0x52c29d
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 4], esi
jne 0x52c28f
test dl, dl
jne 0x52c29d
add eax, 8
lea ecx, [ebp - 0x2c]
push eax
call fcn.0044e9e0
jmp 0x52c2aa
push str.IPv6
lea ecx, [ebp - 0x2c]
call fcn.00444e70
mov ecx, dword [ebx + 0xa0]
lea eax, [ebp - 0x2c]
push eax
call fcn.0053b730
mov eax, dword [ebp - 0x98]
lea ecx, [ebx + 0xe8]
mov byte [eax], 1
lea eax, [ebp - 0x2c]
push eax
call fcn.005348e0
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x52c2ec
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x2c]
call fcn.00446620
add esp, 8
push ecx
mov ecx, edi
call fcn.004861d0
jmp 0x52cb8c
mov ecx, dword [ebx + 0xa0]
push edi
call fcn.0053b7b0
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
cmp byte [ebx + 0x1ba], 0
jne 0x52cb8c
lea ecx, [ebp - 0x74]
mov byte [ebx + 0x1ba], 1
call fcn.005734f0
push 0x674210
mov dword [ebp - 4], 7
call fcn.00443fb0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00444ee0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x8c]
push dword [edi]
mov ecx, ebx
push eax
call fcn.00529a20
lea ecx, [ebp - 0x8c]
mov esi, dword [eax + 0x10]
add esi, 0x20
mov dword [ebp - 0x90], esi
call fcn.00444fa0
push 2
push esi
call fcn.004d13e9
mov esi, eax
add esp, 8
mov dword [ebp - 0xa0], esi
test esi, esi
je 0x52c3f2
cmp dword [edi + 0x18], 8
lea esi, [edi + 4]
jb 0x52c395
mov esi, dword [esi]
push dword [edi]
lea eax, [ebp - 0x8c]
mov ecx, ebx
push eax
call fcn.00529a20
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 9
call fcn.00443fb0
push esi
mov esi, dword [ebp - 0xa0]
push eax
push dword [ebp - 0x90]
push esi
call fcn.005850a0
add esp, 0x10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8c]
call fcn.00444fa0
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push 0x50030
cmovae eax, dword [ebp - 0x2c]
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x5c]
call fcn.00565650
push 0x5dc194
push str.usermessageAccepted
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xa
call fcn.00565290
lea ecx, [ebp - 0x5c]
call fcn.00565270
push eax
push 0x15
mov ecx, ebx
call fcn.00533c70
mov eax, dword [edi + 0x18]
cmp eax, 8
jb 0x52c43d
lea eax, [eax*2 + 2]
push eax
push dword [edi + 4]
call fcn.00446620
add esp, 8
xor eax, eax
mov dword [edi + 0x14], 0
push 0x1c
push edi
mov dword [edi + 0x18], 7
mov word [edi + 4], ax
call fcn.004c5d7f
push esi
call fcn.004d108b
add esp, 0xc
mov byte [ebx + 0x1ba], 0
lea ecx, [ebp - 0x5c]
call fcn.00565620
lea ecx, [ebp - 0x2c]
call fcn.00444ea0
lea ecx, [ebp - 0x74]
call fcn.005734b0
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
movzx eax, byte [edi]
push eax
call fcn.00532af0
mov byte [esi], 1
sub esp, 0x18
mov al, byte [edi + 1]
mov ecx, esp
mov byte [ebx + 0x195], al
mov eax, dword [edi + 4]
mov dword [ebx + 0x198], eax
mov eax, dword [edi + 8]
mov dword [ebx + 0x19c], eax
mov al, byte [edi + 0xc]
mov byte [ebx + 0x196], al
mov al, byte [edi + 0xd]
mov byte [ebx + 0x197], al
mov dword [ebp - 0x90], ecx
mov edx, dword [edi + 0x10]
call fcn.00488300
mov ecx, ebx
call fcn.0044e2d0
push 0x14
push edi
call fcn.004c5d7f
add esp, 8
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov al, byte [edi]
mov byte [ebx + 0x190], al
cmp byte [edi], 0
jne 0x52c510
mov dword [ebx + 0x150], 0
mov dword [ebp - 0x94], vtable.CInstanceSmartPtr_class_CMainFrame_.0
call fcn.00546620
mov esi, eax
mov dword [ebp - 0x90], esi
mov dword [ebp - 4], 0xb
test esi, esi
jne 0x52c55c
push eax
push eax
push 0xfe00000a
push str.CInstanceSmartPtr_CMainFrame_
push 0x45
push 0x641
