Function at 0x438e20
Capabilities:
Create process on windows

Disassembly:
push pe_nt_image_headers32
mov eax, 0x5232d0
call fcn.004dacdd
mov edi, ecx
mov esi, dword [ebp + 8]
push ecx
push ecx
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x3c], esi
call fcn.0042d8cb
and dword [ebp - 4], 0
lea ebx, [edi + 0x2c]
push esi
push ecx
mov edx, ebx
lea ecx, [ebp - 0x124]
call fcn.0042ea28
mov edx, str._psiphonStatstrue
mov ecx, eax
call fcn.0042eba2
mov edx, str._proxyPort
mov ecx, eax
call fcn.0042eba2
pop ecx
mov ecx, eax
call fcn.0043753c
mov edx, str._disableLocalInterfacetrue
mov ecx, eax
call fcn.0042eba2
mov edx, str._logLevel1
mov ecx, eax
call fcn.0042eba2
cmp dword [edi + 0x28], 0
jle 0x438f3a
push dword [edi + 0x28]
mov edx, str._socksParentProxy127.0.0.1:
push ecx
lea ecx, [ebp - 0x124]
call fcn.0042eba2
pop ecx
mov ecx, eax
call fcn.0043753c
cmp dword [edi + 0x54], 0
jbe 0x438ef4
mov edx, str._splitTunnelingFile_
lea ecx, [ebp - 0x124]
call fcn.0042eba2
lea edx, [edi + 0x44]
mov ecx, eax
call fcn.0042ea28
mov edx, 0x69b10c
mov ecx, eax
call fcn.0042eba2
mov edx, str._splitTunnelingDnsServer8.8.8.8
lea ecx, [ebp - 0x124]
call fcn.0042eba2
cmp dword [edi + 0xbc], 0
jbe 0x438f3a
lea edx, [edi + 0xac]
lea ecx, [ebp - 0x2c]
call fcn.00428a40
mov esi, eax
mov edx, str._psiphonServer
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x124]
call fcn.0042eba2
mov edx, esi
mov ecx, eax
call fcn.0042ea28
push 0
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0042ab9c
push 0x44
pop esi
push esi
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.004f3cc0
add esp, 0xc
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x58], 0x100
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.DLL_GetStdHandle]
mov dword [ebp - 0x4c], eax
lea ecx, [edi + 0x70]
or eax, 0xffffffff
lea edx, [ebp - 0x34]
mov dword [ecx], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004571d6
add esp, 0xc
test al, al
je 0x4390c5
push dword [ebp - 0x34]
mov esi, dword [sym.imp.KERNEL32.DLL_CloseHandle]
call esi
push dword [ebp - 0x38]
call esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x134]
call fcn.0042d880
cmp dword [eax + 0x14], 8
jb 0x438fc1
mov eax, dword [eax]
cmp dword [ebx + 0x14], 8
jb 0x438fc9
mov ebx, dword [ebx]
lea ecx, [edi + 0x60]
push ecx
lea ecx, [ebp - 0x84]
push ecx
xor ecx, ecx
push ecx
push ecx
push 0x8000200
push 1
push ecx
push ecx
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateProcessW]
mov ebx, eax
lea ecx, [ebp - 0x2c]
push 0
neg ebx
push 1
sbb bl, bl
call fcn.0042ab9c
add bl, 1
je 0x439016
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.LocalProxy::StartPolipo
push str._s___Polipo_CreateProcess_failed___d_
jmp 0x4390d6
push dword [edi + 0x64]
call esi
push dword [ebp - 0x48]
xor ebx, ebx
mov dword [edi + 0x64], ebx
call esi
test eax, eax
jne 0x43904e
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push 0x146
push str.LocalProxy::StartPolipo
push str._s:_d___CloseHandle_failed___d_
push ebx
push ebx
call fcn.0043ceb9
add esp, 0x18
jmp 0x4390e2
push dword [ebp - 0x44]
call esi
test eax, eax
jne 0x439065
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push 0x14b
jmp 0x439035
push 0x1388
push dword [edi + 0x60]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov ecx, dword [ebp - 0x3c]
lea eax, [edi + 0x14]
push eax
push dword [edi + 0x60]
mov edx, 0x4e20
call fcn.00456f6d
mov esi, eax
pop ecx
pop ecx
cmp esi, 0x3e3
jne 0x4390a1
push 0x6c55f8
lea eax, [ebp - 0x2d]
push eax
call fcn.004f3e1a
test esi, esi
je 0x4390b6
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push esi
push str.Failed_to_start_the_HTTP_proxy___d___d_
push ebx
push ebx
jmp 0x4390da
lea ecx, [ebp - 0x134]
call fcn.0042ca45
mov al, 1
jmp 0x4390ef
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.LocalProxy::StartPolipo
push str._s___CreatePolipoPipe_failed___d_
push 0
push 0
call fcn.0043ceb9
add esp, 0x14
lea ecx, [ebp - 0x134]
call fcn.0042ca45
xor al, al
call fcn.004dac87
ret 4