Function at 0x48b27c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1c0
push 0
push 0
dec ecx
jne 0x48b284
push ebx
push esi
push edi
mov ebx, eax
lea eax, [ebp - 0xdac]
mov edx, dword [0x407428]
call fcn.00404a4c
xor eax, eax
push ebp
push 0x48b817
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x48b830
lea eax, [ebp - 0xdb0]
call fcn.0048abb8
push dword [ebp - 0xdb0]
push 0x48b854
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404440
lea eax, [ebp - 0xdb4]
mov ecx, 0x48b898
mov edx, dword [ebp - 8]
call fcn.004043cc
mov eax, dword [ebp - 0xdb4]
lea ecx, [ebp - 0xdac]
mov edx, 0x3f
call fcn.00408cb0
test eax, eax
jne 0x48b4d0
lea ecx, [ebp - 0xdb8]
mov edx, 4
mov eax, dword [ebp - 0xda0]
call fcn.0042d618
mov edx, dword [ebp - 0xdb8]
mov eax, 0x48b8a4
call fcn.004044cc
jne 0x48b4bd
push 0
lea eax, [ebp - 0xdbc]
mov ecx, dword [ebp - 0xda0]
mov edx, dword [ebp - 8]
call fcn.004043cc
mov edx, dword [ebp - 0xdbc]
lea ecx, [ebp - 0x630]
mov eax, ebx
call fcn.0048bd88
test al, al
je 0x48b4bd
lea eax, [ebp - 0xdc4]
lea edx, [ebp - 0x630]
mov ecx, 0x105
call fcn.00404330
mov eax, dword [ebp - 0xdc4]
lea edx, [ebp - 0xdc0]
call fcn.00408150
mov edx, dword [ebp - 0xdc0]
mov eax, 0x48b8b4
call fcn.004046c4
test eax, eax
jle 0x48b4bd
lea eax, [ebp - 0xdcc]
lea edx, [ebp - 0x21b]
mov ecx, 0x105
call fcn.00404330
mov eax, dword [ebp - 0xdcc]
lea edx, [ebp - 0xdc8]
call fcn.00408150
mov edx, dword [ebp - 0xdc8]
mov eax, 0x48b8cc
call fcn.004046c4
test eax, eax
jle 0x48b4bd
lea eax, [ebp - 4]
mov ecx, dword [ebp - 0xda0]
mov edx, dword [ebp - 8]
call fcn.004043cc
lea eax, [ebp - 0xdd0]
lea edx, [ebp - 0x630]
mov ecx, 0x105
call fcn.00404330
mov edx, dword [ebp - 0xdd0]
lea eax, [ebp - 0xc54]
call fcn.00409050
lea esi, [ebp - 0x52b]
lea edi, [ebp - 0xb4f]
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x42b]
lea edi, [ebp - 0xa4f]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x948], eax
lea esi, [ebp - 0x320]
lea edi, [ebp - 0x944]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x48b8d4
lea edi, [ebp - 0x83f]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ax, word [ebp - 0x116]
mov word [ebp - 0x73a], ax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x734], eax
mov esi, 0x48b9dc
lea edi, [ebp - 0x730]
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xc54]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0048c03c
lea eax, [ebp - 0xdac]
call fcn.00408d00
test eax, eax
je 0x48b308
lea eax, [ebp - 0xdac]
call fcn.00408d24
lea eax, [ebp - 8]
mov edx, 0x48bae4
call fcn.00404158
lea eax, [ebp - 0xdd4]
mov ecx, 0x48b898
mov edx, dword [ebp - 8]
call fcn.004043cc
mov eax, dword [ebp - 0xdd4]
lea ecx, [ebp - 0xdac]
mov edx, 0x3f
call fcn.00408cb0
test eax, eax
jne 0x48b6e1
lea ecx, [ebp - 0xdd8]
mov edx, 4
mov eax, dword [ebp - 0xda0]
call fcn.0042d618
mov edx, dword [ebp - 0xdd8]
mov eax, 0x48b8a4
call fcn.004044cc
jne 0x48b6ce
push 0
lea eax, [ebp - 0xddc]
mov ecx, dword [ebp - 0xda0]
