Function at 0x547064
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff70
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ecx
mov edi, edx
mov esi, eax
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0x5473d7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x54]
xor ecx, ecx
mov edx, 0x44
call fcn.0040333c
mov dword [ebp - 0x54], 0x44
mov dword [ebp - 0x28], 1
mov word [ebp - 0x24], di
lea edx, [ebp - 8]
mov eax, esi
call fcn.0040938c
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x5473f0
call fcn.00404ef4
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404e10
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 8]
call fcn.0040a39c
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 8]
call fcn.0040496c
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
call fcn.00404db0
mov edi, eax
push edi
push 0
push 0x30
push 0xffffffffffffffff
push 0
push 0
mov eax, esi
call fcn.00404db0
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x547230
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
push eax
call sub.user32.dll_WaitForInputIdle
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0xc], eax
push 0x64
mov eax, dword [ebp - 0x64]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov esi, eax
test ebx, ebx
je 0x547213
cmp dword [ebp - 4], 0
jle 0x547213
mov eax, ebx
mov edx, dword [0x544720]
call fcn.00403b3c
test al, al
je 0x547213
mov eax, ebx
mov edx, dword [0x544720]
call fcn.00403b60
mov edi, eax
mov eax, dword [edi + 0x3c]
call fcn.00421c70
push eax
push 0x547400
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x74], eax
fild qword [ebp - 0x78]
fdiv dword [0x547404]
fild dword [ebp - 4]
fdivp st(1)
fmul dword [0x547408]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x70]
mov eax, 0x547414
call fcn.0040b850
push dword [ebp - 0x70]
push 0x547424
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00404c70
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0xd]
push eax
mov ecx, dword [edi + 0x38]
mov edx, ebx
mov eax, dword [edi + 0x94]
call dword [edi + 0x90]
mov eax, dword [0x577460]
mov eax, dword [eax]
call fcn.0046f3d8
cmp esi, 0x102
je 0x54715c
jmp 0x5473a4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x54]
push eax
push edi
push 0
push 0x30
push 0xffffffffffffffff
push 0
push 0
lea edx, [ebp - 0x7c]
mov eax, esi
call fcn.0040a520
mov eax, dword [ebp - 0x7c]
call fcn.00404db0
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x547363
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
push eax
call sub.user32.dll_WaitForInputIdle
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0xc], eax
push 0x64
mov eax, dword [ebp - 0x64]
push eax
call sub.kernel32.dll_WaitForSingleObject
mov esi, eax
test ebx, ebx
je 0x547349
cmp dword [ebp - 4], 0
jle 0x547349
mov eax, ebx
mov edx, dword [0x544720]
call fcn.00403b3c
test al, al
je 0x547349
mov eax, ebx
mov edx, dword [0x544720]
call fcn.00403b60
mov edi, eax
mov eax, dword [edi + 0x3c]
call fcn.00421c70
push eax
push 0x547400
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x78], eax
xor eax, eax
mov dword [ebp - 0x74], eax
fild qword [ebp - 0x78]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x84]
mov eax, 0x547414
call fcn.0040b850
push dword [ebp - 0x84]
push 0x547430
fild dword [ebp - 4]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x88]
mov eax, 0x547414
call fcn.0040b850
push dword [ebp - 0x88]
push 0x54743c
lea eax, [ebp - 0x80]
mov edx, 5
call fcn.00404c70
mov eax, dword [ebp - 0x80]
push eax
lea eax, [ebp - 0xd]
push eax
mov ecx, dword [edi + 0x38]
mov edx, ebx
mov eax, dword [edi + 0x94]
call dword [edi + 0x90]
mov eax, dword [0x577460]
mov eax, dword [eax]
call fcn.0046f3d8
cmp esi, 0x102
je 0x547278
jmp 0x5473a4
call sub.kernel32.dll_GetLastError
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x90]
call fcn.00409b34
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
mov edx, 0x547448
call fcn.00404bfc
mov ecx, dword [ebp - 0x8c]
mov dl, 1
mov eax, dword [0x40868c]
call fcn.0040dd30
call fcn.00404248
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5473de
lea eax, [ebp - 0x90]
mov edx, 6
call fcn.004048f8
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.004048f8
lea eax, [ebp - 8]
call fcn.004048d4
ret