Function at 0x438000
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x61c
mov eax, dword [0x57c870]
xor eax, ebp
mov dword [ebp - 8], eax
lea eax, [ebp - 0x208]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00437e40
add esp, 8
mov dword [ebp - 4], eax
cmp dword [0x5f6630], 1
jne 0x43812f
cmp dword [ebp - 4], 0xffffffff
jne 0x4380a4
push 0x5c
push 0x560610
push 0x5c
push 0x5c75c0
push 0x560614
lea edx, [ebp - 0x408]
push edx
call fcn.00532706
add esp, 0x18
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x208]
push ecx
call fcn.00532580
add esp, 8
push 0x560620
lea edx, [ebp - 0x208]
push edx
lea eax, [ebp - 0x408]
push eax
call fcn.00437ce0
add esp, 0xc
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 1
jne 0x4380a2
mov dword [ebp - 4], 0x3e7
jmp 0x438121
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x5c75b8]
jge 0x4380d3
push 0x5c
push 0x560624
push 0x5c
push 0x5c75c0
push 0x560628
lea edx, [ebp - 0x408]
push edx
call fcn.00532706
add esp, 0x18
jmp 0x4380f5
push 0x5c
push 0x560634
push 0x5c
push 0x5c77c0
push 0x560638
lea eax, [ebp - 0x408]
push eax
call fcn.00532706
add esp, 0x18
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0x2fd
add ecx, 0x10ce33f
push ecx
lea edx, [ebp - 0x208]
push edx
lea eax, [ebp - 0x408]
push eax
call fcn.00437ce0
add esp, 0xc
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
jne 0x43812f
jmp 0x4384b0
cmp dword [ebp - 4], 0xffffffff
jne 0x438163
mov ecx, dword [ebp + 8]
push ecx
push str.Cant_find_document:__s
lea edx, [ebp - 0x408]
push edx
call fcn.00532706
add esp, 0xc
lea eax, [ebp - 0x408]
push eax
push 0
call fcn.00436500
add esp, 8
jmp 0x4384b0
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x5c75b8]
jge 0x438190
push 0x56065c
push 0x5c
push 0x5c75c0
push 0x560660
lea edx, [ebp - 0x108]
push edx
call fcn.00532706
add esp, 0x14
jmp 0x4381b0
push 0x560668
push 0x5c
push 0x5c77c0
push 0x56066c
lea eax, [ebp - 0x108]
push eax
call fcn.00532706
add esp, 0x14
cmp dword [0x55c710], 1
jne 0x4382e6
push 0x560674
call fcn.00535cda
add esp, 4
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0
je 0x43821a
mov ecx, dword [ebp - 0x510]
push ecx
lea edx, [ebp - 0x308]
push edx
call fcn.00532580
add esp, 8
push 0x20
lea eax, [ebp - 0x308]
push eax
call fcn.005350b0
add esp, 8
test eax, eax
je 0x438218
push 0x56067c
lea ecx, [ebp - 0x308]
push ecx
call fcn.00532706
add esp, 8
jmp 0x43822e
push str.c:windows_temp
lea edx, [ebp - 0x308]
push edx
call fcn.00532706
add esp, 8
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x438254
mov dword [ebp - 0x514], 1
jmp 0x438279
push 1
lea edx, [ebp - 0x308]
push edx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x208]
push ecx
call fcn.00487d30
add esp, 0x10
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 1
jne 0x4382e1
lea edx, [ebp - 0x308]
push edx
lea eax, [ebp - 0x108]
push eax
call fcn.00532580
add esp, 8
lea ecx, [ebp - 0x208]
push ecx
push 0x5c
lea edx, [ebp - 0x108]
push edx
push 0x56069c
lea eax, [ebp - 0x508]
push eax
call fcn.00532706
add esp, 0x14
push 1
push 0
push 0
lea ecx, [ebp - 0x508]
push ecx
push 0x5606a4
mov edx, dword [0x60137c]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x514], eax
jmp 0x43849f
cmp dword [0x56a5e0], 0xf
jne 0x43844a
push 0x22
lea eax, [ebp - 0x208]
push eax
push 0x5c
lea ecx, [ebp - 0x108]
push ecx
push 0x22
push str._c_s_c_s_c
lea edx, [ebp - 0x508]
push edx
call fcn.00532706
add esp, 0x1c
push 1
push 0
push 0
lea eax, [ebp - 0x508]
push eax
push 0x5606b8
mov ecx, dword [0x60137c]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0x20
jge 0x438439
mov edx, dword [ebp - 0x518]
push edx
lea eax, [ebp - 0x508]
push eax
push 0x5606c0
lea ecx, [ebp - 0x408]
push ecx
call fcn.00532706
add esp, 0x10
lea edx, [ebp - 0x408]
push edx
push 1
call fcn.00436500
add esp, 8
lea eax, [ebp - 0x618]
push eax
call fcn.00489ea0
add esp, 4
push 1
lea ecx, [ebp - 0x618]
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x208]
push eax
call fcn.00487d30
add esp, 0x10
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 1
jne 0x438439
lea ecx, [ebp - 0x208]
push ecx
push 0x5c
lea edx, [ebp - 0x618]
push edx
push 0x5606d0
lea eax, [ebp - 0x508]
push eax
call fcn.00532706
add esp, 0x14
push 1
push 0
push 0
lea ecx, [ebp - 0x508]
push ecx
push 0x5606d8
mov edx, dword [0x60137c]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
push eax
lea ecx, [ebp - 0x508]
push ecx
push str._s___ret_d_
lea edx, [ebp - 0x408]
push edx
call fcn.00532706
add esp, 0x10
lea eax, [ebp - 0x408]
push eax
push 1
call fcn.00436500
add esp, 8
mov ecx, dword [ebp - 0x518]
push ecx
call fcn.0048dea0
add esp, 4
jmp 0x43849f
push 0x22
lea edx, [ebp - 0x208]
push edx
push 0x5c
lea eax, [ebp - 0x108]
push eax
push 0x22
push 0x22
push 0x5f9ad8
push 0x22
push str._c_s_c__c_s_c_s_c
lea ecx, [ebp - 0x508]
push ecx
call fcn.00532706
add esp, 0x28
push 5
lea edx, [ebp - 0x508]
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x61c]
push eax
call fcn.0048dea0
add esp, 4
lea ecx, [ebp - 0x508]
push ecx
push 1
call fcn.00436500
add esp, 8
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00532783
mov esp, ebp
pop ebp
ret