Function at 0x5b61e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e2f66
mov eax, dword fs:[0]
push eax
sub esp, 0x42c
mov eax, dword [0x676580]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x414], ecx
mov byte [ebp - 0xd], 0
cmp dword [ebp + 0xc], 0
je 0x5b6230
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ecx]
call eax
mov dword [ebp - 0x418], eax
jmp 0x5b623a
mov dword [ebp - 0x418], 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0
je 0x5b624f
cmp dword [ebp - 0x38], 0
jne 0x5b6254
jmp 0x5b6a2a
push 0xfde9
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x1bc]
call fcn.004550e0
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x420], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x420]
call fcn.00493020
push eax
lea ecx, [ebp - 0x58]
call fcn.00401c00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1bc]
call fcn.0040e6c0
lea ecx, [ebp - 0x114]
call fcn.005480b0
mov byte [ebp - 4], 3
push 0
lea ecx, [ebp - 0x6c]
call fcn.00544f40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
call fcn.00401360
push eax
lea ecx, [ebp - 0x1dc]
call fcn.00401c00
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x1dc]
push edx
lea ecx, [ebp - 0x114]
call fcn.005493a0
movzx eax, al
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1bd], al
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1dc]
call fcn.00401d60
movzx ecx, byte [ebp - 0x1bd]
test ecx, ecx
je 0x5b63d3
cmp dword [0x67e1c8], 0
je 0x5b63a4
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0x2de
lea edx, [ebp - 0x1e4]
push edx
mov eax, dword [ebp - 0x38]
push eax
push 0x635f94
push 0x635f8c
push 0x635f48
push 0x635f40
lea ecx, [ebp - 0x1e0]
push ecx
push 0x635f3c
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.004476c0
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00545090
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x114]
call fcn.0044a910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.00401d60
jmp 0x5b6a2a
lea ecx, [ebp - 0x6c]
call fcn.00543e60
movzx edx, al
test edx, edx
jne 0x5b63f5
lea ecx, [ebp - 0x6c]
call fcn.00543eb0
movzx eax, al
test eax, eax
jne 0x5b649e
cmp dword [0x67e1c8], 0
je 0x5b646f
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0x2e4
lea ecx, [ebp - 0x1ec]
push ecx
push 0x63600c
push 0x636004
push 0x635fc0
push 0x635fb4
lea edx, [ebp - 0x1e8]
push edx
push 0x635fb0
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.004476c0
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00545090
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x114]
call fcn.0044a910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.00401d60
jmp 0x5b6a2a
lea eax, [ebp - 0x34]
push eax
push 0x636028
lea ecx, [ebp - 0x6c]
call fcn.005462d0
mov ecx, eax
call fcn.00544ab0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x138]
push ecx
push 0x63602c
lea ecx, [ebp - 0x6c]
call fcn.005462d0
mov ecx, eax
call fcn.00544ab0
mov byte [ebp - 4], 7
lea edx, [ebp - 0x90]
push edx
push 0x636034
lea ecx, [ebp - 0x6c]
call fcn.005462d0
mov ecx, eax
call fcn.00544ab0
mov byte [ebp - 4], 8
push 0xfde9
lea ecx, [ebp - 0x138]
call fcn.00401360
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0040e420
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x428], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x428]
call fcn.00493020
push eax
lea ecx, [ebp - 0x70]
call fcn.004092b0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2f0]
call fcn.0040e6c0
lea ecx, [ebp - 0x70]
push ecx
mov ecx, dword [ebp - 0x414]
add ecx, 0x3bc
mov edx, dword [ebp - 0x414]
mov eax, dword [edx + 0x3bc]
mov edx, dword [eax + 0x10]
call edx
push 0xfde9
lea ecx, [ebp - 0x90]
call fcn.00401360
push eax
lea ecx, [ebp - 0x3f4]
call fcn.0040e420
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x430], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x430]
call fcn.00493020
push eax
lea ecx, [ebp - 0x98]
call fcn.004092b0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x3f4]
call fcn.0040e6c0
lea ecx, [ebp - 0x98]
call fcn.0040ee60
movzx ecx, al
test ecx, ecx
je 0x5b66ca
cmp dword [0x67e1c8], 0
je 0x5b6656
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x3f8], 0x2f2
lea edx, [ebp - 0x3fc]
push edx
push 0x636094
push 0x63608c
push 0x636048
push 0x636040
lea eax, [ebp - 0x3f8]
push eax
push 0x63603c
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.004476c0
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98]
call fcn.00403270
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x70]
