Function at 0x524530
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6b
push 0
push 0
dec ecx
jne 0x524538
push ebx
push esi
mov ebx, eax
lea esi, [ebp - 0x2d4]
xor eax, eax
push ebp
push 0x52489f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x318]
xor eax, eax
call fcn.00404648
mov eax, dword [ebp - 0x318]
lea edx, [ebp - 0x314]
call fcn.00412464
mov edx, dword [ebp - 0x314]
lea eax, [ebp - 4]
mov ecx, 0x5248b8
call fcn.004078f4
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.004049f8
mov eax, esi
call fcn.00404790
call fcn.004043dc
mov edx, 0x5248e4
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
mov edx, 0x524904
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
push 0x52491c
lea edx, [ebp - 0x320]
xor eax, eax
call fcn.00404648
push dword [ebp - 0x320]
push 0x524934
lea eax, [ebp - 0x31c]
mov edx, 3
call fcn.004079d8
mov edx, dword [ebp - 0x31c]
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
push 0x524944
lea edx, [ebp - 0x328]
xor eax, eax
call fcn.00404648
push dword [ebp - 0x328]
push 0x524934
push 0x524968
lea eax, [ebp - 0x324]
mov edx, 4
call fcn.004079d8
mov edx, dword [ebp - 0x324]
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
mov edx, 0x52498c
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
push 0x5249a8
push dword [ebx + 0x3dc]
lea edx, [ebp - 0x334]
mov eax, dword [0x533678]
mov eax, dword [eax]
call fcn.004a3ea4
mov eax, dword [ebp - 0x334]
lea edx, [ebp - 0x330]
call fcn.004124a0
push dword [ebp - 0x330]
push 0x5249c4
push dword [ebx + 0x3d8]
lea edx, [ebp - 0x33c]
mov eax, dword [0x533678]
mov eax, dword [eax]
call fcn.004a3ea4
mov eax, dword [ebp - 0x33c]
lea edx, [ebp - 0x338]
call fcn.004124a0
push dword [ebp - 0x338]
push 0x524934
lea eax, [ebp - 0x32c]
mov edx, 7
call fcn.004079d8
mov edx, dword [ebp - 0x32c]
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
push 0x5249d8
push dword [ebx + 0x3d8]
lea edx, [ebp - 0x348]
mov eax, dword [0x533678]
mov eax, dword [eax]
call fcn.004a3ea4
mov eax, dword [ebp - 0x348]
lea edx, [ebp - 0x344]
call fcn.004124a0
push dword [ebp - 0x344]
push 0x524934
push 0x524a04
lea eax, [ebp - 0x340]
mov edx, 5
call fcn.004079d8
mov edx, dword [ebp - 0x340]
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
push 0x52491c
push dword [ebx + 0x3dc]
lea edx, [ebp - 0x354]
mov eax, dword [0x533678]
mov eax, dword [eax]
call fcn.004a3ea4
mov eax, dword [ebp - 0x354]
lea edx, [ebp - 0x350]
call fcn.004124a0
push dword [ebp - 0x350]
push 0x524934
lea eax, [ebp - 0x34c]
mov edx, 4
call fcn.004079d8
mov edx, dword [ebp - 0x34c]
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
push 0x52491c
push dword [ebp - 4]
push 0x524934
lea eax, [ebp - 0x358]
mov edx, 3
call fcn.004079d8
mov edx, dword [ebp - 0x358]
mov eax, esi
call fcn.00407dd0
call fcn.00404e54
call fcn.004043dc
mov eax, esi
call fcn.00404abc
call fcn.004043dc
lea eax, [ebp - 0x310]
xor ecx, ecx
mov edx, 0x3c
call fcn.00404ba0
mov dword [ebp - 0x310], 0x3c
mov dword [ebp - 0x30c], 0x40
xor eax, eax
mov dword [ebp - 0x308], eax
xor eax, eax
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 4]
call fcn.004074b4
mov dword [ebp - 0x300], eax
mov eax, 0x524a1c
mov dword [ebp - 0x2fc], eax
xor eax, eax
mov dword [ebp - 0x2f8], eax
xor eax, eax
mov dword [ebp - 0x2f4], eax
xor eax, eax
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x310]
push eax
call sub.shell32.dll_ShellExecuteExW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5248a6
lea eax, [ebp - 0x358]
mov edx, 0x12
call fcn.00407420
lea eax, [ebp - 4]
call fcn.00407418
ret