Function at 0x433c0f
Capabilities:
Create process on windows

Disassembly:
push 0x128
mov eax, 0x4df036
call fcn.004b698d
mov edi, ecx
mov esi, dword [ebp + 8]
push ecx
push ecx
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x3c], esi
call fcn.0042b405
and dword [ebp - 4], 0
lea ebx, [edi + 0x2c]
push esi
push ecx
mov edx, ebx
lea ecx, [ebp - 0x124]
call fcn.0042c5a2
mov edx, str._psiphonStatstrue
mov ecx, eax
call fcn.0042c718
mov edx, str._proxyPort
mov ecx, eax
call fcn.0042c718
pop ecx
mov ecx, eax
call fcn.004322a5
mov edx, str._disableLocalInterfacetrue
mov ecx, eax
call fcn.0042c718
mov edx, str._logLevel1
mov ecx, eax
call fcn.0042c718
cmp dword [edi + 0x28], 0
jle 0x433d26
push dword [edi + 0x28]
mov edx, str._socksParentProxy127.0.0.1:
push ecx
lea ecx, [ebp - 0x124]
call fcn.0042c718
pop ecx
mov ecx, eax
call fcn.004322a5
cmp dword [edi + 0x54], 0
jbe 0x433ce3
mov edx, str._splitTunnelingFile_
lea ecx, [ebp - 0x124]
call fcn.0042c718
lea edx, [edi + 0x44]
mov ecx, eax
call fcn.0042c5a2
mov edx, 0x644a2c
mov ecx, eax
call fcn.0042c718
mov edx, str._splitTunnelingDnsServer8.8.8.8
lea ecx, [ebp - 0x124]
call fcn.0042c718
lea edx, [edi + 0xac]
cmp dword [edx + 0x10], 0
jbe 0x433d26
lea ecx, [ebp - 0x2c]
call fcn.00426f1a
mov esi, eax
mov edx, str._psiphonServer
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x124]
call fcn.0042c718
mov edx, esi
mov ecx, eax
call fcn.0042c5a2
push 0
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0042889e
push 0x44
pop esi
push esi
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.004b9570
add esp, 0xc
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x58], 0x100
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.DLL_GetStdHandle]
mov dword [ebp - 0x4c], eax
lea ecx, [edi + 0x70]
or eax, 0xffffffff
lea edx, [ebp - 0x34]
mov dword [ecx], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0044e817
add esp, 0xc
test al, al
je 0x433eb1
push dword [ebp - 0x34]
mov esi, dword [sym.imp.KERNEL32.DLL_CloseHandle]
call esi
push dword [ebp - 0x38]
call esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x134]
call fcn.0042b3ba
cmp dword [eax + 0x14], 8
jb 0x433dad
mov eax, dword [eax]
cmp dword [ebx + 0x14], 8
jb 0x433db5
mov ebx, dword [ebx]
lea ecx, [edi + 0x60]
push ecx
lea ecx, [ebp - 0x84]
push ecx
xor ecx, ecx
push ecx
push ecx
push 0x8000200
push 1
push ecx
push ecx
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateProcessW]
mov ebx, eax
lea ecx, [ebp - 0x2c]
push 0
neg ebx
push 1
sbb bl, bl
call fcn.0042889e
add bl, 1
je 0x433e02
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.LocalProxy::StartPolipo
push str._s___Polipo_CreateProcess_failed___d_
jmp 0x433ec2
push dword [edi + 0x64]
call esi
push dword [ebp - 0x48]
xor ebx, ebx
mov dword [edi + 0x64], ebx
call esi
test eax, eax
jne 0x433e3a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push 0x146
push str.LocalProxy::StartPolipo
push str._s:_d___CloseHandle_failed___d_
push ebx
push ebx
call fcn.00438d22
add esp, 0x18
jmp 0x433ece
push dword [ebp - 0x44]
call esi
test eax, eax
jne 0x433e51
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push 0x14b
jmp 0x433e21
push 0x1388
push dword [edi + 0x60]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov ecx, dword [ebp - 0x3c]
lea eax, [edi + 0x14]
push eax
push dword [edi + 0x60]
mov edx, 0x4e20
call fcn.0044e5a6
mov esi, eax
pop ecx
pop ecx
cmp esi, 0x3e3
jne 0x433e8d
push 0x663330
lea eax, [ebp - 0x2d]
push eax
call fcn.004b9a9e
test esi, esi
je 0x433ea2
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push esi
push str.Failed_to_start_the_HTTP_proxy___d___d_
push ebx
push ebx
jmp 0x433ec6
lea ecx, [ebp - 0x134]
call fcn.0042a7cc
mov al, 1
jmp 0x433edb
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.LocalProxy::StartPolipo
push str._s___CreatePolipoPipe_failed___d_
push 0
push 0
call fcn.00438d22
add esp, 0x14
lea ecx, [ebp - 0x134]
call fcn.0042a7cc
xor al, al
call fcn.004b6937
ret 4