Function at 0x4258a2
Capabilities:
Create process on windows

Disassembly:
push 0x98
mov eax, 0x5a1e1a
call fcn.004348d9
mov eax, dword [ebp + 8]
xor ebx, ebx
push 0x44
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
pop esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x18]
push esi
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xa4]
push ebx
push eax
mov dword [ebp - 0x48], ebx
call fcn.00445350
push 0x10
lea eax, [ebp - 0x60]
mov dword [ebp - 0xa4], esi
push ebx
push eax
call fcn.00445350
add esp, 0x18
mov dword [ebp - 0x18], ebx
xor eax, eax
mov word [ebp - 0x28], ax
push 7
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 1
call fcn.0043a965
test al, al
je 0x425929
and dword [ebp + 0xc], ecx
fldenv [esi]
wait
out dx, al
and dword fs:[edi], esp
cwde
sti
lodsb al, byte [esi]
xchg byte [esp + edx*4], al
aam 0x68
call fcn.0043a629
test al, al
je 0x42594d
dec edi
push eax
adc dword [edx], 0xffffff95
dec ebx
dec esp
mov dword [0x707b32b1], eax
adc dl, ch
sbb byte ds:[edx + 0x6b0c182e], 0x1c
invalid
call fcn.0043a629
test al, al
je 0x425971
stosd dword es:[edi], eax
jns 0x42598b
sahf
inc esp
ror dword [ebp - 0x170f53b3], 1
inc esi
push ebp
adc esp, dword [edi + 0x51]
invalid
mov ebx, dword [ebp - 0x4c]
xor esi, esi
test ebx, ebx
je 0x425994
cmp word [ebx], si
jne 0x425983
mov eax, esi
jmp 0x42598a
push ebx
call fcn.004532f1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x40]
call fcn.00401a60
or edi, 0xffffffff
cmp dword [ebp - 0x30], 0
jne 0x4259bc
mov ebx, dword [ebp - 0x44]
cmp word [ebx], si
jne 0x4259a9
mov eax, esi
jmp 0x4259b0
push ebx
call fcn.004532f1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.00401a60
jmp 0x425a12
mov esi, 0x5a5ff0
push esi
call fcn.004532f1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00401a60
mov ebx, dword [ebp - 0x44]
xor eax, eax
cmp word [ebx], ax
je 0x4259e3
push ebx
call fcn.004532f1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.004054d0
mov esi, 0x5a643c
push esi
call fcn.004532f1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.004054d0
push edi
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405600
invalid
call fcn.0043a55a
test al, al
je 0x425a3b
invalid
call fcn.0043a9ef
test al, al
je 0x425a63
int 0x58
int1
jp 0x425a11
sub byte [eax + 0x72ed1deb], bh
mov word [ecx + 0x4b], gs
dec esi
pop eax
invalid
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0x67
call fcn.0043b212
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
pop ecx
cmovae eax, dword [ebp - 0x28]
xor ebx, ebx
pop ecx
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0xa4]
push ecx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x425aaa
mov esi, ebx
jmp 0x425b2b
cmp byte [ebp + 0x10], bl
je 0x425ac0
cmp dword [ebp + 0x14], ebx
cmovg edi, dword [ebp + 0x14]
push edi
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword [ebp - 0x50]
test esi, esi
je 0x425add
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x425add
mov eax, dword [ebp - 0x48]
mov dword [esi], eax
call fcn.0043a66e
test al, al
je 0x425af7
ret 0xcd4a
call fcn.0043a5e4
test al, al
je 0x425b16
sysret
push dword [ebp - 0x60]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x5c]
call esi
xor esi, esi
inc esi
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.004019a0
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.004019a0
mov eax, esi
call fcn.00434894
ret