Function at 0x5a0970
Capabilities:
Create process on windows
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cee40
mov eax, dword fs:[0]
push eax
sub esp, 0x6a4
mov eax, dword [0x623ec0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x694], edi
mov ecx, dword [ebp + 8]
mov eax, ecx
sub eax, 0x1209
je 0x5a157d
sub eax, 0xedf9
je 0x5a1457
sub eax, 4
je 0x5a0fc4
mov eax, ecx
sub eax, 0x10151
je 0x5a0a33
sub eax, 1
je 0x5a0a25
sub eax, 1
je 0x5a09f6
cmp ecx, 0x10003
jne 0x5a1650
push 0
push 0x10152
push 0x7da2b0
jmp 0x5a0a05
push 0x7d9cb0
push 0x10153
push 0x7d9c30
mov ecx, dword [edi + 0x110]
mov eax, dword [ecx]
call dword [eax + 0x8c]
mov ecx, dword [edi + 0x110]
push 1
mov eax, dword [ecx]
call dword [eax + 0x60]
jmp 0x5a1650
push 0
push 0x10152
push 0x7d9d30
jmp 0x5a0a05
mov ecx, dword [0x9c25b4]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, eax
mov eax, dword [edi + 0x26eb0]
add eax, 0x5dc
cmp eax, ecx
ja 0x5a1650
mov esi, dword [edi + 0x27d70]
mov eax, dword [edi + 0x26ed8]
mov ecx, dword [edi + 0x27d74]
mov dword [ebp - 0x69c], eax
mov eax, dword [esi]
mov dword [ebp - 0x698], ecx
mov ecx, esi
mov dword [ebp - 0x6a0], esi
mov eax, dword [eax + 0x88]
call eax
mov ecx, eax
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5a0a90
sub ecx, edx
cmp ecx, 4
jae 0x5a0aed
mov esi, dword [edi + 0x108]
mov ecx, dword [0x9c25b4]
mov dword [esi + 0x1f8], 0xfa0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
push 0
push 0x7d9930
mov ecx, dword [esi + 0x1e4]
mov dword [esi + 0x1f4], eax
mov eax, dword [ecx]
call dword [eax + 0x80]
mov ecx, dword [edi + 0x108]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x88]
jmp 0x5a1650
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x88]
call eax
mov ecx, eax
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5a0b00
sub ecx, edx
cmp ecx, 0xc
jbe 0x5a0b34
mov esi, dword [edi + 0x108]
mov ecx, dword [0x9c25b4]
mov dword [esi + 0x1f8], 0xfa0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
push 0
push 0x7d99b0
jmp 0x5a0ac2
mov esi, dword [ebp - 0x698]
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 0x88]
call eax
mov ecx, eax
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5a0b50
sub ecx, edx
cmp ecx, 4
jae 0x5a0b87
mov esi, dword [edi + 0x108]
mov ecx, dword [0x9c25b4]
mov dword [esi + 0x1f8], 0xfa0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
push 0
push 0x7d9a30
jmp 0x5a0ac2
mov ecx, dword [ebp - 0x69c]
push 0
mov eax, dword [ecx]
call dword [eax + 0x64]
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax + 0x64]
mov ecx, dword [0x9c25b4]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov esi, dword [edi + 0x108]
mov ecx, dword [0x9c25b4]
mov dword [edi + 0x27d80], eax
mov dword [esi + 0x1f8], 0xfa0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, dword [esi + 0x1e4]
mov dword [esi + 0x1f4], eax
push 0
push 0x7d9b30
mov eax, dword [ecx]
call dword [eax + 0x80]
mov ecx, dword [edi + 0x108]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x88]
mov eax, dword [0x9c25c8]
sub esp, 8
