Function at 0xc8730c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0xc87570
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xc87580
call sub.KERNEL32.DLL_LoadLibraryA
push 0xc8758c
call sub.KERNEL32.DLL_LoadLibraryA
push 0xc87598
call sub.KERNEL32.DLL_LoadLibraryA
push 0xc875a4
call sub.KERNEL32.DLL_LoadLibraryA
push 0xc875b4
call sub.KERNEL32.DLL_LoadLibraryA
lea eax, [ebx + 0x2d4]
push eax
push 0
push 0
call fcn.00c823b0
mov dword [ebp - 4], eax
call sub.KERNEL32.DLL_GetLastError
cmp eax, 0xb7
jne 0xc87384
push 0
call sub.KERNEL32.DLL_ExitProcess
push 0x3e8
call sub.KERNEL32.DLL_Sleep
lea eax, [ebx + 0x9e0]
call fcn.00c831c8
lea edx, [ebx + 0x2d4]
call fcn.00c82e98
mov edx, dword [0xc890d4]
mov dword [edx], eax
mov edx, 0xc875c0
mov eax, dword [0xc890d4]
mov eax, dword [eax]
call fcn.00c82e98
mov edx, dword [0xc890d4]
mov dword [edx], eax
lea eax, [ebx + 0x9e0]
call fcn.00c831c8
lea edx, [ebx + 0x2d4]
call fcn.00c82e98
mov edx, dword [0xc890d8]
mov dword [edx], eax
mov edx, 0xc875cc
mov eax, dword [0xc890d8]
mov eax, dword [eax]
call fcn.00c82e98
mov edx, dword [0xc890d8]
mov dword [edx], eax
mov eax, dword [0xc890d0]
mov edi, eax
mov esi, ebx
mov ecx, 0x173
rep movsd dword es:[edi], dword [esi]
cmp byte [ebx + 0x35a], 1
jne 0xc8741a
call fcn.00c86c10
xor esi, esi
mov edi, dword [0xc890dc]
lea eax, [ebp - 0xc]
call fcn.00c8190c
cmp dword [ebx + esi*4], 0
jle 0xc874ae
lea eax, [ebp - 0x10]
imul edx, esi, 0x29
lea edx, [ebx + edx*2 + 0x14]
mov ecx, 0x29
call fcn.00c81a6c
mov eax, dword [ebp - 0x10]
xor edx, edx
call fcn.00c81b50
je 0xc874ae
push 0xc875dc
lea eax, [ebp - 0x14]
imul edx, esi, 0x29
lea edx, [ebx + edx*2 + 0x14]
mov ecx, 0x29
call fcn.00c81a6c
push dword [ebp - 0x14]
push 0xc875f0
mov eax, dword [ebx + esi*4]
cdq
push edx
push eax
lea eax, [ebp - 0x18]
call fcn.00c82904
push dword [ebp - 0x18]
push 0xc875f8
mov eax, dword [ebx + 0x1b0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1c]
call fcn.00c82904
push dword [ebp - 0x1c]
push 0xc87600
lea eax, [ebp - 0xc]
mov edx, 7
call fcn.00c81b08
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00c81b50
je 0xc874c4
mov eax, edi
mov edx, dword [ebp - 0xc]
call fcn.00c81948
inc esi
add edi, 4
cmp esi, 5
jne 0xc87422
mov eax, dword [0xc890e0]
mov byte [eax], 0
push 0
mov eax, 0xc87204
xor ecx, ecx
xor edx, edx
call fcn.00c8333c
jmp 0xc874f7
push 0xa
call sub.KERNEL32.DLL_Sleep
call fcn.00c83328
mov eax, dword [0xc890e0]
cmp byte [eax], 0
je 0xc874eb
mov eax, dword [ebp - 4]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 8]
push eax
call sub.KERNEL32.DLL_CloseHandle
call fcn.00c85d98
mov eax, dword [0xc890d4]
mov eax, dword [eax]
call fcn.00c83164
mov eax, dword [0xc890cc]
cmp dword [eax], 0
jne 0xc87535
push 0
call sub.KERNEL32.DLL_ExitProcess
push 0
push 0
push 0
lea eax, [ebx + 0x5cc]
push eax
push 0xc87618
push 0
call sub.shell32.dll_ShellExecuteW
push 0
call sub.KERNEL32.DLL_ExitProcess
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xc87577
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00c81924
ret