Function at 0x6a97c4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push ebx
push esi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x6a9ad2
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x6a9aec
call fcn.0040bd3c
push dword [ebp - 4]
push 0x6a9b0c
mov eax, dword [0x737f2c]
push dword [eax]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040c6f8
mov eax, dword [0x737a0c]
cmp byte [eax], 0
je 0x6a9823
lea eax, [ebp - 4]
mov edx, 0x6a9b38
call fcn.0040c618
jmp 0x6a9830
lea eax, [ebp - 4]
mov edx, 0x6a9b74
call fcn.0040c618
mov eax, dword [0x7384c0]
cmp byte [eax], 0
je 0x6a9849
lea eax, [ebp - 4]
mov edx, 0x6a9bb4
call fcn.0040c618
jmp 0x6a9856
lea eax, [ebp - 4]
mov edx, 0x6a9be0
call fcn.0040c618
mov eax, dword [0x737990]
cmp byte [eax], 0
je 0x6a986f
lea eax, [ebp - 4]
mov edx, 0x6a9c10
call fcn.0040c618
jmp 0x6a987c
lea eax, [ebp - 4]
mov edx, 0x6a9c50
call fcn.0040c618
mov eax, dword [0x737d2c]
cmp byte [eax], 0
je 0x6a9895
lea eax, [ebp - 4]
mov edx, 0x6a9c90
call fcn.0040c618
jmp 0x6a98a2
lea eax, [ebp - 4]
mov edx, 0x6a9cc4
call fcn.0040c618
mov eax, dword [0x737dd8]
cmp byte [eax], 0
je 0x6a98bb
lea eax, [ebp - 4]
mov edx, 0x6a9cfc
call fcn.0040c618
jmp 0x6a98c8
lea eax, [ebp - 4]
mov edx, 0x6a9d20
call fcn.0040c618
mov eax, dword [0x737c48]
mov eax, dword [eax]
mov edx, 0x6a9d48
call fcn.0040c808
je 0x6a98f8
mov eax, dword [0x7381ec]
cmp byte [eax], 0
jne 0x6a9907
mov eax, dword [0x737c48]
mov eax, dword [eax]
mov edx, 0x6a9d60
call fcn.0040c808
jne 0x6a9907
lea eax, [ebp - 4]
mov edx, 0x6a9d80
call fcn.0040c618
jmp 0x6a9914
lea eax, [ebp - 4]
mov edx, 0x6a9db0
call fcn.0040c618
mov eax, dword [0x737a50]
mov eax, dword [eax]
mov edx, 0x6a9de0
call fcn.0040c808
je 0x6a9944
mov eax, dword [0x7381ec]
cmp byte [eax], 0
jne 0x6a9953
mov eax, dword [0x737a50]
mov eax, dword [eax]
mov edx, 0x6a9d60
call fcn.0040c808
jne 0x6a9953
lea eax, [ebp - 4]
mov edx, 0x6a9dfc
call fcn.0040c618
jmp 0x6a9960
lea eax, [ebp - 4]
mov edx, 0x6a9e44
call fcn.0040c618
cmp esi, dword [ebx + 0x98c]
je 0x6a9970
cmp esi, dword [ebx + 0x99c]
jne 0x6a997d
lea eax, [ebp - 4]
mov edx, 0x6a9e8c
call fcn.0040c618
cmp esi, dword [ebx + 0x990]
je 0x6a998d
cmp esi, dword [ebx + 0x9a0]
jne 0x6a999a
lea eax, [ebp - 4]
mov edx, 0x6a9ebc
call fcn.0040c618
cmp esi, dword [ebx + 0x994]
je 0x6a99aa
cmp esi, dword [ebx + 0x9a4]
jne 0x6a99b7
lea eax, [ebp - 4]
mov edx, 0x6a9ee4
call fcn.0040c618
cmp esi, dword [ebx + 0x998]
je 0x6a99c7
cmp esi, dword [ebx + 0x9a8]
jne 0x6a99d4
lea eax, [ebp - 4]
mov edx, 0x6a9f08
call fcn.0040c618
mov eax, dword [0x738560]
mov eax, dword [eax]
mov edx, 0x6a9d60
call fcn.0040c808
jne 0x6a99f4
lea eax, [ebp - 4]
mov edx, 0x6a9f34
call fcn.0040c618
mov eax, dword [0x738560]
mov eax, dword [eax]
mov edx, 0x6a9f70
call fcn.0040c808
jne 0x6a9a14
lea eax, [ebp - 4]
mov edx, 0x6a9f8c
call fcn.0040c618
mov eax, dword [0x738560]
mov eax, dword [eax]
mov edx, 0x6a9fc0
call fcn.0040c808
jne 0x6a9a6c
lea eax, [ebp - 4]
mov edx, 0x6a9fd8
call fcn.0040c618
push dword [ebp - 4]
push 0x6aa00c
mov eax, dword [0x738174]
push dword [eax]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040c6f8
push dword [ebp - 4]
push 0x6aa030
mov eax, dword [0x737e3c]
push dword [eax]
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040c6f8
push 1
push 0
mov eax, dword [ebp - 4]
call fcn.0040c408
push eax
lea edx, [ebp - 0xc]
mov eax, dword [0x738138]
mov eax, dword [eax]
call fcn.00604f78
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.0042a0a0
lea eax, [ebp - 8]
mov edx, 0x6aa058
call fcn.0040c618
mov eax, dword [ebp - 8]
call fcn.0040c408
push eax
push 0x6aa08c
push 0
call sub.shell32.dll_ShellExecuteW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a9ad9
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040b964
pop eax
jmp eax