Function at 0x702334
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x70233c
push ebx
push esi
push edi
mov eax, 0x701a6c
call fcn.0040731c
xor eax, eax
push ebp
push 0x702c98
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x70ada8]
mov eax, dword [eax]
mov edx, 0x702cb0
call fcn.00404e30
je 0x70238e
mov eax, dword [0x70ada8]
mov eax, dword [eax]
call fcn.004da680
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
mov eax, 0x702cbc
call fcn.004ef9a4
test al, al
jne 0x7023ad
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046eef8
mov eax, 0x702cd0
call fcn.004ef6ec
test al, al
jne 0x7023d8
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
xor eax, eax
push ebp
push 0x7024cf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x702ce8
call fcn.004eb334
mov ecx, dword [0x70ab8c]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
mov edx, dword [0x700710]
call fcn.0046ef10
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
call fcn.0046b864
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x88]
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 0xa
call fcn.00488c78
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
xor edx, edx
call fcn.00488c88
mov eax, 0x702d0c
call fcn.004eb334
mov ecx, dword [0x70ae7c]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
mov edx, dword [0x66fbb4]
call fcn.0046ef10
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 1
call fcn.00488c88
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov dword [eax + 0x1a8], 0x453e178
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
add eax, 0x264
mov edx, 0x702d2c
call fcn.00404a88
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 3
call fcn.00488c88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x702508
push 0x702d68
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
lea edx, [ebp - 0x18]
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.0066fe1c
mov eax, dword [ebp - 0x18]
mov edx, 0x702cb0
call fcn.00404e30
je 0x7025a6
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x702d88
call fcn.006787bc
push 0x702dbc
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov ecx, 1
mov dl, 1
call fcn.00677aec
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 4
call fcn.00488c88
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00403b44
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
call fcn.00403b44
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 4
call fcn.00488c88
push 0x702de4
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
call fcn.004ef034
test al, al
jne 0x70260e
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00403b44
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
call fcn.00403b44
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
lea edx, [ebp - 0x20]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.0040a990
lea eax, [ebp - 0x1c]
mov edx, 0x702e10
call fcn.00404cf4
mov eax, dword [ebp - 0x1c]
call fcn.0040a6f0
test al, al
jne 0x702678
lea edx, [ebp - 0x28]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.0040a990
lea eax, [ebp - 0x24]
mov edx, 0x702e24
call fcn.00404cf4
mov eax, dword [ebp - 0x24]
call fcn.0040a6f0
test al, al
je 0x702761
lea edx, [ebp - 0x30]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.0040a990
lea eax, [ebp - 0x2c]
mov edx, 0x702e38
call fcn.00404cf4
mov eax, dword [ebp - 0x2c]
call fcn.0040a6f0
test al, al
je 0x702761
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x702e4c
call fcn.006787bc
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00673ba8
test al, al
jne 0x7026e3
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00673b30
test al, al
jne 0x702704
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
push 0x702e9c
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
push 5
lea edx, [ebp - 0x38]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x34]
call fcn.0040a990
lea eax, [ebp - 0x34]
mov edx, 0x702ec8
call fcn.00404cf4
mov eax, dword [ebp - 0x34]
call fcn.00404ee4
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
lea edx, [ebp - 0x40]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.0040a990
lea eax, [ebp - 0x3c]
mov edx, 0x702e38
call fcn.00404cf4
mov eax, dword [ebp - 0x3c]
call fcn.0040a6f0
test al, al
je 0x70283d
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00676eac
test al, al
je 0x70283d
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x702e4c
call fcn.006787bc
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00673ba8
test al, al
jne 0x7027e0
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
push 0x702ee0
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
push 5
lea edx, [ebp - 0x48]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.0040a990
lea eax, [ebp - 0x44]
mov edx, 0x702ec8
call fcn.00404cf4
mov eax, dword [ebp - 0x44]
call fcn.00404ee4
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
lea edx, [ebp - 0x50]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.0040a990
lea eax, [ebp - 0x4c]
mov edx, 0x702e38
call fcn.00404cf4
mov eax, dword [ebp - 0x4c]
call fcn.0040a6f0
test al, al
je 0x702919
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00677044
test al, al
je 0x702919
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x702e4c
call fcn.006787bc
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00673ba8
test al, al
jne 0x7028bc
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
push 0x702f2c
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
push 5
lea edx, [ebp - 0x58]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
call fcn.0040a990
lea eax, [ebp - 0x54]
mov edx, 0x702ec8
call fcn.00404cf4
mov eax, dword [ebp - 0x54]
call fcn.00404ee4
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
lea edx, [ebp - 0x60]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.0040a990
lea eax, [ebp - 0x5c]
mov edx, 0x702e38
call fcn.00404cf4
mov eax, dword [ebp - 0x5c]
call fcn.0040a6f0
test al, al
je 0x7029f5
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00677204
test al, al
je 0x7029f5
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x702f7c
call fcn.006787bc
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00673ba8
test al, al
jne 0x702998
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
push 0x702fd8
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
push 5
lea edx, [ebp - 0x68]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f568
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.0040a990
lea eax, [ebp - 0x64]
mov edx, 0x702ec8
call fcn.00404cf4
mov eax, dword [ebp - 0x64]
call fcn.00404ee4
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 7
call fcn.00488c88
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 8
call fcn.00488c88
push 0x703004
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00677494
test al, al
je 0x702a5f
push 0x703020
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
jmp 0x702a8a
push 0x70303c
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
add eax, 0x1c8
mov edx, 0x703058
call fcn.00404a88
push 0x703068
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.00670984
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd4]
mov edx, 0x703084
call fcn.00404e30
jne 0x702b15
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov ecx, dword [eax + 0x538]
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov edx, dword [eax + 0x1a8]
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
call fcn.004eead0
test al, al
jne 0x702b15
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x703090
call fcn.006787bc
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
jmp 0x702c7d
push 0x7030ec
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.0068ed38
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, 9
call fcn.00488c88
mov eax, dword [0x70ab8c]
mov eax, dword [eax]
call fcn.00403b44
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
call fcn.0068e53c
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x978]
mov edx, 0x703084
call fcn.00404e30
jne 0x702ba2
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov byte [eax + 0xc79], 1
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
add eax, 0x84c
mov edx, 0x703084
call fcn.00404a88
push 0x703108
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call fcn.00677aec
mov ecx, dword [0x70a714]
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
mov edx, dword [0x6d4e34]
call fcn.0046ef10
mov eax, dword [0x70ae7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
mov edx, 0x703084
call fcn.00404e30
jne 0x702c71
xor eax, eax
push ebp
push 0x702c6a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x70a610]
cmp dword [eax], 0
jne 0x702c1a
xor ecx, ecx
mov dl, 1
mov eax, dword [0x700b1c]
call fcn.00467628
mov edx, dword [0x70a610]
mov dword [edx], eax
mov eax, dword [0x70a610]
mov eax, dword [eax]
xor edx, edx
call fcn.00468460
mov eax, dword [0x70a610]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xe8]
mov eax, dword [0x70a610]
mov eax, dword [eax]
cmp dword [eax + 0x24c], 2
jne 0x702c53
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046f07c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x702c71
mov eax, dword [0x70a610]
xor edx, edx
mov dword [eax], edx
ret
mov eax, dword [0x70ac0c]
mov eax, dword [eax]
call fcn.0046ef90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x702c9f
lea eax, [ebp - 0x68]
mov edx, 0x16
call fcn.00404a58
ret