Function at 0x48e3f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 6
push 0
push 0
dec ecx
jne 0x48e3f8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00403fc4
xor eax, eax
push ebp
push 0x48e6b2
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x48e424
push 1
call sub.kernel32.dll_Sleep
cmp dword [0x498bac], 0
jne 0x48e41d
cmp byte [0x49d111], 2
jne 0x48e4f1
xor ebx, ebx
jmp 0x48e4df
lea ecx, [ebp - 8]
mov edx, ebx
mov eax, dword [0x49cf00]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 8]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x10]
call fcn.004494c4
test al, al
je 0x48e4c6
xor esi, esi
jmp 0x48e4aa
lea ecx, [ebp - 0xc]
mov edx, esi
mov eax, dword [0x49cf04]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 8]
call fcn.00403fd4
push eax
mov eax, dword [ebp - 0xc]
call fcn.00403fd4
pop edx
call fcn.00409268
test eax, eax
jne 0x48e4a9
mov edx, esi
mov eax, dword [0x49cf04]
mov ecx, dword [eax]
call dword [ecx + 0x44]
jmp 0x48e4b8
inc esi
mov eax, dword [0x49cf04]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp esi, eax
jl 0x48e471
mov edx, ebx
mov eax, dword [0x49cf00]
mov ecx, dword [eax]
call dword [ecx + 0x44]
jmp 0x48e4c7
inc ebx
test bl, 0xff
jne 0x48e4df
push 1
call sub.kernel32.dll_Sleep
mov eax, dword [0x49904c]
mov eax, dword [eax]
call fcn.0042e82c
mov eax, dword [0x49cf00]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jl 0x48e441
mov eax, dword [0x49cf00]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
jmp 0x48e530
lea ecx, [ebp - 0x14]
mov edx, ebx
mov eax, dword [0x49cf00]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x14]
call fcn.0048e264
test bl, 0xff
jne 0x48e52f
push 1
call sub.kernel32.dll_Sleep
mov eax, dword [0x49904c]
mov eax, dword [eax]
call fcn.0042e82c
dec ebx
test ebx, ebx
jl 0x48e542
mov eax, dword [0x49cf00]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jl 0x48e500
mov eax, dword [0x49cf00]
mov edx, dword [eax]
call dword [edx + 0x40]
xor ebx, ebx
jmp 0x48e5be
lea ecx, [ebp - 0x1c]
mov edx, ebx
mov eax, dword [0x49cf04]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x18]
mov edx, 0x20
call fcn.00408d00
lea ecx, [ebp - 0x24]
mov edx, ebx
mov eax, dword [0x49cf04]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x20]
call fcn.00409124
test bl, 0xff
jne 0x48e5bd
push 1
call sub.kernel32.dll_Sleep
mov eax, dword [0x49904c]
mov eax, dword [eax]
call fcn.0042e82c
inc ebx
mov eax, dword [0x49cf04]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jl 0x48e550
mov eax, dword [0x49cef0]
call fcn.00488a0c
mov eax, dword [0x49cef4]
call fcn.00488a40
mov eax, dword [0x49cf04]
mov edx, dword [eax]
call dword [edx + 0x40]
lea eax, [ebp - 0x28]
mov ecx, 0x48e6c8
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x28]
call fcn.00408c98
test al, al
je 0x48e64e
push 1
push 0x48e6d8
push 0x48e6e4
push dword [0x49cef8]
push 0x48e6c8
push 0x48e6f4
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00403ed0
mov eax, dword [ebp - 0x2c]
call fcn.00403fd4
push eax
push 0x48e6f8
push 0x48e704
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x48e67d
cmp dword [ebp - 4], 0
je 0x48e67d
cmp byte [0x498bb0], 0
je 0x48e67d
lea eax, [ebp - 0x30]
mov ecx, 0x48e714
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 4]
mov al, 1
call fcn.00487b50
push 0
push 1
push 0
mov ecx, 1
mov edx, 0x94
mov eax, dword [0x49bedc]
call fcn.00489fc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48e6b9
lea eax, [ebp - 0x30]
mov edx, 0xc
call fcn.00403bb4
ret