Function at 0x54af28
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff70
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ecx
mov edi, edx
mov esi, eax
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0x54b29b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x54]
xor ecx, ecx
mov edx, 0x44
call fcn.004031e8
mov dword [ebp - 0x54], 0x44
mov dword [ebp - 0x28], 1
mov word [ebp - 0x24], di
lea edx, [ebp - 8]
mov eax, esi
call fcn.0040919c
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x54b2b4
call fcn.00404e78
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404d94
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 8]
call fcn.0040a014
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 8]
call fcn.00404900
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
call fcn.00404d34
mov edi, eax
push edi
push 0
push 0x30
push 0xffffffffffffffff
push 0
push 0
mov eax, esi
call fcn.00404d34
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x54b0f4
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
push eax
call sub.user32.dll_WaitForInputIdle
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0xc], eax
push 0x64
mov eax, dword [ebp - 0x64]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov esi, eax
test ebx, ebx
je 0x54b0d7
cmp dword [ebp - 4], 0
jle 0x54b0d7
mov eax, ebx
mov edx, dword [0x5485dc]
call fcn.00403b00
test al, al
je 0x54b0d7
mov eax, ebx
mov edx, dword [0x5485dc]
call fcn.00403b24
mov edi, eax
mov eax, dword [edi + 0x3c]
call fcn.00421bd4
push eax
push 0x54b2c4
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x74], eax
fild qword [ebp - 0x78]
fdiv dword [0x54b2c8]
fild dword [ebp - 4]
fdivp st(1)
fmul dword [0x54b2cc]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x70]
mov eax, 0x54b2d8
call fcn.0040b508
push dword [ebp - 0x70]
push 0x54b2e8
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00404bfc
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0xd]
push eax
mov ecx, dword [edi + 0x38]
mov edx, ebx
mov eax, dword [edi + 0x94]
call dword [edi + 0x90]
mov eax, dword [0x577394]
mov eax, dword [eax]
call fcn.0046f6a4
cmp esi, 0x102
je 0x54b020
jmp 0x54b268
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x54]
push eax
push edi
push 0
push 0x30
push 0xffffffffffffffff
push 0
push 0
lea edx, [ebp - 0x7c]
mov eax, esi
call fcn.0040a198
mov eax, dword [ebp - 0x7c]
call fcn.00404d34
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x54b227
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
push eax
call sub.user32.dll_WaitForInputIdle
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0xc], eax
push 0x64
mov eax, dword [ebp - 0x64]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov esi, eax
test ebx, ebx
je 0x54b20d
cmp dword [ebp - 4], 0
jle 0x54b20d
mov eax, ebx
mov edx, dword [0x5485dc]
call fcn.00403b00
test al, al
je 0x54b20d
mov eax, ebx
mov edx, dword [0x5485dc]
call fcn.00403b24
mov edi, eax
mov eax, dword [edi + 0x3c]
call fcn.00421bd4
push eax
push 0x54b2c4
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x74], eax
fild qword [ebp - 0x78]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x84]
mov eax, 0x54b2d8
call fcn.0040b508
push dword [ebp - 0x84]
push 0x54b2f4
fild dword [ebp - 4]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x88]
mov eax, 0x54b2d8
call fcn.0040b508
push dword [ebp - 0x88]
push 0x54b300
lea eax, [ebp - 0x80]
mov edx, 5
call fcn.00404bfc
mov eax, dword [ebp - 0x80]
push eax
lea eax, [ebp - 0xd]
push eax
mov ecx, dword [edi + 0x38]
mov edx, ebx
mov eax, dword [edi + 0x94]
call dword [edi + 0x90]
mov eax, dword [0x577394]
mov eax, dword [eax]
call fcn.0046f6a4
cmp esi, 0x102
je 0x54b13c
jmp 0x54b268
call sub.kernel32.dll_GetLastError_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x90]
call fcn.004097c0
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
mov edx, 0x54b30c
call fcn.00404b88
mov ecx, dword [ebp - 0x8c]
mov dl, 1
mov eax, dword [0x408530]
call fcn.0040d954
call fcn.00404204
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54b2a2
lea eax, [ebp - 0x90]
mov edx, 6
call fcn.0040488c
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.0040488c
lea eax, [ebp - 8]
call fcn.00404868
ret