Function at 0x58f760
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b2dac
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x616040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov dword [ebp - 0x10], ebx
mov edi, ecx
mov dword [ebp - 0x6c], edi
xor ecx, ecx
cmp ebx, 0x9fbf1
jne 0x58f7a1
mov ecx, 1
mov eax, dword [0x621a6c]
test eax, eax
je 0x58ffdf
push 0x10018
push dword [ecx*4 + 0x621ebc]
call eax
cmp eax, 0x13ba
jne 0x58ffda
push str.http:__rs.ciggws.net_rd2.cgi_
lea ecx, [ebp - 0x3c]
call fcn.00402f60
mov dword [ebp - 4], 0
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58f7f7
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
cmp edi, 0x2473
jne 0x58f81c
push 0xe
push str.FNCSCAN_U_ERR
jmp 0x58f823
push 0xa
push str.FNCSCAN_U
call fcn.004035a0
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58f844
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 2
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58f871
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push 0x5ecfc0
push eax
call fcn.00402d50
mov esi, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
push esi
push str.OSV_s
push eax
call fcn.00402d50
add esp, 0x14
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58f8c1
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c], eax
push 0x20013
mov edx, ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.0058f590
mov byte [ebp - 4], 5
push dword [eax]
lea eax, [ebp - 0x2c]
push str.DEV_s
push eax
call fcn.00402d50
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp - 0x28]
add esp, 0x10
add edx, 0xfffffff0
mov eax, ebx
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x58f91b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58f937
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x24]
mov edx, dword [ebp - 0x10]
push 0x20014
call fcn.0058f590
mov byte [ebp - 4], 7
push dword [eax]
lea eax, [ebp - 0x28]
push 0x5ecfc4
push eax
call fcn.00402d50
mov byte [ebp - 4], 6
add esp, 0x10
mov edx, dword [ebp - 0x24]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58f98f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58f9ab
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x5ead6c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00405600
mov byte [ebp - 4], 9
push 0x2e
push dword [ebp - 0x14]
call fcn.00529be4
add esp, 8
test eax, eax
jne 0x58f9e3
or eax, 0xffffffff
jmp 0x58f9e8
sub eax, dword [ebp - 0x14]
sar eax, 1
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x14]
call fcn.00407be0
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.004032d0
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fa22
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x14]
lea eax, [ebp - 0x24]
push str.SFV_s
push eax
call fcn.00402d50
add esp, 0xc
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fa52
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
push 7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
push str.CTV1.1
call fcn.004035a0
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fa8e
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0x10]
push 0x23c9
call fcn.0058f590
mov byte [ebp - 4], 0xd
push dword [eax]
lea eax, [ebp - 0x20]
push str.LNG_s
push eax
call fcn.00402d50
mov byte [ebp - 4], 0xc
add esp, 0x10
mov edx, dword [ebp - 0x10]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fae6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x58fb02
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xe
cmp edi, 0xe6c
jg 0x58fb44
je case.0x58fb28.3632
add edi, 0xfffff1d1
cmp edi, 6
ja case.0x58fb28.3632
jmp dword [edi*4 + 0x590380]
push str.CTNSU_2FTop.html
jmp 0x58fb74
push str.CTNSU_2Fstorages.html
jmp 0x58fb74
push str.CTNSU_2FSu_PAGE4.html
jmp 0x58fb74
sub edi, 0xe6d
je case.0x58fb28.3633
dec edi
je case.0x58fb28.3637
sub edi, 0x1605
je 0x58fb68
push 0x11
push str.CTNSU_2FTop.html
lea ecx, [ebp - 0x10]
call fcn.004035a0
jmp 0x58fb7c
push str.CTNSU_2FSu_error_msg_su.html
jmp 0x58fb74
push str.CTNSU_2FSu_PAGE3.html
lea ecx, [ebp - 0x10]
call fcn.00403020
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xf
push eax
call fcn.00407c60
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x10
push ecx
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x11
push eax
call fcn.00407c60
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
push ecx
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x13
push eax
call fcn.00407c60
add esp, 0x48
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x15
push eax
call fcn.00407c60
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x16
push ecx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x17
push eax
call fcn.00407c60
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x18
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x19
push eax
call fcn.00407c60
add esp, 0x48
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004030a0
push 0x5ed118
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
call fcn.00407c60
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004030a0
mov byte [ebp - 4], 0x1b
add esp, 0x24
mov edx, dword [ebp - 0x40]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fcb9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov ecx, ebx
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fcd9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
mov ecx, ebx
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fcf9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov ecx, ebx
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fd19
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov ecx, ebx
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fd39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov ecx, ebx
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fd59
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x15
mov ecx, ebx
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fd79
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov ecx, ebx
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fd99
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov ecx, ebx
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fdb9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov ecx, ebx
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fdd9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov ecx, ebx
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fdf9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov ecx, ebx
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fe19
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov ecx, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fe39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov ecx, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fe59
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 5
push 0
push 0x5e9af0
push dword [ebp - 0x38]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x38]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fe8e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov ecx, ebx
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58feae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58fece
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58feee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ff0e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
mov ecx, ebx
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ff2e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov ecx, ebx
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ff4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov ecx, ebx
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ff6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 2
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ff8b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ecx, ebx
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ffab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x58ffcb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x3c]
jmp 0x590350
mov eax, dword [0x621a6c]
xor ecx, ecx
cmp ebx, 0x9fbf1
jne 0x58ffee
mov ecx, 1
test eax, eax
je 0x590000
push 0x2000000
push dword [ecx*4 + 0x621ebc]
call eax
push eax
mov edx, ebx
lea ecx, [ebp - 0x74]
call fcn.0058f590
add esp, 4
mov edx, eax
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x2c]
call fcn.0058b080
mov byte [ebp - 4], 0x1f
or ebx, 0xffffffff
mov edx, dword [ebp - 0x74]
mov eax, ebx
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x590042
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.SOFTWARECanonEasy_Guide_Viewer
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x10], 0
call fcn.00402f60
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x70]
push 0x5ec790
push eax
call fcn.00407d40
add esp, 0xc
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00403430
mov byte [ebp - 4], 0x20
mov ecx, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5900a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push dword [ebp - 0x1c]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp - 0x10], 0
je 0x5901a0
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x5900e0
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x10]
mov edx, str.APP_PATH
push eax
call fcn.0058b690
mov esi, dword [ebp - 0x3c]
add esp, 4
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x590183
call fcn.00414e1f
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x59012f
push 0x80004005
call fcn.00402740
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x10]
mov edx, str.Info_PATH
push eax
call fcn.0058b690
mov edi, dword [ebp - 0x30]
add esp, 4
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x5901f5
add edi, 0xfffffff0
mov byte [ebp - 4], 0x22
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590183
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x20
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5901a0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5901c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x5901e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x14]
call fcn.00402b30
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x6c]
add eax, 0xfffff1d1
cmp eax, 0x3f
ja case.0x590215.3631
movzx eax, byte [eax + 0x5903b0]
jmp dword [eax*4 + 0x59039c]
mov edx, str.SU_PAGE2
jmp 0x590236
mov edx, str.SU_PAGE3
jmp 0x590236
mov edx, str.SU_PAGE4
jmp 0x590236
mov edx, 0x5ed11c
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
call fcn.0058b690
add esp, 4
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x5eaee0
lea eax, [ebp - 0x30]
mov dword [ebp - 0x10], 0
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00407c60
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
push ecx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004030a0
add esp, 0x18
push 5
push 0
push dword [eax]
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x70]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5902ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x24
mov ecx, ebx
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5902cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov ecx, ebx
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x5902ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0x22
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590309
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x20
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590326
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov ecx, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x590346
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x590367
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret