Function at 0x70d5a0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaa8
push ebx
push esi
push edi
lea edi, [ebp - 0xaa8]
mov ecx, 0x2aa
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x818f7c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x82c], 0
push 0x7ff
push 0
lea eax, [ebp - 0x82b]
push eax
call fcn.00533469
add esp, 0xc
mov dword [ebp - 0x838], str.To_Enable_File_Sharing
mov dword [ebp - 0x844], 0
push 0
push 0
push 0
call fcn.005341e3
add esp, 8
push eax
push str._sSoundsEdit.wav
push 0
call fcn.0053455d
add esp, 0xc
push eax
call fcn.005349bd
add esp, 8
push 0
call fcn.00532898
add esp, 4
mov dword [ebp - 0x844], eax
xor eax, eax
je 0x70d652
mov dword [ebp - 0xc], 1
jmp 0x70d659
mov dword [ebp - 0xc], 0
cmp dword [ebp - 0x844], 0
je 0x70d690
push 0
push 0
push 0
mov eax, dword [ebp - 0x844]
push eax
call fcn.005339f5
add esp, 0x10
mov eax, dword [ebp - 0x844]
push eax
call fcn.00533676
add esp, 4
mov dword [ebp - 0x844], 0
xor eax, eax
je 0x70d69d
mov dword [ebp - 0x24], str._non_another_terminal.__From_the_other_terminal__click_the_Windows_nSTART_logo_on_the_Windows_Task_Bar.__Enter_the_Installation_Address_nexactly_as_it_appears_below_into_the__Start_Search__box_and_press_enter.
jmp 0x70d6a4
mov dword [ebp - 0x24], str._non_another_terminal.__From_the_other_terminal__click__START__on_nthe_Windows_Task_Bar_then_click__Run..._.__Enter_the_Installation_nAddress_exactly_as_it_appears_below_into_the_popup_box_and_press_enter.
call fcn.0053287f
push eax
push 0
push str.L95g
call fcn.00532974
add esp, 8
push eax
call fcn.0053287f
push eax
push 0
push str.L95g
call fcn.00532974
add esp, 8
push eax
push 0
push 0
call fcn.00533135
add esp, 8
push eax
push str.Please_visit_www.paula2.com_in_your_web_browser._nClick_the__Downloads__link_to_open_the_login_popup._n_nEnter_the_following_login_information:_n_rUser_Name:__s_n_rPassword:__s_04d_n_nYou_will_be_asked_to_download_a_file._nRun_it_and_acknowledge_the_Windows_security_warnings._n_n_rWhen_the_setup_begins__you_will_be_asked_for_a_key._n_rProduct_Key:__s_04d_n_nPress__SPACE_BAR__to_close...
push str.__PAULA_Installation_Instructions__
push str.DeepBeep.WAV
push str.__133__134_
push 1
mov eax, dword [ebp - 0xc]
push eax
call fcn.005334c8
add esp, 0x2c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x85
je 0x70d718
cmp dword [ebp - 0x18], 0x86
jne 0x70db41
xor eax, eax
je 0x70d86d
push 0x3c
push 0
lea eax, [ebp - 0x888]
push eax
call fcn.00533469
add esp, 0xc
mov dword [ebp - 0x888], 0x3c
mov dword [ebp - 0x884], 0x4c
mov dword [ebp - 0x87c], str.open
mov dword [ebp - 0x878], str.control.exe
mov dword [ebp - 0x874], str._name_Microsoft.NetworkAndSharingCenter
call fcn.00535bec
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x86c], 1
mov esi, esp
lea eax, [ebp - 0x888]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp esi, esp
call fcn.00535fca
test eax, eax
jne 0x70d7b8
push 0x7a0064
push str.A_problem_occurred_and_the_sharing_setup_cannot_initialize._nPlease_call_teck_support____s_for_help._n_nPress_any_key_to_continue...
push str.__ShellExecuteEx___FAILED__
push 0
push 0
push 0
push 1
call fcn.005334c8
add esp, 0x1c
jmp 0x70d868
mov esi, esp
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00535fca
push str.You_may_need_to_enable_file_sharing._nIf_you_are_not_familiar_with_file_sharing__nplease_call_tech_support____360_545_6605_nOtherwise__follow_the_instructions_below:_n_n__1._Press_the__File_sharing__drop_down_arrow._n__2._Select___Turn_on_file_sharing_._n__3._Press_the__Apply__button._n__4._You_may_then_close_the_Sharing_Center_window.
push 0x800
lea eax, [ebp - 0x82c]
push eax
call fcn.00535be2
add esp, 0xc
push 0x1388
mov eax, dword [ebp - 0x838]
push eax
call fcn.005342f6
add esp, 8
push 0x2710
mov eax, dword [ebp - 0x838]
push eax
call fcn.005342f6
add esp, 8
mov esi, esp
push 0x11040
mov eax, dword [ebp - 0x838]
push eax
lea ecx, [ebp - 0x82c]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00535fca
mov esi, esp
push 0xffffffffffffffff
mov eax, dword [ebp - 0x850]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp esi, esp
call fcn.00535fca
mov eax, dword [0x818ee0]
add eax, 0x7b
push eax
push str.e:userskerrydocuments_visual_studio_2010projectspaula__butchered__titlepage.c
push str.ShowSpawningInstructions
mov ecx, dword [ebp - 0x850]
push ecx
call fcn.00533ee6
jmp 0x70db41
mov dword [ebp - 0x8d8], 0
push 0x3c
push 0
lea eax, [ebp - 0x8cc]
push eax
call fcn.00533469
add esp, 0xc
mov dword [ebp - 0x8cc], 0x3c
mov dword [ebp - 0x8c8], 0x4c
mov dword [ebp - 0x8c0], str.properties
push 0xffffffffffffffff
push 0
call fcn.00532208
add esp, 8
mov dword [ebp - 0x8bc], eax
call fcn.00535bec
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8b0], 1
mov esi, esp
lea eax, [ebp - 0x8cc]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp esi, esp
call fcn.00535fca
test eax, eax
jne 0x70d90d
push 0x7a0064
push str.A_problem_occurred_and_the_sharing_setup_cannot_initialize._nPlease_call_teck_support____s_for_help._n_nPress_any_key_to_continue...
push str.__ShellExecuteEx___FAILED__
push 0
push 0
push 0
push 1
call fcn.005334c8
add esp, 0x1c
jmp 0x70db41
mov byte [ebp - 0x9e4], 0
push 0x103
push 0
lea eax, [ebp - 0x9e3]
push eax
call fcn.00533469
add esp, 0xc
push 0xffffffffffffffff
lea eax, [ebp - 0x9e4]
push eax
call fcn.00532208
add esp, 8
lea eax, [ebp - 0x9e4]
push eax
call fcn.00535525
add esp, 4
mov esi, esp
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00535fca
lea eax, [ebp - 0x9e4]
push eax
push str._s_Properties
push 0
call fcn.0053455d
add esp, 0xc
mov esi, esp
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0
jne 0x70d9d7
mov esi, esp
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00535fca
lea eax, [ebp - 0x9e4]
push eax
push str._s_Properties
push 0
call fcn.0053455d
add esp, 0xc
mov esi, esp
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0
je 0x70da54
mov esi, esp
mov eax, dword [ebp - 0x8d8]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp esi, esp
call fcn.00535fca
mov esi, esp
push 0
push 0
push 0
push 0x11
call dword [sym.imp.USER32.dll_keybd_event]
cmp esi, esp
call fcn.00535fca
mov esi, esp
push 0
push 0
push 0
push 9
call dword [sym.imp.USER32.dll_keybd_event]
cmp esi, esp
call fcn.00535fca
mov esi, esp
push 0
push 2
push 0
push 9
call dword [sym.imp.USER32.dll_keybd_event]
cmp esi, esp
call fcn.00535fca
mov esi, esp
push 0
push 2
push 0
push 0x11
call dword [sym.imp.USER32.dll_keybd_event]
cmp esi, esp
call fcn.00535fca
jmp 0x70da5f
call fcn.00535bec
mov dword [ebp - 0x8d8], eax
push str.HCTC
push str.HCTC
push str.You_may_need_to_enable_file_sharing._nIf_you_are_not_familiar_with_file_sharing__nplease_call_tech_support____360_545_6605_nOtherwise__follow_the_instructions_below:_n_n__1._Select_the__Sharing__tab_if_it_is_not_already_selected._n__2._Enable_file_sharing_for_the__s_folder._n_____If_the__s_folder_is_already_shared__n_____unshare_the_folder_and_press__Apply_._n_____Then__re_enable_file_sharing._n_____If_the_sharing_option_does_not_exist__click_the_n_____colored_text_toward_the_bottom_of_the_window_that_says__n______If_you_understand_the_risk_but_want_to_share..._._n_____Then_select__Just_enable_file_sharing.__n_____DO_NOT_RUN_THE_WIZARD._n__3._Press__OK__on_the_file_sharing_dialog_box_to_exit.
push 0x800
lea eax, [ebp - 0x82c]
push eax
call fcn.00535be2
add esp, 0x14
mov esi, esp
push 0x11040
mov eax, dword [ebp - 0x838]
push eax
lea ecx, [ebp - 0x82c]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00535fca
mov esi, esp
mov eax, dword [ebp - 0x838]
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0
je 0x70db08
mov esi, esp
push 0x243
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x8d8]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
cmp esi, esp
call fcn.00535fca
mov esi, esp
mov eax, dword [ebp - 0x8d8]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp esi, esp
call fcn.00535fca
mov esi, esp
push 0xffffffffffffffff
mov eax, dword [ebp - 0x894]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp esi, esp
call fcn.00535fca
mov eax, dword [0x818ee0]
add eax, 0xce
push eax
push str.e:userskerrydocuments_visual_studio_2010projectspaula__butchered__titlepage.c
push str.ShowSpawningInstructions
mov ecx, dword [ebp - 0x894]
push ecx
call fcn.00533ee6
push edx
mov ecx, ebp
push eax
lea edx, [0x70db70]
call fcn.0053491d
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00535561
add esp, 0xaa8
cmp ebp, esp
call fcn.00535fca
mov esp, ebp
pop ebp
ret