Function at 0x552010
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f9926
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 8]
mov ecx, ebx
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x10]
push str._RegisterSystemDLLs_
mov dword [ebp - 0x34], eax
call fcn.005dc4c0
test al, al
je 0x55206b
mov ecx, edi
call fcn.0056b2b0
jmp 0x5530bc
push str._AutoLogon_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552101
push 1
push 0x6558f0
mov ecx, esi
call fcn.005dc190
mov ebx, dword [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.005d9070
mov ecx, ebx
call fcn.005d9210
push 0
cmp eax, 2
jae 0x5520b2
mov ecx, edi
call fcn.00553be0
jmp 0x5530bc
push 0
push 1
call fcn.005d9220
push eax
push 1
push 2
call fcn.005d9220
push eax
mov ecx, esi
call fcn.005dc260
push 1
mov ecx, ebx
mov esi, eax
call fcn.005d9220
push ecx
mov edx, esi
mov ecx, eax
call fcn.0059b9e0
add esp, 4
mov edx, str.Failed_to_enable_auto_logon_for_the_following_user:
test al, al
mov ecx, str.Successfully_enabled_auto_logon_for_the_following_user:
cmove ecx, edx
push ecx
mov ecx, edi
call fcn.0057b7e0
jmp 0x5530bc
push str._DisableAutoLogon_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552140
push 0
push 0
push 0
push ecx
xor edx, edx
xor ecx, ecx
call fcn.0059b9e0
add esp, 4
mov edx, str.Failed_to_disable_user_auto_logon.
test al, al
mov ecx, str.Successfully_disabled_user_auto_logon.
cmove ecx, edx
push ecx
mov ecx, edi
call fcn.0057b7e0
jmp 0x5530bc
push str._PreventShutdown_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552182
push 0
push 0
push 0
push ecx
push str.Script_execution_in_progress._Please_cancel_shutdown.
mov ecx, edi
call fcn.00549180
add esp, 4
mov edx, str.Failed_to_prevent_this_PC_from_shutting_down.
test eax, eax
mov ecx, str.Successfully_prevented_this_PC_from_shutting_down.
cmove ecx, edx
push ecx
mov ecx, edi
call fcn.0057b7e0
jmp 0x5530bc
push str._EnableF8BootMenu_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55219e
mov ecx, edi
call fcn.00560360
jmp 0x5530bc
push str._RestoreBootMenu_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5521ba
mov ecx, edi
call fcn.00560240
jmp 0x5530bc
push str._EnableWinRE_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5521d6
mov ecx, edi
call fcn.00555320
jmp 0x5530bc
push str._FlushDNS_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5521f4
push 2
mov ecx, edi
call fcn.00544e80
jmp 0x5530bc
push str._FixIEHistory_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552210
mov ecx, edi
call fcn.00567550
jmp 0x5530bc
push str._CleanupRecentList_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55222c
mov ecx, edi
call fcn.0055fdf0
jmp 0x5530bc
push str._CleanupTrayIconCache_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55224a
push 1
mov ecx, edi
call fcn.00545770
jmp 0x5530bc
push str._RunMemDiagOnReboot_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552268
push 0
mov ecx, edi
call fcn.0055fce0
jmp 0x5530bc
push str._CancelMemDiag_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552286
push 1
mov ecx, edi
call fcn.0055fce0
jmp 0x5530bc
push str._AeroEffectsTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5522ae
push 1
push str.Aero_Effects
push str.AeroDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._AppCompatibilityTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5522d6
push 1
push str.App_Compatibility
push str.PCWDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._AudioPlaybackTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5522fe
push 1
push str.Audio_Playback
push str.AudioPlaybackDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._AudioRecordingTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552326
push 1
push str.Audio_Recording
push str.AudioRecordingDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._DeviceTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55234e
