Function at 0x580a90
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e1a17
mov eax, dword fs:[0]
push eax
mov eax, 0x1064
call fcn.0053fb70
mov eax, dword [0x676580]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x105c], ecx
lea ecx, [ebp - 0x18]
call fcn.00403290
mov dword [ebp - 4], 0
push 0x61a1ac
mov ecx, dword [ebp - 0x105c]
add ecx, 0x30
call fcn.004031c0
test eax, eax
jne 0x580c12
push 0
mov ecx, dword [ebp - 0x105c]
add ecx, 0x34
call fcn.00493020
push eax
lea ecx, [ebp - 0x1034]
call fcn.0048a240
mov byte [ebp - 4], 1
push 0x2001f
lea ecx, [ebp - 0x1034]
call fcn.0048a330
lea ecx, [ebp - 0x1024]
call fcn.0048a1d0
lea eax, [ebp - 0x1024]
push eax
mov ecx, dword [ebp - 0x105c]
add ecx, 0x38
call fcn.00493020
push eax
lea ecx, [ebp - 0x1034]
call fcn.0048a3a0
test eax, eax
je 0x580b52
cmp dword [ebp - 0x24], 1
je 0x580b85
mov dword [ebp - 0x1040], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1034]
call fcn.0048a310
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00403270
mov eax, dword [ebp - 0x1040]
jmp 0x580e10
lea ecx, [ebp - 0x1024]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.004092b0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x105c]
add edx, 0x28
push edx
lea eax, [ebp - 0x1038]
push eax
lea ecx, [ebp - 0x1044]
push ecx
call fcn.005c27f0
add esp, 0xc
mov dword [ebp - 0x1060], eax
mov edx, dword [ebp - 0x1060]
mov dword [ebp - 0x1064], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1064]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040ca60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1044]
call fcn.00403270
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1038]
call fcn.00403270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1034]
call fcn.0048a310
jmp 0x580d18
push str.autorunkxetray
mov ecx, dword [ebp - 0x105c]
add ecx, 0x30
call fcn.004031c0
test eax, eax
jne 0x580c83
mov ecx, dword [ebp - 0x105c]
call fcn.0057b740
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
je 0x580c54
mov ecx, dword [ebp - 0x105c]
add ecx, 0x28
mov dword [ebp - 0x1068], ecx
jmp 0x580c63
mov edx, dword [ebp - 0x105c]
add edx, 0x2c
mov dword [ebp - 0x1068], edx
mov eax, dword [ebp - 0x1068]
mov dword [ebp - 0x1048], eax
mov ecx, dword [ebp - 0x1048]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0040ca60
jmp 0x580d18
mov edx, dword [ebp - 0x105c]
add edx, 0x28
push edx
lea ecx, [ebp - 0x18]
call fcn.0040ca60
mov eax, dword [ebp - 0x105c]
cmp dword [eax + 0xc], 0
jne 0x580cc5
mov dword [ebp - 0x104c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00403270
mov eax, dword [ebp - 0x104c]
jmp 0x580e10
lea ecx, [ebp - 0x1050]
push ecx
mov edx, dword [ebp - 0x105c]
mov ecx, dword [edx + 0xc]
call fcn.0058a400
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x1070], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1070]
call fcn.00493020
push eax
push str._productid_
lea ecx, [ebp - 0x18]
call fcn.0049c3d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1050]
call fcn.00403270
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.005c2220
add esp, 8
mov byte [ebp - 4], 5
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.005c2430
add esp, 8
mov byte [ebp - 4], 6
push 1
push 0
lea ecx, [ebp - 0x14]
call fcn.00493020
push eax
lea ecx, [ebp - 0x10]
call fcn.00493020
push eax
push 0x61a1ec
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [0x67e1c8], 0
je 0x580dd9
mov dword [ebp - 0x1054], 0
lea edx, [ebp - 0x1054]
push edx
push 0x61a230
lea ecx, [ebp - 0x14]
call fcn.00493020
push eax
push 0x61a220
lea ecx, [ebp - 0x10]
call fcn.00493020
push eax
push 0x61a214
push 0x61a1f8
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
mov dword [ebp - 0x1058], 1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
call fcn.00403270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00403270
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00403270
mov eax, dword [ebp - 0x1058]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret