Function at 0x480ddb
Capabilities:
Accept command line arguments
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8ac8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x734
push esi
push edi
mov dword [ebp - 0x740], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x730], 0
lea eax, [ebp - 0x728]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x734]
xor edx, edx
mov dx, word [ebp + ecx*2 - 0x72a]
cmp edx, 0x5c
je 0x480e5f
mov eax, dword [ebp - 0x734]
mov word [ebp + eax*2 - 0x728], 0x5c
mov ecx, dword [ebp - 0x734]
mov word [ebp + ecx*2 - 0x726], 0
lea edx, [ebp - 0x728]
push edx
lea eax, [ebp - 0x520]
push eax
call fcn.004ba79a
add esp, 8
lea ecx, [ebp + 8]
call fcn.004b01e0
push eax
lea ecx, [ebp - 0x520]
push ecx
call fcn.004ba770
add esp, 8
push 0x5110cc
lea edx, [ebp - 0x520]
push edx
call fcn.004bacde
add esp, 8
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 0
je 0x480ed8
mov dword [ebp - 0x730], 1
mov eax, dword [ebp - 0x738]
push eax
call fcn.004bac30
add esp, 4
mov dword [ebp - 0x738], 0
jmp 0x481035
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x728]
push ecx
call fcn.004ba79a
add esp, 8
lea edx, [ebp - 0x728]
push edx
call fcn.004ba753
add esp, 4
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x73c], eax
jmp 0x480f20
mov ecx, dword [ebp - 0x73c]
sub ecx, 1
mov dword [ebp - 0x73c], ecx
cmp dword [ebp - 0x73c], 0
jle 0x480f52
mov edx, dword [ebp - 0x73c]
xor eax, eax
mov ax, word [ebp + edx*2 - 0x728]
cmp eax, 0x5c
jne 0x480f50
mov ecx, dword [ebp - 0x73c]
mov word [ebp + ecx*2 - 0x726], 0
jmp 0x480f52
jmp 0x480f11
mov edx, dword [ebp - 0x728]
and edx, 0xffff
cmp edx, 0x22
jne 0x480fc1
lea eax, [ebp - 0x728]
push eax
call fcn.004ba753
add esp, 4
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x73c], 0
jmp 0x480f93
mov ecx, dword [ebp - 0x73c]
add ecx, 1
mov dword [ebp - 0x73c], ecx
mov edx, dword [ebp - 0x73c]
cmp edx, dword [ebp - 0x734]
jg 0x480fbf
mov eax, dword [ebp - 0x73c]
mov ecx, dword [ebp - 0x73c]
mov dx, word [ebp + ecx*2 - 0x726]
mov word [ebp + eax*2 - 0x728], dx
jmp 0x480f84
jmp 0x480f52
lea eax, [ebp - 0x728]
push eax
lea ecx, [ebp - 0x520]
push ecx
call fcn.004ba79a
add esp, 8
lea ecx, [ebp + 8]
call fcn.004b01e0
push eax
lea edx, [ebp - 0x520]
push edx
call fcn.004ba770
add esp, 8
push 0x5110d0
lea eax, [ebp - 0x520]
push eax
call fcn.004bacde
add esp, 8
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 0
je 0x481035
mov dword [ebp - 0x730], 1
mov ecx, dword [ebp - 0x738]
push ecx
call fcn.004bac30
add esp, 4
mov dword [ebp - 0x738], 0
mov ecx, 6
mov esi, 0x5110d4
lea edi, [ebp - 0x318]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
xor eax, eax
lea edi, [ebp - 0x300]
rep stosd dword es:[edi], eax
push 0x5110ec
lea edx, [ebp - 0x318]
push edx
call fcn.004ba770
add esp, 8
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x318]
push ecx
call fcn.004ba770
add esp, 8
push 0x5110f0
lea edx, [ebp - 0x318]
push edx
call fcn.004ba770
add esp, 8
mov dword [ebp - 0x72c], 0
jmp 0x4810af
mov eax, dword [ebp - 0x72c]
add eax, 1
mov dword [ebp - 0x72c], eax
lea ecx, [ebp - 0x318]
push ecx
call fcn.004ba753
add esp, 4
cmp dword [ebp - 0x72c], eax
jae 0x4810e2
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x72c]
mov cl, byte [ebp + eax*2 - 0x318]
mov byte [ebp + edx - 0x110], cl
jmp 0x4810a0
push 0
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004d02cd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4