Function at 0x4105d4
Capabilities:
Create process on windows

Disassembly:
pop es
or al, 0x54
jae 0x41064e
imul edx, dword [ebp + 0x52], 0x62614c4c
insb byte es:[edi], dx
or byte [0xc7a40041], al
inc esp
add byte [esi], bl
add byte [ebx], cl
push ebx
push ebp
dec ecx
push ebp
push edx
dec esp
dec esp
popal
bound esp, qword [ebp + 0x6c]
adc al, 0
les ecx, [eax + 0x610047]
add bh, bh
xchg esp, eax
retf 0x47
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x4307000d], al
popal
jo 0x4106d2
imul ebp, dword [edi + 0x6e], 0x4414dc
insd dword es:[edi], dx
add dword [eax], eax
call [eax + eax]
inc byte [ecx]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], 0
add byte [eax], al
push cs
add byte [eax], cl
inc ecx
jne 0x4106f3
outsd dx, dword [esi]
push ebx
imul edi, dword [edx + 0x65], 0x45cbdc
jo 0x41068a
add bh, bh
or cl, bl
inc edi
add byte [ecx + ebx*8], ah
inc edi
add byte [eax], al
add byte [eax], al
add byte [0xf800000], 0
add eax, 0x6f6c6f43
jb 0x410681
adc al, 0x44
add byte [eax], dl
add dh, bh
add byte fs:[eax], al
inc byte [edi + esi*8 + 0x47]
add byte [eax + 1], al
adc byte [eax], al
pop es
inc ebp
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x64]
fcom qword [esp + eax*2]
add byte [ecx - 0x47010000], bl
fadd dword [edi]
sbb al, 0x47
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x53080011], al
push 0x6948776f
outsb dx, byte [esi]
je 0x4106c6
adc al, 0x44
add al, ah
cmc
inc esp
add byte [esi + esi*8], bl
inc esp
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax], al
adc al, byte [eax]
or edx, dword [edx + esi*2 + 0x61]
outsb dx, byte [esi]
jae 0x41077a
popal
jb 0x410772
outsb dx, byte [esi]
je 0x4106ec
adc al, 0x44
add byte [edi], dl
add bh, bh
mov dh, dl
inc edi
add ah, ah
test dword [edi], 0x80000000
add dword [eax], eax
add byte [eax], al
adc eax, dword [eax]
pop es
push esi
imul esi, dword [ebx + 0x69], 0xdc656c62
adc al, 0x44
fcom qword [esp + eax*2]
add byte [edi + 1], ch
add bh, bh
js 0x410731
inc esp
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax], al
adc al, 0
or byte [edi + 0x6f], dl
jb 0x4107b4
push edi
jb 0x4107b4
jo 0x41078d
push esi
inc ebp
add byte [eax + eax], bh
jmp dword [eax]
jne 0x4107e4
dec ebp
outsb dx, byte gs:[esi]
jne 0x410791
add byte [edi], 0x88
add dword [eax], eax
push dword [ecx + ebx*8 + 0x47]
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax], al
inc edi
add byte [eax + 0x74ff0001], cl
fld dword [edi]
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], al
push es
add byte [esi], al
inc ebx
jne 0x410808
jae 0x410807
jb 0x410806
mov byte [edi], al
mov word [ecx], es
add bh, bh
fmul qword [edx]
inc ecx
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x55030016], al
push ebp
push edx
dec esp
fmul st(3), st(0)
inc ebp
add byte [eax - 0x6f00ffff], dl
add bh, bh
nop
add dword [eax], eax
inc dword [ecx]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], 0
add byte [eax + 0x460e0017], al
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x41081f
outsd dx, dword [esi]
jbe 0x41083f
jb 0x41081f
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0x4107bd
retf
xchg esp, eax
add dword [eax], eax
jmp [edx + ecx + 0x10041]
lodsb al, byte [esi]
or al, byte [ecx]
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax - 0x80000000], al
sbb byte [eax], al
or eax, 0x746e6f46
dec esp
imul ebp, dword [esi + 0x6b], 0x6f6c6f43
outsd dx, dword [esi]
jb 0x41084d
inc esp
iretd
sbb byte [ecx], 0
add al, 0x46
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x4107e8
pop eax
inc edx
add byte [eax], ah
add dword [eax], eax
jmp dword [eax]
sbb al, byte [eax]
pop es
dec edi
outsb dx, byte [esi]
inc ebx
insb byte es:[edi], dx
imul esp, dword [ebx + 0x6b], 0x478a28