Function at 0x464640
Capabilities:
Create thread

Disassembly:
mov eax, 0xd488
call fcn.004d03a0
mov eax, dword [esp + 0xd48c]
push ebp
mov ebp, ecx
push esi
mov ecx, dword [0x505058]
push edi
xor edi, edi
xor esi, esi
cmp eax, ecx
mov dword [esp + 0xc], edi
je 0x46467b
push eax
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, edi
je 0x4646f9
push ebx
mov ebx, dword [esp + 0xd4a0]
lea eax, [esp + 0x34]
push 8
push eax
push ebx
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
mov ecx, dword [esp + 0x34]
lea eax, [ecx - 0x29]
cmp eax, 0x31
ja case.0x4646ac.53
xor edx, edx
mov dl, byte [eax + 0x464c20]
jmp dword [edx*4 + 0x464bec]
mov dword [esp + 0x3c], edi
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x40]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x3c]
push 0x40
push eax
push ebx
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je 0x4646eb
lea ecx, [esp + 0x3c]
push ecx
push esi
call fcn.004a76d0
add esp, 8
mov dword [esp + 0x10], eax
xor edi, edi
cmp esi, edi
pop ebx
je 0x4646f9
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0xc]
pop edi
pop esi
pop ebp
add esp, 0xd488
ret 8
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
push 0x40
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x44]
push edx
push ebx
rep stosd dword es:[edi], eax
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je 0x4646eb
lea eax, [esp + 0x3c]
push ebx
push eax
push esi
call fcn.004a7cc0
add esp, 0xc
jmp 0x4646e7
lea ecx, [esp + 0x14]
push 0x18
push ecx
push ebx
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
lea edx, [esp + 0x14]
push ebx
push edx
push esi
mov ecx, ebp
call fcn.00464d80
mov dword [esp + 0x10], eax
jmp case.0x4646ac.53
mov dword [esp + 0x7c], edi
mov ecx, 0x84
xor eax, eax
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x7c]
push 0x214
push eax
push ebx
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je 0x4646eb
mov edx, dword [esp + 0x84]
lea ecx, [esp + 0x88]
push ecx
push edx
mov ecx, ebp
call fcn.00464c60
jmp 0x4646eb
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
push 0x10
push ecx
mov dword [esp + 0x24], eax
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], eax
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
lea edx, [esp + 0x14]
push ebx
push edx
push esi
call fcn.00479b60
mov ecx, eax
call fcn.00479ec0
mov dword [esp + 0x10], eax
jmp case.0x4646ac.53
lea ecx, [esp + 0x14]
xor eax, eax
push 0xc
push ecx
mov dword [esp + 0x20], eax
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], eax
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
lea edx, [esp + 0x14]
push ebx
push edx
push esi
call fcn.00435b30
mov ecx, eax
call fcn.004361b0
mov dword [esp + 0x10], eax
jmp case.0x4646ac.53
mov dword [esp + 0x14], edi
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x14]
push 0x1c
push eax
push ebx
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je 0x4646eb
lea ecx, [esp + 0x14]
push ebx
push ecx
push esi
mov ecx, ebp
call fcn.00464f20
jmp 0x4646e7
lea edx, [esp + 0x14]
mov dword [esp + 0x14], edi
push 0x1c
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x1c]
push edx
push ebx
rep stosd dword es:[edi], eax
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je 0x4646eb
lea eax, [esp + 0x14]
push ebx
push eax
push esi
mov ecx, ebp
call fcn.00464fb0
jmp 0x4646e7
lea edx, [esp + 0x14]
xor ecx, ecx
push 0xc
push edx
mov dword [esp + 0x20], ecx
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], ecx
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
