Function at 0x4c6400
Capabilities:
Create process on windows

Disassembly:
add esp, 0xfffffef8
push 0x2101
push 0
call fcn.004c5fbc
add esp, 8
test eax, eax
jne 0x4c642c
push 0x2201
push 0
call fcn.004c5fbc
add esp, 8
test eax, eax
je 0x4c6457
mov eax, dword [0x52edd8]
shr eax, 0x10
and ax, 0xffff
movzx eax, ax
shl eax, 0x10
or eax, 0x6232
mov dword [0x52edd8], eax
push eax
call fcn.0041afd8
pop ecx
push 3
call fcn.004dee84
pop ecx
push 0x2101
push 0
call fcn.004c5fbc
add esp, 8
test eax, eax
jne 0x4c647d
push 0x2201
push 0
call fcn.004c5fbc
add esp, 8
test eax, eax
je 0x4c6485
push 1
call fcn.004de5ac
pop ecx
push 0
push 0x202
push 0
lea edx, [esp + 0x10]
push edx
call fcn.004563e8
add esp, 0x10
push 9
lea ecx, [esp + 8]
push ecx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov eax, dword [esp]
test eax, eax
jne 0x4c64c6
push 1
lea edx, [esp + 8]
push edx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov ecx, dword [esp]
test ecx, ecx
jne 0x4c6532
mov eax, dword [0x52edd8]
shr eax, 0x10
and ax, 0xffff
movzx eax, ax
shl eax, 0x10
or eax, 0x6432
mov dword [0x52edd8], eax
push eax
call fcn.0041afd8
pop ecx
push 0xa
call fcn.004dee84
pop ecx
push 9
lea edx, [esp + 8]
push edx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov ecx, dword [esp]
test ecx, ecx
jne 0x4c6523
push 1
lea eax, [esp + 8]
push eax
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov edx, dword [esp]
test edx, edx
jne 0x4c6532
push 1
call fcn.004de5ac
pop ecx
push esp
call fcn.00403e94
pop ecx
mov dword [esp], eax
mov ecx, dword [0x52e404]
test ecx, ecx
jne 0x4c66d1
mov al, byte [0x52e3ff]
test al, al
jne 0x4c65f2
push 0
push 0x2001
push 0x601a3a
lea edx, [esp + 0x10]
push edx
call fcn.004563e8
add esp, 0x10
push 0x2100
lea ecx, [esp + 8]
push ecx
call fcn.00405c58
add esp, 8
test eax, eax
je 0x4c65f2
mov al, byte [0x4e21a0]
test al, al
je 0x4c65b3
push 0x601a43
lea edx, [esp + 8]
push edx
call fcn.004d2e40
add esp, 8
push 0x4e21a0
lea ecx, [esp + 8]
push ecx
call fcn.004d2e40
add esp, 8
push 5
lea eax, [esp + 8]
push eax
call sub.KERNEL32.dll_WinExec
mov eax, dword [0x52edd8]
shr eax, 0x10
and ax, 0xffff
movzx eax, ax
shl eax, 0x10
or eax, 0x6632
mov dword [0x52edd8], eax
push eax
call fcn.0041afd8
pop ecx
push 2
call fcn.004dee84
pop ecx
push 1
call fcn.004de5ac
pop ecx
push 0
push 0x102
push 0
lea edx, [esp + 0x10]
push edx
call fcn.004563e8
add esp, 0x10
push 9
lea ecx, [esp + 8]
push ecx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov eax, dword [esp]
test eax, eax
jne 0x4c6633
push 1
lea edx, [esp + 8]
push edx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov ecx, dword [esp]
test ecx, ecx
jne 0x4c6665
mov eax, dword [0x52edd8]
shr eax, 0x10
and ax, 0xffff
movzx eax, ax
shl eax, 0x10
or eax, 0x6932
mov dword [0x52edd8], eax
push eax
call fcn.0041afd8
pop ecx
push 9
call fcn.004dee84
pop ecx
mov edx, dword [esp]
test edx, edx
jne 0x4c66d1
push 9
lea ecx, [esp + 8]
push ecx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov eax, dword [esp]
test eax, eax
jne 0x4c6697
push 1
lea edx, [esp + 8]
push edx
call fcn.00403dc0
add esp, 8
mov dword [esp], eax
mov ecx, dword [esp]
test ecx, ecx
jne 0x4c66d1
mov eax, dword [0x52edd8]
shr eax, 0x10
and ax, 0xffff
movzx eax, ax
shl eax, 0x10
or eax, 0x6b32
mov dword [0x52edd8], eax
push eax
call fcn.0041afd8
pop ecx
push 1
call fcn.004dee84
pop ecx
push 1
call fcn.004de5ac
pop ecx
mov eax, 1
add esp, 0x108
ret