Function at 0x434b09
Capabilities:
Create process on windows

Disassembly:
push 0x98
mov eax, 0x5a6db7
call fcn.0043caa9
mov eax, dword [ebp + 8]
xor ebx, ebx
push 0x44
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
pop esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x18]
push esi
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xa4]
push ebx
push eax
mov dword [ebp - 0x48], ebx
call fcn.00447ad0
push 0x10
lea eax, [ebp - 0x60]
mov dword [ebp - 0xa4], esi
push ebx
push eax
call fcn.00447ad0
add esp, 0x18
mov dword [ebp - 0x18], ebx
xor eax, eax
mov word [ebp - 0x28], ax
push 7
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 1
call fcn.00426545
test al, al
je 0x434b90
inc ebp
rol dh, 0x45
cld
add eax, ebp
retf
or edx, esp
mov ah, cl
sti
jl 0x434bb3
cli
das
xchg byte [edx - 0x1b], dl
shl byte [ebp - 0x2afbf66], cl
call fcn.00426209
test al, al
je 0x434bb4
js 0x434ba8
mov dword [0x7afaf9f6], eax
cmpsb byte [esi], byte es:[edi]
sbb byte [esi + 0x4204b146], ch
ret 0x9f1b
ret 0x9f1b
dec esi
call fcn.00426209
test al, al
je 0x434bd8
or ebp, dword [ebx + 0x2a79fe0d]
in eax, dx
xchg ebp, eax
push eax
jg 0x434b6f
pop edx
loop 0x434c2d
rcl dword [esi + edx*2 - 0x5b03090e]
add al, 0xf2
adc bl, byte [ebx + 0x5d8b84d6]
mov ah, 0x33
test byte [ebp + 0x661a74db], 0x39
xor esi, dword [ebp + 4]
mov ebx, dword [ebp - 0x4c]
xor esi, esi
test ebx, ebx
je 0x434bfb
cmp word [ebx], si
jne 0x434bea
mov eax, esi
jmp 0x434bf1
push ebx
call fcn.004561c7
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x40]
call fcn.00402110
or edi, 0xffffffff
cmp dword [ebp - 0x30], 0
jne 0x434c23
mov ebx, dword [ebp - 0x44]
cmp word [ebx], si
jne 0x434c10
mov eax, esi
jmp 0x434c17
push ebx
call fcn.004561c7
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.00402110
jmp 0x434c79
mov esi, 0x5ab5a0
push esi
call fcn.004561c7
pop ecx
push eax
add byte [ecx + 0x50], bl
push esi
lea ecx, [ebp - 0x28]
call fcn.00402110
mov ebx, dword [ebp - 0x44]
xor eax, eax
cmp word [ebx], ax
je 0x434c4a
push ebx
call fcn.004561c7
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.004052c0
mov esi, 0x5ab5a4
push esi
call fcn.004561c7
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.004052c0
push edi
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.004051b0
push es
std
invalid
call fcn.0042613a
test al, al
je 0x434ca2
push 0xf46c8703
wait
arpl dx, cx
jnp 0x434c51
sub eax, 0x7bc8ebd1
imul edi, dword [eax + 0x2fe8c769], 0x63f62344
add ebx, ebp
mov edi, 0xd2ba2dda
call fcn.004265cf
test al, al
je 0x434cca
aad 0xa5
sbb ah, byte [eax - 0xc]
inc esi
push 0xffffffffffffffb8
imul ebp, dword [eax + 0x61d4e466], 0xffffffd8
xchg edx, eax
dec edx
push ss
lodsd eax, dword [esi]
and byte [ebx + esi], bl
push cs
jmp 0x434cec
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0x67
call fcn.0042b688
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
pop ecx
cmovae eax, dword [ebp - 0x28]
xor ebx, ebx
pop ecx
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0xa4]
push ecx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x434d11
mov esi, ebx
jmp 0x434d92
cmp byte [ebp + 0x10], bl
je 0x434d27
cmp dword [ebp + 0x14], ebx
cmovg edi, dword [ebp + 0x14]
push edi
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword [ebp - 0x50]
test esi, esi
je 0x434d44
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x434d44
mov eax, dword [ebp - 0x48]
mov dword [esi], eax
call fcn.0042624e
test al, al
je 0x434d5e
loopne 0x434cff
clc
lcall 0x8f4c, 0x3b2bdc1
cli
sahf
hlt
call fcn.004261c4
test al, al
je 0x434d7d
fsubr dword [ecx + 0x14]
in eax, 0xd5
sbb al, 0xac
outsd dx, dword [esi]
mov ch, 0x5f
push cs
pop ebx
mov esi, 0x1f150aed
lahf
lea esp, [edi + 0x75ff7f6d]
mov al, byte [0x92dc358b]
pop edx
add bh, bh
salc
push dword [ebp - 0x60]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x5c]
call esi
xor esi, esi
inc esi
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.004254f0
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.004254f0
mov eax, esi
call fcn.0043ca64
ret