Function at 0x5d3744
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov esi, edx
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 8], ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00405130
xor eax, eax
push ebp
push 0x5d3970
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, 0x5d3988
call fcn.00405284
dec eax
jge 0x5d37ce
push 3
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.0040a5a0
mov eax, dword [ebp - 0x24]
call fcn.00405140
push eax
push 0
mov eax, dword [ebp - 8]
call fcn.00405140
push eax
push 0x5d398c
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x5d3917
mov dl, 1
mov eax, dword [0x41c188]
call fcn.00403ec0
mov esi, eax
mov edx, dword [ebp - 8]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x248], 0
jne 0x5d38bd
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5d0b78]
call fcn.00535194
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x248], ebx
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.0047ea50
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.0047ea74
xor eax, eax
mov dword [ebx + 0xc], eax
lea edx, [ebp - 0x28]
mov eax, ebx
call fcn.005d1a7c
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [eax]
call dword [eax + 0x40]
call fcn.00406b04
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5d38ae
inc eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
call fcn.004054d8
mov edx, dword [ebp - 0x30]
lea ecx, [ebp - 0x2c]
mov eax, ebx
call fcn.005d1b2c
mov eax, dword [ebp - 0x2c]
push eax
lea edx, [ebp - 0x38]
mov eax, ebx
call fcn.005d1a7c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00406b04
inc dword [ebp - 0xc]
dec dword [ebp - 0x10]
jne 0x5d3865
or ecx, 0xffffffff
mov edx, 0x13
mov eax, ebx
call fcn.00536804
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x248]
mov eax, dword [ebx + 0xc]
and eax, 0x80000001
jns 0x5d38d5
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x5d38f3
lea edx, [ebp - 0x3c]
mov eax, ebx
call fcn.005d1970
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
call fcn.00406b04
jmp 0x5d390b
lea edx, [ebp - 0x40]
mov eax, ebx
call fcn.005d1970
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00406b04
inc dword [ebx + 0xc]
mov dl, 1
mov eax, esi
mov ecx, dword [eax]
call dword [ecx - 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5d3977
lea eax, [ebp - 0x40]
mov edx, dword [0x5cfb80]
mov ecx, 2
call fcn.00405754
lea eax, [ebp - 0x38]
call fcn.004069f4
lea eax, [ebp - 0x34]
call fcn.00404c80
lea eax, [ebp - 0x30]
call fcn.0040538c
lea eax, [ebp - 0x2c]
call fcn.004069f4
lea eax, [ebp - 0x28]
call fcn.004069f4
lea eax, [ebp - 0x24]
call fcn.00404c80
lea eax, [ebp - 8]
call fcn.00404c80
ret