mov edx, dword [ebp - 8]
call fcn.004043cc
mov edx, dword [ebp - 0xddc]
lea ecx, [ebp - 0x630]
mov eax, ebx
call fcn.0048bd88
test al, al
je 0x48b6ce
lea eax, [ebp - 0xde4]
lea edx, [ebp - 0x630]
mov ecx, 0x105
call fcn.00404330
mov eax, dword [ebp - 0xde4]
lea edx, [ebp - 0xde0]
call fcn.00408150
mov edx, dword [ebp - 0xde0]
mov eax, 0x48b8b4
call fcn.004046c4
test eax, eax
jle 0x48b6ce
lea eax, [ebp - 0xdec]
lea edx, [ebp - 0x21b]
mov ecx, 0x105
call fcn.00404330
mov eax, dword [ebp - 0xdec]
lea edx, [ebp - 0xde8]
call fcn.00408150
mov edx, dword [ebp - 0xde8]
mov eax, 0x48b8cc
call fcn.004046c4
test eax, eax
jle 0x48b6ce
lea eax, [ebp - 4]
mov ecx, dword [ebp - 0xda0]
mov edx, dword [ebp - 8]
call fcn.004043cc
lea eax, [ebp - 0xdf0]
lea edx, [ebp - 0x630]
mov ecx, 0x105
call fcn.00404330
mov edx, dword [ebp - 0xdf0]
lea eax, [ebp - 0xc54]
call fcn.00409050
lea esi, [ebp - 0x52b]
lea edi, [ebp - 0xb4f]
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x42b]
lea edi, [ebp - 0xa4f]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x948], eax
lea esi, [ebp - 0x320]
lea edi, [ebp - 0x944]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x48b8d4
lea edi, [ebp - 0x83f]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ax, word [ebp - 0x116]
mov word [ebp - 0x73a], ax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x734], eax
mov esi, 0x48b9dc
lea edi, [ebp - 0x730]
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xc54]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0048c03c
lea eax, [ebp - 0xdac]
call fcn.00408d00
test eax, eax
je 0x48b519
lea eax, [ebp - 0xdac]
call fcn.00408d24
lea edx, [ebp - 0xc]
mov eax, dword [0x48f4d0]
mov eax, dword [eax]
call fcn.0045d5cc
mov al, byte [0x48bb44]
push eax
lea eax, [ebp - 0xdf4]
push eax
mov ecx, 0x48bb50
mov edx, 0x48bb60
mov eax, dword [ebp - 0xc]
call fcn.0040d5e8
mov edx, dword [ebp - 0xdf4]
lea eax, [ebp - 0xc]
call fcn.00404158
mov al, byte [0x48bb44]
push eax
lea eax, [ebp - 0xdf8]
push eax
mov ecx, 0x48bb50
mov edx, 0x48bb70
mov eax, dword [ebp - 0xc]
call fcn.0040d5e8
mov edx, dword [ebp - 0xdf8]
lea eax, [ebp - 0xc]
call fcn.00404158
cmp dword [0x490f20], 0
je 0x48b796
push 0
push 0x48bb80
push dword [ebp - 0xc]
push 0x48bb94
push dword [0x490f20]
lea eax, [ebp - 0xdfc]
mov edx, 4
call fcn.00404440
mov eax, dword [ebp - 0xdfc]
call fcn.00404580
push eax
call sub.kernel32.dll_WinExec
jmp 0x48b7c6
push 0
push 0x48bb80
push dword [ebp - 0xc]
push 0x48bba0
lea eax, [ebp - 0xe00]
mov edx, 3
call fcn.00404440
mov eax, dword [ebp - 0xe00]
call fcn.00404580
push eax
call sub.kernel32.dll_WinExec
cmp dword [0x490f14], 0
je 0x48b7db
mov eax, dword [0x48f4d0]
mov eax, dword [eax]
call fcn.0045d0a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48b81e
lea eax, [ebp - 0xe00]
mov edx, 0x15
call fcn.004040e4
lea eax, [ebp - 0xdac]
mov edx, dword [0x407428]
call fcn.00404b1c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004040e4
ret