add eax, 0x68
push eax
call fcn.005bd4d0
test eax, eax
jne 0x5a0c45
mov ecx, dword [ebp - 0x69c]
push 1
mov eax, dword [ecx]
call dword [eax + 0x64]
mov esi, dword [edi + 0x108]
mov ecx, dword [0x9c25b4]
mov dword [esi + 0x1f8], 0xfa0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
push 0
push 0x7d9bb0
jmp 0x5a0ac2
push 0x2fc
lea eax, [ebp - 0x404]
mov dword [0xa6f4f0], 0
push 0
push eax
call fcn.00468b40
mov eax, 0x20d
mov dword [ebp - 0x3a4], 1
push 0x288
mov word [ebp - 0x400], ax
lea eax, [ebp - 0x68c]
push 0
push eax
mov dword [ebp - 0x3a8], 0x587
mov dword [ebp - 0x690], 0
call fcn.00468b40
add esp, 0x18
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x68c]
push eax
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov eax, dword [ebp - 0x690]
test eax, eax
je 0x5a0d4f
push eax
call fcn.0047625d
add esp, 4
mov esi, eax
lea eax, [ebp - 0x690]
push eax
push esi
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test esi, esi
je 0x5a0d4f
movzx eax, byte [esi + 0x199]
xorps xmm0, xmm0
push eax
movzx eax, byte [esi + 0x198]
push eax
movzx eax, byte [esi + 0x197]
push eax
movzx eax, byte [esi + 0x196]
push eax
movzx eax, byte [esi + 0x195]
push eax
movzx eax, byte [esi + 0x194]
push eax
lea eax, [ebp - 0x24]
mov word [ebp - 0x14], 0
push str._02X:_02X:_02X:_02X:_02X:_02X
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.00445aa0
movups xmm0, xmmword [ebp - 0x24]
mov byte [ebp - 0x13], 0
mov ax, word [ebp - 0x14]
push esi
movups xmmword [ebp - 0x3a0], xmm0
mov word [ebp - 0x390], ax
call fcn.004782b7
add esp, 0x24
mov ecx, dword [ebp - 0x6a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x88]
call eax
push eax
lea eax, [ebp - 0x3ec]
push 0x5ec718
push eax
call fcn.004602f0
mov ecx, dword [ebp - 0x698]
add esp, 0xc
mov eax, dword [ecx]
mov eax, dword [eax + 0x88]
call eax
push eax
lea eax, [ebp - 0x3f8]
push 0x5ec718
push eax
call fcn.00463540
add esp, 0xc
lea eax, [ebp - 0x3ec]
push eax
push 0x5ec718
push 0x10
call fcn.004bcc60
push eax
call fcn.004459c0
add esp, 0x10
lea eax, [ebp - 0x3f8]
push eax
push 0x5ec718
push 0xc
call fcn.004bcc60
add eax, 0x10
push eax
call fcn.004459c0
lea eax, [ebp - 0x3ec]
push eax
mov eax, dword [0x9c25ac]
add eax, 0x21940
push 0x5ec718
push eax
call fcn.004602f0
mov ecx, dword [0x9c25ac]
mov esi, 2
movzx eax, byte [ebp - 0x3f8]
add esp, 0x1c
mov byte [ecx + 0x21950], al
lea edi, [esi + 8]
movzx eax, byte [ebp - 0x3f7]
mov byte [ecx + 0x21951], al
call fcn.0046c00b
cdq
idiv edi
mov eax, dword [0x9c25ac]
add dl, 0x30
mov byte [esi + eax + 0x21950], dl
inc esi
cmp esi, 0x10
jl 0x5a0e18
mov byte [eax + 0x2195f], 0
add eax, 0x21940
push eax
call fcn.004763de
push eax
mov eax, dword [0x9c25ac]
add eax, 0x21940
push 0x5ec718
push eax
call fcn.004602f0
mov eax, dword [0x9c25ac]
add eax, 0x21950
push eax
call fcn.004763de
push eax
mov eax, dword [0x9c25ac]
add eax, 0x21950
push 0x5ec718
push eax
call fcn.004602f0
mov esi, dword [0x9c25ac]
add esp, 0x20
mov edi, dword [ebp - 0x694]
add esi, 0x21940
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5a0ea0
