Function at 0x564d00
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x28
push 0
push 0
dec ecx
jne 0x564d08
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x5651fb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x633b44]
mov eax, dword [eax]
cmp dword [eax + 8], 0
jle 0x565180
mov eax, dword [0x634470]
mov eax, dword [eax]
call fcn.0040b734
mov eax, dword [0x633b44]
mov eax, dword [eax]
cmp dword [eax + 8], 0x64
jge 0x564d63
mov eax, dword [0x633b44]
mov eax, dword [eax]
mov dl, 0x64
sub dl, byte [eax + 8]
mov cl, 1
mov eax, esi
call fcn.00563030
jmp 0x564d6e
mov cl, 1
xor edx, edx
mov eax, esi
call fcn.00563030
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.00563030
mov eax, dword [0x633b44]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x565196
inc eax
mov dword [ebp - 0x18], eax
xor edi, edi
mov eax, dword [0x633b44]
mov eax, dword [eax]
mov edx, edi
call fcn.0041ce40
mov ebx, eax
mov byte [ebp - 0x11], 0
movzx eax, byte [ebx + 0x25b]
dec al
je 0x564dba
sub al, 2
je 0x564e02
jmp 0x5650b2
lea edx, [ebx + 0x3d]
lea eax, [ebp - 0xac]
call fcn.00403a60
lea edx, [ebx + 0xa2]
lea eax, [ebp - 0xac]
mov cl, 0x8c
call fcn.00403a30
lea edx, [ebp - 0xac]
lea eax, [ebp - 0x1c]
call fcn.00405644
mov eax, dword [ebp - 0x1c]
call fcn.0040afe0
test al, al
jne 0x5650b2
mov byte [ebp - 0x11], 1
jmp 0x5650b2
lea eax, [ebp - 0xb0]
lea edx, [ebx + 0xa2]
call fcn.00405644
mov eax, dword [ebp - 0xb0]
mov edx, 0x565214
call fcn.0040a274
test eax, eax
jne 0x564e3c
lea eax, [ebp - 4]
mov edx, dword [0x634390]
mov edx, dword [edx]
call fcn.00405478
jmp 0x564f39
lea eax, [ebp - 0xb8]
lea edx, [ebx + 0xa2]
call fcn.00405644
mov eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0xb4]
mov edx, 5
call fcn.00442490
mov eax, dword [ebp - 0xb4]
mov edx, 0x565224
call fcn.00405808
jne 0x564f0a
lea eax, [ebp - 0xc0]
lea edx, [ebx + 0xa2]
call fcn.00405644
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0xbc]
movzx edx, byte [ebx + 0xa2]
sub edx, 5
call fcn.004424ac
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x634108]
call fcn.00405434
lea eax, [ebp - 0xc4]
lea edx, [ebx + 0x3d]
call fcn.00405644
mov edx, dword [ebp - 0xc4]
mov ecx, dword [0x634108]
mov ecx, dword [ecx]
lea eax, [ebp - 4]
call fcn.004056f8
mov eax, dword [0x634108]
mov eax, dword [eax]
call fcn.00561f6c
test al, al
jne 0x564f39
push 6
push 0
push 0
mov eax, dword [0x634108]
mov eax, dword [eax]
call fcn.00405870
push eax
push 0x56522c
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x564f39
lea edx, [ebx + 0x3d]
lea eax, [ebp - 0xac]
call fcn.00403a60
lea edx, [ebx + 0xa2]
lea eax, [ebp - 0xac]
mov cl, 0x8c
call fcn.00403a30
lea edx, [ebp - 0xac]
lea eax, [ebp - 4]
call fcn.00405644
mov edx, 0x565234
lea eax, [ebp - 0x110]
call fcn.00403a60
mov edx, ebx
lea eax, [ebp - 0x110]
mov cl, 0x45
call fcn.00403a30
lea edx, [ebp - 0x110]
lea eax, [ebp - 0xc8]
call fcn.00405644
mov edx, dword [ebp - 0xc8]
mov eax, esi
call fcn.005644f4
lea eax, [ebp - 8]
