Function at 0x4ef350
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push ebx
push esi
xor eax, eax
push ebp
push 0x4ef5bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x419c04]
call fcn.00403dd0
mov esi, eax
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef5d4
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 4]
call fcn.004ef234
mov edx, dword [ebp - 4]
mov eax, dword [0x500344]
mov eax, dword [eax]
add eax, 0x498
call fcn.00404d94
mov eax, dword [0x500344]
mov eax, dword [eax]
mov ecx, dword [eax + 0x498]
lea eax, [ebp - 8]
mov edx, 0x4ef5e8
call fcn.00405058
mov edx, dword [ebp - 8]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef5fc
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef61c
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef678
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef6e0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef714
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef6e0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef784
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef6e0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef7e8
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef848
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef878
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef8a8
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef900
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef924
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef6e0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef990
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef848
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef878
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4ef9ec
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4efa50
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4efa88
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4efac4
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4efae0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x74]
push 0
push 0
push 0
push 0x4efaf0
push 0x4efb00
push 0
call sub.shell32.dll_ShellExecuteA
push 0x1388
call sub.kernel32.dll_Sleep_2
push 0x4efb10
mov eax, dword [0x500344]
mov eax, dword [eax]
push dword [eax + 0x498]
push 0x4efb28
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004050d4
mov edx, dword [ebp - 0xc]
mov eax, dword [0x508cb0]
mov eax, dword [eax + 0x370]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ef5c3
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404d64
ret