Function at 0x4b75f0
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Set environment variable

Disassembly:
endbr32
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x2b8
call fcn.0040b810
mov dword [esp], 0xfde9
call dword [sym.imp.KERNEL32.dll_SetConsoleCP]
sub esp, 4
mov dword [esp], 0xfde9
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ebx, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
sub esp, 4
mov dword [esp + 4], 0x4c2044
mov dword [esp], 0x4c2048
call ebx
sub esp, 8
mov dword [esp + 4], 0x4c2044
mov dword [esp], str.ENABLE_CP_UTF8
call ebx
sub esp, 8
mov dword [esp + 4], 0x4c2044
mov dword [esp], str.ENABLE_HANDLING_VIRTUAL_TERMINAL_PROCESSING
call ebx
lea ebx, [ebp - 0x220]
sub esp, 8
mov dword [esp + 8], 0x104
mov dword [esp + 4], ebx
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
je 0x4b78af
mov dword [esp], ebx
call sub.msvcrt.dll_wcslen
test eax, eax
je 0x4b76c1
lea edx, [eax - 1]
lea esi, cs:[esi]
mov esi, edx
lea edx, [edx - 1]
cmp word [ebx + esi*2], 0x5c
je 0x4b76c3
cmp edx, 0xffffffff
jne 0x4b76b0
xor esi, esi
sub eax, esi
mov dword [ebp - 0x28c], eax
mov dword [esp], str._cli.exe
call sub.msvcrt.dll_wcslen
mov edx, dword [ebp - 0x28c]
mov edi, eax
cmp edx, eax
jb 0x4b7a07
mov eax, edx
sub eax, edi
test edi, edi
mov ecx, eax
sete byte [ebp - 0x28d]
mov dword [ebp - 0x28c], eax
add ecx, esi
add ecx, ecx
add ecx, ebx
cmp ecx, str._cli.exe
je 0x4b772e
cmp byte [ebp - 0x28d], 0
jne 0x4b772e
xor edx, edx
movzx eax, word [edx + edx + str._cli.exe]
cmp word [ecx + edx*2], ax
jne 0x4b7890
add edx, 1
cmp edi, edx
jne 0x4b7715
cmp dword [ebp - 0x28c], 0xffffffff
je 0x4b7a07
mov eax, dword [ebp - 0x28c]
mov dword [esp + 8], str..exe
add esi, eax
mov eax, 0x208
add esi, esi
cmp esi, eax
cmovae eax, esi
sub eax, esi
add esi, ebx
shr eax, 1
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.msvcrt.dll_wcscpy_s]
mov esi, eax
test eax, eax
jne 0x4b7a20
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea edx, [ebp - 0x260]
mov ecx, 0x10
mov dword [ebp - 0x28c], eax
mov edi, edx
mov eax, esi
lea edx, [ebp - 0x274]
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 4
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x264], 0x44
mov dword [esp], 0xfffffff5
call esi
push edi
lea edi, [ebp - 0x264]
mov dword [ebp - 0x228], eax
mov dword [esp], 0xfffffff4
call esi
push edx
mov dword [ebp - 0x224], eax
mov dword [esp], 0xfffffff6
call esi
lea edx, [ebp - 0x274]
xor esi, esi
push ecx
mov dword [ebp - 0x22c], eax
or dword [ebp - 0x238], 0x100
mov dword [esp + 0x20], edi
xor edi, edi
mov dword [esp + 0x24], edx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0x200
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], edi
mov dword [esp + 8], edi
mov eax, dword [ebp - 0x28c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
sub esp, 0x28
test eax, eax
je 0x4b7914
xor eax, eax
mov dword [ebp - 0x27c], eax
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x274]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x27c]
push edx
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push ecx
push ecx
mov eax, dword [ebp - 0x27c]
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [ebp - 0x28c]
sub ecx, 2
lea edx, [eax - 1]
test eax, eax
je 0x4b7a07
mov dword [ebp - 0x28c], edx
jmp 0x4b7702
mov dword [esp + 8], 0x2d
mov dword [esp + 4], str.Unable_to_determine_wrapper_executable_path:
mov dword [esp], 0x4c1760
call fcn.004b1d70
call fcn.0049d760
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x264]
mov dword [esp + 4], eax
mov dword [esp], 0x4c1760
call fcn.004b46f0
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.004b4630
mov eax, 1
jmp 0x4b7882
mov dword [esp + 8], 0x22
mov dword [esp + 4], str.Unable_to_launch_main_executable:
mov dword [esp], 0x4c1760
call fcn.004b1d70
call fcn.0049d760
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x27c]
mov dword [esp + 4], eax
mov dword [esp], 0x4c1760
call fcn.004b46f0
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.004b4630
mov dword [esp], str.___assumed_path:
call sub.msvcrt.dll_wcslen
mov dword [esp + 4], str.___assumed_path:
mov dword [esp + 8], eax
mov dword [esp], 0x4c19e0
call fcn.004b2130
mov dword [esp], ebx
call sub.msvcrt.dll_wcslen
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], 0x4c19e0
call fcn.004b2130
mov edx, 0xa
mov eax, 0x4c19e0
call fcn.004014f0
mov dword [esp], str.___assumed_command_line:
call sub.msvcrt.dll_wcslen
mov dword [esp + 4], str.___assumed_command_line:
mov dword [esp + 8], eax
mov dword [esp], 0x4c19e0
call fcn.004b2130
mov eax, dword [ebp - 0x28c]
mov dword [esp], 0x4c19e0
mov dword [esp + 4], eax
call fcn.004b48d0
mov edx, 0xa
call fcn.004014f0
jmp 0x4b790a
mov dword [esp + 4], str.Unable_to_determine_main_executable_path:_unexpected_wrapper_executable_name_n
mov dword [esp], 0x4c1760
call fcn.004b4510
jmp 0x4b790a
call fcn.0040b72a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x1c
mov ecx, 0x4c1bc0
call fcn.004ade50
mov dword [esp], 0x4b7550
call fcn.00401400
add esp, 0x1c
ret