Function at 0x10038592
Capabilities:
Create process on windows

Disassembly:
push 0x36c
mov eax, 0x1003ebf1
call fcn.1003b954
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp + 0x10]
push 0x208
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x218]
push 0
push eax
mov byte [ebp - 0x35d], 0
call sub.VCRUNTIME140.dll_memset
mov edi, dword [0x100671bc]
add esp, 0xc
mov eax, dword [edi]
push 0x104
mov esi, dword [eax + 0x20]
lea eax, [ebp - 0x218]
push eax
push 0
mov ecx, esi
call dword [0x1004363c]
mov ecx, edi
call esi
push ebx
push str._client
lea eax, [ebp - 0x24c]
push eax
call fcn.1000e364
mov esi, dword [ebp - 0x344]
lea ecx, [ebp - 0x234]
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
call fcn.10004863
push ebx
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 1
push eax
mov ecx, esi
call fcn.10022e5f
mov esi, 0x1004a038
cmp eax, 0xffffffff
jne 0x100211f4
push esi
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x35c]
push eax
call fcn.1000e30d
mov ecx, eax
cmp dword [ebp - 0x220], 8
lea eax, [ebp - 0x234]
push dword [ebp - 0x224]
cmovae eax, dword [ebp - 0x234]
push eax
mov byte [ebp - 4], 2
call fcn.10009d42
push eax
lea ecx, [ebp - 0x378]
call fcn.10004b00
mov byte [ebp - 0x344], bl
lea eax, [ebp - 0x378]
push dword [ebp - 0x344]
lea ecx, [ebp - 0x234]
push eax
call fcn.1000be3f
lea ecx, [ebp - 0x378]
call fcn.100034e3
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 1
call fcn.100034e3
call fcn.10020154
test al, al
je 0x10021317
push 0xb0
lea eax, [ebp - 0x340]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x340]
push 1
call fcn.1000e09b
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 3
push eax
push esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.1000e3c0
push eax
call fcn.1000e3c0
push eax
call fcn.1000e546
xor eax, eax
lea edi, [ebp - 0x354]
stosd dword es:[edi], eax
push 0x44
pop esi
push esi
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x290]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x290], esi
lea eax, [ebp - 0x378]
lea ecx, [ebp - 0x328]
push eax
call fcn.1000e1d2
cmp dword [ebp - 0x364], 8
lea ecx, [ebp - 0x354]
push ecx
lea ecx, [ebp - 0x290]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x378]
cmovae eax, dword [ebp - 0x378]
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
lea ecx, [ebp - 0x378]
mov esi, eax
call fcn.100034e3
test esi, esi
je 0x10021313
cmp dword [ebp - 0x350], 0
je 0x100212dc
push dword [ebp - 0x350]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x354], 0
je 0x100212f1
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, byte [ebp - 0x35d]
lea ecx, [ebp - 0x2d8]
call fcn.1000e069
lea ecx, [ebp - 0x2d8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void_]
jmp 0x1002139b
mov bl, 1
jmp 0x100212f7
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x288]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
mov edi, dword [0x100671bc]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
add esp, 0xc
cmp dword [ebp - 0x220], 8
lea eax, [ebp - 0x234]
mov dword [ebp - 0x288], esi
cmovae eax, dword [ebp - 0x234]
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x284], 0x8000
mov dword [ebp - 0x27c], 0x1004a03c
mov dword [ebp - 0x26c], 5
mov eax, dword [edi]
mov esi, dword [eax + 0x164]
lea eax, [ebp - 0x288]
push eax
mov ecx, esi
call dword [0x1004363c]
mov ecx, edi
call esi
test eax, eax
setne bl
test bl, bl
je 0x100213a3
xor eax, eax
jmp 0x100213a9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x220]
cmp eax, 8
jb 0x10021404
mov ecx, dword [ebp - 0x234]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x344], ecx
cmp eax, 0x1000
jb 0x100213fb
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x344]
push eax
call fcn.100036a7
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x344]
push eax
push ecx
call fcn.10018283
pop ecx
pop ecx
and dword [ebp - 0x224], 0
lea ecx, [ebp - 0x24c]
xor eax, eax
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.100034e3
mov al, bl
call fcn.1003b912
ret 0xc
push ebp
mov ebp, esp
pop ebp
jmp 0x100210b8