sub ecx, edx
xor edx, edx
test ecx, ecx
jle 0x5a0ed8
nop
add byte [esi + edx], dl
lea eax, [esi + edx]
inc edx
cmp edx, ecx
jl 0x5a0eb0
mov edi, dword [0x9c25ac]
xor edx, edx
add byte [edi + edx + 0x21950], dl
lea eax, [edi + edx]
inc edx
cmp edx, ecx
jl 0x5a0ec3
mov edi, dword [ebp - 0x694]
xorps xmm0, xmm0
mov dword [ebp - 0x100], 0
lea ecx, [ebp - 0x108]
movq qword [ebp - 0x108], xmm0
call fcn.004bbf70
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
sub eax, ecx
sar eax, 3
imul eax, eax, 0xaaaaaaab
mov dword [ebp - 0x698], 0
test eax, eax
jle 0x5a0f89
xor esi, esi
lea edi, [ebp - 0x388]
nop dword [eax]
cmp esi, 0xf0
jge 0x5a0f83
cmp dword [ecx + esi + 0x14], 0xf
lea eax, [ecx + esi]
jbe 0x5a0f44
mov eax, dword [eax]
push eax
push 0x5ec718
push 0x40
push edi
call fcn.004459c0
mov eax, dword [ebp - 0x104]
add esp, 0x10
mov ecx, dword [ebp - 0x108]
add esi, 0x18
mov edx, dword [ebp - 0x698]
sub eax, ecx
sar eax, 3
inc edx
imul eax, eax, 0xaaaaaaab
add edi, 0x40
mov dword [ebp - 0x698], edx
cmp edx, eax
jl 0x5a0f30
mov edi, dword [ebp - 0x694]
push 0x2fc
lea eax, [ebp - 0x404]
push eax
call fcn.005bdb60
mov ecx, dword [0x9c25b4]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov dword [edi + 0x26eb0], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.0045cc00
jmp 0x5a1650
xor eax, eax
mov dword [ebp - 0x690], eax
mov eax, dword [edi + 0x27d8c]
test eax, eax
je 0x5a0fe2
mov eax, dword [eax + 0x1fc]
mov dword [ebp - 0x690], eax
push 0x80
lea eax, [ebp - 0xa4]
push 0
push eax
call fcn.00468b40
mov esi, dword [edi + 0x108]
add esp, 0xc
mov ecx, dword [0x9c25b4]
mov dword [esi + 0x1f8], 0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, dword [esi + 0x1e4]
mov dword [esi + 0x1f4], eax
push 0
push 0x7da330
mov eax, dword [ecx]
call dword [eax + 0x80]
mov ecx, dword [edi + 0x108]
push 0
push 1
mov eax, dword [ecx]
call dword [eax + 0x88]
movaps xmm0, xmmword [0x605570]
lea eax, [ebp - 0x24]
movups xmmword [ebp - 0xfc], xmm0
push eax
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xd4], 0x24b
movq qword [ebp - 0xdc], xmm0
movaps xmm0, xmmword [0x605570]
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xa8], 0x24b
movups xmmword [ebp - 0xc0], xmm0
movq qword [ebp - 0xb0], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea esi, [edi + 0x26ef0]
mov edi, 0x916050
nop dword [eax]
xor ecx, ecx
mov dword [esi], 0
cmp byte [edi - 0x40], cl
je 0x5a10c8
mov dword [esi], 1
mov ecx, 1
cmp byte [edi], 0
je 0x5a10d0
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x40], 0
je 0x5a10d9
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x80], 0
je 0x5a10e5
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0xc0], 0
je 0x5a10f1
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x100], 0
je 0x5a10fd
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x140], 0
je 0x5a1109
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x180], 0
je 0x5a1115
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x1c0], 0
je 0x5a1121
inc ecx
mov dword [esi], ecx
cmp byte [edi + 0x200], 0
je 0x5a112d
inc ecx
mov dword [esi], ecx
test ecx, ecx
je 0x5a1140
mov eax, 1
cdq
idiv ecx
test edx, edx
cmovne ecx, edx
mov dword [esi], ecx
add edi, 0x2c0
add esi, 4
cmp edi, 0x917bd0
jl 0x5a10b0
mov esi, dword [ebp - 0x694]
push 1
push 0
mov ecx, dword [esi + 0x108]
mov eax, dword [ecx]
call dword [eax + 0x88]
mov eax, dword [esi + 0x27d90]
mov dword [ebp - 0x69c], eax
test eax, eax
je 0x5a144d
mov ecx, eax
call fcn.004c8090
mov ecx, dword [ebp - 0x690]
mov edi, 1
imul eax, ecx, 0xb
mov dword [ebp - 0x698], edi
mov dword [ebp - 0x6a8], eax
add eax, edi
shl eax, 6
cmp byte [eax + 0x915fd0], 0
je 0x5a1352
cmp edi, dword [ecx*4 + 0x18b1380]
jg 0x5a142a
lea eax, [ebp - 0x104]
push eax
call fcn.0046f195
add esp, 4
push 0
push 0x15180
push dword [ebp - 0x100]
push dword [ebp - 0x104]
call fcn.00492560
lea ecx, [eax - 3]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
lea eax, [esi*8]
sub eax, esi
sub ecx, eax
jne 0x5a1225
lea eax, [edi - 1]
and eax, 0x80000001
jns 0x5a121a
dec eax
or eax, 0xfffffffe
inc eax
and esi, 2
cmp esi, eax
je 0x5a1225
mov al, 1
jmp 0x5a1227
xor al, al
mov byte [ebp - 0x6a0], al
mov eax, dword [ebp - 0x690]
push edi
cmp byte [eax + eax*8 + 0x18b13b0], 0
je 0x5a129b
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
lea eax, [eax + eax*8]
lea eax, [eax + 0x1ff1f37]
push eax
lea eax, [ebp - 0xa4]
push str._s__d
push eax
call fcn.0045d4e0
add esp, 0x10
cmp dword [ebp + edi*4 - 0xd0], 0x258
jle 0x5a12b1
lea ecx, [ebp - 0xa4]
mov byte [ebp - 0x96], 0
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x5a1280
mov eax, dword [str.FULL]
mov dword [ecx], eax
mov al, byte [0x600ab0]
mov byte [ecx + 4], al
jmp 0x5a12b1
inc eax
push eax
lea eax, [ebp - 0xa4]
push 0x7db9b0
push eax
call fcn.0045d4e0
add esp, 0x10
mov eax, dword [ebp + edi*4 - 0xd0]
xor esi, esi
test eax, eax
push 0xe84
cmovns esi, eax
xor eax, eax
cmp edi, 1
setne al
add eax, 0xfffffffe
mov dword [ebp - 0x6a4], eax
call fcn.0046677d
mov edi, eax
mov dword [ebp - 0x6ac], edi
mov dword [ebp - 4], 0
push 0xe84
push 0
push edi
call fcn.00468b40
movd xmm0, dword [0x7d9694]
lea eax, [ebp - 0xa4]
add esp, 8
mov ecx, edi
cvtdq2ps xmm0, xmm0
push dword [ebp - 0x6a0]
push esi
sub esp, 0x14
mov dword [esp + 0x10], 0x41800000
movss dword [esp + 0xc], xmm0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
push eax
push dword [ebp - 0x6a4]
call fcn.004c88b0
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp - 0x698]
jmp 0x5a13fd
cmp dword [esi + 0x26eec], 1
jne 0x5a142a
cmp ecx, dword [esi + 0x26ee8]
jne 0x5a142a
cmp edi, dword [esi + 0x26ee4]
jge 0x5a142a
lea eax, [ebp - 0xa4]
push 0x7dbab0
push eax
call fcn.0045d4e0
push 0xe84
call fcn.0046677d
mov esi, eax
mov dword [ebp - 0x6b0], esi
mov dword [ebp - 4], 1
push 0xe84
push 0
push esi
call fcn.00468b40
movd xmm0, dword [0x7d9694]
lea eax, [ebp - 0xa4]
add esp, 0x10
mov ecx, esi
cvtdq2ps xmm0, xmm0
push 0
push dword [ebp + edi*4 - 0xfc]
sub esp, 0x14
mov dword [esp + 0x10], 0x41800000
movss dword [esp + 0xc], xmm0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
