Function at 0x40b420
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x1058
call fcn.00441210
mov eax, dword [0x473b98]
xor eax, esp
mov dword [esp + 0x1054], eax
mov eax, dword [esp + 0x107c]
mov ecx, dword [esp + 0x1078]
mov edx, dword [esp + 0x1074]
push esi
push eax
mov eax, dword [esp + 0x1078]
push ecx
mov ecx, dword [esp + 0x1078]
push 0x45bedc
push 0x45c348
push 0x45c348
push str.adminpwd
push str.admin
push edx
mov edx, dword [esp + 0x1084]
push eax
mov eax, dword [esp + 0x1090]
push ecx
mov ecx, dword [esp + 0x1090]
push edx
push eax
push ecx
lea edx, [esp + 0x8c]
push str..clientClient.exe__s__s__k_192198425__t_28665689__s__s__s__s__s__s__s__s__s__s__s
push edx
call fcn.0044196b
push 0x44
lea eax, [esp + 0x44]
push 0
push eax
call fcn.0043f9f0
add esp, 0x48
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 8]
push eax
push str..client
push 0
push 0
push 0
push 0
mov ecx, 5
mov word [esp + 0x50], cx
push 0
lea ecx, [esp + 0x78]
push ecx
push 0
mov dword [esp + 0x2c], 0x44
mov dword [esp + 0x58], 1
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov esi, eax
mov eax, dword [esp + 0x1060]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40b51a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1064]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b53d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1068]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b560
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x106c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b583
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1070]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b5a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1074]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b5c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1078]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b5ec
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x107c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b60f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1080]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b632
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1058]
mov eax, esi
pop esi
xor ecx, esp
call fcn.0043f7cd
add esp, 0x1058
ret