Function at 0x426080
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59f050
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x627a40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x44], ecx
push 0x44
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x48], 0
push 0
push eax
call fcn.00576f50
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0x44
xor eax, eax
mov dword [ebp - 0x14], 7
add esp, 0xc
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x58], xmm0
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], eax
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 1
call fcn.004368d0
test al, al
je 0x426120
rol bh, 0x85
invalid
xchg byte [ecx + 0x19], bl
mov esp, 0x8ec0fda7
sbb dword [edi - 0x60], 0xfffffff3
mov word [esi - 0x1738f463], fs
dec ebx
add eax, dword [ecx]
add byte [eax + eax*8 + 0xf491b74], al
mov word [ebp + 0x35da1b0c], ss
jne 0x4260ca
call fcn.00436470
test al, al
je 0x426144
dec ecx
jl 0xda5d6dc5
xor eax, 0xe8449775
pushal
cmp byte [eax - 0x7f1935d6], 0x8a
invalid
inc esp
call 0x57ee399
sub cl, dl
out 0x80, al
mov bh, dh
xchg esi, eax
in al, dx
mov word [edi + 0x49], ss
call fcn.00436470
test al, al
je 0x426168
imul edi, dword [ebx], 0xfe240ad1
das
ret 0xcd2
push 2
push 0x61c648
lea ecx, [ebp - 0x40]
call fcn.00403d10
cmp dword [ebp - 0x30], 0
jne 0x4261bb
mov edx, dword [ebp - 0x44]
cmp word [edx], 0
jne 0x426197
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00403d10
jmp 0x426218
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4261a0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00403d10
jmp 0x426218
push 1
push 0x61bf64
lea ecx, [ebp - 0x28]
call fcn.00403d10
mov edx, dword [ebp - 0x44]
cmp word [edx], 0
jne 0x4261d7
xor ecx, ecx
jmp 0x4261ef
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4261e0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.0040be00
push 2
push 0x61bf5c
lea ecx, [ebp - 0x28]
call fcn.0040be00
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040bf30
call fcn.00436320
test al, al
je 0x426241
pop edx
xor bl, byte [edi]
lds eax, [ebx - 0x104c6f75]
test eax, 0x8cbf3650
dec esi
mov dword [0x3da81c47], eax
invalid
call fcn.00435f30
test al, al
je 0x426266
ljmp 0x74c0:0x840000fc
mov eax, 0x7434e857
and ecx, edi
invalid
sbb dword [ecx], ecx
jmp 0x426242
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0x67
call int.00422020
add esp, 8
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4262af
xor esi, esi
jmp 0x4262fd
call fcn.00435de0
test al, al
je 0x4262c9
xchg ebp, eax
mov eax, 0x622664b2
xor al, 0x52
jp 0x42625e
sub al, 0xd
mov ah, 0
das
push edx
imul ebp, eax, 0x10132
call fcn.00436400
test al, al
je 0x4262e8
test al, 0xe8
add ebp, ecx
test bh, ch
push 0x61
stosb byte es:[edi], al
pop ss
jb 0x42632c
pop ebx
add byte [ecx + 0x4670e62], ah
adc al, 0x5a
push dword [ebp - 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x54]
call esi
mov esi, 1
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x426312
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00404090
mov ecx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
cmp ecx, 8
jb 0x42633b
inc ecx
push ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
call fcn.00404090
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00570ea9
mov esp, ebp
pop ebp
ret