Function at 0x53e37d
Capabilities:
Create process on windows

Disassembly:
push 0x7c0
mov eax, 0x5676b7
call fcn.004cd176
mov eax, ecx
mov dword [ebp - 0x76c], eax
cmp dword [eax + 4], 0xffffffff
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x774], ecx
mov dword [ebp - 0x778], esi
je 0x53e3dd
mov ecx, eax
call fcn.0053e75b
test al, al
jne 0x53e3dd
push str.Attempting_to_start_a_new_process_when_the_process_has_already_been_started
push 0x43
lea ecx, [ebp - 0x3e0]
call fcn.00509c53
push 0x5d6094
lea eax, [ebp - 0x3e0]
push eax
call fcn.004cea74
and dword [ebp - 0x18], 0
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x14], ecx
mov word [ebp - 0x28], ax
and dword [ebp - 4], eax
cmp dword [ebx + 0x10], eax
sete al
test al, al
jne 0x53e46e
cmp dword [esi + 0x10], 0
sete al
test al, al
jne 0x53e46e
cmp dword [esi + 0x14], 8
jb 0x53e40f
mov eax, dword [esi]
jmp 0x53e411
mov eax, esi
push 0x20
pop edx
cmp dx, word [eax]
je 0x53e46e
and dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 1
push eax
push ebx
call fcn.0050845a
push esi
lea eax, [ebp - 0x40]
push eax
push str._s__s
lea eax, [ebp - 0x58]
push eax
call fcn.0050a0ae
push eax
lea ecx, [ebp - 0x28]
call fcn.004190f4
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.0040779d
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.0040779d
jmp 0x53e487
cmp dword [esi + 0x10], 0
je 0x53e487
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x53e487
push 0xffffffffffffffff
push 0
push esi
mov ecx, eax
call fcn.0040799b
push 0x44
pop edi
push edi
lea eax, [ebp - 0x7cc]
push 0
push eax
call fcn.004d19ad
mov dword [ebp - 0x7cc], edi
xor eax, eax
lea edi, [ebp - 0x788]
xor edx, edx
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [ebp - 0x76c]
cmp byte [ebp + 8], dl
je 0x53e584
cmp dword [edi + 0x1c], edx
jne 0x53e4c8
mov eax, edx
jmp 0x53e4d3
lea eax, [edi + 0xc]
cmp dword [eax + 0x14], 8
jb 0x53e4d3
mov eax, dword [eax]
cmp dword [ebp - 0x18], edx
jne 0x53e4e0
mov dword [ebp - 0x770], edx
jmp 0x53e4f1
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x28]
mov dword [ebp - 0x770], ecx
cmp dword [ebx + 0x14], 8
jb 0x53e501
mov ecx, dword [ebx]
mov dword [ebp - 0x76c], ecx
jmp 0x53e507
mov dword [ebp - 0x76c], ebx
mov esi, dword [ebp - 0x774]
lea ecx, [ebp - 0x788]
push ecx
lea ecx, [ebp - 0x7cc]
push ecx
mov esi, dword [esi + 8]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
or eax, 0x8000000
push eax
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x770]
push dword [ebp - 0x76c]
push esi
call dword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
jne 0x53e651
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [ebp + 0x18], 0
mov esi, eax
je 0x53e641
push dword [ebp - 0x778]
lea ecx, [ebp - 0x3e0]
push ebx
push str.Failed_to_start_process__as_user__for_file:__s_arguments:__s
push esi
push 0xf
call fcn.0053cfab
jmp 0x53e3cc
cmp dword [edi + 0x1c], edx
jne 0x53e58d
mov eax, edx
jmp 0x53e598
lea eax, [edi + 0xc]
cmp dword [eax + 0x14], 8
jb 0x53e598
mov eax, dword [eax]
cmp dword [ebp - 0x18], edx
jne 0x53e5a5
mov dword [ebp - 0x76c], edx
jmp 0x53e5b6
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x28]
mov dword [ebp - 0x76c], ecx
cmp dword [ebx + 0x14], 8
jb 0x53e5c6
mov ecx, dword [ebx]
mov dword [ebp - 0x770], ecx
jmp 0x53e5cc
mov dword [ebp - 0x770], ebx
lea ecx, [ebp - 0x788]
push ecx
lea ecx, [ebp - 0x7cc]
push ecx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
or eax, 0x8000000
push eax
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x76c]
push dword [ebp - 0x770]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x53e651
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp byte [ebp + 0x18], 0
je 0x53e63f
push esi
push ebx
push str.Failed_to_start_process_for_file:__s_arguments:__s
call edi
push eax
push 0xf
lea ecx, [ebp - 0x768]
call fcn.0053cf12
push 0x5d6094
lea eax, [ebp - 0x768]
jmp 0x53e3d7
mov esi, eax
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.0040779d
mov eax, esi
jmp 0x53e67b
mov eax, dword [ebp - 0x788]
push dword [ebp - 0x784]
mov dword [edi + 4], eax
mov dword [edi + 8], 0x103
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.0040779d
xor eax, eax
call fcn.004cd128
ret 0x14