Function at 0x54e78c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x54e794
push ebx
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x54eb0a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xc]
mov edx, dword [0x567b4c]
call fcn.00404424
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.00409348
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
call fcn.00404424
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00404424
lea eax, [ebp - 0x14]
call fcn.0040438c
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0xc]
call fcn.00408f24
mov edx, dword [ebp - 0x20]
mov eax, 0x54eb20
call fcn.004049a0
dec eax
jne 0x54e851
mov edx, dword [0x564ed0]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
mov ecx, 0x54eb34
call fcn.004046a8
lea eax, [ebp - 0xc]
mov ecx, 8
mov edx, 1
call fcn.004048fc
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00409348
push 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054bbb0
test al, al
jne 0x54eae2
jmp 0x54ea66
mov al, byte [0x54eb44]
push eax
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x54eb50
mov edx, 0x54eb5c
mov eax, dword [ebp - 0xc]
call fcn.00410510
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0xc]
call fcn.00404424
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00409348
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0xc]
call fcn.00404424
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00404424
mov eax, dword [ebp - 0x10]
call fcn.00409db4
test al, al
je 0x54e8c2
push 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054bbb0
test al, al
jne 0x54eae2
jmp 0x54ea66
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
call fcn.00408f24
mov edx, dword [ebp - 0x2c]
mov eax, 0x54eb68
call fcn.004049a0
dec eax
jne 0x54e92c
mov edx, dword [0x564ed0]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
mov ecx, 0x54eb78
call fcn.004046a8
lea eax, [ebp - 0xc]
mov ecx, 0xb
mov edx, 1
call fcn.004048fc
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00409348
push 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054bbb0
test al, al
jne 0x54eae2
jmp 0x54ea66
mov edx, dword [ebp - 0xc]
mov eax, 0x54eb8c
call fcn.004049a0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x54e952
mov edx, dword [ebp - 0xc]
mov eax, 0x54eb50
call fcn.0040a034
mov dword [ebp - 8], eax
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0xc]
call fcn.00408f24
mov edx, dword [ebp - 0x30]
mov eax, 0x54eb98
call fcn.004049a0
cmp eax, dword [ebp - 8]
jge 0x54e98a
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00408f24
mov edx, dword [ebp - 0x34]
mov eax, 0x54eb98
call fcn.004049a0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 8]
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.004048bc
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0040465c
mov ecx, eax
sub ecx, dword [ebp - 8]
sub ecx, 3
mov edx, dword [ebp - 8]
add edx, 4
mov eax, dword [ebp - 0xc]
call fcn.004048bc
mov eax, dword [ebp - 0x10]
call fcn.00409db4
test al, al
je 0x54e9e7
push 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054bbb0
test al, al
jne 0x54eae2
mov edx, dword [ebp - 0xc]
mov eax, 0x54eba8
call fcn.004049a0
mov dword [ebp - 8], eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0xc]
call fcn.00408f24
mov edx, dword [ebp - 0x38]
mov eax, 0x54eb98
call fcn.004049a0
cmp eax, dword [ebp - 8]
jge 0x54ea66
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 8]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.004048bc
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0040465c
mov ecx, eax
sub ecx, dword [ebp - 8]
inc ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
call fcn.004048bc
mov eax, dword [ebp - 0x10]
call fcn.00409db4
test al, al
je 0x54ea66
push 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054bbb0
test al, al
jne 0x54eae2
push 1
push 0
push 0x54ebac
mov edx, dword [0x564ed0]
mov edx, dword [edx]
lea eax, [ebp - 0x3c]
mov ecx, 0x54ebc0
call fcn.004046a8
mov eax, dword [ebp - 0x3c]
call fcn.0040485c
push eax
push 0x54ebcc
mov eax, dword [ebp - 4]
call fcn.00461074
push eax
call sub.shell32.dll_ShellExecuteA
push 0x54ebdc
lea eax, [ebp - 0x40]
push eax
mov eax, dword [0x5652f4]
mov eax, dword [eax]
mov ecx, 0x54ec10
mov edx, 0x54ec24
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x40]
mov eax, dword [0x564bfc]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
call fcn.0045a8bc
mov eax, dword [0x564bfc]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xec]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54eb11
lea eax, [ebp - 0x40]
mov edx, 0xa
call fcn.004043b0
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.004043b0
ret