Function at 0x5806d0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e19b5
mov eax, dword fs:[0]
push eax
mov eax, 0x1058
call fcn.0053fb70
mov eax, dword [0x676580]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1054], ecx
mov eax, dword [ebp - 0x1054]
cmp dword [eax + 0xc], 0
jne 0x580715
xor eax, eax
jmp 0x580a78
lea ecx, [ebp - 0x1c]
call fcn.00403290
mov dword [ebp - 4], 0
push 0x61a2b0
mov ecx, dword [ebp - 0x1054]
add ecx, 0x2c
call fcn.004031c0
test eax, eax
jne 0x580862
push 0
mov ecx, dword [ebp - 0x1054]
add ecx, 0x30
call fcn.00493020
push eax
lea ecx, [ebp - 0x1034]
call fcn.0048a240
mov byte [ebp - 4], 1
push 0x2001f
lea ecx, [ebp - 0x1034]
call fcn.0048a330
lea ecx, [ebp - 0x1024]
call fcn.0048a1d0
lea ecx, [ebp - 0x1024]
push ecx
mov ecx, dword [ebp - 0x1054]
add ecx, 0x34
call fcn.00493020
push eax
lea ecx, [ebp - 0x1034]
call fcn.0048a3a0
test eax, eax
je 0x5807a5
cmp dword [ebp - 0x24], 1
je 0x5807d8
mov dword [ebp - 0x1038], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1034]
call fcn.0048a310
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00403270
mov eax, dword [ebp - 0x1038]
jmp 0x580a78
lea edx, [ebp - 0x1024]
push edx
lea ecx, [ebp - 0x103c]
call fcn.004092b0
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x1054]
mov ecx, dword [eax + 0xc]
push ecx
lea edx, [ebp - 0x103c]
push edx
lea eax, [ebp - 0x1040]
push eax
call fcn.005c2e90
add esp, 0xc
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp - 0x1058]
mov dword [ebp - 0x105c], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x105c]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0040ca60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1040]
call fcn.00403270
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x103c]
call fcn.00403270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1034]
call fcn.0048a310
jmp 0x5808b9
mov eax, dword [ebp - 0x1054]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x1054]
add edx, 0x28
push edx
lea eax, [ebp - 0x1044]
push eax
call fcn.005c2e90
add esp, 0xc
mov dword [ebp - 0x1060], eax
mov ecx, dword [ebp - 0x1060]
mov dword [ebp - 0x1064], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1064]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0040ca60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1044]
call fcn.00403270
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.005c2220
add esp, 8
mov byte [ebp - 4], 5
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.005c2430
add esp, 8
mov byte [ebp - 4], 6
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x1054]
movzx edx, byte [ecx + 0x38]
test edx, edx
je 0x580994
cmp dword [0x67e1c8], 0
je 0x580970
mov dword [ebp - 0x1048], 0
lea eax, [ebp - 0x1048]
push eax
push 0x61a2f4
lea ecx, [ebp - 0x18]
call fcn.00493020
push eax
push 0x61a2e0
lea ecx, [ebp - 0x10]
call fcn.00493020
push eax
push 0x61a2d4
push 0x61a2b8
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
lea ecx, [ebp - 0x18]
call fcn.00493020
push eax
lea ecx, [ebp - 0x10]
call fcn.00493020
push eax
call fcn.00575fd0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x580a42
cmp dword [0x67e1c8], 0
je 0x580a14
mov dword [ebp - 0x104c], 0
lea ecx, [ebp - 0x104c]
push ecx
push 0x61a360
lea ecx, [ebp - 0x18]
call fcn.00493020
push eax
push 0x61a34c
lea ecx, [ebp - 0x10]
call fcn.00493020
push eax
push 0x61a340
push 0x61a324
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
push 1
push 0
lea ecx, [ebp - 0x18]
call fcn.00493020
push eax
lea ecx, [ebp - 0x10]
call fcn.00493020
push eax
push 0x61a398
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor edx, edx
cmp eax, 0x20
setg dl
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1050], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00403270
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00403270
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00403270
mov eax, dword [ebp - 0x1050]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret