Function at 0x18683412
Capabilities:
Create process on windows

Disassembly:
jno 0x18683366
cli
invalid
jb 0x186832f9
cmp dword [edi + 0x66a61d5], ecx
sub eax, edi
cmp byte [edx], dh
adc al, 0x57
cmp al, 0x58
fimul dword [esi + 0x219977a5]
inc eax
mov ah, 0x78
mov word [edx + 0x343ff57d], es
inc edx
mov ah, 0x14
lds eax, [eax - 0xa15eb42]
test al, 0x6d
adc bh, byte [ecx]
jne 0x1868334a
sbb ecx, dword [esi]
push cs
inc edi
in eax, 0xb0
and bh, byte [ebp - 0x49846d12]
sub dword [esi + eax*4 - 0xcee758f], esp
in al, dx
mov dl, byte [ecx]
in al, dx
sub al, 0xd5
insb byte es:[edi], dx
test al, 0x71
xchg ch, dh
loopne 0x18683379
imul ecx, dword [ebx - 0x614233d], 0xffffff9f
dec edx
js 0x1868331a
invalid
xchg ebx, eax
retf 0x64da
cmp eax, 0x88d041f8
add dword [ecx], 0x2d281f91
sub eax, dword [ebp + 0x3f]
pop esp
adc byte [edi], bh
out 0xad, eax
dec ebx
mov esi, 0x3adc5c71
jno 0x18683418
fdivr qword [edx]
hlt
inc ebx
push ecx
cmp al, 0x60
int 0xb2
sbb byte [esi + 0x50ff7dff], dh
push eax
adc cl, byte [edx]
sub bh, cl
push ds
loopne 0x18683358
fist dword [edx - 0x20439d6f]
add al, 0x74
cmp ch, byte [esi - 0x47171c74]
mov al, byte [0xb3c89cee]
xchg esp, eax
inc esp
and eax, 0xc4328925
lcall 0x9811, 0x53b17b5e
ror dword [edx], cl
adc al, 0x4f
pop esi
jnp 0x186833a5
push ebx
adc dword [eax + 0x4f140ad3], ebx
ljmp 0xd56e:0x7cc735de
xor eax, 0xd56e7cc7
insb byte es:[edi], dx
jns 0x186833ba
int3
adc eax, 0xb6390739
xor bh, byte [edx - 0x57]
jp 0x186833c3
mov ch, 8
popfd
xchg ecx, eax
cmpsb byte [esi], byte es:[edi]
xchg byte [ecx + 0x5fa4a344], bl
and dl, dl
mov dword [0xd2205fa4], eax
aam 0xa5
dec esi
sbb ecx, ecx
lahf
ja 0x186833ce
out 0xe3, al
inc esi
jns 0x186834a3
push ebx
adc bh, 0xcc
mov eax, dword [0xca4cecda]
sub al, 0xa3
stosd dword es:[edi], eax
mov ebx, 0x63a771b6
out dx, eax
js 0x186833f1
pop edx
jae 0x18683423
and edx, dword [eax - 0x79]
ljmp 0xeb75
xor al, 0xf9
out 0x57, al
jne 0x18683442
pop eax
fstp dword [eax + edi*2 - 0x3a]
jb 0x186834c2
dec ebx
inc ecx
sub bl, byte [edx]
insb byte es:[edi], dx
inc edi
in al, 0x7f
inc eax
js 0x186833fd
clc
mov esp, 0xc173d9cc
inc edx
jb 0x18683476
mov byte [ebx], bh
in eax, 0xd1
aas
stosb byte es:[edi], al
mov edi, 0xceeadace
pop ecx
jl 0x186834d8
lds edi, [0x79bcd6bb]
mov dword [edi], ecx
adc al, 0xf2
lahf
lahf
dec edx
pop esi
pop edx
sbb eax, 0xb03d1c9a
xor ebp, dword [ebx + 0x4e77fa9a]
jl 0x18683451
push ds
movsd dword es:[edi], dword [esi]
add byte [eax], ch
pushfd
add eax, 0x2aac0b87
mov bl, 0x9e
int 0xf8
or ebp, dword [edx + ebp - 0x732614d]
and al, cl
call 0xde6a32b6
mov dh, 0x24
aas
test eax, 0xaa967daa
push 0xffffffffffffffd4
loopne 0x186834fe
push ebx
adc byte [edx - 0x6e], 0xf
pop ecx
cmpsd dword [esi], dword es:[edi]
in al, 0x1c
mov dword [ecx + 0x1b5c090a], edx
shr dword [eax], 0xcb
lea esp, [eax]
fidivr word [ecx]
invalid
xchg ebx, eax
push edi
or dword [ecx + 0x14f0900], ebx
cli
mov ecx, dword [ecx + 0xd]
xchg edi, eax
movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0x5d]
invalid
loop 0x1868355a
mov dword [ecx + 0x66b366d6], eax
jnp 0x18683489
and ax, 0xb5f4
pop ds
ficomp dword [eax + 0x48]
rcl dword [ebp - 0x73], cl
lodsb al, byte [esi]
and al, 0x38
invalid
jne 0x186834e4
lea eax, [ebp - 0x44]
mov dword [ebp - 0x74], 0x1885f8dc
mov dword [ebp - 0x70], eax
inc esi
lea eax, [ebp - 0x80]
mov dword [ebp - 0x64], esi
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x1868359e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c7
je 0x1868359e
mov ecx, dword [ebp + 0x1c4]
xor ecx, ebp
pop esi
call fcn.18615399
add ebp, 0x1c8
leave
ret
push esi
call fcn.1864d840
int3