Function at 0x46d200
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x274
mov eax, dword [0x51cbc0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp + 0x24]
push ebx
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x21c], eax
mov dword [eax], 0
mov eax, dword [ebp + 0x14]
mov cl, al
push esi
mov esi, dword [ebp + 0x20]
and cl, 1
shr eax, 3
and al, 1
mov byte [ebp - 0x211], cl
mov dword [ebp + 0x14], eax
mov dword [esi], 0
test edx, edx
jne 0x46d277
mov dword [esi], 1
xor eax, eax
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d55dc
mov esp, ebp
pop ebp
ret
push edi
push 0
push edx
call dword [sym.imp.USER32.dll_FindWindowW]
mov edi, eax
test edi, edi
je 0x46d2ff
mov eax, dword [ebp - 0x218]
cmp edi, dword [eax]
je 0x46d2ac
push dword [ebp - 0x21c]
push esi
push ebx
push edi
call fcn.0046cfc0
add esp, 0x10
test al, al
je 0x46d2ff
mov eax, dword [ebp - 0x218]
cmp byte [ebp + 0x14], 0
mov dword [eax], edi
je 0x46d2e9
lea eax, [ebp - 0x218]
mov dword [ebp - 0x218], 0
push eax
push 0x1f4
push 0
push 0
push 0
push 0x482
push edi
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
cmp dword [ebp - 0x218], 1
jne 0x46d4bd
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d55dc
mov esp, ebp
pop ebp
ret
cmp byte [ebp - 0x211], 0
je 0x46d4bd
test ebx, ebx
je 0x46d4bd
push ebx
xor edi, edi
call fcn.004128c0
add esp, 4
test eax, eax
je 0x46d472
push 0x20a
lea eax, [ebp - 0x210]
push edi
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x220]
add esp, 0xc
test eax, eax
je 0x46d35b
push eax
lea eax, [ebp - 0x210]
push 0x104
push eax
call fcn.004cd130
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x270], edi
mov word [ebp - 0x232], ax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov ax, word [ebp + 0x1c]
mov word [ebp - 0x244], ax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x26c], edi
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x210]
mov dword [ebp - 0x268], edi
push eax
push ebx
mov dword [ebp - 0x264], edi
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x25c], edi
mov dword [ebp - 0x258], edi
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x250], edi
mov dword [ebp - 0x24c], edi
mov dword [ebp - 0x242], edi
mov dword [ebp - 0x23e], edi
mov dword [ebp - 0x23a], edi
mov dword [ebp - 0x236], edi
mov dword [ebp - 0x274], 0x44
mov dword [ebp - 0x248], 1
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x46d444
xor edi, edi
mov dword [esi], 0x64
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d55dc
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x22c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, 2
call esi
push dword [ebp - 0x230]
call esi
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d55dc
mov esp, ebp
pop ebp
ret
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x46d4a4
mov dword [esi], 0x68
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d55dc
mov esp, ebp
pop ebp
ret
mov eax, edi
mov dword [esi], 2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d55dc
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004d55dc
mov esp, ebp
pop ebp
ret