Function at 0x55f3d0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60ae1b
mov eax, dword fs:[0]
push eax
sub esp, 0x2bc
mov eax, dword [0x697bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xf0], 0
call fcn.00521cb0
mov ecx, eax
call fcn.00526dc0
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jne 0x55f432
mov dword [ebp - 0x104], 1
jmp 0x55f43c
mov dword [ebp - 0x104], 0
mov al, byte [ebp - 0x104]
mov byte [ebp - 0xe9], al
movzx ecx, byte [ebp - 0xe9]
test ecx, ecx
je 0x55f757
lea edx, [ebp - 0xb4]
push edx
call fcn.0057b1d0
add esp, 4
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.004eed70
movzx eax, al
test eax, eax
jne 0x55f6ca
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x13c], 0
je 0x55f4b8
push 0x619e50
mov ecx, dword [ebp - 0x13c]
call fcn.004ef370
mov dword [ebp - 0x108], eax
jmp 0x55f4c2
mov dword [ebp - 0x108], 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x168], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0xf0], edx
push 0
mov eax, dword [ebp - 0xf0]
push eax
push 0x608
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x118], 0
push 0x617ea4
call fcn.004e7b40
add esp, 4
test eax, eax
je 0x55f605
push 0x617ec4
lea ecx, [ebp - 0x1e4]
call fcn.004ef370
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1e4]
push eax
call fcn.004edfc0
add esp, 4
mov dword [ebp - 0x110], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e4]
call fcn.004ef480
cmp dword [ebp - 0x110], 0
je 0x55f600
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1bc], esp
push str.MINI_OPEN_GAME
call fcn.004ef370
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x1b8], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe8]
add edx, 0x36c
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x1b0], esp
push edx
push 1
push eax
call fcn.0057b580
add esp, 0xc
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 0
call fcn.004ee020
add esp, 0x30
push 0
push 0
push 0x486
mov ecx, dword [ebp - 0x110]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x14
mov ecx, dword [ebp - 0xe8]
add ecx, 0xbc
call fcn.0056f730
push 0
push 4
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
jmp 0x55f6b1
push 5
push 0
mov edx, dword [ebp - 0xe8]
add edx, 0x36c
push edx
push 2
lea eax, [ebp - 0x264]
push eax
call fcn.0057b580
add esp, 0xc
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp - 0x178]
call fcn.004ef850
push eax
lea ecx, [ebp - 0xb4]
call fcn.004ef850
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x264]
call fcn.004ef480
push 0x14
mov ecx, dword [ebp - 0xe8]
add ecx, 0xbc
call fcn.0056f730
cmp dword [ebp - 0x118], 0x20
jle 0x55f68b
mov dword [ebp - 0x120], 6
jmp 0x55f695
mov dword [ebp - 0x120], 0xfffffffb
push 0
mov ecx, dword [ebp - 0x120]
push ecx
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.004ef480
jmp 0x560046
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x128], 0
je 0x55f6ff
push 0x619e80
mov ecx, dword [ebp - 0x128]
call fcn.004ef370
mov dword [ebp - 0x130], eax
jmp 0x55f709
mov dword [ebp - 0x130], 0
mov edx, dword [ebp - 0x130]
mov dword [ebp - 0x180], edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xf0], eax
push 1
mov ecx, dword [ebp - 0xf0]
push ecx
push 0x608
mov edx, dword [ebp - 0xe8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.004ef480
jmp 0x55f7d6
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x138], eax
mov dword [ebp - 4], 5
cmp dword [ebp - 0x138], 0
je 0x55f78f
push 0x619e80
mov ecx, dword [ebp - 0x138]
call fcn.004ef370
mov dword [ebp - 0x140], eax
jmp 0x55f799
mov dword [ebp - 0x140], 0
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x188], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0xf0], edx
push 3
mov eax, dword [ebp - 0xf0]
push eax
push 0x608
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0xe8]
add eax, 0x37c
push eax
lea ecx, [ebp - 0x3c]
call fcn.004ee9d0
mov dword [ebp - 4], 6
mov ecx, dword [0x66ef08]
push ecx
push 0x2f
lea ecx, [ebp - 0x3c]
call fcn.004eeda0
mov dword [ebp - 0xf4], eax
lea ecx, [ebp - 0x3c]
call fcn.004eed70
movzx edx, al
test edx, edx
jne 0x55f824
mov eax, dword [0x66ef08]
cmp eax, dword [ebp - 0xf4]
jne 0x55f866
push 0
push 0xffffffffffffffff
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
push 0
push 0x3e8
