Function at 0x4b39ff
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x954
mov eax, dword [0x51f5d0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x7ff
lea eax, [ebp - 0x90f]
push ebx
push eax
mov byte [ebp - 0x910], bl
call fcn.004c05d0
add esp, 0xc
push ebx
push ebx
push ebx
call fcn.0045f646
push eax
push str._sSoundsEdit.wav
push ebx
call fcn.00486ec0
add esp, 0x14
push eax
call fcn.004837c0
pop ecx
pop ecx
call fcn.004787d6
mov esi, eax
cmp esi, ebx
je 0x4b3a70
push ebx
push ebx
push esi
xor eax, eax
call fcn.004779d5
add esp, 0xc
mov eax, esi
call fcn.00477218
xor ecx, ecx
call fcn.0040fe92
call fcn.00440a90
push eax
push ebx
mov esi, str.L95g
push esi
call fcn.00487ee9
pop ecx
pop ecx
push eax
call fcn.00440a90
push eax
push ebx
push esi
call fcn.00487ee9
pop ecx
pop ecx
push eax
push ebx
xor ecx, ecx
call fcn.00440998
pop ecx
push eax
push str.Please_visit_www.betty2.com_in_your_web_browser._nClick_the__Downloads__link_to_open_the_login_popup._n_nEnter_the_following_login_information:_n_rUser_Name:__s_n_rPassword:__s_04d_n_nYou_will_be_asked_to_download_a_file._nRun_it_and_acknowledge_the_Windows_security_warnings._n_n_rWhen_the_setup_begins__you_will_be_asked_for_a_key._n_rProduct_Key:__s_04d_n_nPress__SPACE_BAR__to_close...
push str.__PAULA_Installation_Instructions__
push str.DeepBeep.WAV
xor edi, edi
push str.__133__134_
inc edi
push edi
push ebx
call fcn.004205ad
add esp, 0x2c
cmp eax, 0x85
mov dword [ebp - 0x914], eax
mov esi, 0x86
je 0x4b3ae1
cmp eax, esi
jne 0x4b3d6d
xor ecx, ecx
call fcn.0040fe92
test eax, eax
je 0x4b3bbd
cmp dword [ebp - 0x914], esi
je 0x4b3bbd
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x950]
push ebx
push eax
call fcn.004c05d0
add esp, 0xc
mov dword [ebp - 0x950], esi
mov dword [ebp - 0x94c], 0x4c
mov dword [ebp - 0x944], str.open
mov dword [ebp - 0x940], str.control.exe
mov dword [ebp - 0x93c], str._name_Microsoft.NetworkAndSharingCenter
call fcn.0040adda
mov dword [ebp - 0x948], eax
lea eax, [ebp - 0x950]
push eax
mov dword [ebp - 0x934], edi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x4b3c1d
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.You_may_need_to_enable_file_sharing._nIf_you_are_not_familiar_with_file_sharing__nplease_call_tech_support____360_545_6605_nOtherwise__follow_the_instructions_below:_n_n__1._Press_the__File_sharing__drop_down_arrow._n__2._Select___Turn_on_file_sharing_._n__3._Press_the__Apply__button._n__4._You_may_then_close_the_Sharing_Center_window.
lea eax, [ebp - 0x910]
push 0x800
push eax
call fcn.00486e10
add esp, 0xc
push 0x1388
call fcn.00410645
mov dword [esp], 0x2710
call fcn.00410645
mov dword [esp], 0x11040
push str.To_Enable_File_Sharing
lea eax, [ebp - 0x910]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4b3d54
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x950]
push ebx
push eax
call fcn.004c05d0
add esp, 0xc
push 0xffffffffffffffff
push ebx
mov dword [ebp - 0x950], esi
mov dword [ebp - 0x94c], 0x4c
mov dword [ebp - 0x944], str.properties
call fcn.0045f646
pop ecx
pop ecx
mov dword [ebp - 0x940], eax
call fcn.0040adda
mov dword [ebp - 0x948], eax
lea eax, [ebp - 0x950]
push eax
mov dword [ebp - 0x934], edi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
jne 0x4b3c3d
push 0x4dfed8
push str.A_problem_occurred_and_the_sharing_setup_cannot_initialize._nPlease_call_teck_support____s_for_help._n_nPress_any_key_to_continue...
push str.__ShellExecuteEx___FAILED__
push ebx
push ebx
push ebx
push edi
call fcn.004205ad
add esp, 0x1c
jmp 0x4b3d6d
push 0x103
lea eax, [ebp - 0x10f]
push ebx
push eax
mov byte [ebp - 0x110], bl
call fcn.004c05d0
add esp, 0xc
lea eax, [ebp - 0x110]
push 0xffffffffffffffff
push eax
call fcn.0045f646
pop ecx
pop ecx
lea esi, [ebp - 0x110]
call fcn.00485a88
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7d0
call esi
lea eax, [ebp - 0x110]
push eax
push str._s_Properties
push ebx
call fcn.00486ec0
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
add esp, 0xc
push eax
push ebx
call edi
cmp eax, ebx
jne 0x4b3cc7
push 0x7d0
call esi
lea eax, [ebp - 0x110]
push eax
push str._s_Properties
push ebx
call fcn.00486ec0
add esp, 0xc
push eax
push ebx
call edi
cmp eax, ebx
je 0x4b3cf4
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push ebx
push ebx
push ebx
push 0x11
call esi
push ebx
push ebx
push ebx
push 9
call esi
push ebx
push 2
push ebx
push 9
call esi
push ebx
push 2
push ebx
push 0x11
call esi
jmp 0x4b3cf9
call fcn.0040adda
mov eax, str.HCTC
push eax
push eax
push str.You_may_need_to_enable_file_sharing._nIf_you_are_not_familiar_with_file_sharing__nplease_call_tech_support____360_545_6605_nOtherwise__follow_the_instructions_below:_n_n__1._Select_the__Sharing__tab_if_it_is_not_already_selected._n__2._Enable_file_sharing_for_the__s_folder._n_____If_the__s_folder_is_already_shared__n_____unshare_the_folder_and_press__Apply_._n_____Then__re_enable_file_sharing._n_____If_the_sharing_option_does_not_exist__click_the_n_____colored_text_toward_the_bottom_of_the_window_that_says__n______If_you_understand_the_risk_but_want_to_share..._._n_____Then_select__Just_enable_file_sharing.__n_____DO_NOT_RUN_THE_WIZARD._n__3._Press__OK__on_the_file_sharing_dialog_box_to_exit.
lea eax, [ebp - 0x910]
push 0x800
push eax
call fcn.00486e10
add esp, 0x14
push 0x11040
mov esi, str.To_Enable_File_Sharing
push esi
lea eax, [ebp - 0x910]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
push ebx
call edi
mov esi, eax
cmp esi, ebx
je 0x4b3d54
push 0x243
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0xffffffffffffffff
push dword [ebp - 0x918]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword [ebp - 0x918]
call fcn.0041cc21
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bfeb5
leave
ret