push edi
call dword [sym.imp.USER32.dll_InSendMessageEx]
and eax, 9
cmp al, 1
jne 0x4648f5
push edi
call dword [sym.imp.USER32.dll_ReplyMessage]
push 0x1388
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x30]
push eax
push edi
push ecx
push 0x465c50
push edi
push edi
mov dword [esp + 0x48], edi
call dword [sym.imp.MSVCRT.dll__beginthreadex]
add esp, 0x18
cmp eax, edi
je case.0x4646ac.53
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.0x4646ac.53
lea edx, [esp + 0x290]
mov dword [esp + 0x290], edi
push 0x57b4
mov ecx, 0x15ec
xor eax, eax
lea edi, [esp + 0x298]
push edx
push ebx
rep stosd dword es:[edi], eax
push esi
call fcn.004656e0
add esp, 0x10
test eax, eax
je 0x4646eb
push 0
call dword [sym.imp.USER32.dll_InSendMessageEx]
and eax, 9
cmp al, 1
jne 0x464981
push 0
call dword [sym.imp.USER32.dll_ReplyMessage]
mov edx, dword [esp + 0x2ac]
mov ecx, 0x1e94
xor eax, eax
lea edi, [esp + 0x5a48]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x298]
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x5a48], eax
mov eax, dword [esp + 0x2b0]
mov dword [esp + 0x5a54], edx
mov edx, dword [esp + 0x45e4]
mov edi, dword [sym.imp.MSVCRT.dll__snwprintf]
mov dword [esp + 0x5a58], eax
mov eax, dword [esp + 0x45e0]
mov dword [esp + 0x5a60], edx
mov dword [esp + 0x5a50], ecx
mov ecx, dword [esp + 0x29c]
lea edx, [esp + 0x3594]
mov dword [esp + 0x5a5c], eax
push edx
mov dword [esp + 0x5a50], ecx
mov ecx, dword [esp + 0x45ec]
push 0x4e925c
lea eax, [esp + 0x8d4c]
push 0x823
push eax
mov dword [esp + 0x5a54], 0x7a54
mov dword [esp + 0x9d9c], ecx
call edi
add esp, 0x10
lea ecx, [esp + 0x4bc]
lea edx, [esp + 0x5c6c]
push ecx
push 0x4e925c
push 0x823
push edx
call edi
add esp, 0x10
lea eax, [esp + 0x1504]
lea ecx, [esp + 0x6cb4]
push eax
push 0x4e925c
push 0x823
push ecx
call edi
add esp, 0x10
lea edx, [esp + 0x254c]
lea eax, [esp + 0x7cfc]
push edx
push 0x4e925c
push 0x823
push eax
call edi
add esp, 0x10
lea ecx, [esp + 0x45ec]
lea edx, [esp + 0x9d90]
push ecx
push 0x4e925c
push 0x103
push edx
call edi
add esp, 0x10
lea eax, [esp + 0x47f4]
lea ecx, [esp + 0x9f98]
push eax
push 0x4e925c
push 0x103
push ecx
call edi
add esp, 0x10
lea edx, [esp + 0x49fc]
lea eax, [esp + 0xa1a0]
push edx
push 0x4e925c
push 0x823
push eax
call edi
add esp, 0x10
lea ecx, [esp + 0x5a44]
push ecx
call fcn.00423c70
mov ecx, eax
call fcn.0042a290
push 0
add ebx, 0x10
push 4
lea edx, [esp + 0x18]
push ebx
push edx
push esi
mov dword [esp + 0x24], eax
call fcn.00465620
add esp, 0x14
lea eax, [esp + 0x30]
mov dword [esp + 0x30], 0
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [esp + 0x2b8]
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4646eb
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x4646eb
lea eax, [esp + 0x14]
xor edx, edx
push 0xc
push eax
mov dword [esp + 0x20], edx
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], edx
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
lea ecx, [esp + 0x14]
push ebx
push ecx
push esi
call fcn.00423c70
mov ecx, eax
call fcn.00424ca0
mov dword [esp + 0x10], eax
jmp case.0x4646ac.53
xor edx, edx
lea eax, [esp + 0x14]
mov dword [esp + 0x18], edx
push 0x18
mov dword [esp + 0x20], edx
push eax
mov dword [esp + 0x28], edx
push ebx
mov dword [esp + 0x30], edx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], edx
call fcn.004656e0
add esp, 0x10
test eax, eax
je case.0x4646ac.53
lea ecx, [esp + 0x14]
push ebx
push ecx
push esi
mov ecx, 0x505060
call fcn.00418f30
mov dword [esp + 0x10], eax
jmp case.0x4646ac.53