Function at 0x48eea0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x346c
call fcn.004ff5c0
mov eax, dword [0x57c54c]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x3410], ecx
mov dword [ebp - 0x3414], eax
test edi, edi
jne 0x48eefc
push 0x53caa4
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
test ecx, ecx
jne 0x48ef23
push 0x53d29c
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x48ef4a
push 0x53dc5c
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x48ef71
push 0x541a30
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
test ebx, ebx
jne 0x48ef98
push 0x53a6fc
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x3408]
mov dword [ebx], 0
push ecx
push eax
call fcn.00476a90
add esp, 8
test eax, eax
je 0x48efd5
push 0x53cbc0
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x3408], 0
jne 0x48f001
push 0x53d334
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
push esi
call fcn.00475f50
add esp, 4
test eax, eax
je 0x48f031
push 0x53d2d0
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c04]
push str.dfx_tmp_afh8g
push eax
call fcn.00401870
lea eax, [ebp - 0x1c04]
push eax
push esi
lea eax, [ebp - 0xc04]
push 0x53cec8
push eax
call fcn.00401870
mov esi, dword [edi + 0xc0c]
add esp, 0x18
cmp esi, dword [edi + 0xc10]
jg 0x48f12a
lea eax, [ebp - 0x340c]
push eax
push esi
push edi
call fcn.004791a0
add esp, 0xc
test eax, eax
jne 0x48f23b
cmp dword [ebp - 0x340c], eax
je 0x48f11d
lea eax, [ebp - 0x1404]
push eax
push esi
push edi
call fcn.00478e60
add esp, 0xc
test eax, eax
jne 0x48f218
push dword [edi]
lea eax, [ebp - 0x2404]
push eax
lea eax, [ebp - 0x3404]
push eax
lea eax, [ebp - 0x1404]
push eax
call fcn.00477140
add esp, 0x10
test eax, eax
jne 0x48f1f5
lea eax, [ebp - 0x2404]
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0x2c04]
push 0x53cec8
push eax
call fcn.00401870
push dword [edi]
lea eax, [ebp - 0x3418]
push eax
lea eax, [ebp - 0x2c04]
push eax
lea eax, [ebp - 0x1404]
push eax
call fcn.00477fe0
add esp, 0x20
test eax, eax
jne 0x48f1d2
inc dword [ebx]
inc esi
cmp esi, dword [edi + 0xc10]
jle 0x48f070
cmp dword [ebx], 0
jle 0x48f282
lea eax, [ebp - 0xc04]
push eax
push dword [ebp - 0x3410]
lea eax, [ebp - 0x404]
push dword [ebp - 0x3414]
push str.__s__N___s____s._
push eax
call fcn.00401870
push 0x44
lea eax, [ebp - 0x346c]
push 0
push eax
call fcn.00503c50
add esp, 0x20
mov dword [ebp - 0x346c], 0x44
lea eax, [ebp - 0x3428]
mov dword [ebp - 0x3440], 1
push eax
lea eax, [ebp - 0x346c]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
lea eax, [ebp - 0x404]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x48f25e
push 0x53cc28
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
push 0x53e07c
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
push 0x54600c
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
push 0x540180
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
push 0x542364
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
push dword [ebp - 0x3428]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x3424]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x3428]
call esi
push dword [edi]
lea eax, [ebp - 0xc04]
push eax
call fcn.0047bd30
add esp, 8
test eax, eax
je 0x48f2ba
push 0x574ecc
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.0041afb0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ff105
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004ff105
mov esp, ebp
pop ebp
ret