Function at 0x40cf70
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x740
mov eax, dword [0x4b6e40]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x4bb1a0], 0
push ebx
mov ebx, dword [ebp + 8]
jne 0x40d25f
push 0x44
lea eax, [ebp - 0x740]
push 0
push eax
call fcn.0041c510
push 0x100
push 0
push 0x4bc370
call fcn.0041c510
lea eax, [ebp - 0x304]
push 0x100
push eax
call fcn.00401960
add esp, 0x20
test eax, eax
je 0x40d079
push 0x1f3
lea eax, [ebp - 0x4f7]
push 0
push eax
mov byte [ebp - 0x4f8], 0
call fcn.0041c510
lea eax, [ebp - 0x304]
push eax
push str.Hosted_server_found__s_n
call fcn.0041bca0
push 0x1f4
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.004014c4
add esp, 0x20
test eax, eax
js 0x40d139
lea eax, [ebp - 0x4f8]
push eax
push str.Hosted_server_info:_n_s_n_n
call fcn.0041bca0
push str.WINRSH_SERVER
push 0x1f4
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x4f8]
push eax
call fcn.00401109
push 0x100
lea eax, [ebp - 0x204]
push eax
push 0x100
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x6ec]
push eax
call fcn.00401492
add esp, 0x2c
jmp 0x40d139
push 0x100
lea eax, [ebp - 0x204]
push eax
push str.WINRSH_SERVER
push 0
call fcn.004017d5
add esp, 0x10
test eax, eax
jne 0x40d12b
push esi
push edi
lea eax, [ebp - 0x204]
push 0x20
push eax
call fcn.0041c2a0
mov edi, eax
lea eax, [ebp - 0x204]
push 9
push eax
call fcn.0041c2a0
add esp, 0x10
mov esi, eax
test edi, edi
je 0x40d0df
push 0x100
push edi
call fcn.00401037
add esp, 8
test eax, eax
je 0x40d0df
push 0x100
push edi
jmp 0x40d109
test esi, esi
je 0x40d0fd
push 0x100
push esi
call fcn.00401037
add esp, 8
test eax, eax
je 0x40d0fd
push 0x100
push esi
jmp 0x40d109
push 0x100
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004014ec
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
call fcn.00401771
add esp, 4
pop edi
pop esi
jmp 0x40d139
mov byte [ebp - 0x204], 0
mov byte [ebp - 0x104], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call fcn.0040128a
add esp, 8
push eax
push str._s_smupdate.exe__server_ip__s__parent_pid__lu
push 0x100
push 0x4bc370
call fcn.0041c5d0
push 0
push 0
call fcn.0040128a
push eax
push str._s_smupdate.exe
push 0x100
push 0x4bc4a8
call fcn.0041c5d0
push 0x4bc370
push str.Starting_SMUPDATE_____s_n
call fcn.0041bca0
push 0x4bc370
push str.Starting_SMUPDATE_____s
push 0x495ff1
push 1
push 3
call fcn.004017f8
add esp, 0x4c
lea eax, [ebp - 0x740]
push 0x44
push 0
push eax
call fcn.0041c510
add esp, 0xc
xor eax, eax
mov word [ebp - 0x710], ax
lea eax, [ebp - 0x6fc]
push eax
lea eax, [ebp - 0x740]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
xorps xmm0, xmm0
push 0x4bc370
push 0x4bc4a8
mov dword [ebp - 0x740], 0x44
mov dword [ebp - 0x714], 1
movq qword [ebp - 0x6fc], xmm0
movq qword [ebp - 0x6f4], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x40d252
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SMUPDATE_Create_Process_Error__ld
push 0x495ff1
push 1
push 3
call fcn.004017f8
add esp, 0x14
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041c3d0
mov esp, ebp
pop ebp
ret
push 0
push 0
push 0x10
push ebx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.0041c3d0
mov esp, ebp
pop ebp
ret