Function at 0x53cd74
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x67
push 0
push 0
dec ecx
jne 0x53cd7c
push ecx
push ebx
push esi
mov ebx, eax
lea esi, [ebp - 0x2d4]
xor eax, eax
push ebp
push 0x53d090
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x318]
xor eax, eax
call fcn.0040480c
mov eax, dword [ebp - 0x318]
lea edx, [ebp - 0x314]
call fcn.0041b48c
mov edx, dword [ebp - 0x314]
lea eax, [ebp - 4]
mov ecx, 0x53d0ac
call fcn.00407dd8
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.00404bbc
mov eax, esi
call fcn.00404954
call fcn.004045a0
mov edx, 0x53d0d8
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
mov edx, 0x53d0f8
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d110
lea edx, [ebp - 0x320]
xor eax, eax
call fcn.0040480c
push dword [ebp - 0x320]
push 0x53d128
lea eax, [ebp - 0x31c]
mov edx, 3
call fcn.00407e60
mov edx, dword [ebp - 0x31c]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d138
lea edx, [ebp - 0x328]
xor eax, eax
call fcn.0040480c
push dword [ebp - 0x328]
push 0x53d128
push 0x53d15c
lea eax, [ebp - 0x324]
mov edx, 4
call fcn.00407e60
mov edx, dword [ebp - 0x324]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
mov edx, 0x53d180
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d19c
push dword [ebx + 0x3dc]
push 0x53d1b8
push 0x53d1e4
push dword [ebx + 0x3d8]
push 0x53d1b8
push 0x53d128
lea eax, [ebp - 0x32c]
mov edx, 7
call fcn.00407e60
mov edx, dword [ebp - 0x32c]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d1f8
push dword [ebx + 0x3d8]
push 0x53d1b8
push 0x53d128
push 0x53d224
lea eax, [ebp - 0x330]
mov edx, 5
call fcn.00407e60
mov edx, dword [ebp - 0x330]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d110
push dword [ebx + 0x3dc]
push 0x53d1b8
push 0x53d128
lea eax, [ebp - 0x334]
mov edx, 4
call fcn.00407e60
mov edx, dword [ebp - 0x334]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d110
push dword [ebp - 4]
push 0x53d128
lea eax, [ebp - 0x338]
mov edx, 3
call fcn.00407e60
mov edx, dword [ebp - 0x338]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
push 0x53d110
push dword [ebx + 0x3dc]
push 0x53d1b8
push 0x53d128
lea eax, [ebp - 0x33c]
mov edx, 4
call fcn.00407e60
mov edx, dword [ebp - 0x33c]
mov eax, esi
call fcn.00404fb0
call fcn.00405028
call fcn.004045a0
mov eax, esi
call fcn.00404c80
call fcn.004045a0
lea eax, [ebp - 0x310]
xor ecx, ecx
mov edx, 0x3c
call fcn.00404cd8
mov dword [ebp - 0x310], 0x3c
mov dword [ebp - 0x30c], 0x40
xor eax, eax
mov dword [ebp - 0x308], eax
xor eax, eax
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 4]
call fcn.00407b8c
mov dword [ebp - 0x300], eax
mov eax, 0x53d23c
mov dword [ebp - 0x2fc], eax
xor eax, eax
mov dword [ebp - 0x2f8], eax
xor eax, eax
mov dword [ebp - 0x2f4], eax
xor eax, eax
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x310]
push eax
call sub.shell32.dll_ShellExecuteExW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x53d097
lea eax, [ebp - 0x33c]
mov edx, 0xb
call fcn.00407020
lea eax, [ebp - 4]
call fcn.00406fc0
ret