Function at 0x5974f4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x17
push 0
push 0
dec ecx
jne 0x5974fc
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x597e09
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x4111e4]
call fcn.00403140
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x20]
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.00454428
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00409adc
lea eax, [ebp - 0x1c]
mov edx, 0x597e20
call fcn.00404198
mov eax, dword [ebp - 0x1c]
call fcn.004097a4
test al, al
je 0x597588
lea edx, [ebp - 0x28]
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.00454428
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.00409adc
lea eax, [ebp - 0x24]
mov edx, 0x597e20
call fcn.00404198
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov dl, 1
mov eax, dword [0x456678]
call fcn.004567e4
mov dword [ebp - 4], eax
mov edx, 0x80000002
mov eax, dword [ebp - 4]
call fcn.004568c0
mov dl, 1
mov eax, dword [0x456678]
call fcn.004567e4
mov ebx, eax
mov edx, 0x80000000
mov eax, ebx
call fcn.004568c0
mov dl, 1
mov eax, dword [0x4111e4]
call fcn.00403140
mov esi, eax
mov dl, 1
mov eax, dword [0x4111e4]
call fcn.00403140
mov dword [ebp - 8], eax
xor ecx, ecx
mov edx, 0x597e30
mov eax, dword [ebp - 4]
call fcn.00456a04
test al, al
je 0x597de3
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.00456e10
lea edx, [ebp - 0x2c]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x2c], 0
je 0x5978f8
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5978b0
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], 0
push 0x597e84
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x34]
push 0x597e94
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00404250
mov edx, dword [ebp - 0x30]
xor ecx, ecx
mov eax, ebx
call fcn.00456a04
test al, al
je 0x59789d
lea ecx, [ebp - 0x14]
xor edx, edx
mov eax, ebx
call fcn.00457068
mov eax, dword [0x6456e0]
cmp byte [eax], 0
je 0x5976a7
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
mov edx, 0x597eac
call fcn.004041dc
mov edx, dword [ebp - 0x38]
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
call fcn.00413a78
jmp 0x5976d0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x14]
mov edx, 0x597ec4
call fcn.004041dc
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
call fcn.00413a78
mov eax, dword [ebp - 0x14]
call fcn.004097a4
test al, al
jne 0x597712
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x40]
mov edx, 0x597ef0
call fcn.004041dc
mov edx, dword [ebp - 0x40]
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
call fcn.00413a78
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
call fcn.0040447c
test eax, eax
jne 0x59789d
cmp dword [ebp - 0x14], 0
je 0x59789d
mov eax, dword [0x6456e0]
cmp byte [eax], 0
je 0x5977f3
push 0x40024
push 0x597f2c
push dword [ebp - 0x14]
push 0x597f4c
push 0x597f58
lea ecx, [ebp - 0x50]
mov eax, dword [0x645474]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14]
call fcn.005902f8
push dword [ebp - 0x50]
push 0x597f4c
push 0x597f68
lea eax, [ebp - 0x4c]
mov edx, 7
call fcn.00404250
mov eax, dword [ebp - 0x4c]
call fcn.00404354
mov edx, eax
mov ecx, 0x597f74
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.004540b8
cmp eax, 6
jne 0x5977e8
xor edx, edx
mov eax, ebx
call fcn.00456d88
push 0
push 0x597f84
push dword [ebp - 0x14]
push 0x597f98
lea eax, [ebp - 0x54]
mov edx, 3
call fcn.00404250
mov eax, dword [ebp - 0x54]
call fcn.00404354
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [ebp - 0x14]
call fcn.0040998c
jmp 0x5977f3
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00413a78
mov eax, dword [0x6456e0]
cmp byte [eax], 0
jne 0x59789d
push 0x40024
push 0x597fa8
push dword [ebp - 0x14]
push 0x597f4c
lea ecx, [ebp - 0x5c]
mov eax, dword [0x645474]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14]
call fcn.005902f8
push dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
mov edx, 4
call fcn.00404250
mov eax, dword [ebp - 0x58]
call fcn.00404354
mov edx, eax
mov ecx, 0x597f74
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.004540b8
cmp eax, 6
jne 0x597892
xor edx, edx
mov eax, ebx
call fcn.00456d88
push 0
push 0x597f84
push dword [ebp - 0x14]
push 0x597f98
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00404250
mov eax, dword [ebp - 0x60]
call fcn.00404354
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [ebp - 0x14]
call fcn.0040998c
jmp 0x59789d
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00413a78
mov eax, ebx
call fcn.00456890
inc dword [ebp - 0xc]
dec dword [ebp - 0x18]
jne 0x59762b
cmp dword [ebp - 0x14], 0
je 0x5978f8
mov eax, dword [0x6456e0]
cmp byte [eax], 0
je 0x5978dd
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
mov edx, 0x597ff4
call fcn.00413a78
jmp 0x5978f8
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
mov edx, 0x598010
call fcn.00413a78
lea edx, [ebp - 0x68]
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.00454428
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00409adc
lea eax, [ebp - 0x64]
mov edx, 0x597e20
call fcn.00404198
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
call fcn.00403170
mov eax, ebx
call fcn.00403170
mov eax, esi
call fcn.00403170
mov eax, dword [ebp - 8]
call fcn.00403170
mov eax, dword [ebp - 0x10]
call fcn.00403170
mov dl, 1
