Function at 0x55cc80
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x55cc88
push ebx
push esi
mov ebx, eax
mov esi, dword [0x56a82c]
xor eax, eax
push ebp
push 0x55cfc6
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x55cfdc
mov eax, dword [ebx + 0x364]
call fcn.00527918
mov edx, 3
mov eax, dword [ebx + 0x368]
call fcn.0055c284
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55cffc
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d024
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d050
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d07c
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d0a8
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d0d8
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d104
call fcn.004054b4
push 0
mov eax, dword [ebp - 4]
call fcn.0040562c
push eax
call sub.kernel32.dll_WinExec
mov edx, 0x55d130
mov eax, dword [ebx + 0x364]
call fcn.00527918
lea eax, [ebp - 8]
mov edx, 0x55d158
call fcn.00405234
mov edx, 4
mov eax, dword [ebx + 0x368]
call fcn.0055c284
push 0x55d168
lea eax, [ebp - 0x48]
mov ecx, 0x55d17c
mov edx, dword [ebp - 8]
call fcn.004054b4
mov edx, dword [ebp - 0x48]
mov ecx, 0x55d194
mov eax, 0x55d1a4
call fcn.0055d674
push 0x55d1c4
mov edx, dword [0x56a79c]
mov edx, dword [edx]
lea eax, [ebp - 0x4c]
mov ecx, 0x55d1d4
call fcn.004054b4
mov eax, dword [ebp - 0x4c]
push eax
mov edx, dword [0x56a79c]
mov edx, dword [edx]
lea eax, [ebp - 0x50]
mov ecx, 0x55d1e8
call fcn.004054b4
mov edx, dword [ebp - 0x50]
mov eax, 0x55d1a4
pop ecx
call fcn.0055d674
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d200
call fcn.004054b4
push 0x55d168
lea eax, [ebp - 0x54]
mov ecx, 0x55d21c
mov edx, dword [ebp - 8]
call fcn.004054b4
mov edx, dword [ebp - 0x54]
mov ecx, 0x55d238
mov eax, dword [ebp - 4]
call fcn.0055d674
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d250
call fcn.004054b4
push 0x55d168
lea eax, [ebp - 0x58]
mov ecx, 0x55d26c
mov edx, dword [ebp - 8]
call fcn.004054b4
mov edx, dword [ebp - 0x58]
mov ecx, 0x55d288
mov eax, dword [ebp - 4]
call fcn.0055d674
push 0x55d168
lea eax, [ebp - 0x5c]
mov ecx, 0x55d2a0
mov edx, dword [ebp - 8]
call fcn.004054b4
mov edx, dword [ebp - 0x5c]
mov eax, dword [esi]
mov ecx, 0x55d2bc
call fcn.0055d674
mov edx, dword [esi]
lea eax, [ebp - 4]
mov ecx, 0x55d2d4
call fcn.004054b4
push 0x55d168
lea eax, [ebp - 0x60]
mov ecx, 0x55d2e8
mov edx, dword [ebp - 8]
call fcn.004054b4
mov edx, dword [ebp - 0x60]
mov ecx, 0x55d300
mov eax, dword [ebp - 4]
call fcn.0055d674
push 0x55d168
lea eax, [ebp - 0x64]
mov ecx, 0x55d314
mov edx, dword [ebp - 8]
call fcn.004054b4
mov edx, dword [ebp - 0x64]
mov ecx, 0x55d330
mov eax, 0x55d348
call fcn.0055d674
mov edx, 0x55d36c
mov eax, dword [ebx + 0x364]
call fcn.00527918
mov edx, 4
mov eax, dword [ebx + 0x368]
call fcn.0055c284
mov dword [ebp - 0x44], 0x3c
mov dword [ebp - 0x40], 0x40
xor eax, eax
mov dword [ebp - 0x38], eax
mov edx, dword [esi]
lea eax, [ebp - 0x68]
mov ecx, 0x55d200
call fcn.004054b4
mov eax, dword [ebp - 0x68]
call fcn.0040562c
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x44]
push eax
call sub.shell32.dll_ShellExecuteExA
push 0xffffffffffffffff
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov dl, 1
mov eax, dword [ebx + 0x37c]
call fcn.00435d58
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55cfcd
lea eax, [ebp - 0x68]
mov edx, 9
call fcn.004051c0
lea eax, [ebp - 8]
mov edx, 2
call fcn.004051c0
ret