push 1
push str.Device
push str.DeviceDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._DirectAccessTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552376
push 1
push str.DirectAccess
push str.NetworkDiagnosticsDA
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._FileShareTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55239e
push 1
push str.File_Share
push str.NetworkDiagnosticsFileShare
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._HomeGroupTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5523c6
push 1
push str.HomeGroup
push str.HomeGroupDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._IEPerformanceTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5523ee
push 1
push str.IE_Performance
push str.IEBrowseWebDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._IESecurityTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552416
push 1
push str.IE_Security
push str.IESecurityDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._InstallUninstallTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552443
push 0
push str.Install_Uninstall
push str.InstallUninstallTroubleshooter.diagcab
push str.https:__aka.ms_Program_Install_and_Uninstall
mov ecx, edi
call fcn.00578390
jmp 0x5530bc
push str._InternetConnectionTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55246b
push 1
push str.Internet_Connection
push str.NetworkDiagnosticsWeb
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._KeyboardTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552493
push 1
push str.Keyboard
push str.KeyboardDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._MaintenanceTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5524bb
push 1
push str.Maintenance
push str.MaintenanceDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._NetworkAdapterTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5524e3
push 1
push str.Network_Adapter
push str.NetworkDiagnosticsNetworkAdapter
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._NetworkInboundTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55250b
push 1
push str.Network_Inbound
push str.NetworkDiagnosticsInbound
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._PerformanceTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552533
push 1
push str.Performance
push str.PerformanceDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._PowerTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55255b
push 1
push str.Power
push str.PowerDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._PrinterTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552583
push 1
push str.Printer
push str.PrinterDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._SearchTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5525ab
push 1
push str.Windows_Search
push str.SearchDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._ShowHideUpdatesTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5525d8
push 0
push str.Show_Hide_Updates
push str.ShowHideUpdatesTroubleshooter.diagcab
push str.https:__download.microsoft.com_download_F_2_2_F22D5FDB_59CD_4275_8C95_1BE17BF70B21_wushowhide.diagcab
mov ecx, edi
call fcn.00578390
jmp 0x5530bc
push str._StartMenutroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5525f4
mov ecx, edi
call fcn.00578770
jmp 0x5530bc
push str._WindowsStoreAppsTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552610
mov ecx, edi
call fcn.00578740
jmp 0x5530bc
push str._WindowsUpdateTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552638
push 1
push str.Windows_Update
push str.WindowsUpdateDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._WindowsUpdateWebTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552654
mov ecx, edi
call fcn.00578700
jmp 0x5530bc
push str._WMPSettingsTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55267c
push 1
push str.WMP_Settings
push str.WindowsMediaPlayerConfigurationDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._WMPDVDPlayingTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5526a4
push 1
push str.WMP_DVD_Playing
push str.WindowsMediaPlayerDVDDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._WMPLibraryTroubleshooter_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5526cc
push 1
push str.WMP_Library
push str.WindowsMediaPlayerLibraryDiagnostic
mov ecx, edi
call fcn.00578580
jmp 0x5530bc
push str._BackupDesktopIcons_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5526eb
sub esp, 8
mov ecx, edi
call fcn.00554cb0
jmp 0x5530bc
push str._RestoreDesktopIcons_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55270a
sub esp, 8
mov ecx, edi
call fcn.00554bc0
jmp 0x5530bc
push str._DefragDrive_
mov ecx, ebx
call fcn.005dc4c0
mov ecx, ebx
test al, al
je 0x552770
push 3
push 0
push 0
push 0x62439c
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005da270
mov ecx, eax
call fcn.005da0f0
mov ecx, esi
call fcn.005dc190
mov ecx, eax
call fcn.005e1220
cmp eax, 3
je 0x55275a
push 0x656ce4
mov ecx, esi
call fcn.005dc510
push 1
mov ecx, esi
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00570ea0
jmp 0x5530bc
push str._UnpinAllStartTiles_
call fcn.005dc4c0
test al, al
je 0x55278a
mov ecx, edi
call fcn.00577630
jmp 0x5530bc
push str._FixChromeBlackWindow_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5527a7
push ecx
mov ecx, edi
call fcn.00565250
jmp 0x5530bc
push str._RestartWindowsShell_
mov ecx, ebx
call fcn.005dc4c0
test al, al
jne 0x5530b3
push str._ResetWindowsShell_
mov ecx, ebx
call fcn.005dc4c0
test al, al
jne 0x5530b3
push str._DismRepairGUI_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5527eb
mov ecx, edi
call fcn.005747d0
jmp 0x5530bc
push str._SfcScanGUI_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552807
mov ecx, edi
call fcn.00572fc0
jmp 0x5530bc
push str._CheckDiskGUI_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552823
mov ecx, edi
call fcn.00571de0
jmp 0x5530bc
push str._ResetFileAssociations_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552848
push ecx
mov ecx, edi
call fcn.0057c2d0
push eax
mov ecx, edi
call fcn.0055ff70
jmp 0x5530bc
push str._WiFiManager_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552864
mov ecx, edi
call fcn.0055f510
jmp 0x5530bc
push str._CleanupSystemProfile_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552880
mov ecx, edi
call fcn.0055f100
jmp 0x5530bc
push str._DismWindowsRepair_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55289c
mov ecx, edi
call fcn.0056b200
jmp 0x5530bc
push str._Sleep_
mov ecx, ebx
call fcn.005dc4c0
mov ecx, ebx
test al, al
je 0x55293c
push 0
push 0
push 0x62439c
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005da270
push 3
mov ecx, esi
call fcn.005da0f0
mov ecx, esi
call fcn.005dafb0
mov ebx, eax
cmp ebx, 1
jl 0x5530bc
push 0x96
push 0
sub esp, 0xc
mov ecx, esi
push str._secconds...
call fcn.005dc190
push eax
push str.Pausing_the_script_for
mov ecx, edi
call fcn.005779e0
push 1
push ebx
mov ecx, edi
call fcn.00546ef0
cmp eax, 0xffffffff
jne 0x5530bc
push 0
push str._secconds.
mov ecx, esi
call fcn.005dc190
push eax
push str.Script_successfully_paused_for
mov ecx, edi
call fcn.0057b7e0
movzx eax, al
jmp 0x5530c1
push str._Beep_
call fcn.005dc4c0
mov ecx, ebx
test al, al
je 0x5529b7
push 0
push 0
push 0x62439c
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005da270
push 3
mov ecx, esi
call fcn.005da0f0
mov ecx, esi
call fcn.005dafb0
mov ebx, eax
test ebx, ebx
je 0x5530bc
jns 0x552987
push 1
mov ecx, esi
call fcn.005dad50
push 0x96
push 0
sub esp, 0xc
mov ecx, esi
push str._times...
