Function at 0x550ff8
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0x551000
push ebx
push esi
push edi
mov eax, dword [0x5587c4]
mov byte [eax], 1
mov eax, 0x549040
call fcn.00411020
xor eax, eax
push ebp
push 0x5514b0
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x5e0bf8], 0
xor edx, edx
push ebp
push 0x55143d
push dword fs:[edx]
mov dword fs:[edx], esp
push 0
call sub.KERNEL32.DLL_GetConsoleWindow
push eax
call sub.user32.dll_ShowWindow
call fcn.004fa484
test al, al
je 0x55117d
lea eax, [ebp - 0x28]
call fcn.004f91b0
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.00428b20
mov edx, dword [ebp - 0x24]
mov eax, 0x5e0c24
mov ecx, 0x5514cc
call fcn.0040b2c4
mov dl, 1
mov eax, dword [0x5e0c24]
call fcn.00421cac
test al, al
jne 0x551098
mov eax, dword [0x5e0c24]
call fcn.004f8d2c
mov dword [0x5e0c28], 6
mov dword [ebp - 0x14], 0x558334
mov dword [ebp - 0x18], 0x55834c
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x40]
mov eax, dword [0x5e0c24]
call fcn.00428b20
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0x11
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
lea edx, [ebp - 0x3c]
mov ecx, 1
mov eax, 0x5514f8
call fcn.00422658
mov edx, dword [ebp - 0x2c]
mov eax, 0x5e0c20
call fcn.0040a7fc
lea edx, [ebp - 0x44]
mov eax, dword [0x5e0c20]
call fcn.00422020
mov eax, dword [ebp - 0x44]
mov dl, 1
call fcn.00421cac
test al, al
jne 0x551126
lea edx, [ebp - 0x48]
mov eax, dword [0x5e0c20]
call fcn.00422020
mov eax, dword [ebp - 0x48]
call fcn.004f8d2c
xor edx, edx
push ebp
push 0x55114e
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov edx, dword [0x5e0c20]
call fcn.00548f2c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x551164
add dword [ebp - 0x18], 4
add dword [ebp - 0x14], 4
dec dword [0x5e0c28]
jne 0x5510b0
jmp 0x55129c
lea eax, [ebp - 0x50]
call fcn.004f91b0
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.00428b20
mov edx, dword [ebp - 0x4c]
mov eax, 0x5e0c24
mov ecx, 0x551510
call fcn.0040b2c4
mov dl, 1
mov eax, dword [0x5e0c24]
call fcn.00421cac
test al, al
jne 0x5511bc
mov eax, dword [0x5e0c24]
call fcn.004f8d2c
mov dword [0x5e0c28], 6
mov dword [ebp - 0x1c], 0x558304
mov dword [ebp - 0x20], 0x55831c
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x58]
mov eax, dword [0x5e0c24]
call fcn.00428b20
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0x11
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
lea edx, [ebp - 0x3c]
mov ecx, 1
mov eax, 0x5514f8
call fcn.00422658
mov edx, dword [ebp - 0x54]
mov eax, 0x5e0c20
call fcn.0040a7fc
lea edx, [ebp - 0x5c]
mov eax, dword [0x5e0c20]
call fcn.00422020
mov eax, dword [ebp - 0x5c]
mov dl, 1
call fcn.00421cac
test al, al
jne 0x55124a
lea edx, [ebp - 0x60]
mov eax, dword [0x5e0c20]
call fcn.00422020
mov eax, dword [ebp - 0x60]
call fcn.004f8d2c
xor edx, edx
push ebp
push 0x551272
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov edx, dword [0x5e0c20]
call fcn.00548f2c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x551288
add dword [ebp - 0x20], 4
add dword [ebp - 0x1c], 4
dec dword [0x5e0c28]
jne 0x5511d4
lea eax, [ebp - 0x64]
push eax
lea edx, [ebp - 0x68]
mov eax, dword [0x5e0c24]
call fcn.00428b20
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0x11
mov eax, dword [0x558304]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
lea edx, [ebp - 0x3c]
mov ecx, 1
mov eax, 0x5514f8
call fcn.00422658
mov edx, dword [ebp - 0x64]
mov eax, 0x5e0c20
call fcn.0040a7fc
mov dl, 1
mov eax, dword [0x5e0c20]
call fcn.00421c14
test al, al
je 0x551326
push 5
lea edx, [ebp - 0x6c]
mov eax, dword [0x5e0c20]
call fcn.00422020
mov eax, dword [ebp - 0x6c]
call fcn.0040b05c
push eax
push 0x551530
mov eax, dword [0x5e0c20]
call fcn.0040b05c
push eax
push 0x551534
push 0
call sub.shell32.dll_ShellExecuteW
push 0x64
call sub.KERNEL32.DLL_Sleep
xor eax, eax
mov dword [0x5e0bfc], eax
xor esi, esi
push 0x551530
push 0
call sub.user32.dll_FindWindowW
mov ebx, eax
test ebx, ebx
jne 0x551354
push 0x551530
push 0
call sub.user32.dll_FindWindowW
test ebx, ebx
je 0x551374
push 0x551530
push ebx
call sub.user32.dll_SetWindowTextW
mov eax, dword [0x5e0bfc]
push eax
push 0x548c14
push ebx
call sub.user32.dll_EnumChildWindows
cmp dword [0x5e0c04], 0
je 0x5513f4
cmp byte [0x5e0bf8], 0
jne 0x5513f4
push 0
mov eax, dword [0x5e0c04]
push eax
call sub.user32.dll_EnableWindow
push 0x5e0c0c
mov eax, dword [0x5e0c04]
push eax
call sub.user32.dll_GetClientRect
push 0x42
mov eax, 0x5e0c0c
call fcn.00411da0
push eax
mov eax, 0x5e0c0c
call fcn.00411d98
add eax, 0xfa
push eax
push 0
push 0
push 0
mov eax, dword [0x5e0c04]
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [0x5e0c1c]
call fcn.0040b05c
push eax
mov eax, dword [0x5e0c04]
push eax
call sub.user32.dll_SetWindowTextW
push 0xffffffffffffffff
mov eax, dword [0x5e0c04]
push eax
call sub.user32.dll_EnableWindow
push 0x64
call sub.KERNEL32.DLL_Sleep
add esi, 0x64
cmp esi, 0x75300
ja 0x551433
mov eax, 0x55154c
call fcn.00548db0
test al, al
jne 0x55141e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x551488
test ebx, ebx
je 0x551336
cmp dword [0x5e0c00], 0
je 0x551336
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x551488
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5514b7
lea eax, [ebp - 0x70]
mov edx, 0xd
call fcn.0040a47c
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.0040a47c
ret