Function at 0x558da0
Capabilities:
Check if file exists
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x635caf
mov eax, dword fs:[0]
push eax
sub esp, 0x7c4
mov eax, dword [0x6b278c]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x710], ecx
mov ecx, dword [ebp - 0x710]
add ecx, 0x258
call fcn.0040ee50
test eax, eax
jbe 0x559b97
mov ecx, dword [ebp - 0x710]
add ecx, 0x258
call fcn.0040e5d0
push eax
push str.mmids__s_
call fcn.00412530
push eax
call fcn.0040d040
add esp, 0xc
mov dword [ebp - 0x10], 0xffffffff
mov ecx, dword [ebp - 0x710]
add ecx, 0xa3c
call fcn.0055d3b0
lea ecx, [ebp - 0x50]
call fcn.00566470
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x710]
add eax, 0xa3c
push eax
push 7
push str.taobao.comtmall.com
lea ecx, [ebp - 0x50]
call fcn.00566f00
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x6c]
call fcn.00414040
mov byte [ebp - 4], 1
push 0x6589e8
lea ecx, [ebp - 0x34]
call fcn.0040e4b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x90]
push ecx
mov ecx, dword [ebp - 0x710]
add ecx, 0xa3c
call fcn.00414550
jmp 0x558ea3
push 0
lea edx, [ebp - 0x4e4]
push edx
lea ecx, [ebp - 0x90]
call fcn.0055d410
lea eax, [ebp - 0x4ec]
push eax
mov ecx, dword [ebp - 0x710]
add ecx, 0xa3c
call fcn.0040e8c0
push eax
lea ecx, [ebp - 0x90]
call fcn.00449590
movzx ecx, al
test ecx, ecx
je 0x559349
lea edx, [ebp - 0x98]
push edx
lea ecx, [ebp - 0x90]
call fcn.0052bb90
mov ecx, eax
call fcn.0055d2b0
jmp 0x558f01
push 0
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x98]
call fcn.0055d450
lea ecx, [ebp - 0x4fc]
push ecx
lea ecx, [ebp - 0x90]
call fcn.0052bb90
mov ecx, eax
call fcn.0040e8f0
push eax
lea edx, [ebp - 0x98]
push edx
call fcn.00412510
add esp, 8
movzx eax, al
test eax, eax
je 0x55933c
lea ecx, [ebp - 0x98]
call fcn.0055d490
mov ecx, eax
call fcn.0040e5d0
push eax
lea ecx, [ebp - 0x90]
call fcn.0052bb90
add eax, 0x1c
mov ecx, eax
call fcn.0040e5d0
push eax
push str.his_url___s___s_
call fcn.00412530
push eax
call fcn.0040d040
add esp, 0x10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x500], esp
push 0x658a10
call fcn.0040e4b0
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x714]
mov dword [ebp - 0x718], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x98]
call fcn.0055d490
mov ecx, eax
call fcn.0040e5d0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x504], esp
push eax
call fcn.0040e4b0
mov dword [ebp - 0x71c], eax
lea edx, [ebp - 0xb4]
push edx
mov byte [ebp - 4], 2
call fcn.0043fa60
add esp, 0x3c
mov dword [ebp - 0x720], eax
mov byte [ebp - 4], 4
push 0
push 0x658a18
lea ecx, [ebp - 0xb4]
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
jne 0x5591a6
lea ecx, [ebp - 0x98]
call fcn.0055d490
mov ecx, eax
call fcn.0040e5d0
push eax
push str.url__s_
call fcn.00412530
push eax
call fcn.0040d040
add esp, 0xc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x508], esp
push str.ali_trackid
call fcn.0040e4b0
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x728], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x98]
call fcn.0055d490
mov ecx, eax
call fcn.0040e5d0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50c], esp
push eax
call fcn.0040e4b0
mov dword [ebp - 0x72c], eax
lea ecx, [ebp - 0x528]
push ecx
mov byte [ebp - 4], 4
call fcn.0043fa60
add esp, 0x3c
mov dword [ebp - 0x730], eax
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x734], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x734]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0040e550
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x528]
call fcn.0040e530
push 0
push 0x658a48
lea ecx, [ebp - 0xb4]
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
jne 0x5590f2
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb4]
call fcn.0040e530
jmp 0x558eed
push 0
push 0x658a50
lea ecx, [ebp - 0xb4]
call fcn.0040e5f0
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0xc0]
push ecx
push 0x658a58
lea ecx, [ebp - 0xb4]
call fcn.0040e5f0
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xbc]
cmp edx, dword [0x63f3a0]
jne 0x559149
lea ecx, [ebp - 0xb4]
call fcn.0040ee50
sub eax, 1
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
lea edx, [ebp - 0x544]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041c700
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x73c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x73c]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0040e550
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x544]
call fcn.0040e530
push 4
push 0x658a5c
lea ecx, [ebp - 0xb4]
call fcn.0040e5f0
mov dword [ebp - 0xb8], eax
mov edx, dword [ebp - 0xb8]
cmp edx, dword [0x63f3a0]
jne 0x5591e0
lea ecx, [ebp - 0xb4]
call fcn.0040ee50
sub eax, 1
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
sub eax, 3
push eax
push 3
lea ecx, [ebp - 0x560]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041c700
mov dword [ebp - 0x740], eax