call fcn.005dc190
push eax
push str.Beeping
mov ecx, edi
call fcn.005779e0
push ebx
mov ecx, edi
call fcn.0056ae90
jmp 0x5530bc
push str._FixInstallProblems_
call fcn.005dc4c0
test al, al
je 0x5529d1
mov ecx, edi
call fcn.0056a3b0
jmp 0x5530bc
push str._EnableAutoplay_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x5529ed
mov ecx, edi
call fcn.005707a0
jmp 0x5530bc
push str._DisableAutoplay_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552a09
mov ecx, edi
call fcn.00570640
jmp 0x5530bc
push str._FixWindowsUpdate_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552a30
mov al, byte [edi + 0x28]
mov ecx, edi
not al
and al, 1
movzx eax, al
push eax
call fcn.00569d90
jmp 0x5530bc
push str._ResetHostsAndDns_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552a4e
push 3
mov ecx, edi
call fcn.00544e80
jmp 0x5530bc
push str._ResetMSEdge_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552a8f
push 0
push 1
push 1
push 0
push str._AllUsers
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
xor ecx, ecx
cmp esi, eax
setg cl
push ecx
mov ecx, edi
call fcn.005447d0
jmp 0x5530bc
push str._ResetIEAndInternet_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552aad
push 1
mov ecx, edi
call fcn.00543630
jmp 0x5530bc
push str._ResetChrome_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552aee
push 0
push 1
push 1
push 0
push str._AllUsers
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
xor ecx, ecx
cmp esi, eax
setg cl
push ecx
mov ecx, edi
call fcn.00543400
jmp 0x5530bc
push str._ResetFirefox_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552b2f
push 0
push 1
push 1
push 0
push str._AllUsers
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
xor ecx, ecx
cmp esi, eax
setg cl
push ecx
mov ecx, edi
call fcn.00542710
jmp 0x5530bc
push str._ResetFFPrintSettings_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552b4b
mov ecx, edi
call fcn.00541e00
jmp 0x5530bc
push str._ResetPrintSpool_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552b67
mov ecx, edi
call fcn.00541d00
jmp 0x5530bc
push str._ResetCDBurnQueue_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552b83
mov ecx, edi
call fcn.00541a30
jmp 0x5530bc
push str._CreateRestorePoint_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552baa
sub esp, 8
push 0
push ecx
push str.System_repair_action_restore_point
mov ecx, edi
call fcn.00564a40
jmp 0x5530bc
push str._EmptyBrowsersCache_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552bec
push 0
push 1
push 1
push 0
push str._AllUsers
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
mov ecx, edi
setg byte [ebp - 0x34]
push dword [ebp - 0x34]
call fcn.00563140
jmp 0x5530bc
push str._DeleteBrowsersCookies_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552c2e
push 0
push 1
push 1
push 0
push str._AllUsers
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
mov ecx, edi
setg byte [ebp - 0x34]
push dword [ebp - 0x34]
call fcn.005623c0
jmp 0x5530bc
push str._UnhideDir_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552c99
push 8
push 0
push 0x62439c
push str._s_UnhideDir__s
mov ecx, esi
call fcn.005d9660
push str.All_drives
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x552c6f
mov ecx, edi
call fcn.00546920
jmp 0x5530bc
mov ecx, esi
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x5530bc
mov ecx, esi
call fcn.005dc190
push eax
mov ecx, edi
call fcn.00546820
jmp 0x5530bc
push str._RebuildIconCache_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552cdb
push 0
push 1
push 1
push 0
push str._Allusers
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
mov ecx, edi
setg byte [ebp - 0x34]
push dword [ebp - 0x34]
call fcn.00546320
jmp 0x5530bc
push str._ResetGroupPolicy_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552d1d
push 0
push 1
push 1
push 0
push str._DelAdm
mov ecx, esi
call fcn.005daa70
mov ecx, ebx
mov esi, eax
call fcn.005dc3a0
cmp esi, eax
mov ecx, edi
setg byte [ebp - 0x34]
push dword [ebp - 0x34]
call fcn.005407f0
jmp 0x5530bc
push str._ImunizeSystem_
mov ecx, ebx
call fcn.005dc4c0
test al, al
jne 0x553052
push str._ImmunizeSystem_
mov ecx, ebx
call fcn.005dc4c0