push str.C:drone_srcGUIWindowsL2Module.cpp
push str.L2Module::processL2Messages
call fcn.00573980
add esp, 0x20
jmp 0x52cb8c
mov ecx, esi
call fcn.00545f50
test al, al
je 0x52c5b3
cmp byte [edi], 0
je 0x52c5b3
cmp byte [edi + 1], 0
je 0x52c5b3
push ecx
mov ecx, ebx
call fcn.0052b2a0
lea ecx, [ebp - 0x5c]
call fcn.00565650
push 0
push str.allowUserConnectionsPrelogon
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xc
call fcn.00565290
lea ecx, [ebp - 0x5c]
call fcn.00565270
push eax
push 0x14
mov ecx, ebx
call fcn.00533c70
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call fcn.00565620
movzx eax, byte [edi + 1]
mov ecx, dword [ebx + 0xa0]
push eax
movzx eax, byte [edi]
push eax
call fcn.0053bb10
movzx eax, byte [edi]
mov ecx, dword [ebx + 0xa4]
push eax
add ecx, 0x1d8
call fcn.00524790
movzx eax, byte [edi + 1]
mov ecx, dword [ebx + 0xa4]
push eax
movzx eax, byte [edi]
add ecx, 0x544
push eax
call fcn.00538140
push 0
mov ecx, ebx
call fcn.00531570
mov eax, dword [ebp - 0x98]
lea ecx, [ebx + 0xe8]
mov byte [eax], 1
movzx eax, byte [edi + 1]
push eax
movzx eax, byte [edi]
push eax
call fcn.005342e0
mov ecx, esi
call fcn.00545ad0
push 2
push edi
call fcn.004c5d7f
add esp, 8
mov ecx, esi
call fcn.005465d0
jmp 0x52cb8c
lea ecx, [ebp - 0x74]
call fcn.005734f0
mov dword [ebp - 4], 0xd
cmp edi, 1
jne 0x52c66e
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.0053ba00
lea ecx, [ebp - 0x74]
mov byte [ebx + 0x190], 0
call fcn.005734b0
jmp 0x52cb8c
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
lea eax, [edi - 2]
mov byte [ebp - 4], 0xe
cmp eax, 0x61
ja case.0x52c695.11
movzx eax, byte [eax + 0x52cc3c]
jmp dword [eax*4 + 0x52cc0c]
push 0x6738c8
lea ecx, [ebp - 0x74]
call fcn.00443fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00444e70
cmp dword [ebp - 0x30], 8
lea esi, [ebp - 0x44]
jb 0x52c6c6
mov esi, dword [ebp - 0x44]
test esi, esi
je 0x52c88f
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*4 + 4]
mov dword [ebp - 0x90], eax
call fcn.004c6740
mov ebx, esp
test ebx, ebx
je 0x52c88f
push 0
push 0
push dword [ebp - 0x90]
mov byte [ebx], 0
push ebx
push 0xffffffffffffffff
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, ebx
jmp 0x52c891
push 0x673370
jmp 0x52c6a1
push 0x670d60
jmp 0x52c6a1
push 0x6714e0
jmp 0x52c6a1
push 0x6703b8
jmp 0x52c6a1
push 0x6731a8
jmp 0x52c6a1
push 0x673778
jmp 0x52c6a1
push 0x6735e0
jmp 0x52c6a1
push 0x673d78
jmp 0x52c6a1
push 0x671000
jmp 0x52c6a1
push 0x674210
lea ecx, [ebp - 0x74]
call fcn.00443fb0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00444ee0
push 0x672350
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xf
call fcn.00443fb0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00444ee0
cmp dword [ebp - 0x48], 8
lea ecx, [ebp - 0x5c]
push 0x50010
cmovae ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
push ecx
cmovae eax, dword [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x94], vtable.CInstanceSmartPtr_class_CMainFrame_.0
call fcn.00546620
mov esi, eax
mov dword [ebp - 0x90], esi
mov byte [ebp - 4], 0x11
test esi, esi
je 0x52c819
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
cmovae ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.00444ee0
push 0
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x12
push eax
mov ecx, esi
call fcn.00545af0
lea ecx, [ebp - 0x8c]
call fcn.00444ea0
mov ecx, esi
call fcn.005465d0
jmp 0x52c843
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push eax
push str.Invalid_CInstanceSmartPtr_CMainFrame_._Skipping_Shutdown_event___s_.
