Function at 0x4055f0
Capabilities:
Create process on windows

Disassembly:
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x30c30c31
imul ecx
sub esp, 0x30
sar edx, 4
push ebx
mov eax, edx
shr eax, 0x1f
push ebp
xor ebx, ebx
add eax, edx
push edi
je 0x405877
xor edi, edi
mov dword [esp + 0x10], edi
jmp 0x405624
mov edi, dword [esp + 0x10]
cmp edi, 0x2a0
jae 0x405877
cmp ebx, eax
jb 0x405639
call fcn.00591dda
mov eax, dword [esi + 0xc]
lea eax, [edi + eax + 0x38]
mov ebp, 0x10
cmp dword [eax + 0x18], ebp
jb 0x40564f
mov eax, dword [eax + 4]
jmp 0x405652
add eax, 4
fld dword [esp + 0x44]
mov edx, dword [0x73c5ac]
push eax
lea ecx, [esp + 0x1c]
push ecx
sub esp, 8
fstp dword [esp + 4]
mov dword [esp + 0x28], 0xffffd700
fld dword [esp + 0x50]
fadd qword [0x664a58]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp]
push edx
call fcn.00574450
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x30c30c31
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add esp, 0x14
cmp ebx, eax
jb 0x4056af
call fcn.00591dda
mov eax, dword [esi + 0xc]
add eax, edi
cmp dword [eax + 0x18], ebp
jb 0x4056be
mov ebp, dword [eax + 4]
jmp 0x4056c1
lea ebp, [eax + 4]
mov edi, dword [0x73c5ac]
push ebp
call fcn.00403c90
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
mov dword [esp + 0x28], edx
add esp, 4
fstp dword [esp + 0x1c]
mov ecx, 0xffffd700
fld dword [esp + 0x1c]
mov dword [esp + 0x14], ecx
fst dword [esp + 0x30]
fild dword [esp + 0x24]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fst dword [esp + 0x34]
fild dword [0x73c5b8]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fld dword [esp + 0x40]
fcom st(1)
fnstsw ax
test ah, 0x41
jp 0x405802
fld dword [esp + 0x30]
fadd st(1)
fcomp st(2)
fnstsw ax
fstp st(1)
test ah, 1
jne 0x40580a
fild dword [0x73c5bc]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fld dword [esp + 0x44]
fcom st(1)
fnstsw ax
test ah, 0x41
jp 0x405810
fld dword [esp + 0x34]
fadd st(1)
fcomp st(2)
fnstsw ax
fstp st(1)
test ah, 1
jne 0x405816
fld1
push 0
mov dword [esp + 0x18], ecx
push 0
lea ecx, [esp + 0x1c]
push ecx
sub esp, 0x10
fstp dword [esp + 0xc]
fxch st(3)
fstp dword [esp + 8]
fxch st(1)
faddp st(2)
fxch st(1)
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 4]
fstp dword [esp]
call fcn.00578620
add esp, 0x1c
cmp dword [0x73c5c0], 0
je 0x4057fc
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x30c30c31
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x4057cb
call fcn.00591dda
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x10]
cmp dword [edx + ecx + 0x34], 0x10
lea eax, [edx + ecx + 0x1c]
jb 0x4057e2
mov eax, dword [eax + 4]
jmp 0x4057e5
add eax, 4
push 5
push 0
push 0x662a1a
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
fld dword [esp + 0x40]
jmp 0x40581c
fstp st(3)
fstp st(1)
fstp st(0)
jmp 0x40581c
fstp st(2)
fstp st(0)
jmp 0x40581c
fstp st(4)
fstp st(2)
jmp 0x405818
fstp st(3)
fstp st(1)
fstp st(1)
fld dword [esp + 0x44]
mov ecx, dword [0x73c5ac]
push ebp
push 0x662588
lea eax, [esp + 0x1c]
push eax
sub esp, 8
fstp dword [esp + 4]
fstp dword [esp]
push ecx
call fcn.00574450
fld dword [esp + 0x5c]
mov ecx, dword [esi + 0x10]
fadd qword [0x664a50]
sub ecx, dword [esi + 0xc]
add dword [esp + 0x28], 0x54
mov eax, 0x30c30c31
fstp dword [esp + 0x5c]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebx
add eax, edx
add esp, 0x18
cmp ebx, eax
jb 0x405620
pop edi
pop ebp
pop ebx
add esp, 0x30
ret