Function at 0x41e690
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e3ed5
mov eax, dword fs:[0]
push eax
sub esp, 0x108
mov eax, dword [0x59da54]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x40]
push 0x12
push str.Rebooting_launcher
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.004071c0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0
push eax
call fcn.0040edd0
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x41e741
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e737
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41e737
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00493424
add esp, 8
push 0x12
push str.Rebooting_launcher
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.004071c0
mov ecx, dword [edi + 0x24]
lea eax, [ebp - 0x40]
push 1
push 1
push eax
mov dword [ebp - 4], 1
call fcn.0040d7b0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x41e7b6
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e7ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41e7ac
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00493424
add esp, 8
mov ecx, dword [edi + 0x28]
cmp dword [ecx + 0xb4], 3
jge 0x41eaa7
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0x44
lea eax, [ebp - 0x40]
movlpd qword [ebp - 0x110], xmm0
push eax
movlpd qword [ebp - 0x108], xmm0
movlpd qword [ebp - 0x100], xmm0
movlpd qword [ebp - 0xf8], xmm0
movlpd qword [ebp - 0xf0], xmm0
movlpd qword [ebp - 0xe8], xmm0
movlpd qword [ebp - 0xe0], xmm0
movlpd qword [ebp - 0xd8], xmm0
movups xmmword [ebp - 0x98], xmm0
call fcn.0041d2a0
mov eax, dword [edi + 0x28]
mov dword [ebp - 4], 2
mov eax, dword [eax + 0xb4]
add eax, 1
jns 0x41e84d
neg eax
push eax
lea eax, [ebp - 0x13]
push eax
call fcn.0040ed90
mov byte [eax - 1], 0x2d
lea ecx, [eax - 1]
jmp 0x41e859
push eax
lea eax, [ebp - 0x13]
push eax
call fcn.0040ed90
mov ecx, eax
lea eax, [ebp - 0x13]
mov dword [ebp - 0x60], 0
add esp, 8
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp ecx, eax
je 0x41e881
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x70]
call fcn.004071c0
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
lea esi, [ecx + 1]
mov byte [ebp - 0x58], 0
mov dword [ebp - 0xb4], 7
cmp esi, 0xf
jbe 0x41e8f5
cmp esi, 0x7fffffff
ja 0x41ed4e
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x41e8ca
mov esi, accept
jmp 0x41e8d4
mov eax, 0x16
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x58]
call fcn.00407000
mov cl, byte [ebp - 0x58]
mov dword [ebp - 0x44], esi
mov byte [eax], cl
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x48], 0
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push ecx
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x58]
push eax
call fcn.00407060
push 1
push 0x4e879c
lea ecx, [ebp - 0x58]
call fcn.00407060
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
sub eax, ecx
mov edx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
cmp edx, eax
jbe 0x41e94c
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x41e94c
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
push ecx
cmovae eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x70]
push eax
push 0
call fcn.004105f0
jmp 0x41e960
cmp esi, 0x10
lea eax, [ebp - 0x70]
push edx
cmovae eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x58]
push eax
call fcn.00407060
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov byte [eax], 0
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
mov edx, dword [ebp - 0x44]
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x41e9c7
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e9bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea03
push edx
push ecx
call fcn.00493424
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov edx, dword [ebp - 0x5c]
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x41ea13
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ea09
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41ea09
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00493424
add esp, 8
cmp dword [ebp - 0x74], 0x10
lea edx, [ebp - 0x98]
push edx
lea edx, [ebp - 0x114]
mov dword [ebp - 0x60], 0
push edx
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x5c], 0xf
cmovae ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
push 0
cmovae eax, dword [ebp - 0x40]
push ecx
push eax
mov byte [ebp - 0x70], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x41ed53
push 0
lea ecx, [ebp - 0x28]
call fcn.004898c0
mov ecx, dword [edi + 0x20]
lea eax, [ebp - 0x28]
push eax
push 0
mov byte [ebp - 4], 9
call fcn.0040e400
lea ecx, [ebp - 0x28]
call fcn.00489ba0
lea ecx, [ebp - 0x88]
call fcn.004063d0
lea ecx, [ebp - 0x40]
call fcn.004063d0
jmp 0x41ed32
push 0x12
push str.Too_much_rebooting
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.004071c0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0xa
push eax
call fcn.0040edd0
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x41eb18
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41eb0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41eb0e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00493424
add esp, 8
push 0x12
push str.Too_much_rebooting
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.004071c0
mov ecx, dword [edi + 0x24]
lea eax, [ebp - 0x40]
push 0
push 1
push eax
mov dword [ebp - 4], 0xb
call fcn.0040d7b0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x41eb8d
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41eb83
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41eb83
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00493424
add esp, 8
lea eax, [ebp - 0x18]
push eax
call fcn.0040cbf0
add esp, 4
mov ecx, dword [eax]
mov eax, dword [eax + 4]
add ecx, 0xee6b2800
mov dword [ebp - 0xc4], ecx
adc eax, 0
mov dword [ebp - 0xcc], eax
call sub.MSVCP140.dll__Query_perf_frequency
mov edi, eax
mov esi, edx
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], esi
call sub.MSVCP140.dll__Query_perf_counter
push ebx
push esi
push edi
push edx
push eax
call fcn.00493a00
mov edi, ebx
pop ebx
push 0
push 0x3b9aca00
push edx
push eax
mov esi, ecx
call fcn.00493ae0
push 0
push 0x3b9aca00
push edi
push esi
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xbc], edx
call fcn.00493ae0
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
push edx
push eax
call fcn.00493950
mov ecx, eax
mov eax, edx
add ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xcc]
adc eax, dword [ebp - 0xbc]
mov dword [ebp - 0xbc], eax
cmp eax, edx
jg 0x41ed05
mov eax, dword [ebp - 0xc4]
jl 0x41ec4b
cmp ecx, eax
jae 0x41ed05
mov edi, eax
mov esi, edx
sub edi, ecx
sbb esi, dword [ebp - 0xbc]
mov dword [ebp - 0xbc], esi
call sub.MSVCP140.dll__Xtime_get_ticks
push 0
push 0x64
push edx
push eax
call fcn.00493ae0
mov dword [ebp - 0xb8], edx
mov ecx, edi
mov edx, esi
mov dword [ebp - 0xb4], eax
call fcn.00493e70
comisd xmm0, xmmword [0x4e7f80]
mov edx, dword [ebp - 0xb4]
mov esi, edx
mov eax, dword [ebp - 0xb8]
jbe 0x41ecb1
add esi, 0xad160000
mov edi, 0xad160000
mov ecx, 0x311cd
adc eax, 0x311cd
jmp 0x41ecbb
mov ecx, dword [ebp - 0xbc]
add esi, edi
adc eax, ecx
add edi, edx
mov dword [ebp - 0xbc], eax
push 0
adc ecx, dword [ebp - 0xb8]
push 0x3b9aca00
push ecx
push edi
call fcn.00493950
mov dword [ebp - 0x98], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x94], edx
sub esi, eax
lea eax, [ebp - 0x98]
push eax
mov dword [ebp - 0x90], esi
call sub.MSVCP140.dll__Thrd_sleep
add esp, 4
jmp 0x41ebb3
push 0
lea ecx, [ebp - 0x70]
call fcn.004898c0
mov ecx, dword [ebp - 0xd0]
lea eax, [ebp - 0x70]
push eax
push 0
mov dword [ebp - 4], 0xc
mov ecx, dword [ecx + 0x20]
call fcn.0040e400
lea ecx, [ebp - 0x70]
call fcn.00489ba0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00493440
mov esp, ebp
pop ebp
ret
call fcn.00406ff0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.0041b4d0
add esp, 8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.0040f3e0
push 0x511a84
lea eax, [ebp - 0x1c]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3