Function at 0x5e005b20
Capabilities:
Create process on windows
Read .ini file
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1cd4
call fcn.5e011f50
push ebx
push esi
push edi
lea eax, [ebp - 0xc94]
push 1
push eax
call fcn.5e009e97
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
test eax, eax
pop ecx
je 0x5e005b87
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0xc94]
push eax
call fcn.5e008b24
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0x67c]
push 0x5e0013d0
push eax
call esi
lea eax, [ebp - 0x67c]
push eax
push dword [0x5e01c500]
call fcn.5e0089a6
add esp, 0x1c
push 0x5e01c72c
push 0x5e001338
push dword [0x5e020658]
call fcn.5e0031db
push eax
call fcn.5e0044c2
add esp, 0x10
lea eax, [ebp - 0x474]
xor ebx, ebx
push 0x5e01fde0
push 0x208
push eax
push ebx
push 0x5e001638
push 0x5e0015ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x884]
push 0x5e001634
push eax
call esi
lea eax, [ebp - 0x474]
push eax
push 0x5e020220
lea eax, [ebp - 0x26c]
push 0x5e0013b8
push eax
call esi
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x884]
push eax
push 0x5e020440
call fcn.5e0074ba
add esp, 0x28
lea eax, [ebp - 0x26c]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call fcn.5e007478
cmp dword [0x5e01c1e0], ebx
je 0x5e005c7e
cmp dword [0x5e01c4ec], ebx
push 0x5e01cd44
push 0x5e01cb3c
push 0x5e01f4c0
je 0x5e005c66
push 0x5e01c2e4
push 0x5e01bdd0
lea eax, [ebp - 0x1cd4]
push 0x5e001614
push eax
call esi
add esp, 0x1c
jmp 0x5e005cb2
push 0x5e01bdd0
push 0x5e0015fc
lea eax, [ebp - 0x1cd4]
push eax
call esi
add esp, 0x18
jmp 0x5e005cb2
cmp dword [0x5e01c4ec], ebx
push 0x5e01cd44
push 0x5e01cb3c
push 0x5e01f4c0
je 0x5e005ca1
push 0x5e01c2e4
push 0x5e0015e4
jmp 0x5e005c70
lea eax, [ebp - 0x1cd4]
push 0x5e0015d4
push eax
call esi
add esp, 0x14
push 0x11
xor eax, eax
pop ecx
lea edi, [ebp - 0x64]
rep stosd dword es:[edi], eax
push 1
lea eax, [ebp - 0x10a4]
pop edi
mov dword [ebp - 0x64], 0x44
push 0x5e01c72c
push 0x5e020220
push 0x5e0013b8
push eax
mov word [ebp - 0x34], di
call esi
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x1cd4]
push ebx
push eax
lea eax, [ebp - 0x10a4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x5e005d58
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x10]
push 0x5e0015c8
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x10]
push 0x5e0015b8
push 0x5e001338
push eax
push 0x5e001334
push dword [0x5e020428]
call fcn.5e0031db
add esp, 0xc
push eax
call fcn.5e0031db
push eax
push edi
push 0x10
push edi
call fcn.5e0047be
add esp, 0x1c
xor eax, eax
jmp 0x5e005d9b
call fcn.5e00447a
push ebx
push dword [0x5e01c4f8]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.5e005f7c
lea eax, [ebp - 4]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [ebp - 4], 0x103
je 0x5e005d6a
cmp dword [ebp - 4], ebx
je 0x5e005d99
push ebx
call fcn.5e005da0
pop ecx
push dword [ebp - 4]
call fcn.5e010d37
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret