Function at 0x41fac0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43f17d
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x469644]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 0x1c
mov ebx, ecx
mov ecx, esp
mov dword [ebp - 0xa8], esp
xor edi, edi
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
push edi
mov word [ecx], ax
push ebx
or eax, 0xffffffff
mov dword [ebp - 0xac], ebx
call fcn.00403a30
sub esp, 0x1c
mov dword [ebp - 4], edi
mov esi, esp
mov dword [ebp - 0xa4], esp
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
push 0xe
mov eax, str.Wird_gestartet
mov word [esi], cx
call fcn.00404210
mov dword [ebp - 4], 0xffffffff
call fcn.00410d30
add esp, 0x38
mov ecx, ebx
call fcn.00420220
lea eax, [ebx + 0x70]
push edi
xor edx, edx
mov dword [ebp - 0xa8], eax
push eax
or eax, 0xffffffff
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], edi
mov word [ebp - 0x68], dx
call fcn.00403a30
mov dword [ebp - 4], 1
mov edx, dword [ebx + 0x8c]
lea esi, [ebp - 0x84]
call fcn.00421c70
mov byte [ebp - 4], 2
cmp dword [ebp - 0x74], edi
je 0x41fbdc
lea eax, [ebp - 0x30]
push 0x46138c
push eax
mov ebx, esi
call fcn.00404920
add esp, 8
push edi
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00404e10
mov byte [ebp - 4], 2
cmp dword [ebp - 0x1c], 8
jb 0x41fbdc
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00426e9f
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa4], esp
push edi
lea eax, [ebp - 0x68]
xor edx, edx
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00403a30
lea ecx, [ebp - 0x30]
call fcn.00406740
add esp, 0x1c
mov edi, eax
lea esi, [ebp - 0x68]
mov byte [ebp - 4], 4
call fcn.00404be0
mov byte [ebp - 4], 2
cmp dword [ebp - 0x1c], 8
jb 0x41fc32
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00426e9f
add esp, 4
mov eax, dword [ebp - 0xac]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa4], esp
xor edi, edi
push edi
xor edx, edx
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00403a30
sub esp, 0x1c
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0xb0], esp
push str.CMD:
push ecx
lea ebx, [ebp - 0x68]
call fcn.00404920
add esp, 8
mov byte [ebp - 4], 2
call fcn.00410e50
add esp, 0x38
xor edx, edx
mov ebx, 7
push edi
mov eax, 0x45d4fc
lea esi, [ebp - 0x4c]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
mov word [ebp - 0x4c], dx
call fcn.00404210
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa4], edi
push eax
lea edi, [ebx - 6]
call fcn.00420d20
cmp eax, 0xffffffff
je 0x41fd75
mov edx, dword [ebp - 0xa8]
push eax
xor ecx, ecx
lea esi, [ebp - 0x30]
call fcn.004027e0
mov edi, eax
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.00404be0
mov esi, 8
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1c], esi
jb 0x41fd03
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00426e9f
add esp, 4
cmp dword [ebp - 0x38], esi
jb 0x41fd13
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xa4], edx
jmp 0x41fd1c
lea eax, [ebp - 0x4c]
mov dword [ebp - 0xa4], eax
mov edi, dword [ebp - 0xac]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb0], esp
xor esi, esi
push esi
xor edx, edx
mov dword [ecx + 0x14], ebx
mov dword [ecx + 0x10], esi
push edi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00403a30
sub esp, 0x1c
mov byte [ebp - 4], 8
mov eax, esp
mov dword [ebp - 0xa8], esp
push 0x461390
push eax
lea ebx, [ebp - 0x4c]
call fcn.00404920
add esp, 8
mov byte [ebp - 4], 6
call fcn.00410e50
add esp, 0x38
lea ebx, [esi + 7]
jmp 0x41fd7d
mov edi, dword [ebp - 0xac]
xor esi, esi
push 0x44
lea ecx, [ebp - 0x108]
push esi
push ecx
call fcn.0042ec60
xor eax, eax
add esp, 0xc
cmp dword [ebp - 0x54], 8
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x108], 0x44
jae 0x41fdbf
lea eax, [ebp - 0x68]
lea edx, [ebp - 0xc0]
push edx
mov edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x108]
push ecx
push edx
push esi
push esi
push esi
push esi
push esi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
sub esp, 0x1c
mov dword [ebp - 0xb0], esp
mov ecx, esp
xor edx, edx
push esi
push edi
cmp eax, esi
je 0x41fedb
mov eax, dword [ebp - 0xb8]
mov dword [edi + 0xb8], eax
mov dword [ecx + 0x14], ebx
mov dword [ecx + 0x10], esi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00403a30
mov byte [ebp - 4], 9
mov eax, dword [edi + 0xb8]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004063a0
push eax
mov edx, str.Erfolgreich_gestartet__PID:
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.00404a00
sub esp, 0x10
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0xa8], esp
push eax
mov eax, 0x45d75c
call fcn.0040f880
add esp, 4
mov byte [ebp - 4], 0xd
call fcn.00410e50
add esp, 0x38
cmp dword [ebp - 0x1c], 8
jb 0x41fe79
mov edx, dword [ebp - 0x30]
push edx
call fcn.00426e9f
add esp, 4
xor eax, eax
cmp dword [ebp - 0x8c], 8
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], esi
mov word [ebp - 0x30], ax
jb 0x41fe9d
mov ecx, dword [ebp - 0xa0]
push ecx
call fcn.00426e9f
add esp, 4
lea edx, [ebp - 0x28]
push edx
mov byte [edi + 0xbc], 1
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [edi + 0xbe], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0xc2], ecx
mov dword [edi + 0xc6], edx
mov dword [edi + 0xca], eax
mov byte [edi + 0xce], 1
jmp 0x41ff22
mov dword [ecx + 0x14], ebx
mov dword [ecx + 0x10], esi
or eax, 0xffffffff
mov word [ecx], dx
call fcn.00403a30
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], ebx
mov dword [ebp - 0xa8], esp
mov word [ecx], ax
push 0x16
mov eax, str.Starten_fehlgeschlagen
mov esi, ecx
call fcn.00404210
mov byte [ebp - 4], 6
call fcn.00410e50
add esp, 0x38
xor esi, esi
mov edi, 8
cmp dword [ebp - 0x38], edi
jb 0x41ff38
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.00426e9f
add esp, 4
xor edx, edx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esi
mov word [ebp - 0x4c], dx
cmp dword [ebp - 0x70], edi
jb 0x41ff58
mov eax, dword [ebp - 0x84]
push eax
call fcn.00426e9f
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esi
mov word [ebp - 0x84], cx
cmp dword [ebp - 0x54], edi
jb 0x41ff78
mov edx, dword [ebp - 0x68]
push edx
call fcn.00426e9f
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042575d
mov esp, ebp
pop ebp
ret