Function at 0x57cc1c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov eax, 0x57c554
call fcn.00406cfc
xor eax, eax
push ebp
push 0x57cef1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x57cf00
push 0
push 0
call fcn.00406fb0
mov ebx, eax
call sub.kernel32.dll_GetLastError_1
cmp eax, 0xb7
jne 0x57cc8e
push 5
mov eax, dword [0x581040]
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [0x581040]
mov eax, dword [eax]
call fcn.0048d43c
push ebx
call sub.kernel32.dll_ReleaseMutex
call fcn.0040488c
mov eax, dword [0x581040]
mov eax, dword [eax]
call fcn.0048d9cc
mov eax, dword [0x581040]
mov eax, dword [eax]
mov edx, 0x57cf1c
call fcn.0048d5c4
call fcn.00579f0c
mov ecx, dword [0x5810cc]
mov eax, dword [0x581040]
mov eax, dword [eax]
mov edx, dword [0x570bc8]
call fcn.0048d9e4
lea edx, [ebp - 0x18]
xor eax, eax
call fcn.00402b10
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.00409b98
mov edx, dword [ebp - 0x14]
mov eax, 0x5833b4
mov ecx, 0x57cf38
call fcn.00404d2c
mov eax, dword [0x5833b4]
call fcn.004099b4
test al, al
je 0x57ceb2
call fcn.00578f90
test al, al
jne 0x57ce98
mov ecx, dword [0x581040]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x539a7c]
call fcn.004860e4
mov edx, dword [0x580ce4]
mov dword [edx], eax
xor eax, eax
push ebp
push 0x57ce91
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x580ce4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, dword [0x580ce4]
mov eax, dword [eax]
cmp dword [eax + 0x324], 0
jne 0x57ce5f
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x57cf4c
mov edx, 0x57cf1c
mov eax, 0x57cf58
call fcn.0057a670
mov edx, dword [ebp - 0x1c]
mov eax, 0x5833b8
call fcn.00404a74
lea edx, [ebp - 0x20]
mov eax, dword [0x5833b8]
call fcn.004090d0
cmp dword [ebp - 0x20], 0
jne 0x57cda6
mov eax, 0x5833b8
mov edx, dword [0x580bb0]
mov edx, dword [edx + 4]
call fcn.00404a74
push 1
push 0
push 0
mov eax, dword [0x5833b8]
call fcn.00404ee0
push eax
push 0x57cf64
mov eax, dword [0x581040]
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
push eax
call sub.shell32.dll_ShellExecuteA
mov ecx, dword [0x581040]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x4cee60]
call fcn.004860e4
mov edx, dword [0x581388]
mov dword [edx], eax
xor eax, eax
push ebp
push 0x57ce58
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x581388]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xec]
call fcn.00578f90
test al, al
je 0x57ce26
push 0x40
mov ecx, 0x57cf00
mov edx, 0x57cf6c
mov eax, dword [0x581040]
mov eax, dword [eax]
call fcn.0048dbf4
mov ecx, dword [0x580ba4]
mov eax, dword [0x581040]
mov eax, dword [eax]
mov edx, dword [0x5739f4]
call fcn.0048d9e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x57ce77
mov eax, dword [0x581388]
mov eax, dword [eax]
call fcn.00403bec
ret
mov ecx, dword [0x580ba4]
mov eax, dword [0x581040]
mov eax, dword [eax]
mov edx, dword [0x5739f4]
call fcn.0048d9e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x57ceca
mov eax, dword [0x580ce4]
mov eax, dword [eax]
call fcn.00403bec
ret
mov ecx, dword [0x580ba4]
mov eax, dword [0x581040]
mov eax, dword [eax]
mov edx, dword [0x5739f4]
call fcn.0048d9e4
jmp 0x57ceca
mov ecx, dword [0x580ba4]
mov eax, dword [0x581040]
mov eax, dword [eax]
mov edx, dword [0x5739f4]
call fcn.0048d9e4
mov eax, dword [0x581040]
mov eax, dword [eax]
call fcn.0048da64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x57cef8
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00404a44
ret