Function at 0x58f210
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59bd1d
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x5e632c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x12c], ecx
mov byte [ebp - 0x125], 0
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 0xb8]
call eax
push eax
lea ecx, [ebp - 0x9c]
call fcn.0045bf90
mov byte [ebp - 4], 1
push str.drvlist_opt
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx ecx, al
test ecx, ecx
je 0x58f31b
mov edx, dword [ebp - 0x12c]
cmp dword [edx + 0x414], 0
je 0x58f2d0
mov eax, dword [ebp - 0x12c]
cmp dword [eax + 0x410], 0
jne 0x58f2df
mov ecx, dword [ebp - 0x12c]
cmp dword [ecx + 0x418], 0
je 0x58f2f4
push 1
mov edx, dword [ebp - 0x12c]
mov ecx, dword [edx + 0x36c]
call fcn.00464af0
jmp 0x58f307
push 0
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax + 0x36c]
call fcn.00464af0
push 0x1f
push 0x12d
call fcn.00582fa0
add esp, 8
jmp 0x58f4c4
push str.feedback_opt
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx ecx, al
test ecx, ecx
je 0x58f358
push 0x1f
push 0x12e
call fcn.00582fa0
add esp, 8
push 0xc9
push 0x7d1
call fcn.00582fa0
add esp, 8
jmp 0x58f4c4
push str.cancel_btn
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx edx, al
test edx, edx
je 0x58f37f
mov ecx, dword [ebp - 0x12c]
call fcn.0058c000
jmp 0x58f4c4
push str.path_select_btn
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx eax, al
test eax, eax
jne 0x58f3ad
push str.extract_path_edit
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx ecx, al
test ecx, ecx
je 0x58f3cc
push 0x65
push 0x3ee
call fcn.00582fa0
add esp, 8
mov ecx, dword [ebp - 0x12c]
call fcn.0058e5b0
jmp 0x58f4c4
push str.bbs_btn
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx edx, al
test edx, edx
je 0x58f412
push 0xc9
push 0x7d2
call fcn.00582fa0
add esp, 8
push 1
push 0
push 0
push 0x5c8eb0
push 0x5c8f04
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x58f4c4
push str.qq_btn
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx eax, al
test eax, eax
je 0x58f455
push 0xc9
push 0x7d3
call fcn.00582fa0
add esp, 8
push 1
push 0
push 0
push str.http:__shang.qq.com_wpa_qunwpa_idkey9bc49bdf0994409cf339d73efd3abbe432c447a8c7865196109617660001bfca
push 0x5c8fec
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x58f4c4
push str.download_dg_btn
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx ecx, al
test ecx, ecx
je 0x58f495
push 1
push 0
push 0
push 0x5c9018
push 0x5c906c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x15
push 0xca
call fcn.00582fa0
add esp, 8
jmp 0x58f4c4
push str.download_new_btn
lea ecx, [ebp - 0x124]
call fcn.0045c360
movzx edx, al
test edx, edx
je 0x58f4c4
push 1
push 0
push 0
push 0x5c90a0
push 0x5c90f4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx eax, byte [ebp - 0x125]
test eax, eax
jne 0x58f4de
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x12c]
call fcn.00460470
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9c]
call fcn.0045bfd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x124]
call fcn.0045bfd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b9002
mov esp, ebp
pop ebp
ret 4