Function at 0x40d283
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
call fcn.00401980
mov dword [ebp - 0x10], eax
mov ebx, dword [0x632c81]
add ebx, 8
mov dword [ebp - 0x14], ebx
push 0x4a3ee0
mov ebx, dword [ebp - 0x14]
push dword [ebx]
push 0x476339
push dword [ebp - 0x10]
mov ecx, 4
call fcn.004010e6
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40d2e7
push ebx
call fcn.0044f0d8
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40d2fb
push ebx
call fcn.0044f0d8
add esp, 4
pop eax
mov dword [ebp - 4], eax
push str..tmp
push dword [ebp - 4]
mov ecx, 2
call fcn.004010e6
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40d32b
push ebx
call fcn.0044f0d8
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x40d342
mov eax, 0x4762fd
push eax
push 1
mov ebx, 0x24c
call fcn.00454060
add esp, 0x10
test eax, eax
je 0x40d383
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x40d370
mov eax, 0x4762fd
push eax
push 1
mov ebx, 0x244
call fcn.00454070
add esp, 0x10
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x40d396
mov eax, 0x4762fd
push eax
push 1
mov ebx, 0x24c
call fcn.00454060
add esp, 0x10
test eax, eax
je 0x40d3d7
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x40d3c4
mov eax, 0x4762fd
push eax
push 1
mov ebx, 0x244
call fcn.00454070
add esp, 0x10
mov ebx, dword [0x632c81]
add ebx, 0x2c
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push dword [ebp - 0x10]
call fcn.00407f39
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xc8
jne 0x40d418
cmp dword [ebp - 0xc], 0xce
jne 0x40d418
xor eax, eax
jmp 0x40d41d
mov eax, 1
test eax, eax
je 0x40d47e
push 0
mov eax, 0x4a3eee
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov eax, 0x4a3efd
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 1
push dword [0x632c2d]
push 0x632c65
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40d469
push ebx
call fcn.0044f0d8
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40d479
push ebx
call fcn.0044f0d8
add esp, 4
jmp 0x40d65c
mov ebx, dword [0x632c81]
add ebx, 0x2c
mov dword [ebp - 0x10], ebx
push reloc.WS2_32.dll_getsockname
push 0
push 0x40d6cd
push 1
mov ebx, 0x9dc
call fcn.00454e30
add esp, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
push 1
push dword [ebp - 0x14]
lea eax, [ebp - 8]
push eax
push dword [ebp - 0x10]
call fcn.0040945f
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x40d549
push 0x632c69
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0
mov eax, 0x4a3eee
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov eax, 0x4a3efd
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 1
push dword [0x632c2d]
push 0x632c65
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40d534
push ebx
call fcn.0044f0d8
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40d544
push ebx
call fcn.0044f0d8
add esp, 4
jmp 0x40d65c
push 0x632c69
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x40d56b
mov eax, 0x4762fd
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x40d57f
mov eax, 0x4762fd
push eax
push 2
mov ebx, 0x23c
call fcn.00454080
add esp, 0x1c
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x40d5a5
mov eax, 0x4762fd
push eax
push 1
mov ebx, 0x244
call fcn.00454070
add esp, 0x10
mov dword [ebp - 0x10], esp
push 5
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_WinExec]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x40d5df
push 6
call fcn.0044f0de
add esp, 4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x20
jle 0x40d603
push 0x632c29
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x40d65c
push 0
mov eax, 0x4a3f3c
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
mov eax, 0x4a3f4b
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 1
push dword [0x632c2d]
push 0x632c65
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40d647
push ebx
call fcn.0044f0d8
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40d657
push ebx
call fcn.0044f0d8
add esp, 4
jmp 0x40d65c
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40d66c
push ebx
call fcn.0044f0d8
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40d67c
push ebx
call fcn.0044f0d8
add esp, 4
mov esp, ebp
pop ebp
ret