Function at 0x59ca52
Capabilities:
Create process on windows

Disassembly:
push 0x34
mov eax, 0x60c9c4
call fcn.004db48b
mov esi, ecx
mov edi, dword [0x668294]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
and dword [ebp - 4], 0
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 2
call fcn.005a54ce
push eax
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
call fcn.0047a754
mov byte [ebp - 4], 3
mov ebx, 0x668010
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x59cb1f
push str.Artist
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.00416eed
push eax
lea ecx, [ebp - 0x18]
call fcn.0040d242
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cac7
call fcn.00407965
push str.Title
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.00416eed
push eax
lea ecx, [ebp - 0x10]
call fcn.0040d242
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59caef
call fcn.00407965
lea eax, [esi + 0x8c]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040d36e
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d242
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cb19
call fcn.00407965
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edi
mov edx, dword [edi - 8]
mov eax, dword [ebp - 0x10]
test edx, edx
je 0x59cc91
cmp dword [eax - 8], 0
je 0x59cc91
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.0041be56
push eax
lea ecx, [ebp - 0x14]
call fcn.0040d36e
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cb5e
call fcn.00407965
mov edi, dword [ebp - 0x14]
mov eax, dword [edi - 8]
cmp word [edi + eax*2 - 2], 0x44
je 0x59cc2f
mov esi, 0x634970
push esi
call fcn.00505bb3
pop ecx
push esi
push eax
lea ecx, [ebp - 0x14]
call fcn.0040f454
push 0xfffffffffffffffe
push 0
lea eax, [ebp - 0x14]
mov ecx, 0x668e30
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00422ead
push eax
lea ecx, [ebp - 0x20]
call fcn.0042989b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x59cbb1
call fcn.00416ed3
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x59cc2c
push str.Artist
lea ecx, [ebp - 0x28]
mov dword [esi + 0x28], 1
call fcn.0041ddcb
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.00421f8b
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cbee
call fcn.00407965
push str.Title
lea ecx, [ebp - 0x28]
call fcn.0041ddcb
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.00421f8b
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cc1d
call fcn.00407965
lea eax, [ebp - 0x2c]
push eax
lea ecx, [esi + 0x8c]
call fcn.0040d242
mov edi, dword [ebp - 0x14]
push esi
push 9
push 0x784
push dword [0x674760]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [edi - 0xc]
cmp ecx, ebx
je 0x59cc4f
call fcn.00407965
mov edi, dword [ebp - 0x1c]
test esi, esi
je 0x59cc5d
mov ecx, esi
call fcn.00416ed3
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cc6c
call fcn.00407965
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cc7b
call fcn.00407965
lea ecx, [edi - 0xc]
cmp ecx, ebx
je 0x59cc87
call fcn.00407965
xor eax, eax
call fcn.004db459
ret 0x10
mov ecx, dword [0x668294]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 9
test edx, edx
jne 0x59cd1f
cmp dword [eax - 8], edx
jne 0x59cd1f
mov ecx, esi
call fcn.00421f50
test eax, eax
jne 0x59cd1f
mov ebx, str.artist
push ebx
call fcn.00505070
pop ecx
push ebx
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040f305
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.005d6696
push ecx
mov byte [ebp - 4], 0xa
mov ecx, esp
mov edx, dword [eax]
push 0
call fcn.00407a7f
pop ecx
lea ecx, [ebp - 0x30]
call fcn.005dd9c0
pop ecx
push dword [eax]
lea eax, [ebp - 0x14]
push 0x63b1d4
push eax
call fcn.0042ef7b
mov ecx, dword [ebp - 0x30]
mov ebx, 0x668010
add ecx, 0xfffffff4
add esp, 0xc
cmp ecx, ebx
je 0x59cd1a
call fcn.00407965
mov ecx, dword [ebp - 0x34]
jmp 0x59cd84
push ecx
mov ecx, esp
mov edx, edi
push 0
call fcn.00407a7f
pop ecx
lea ecx, [ebp - 0x34]
call fcn.005dd9c0
pop ecx
push dword [eax]
lea eax, [ebp - 0x1c]
push 0x63b1a0
push eax
call fcn.0042ef7b
mov ecx, dword [ebp - 0x34]
add esp, 0xc
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cd57
call fcn.00407965
mov edx, dword [ebp - 0x10]
push ecx
mov ecx, esp
push 0
call fcn.00407a7f
pop ecx
lea ecx, [ebp - 0x38]
call fcn.005dd9c0
pop ecx
push dword [eax]
lea eax, [ebp - 0x14]
push 0x63b1d4
push eax
call fcn.0042ef7b
mov ecx, dword [ebp - 0x38]
add esp, 0xc
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cd90
call fcn.00407965
mov eax, dword [0x668294]
push 0x8298
push ecx
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], eax
call fcn.0041129f
mov edx, dword [ebp - 0x24]
lea ecx, [ebp - 0x3c]
push 0
call fcn.00407a7f
pop ecx
push dword [ebp - 0x1c]
push dword [ebp - 0x14]
push dword [eax]
lea eax, [ebp - 0x28]
push str._s_downloadmp3.php_fttp_s_s
push eax
call fcn.0042ef7b
mov ecx, dword [ebp - 0x3c]
add esp, 0x14
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cddc
call fcn.00407965
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cdeb
call fcn.00407965
lea ecx, [ebp - 0x3c]
call fcn.005c8f50
push str.Internet_Exploreriexplore.exe
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.0040ce1d
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59ce15
call fcn.00407965
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push 0
call fcn.00407b07
pop ecx
push 1
push 0
push dword [eax]
push dword [ebp - 0x24]
push 0x634c74
push dword [0x674760]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59ce4c
call fcn.00407965
call fcn.005ca27a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59ce60
call fcn.00407965
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59ce6f
call fcn.00407965
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59ce7e
call fcn.00407965
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
cmp ecx, ebx
je 0x59cc52
call fcn.00407965
jmp 0x59cc52