lea edx, [ebx + 0x13a]
call fcn.00405644
mov byte [ebp - 0x11], 1
push esi
push 0x5644b8
lea ecx, [ebp - 0x120]
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00561d6c
lea eax, [ebp - 0x120]
lea edx, [ebp - 0x10]
call fcn.00561cc4
push 0
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 0x128], 0x3b
lea ecx, [ebp - 0x128]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.004b20d0
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 8]
call fcn.00405478
cmp dword [ebp - 0xc], 0
je 0x5650b2
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.0040a274
test eax, eax
jne 0x564fac
lea eax, [ebp - 0x12c]
lea edx, [ebx + 0xa2]
call fcn.00405644
mov edx, dword [ebp - 0x12c]
mov eax, 0x565248
call fcn.004059bc
test eax, eax
jg 0x56503e
lea eax, [ebp - 0x130]
lea edx, [ebx + 0xa2]
call fcn.00405644
mov edx, dword [ebp - 0x130]
mov eax, 0x565258
call fcn.004059bc
test eax, eax
jle 0x5650ae
lea edx, [ebx + 0x3d]
lea eax, [ebp - 0xac]
call fcn.00403a60
lea edx, [ebx + 0xa2]
lea eax, [ebp - 0xac]
mov cl, 0x8c
call fcn.00403a30
lea edx, [ebp - 0xac]
mov eax, dword [0x634108]
call fcn.00405644
lea eax, [ebp - 0x134]
lea edx, [ebx + 0xa2]
call fcn.00405644
mov eax, dword [ebp - 0x134]
call fcn.00561f6c
test al, al
jne 0x5650ae
push 6
push 0
push 0
mov eax, dword [0x634108]
mov eax, dword [eax]
call fcn.00405870
push eax
push 0x56522c
push 0
call sub.shell32.dll_ShellExecuteA
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x565111
mov edx, 0x565260
lea eax, [ebp - 0x110]
call fcn.00403a60
mov edx, ebx
lea eax, [ebp - 0x110]
mov cl, 0x45
call fcn.00403a30
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x138]
call fcn.00405644
mov edx, dword [ebp - 0x138]
mov eax, esi
call fcn.005644f4
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.00563030
mov edx, ebx
mov eax, esi
call fcn.0056478c
test al, al
je 0x5651ad
mov eax, dword [0x633b44]
mov eax, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, 0x64
jge 0x56513c
mov eax, dword [0x633b44]
mov eax, dword [eax]
mov dl, 0x64
sub dl, byte [eax + 8]
mov eax, edi
add dl, al
inc edx
mov cl, 1
mov eax, esi
call fcn.00563030
jmp 0x565174
lea eax, [edi + 1]
mov dword [ebp - 0x13c], eax
fild dword [ebp - 0x13c]
mov eax, dword [0x633b44]
mov dword [ebp - 0x140], ebx
fild dword [ebp - 0x140]
fdivp st(1)
fmul dword [0x56526c]
call fcn.004035fc
mov edx, eax
mov cl, 1
mov eax, esi
call fcn.00563030
inc edi
dec dword [ebp - 0x18]
jne 0x564d92
jmp 0x565196
mov cl, 1
mov dl, 0x64
mov eax, esi
call fcn.00563030
xor ecx, ecx
mov dl, 0x64
mov eax, esi
call fcn.00563030
xor ecx, ecx
mov dl, 0x64
mov eax, esi
call fcn.00563030
mov edx, 0x565278
mov eax, esi
call fcn.005644f4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x565202
lea eax, [ebp - 0x138]
mov edx, 4
call fcn.00405404
lea eax, [ebp - 0x124]
call fcn.004053e0
lea eax, [ebp - 0xc8]
mov edx, 7
call fcn.00405404
lea eax, [ebp - 0x1c]
call fcn.004053e0
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00405404
ret