Function at 0x4a210c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 4
push 0
push 0
dec ecx
jne 0x4a2115
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.00404fa4
mov eax, dword [ebp - 8]
call fcn.00404fa4
xor eax, eax
push ebp
push 0x4a241f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax], 0x22
jne 0x4a21b5
mov ebx, 2
jmp 0x4a2158
inc ebx
mov eax, dword [ebp - 4]
call fcn.00404dbc
cmp ebx, eax
jg 0x4a216e
mov eax, dword [ebp - 4]
cmp byte [eax + ebx - 1], 0x22
jne 0x4a2157
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 4]
call fcn.00404dbc
mov ecx, eax
lea edx, [ebx + 1]
mov eax, dword [ebp - 4]
call fcn.00405014
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x10]
call fcn.0040a07c
lea eax, [ebp - 0x1c]
push eax
mov ecx, ebx
sub ecx, 2
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405014
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0xc]
call fcn.0040a07c
jmp 0x4a2224
mov ebx, 1
jmp 0x4a21bd
inc ebx
mov eax, dword [ebp - 4]
call fcn.00404dbc
cmp ebx, eax
jg 0x4a21e2
mov eax, dword [ebp - 4]
mov al, byte [eax + ebx - 1]
add al, 0xe0
cmp al, 0x5f
ja 0x4a21e0
and eax, 0x7f
bt dword [0x4a242c], eax
jae 0x4a21bc
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 4]
call fcn.00404dbc
mov ecx, eax
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00405014
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x10]
call fcn.0040a07c
lea eax, [ebp - 0x24]
push eax
mov ecx, ebx
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405014
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0xc]
call fcn.0040a07c
push 1
mov eax, dword [ebp - 8]
call fcn.00404fb4
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404fb4
push eax
mov eax, dword [ebp - 0xc]
call fcn.00404fb4
push eax
push 0x4a2438
mov eax, esi
call fcn.0044ab4c
push eax
call sub.shell32.dll_ShellExecuteA
mov ebx, eax
cmp ebx, 0x20
jg 0x4a2404
mov eax, ebx
cmp eax, 0x20
ja case.0x4a226f.0
mov al, byte [eax + 0x4a2276]
jmp dword [eax*4 + 0x4a2297]
lea eax, [ebp - 0x14]
mov edx, 0x4a2448
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2484
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a24b0
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a24dc
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2528
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a256c
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a25a8
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2610
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2634
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2688
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a26c4
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2714
call fcn.00404b9c
jmp 0x4a23be
lea eax, [ebp - 0x14]
mov edx, 0x4a2754
call fcn.00404b9c
jmp 0x4a23be
lea edx, [ebp - 0x28]
mov eax, ebx
call fcn.0040a398
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
mov edx, 0x4a277c
call fcn.00404e08
push 0
call sub.user32.dll_MessageBeep
push dword [ebp - 0x14]
push 0x4a27a8
push 0x4a27b4
push dword [ebp - 4]
push 0x4a27d0
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404e7c
push 0
mov eax, dword [ebp - 0x14]
call fcn.00404fb4
mov edx, eax
mov ecx, 0x4a27d4
mov eax, dword [0x4ad46c]
mov eax, dword [eax]
call fcn.00463ec4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a2426
lea eax, [ebp - 0x28]
mov edx, 0xa
call fcn.00404b28
ret