push eax
push 6
call fcn.004c88b0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp + edi*4 - 0xd0], 0
jge 0x5a140e
mov byte [eax + 0xe80], 0
test eax, eax
je 0x5a141e
mov ecx, dword [ebp - 0x69c]
push eax
call fcn.004c82d0
mov ecx, dword [ebp - 0x690]
mov esi, dword [ebp - 0x694]
mov eax, dword [ebp - 0x6a8]
inc edi
mov dword [ebp - 0x698], edi
cmp edi, 0xb
jl 0x5a11a2
mov ecx, dword [ebp - 0x69c]
push 1
mov eax, dword [ecx]
call dword [eax + 0x60]
call fcn.005a2770
jmp 0x5a1650
mov eax, dword [edi + 0x27d8c]
xor ecx, ecx
test eax, eax
je 0x5a1469
mov ecx, dword [eax + 0x1fc]
mov edx, dword [edi + 0x27d90]
mov eax, dword [edx + 0x1fc]
lea esi, [eax + 1]
test eax, eax
js 0x5a1554
cmp eax, dword [edx + 0x210]
jg 0x5a1554
mov eax, dword [edx + eax*4 + 0x214]
test eax, eax
je 0x5a1554
test ecx, ecx
js 0x5a1554
cmp dword [eax + 0xe7c], 0x258
jl 0x5a14c9
mov ecx, dword [edi + 0x108]
push 0xfa0
push 0x7da430
call fcn.004cf030
jmp 0x5a0ad6
mov eax, dword [0x9c25ac]
mov dword [eax + 0x21938], ecx
mov dword [eax + 0x2193c], esi
imul eax, ecx, 0xb
add eax, esi
shl eax, 6
add eax, 0x915fd0
push eax
mov eax, dword [0x9c25c8]
add eax, 0x68
push 0x5ec718
push eax
call fcn.0045d4e0
mov ecx, dword [edi + 0x27d88]
add esp, 0xc
mov eax, dword [ecx]
push 0
call dword [eax + 0x60]
lea esi, [edi + 0x26ed8]
mov edi, 3
mov ecx, dword [esi]
push 1
mov eax, dword [ecx]
call dword [eax + 0x60]
lea esi, [esi + 4]
sub edi, 1
jne 0x5a1516
mov edi, dword [ebp - 0x694]
push 1
mov ecx, dword [edi + 0x26ec0]
mov eax, dword [ecx]
call dword [eax + 0x60]
mov ecx, dword [edi + 0x28]
push dword [edi + 0x27d70]
mov eax, dword [ecx]
call dword [eax + 0x40]
mov byte [edi + 0x27d78], 1
jmp 0x5a15fc
mov esi, dword [edi + 0x108]
mov ecx, dword [0x9c25b4]
mov dword [esi + 0x1f8], 0xfa0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
push 0
push 0x7da3b0
jmp 0x5a0ac2
cmp dword [ebp + 0xc], 0
mov ecx, dword [edi + 0x110]
je 0x5a1595
mov eax, dword [ecx]
push 0
call dword [eax + 0x60]
jmp 0x5a1650
mov eax, dword [ecx + 0x1ec]
cmp eax, 0x10152
jne 0x5a1634
cmp byte [edi + 0x27d78], 1
jne 0x5a1611
mov ecx, dword [edi + 0x27d88]
push 1
mov eax, dword [ecx]
call dword [eax + 0x60]
lea esi, [edi + 0x26ed8]
mov edi, 3
mov ecx, dword [esi]
push 0
mov eax, dword [ecx]
call dword [eax + 0x60]
lea esi, [esi + 4]
sub edi, 1
jne 0x5a15c7
mov edi, dword [ebp - 0x694]
push 0
mov ecx, dword [edi + 0x26ec0]
mov eax, dword [ecx]
call dword [eax + 0x60]
mov ecx, dword [edi + 0x28]
push 0
mov eax, dword [ecx]
call dword [eax + 0x40]
mov byte [edi + 0x27d78], 2
mov ecx, dword [0x9c25b4]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov dword [edi + 0x27d7c], eax
jmp 0x5a1650
push str.Closed_the_game_by_SelectSv
call fcn.00586620
mov eax, dword [0x9c25c8]
add esp, 4
push 0
push 0
push 0x10
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x5a1650
cmp eax, 0x10153
jne 0x5a1650
push 3
push 0
push 0
push 0x7e1b30
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046676f
mov esp, ebp
pop ebp
ret 8