push 1
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.0056f9e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.004eeb60
jmp 0x560046
lea ecx, [ebp - 0x3c]
call fcn.004eed60
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
sub ecx, dword [ebp - 0xf4]
push ecx
mov edx, dword [ebp - 0xf4]
add edx, 1
push edx
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0xe8]
add ecx, 0x37c
call fcn.004eedc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x6c]
call fcn.004eed70
movzx ecx, al
test ecx, ecx
je 0x55f8ea
push 0
push 0xffffffffffffffff
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.004eeb60
jmp 0x560046
push 0xc
lea ecx, [ebp - 0x24]
call fcn.004e2570
lea ecx, [ebp - 0x24]
call fcn.004f6b10
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xe8]
add ecx, 0x1d4
call fcn.004ef850
push eax
lea edx, [ebp - 0x9c]
push edx
call fcn.004e2fe0
add esp, 8
mov byte [ebp - 4], 9
lea eax, [ebp - 0x9c]
push eax
push 0x619e3c
lea ecx, [ebp - 0x234]
push ecx
call fcn.004f9ac0
add esp, 0xc
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x1a0]
push eax
push 0x619e40
lea ecx, [ebp - 0x2c8]
call fcn.0053f870
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x234]
call fcn.004eeb60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xf5]
call fcn.004e2500
push eax
lea ecx, [ebp - 0x298]
push ecx
lea edx, [ebp - 0x2c8]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.00590860
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x1cc]
call fcn.00545ce0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x24]
call fcn.004f6b50
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1cc]
call fcn.004fb500
mov byte [ebp - 4], 9
push fcn.004fa7c0
push 1
push 0x30
lea ecx, [ebp - 0x2c8]
push ecx
call fcn.005c433c
mov edx, dword [ebp - 0xe8]
add edx, 0x37c
push edx
lea ecx, [ebp - 0xcc]
call fcn.004ee9d0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x6c]
call fcn.004eed50
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x160], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x160]
call fcn.004ef850
push eax
lea edx, [ebp - 0x294]
push edx
call fcn.004e4da0
add esp, 4
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x15c], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x15c]
call fcn.004ef850
push eax
push 0x66dff0
lea ecx, [ebp - 0x54]
push ecx
call fcn.004e37f0
add esp, 0x10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x294]
call fcn.004ef480
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x204]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1a8], esp
lea edx, [ebp - 0x54]
push edx
call fcn.004ef320
mov dword [ebp - 0x1ac], eax
call fcn.004e6150
add esp, 0x18
lea ecx, [ebp - 0x54]
call fcn.004ef850
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1b4], esp
push eax
push ecx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x1a4], eax
lea edx, [ebp - 0xcc]
push edx
lea ecx, [ebp - 0x24]
call fcn.004f70a0
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x16c], eax
movzx ecx, byte [ebp - 0xe9]
test ecx, ecx
je 0x55fb94
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x148], 0
je 0x55fb4e
push 0x619e50
mov ecx, dword [ebp - 0x148]
call fcn.004ef370
mov dword [ebp - 0xfc], eax
jmp 0x55fb58
mov dword [ebp - 0xfc], 0
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x164], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xf0], eax
push 2
mov ecx, dword [ebp - 0xf0]
push ecx
push 0x608
mov edx, dword [ebp - 0xe8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x55fc0d
push 0x18
call fcn.005c442b
add esp, 4
mov dword [ebp - 0x144], eax
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x144], 0
je 0x55fbc9
push 0x619e80
mov ecx, dword [ebp - 0x144]
call fcn.004ef370
mov dword [ebp - 0x10c], eax
jmp 0x55fbd3
mov dword [ebp - 0x10c], 0
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x184], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x184]
mov dword [ebp - 0xf0], edx
push 4
mov eax, dword [ebp - 0xf0]
push eax
push 0x608
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [ebp - 0x16c], 0
je 0x55fca7
push 0
mov eax, dword [ebp - 0xf0]
push eax
push 0x60a
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0xffffffffffffffff
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x54]