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x744], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x744]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0040e550
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x560]
call fcn.0040e530
push 0
lea ecx, [ebp - 0xb4]
call fcn.0040e5d0
push eax
mov ecx, dword [ebp - 0x710]
add ecx, 0x258
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
je 0x559270
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb4]
call fcn.0040e530
jmp 0x55933c
lea ecx, [ebp - 0x90]
call fcn.0052bb90
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x90]
call fcn.0052bb90
add eax, 0x1c
push eax
lea edx, [ebp - 0x57c]
push edx
call fcn.0043a030
add esp, 8
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x74c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0040e400
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x57c]
call fcn.0040e3e0
lea ecx, [ebp - 0x90]
call fcn.0052bb90
add eax, 0x38
push eax
lea ecx, [ebp - 0x34]
call fcn.0040e550
mov dword [ebp - 0x14], 1
lea ecx, [ebp - 0xb4]
call fcn.0040e5d0
push eax
lea ecx, [ebp - 0x90]
call fcn.0052bb90
add eax, 0x1c
mov ecx, eax
call fcn.0040e5d0
push eax
push 0x658a60
call fcn.00412530
push eax
call fcn.0040d040
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb4]
call fcn.0040e530
jmp 0x55933c
cmp dword [ebp - 0x14], 0
je 0x559344
jmp 0x559349
jmp 0x558e8f
push 0x658a90
lea ecx, [ebp - 0x88]
call fcn.0040e4b0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x10], 0
jne 0x55948c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x580], esp
push 0x658a94
call fcn.0040e4b0
mov dword [ebp - 0x750], eax
lea edx, [ebp - 0x59c]
push edx
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x758], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x758]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x59c]
call fcn.0040e530
push 0
push 0x658aa8
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
je 0x559455
push 0
push 0x658ac0
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
add eax, 0xc
push eax
push 0
lea edx, [ebp - 0x5b8]
push edx
lea ecx, [ebp - 0x88]
call fcn.0041c700
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x760], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x760]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5b8]
call fcn.0040e530
push 0x658ad8
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x559487
lea ecx, [ebp - 0x34]
call fcn.0040e5d0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x559487
lea edx, [ebp - 0x34]
push edx
lea ecx, [ebp - 0x88]
call fcn.0040e550
push str.Application360se.exe
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 5
jne 0x5595bb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5bc], esp
push 0x658b1c
call fcn.0040e4b0
mov dword [ebp - 0x764], eax
lea eax, [ebp - 0x5d8]
push eax
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x768]
mov dword [ebp - 0x76c], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x76c]
push edx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5d8]
call fcn.0040e530
push 0
push 0x658b30
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
je 0x559584
push 0
push 0x658b48
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
add eax, 0xc
push eax
push 0
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x88]
call fcn.0041c700
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x774], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x774]
push edx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5f4]
call fcn.0040e530
push 0x658b60
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5595b6
lea ecx, [ebp - 0x34]
call fcn.0040e5d0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x5595b6
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x88]
call fcn.0040e550
push str.Application360chrome.exe
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 1
jne 0x559670
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5f8], esp
push 0x658bb4
call fcn.0040e4b0
mov dword [ebp - 0x778], eax
lea ecx, [ebp - 0x614]
push ecx
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x77c], eax
mov edx, dword [ebp - 0x77c]
mov dword [ebp - 0x780], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x780]
push eax
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x614]
call fcn.0040e530
push 0x658bc0
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
lea ecx, [ebp - 0x88]
call fcn.0040e5d0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x55966b
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
push str.QQBrowser.exe
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 2
jne 0x5596ec
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x618], esp
push 0x658bfc
call fcn.0040e4b0
mov dword [ebp - 0x784], eax
lea edx, [ebp - 0x634]
push edx
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x78c], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x78c]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x634]
call fcn.0040e530
push 0x658c18
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 3
jne 0x559768
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x638], esp
push 0x658c3c
call fcn.0040e4b0
mov dword [ebp - 0x790], eax
lea edx, [ebp - 0x654]
push edx
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x798], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x798]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x654]
call fcn.0040e530
push 0x658c4c
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 7
jne 0x559863
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x658], esp
push str.Google_Chrome
call fcn.0040e4b0
mov dword [ebp - 0x79c], eax
lea edx, [ebp - 0x674]
push edx
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x7a4], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x7a4]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x674]
call fcn.0040e530
push 0
push 0x658c80
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
je 0x55985e
push 0
push str.Application
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
add eax, 0xc
push eax
push 0
lea edx, [ebp - 0x690]
push edx
lea ecx, [ebp - 0x88]
call fcn.0041c700
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x7ac], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x7ac]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x690]
call fcn.0040e530
push 0x658cb0
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 6
jne 0x55995b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x694], esp
push 0x658cc8
call fcn.0040e4b0
mov dword [ebp - 0x7b0], eax
lea edx, [ebp - 0x6b0]
push edx
call fcn.0042e260
add esp, 0x20
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7b8]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6b0]
call fcn.0040e530
push 0
push 0x658cd8
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
cmp eax, dword [0x63f3a0]
je 0x559959
push 0
push str.SogouExplorer
lea ecx, [ebp - 0x88]
call fcn.0040e5f0
add eax, 0xe
push eax
push 0
lea edx, [ebp - 0x6cc]
push edx
lea ecx, [ebp - 0x88]
call fcn.0041c700
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x7c0]
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040e550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6cc]
call fcn.0040e530
push 0x658d10
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
jmp 0x5599b5
cmp dword [ebp - 0x10], 4
jne 0x5599b5
xor edx, edx
mov word [ebp - 0x2cc], dx
push 0x206
push 0
lea eax, [ebp - 0x2ca]
push eax
call fcn.005b4de0
add esp, 0xc
push 0
push 0x26
lea ecx, [ebp - 0x2cc]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea edx, [ebp - 0x2cc]
push edx
lea ecx, [ebp - 0x88]
call fcn.0040e570
push str.Internet_Exploreriexplore.exe
lea ecx, [ebp - 0x88]
call fcn.0040e5b0
push 0x658d34
lea ecx, [ebp - 0x6e8]
call fcn.0040e4b0
mov byte [ebp - 4], 0x16
push 0x658d78
lea ecx, [ebp - 0x704]
call fcn.0040e4b0
mov byte [ebp - 4], 0x17
push 1
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x704]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.0043b560
add esp, 0x10
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x704]
call fcn.0040e530
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6e8]
call fcn.0040e530
lea ecx, [ebp - 0x88]
call fcn.0040e5d0
push eax
push 0x658d7c
call fcn.00412530
push eax
call fcn.0040d040
add esp, 0xc
lea ecx, [ebp - 0x88]
call fcn.0040e5d0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x559ae4
mov byte [ebp - 0x3d4], 0
push 0x103
push 0
lea eax, [ebp - 0x3d3]
push eax
call fcn.005b4de0
add esp, 0xc
lea ecx, [ebp - 0x6c]
call fcn.0040e460
push eax
push 0x658d9c
lea ecx, [ebp - 0x3d4]
push ecx
call fcn.005b763d
add esp, 0xc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x708], esp
lea edx, [ebp - 0x3d4]
push edx
call fcn.0040e3a0
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], eax
mov byte [ebp - 4], 0x18
call fcn.00412590
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.0051f960
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x710]
add ecx, 0xb8
call fcn.0040e550
jmp 0x559b61
cmp dword [ebp - 0x10], 0xffffffff
je 0x559b61
mov byte [ebp - 0x4dc], 0
push 0x103
push 0
lea edx, [ebp - 0x4db]
push edx
call fcn.005b4de0
add esp, 0xc
lea ecx, [ebp - 0x6c]
call fcn.0040e460
push eax
push 0x658dd4
lea eax, [ebp - 0x4dc]
push eax
call fcn.005b763d
add esp, 0xc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x70c], esp
lea edx, [ebp - 0x4dc]
push edx
call fcn.0040e3a0
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0x19
call fcn.00412590
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.0051f960
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
call fcn.0040e530
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.0040e530
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.0040e3e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.00566940
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.005b4b30
mov esp, ebp
pop ebp
ret