Function at 0x4e9e90
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x4e9e99
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 4], edx
mov edi, eax
mov eax, dword [ebp - 4]
call fcn.00405124
mov ebx, dword [0x515f20]
xor eax, eax
push ebp
push 0x4ea497
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea ecx, [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004e9018
cmp dword [ebp - 0xc], 0
je 0x4ea34c
mov edx, dword [ebp - 0xc]
mov eax, 0x4ea4b0
call fcn.00405278
test eax, eax
jne 0x4ea34c
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea4d0
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.00404cc8
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea4e4
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x14]
lea eax, [ebx + 4]
call fcn.00404cc8
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea4f8
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x18]
lea eax, [ebx + 8]
call fcn.00404cc8
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea50c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x1c]
lea eax, [ebx + 0xc]
call fcn.00404cc8
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea520
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x20]
lea eax, [ebx + 0x10]
call fcn.00404cc8
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea534
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x24]
lea eax, [ebx + 0x14]
call fcn.00404cc8
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea548
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x28]
lea eax, [ebx + 0x18]
call fcn.00404cc8
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea55c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x2c]
lea eax, [ebx + 0x1c]
call fcn.00404cc8
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea570
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x30]
lea eax, [ebx + 0x20]
call fcn.00404cc8
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea584
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x34]
lea eax, [ebx + 0x24]
call fcn.00404cc8
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea59c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x38]
mov eax, dword [0x515a58]
call fcn.00404cc8
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x4ea4c4
mov edx, 0x4ea5b0
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x515f88]
call fcn.00404cc8
mov eax, dword [0x515a58]
cmp dword [eax], 0
je 0x4ea0ab
mov eax, dword [0x515f88]
cmp dword [eax], 0
je 0x4ea0ab
mov eax, esi
mov edx, dword [0x515a58]
mov edx, dword [edx]
call fcn.00404cc8
jmp 0x4ea0b7
mov eax, esi
mov edx, 0x4ea5c0
call fcn.00404cc8
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea5e0
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x40]
mov eax, dword [0x515830]
call fcn.00404cc8
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea5fc
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x44]
mov eax, dword [0x515608]
call fcn.00404cc8
mov edx, dword [ebp - 0xc]
mov eax, 0x4ea614
call fcn.00405278
test eax, eax
jle 0x4ea165
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea62c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov eax, dword [ebp - 0x48]
call fcn.0049f480
test al, al
je 0x4ea158
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea62c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov eax, dword [ebp - 0x4c]
call fcn.00409fdc
mov edx, dword [0x515e3c]
mov dword [edx], eax
jmp 0x4ea170
mov eax, dword [0x515e3c]
mov dword [eax], 0x1e
jmp 0x4ea170
mov eax, dword [0x515e3c]
mov dword [eax], 0x1e
mov edx, dword [ebp - 0xc]
mov eax, 0x4ea644
call fcn.00405278
test eax, eax
jle 0x4ea1d8
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea65c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov eax, dword [ebp - 0x50]
call fcn.0049f480
test al, al
je 0x4ea1cb
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea65c
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov eax, dword [ebp - 0x54]
call fcn.00409fdc
mov edx, dword [0x515ecc]
mov dword [edx], eax
jmp 0x4ea1e3
mov eax, dword [0x515ecc]
mov dword [eax], 0x258
jmp 0x4ea1e3
mov eax, dword [0x515ecc]
mov dword [eax], 0x258
mov edx, dword [ebp - 0xc]
mov eax, 0x4ea678
call fcn.00405278
test eax, eax
jle 0x4ea219
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea678
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x58]
mov eax, dword [0x515c2c]
call fcn.00404cc8
jmp 0x4ea223
mov eax, dword [0x515c2c]
call fcn.00404c74
mov edx, dword [ebp - 0xc]
mov eax, 0x4ea690
call fcn.00405278
test eax, eax
jle 0x4ea259
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea690
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x515560]
call fcn.00404cc8
jmp 0x4ea263
mov eax, dword [0x515560]
call fcn.00404c74
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea6a8
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x60]
mov eax, dword [0x515624]
call fcn.00404cc8
lea eax, [ebp - 8]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea6c0
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
cmp dword [ebp - 8], 0
jne 0x4ea2c7
lea eax, [ebp - 8]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea6d8
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov eax, dword [0x51580c]
mov edx, dword [ebp - 8]
call fcn.00404cc8
jmp 0x4ea2e8
push 1
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.00405134
push eax
push 0
push edi
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x51580c]
call fcn.00404c74
mov eax, dword [0x51580c]
cmp dword [eax], 0
jne 0x4ea301
mov eax, dword [0x51580c]
mov edx, 0x4ea6e8
call fcn.00404cc8
lea eax, [ebp - 8]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea718
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x4ea5d4
mov edx, 0x4ea728
mov eax, dword [ebp - 0xc]
call fcn.004e98a8
mov edx, dword [ebp - 0x64]
mov eax, dword [0x515f60]
call fcn.00404cc8
mov eax, dword [0x515928]
mov edx, dword [ebp - 8]
call fcn.00404cc8
jmp 0x4ea47c
mov eax, ebx
mov edx, 0x4ea738
call fcn.00404cc8
lea eax, [ebx + 4]
mov edx, 0x4ea760
call fcn.00404cc8
lea eax, [ebx + 8]
mov edx, 0x4ea794
call fcn.00404cc8
lea eax, [ebx + 0xc]
mov edx, 0x4ea7c8
call fcn.00404cc8
lea eax, [ebx + 0x10]
mov edx, 0x4ea7f0
call fcn.00404cc8
lea eax, [ebx + 0x14]
mov edx, 0x4ea820
call fcn.00404cc8
lea eax, [ebx + 0x18]
mov edx, 0x4ea858
call fcn.00404cc8
lea eax, [ebx + 0x1c]
mov edx, 0x4ea888
call fcn.00404cc8
lea eax, [ebx + 0x20]
mov edx, 0x4ea8a4
call fcn.00404cc8
lea eax, [ebx + 0x24]
mov edx, 0x4ea8d4
call fcn.00404cc8
mov eax, dword [0x515a58]
mov edx, 0x4ea8f8
call fcn.00404cc8
mov eax, dword [0x515f88]
mov edx, 0x4ea938
call fcn.00404cc8
mov eax, dword [0x515830]
mov edx, 0x4ea970
call fcn.00404cc8
mov eax, dword [0x515608]
mov edx, 0x4ea970
call fcn.00404cc8
mov eax, dword [0x515c2c]
mov edx, 0x4ea97c
call fcn.00404cc8
mov eax, dword [0x515560]
call fcn.00404c74
mov eax, dword [0x515624]
mov edx, 0x4ea9a0
call fcn.00404cc8
mov eax, 0x4ea9ac
call fcn.0049f004
mov eax, dword [0x51580c]
call fcn.00404c74
mov eax, dword [0x51580c]
cmp dword [eax], 0
jne 0x4ea45e
mov eax, dword [0x51580c]
mov edx, 0x4ea6e8
call fcn.00404cc8
mov eax, dword [0x515f60]
mov edx, 0x4ea9e8
call fcn.00404cc8
mov eax, dword [0x515928]
mov edx, 0x4ea9ac
call fcn.00404cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ea49e
lea eax, [ebp - 0x64]
mov edx, 0x19
call fcn.00404c98
ret