Function at 0x448b54
Capabilities:
Create process on windows

Disassembly:
stosd dword es:[edi], eax
dec ebp
add byte [edi + ebx*4 + 0x4d], bl
add byte [esp + edi*8 + 0x46], ah
add byte [eax + 0x640049a4], al
cmpsb byte [esi], byte es:[edi]
dec ecx
add byte [esi + edi*2 - 0x77a7ffb3], al
dec ebp
add byte [eax - 0x7bffb87d], dh
add byte [edi], 0x7c
add byte [edi], 0xb8
add dword [edi], 0xffffffc4
mov es, word [eax + eax - 0xc]
cdq
dec ebp
add al, dh
cdq
dec ebp
add al, al
lcall 0x4d, 0x7d8c004d
clc
test byte [ebp], cl
pop esp
test byte [ebp], cl
test byte [ebp + 0x7cd4004d], cl
dec ebp
add al, bl
jl 0x448b28
add ah, bh
lodsb al, byte [esi]
dec ebp
add byte [eax], ch
lodsd eax, dword [esi]
dec ebp
add byte [eax + 0x500049a5], cl
jle 0x448b38
add ah, cl
mov dword [ebp], ecx
inc esp
mov dword [ebp], ecx
pop eax
mov word [ebp], cs
add al, 0x8b
dec ebp
add al, dh
pushfd
dec ebp
add byte [ebp + ebp*4 - 0x70bbffb3], ch
dec ebp
add byte [eax + 0x4004d8f], bh
or byte [ebp], 0x98
invalid
dec ebp
add byte [ecx + eax + 0x30000], cl
adc al, 0xb0
adc esi, dword [eax - 0x6ff70015]
inc esp
add al, cl
pop dword [eax + eax + 0x3c]
mov es, word [eax + eax + 0xc]
push esp
jae 0x448bbb
imul edx, dword [ebp + 0x52], 0x62614c4c
insb byte es:[edi], dx
nop
push esp
mov eax, dword [eax + eax + 7]
pop es
or al, 0x54
jae 0x448bce
imul edx, dword [ebp + 0x52], 0x62614c4c
insb byte es:[edi], dx
mov byte [edx + 0x6a3c0044], cl
dec ecx
add byte [esi], bl
add byte [ebx], cl
push ebx
push ebp
dec ecx
push ebp
push edx
dec esp
dec esp
popal
bound esp, qword [ebp + 0x6c]
adc al, 0
int3
dec ebp
outsd dx, dword [esi]
je 0x448bfc
dec ebp
add byte [eax - 0x76], dh
dec ebp
add byte [eax + 0x6c004d8a], ah
stosb byte es:[edi], al
dec ebp
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x4307000d], al
popal
jo 0x448c52
imul ebp, dword [edi + 0x6e], 0x48b854
insd dword es:[edi], dx
add dword [eax], eax
call [eax + eax]
inc byte [ecx]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], 0
add byte [eax], al
push cs
add byte [eax], cl
inc ecx
jne 0x448c73
outsd dx, dword [esi]
push ebx
imul edi, dword [edx + 0x65], 0x4b3aac
jo 0x448c0a
add bh, bh
adc byte [ebp + ecx*2 + 0x4d8c2c00], cl
add byte [eax], al
add byte [eax], al
add byte [0xf800000], 0
add eax, 0x6f6c6f43
jb 0x448c79
mov eax, 0x500048
add dh, bh
add byte fs:[eax], al
dec byte [edx + ebp*4 + 0x4d]
add byte [eax + 1], al
adc byte [eax], al
pop es
inc ebp
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x64]
push esp
mov eax, 0x990048
add bh, bh
ror byte [ebx - 0x7477ffb3], 0x4d
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x53080011], al
push 0x6948776f
outsb dx, byte [esi]
je 0x448cbe
mov byte [ebx + 0x4d], cl
add byte [eax - 0x80000000], al
adc dword [eax], eax
or byte [ebx + 0x68], dl
outsd dx, dword [esi]
ja 0x448cae
imul ebp, dword [esi + 0x74], 0x48b854
movsb byte es:[edi], byte [esi]
movsd dword es:[edi], dword [esi]
mov eax, 0xa5a40048
dec ecx
add al, ah
movsd dword es:[edi], dword [esi]
dec ecx
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc al, byte [eax]
or edx, dword [edx + esi*2 + 0x61]
outsb dx, byte [esi]
jae 0x448cfa
popal
jb 0x448cf2
outsb dx, byte [esi]
je 0x448ce4
mov eax, 0x570048
add bh, bh
nop
mov dword [ebp], ecx
in al, dx
stosb byte es:[edi], al
dec ebp
add byte [eax], al
add byte [eax], al
add byte [ecx], 0
add byte [eax], al
adc eax, dword [eax]
pop es
push esi
imul esi, dword [ebx + 0x69], 0x54656c62
bound ebp, qword [ebp + 0x54]
mov eax, 0x16f0048
add bh, bh
cmp al, 0xa6
dec ecx
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax], al
adc al, 0
or byte [edi + 0x6f], dl
jb 0x448d34
push edi
jb 0x448d34
jo 0x448d3d
adc cl, byte [edx]
jl 0x448cda
add bh, bh