call fcn.004ef480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xcc]
call fcn.004eeb60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.004f6b30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.004eeb60
jmp 0x560046
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x55fcbe
mov dword [ebp - 0x12c], 5
jmp 0x55fcc8
mov dword [ebp - 0x12c], 0
push 0
mov ecx, dword [ebp - 0x12c]
push ecx
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
push 0x66dd94
lea ecx, [ebp - 0x84]
call fcn.004ef370
mov byte [ebp - 4], 0x15
movzx edx, byte [ebp - 0xe9]
test edx, edx
je 0x55fdd7
lea eax, [ebp - 0x54]
push eax
call fcn.0057b2b0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x55fd96
push 0
push 0xfffffffffffffffa
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x84]
call fcn.004ef480
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x54]
call fcn.004ef480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xcc]
call fcn.004eeb60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.004f6b30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.004eeb60
jmp 0x560046
mov edx, dword [ebp - 0xe8]
add edx, 0x36c
push edx
push 0
lea eax, [ebp - 0x21c]
push eax
call fcn.0057b580
add esp, 0xc
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x194]
push ecx
lea ecx, [ebp - 0x84]
call fcn.004ef440
lea ecx, [ebp - 0x21c]
call fcn.004ef480
push 0x619e4c
lea ecx, [ebp - 0x84]
call fcn.004ef520
mov edx, dword [ebp - 0xe8]
add edx, 0x394
mov dword [ebp - 0x114], edx
push 4
lea ecx, [ebp - 0x14]
call fcn.004e2570
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x114]
call fcn.004efb30
push 4
lea ecx, [ebp - 0x18]
call fcn.004e2570
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x114]
call fcn.004efb40
jmp 0x55fe35
lea ecx, [ebp - 0x14]
call fcn.004f2220
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
call fcn.004f0040
movzx eax, al
test eax, eax
je 0x55ff0a
lea ecx, [ebp - 0x14]
call fcn.004f0940
push eax
lea ecx, [ebp - 0xe4]
call fcn.004ee9d0
mov byte [ebp - 4], 0x16
push 0x619e4c
lea ecx, [ebp - 0xe4]
call fcn.004eed50
push eax
lea ecx, [ebp - 0x27c]
push ecx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x174], eax
mov edx, dword [ebp - 0x174]
mov dword [ebp - 0x18c], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x24c]
push ecx
call fcn.004f4470
add esp, 0xc
mov dword [ebp - 0x150], eax
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x158], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x158]
push eax
lea ecx, [ebp - 0x84]
call fcn.004f4e50
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x24c]
call fcn.004ef480
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x27c]
call fcn.004ef480
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xe4]
call fcn.004eeb60
jmp 0x55fe2d
push 5
push 0
lea ecx, [ebp - 0x84]
call fcn.004ef850
push eax
lea ecx, [ebp - 0x54]
call fcn.004ef850
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x134], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x124], eax
movzx ecx, byte [ebp - 0xe9]
test ecx, ecx
je 0x55ff8f
cmp dword [ebp - 0x134], 0x20
jle 0x55ff62
mov dword [ebp - 0x11c], 3
jmp 0x55ff6c
mov dword [ebp - 0x11c], 0xfffffff9
mov edx, dword [ebp - 0x124]
push edx
mov eax, dword [ebp - 0x11c]
push eax
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
jmp 0x55ffcf
cmp dword [ebp - 0x134], 0x20
jle 0x55ffa4
mov dword [ebp - 0x100], 1
jmp 0x55ffae
mov dword [ebp - 0x100], 0xfffffffd
mov ecx, dword [ebp - 0x124]
push ecx
mov edx, dword [ebp - 0x100]
push edx
push 0x5fe
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.00568d80
push 0
push 0x3e8
push 1
mov ecx, dword [ebp - 0xe8]
add ecx, 4
call fcn.0056f9e0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x84]
call fcn.004ef480
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x54]
call fcn.004ef480
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xcc]
call fcn.004eeb60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
call fcn.004eeb60
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.004f6b30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c]
call fcn.004eeb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.004eeb60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6c09
mov esp, ebp
pop ebp
ret