push 0x45
push 0x6bb
push str.C:drone_srcGUIWindowsL2Module.cpp
push str.L2Module::processL2Messages
call fcn.00573940
add esp, 0x18
lea ecx, [ebp - 0x2c]
call fcn.00444ea0
lea ecx, [ebp - 0x5c]
call fcn.00444ea0
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x52c86e
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x44]
call fcn.00446620
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.005734b0
jmp 0x52cb8c
xor eax, eax
push eax
push edi
push str.L2_Fault_code:__d___s_
push 0x45
push 0x6c3
push str.C:drone_srcGUIWindowsL2Module.cpp
push str.L2Module::processL2Messages
call fcn.00573940
mov eax, dword [ebp - 0x30]
add esp, 0x1c
cmp eax, 8
jb 0x52c8cc
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x44]
call fcn.00446620
add esp, 8
lea ecx, [ebp - 0x74]
call fcn.005734b0
jmp 0x52cb8c
test edi, edi
setne al
movzx eax, al
push eax
call fcn.00532af0
jmp 0x52cb8c
mov ecx, dword [ebx + 0xa0]
call fcn.0053b7e0
jmp 0x52cb8c
mov dword [ebp - 0x94], vtable.CInstanceSmartPtr_class_CMainFrame_.0
call fcn.00546620
mov esi, eax
mov dword [ebp - 0x90], esi
mov dword [ebp - 4], 0x13
test esi, esi
jne 0x52c936
push eax
push eax
push 0xfe00000a
push str.CInstanceSmartPtr_CMainFrame_
push 0x45
push 0x6d9
jmp 0x52c545
mov ecx, esi
call fcn.00545ac0
mov ecx, esi
call fcn.005465d0
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [ebx + 0xa0]
push edi
call fcn.0053be50
push ecx
mov ecx, edi
call fcn.00485dd0
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [ebx + 0xa0]
lea eax, [edi + 0x30]
push eax
lea eax, [edi + 0x18]
push eax
push edi
call fcn.0053bdd0
push ecx
mov ecx, edi
call fcn.00485f90
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [ebx + 0xa0]
lea eax, [edi + 0x30]
push eax
lea eax, [edi + 0x18]
push eax
push edi
call fcn.0053bd50
push ecx
mov ecx, edi
call fcn.00486050
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov ecx, dword [ebx + 0xa0]
lea eax, [edi + 0x30]
push eax
lea eax, [edi + 0x18]
push eax
push edi
call fcn.0053bce0
push ecx
mov ecx, edi
call fcn.004860f0
jmp 0x52cb8c
lea ecx, [ebp - 0x8c]
call fcn.00565650
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 0x14
call fcn.00565270
push eax
push 0x1e
mov ecx, ebx
call fcn.00533c70
lea ecx, [ebp - 0x8c]
call fcn.00565620
jmp 0x52cb8c
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x94], vtable.CInstanceSmartPtr_class_CMainFrame_.0
call fcn.00546620
mov esi, eax
mov dword [ebp - 0x90], esi
mov dword [ebp - 4], 0x15
test esi, esi
jne 0x52ca60
push eax
push eax
push 0xfe00000a
push str.CInstanceSmartPtr_CMainFrame_
push 0x45
push 0x725
jmp 0x52c545
mov ecx, esi
call fcn.00545f50
test al, al
jne 0x52ca97
test edi, edi
je 0x52ca97
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x52ca79
mov eax, dword [edi]
test eax, eax
je 0x52ca97
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0x5c]
call fcn.00565650
cmp dword [ebp - 0x9c], 0x20
mov eax, 0x5dc18c
mov ecx, 0x5dc194
mov byte [ebp - 4], 0x16
cmovbe ecx, eax
push ecx
push str.launchWebBrowserSuccess
lea ecx, [ebp - 0x5c]
call fcn.00565290
lea ecx, [ebp - 0x5c]
call fcn.00565270
push eax
push 0x20
mov ecx, ebx
call fcn.00533c70
test edi, edi
je 0x52cb13
mov eax, dword [edi + 0x14]
cmp eax, 8
jb 0x52caf5
lea eax, [eax*2 + 2]
push eax
push dword [edi]
call fcn.00446620
add esp, 8
xor eax, eax
mov dword [edi + 0x10], 0
push 0x18
push edi
mov dword [edi + 0x14], 7
mov word [edi], ax
call fcn.004c5d7f
add esp, 8
lea ecx, [ebp - 0x5c]
call fcn.00565620
mov ecx, esi
call fcn.005465d0
jmp 0x52cb8c
test edi, edi
je 0x52cb8c
mov eax, dword [edi]
mov ecx, dword [ebx + 0xa0]
mov dword [ebx + 0x170], eax
mov eax, dword [edi + 4]
mov dword [ebx + 0x16c], eax
mov eax, dword [edi + 8]
push edi
mov dword [ebx + 0x174], eax
call fcn.0053b790
push ecx
mov ecx, dword [ebx + 0xa4]
add ecx, 0x1d8
call fcn.005245f0
push 0xc
push edi
call fcn.004c5d7f
add esp, 8
jmp 0x52cb8c
push eax
push str.Unrecognized_L2_Callback_Message_Type:__d
push 0x57
push 0x50e
push str.C:drone_srcGUIWindowsL2Module.cpp
push str.L2Module::processL2Messages
call fcn.00573940
add esp, 0x18
lea esp, [ebp - 0xb4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004c59c5
mov esp, ebp
pop ebp
ret 0xc