mov eax, dword [0x4111e4]
call fcn.00403140
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x70]
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.00454428
mov eax, dword [ebp - 0x70]
lea edx, [ebp - 0x6c]
call fcn.00409adc
lea eax, [ebp - 0x6c]
mov edx, 0x597e20
call fcn.00404198
mov eax, dword [ebp - 0x6c]
call fcn.004097a4
test al, al
je 0x5979c4
lea edx, [ebp - 0x78]
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.00454428
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.00409adc
lea eax, [ebp - 0x74]
mov edx, 0x597e20
call fcn.00404198
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov dl, 1
mov eax, dword [0x456678]
call fcn.004567e4
mov dword [ebp - 4], eax
mov edx, 0x80000002
mov eax, dword [ebp - 4]
call fcn.004568c0
mov dl, 1
mov eax, dword [0x456678]
call fcn.004567e4
mov ebx, eax
mov edx, 0x80000000
mov eax, ebx
call fcn.004568c0
mov dl, 1
mov eax, dword [0x4111e4]
call fcn.00403140
mov esi, eax
mov dl, 1
mov eax, dword [0x4111e4]
call fcn.00403140
mov dword [ebp - 8], eax
xor ecx, ecx
mov edx, 0x598034
mov eax, dword [ebp - 4]
call fcn.00456a04
test al, al
je 0x597de3
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.00456ed8
lea edx, [ebp - 0x7c]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x7c], 0
je 0x597d7c
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x597d34
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], 0
push 0x597e84
lea ecx, [ebp - 0x84]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x84]
push 0x597e94
lea eax, [ebp - 0x80]
mov edx, 3
call fcn.00404250
mov edx, dword [ebp - 0x80]
xor ecx, ecx
mov eax, ebx
call fcn.00456a04
test al, al
je 0x597d21
lea ecx, [ebp - 0x14]
xor edx, edx
mov eax, ebx
call fcn.00457068
mov eax, dword [0x6456e0]
cmp byte [eax], 0
je 0x597aef
lea eax, [ebp - 0x88]
mov ecx, dword [ebp - 0x14]
mov edx, 0x597eac
call fcn.004041dc
mov edx, dword [ebp - 0x88]
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
call fcn.00413a78
jmp 0x597b1e
lea eax, [ebp - 0x8c]
mov ecx, dword [ebp - 0x14]
mov edx, 0x597ec4
call fcn.004041dc
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
call fcn.00413a78
mov eax, dword [ebp - 0x14]
call fcn.004097a4
test al, al
jne 0x597b6c
lea ecx, [ebp - 0x94]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x90]
mov edx, 0x597ef0
call fcn.004041dc
mov edx, dword [ebp - 0x90]
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
call fcn.00413a78
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x14]
call fcn.0040447c
test eax, eax
jne 0x597d21
cmp dword [ebp - 0x14], 0
je 0x597d21
mov eax, dword [0x6456e0]
cmp byte [eax], 0
je 0x597c65
push 0x40024
push 0x597f2c
push dword [ebp - 0x14]
push 0x597f4c
push 0x597f58
lea ecx, [ebp - 0xa0]
mov eax, dword [0x645474]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14]
call fcn.005902f8
push dword [ebp - 0xa0]
push 0x597f4c
push 0x597f68
lea eax, [ebp - 0x9c]
mov edx, 7
call fcn.00404250
mov eax, dword [ebp - 0x9c]
call fcn.00404354
mov edx, eax
mov ecx, 0x597f74
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.004540b8
cmp eax, 6
jne 0x597c5a
xor edx, edx
mov eax, ebx
call fcn.00456d88
push 0
push 0x597f84
push dword [ebp - 0x14]
push 0x597f98
lea eax, [ebp - 0xa4]
mov edx, 3
call fcn.00404250
mov eax, dword [ebp - 0xa4]
call fcn.00404354
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [ebp - 0x14]
call fcn.0040998c
jmp 0x597c65
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00413a78
mov eax, dword [0x6456e0]
cmp byte [eax], 0
jne 0x597d21
push 0x40024
push 0x597fa8
push dword [ebp - 0x14]
push 0x597f4c
lea ecx, [ebp - 0xac]
mov eax, dword [0x645474]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14]
call fcn.005902f8
push dword [ebp - 0xac]
lea eax, [ebp - 0xa8]
mov edx, 4
call fcn.00404250
mov eax, dword [ebp - 0xa8]
call fcn.00404354
mov edx, eax
mov ecx, 0x597f74
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.004540b8
cmp eax, 6
jne 0x597d16
xor edx, edx
mov eax, ebx
call fcn.00456d88
push 0
push 0x597f84
push dword [ebp - 0x14]
push 0x597f98
lea eax, [ebp - 0xb0]
mov edx, 3
call fcn.00404250
mov eax, dword [ebp - 0xb0]
call fcn.00404354
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [ebp - 0x14]
call fcn.0040998c
jmp 0x597d21
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00413a78
mov eax, ebx
call fcn.00456890
inc dword [ebp - 0xc]
dec dword [ebp - 0x18]
jne 0x597a67
cmp dword [ebp - 0x14], 0
je 0x597d7c
mov eax, dword [0x6456e0]
cmp byte [eax], 0
je 0x597d61
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
mov edx, 0x597ff4
call fcn.00413a78
jmp 0x597d7c
mov eax, dword [0x65a224]
mov eax, dword [eax + 0x2ec]
mov eax, dword [eax + 0x208]
mov edx, 0x598010
call fcn.00413a78
lea edx, [ebp - 0xb8]
mov eax, dword [0x6454e4]
mov eax, dword [eax]
call fcn.00454428
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0xb4]
call fcn.00409adc
lea eax, [ebp - 0xb4]
mov edx, 0x597e20
call fcn.00404198
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
call fcn.00403170
mov eax, ebx
call fcn.00403170
mov eax, esi
call fcn.00403170
mov eax, dword [ebp - 8]
call fcn.00403170
mov eax, dword [ebp - 0x10]
call fcn.00403170
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x597e10
lea eax, [ebp - 0xb8]
mov edx, 0x28
call fcn.00403f34
lea eax, [ebp - 0x14]
call fcn.00403f10
ret