test al, al
jne 0x553052
push str._ClearAllBrowsersHistory_
mov ecx, ebx
call fcn.005dc4c0
mov ecx, ebx
test al, al
je 0x552d96
push 0
push 0
push 0x62439c
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005da270
push 0
push 1
push 1
push 0
push str.AllUsers
mov ecx, esi
call fcn.005daa70
test eax, eax
mov ecx, edi
setg al
movzx eax, al
push eax
call fcn.005623a0
jmp 0x5530bc
push str._BackupRegistry_
call fcn.005dc4c0
test al, al
je 0x552ebf
push 1
push 0x6558f0
mov ecx, esi
call fcn.005dc190
mov ebx, dword [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.005d9070
mov ecx, ebx
mov esi, 3
call fcn.005d9210
cmp eax, 1
jbe 0x552de4
push 1
call fcn.005d9220
push eax
call fcn.004227e6
add esp, 4
mov esi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x20]
movq qword [ebp - 0x20], xmm0
call fcn.005dc5e0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov ecx, ebx
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x24], 0
call fcn.005d9210
cmp eax, 2
jbe 0x552e26
push 2
call fcn.005d9220
jmp 0x552e2b
mov eax, 0x62439c
push 1
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc570
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.005d9210
push 0
cmp eax, 3
jbe 0x552e63
push 1
push 3
call fcn.005d9220
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc260
mov ecx, eax
call fcn.005dbc20
jmp 0x552e8e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.RegistryBackups
push str.UVK
push ecx
mov ecx, edi
call fcn.0057c490
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc200
push 0
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
push esi
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0054ddf0
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x20]
call fcn.005dc430
jmp 0x5530bc
push str._RestoreRegistry_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552fd5
push 1
push 0x6558f0
mov ecx, esi
call fcn.005dc190
mov ebx, dword [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.005d9070
mov ecx, ebx
mov esi, 3
call fcn.005d9210
cmp eax, 1
jbe 0x552f0f
push 1
call fcn.005d9220
push eax
call fcn.004227e6
add esp, 4
mov esi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x2c], xmm0
call fcn.005dc5e0
mov dword [ebp - 4], 2
xorps xmm0, xmm0
mov ecx, ebx
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], 0
call fcn.005d9210
cmp eax, 2
jbe 0x552f51
push 2
call fcn.005d9220
jmp 0x552f56
mov eax, 0x62439c
push 1
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc570
mov ecx, ebx
mov byte [ebp - 4], 3
call fcn.005d9210
cmp eax, 3
jbe 0x552f8c
push 0
push 1
push 3
call fcn.005d9220
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc260
mov ecx, eax
call fcn.005dbc20
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0054c8e0
test eax, eax
je 0x552fc0
mov eax, dword [ebp - 0x38]
cmp byte [eax], 0
jne 0x552fc0
mov byte [eax], 2
lea ecx, [ebp - 0x20]
call fcn.005dc430
lea ecx, [ebp - 0x2c]
call fcn.005dc430
jmp 0x5530bc
push str._Reboot_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x552ff0
mov ecx, dword [ebp - 0x38]
mov byte [ecx], 2
jmp 0x5530bc
push str._Shutdown_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x55300b
mov ecx, dword [ebp - 0x38]
mov byte [ecx], 1
jmp 0x5530bc
push str._RebootSafeMode_
mov ecx, ebx
call fcn.005dc4c0
test al, al
je 0x553048
push 0xb
mov ecx, esi
call fcn.005da0f0
mov ecx, ebx
call fcn.005dc3a0
push eax
mov ecx, esi
call fcn.005dad50
mov ecx, esi
call fcn.005dafb0
mov ecx, dword [ebp - 0x38]
dec eax
neg eax
sbb al, al
add al, 4
mov byte [ecx], al
jmp 0x5530bc
push ebx
mov ecx, edi
call fcn.005514d0
jmp 0x5530c1
push 0
push 0
push 0x62439c
mov ecx, ebx
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005da270
push 0
push 1
push 1
push 0
push str.AllUsers
mov ecx, esi
call fcn.005daa70
mov ebx, dword [ebp + 0x18]
test ebx, ebx
je 0x553090
lea eax, [ebx - 1]
mov ecx, esi
push eax
call fcn.005dae00
push 3
mov ecx, esi
call fcn.005da0f0
test ebx, ebx
mov ecx, esi
setg al
movzx eax, al
push eax
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0055e210
jmp 0x5530bc
push 1
mov ecx, edi
call fcn.00578c60
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 0x14