Function at 0x426080
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59f050
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x627a40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x44], ecx
push 0x44
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x48], 0
push 0
push eax
call fcn.00576f50
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0x44
xor eax, eax
mov dword [ebp - 0x14], 7
add esp, 0xc
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x58], xmm0
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], eax
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 1
call fcn.004368d0
test al, al
je 0x426120
js 0x42615b
and dword [ebp + 0x5bed1bb3], esi
dec esp
loopne 0x426185
ret 0xce9e
call fcn.00436470
test al, al
je 0x426144
invalid
call fcn.00436470
test al, al
je 0x426168
mov al, 0x10
xchg ecx, eax
mov eax, dword [0x52c1fd0f]
jns 0x4261cb
rcl byte [esp + eax*8 + 0x79]
mov al, byte [0xe06ca546]
popfd
xchg ecx, eax
ret 0x7f87
push 2
push 0x61c648
lea ecx, [ebp - 0x40]
call fcn.00403d10
cmp dword [ebp - 0x30], 0
jne 0x4261bb
mov edx, dword [ebp - 0x44]
cmp word [edx], 0
jne 0x426197
adc dword [ebx], esi
leave
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00403d10
jmp 0x426218
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4261a0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00403d10
jmp 0x426218
push 1
push 0x61bf64
lea ecx, [ebp - 0x28]
call fcn.00403d10
mov edx, dword [ebp - 0x44]
cmp word [edx], 0
push ebp
mov esp, 0x3a8366
jne 0x4261d7
xor ecx, ecx
jmp 0x4261ef
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4261e0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.0040be00
push 2
push 0x61bf5c
lea ecx, [ebp - 0x28]
call fcn.0040be00
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040bf30
jmp [edx - 1]
call fcn.00436320
test al, al
je 0x426241
cmp ecx, dword [edx]
shr byte [eax], cl
push eax
pop ds
jle 0x42629a
aam 0xc7
inc ebp
add dword [edi], ecx
jb 0x426207
and edx, dword [esi]
pop esp
mov bl, 0xc5
retf
call fcn.00435f30
test al, al
je 0x426266
lds eax, [esp + esi*8 + 0x1569cd50]
inc esp
fidivr word [edx]
xchg ebx, eax
invalid
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0x67
call fcn.00422020
add esp, 8
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4262af
xor esi, esi
jmp 0x4262fd
call fcn.00435de0
test al, al
je 0x4262c9
mov word [edi], ss
or bh, byte [ebx - 0x4a517f8d]
movsb byte es:[edi], byte [esi]
dec ebx
lodsd eax, dword [esi]
out 0xdd, al
std
aad 0x79
mov al, ch
xor al, byte [ecx]
add dword [eax], eax
call fcn.00436400
test al, al
je 0x4262e8
jae 0x42634c
lahf
rol ah, 0x76
cmp al, cl
salc
into
inc ecx
test al, 0xc7
outsb dx, byte [esi]
out 0xe0, al
retf
push dword [ebp - 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x54]
call esi
mov esi, 1
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x426312
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00404090
mov ecx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
cmp ecx, 8
jb 0x42633b
inc ecx
push ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
call fcn.00404090
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00570ea9
mov esp, ebp
pop ebp
ret
dec ebp
invalid