Function at 0x4067f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x15c
lea ebx, [ebp - 0x11c]
mov dword [esp + 8], 0x104
mov dword [esp + 4], ebx
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
test eax, eax
je 0x406832
mov edi, str.int.exe
mov ecx, 8
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
jne 0x406840
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [0x18210a4]
test ecx, ecx
jne 0x407230
nop
nop
add byte [ecx], al
lea eax, [esi]
add eax, 0x5e0f05e8
add eax, 0xd048b0b
cld
add eax, dword [eax + eax]
add byte [eax], al
or byte [ebx], cl
lea ecx, [ecx]
add al, 2
add byte [eax], al
add byte [eax], cl
or eax, dword [ecx + 0xc]
add byte [ecx + eax + 0xb], dh
or byte [ebx], 0xe
nop
add byte [ebx], al
add byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], cl
add edi, eax
pop es
add esi, dword [ebx + 2]
or byte [eax + ecx + 9], al
test byte [eax], cl
add eax, 0x8000000
or eax, 0x30009bb
add byte [eax], al
add byte [edi + eax], cl
inc ebp
sldt word [eax]
add al, 0x30
or byte [ecx], cl
push ebp
push cs
add al, 0x88
add byte [esi], al
inc esi
push es
or dh, byte [eax]
movsd dword es:[edi], dword [esi]
add ecx, dword [0xff0f0f]
add byte [ebx], ch
or byte [0xff050e34], cl
or esi, dword [ebp + 0xe]
add al, 0x8b
add al, 5
adc byte [edi], cl
wrmsr
push cs
or byte [ecx + 0xd450d0c], dh
or al, 0x8d
add al, 5
rol byte [0x507ff00], 1
ror byte [edi], 0xf
jne 0x4068e3
add al, 0x52
add eax, 0x404c701
and al, 0
or byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc eax
or byte [ecx], cl
dec ebp
str word [ecx + 0x8ec0504]
or dword [ebx], eax
jecxz 0x406906
ud2
add al, 0x99
or byte [ebx], al
loop 0x40690f
rdpmc
or al, 2
push es
add al, byte [esi]
add al, 0x89
add byte [0], cl
add byte [eax], al
pop ecx
add eax, 0xc055e0f
or bh, bh
add eax, 0x400c20b
add byte [eax], cl
or ecx, dword [eax]
or byte [ecx], cl
push cs
or byte [ebx], al
rol byte [0xb055e0f], 0x8b
push cs
add eax, 0x14020c5d
add byte [eax], al
add byte [eax], al
add byte [eax], al
add eax, 0x4048b0d
and al, 0
or al, 0x5f
or byte [ecx], cl
sahf
add byte [eax + ecx], al
lea eax, [ebx + ecx]
or byte [ebx], al
add edx, edx
add al, 1
mov eax, 0x8105000a
push cs
or al, 0xc
add byte [0xa1000000], al
add eax, 0x9040a0c
add byte [ecx], cl
loopne 0x406982
add ecx, dword [edi]
add eax, 0x30fe809
syscall
or al, 0xe3
lsl eax, word [ebp + 0xf]
or al, 4
or byte [ebx], cl
jne 0x406996
add al, 0x85
clts
jne 0x40698e
add al, 0x33
or eax, dword [esi + 1]
add byte [ebx + 0x810080e], al
or eax, 0x830c0048
or byte [eax], dl
or byte [0x830c0048], cl
or al, 0xa
add al, 0xf
add dword [ecx], eax
pop es
lsl ecx, word [edi]
pop es
push cs
inc ebp
or eax, dword [esi]
add byte [edi], cl
add dword [edi], ecx
or dword [0xe50b08c0], eax
add eax, 0x806c30d
cwde
push es
add byte [edi], cl
or dword [ebx], 0xd
js 0x4069d5
push cs
dec dword [edi]
movntps xmmword [edi], xmm0
add eax, 0x20f0f27