sub byte [edx + 0x1004d], cl
add byte [eax], al
add byte [eax], al
add byte [eax - 0x80000000], al
adc eax, 0x6f500900
jo 0x448d68
jne 0x448d64
jo 0x448d42
dec ebp
outsb dx, byte gs:[esi]
jne 0x448d19
xor eax, 0x188004d
add bh, bh
jl 0x448c8e
dec ebp
add byte [eax + 0x7cff0001], cl
mov word [ebp], cs
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
dec ebp
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax], al
add byte [eax], al
add byte [esi], al
push es
add byte [esi], al
inc ebx
jne 0x448d88
jae 0x448d87
jb 0x448d8e
je 0x448d56
cmp ecx, dword [ebp]
mov word [ecx], es
add bh, bh
dec ebp
add byte [ecx + eax - 0x6fa30100], cl
pop esp
nop
inc esp
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x55030016], al
push ebp
push edx
dec esp
lodsb al, byte [esi]
cmp cl, byte [ebx]
nop
add dword [eax], eax
call dword [eax + 0x1ff0001]
add bh, bh
nop
add dword [eax], eax
inc dword [ecx]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x460e0017], al
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x448d9f
dec eax
outsd dx, dword [esi]
jbe 0x448dbf
jb 0x448d9f
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x448d0d
cmp cl, byte [ebx]
xchg esp, eax
add dword [eax], eax
jmp [eax + edx*4]
sub al, 0x90
inc esp
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x460d0018], al
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x448dcc
imul ebp, dword [esi + 0x6b], 0x6f6c6f43
jb 0x448d9d
adc al, 0x3e
dec ebx
dec ebx
add byte [eax], ch
add bh, bh
mov ecx, dword fs:[ebp]
je 0x448d21
dec ebp
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x46040019], al
add byte [eax], al
sbb byte [ecx], 0
add al, 0x46
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x448d54
lds eax, [esi]
and byte [ecx], al
add bh, bh
and byte [ecx], al
add bh, bh
or al, 0xab
dec ebp
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x4f07001a], al
sbb al, byte [eax]
pop es
dec edi
outsb dx, byte [esi]
inc ebx
insb byte es:[edi], dx
imul esp, dword [ebx + 0x6b], 0x4d3d30
rol byte [eax], 1
cmp eax, 0xd0004d
add al, dl
add byte [eax], al
call eax
add byte [eax], al
inc dword [ecx]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x4f0b001b], al
outsb dx, byte [esi]
add bh, bh
rol byte [eax], 1
add bh, bh
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax - 0x80000000], al
sbb eax, dword [eax]
or ecx, dword [edi + 0x6e]
dec ebp
outsd dx, dword [esi]
jne 0x448e5d
inc esp
outsd dx, dword [esi]
ja 0x448e5d
xchg esp, eax
cmp eax, 0xd8004d
add bh, bh
fadd dword [eax]
add bh, bh
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax - 0x80000000], al
sbb al, 0
or ecx, dword [edi + 0x6e]
dec ebp
outsd dx, dword [esi]
jne 0x448e83
dec ebp
outsd dx, dword [esi]
jbe 0x448e7a
xor byte [0xe0004d], bh
add bh, bh
loopne 0x448e1f
add bh, bh
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax - 0x80000000], al
sbb eax, 0x6e4f0900
dec ebp
outsd dx, dword [esi]
jne 0x448ea9
push ebp
jo 0x448dca
nop
nop
cld
mov eax, dword [eax + 0x18c]
call fcn.0047c9e8
cmp dword [ebp - 8], 0
je 0x448e90
push 5
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18c]
mov word [ecx], es
add byte [eax], al
call fcn.0048f13c
push eax
push 0x448ebc
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov eax, dword [ebp - 4]
call fcn.004d9fac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x448eb5
lea eax, [ebp - 8]
call fcn.0048ec8c
ret
fistp word [ebp + 4]
add bl, al
jmp 0x48e6d0
mov eax, dword [esp + 4]
mov edx, dword [esp + 8]
test dword [eax + 4], 6
je 0x48e700
mov ecx, dword [edx + 4]
mov dword [edx + 4], 0x48e700
push ebx
push esi
push edi
push ebp
mov ebp, dword [edx + 8]
add ecx, 5
call fcn.0048e3b8
call ecx
pop ebp
pop edi
pop esi
pop ebx
mov eax, 1
ret