Function at 0x58fab0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b318c
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x616040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov dword [ebp - 0x10], ebx
mov edi, ecx
mov dword [ebp - 0x6c], edi
xor ecx, ecx
cmp ebx, 0x9fbf1
jne 0x58faf1
mov ecx, 1
mov eax, dword [0x621a6c]
test eax, eax
je 0x59032f
push 0x10018
push dword [ecx*4 + 0x621ebc]
call eax
cmp eax, 0x13ba
jne 0x59032a
push str.http:__rs.ciggws.net_rd2.cgi_
lea ecx, [ebp - 0x3c]
call fcn.00402f60
mov dword [ebp - 4], 0
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fb47
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
cmp edi, 0x2473
jne 0x58fb6c
push 0xe
push str.FNCSCAN_U_ERR
jmp 0x58fb73
push 0xa
push 0x5ecf9c
call fcn.004035a0
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fb94
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 2
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fbc1
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push 0x5ecf98
push eax
call fcn.00402d50
mov esi, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
push esi
push str.OSV_s
push eax
call fcn.00402d50
add esp, 0x14
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fc11
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c], eax
push 0x20013
mov edx, ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.0058f8e0
mov byte [ebp - 4], 5
push dword [eax]
lea eax, [ebp - 0x2c]
push str.DEV_s
push eax
call fcn.00402d50
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp - 0x28]
add esp, 0x10
add edx, 0xfffffff0
mov eax, ebx
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x58fc6b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fc87
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x24]
mov edx, dword [ebp - 0x10]
push 0x20014
call fcn.0058f8e0
mov byte [ebp - 4], 7
push dword [eax]
lea eax, [ebp - 0x28]
push str.TYP_s
push eax
call fcn.00402d50
mov byte [ebp - 4], 6
add esp, 0x10
mov edx, dword [ebp - 0x24]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fcdf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fcfb
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x5ead6c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00405600
mov byte [ebp - 4], 9
push 0x2e
push dword [ebp - 0x14]
call fcn.00529c14
add esp, 8
test eax, eax
jne 0x58fd33
or eax, 0xffffffff
jmp 0x58fd38
sub eax, dword [ebp - 0x14]
sar eax, 1
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x14]
call fcn.00407be0
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.004032d0
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fd72
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x14]
lea eax, [ebp - 0x24]
push str.SFV_s
push eax
call fcn.00402d50
add esp, 0xc
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fda2
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
push 7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
push str.CTV1.1
call fcn.004035a0
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fdde
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0x10]
push 0x23c9
call fcn.0058f8e0
mov byte [ebp - 4], 0xd
push dword [eax]
lea eax, [ebp - 0x20]
push str.LNG_s
push eax
call fcn.00402d50
mov byte [ebp - 4], 0xc
add esp, 0x10
mov edx, dword [ebp - 0x10]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fe36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fe52
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xe
cmp edi, 0xe6c
jg 0x58fe94
je case.0x58fe78.3632
add edi, 0xfffff1d1
cmp edi, 6
ja case.0x58fe78.3632
jmp dword [edi*4 + 0x5906d0]
push str.CTNSU_2FTop.html
jmp 0x58fec4
push str.CTNSU_2Fstorages.html
jmp 0x58fec4
push str.CTNSU_2FSu_PAGE4.html
jmp 0x58fec4
sub edi, 0xe6d
je case.0x58fe78.3633
dec edi
je case.0x58fe78.3637
sub edi, 0x1605
je 0x58feb8
push 0x11
push str.CTNSU_2FTop.html
lea ecx, [ebp - 0x10]
call fcn.004035a0
jmp 0x58fecc
push 0x5ed0cc
jmp 0x58fec4
push str.CTNSU_2FSu_PAGE3.html
lea ecx, [ebp - 0x10]
call fcn.00403020
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xf
push eax
call fcn.00407c60
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x10
push ecx
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x11
push eax
call fcn.00407c60
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
push ecx
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x13
push eax
call fcn.00407c60
add esp, 0x48
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x15
push eax
call fcn.00407c60
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x16
push ecx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x17
push eax
call fcn.00407c60
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x18
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x19
push eax
call fcn.00407c60
add esp, 0x48
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004030a0
push 0x5ed0c8
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
call fcn.00407c60
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004030a0
mov byte [ebp - 4], 0x1b
add esp, 0x24
mov edx, dword [ebp - 0x40]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590009
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov ecx, ebx
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590029
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov ecx, ebx
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590049
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov ecx, ebx
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590069
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov ecx, ebx
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590089
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov ecx, ebx
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5900a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x15
mov ecx, ebx
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5900c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov ecx, ebx
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5900e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov ecx, ebx
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590109
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov ecx, ebx
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590129
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov ecx, ebx
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590149
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov ecx, ebx
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590169
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov ecx, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590189
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov ecx, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5901a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 5
push 0
push 0x5e9af0
push dword [ebp - 0x38]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x38]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5901de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov ecx, ebx
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5901fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59021e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59023e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59025e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
mov ecx, ebx
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59027e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov ecx, ebx
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59029e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov ecx, ebx
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5902be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 2
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5902db
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ecx, ebx
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5902fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59031b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x3c]
jmp 0x5906a0
mov eax, dword [0x621a6c]
xor ecx, ecx
cmp ebx, 0x9fbf1
jne 0x59033e
mov ecx, 1
test eax, eax
je 0x590350
push 0x2000000
push dword [ecx*4 + 0x621ebc]
call eax
push eax
mov edx, ebx
lea ecx, [ebp - 0x74]
call fcn.0058f8e0
add esp, 4
mov edx, eax
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x2c]
call fcn.0058b350
mov byte [ebp - 4], 0x1f
or ebx, 0xffffffff
mov edx, dword [ebp - 0x74]
mov eax, ebx
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x590392
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.SOFTWARECanonEasy_Guide_Viewer
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x10], 0
call fcn.00402f60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x70]
push 0x5ec790
push eax
call fcn.00407d40
add esp, 0xc
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00403430
mov byte [ebp - 4], 0x20
mov ecx, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5903f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push dword [ebp - 0x1c]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp - 0x10], 0
je 0x5904f0
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x590430
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x10]
mov edx, str.APP_PATH
push eax
call fcn.0058b990
mov esi, dword [ebp - 0x3c]
add esp, 4
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x5904d3
call fcn.0041505f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x59047f
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x10]
mov edx, str.Info_PATH
push eax
call fcn.0058b990
mov edi, dword [ebp - 0x30]
add esp, 4
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x590545
add edi, 0xfffffff0
mov byte [ebp - 4], 0x22
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5904d3
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x20
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5904f0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590510
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x590531
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x14]
call fcn.00402b30
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x6c]
add eax, 0xfffff1d1
cmp eax, 0x3f
ja case.0x590565.3631
movzx eax, byte [eax + 0x590700]
jmp dword [eax*4 + 0x5906ec]
mov edx, str.SU_PAGE2
jmp 0x590586
mov edx, str.SU_PAGE3
jmp 0x590586
mov edx, str.SU_PAGE4
jmp 0x590586
mov edx, str.SU_PAGE1
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
call fcn.0058b990
add esp, 4
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x5eaee0
lea eax, [ebp - 0x30]
mov dword [ebp - 0x10], 0
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00407c60
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
push ecx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004030a0
add esp, 0x18
push 5
push 0
push dword [eax]
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x70]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5905fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x24
mov ecx, ebx
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59061c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov ecx, ebx
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x59063c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0x22
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590659
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x20
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590676
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590696
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x5906b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret