Function at 0x58a280
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff90
push ebx
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x58a613
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0xc], 0
jne 0x58a2c9
push 0x58a62c
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58a64c
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 1
jne 0x58a2ef
push 0x58a72c
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58a74c
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 2
jne 0x58a315
push 0x58a818
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58a838
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 3
jne 0x58a33b
push 0x58a924
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58a944
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 4
jne 0x58a361
push 0x58a9fc
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58aa1c
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 5
jne 0x58a387
push 0x58aa90
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58aab0
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 6
jne 0x58a3ad
push 0x58ab24
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58ab44
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 7
jne 0x58a3d3
push 0x58abc8
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58abe8
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 8
jne 0x58a3f9
push 0x58ac6c
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58ac8c
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 9
jne 0x58a41f
push 0x58ad0c
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58ad2c
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 0xa
jne 0x58a445
push 0x58ad9c
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58adbc
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 0xb
jne 0x58a468
push 0x58ae2c
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58ae4c
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 0xc
jne 0x58a48b
push 0x58aecc
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58aeec
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 0xd
jne 0x58a4ae
push 0x58af70
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58af90
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
jmp 0x58a4cf
cmp dword [ebp - 0xc], 0xe
jne 0x58a4cf
push 0x58b034
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x58b054
mov edx, 0x58a71c
mov eax, dword [ebp - 4]
call fcn.0058b160
lea eax, [ebp - 0x60]
xor ecx, ecx
mov edx, 0x3c
call fcn.00404cac
mov dword [ebp - 0x60], 0x3c
mov dword [ebp - 0x5c], 0x40
mov eax, 0x58b100
mov dword [ebp - 0x54], eax
mov eax, 0x58b10c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x24]
call fcn.00407478
mov dword [ebp - 0x4c], eax
mov eax, 0x58b128
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x60]
push eax
call sub.shell32.dll_ShellExecuteExW
push 0x1388
mov eax, dword [ebp - 0x28]
push eax
call sub.user32.dll_WaitForInputIdle
push 0
push 0x58b12c
call sub.user32.dll_FindWindowW
mov dword [ebp - 0x10], eax
push 5
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x70]
push eax
mov eax, dword [0x5b8b94]
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [0x5b209c]
mov eax, dword [eax]
call fcn.004c7490
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x20], eax
push 0xa
call sub.kernel32.dll_Sleep_2
cmp dword [ebp - 0x70], 0
je 0x58a5a8
push 0xffffffffffffffff
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_MoveWindow
jmp 0x58a5bd
push 0
push 0xf030
push 0x112
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_SendMessageW
mov edx, dword [ebp - 0x10]
mov eax, dword [0x5b8b8c]
call fcn.0059d198
push 0
push 0
push 0x10
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_PostMessageW
mov eax, dword [ebp - 0x10]
mov dword [0x5b8b94], eax
mov eax, 0x5b8bc8
mov ecx, 0x58b148
mov edx, dword [ebp - 0x24]
call fcn.004078c0
mov dword [0x5b8c10], 3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x58a61a
lea eax, [ebp - 0x24]
call fcn.004073dc
ret