Function at 0x41ec44
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff7dc
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [0x760e38]
test eax, eax
jne 0x41ec78
mov edx, dword [0x6fb2cc]
test edx, edx
jne 0x41ec70
mov ecx, dword [0x6fb2d0]
test ecx, ecx
je 0x41ec87
mov eax, dword [0x6fb2d4]
dec eax
jne 0x41ec87
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0042c2d0
jmp 0x41f0b3
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x318]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
call fcn.0065d10c
test eax, eax
je 0x41f0b3
mov edx, dword [0x6ebef0]
test edx, edx
je 0x41f0b3
mov eax, dword [ebp - 0xc]
call fcn.0065d10c
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x10], edx
call fcn.00404b70
xor ecx, ecx
mov dword [0x6fb15c], ecx
mov eax, dword [ebp - 0x10]
mov dl, byte [eax + 0x121]
test dl, dl
je 0x41eda6
mov eax, dword [0x6ebef0]
call fcn.00653f18
test eax, eax
jle 0x41ed2a
mov eax, dword [ebp - 0xc]
call fcn.0065d10c
add eax, 0x24
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx]
test ecx, ecx
je 0x41ed09
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
jmp 0x41ed0e
mov edx, 0x6efbf4
push edx
push 0x833b50
push 0x6efbee
lea eax, [ebp - 0x424]
push eax
call fcn.006712b0
add esp, 0x10
jmp 0x41ed62
mov eax, dword [ebp - 0xc]
call fcn.0065d10c
add eax, 0x24
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
mov ecx, dword [edx]
test ecx, ecx
je 0x41ed48
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
jmp 0x41ed4d
mov edx, 0x6efbf9
push edx
push 0x6efbf5
lea eax, [ebp - 0x424]
push eax
call fcn.006712b0
add esp, 0xc
lea edx, [ebp - 0x424]
mov eax, dword [ebp - 4]
call fcn.00419710
mov ecx, dword [0x6ebf30]
test ecx, ecx
je 0x41f0a6
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x22c]
call fcn.00659a38
test eax, eax
je 0x41f0a6
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
jmp 0x41f0a6
mov edx, dword [ebp - 0x10]
mov al, byte [edx + 0x122]
test al, al
je 0x41edc9
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x140]
mov eax, dword [ebp - 4]
call fcn.004195fc
jmp 0x41f0a6
mov ecx, dword [ebp - 0x10]
mov al, byte [ecx + 0x120]
test al, al
je 0x41f007
mov edx, dword [0x6ebeb8]
test edx, edx
jne 0x41edee
call fcn.00404b84
jmp 0x41f0b3
push 0x832f22
call fcn.0045d908
pop ecx
test eax, eax
jge 0x41ee3d
call fcn.00404b84
push 0x832f22
push 0x59f5
call fcn.00402b9c
pop ecx
push eax
push 0xa00988
call fcn.006712b0
add esp, 0xc
push 0xa00988
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.00640b4c
push eax
call fcn.00462a84
add esp, 8
jmp 0x41f0b3
mov eax, dword [ebp - 0xc]
call fcn.0065d10c
add eax, 0x24
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx]
test ecx, ecx
je 0x41ee5b
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
jmp 0x41ee60
mov edx, 0x6efc00
push edx
push 0x831dcf
push 0x6efbfa
lea eax, [ebp - 0x424]
push eax
call fcn.006712b0
add esp, 0x10
push 0
lea ecx, [ebp - 0x424]
push ecx
call fcn.0066ebe8
add esp, 8
test eax, eax
jne 0x41eeb0
push 0x80
lea eax, [ebp - 0x424]
push eax
call fcn.0066ed00
add esp, 8
lea edx, [ebp - 0x424]
push edx
call fcn.0067183c
pop ecx
push 1
call fcn.004511a4
pop ecx
push 0x2e
lea ecx, [ebp - 0x424]
push ecx
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 0x118]
mov dword [0x833f50], edx
mov edx, dword [eax + 0x11c]
mov dword [0x833f54], edx
mov dword [0x833f58], 0
mov dword [0x833f5c], 0
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x41effd
push dword [ebp - 0x14]
call fcn.0041a9d0
pop ecx
test eax, eax
je 0x41ef9c
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x11c], 0
jne 0x41ef31
cmp dword [eax + 0x118], 0x80000
jbe 0x41ef38
jmp 0x41ef33
jle 0x41ef38
call fcn.00441290
push 0x831dcf
push dword [ebp - 0x10]
call fcn.00451740
add esp, 8
test eax, eax
je 0x41ef95
call fcn.00441378
mov edx, dword [0x6ebf00]
test edx, edx
je 0x41ef7d
push 0x5a5f
call fcn.00402b9c
pop ecx
push eax
push dword [0x6eba34]
call fcn.00462af8
add esp, 8
test eax, eax
je 0x41effd
xor ecx, ecx
mov dword [0x6ebc48], ecx
lea edx, [ebp - 0x424]
mov eax, dword [ebp - 4]
call fcn.00407198
jmp 0x41effd
call fcn.00441378
jmp 0x41effd
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0x11c], 0
jne 0x41efb6
cmp dword [ecx + 0x118], 0x80000
jbe 0x41efbd
jmp 0x41efb8
jle 0x41efbd
call fcn.00441290
push 0x831dcf
push dword [ebp - 0x10]
call fcn.00451740
add esp, 8
test eax, eax
je 0x41eff8
call fcn.00441378
push 5
push 0x831dcf
push 0
lea eax, [ebp - 0x424]
push eax
push 0x6efc01
push dword [0x6eba34]
call sub.SHELL32.DLL_ShellExecuteA
jmp 0x41effd
call fcn.00441378
call fcn.0045daa8
jmp 0x41f0a6
mov edx, dword [ebp - 0x10]
push dword [edx + 0x134]
lea ecx, [ebp - 0x424]
push ecx
call fcn.0066ce08
add esp, 8
push 0x2e
lea eax, [ebp - 0x424]
push eax
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x41f0a6
push dword [ebp - 0x14]
call fcn.0041a9d0
pop ecx
test eax, eax
je 0x41f086
mov ecx, dword [0x6ebf00]
test ecx, ecx
je 0x41f06f
push 0x5a5f
call fcn.00402b9c
pop ecx
push eax
push dword [0x6eba34]
call fcn.00462af8
add esp, 8
test eax, eax
je 0x41f0a6
xor eax, eax
mov dword [0x6ebc48], eax
lea edx, [ebp - 0x424]
mov eax, dword [ebp - 4]
call fcn.00407198
jmp 0x41f0a6
push 5
push 0x831dcf
push 0
lea edx, [ebp - 0x424]
push edx
push 0x6efc06
push dword [0x6eba34]
call sub.SHELL32.DLL_ShellExecuteA
call fcn.00404b84
xor ecx, ecx
mov dword [0x6fb15c], ecx
mov esp, ebp
pop ebp
ret