Function at 0x42b7a2
Capabilities:
Create process on windows

Disassembly:
push 0x36c
mov eax, 0x4678d1
call fcn.0042f3c4
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp + 0x10]
push 0x208
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x218]
push 0
push eax
mov byte [ebp - 0x35d], 0
call fcn.00443f80
mov edi, dword [0x48c1ac]
add esp, 0xc
mov eax, dword [edi]
push 0x104
mov esi, dword [eax + 0x20]
lea eax, [ebp - 0x218]
push eax
push 0
mov ecx, esi
call dword [0x46d464]
mov ecx, edi
call esi
push ebx
push str._client
lea eax, [ebp - 0x24c]
push eax
call fcn.00402513
mov esi, dword [ebp - 0x344]
lea ecx, [ebp - 0x234]
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
call fcn.0040eba7
push ebx
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 1
push eax
mov ecx, esi
call fcn.00412113
mov esi, 0x4705ac
cmp eax, 0xffffffff
jne 0x40d154
push esi
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x35c]
push eax
call fcn.004024bc
mov ecx, eax
cmp dword [ebp - 0x220], 8
lea eax, [ebp - 0x234]
push dword [ebp - 0x224]
cmovae eax, dword [ebp - 0x234]
push eax
mov byte [ebp - 4], 2
call fcn.0040275d
push eax
lea ecx, [ebp - 0x378]
call fcn.00402389
mov byte [ebp - 0x344], bl
lea eax, [ebp - 0x378]
push dword [ebp - 0x344]
lea ecx, [ebp - 0x234]
push eax
call fcn.0040248e
lea ecx, [ebp - 0x378]
call fcn.004023e6
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 1
call fcn.004023e6
call fcn.0040c0bb
test al, al
je 0x40d26b
push 0xb0
lea eax, [ebp - 0x340]
push ebx
push eax
call fcn.00443f80
add esp, 0xc
lea ecx, [ebp - 0x340]
push 1
call fcn.00404b8d
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 3
push eax
push esi
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.00402c40
push eax
call fcn.00402c40
push eax
call fcn.00402deb
xor eax, eax
lea edi, [ebp - 0x354]
stosd dword es:[edi], eax
push 0x44
pop esi
push esi
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x290]
push eax
call fcn.00443f80
add esp, 0xc
mov dword [ebp - 0x290], esi
lea eax, [ebp - 0x378]
lea ecx, [ebp - 0x328]
push eax
call fcn.00412d02
cmp dword [ebp - 0x364], 8
lea ecx, [ebp - 0x354]
push ecx
lea ecx, [ebp - 0x290]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x378]
cmovae eax, dword [ebp - 0x378]
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
lea ecx, [ebp - 0x378]
mov esi, eax
call fcn.004023e6
test esi, esi
je 0x40d267
cmp dword [ebp - 0x350], 0
je 0x40d23c
push dword [ebp - 0x350]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x354], 0
je 0x40d251
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, byte [ebp - 0x35d]
lea ecx, [ebp - 0x340]
call fcn.0040607e
jmp 0x40d2ef
mov bl, 1
jmp 0x40d257
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x288]
push ebx
push eax
call fcn.00443f80
mov edi, dword [0x48c1ac]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
add esp, 0xc
cmp dword [ebp - 0x220], 8
lea eax, [ebp - 0x234]
mov dword [ebp - 0x288], esi
cmovae eax, dword [ebp - 0x234]
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x284], 0x8000
mov dword [ebp - 0x27c], 0x4705b0
mov dword [ebp - 0x26c], 5
mov eax, dword [edi]
mov esi, dword [eax + 0x164]
lea eax, [ebp - 0x288]
push eax
mov ecx, esi
call dword [0x46d464]
mov ecx, edi
call esi
test eax, eax
setne bl
test bl, bl
je 0x40d2f7
xor eax, eax
jmp 0x40d2fd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x220]
cmp eax, 8
jb 0x40d358
mov ecx, dword [ebp - 0x234]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x344], ecx
cmp eax, 0x1000
jb 0x40d34f
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x344]
push eax
call fcn.00401d0d
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x344]
push eax
push ecx
call fcn.0042ed0c
pop ecx
pop ecx
and dword [ebp - 0x224], 0
lea ecx, [ebp - 0x24c]
xor eax, eax
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.004023e6
mov al, bl
call fcn.0042f382
ret 0xc
push ebp
mov ebp, esp
pop ebp
jmp 0x40d018