Function at 0x426080
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x56d06c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
cmp byte [edi + 0x7e0], 0
jne 0x426413
cmp byte [edi + 0x7fa], 0
mov eax, dword [edi + 0x69c]
mov byte [edi + 0x7e0], 1
je 0x426369
cmp eax, 0xa
jne 0x426140
xor ebx, ebx
call fcn.00426430
test al, al
jne 0x4260ed
push dword [0x570054]
push dword [edi + 0x678]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push ebx
push dword [edi + 0x28c]
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4260f9
xor ebx, ebx
cmp dword [edi + 0x7f0], ebx
setne bl
inc ebx
cmp dword [edi + 0x818], 8
lea esi, [edi + 0x804]
jb 0x42610a
mov esi, dword [esi]
mov eax, dword [edi + 0x6a0]
mov dword [ebp - 0x20], eax
call fcn.004595b0
mov ecx, dword [eax + 0x168]
test ecx, ecx
je 0x42640c
mov eax, dword [ecx]
push 0
push 0
push esi
push ebx
push dword [ebp - 0x20]
push 1
push 0x7dc
call dword [eax + 4]
jmp 0x42640c
cmp eax, 5
jne 0x4261c4
xor ebx, ebx
call fcn.00426430
test al, al
jne 0x426171
push dword [0x570054]
push dword [edi + 0x678]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push ebx
push dword [edi + 0x28c]
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x42617d
xor ebx, ebx
cmp dword [edi + 0x7f0], ebx
setne bl
inc ebx
cmp dword [edi + 0x818], 8
lea esi, [edi + 0x804]
jb 0x42618e
mov esi, dword [esi]
mov eax, dword [edi + 0x6a0]
mov dword [ebp - 0x20], eax
call fcn.004595b0
mov ecx, dword [eax + 0x168]
test ecx, ecx
je 0x42640c
mov eax, dword [ecx]
push 0
push 0
push esi
push ebx
push dword [ebp - 0x20]
push 2
push 0x7dc
call dword [eax + 4]
jmp 0x42640c
cmp eax, 7
je 0x426295
cmp eax, 8
je 0x426295
cmp eax, 9
jne 0x42640c
cmp dword [edi + 0x818], 8
lea esi, [edi + 0x804]
jb 0x4261f0
mov esi, dword [esi]
mov eax, dword [edi + 0x6a0]
movzx ebx, byte [edi + 0x7fb]
mov dword [ebp - 0x20], eax
call fcn.004595b0
mov ecx, dword [eax + 0x168]
test ecx, ecx
je 0x426224
mov eax, dword [ecx]
push 0
push 0
push esi
push ebx
push dword [ebp - 0x20]
push 5
push 0x7dc
call dword [eax + 4]
cmp byte [edi + 0x7fb], 0
je 0x426289
push 0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
xor esi, esi
nop word [eax + eax]
push 0x54e410
lea ecx, [ebp - 0x1c]
call fcn.00419a80
lea ecx, [ebp - 0x1c]
call fcn.00440020
test eax, eax
lea ecx, [ebp - 0x1c]
sete bl
call fcn.0041e2c0
test bl, bl
jne 0x426284
push 0
push str.taskkill__F__IM_QQBrowser.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 4
jl 0x426240
call fcn.0042a740
mov ecx, edi
call fcn.00428eb0
jmp 0x42640c
mov esi, dword [edi + 0x690]
test esi, esi
je 0x4262fa
mov ebx, dword [esi + 0x60]
test ebx, ebx
je 0x4262fa
mov eax, ebx
mov byte [esi + 0x69], 1
neg eax
mov ecx, eax
cdq
xor eax, edx
shr ecx, 0x1f
sub eax, edx
mov dword [ebp - 0x20], ecx
mov byte [esi + 0x68], cl
mov ecx, dword [esi + 0x5c]
cdq
idiv ecx
mov dword [esi + 0x64], eax
test edx, edx
je 0x4262cf
inc eax
mov dword [esi + 0x64], eax
cmp byte [ebp - 0x20], 0
je 0x4262d7
neg ecx
lea eax, [ebx + ecx]
mov ecx, dword [esi + 0x58]
mov dword [esi + 0x60], eax
cmp eax, ecx
jg 0x4262eb
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jge 0x4262ee
mov dword [esi + 0x60], ecx
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax + 0x24]
dec dword [esi + 0x64]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push dword [edi + 0x678]
call esi
push 5
push dword [edi + 0x67c]
call esi
push 0
push 6
push 0x7e9
push dword [edi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [edi + 0x818], 8
lea esi, [edi + 0x804]
jb 0x426337
mov esi, dword [esi]
mov ebx, dword [edi + 0x6a0]
call fcn.004595b0
mov ecx, dword [eax + 0x168]
test ecx, ecx
je 0x42640c
mov eax, dword [ecx]
push 0
push 0
push esi
push 0
push ebx
push 4
push 0x7dc
call dword [eax + 4]
jmp 0x42640c
cmp eax, 3
jne 0x42638d
cmp dword [edi + 0x6a0], eax
jne 0x426407
push 0
call fcn.00428b40
mov ecx, edi
call fcn.00428a60
jmp 0x42640c
cmp eax, 5
je 0x426383
cmp eax, 7
je 0x42639c
cmp eax, 8
jne 0x42640c
mov esi, dword [edi + 0x690]
test esi, esi
je 0x426405
mov ebx, dword [esi + 0x60]
cmp ebx, 0x32
je 0x426405
mov eax, 0x32
mov byte [esi + 0x69], 1
sub eax, ebx
mov ecx, eax
cdq
xor eax, edx
shr ecx, 0x1f
sub eax, edx
mov dword [ebp - 0x20], ecx
mov byte [esi + 0x68], cl
mov ecx, dword [esi + 0x5c]
cdq
idiv ecx
mov dword [esi + 0x64], eax
test edx, edx
je 0x4263da
inc eax
mov dword [esi + 0x64], eax
cmp byte [ebp - 0x20], 0
je 0x4263e2
neg ecx
lea eax, [ebx + ecx]
mov ecx, dword [esi + 0x58]
mov dword [esi + 0x60], eax
cmp eax, ecx
jg 0x4263f6
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jge 0x4263f9
mov dword [esi + 0x60], ecx
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax + 0x24]
dec dword [esi + 0x64]
mov ecx, edi
call fcn.00428860
mov byte [edi + 0x7e0], 0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00471876
mov esp, ebp
pop ebp
ret