Function at 0x4058c0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff00
mov eax, dword [ebp + 0xc]
movzx eax, ax
cmp eax, 0x3ed
jne 0x4058e9
push 0
push 0
push 0x10
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
jmp 0x405f4b
cmp eax, 0x3ea
jne 0x40591a
call fcn.00406b23
cmp eax, 2
je 0x405f4b
push 0
push 0x4021c6
push dword [ebp + 8]
push 0x68
push dword [0x4098a4]
call sub.user32.dll_DialogBoxParamA
jmp 0x405f4b
cmp eax, 0x3e9
jne 0x40594d
call fcn.00406b23
cmp eax, 2
je 0x405f4b
push dword [ebp + 8]
lea eax, [ebp - 0xff]
push eax
call fcn.00401988
or eax, eax
je 0x405948
push eax
call fcn.004019e4
jmp 0x405f4b
cmp eax, 0x3eb
jne 0x405a1a
cmp dword [0x409790], 2
jne 0x4059f8
push dword [0x409794]
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
or eax, eax
je 0x4059ee
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0x10]
push eax
push 4
push dword [0x4098c8]
push dword [0x409798]
push dword [ebp + 0xc]
call sub.kernel32.dll_VirtualProtectEx
push 0
push dword [0x4098c8]
push dword [0x4098b8]
push dword [0x409798]
push dword [ebp + 0xc]
call sub.kernel32.dll_WriteProcessMemory
test eax, eax
pushf
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0x10]
push dword [0x4098c8]
push dword [0x409798]
push dword [ebp + 0xc]
call sub.kernel32.dll_VirtualProtectEx
push dword [ebp + 0xc]
call sub.kernel32.dll_CloseHandle
popf
je 0x4059ee
and dword [0x4098f4], 0xfffeffff
jmp 0x405f4b
call fcn.00406ad9
jmp 0x405f4b
push 0x409006
push 0x4097a0
call sub.kernel32.dll_lstrcmpA
test eax, eax
je 0x405a21
push 0x4097a0
call fcn.00401bc9
jmp 0x405f4b
cmp eax, 0x3ec
jne 0x405a43
push dword [ebp + 8]
lea eax, [ebp - 0xff]
push eax
call fcn.004019b6
or eax, eax
je 0x405f4b
push eax
call fcn.00401bc9
jmp 0x405f4b
cmp eax, 0x3fd
jne 0x405a54
call fcn.00402092
jmp 0x405f4b
cmp eax, 0x9c4a
jne 0x405aa4
mov ebx, dword [0x4098d8]
sub ebx, dword [0x4098d4]
inc ebx
cmp ebx, dword [0x4098c8]
jne 0x405a89
push 0x30
push section..data
push 0x4074a8
push dword [ebp + 8]
call sub.user32.dll_MessageBoxA
jmp 0x405f4b
mov eax, dword [0x4098b8]
add eax, dword [0x4098d4]
push 0
push ebx
push 2
push eax
call fcn.00401e22
jmp 0x405f4b
cmp eax, 0x9c4b
jne 0x405aca
push 0x4074b8
push 0x403821
push dword [ebp + 8]
push 0x68
push dword [0x4098a4]
call sub.user32.dll_DialogBoxParamA
jmp 0x405f4b
cmp eax, 0x9c4f
jne 0x405aed
push 0
push 0x40440a
push dword [ebp + 8]
push 0x6f
push dword [0x4098a4]
call sub.user32.dll_DialogBoxParamA
jmp 0x405f4b
cmp eax, 0x9c50
jne 0x405b10
push 0
push 0x405537
push dword [ebp + 8]
push 0x70
push dword [0x4098a4]
call sub.user32.dll_DialogBoxParamA
jmp 0x405f4b
cmp eax, 0x9c4c
jne 0x405b33
mov eax, dword [0x4098b8]
add eax, dword [0x4098cc]
push 0
push 1
push 3
push eax
call fcn.00401e22
jmp 0x405f4b
cmp ax, 0xbbb
je 0x405b57
cmp ax, 0xbb8
je 0x405b57
cmp ax, 0xbb9
je 0x405b57
cmp ax, 0xbba
je 0x405b57
cmp ax, 0x9c43
je 0x405b57
cmp ax, 0x9c45
jne 0x405b62
push eax
call fcn.00402cbf
jmp 0x405f4b
cmp eax, 0x409
jne 0x405b8d
mov dword [0x4098d4], 0
mov eax, dword [0x4098c8]
dec eax
mov dword [0x4098d8], eax
mov dword [0x4098cc], eax
call fcn.00406b72
jmp 0x405f4b
cmp eax, 0x9c51
jne 0x405b9e
call fcn.004011e1
jmp 0x405f4b
cmp eax, 0x9c47
jne 0x405be4
cmp dword [0x409914], 0
jne 0x405bd2
push 0
push 0x4036dd
push dword [0x4098a8]
push 0x6a
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x409914], eax
jmp 0x405f4b
push 5
push dword [0x409914]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x404
