Function at 0x4751f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x346c
call fcn.004e1e80
mov eax, dword [0x55154c]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x3410], ecx
mov dword [ebp - 0x3414], eax
test edi, edi
jne 0x47524c
push 0x518618
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
test ecx, ecx
jne 0x475273
push 0x518098
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x47529a
push 0x5186e4
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x4752c1
push 0x51c0a0
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
test ebx, ebx
jne 0x4752e8
push 0x51566c
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x3408]
mov dword [ebx], 0
push ecx
push eax
call fcn.0045ca70
add esp, 8
test eax, eax
je 0x475325
push 0x51d148
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x3408], 0
jne 0x475351
push 0x518128
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
push esi
call fcn.0045bdf0
add esp, 4
test eax, eax
je 0x475381
push 0x517a70
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c04]
push str.dfx_tmp_afh8g
push eax
call fcn.00401820
lea eax, [ebp - 0x1c04]
push eax
push esi
lea eax, [ebp - 0xc04]
push 0x517cd0
push eax
call fcn.00401820
mov esi, dword [edi + 0xc0c]
add esp, 0x18
cmp esi, dword [edi + 0xc10]
jg 0x47547a
lea eax, [ebp - 0x340c]
push eax
push esi
push edi
call fcn.0045f130
add esp, 0xc
test eax, eax
jne 0x47558b
cmp dword [ebp - 0x340c], eax
je 0x47546d
lea eax, [ebp - 0x1404]
push eax
push esi
push edi
call fcn.0045edf0
add esp, 0xc
test eax, eax
jne 0x475568
push dword [edi]
lea eax, [ebp - 0x2404]
push eax
lea eax, [ebp - 0x3404]
push eax
lea eax, [ebp - 0x1404]
push eax
call fcn.0045d270
add esp, 0x10
test eax, eax
jne 0x475545
lea eax, [ebp - 0x2404]
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0x2c04]
push 0x517cd0
push eax
call fcn.00401820
push dword [edi]
lea eax, [ebp - 0x3418]
push eax
lea eax, [ebp - 0x2c04]
push eax
lea eax, [ebp - 0x1404]
push eax
call fcn.0045df70
add esp, 0x20
test eax, eax
jne 0x475522
inc dword [ebx]
inc esi
cmp esi, dword [edi + 0xc10]
jle 0x4753c0
cmp dword [ebx], 0
jle 0x4755d2
lea eax, [ebp - 0xc04]
push eax
push dword [ebp - 0x3410]
lea eax, [ebp - 0x404]
push dword [ebp - 0x3414]
push str.__s__N___s____s._
push eax
call fcn.00401820
push 0x44
lea eax, [ebp - 0x346c]
push 0
push eax
call fcn.004e4ff0
add esp, 0x20
mov dword [ebp - 0x346c], 0x44
lea eax, [ebp - 0x3428]
mov dword [ebp - 0x3440], 1
push eax
lea eax, [ebp - 0x346c]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
lea eax, [ebp - 0x404]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4755ae
push 0x51b6c8
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
push 0x518ae8
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
push 0x51f9ac
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
push 0x522664
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
push 0x515d74
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
push dword [ebp - 0x3428]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x3424]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x3428]
call esi
push dword [edi]
lea eax, [ebp - 0xc04]
push eax
call fcn.00461c90
add esp, 8
test eax, eax
je 0x47560a
push 0x51d158
push str.....EFFECTSPRELSTPrelstCab.cpp
call fcn.004688c0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e19a5
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e19a5
mov esp, ebp
pop ebp
ret