or al, 0
add byte [eax + 0xc], ch
or byte [edx + 0xe000405], bh
or al, 8
mov edx, 0xe000405
or dh, bh
add dword [ecx], eax
add ebx, dword [eax]
push es
or byte [eax], al
add byte [ecx], al
add byte [eax], al
add bh, bh
or dword [eax], eax
enter 0x100, 0xc
add ebp, dword [edx]
add bh, bh
pop es
add eax, 0x7e080e08
invalid
call 0x403470
test eax, eax
jne 0x408680
mov edx, dword [0x18210a4]
test edx, edx
jne 0x409981
nop
nop
nop
nop
nop
pop ebp
or al, 2
or al, 0
add byte [eax + 5], dl
push es
call 0xf827760
push cs
dec dword [edi]
add al, 0x64
or byte [ecx], cl
or eax, 0
add byte [eax], al
add eax, 0xb055e09
in al, dx
push es
or al, byte [eax]
push es
or byte [eax], al
add byte [edx], ch
add ecx, dword [edi]
jne 0x407283
add al, 0x85
or eax, 0x3027502
mov ecx, dword [edi + eax]
sub ecx, dword [edx + eax]
inc ebp
add byte [eax], cl
xor ecx, dword [0x1008902]
mov eax, dword [eax + 0x4109080c]
call fcn.00a27dad
add byte [eax], al
add eax, 0x604c706
add byte fs:[eax], al
add byte [edi], cl
dec dword [esi]
or byte [edi + ecx + 4], al
dec dword [edi]
shufps xmm0, xmmword [eax + 0x100300fc], 0xa
or byte [edx], al
add byte [edi], cl
test byte [ecx], cl
push cs
add byte [eax], al
add byte [eax], al
or byte [ebx], al
mov esi, 0xd85000f
or esi, dword [ebx + eax + 8]
test dword [edi], ecx
pcmpeqb mm0, qword [ebx]
add al, 0x85
ud2
mov dword [esp], edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
sub esp, 4
test eax, eax
jne 0x4099b9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [0x18210a4]
test edx, edx
je 0x408f91
cmp eax, 0x4c7
je 0x40a3a8
mov eax, edx
jmp 0x408685
mov eax, dword [0x18210a4]
test eax, eax
jne 0x406832
nop
nop
nop
mov eax, dword [eax]
push es
lea ecx, [eax]
or eax, 0xff0d0fd0
invalid
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add al, 0x75
add eax, dword [ebx + ecx*4]
invlpg byte [ecx + 0x59f040f]
add dword [eax], eax
add cl, byte [ebx]
or edi, dword [esi + 1]
add byte [ebx], ch
pop es
push cs
and byte [eax], cl
or dword [edx + eax + 4], edi
or al, 7
or dword [esi + 0xf], eax
cvtdq2ps xmm1, xmmword [eax]
or cl, byte [eax]
or byte [eax], al
stc
push es
push es
je 0x408fce
add eax, 0x8a000080
or al, 8
or byte [esi], 1
ror byte [eax], 0
rol dword [eax + eax], 0x24
add eax, dword [edx]
xor ecx, dword [eax + eax]
mov eax, dword [0xb081007]
adc al, 9
add eax, 0x40d0a30
or eax, 0x650308e3
or eax, 0x60c000c
inc ebp
push cs
add al, byte [eax]
or byte [edi + eax + 4], ah
or al, byte [esi]
or ah, byte [ebp + eax]
push ecx
invalid
lea edx, [ebp - 0x158]
mov ecx, 0xf
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x158], 0x3c
mov dword [ebp - 0x14c], str.runas
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x13c], 1
jmp 0x408642
cmp dword [0x18210a4], 0
jne 0x40a3a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
invalid
mov dword [esp], 0
call sub.msvcrt.dll_exit
lea esi, [esi]
lea edi, [edi]