call fcn.00403270
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.00401d60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x138]
call fcn.00401d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.00401d60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00545090
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x114]
call fcn.0044a910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.00401d60
jmp 0x5b6a2a
push 0
lea ecx, [ebp - 0x94]
push ecx
call fcn.0057a250
add esp, 8
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x94]
call fcn.0040ee60
movzx edx, al
test edx, edx
je 0x5b67f2
cmp dword [0x67e1c8], 0
je 0x5b676f
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x400], 0x2f9
lea eax, [ebp - 0x404]
push eax
push 0x63611c
push 0x636114
push 0x6360d0
push 0x6360c4
lea ecx, [ebp - 0x400]
push ecx
push 0x6360c0
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.004476c0
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447700
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x94]
call fcn.00403270
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98]
call fcn.00403270
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x70]
call fcn.00403270
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.00401d60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x138]
call fcn.00401d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.00401d60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00545090
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x114]
call fcn.0044a910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.00401d60
jmp 0x5b6a2a
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x3c]
push eax
call fcn.005c2220
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x74]
push edx
call fcn.005c2430
add esp, 8
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x94]
call fcn.00454f00
push 1
push 0
lea ecx, [ebp - 0x74]
call fcn.00493020
push eax
lea ecx, [ebp - 0x94]
call fcn.00493020
push eax
push 0x636144
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cdq
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], edx
cmp dword [0x67e1c8], 0
je 0x5b6959
mov dword [ebp - 0x410], 0
cmp dword [ebp - 0x118], 0
jl 0x5b6896
jg 0x5b688d
cmp dword [ebp - 0x11c], 0x20
jbe 0x5b6896
mov byte [ebp - 0x431], 1
jmp 0x5b689d
mov byte [ebp - 0x431], 0
mov cl, byte [ebp - 0x431]
mov byte [ebp - 0x409], cl
mov dword [ebp - 0x408], 0x303
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0x409]
push eax
push 0x6361cc
lea ecx, [ebp - 0x74]
call fcn.00493020
push eax
push 0x6361c8
lea ecx, [ebp - 0x94]
call fcn.00493020
push eax
push 0x6361ac
push 0x6361a4
push str.KCommonPopBase2::OnJsEventExecCmd
push 0x636154
lea ecx, [ebp - 0x408]
push ecx
push 0x636150
call fcn.00447600
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.004476c0
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.00447680
mov ecx, eax
call fcn.004540b0
mov ecx, eax
call fcn.00447700
cmp dword [ebp - 0x118], 0
jl 0x5b6979
jg 0x5b696d
cmp dword [ebp - 0x11c], 0x20
jbe 0x5b6979
mov dword [ebp - 0x438], 1
jmp 0x5b6983
mov dword [ebp - 0x438], 0
mov dl, byte [ebp - 0x438]
mov byte [ebp - 0xd], dl
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x74]
call fcn.00403270
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3c]
call fcn.00403270
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x94]
call fcn.00403270
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98]
call fcn.00403270
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x70]
call fcn.00403270
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.00401d60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x138]
call fcn.00401d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.00401d60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00545090
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x114]
call fcn.0044a910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.00401d60
xor eax, eax
jne 0x5b6215
lea ecx, [ebp - 0x14]
call fcn.00403290
mov dword [ebp - 4], 0x12
movzx ecx, byte [ebp - 0xd]
neg ecx
sbb ecx, ecx
neg ecx
push ecx
push str._ret__:__d
lea edx, [ebp - 0x14]
push edx
call fcn.00403240
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x5b6a72
lea ecx, [ebp - 0x14]
call fcn.00493020
push eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ecx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00403270
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.005236f2
mov esp, ebp
pop ebp
ret 0xc