jne 0x405c2a
cmp dword [0x4098f8], 0
jne 0x405c18
push 0
push 0x40513d
push dword [0x4098a8]
push 0x65
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x4098f8], eax
jmp 0x405f4b
push 5
push dword [0x4098f8]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c4d
jne 0x405c4d
push dword [0x4098cc]
push dword [0x4098d0]
call fcn.00406962
pop dword [0x4098d0]
jmp 0x405f4b
cmp eax, 0x425
jne 0x405c93
cmp dword [0x409900], 0
jne 0x405c81
push 0
push 0x40466f
push dword [0x4098a8]
push 0x69
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x409900], eax
jmp 0x405f4b
push 5
push dword [0x409900]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c46
jne 0x405cd9
cmp dword [0x4098fc], 0
jne 0x405cc7
push 0
push 0x40536f
push dword [0x4098a8]
push 0x6b
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x4098fc], eax
jmp 0x405f4b
push 5
push dword [0x4098fc]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c4e
jne 0x405cfc
push 0
push 0x4038e7
push dword [ebp + 8]
push 0x6e
push dword [0x4098a4]
call sub.user32.dll_DialogBoxParamA
jmp 0x405f4b
cmp eax, 0x9c54
jne 0x405d1c
push 5
push 0
push 0
push 0x4097a0
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x405f4b
cmp eax, 0x9c52
jne 0x405d3a
mov eax, dword [0x4098d4]
shr eax, 4
mov dword [0x4098c0], eax
call fcn.00406999
jmp 0x405f4b
cmp eax, 0x41f
jne 0x405d92
push ebx
xor dword [0x4098f4], 0x20000
mov eax, 8
mov ebx, 0xffffffff
test dword [0x4098f4], 0x20000
jne 0x405d68
mov eax, 0
dec ebx
push eax
push 0x41f
push dword [0x4098ac]
call sub.user32.dll_CheckMenuItem
push 3
push 0
push 0
push 0
push 0
push ebx
push dword [ebp + 8]
call sub.user32.dll_SetWindowPos
pop ebx
jmp 0x405f4b
cmp eax, 0x9c42
jne 0x405dd8
cmp dword [0x409904], 0
jne 0x405dc6
push 0
push 0x402ad6
push dword [0x4098a8]
push 0x66
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x409904], eax
jmp 0x405f4b
push 5
push dword [0x409904]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c41
jne 0x405e1e
cmp dword [0x40990c], 0
jne 0x405e0c
push 0
push 0x403014
push dword [0x4098a8]
push 0x67
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x40990c], eax
jmp 0x405f4b
push 5
push dword [0x40990c]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c44
jne 0x405e3e
push 5
push 0
push 0
push str.calc.exe
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x405f4b
cmp eax, 0x9c48
jne 0x405e61
push 0
push 0x403d06
push dword [ebp + 8]
push 0x6c
push dword [0x4098a4]
call sub.user32.dll_DialogBoxParamA
jmp 0x405f4b
cmp eax, 0x9c49
jne 0x405ea7
cmp dword [0x409910], 0
jne 0x405e95
push 0
push 0x4032f9
push dword [0x4098a8]
push 0x6d
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x409910], eax
jmp 0x405f4b
push 5
push dword [0x409910]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c53
jne 0x405ee7
cmp dword [0x409918], 0
jne 0x405ed8
push 0
push 0x404bec
push dword [0x4098a8]
push 0x71
push dword [0x4098a4]
call sub.user32.dll_CreateDialogParamA
mov dword [0x409918], eax
jmp 0x405f4b
push 5
push dword [0x409918]
call sub.user32.dll_ShowWindow
jmp 0x405f4b
cmp eax, 0x9c57
jne 0x405ef5
call fcn.004057f9
jmp 0x405f4b
cmp eax, 0xea60
jb 0x405f31
movzx ebx, ax
push 0
push 0xff
lea eax, [ebp - 0xff]
push eax
push ebx
push dword [0x4098ac]
call sub.user32.dll_GetMenuStringA
call fcn.00406b23
cmp eax, 2
je 0x405f4b
lea eax, [ebp - 0xff]
push eax
call fcn.004019e4
jmp 0x405f4b
cmp eax, 0xea5f
jne 0x405f3f
call fcn.004018b2
jmp 0x405f4b
cmp eax, 0x9c55
jne 0x405f4b
call fcn.004056f0
leave
ret 0xc