Function at 0x469a20
Capabilities:
Create thread

Disassembly:
mov eax, 0xd488
call fcn.004d9670
mov eax, dword [esp + 0xd48c]
push ebp
mov ebp, ecx
push esi
mov ecx, dword [0x515048]
push edi
xor edi, edi
xor esi, esi
cmp eax, ecx
mov dword [esp + 0xc], edi
je 0x469a5b
push eax
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, edi
je 0x469ad9
push ebx
mov ebx, dword [esp + 0xd4a0]
lea eax, [esp + 0x34]
push 8
push eax
push ebx
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
mov ecx, dword [esp + 0x34]
lea eax, [ecx - 0x29]
cmp eax, 0x31
ja case.0x469a8c.53
xor edx, edx
mov dl, byte [eax + 0x46a000]
jmp dword [edx*4 + 0x469fcc]
mov dword [esp + 0x3c], edi
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x40]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x3c]
push 0x40
push eax
push ebx
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je 0x469acb
lea ecx, [esp + 0x3c]
push ecx
push esi
call fcn.004b0140
add esp, 8
mov dword [esp + 0x10], eax
xor edi, edi
cmp esi, edi
pop ebx
je 0x469ad9
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0xc]
pop edi
pop esi
pop ebp
add esp, 0xd488
ret 8
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
push 0x40
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x44]
push edx
push ebx
rep stosd dword es:[edi], eax
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je 0x469acb
lea eax, [esp + 0x3c]
push ebx
push eax
push esi
call fcn.004b0730
add esp, 0xc
jmp 0x469ac7
lea ecx, [esp + 0x14]
push 0x18
push ecx
push ebx
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
lea edx, [esp + 0x14]
push ebx
push edx
push esi
mov ecx, ebp
call fcn.0046a180
mov dword [esp + 0x10], eax
jmp case.0x469a8c.53
mov dword [esp + 0x7c], edi
mov ecx, 0x84
xor eax, eax
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x7c]
push 0x214
push eax
push ebx
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je 0x469acb
mov edx, dword [esp + 0x84]
lea ecx, [esp + 0x88]
push ecx
push edx
mov ecx, ebp
call fcn.0046a040
jmp 0x469acb
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
push 0x10
push ecx
mov dword [esp + 0x24], eax
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], eax
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
lea edx, [esp + 0x14]
push ebx
push edx
push esi
call fcn.00480fb0
mov ecx, eax
call fcn.004813f0
mov dword [esp + 0x10], eax
jmp case.0x469a8c.53
lea ecx, [esp + 0x14]
xor eax, eax
push 0xc
push ecx
mov dword [esp + 0x20], eax
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], eax
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
lea edx, [esp + 0x14]
push ebx
push edx
push esi
call fcn.00435570
mov ecx, eax
call fcn.00435bf0
mov dword [esp + 0x10], eax
jmp case.0x469a8c.53
mov dword [esp + 0x14], edi
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x14]
push 0x1c
push eax
push ebx
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je 0x469acb
lea ecx, [esp + 0x14]
push ebx
push ecx
push esi
mov ecx, ebp
call fcn.0046a320
jmp 0x469ac7
lea edx, [esp + 0x14]
mov dword [esp + 0x14], edi
push 0x1c
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x1c]
push edx
push ebx
rep stosd dword es:[edi], eax
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je 0x469acb
lea eax, [esp + 0x14]
push ebx
push eax
push esi
mov ecx, ebp
call fcn.0046a3b0
jmp 0x469ac7
lea edx, [esp + 0x14]
xor ecx, ecx
push 0xc
push edx
mov dword [esp + 0x20], ecx
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], ecx
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
push edi
call dword [sym.imp.USER32.dll_InSendMessageEx]
and eax, 9
cmp al, 1
jne 0x469cd5
push edi
call dword [sym.imp.USER32.dll_ReplyMessage]
push 0x1388
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x30]
push eax
push edi
push ecx
push 0x46b050
push edi
push edi
mov dword [esp + 0x48], edi
call dword [sym.imp.MSVCRT.dll__beginthreadex]
add esp, 0x18
cmp eax, edi
je case.0x469a8c.53
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.0x469a8c.53
lea edx, [esp + 0x290]
mov dword [esp + 0x290], edi
push 0x57b4
mov ecx, 0x15ec
xor eax, eax
lea edi, [esp + 0x298]
push edx
push ebx
rep stosd dword es:[edi], eax
push esi
call fcn.0046aae0
add esp, 0x10
test eax, eax
je 0x469acb
push 0
call dword [sym.imp.USER32.dll_InSendMessageEx]
and eax, 9
cmp al, 1
jne 0x469d61
push 0
call dword [sym.imp.USER32.dll_ReplyMessage]
mov edx, dword [esp + 0x2ac]
mov ecx, 0x1e94
xor eax, eax
lea edi, [esp + 0x5a48]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x298]
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x5a48], eax
mov eax, dword [esp + 0x2b0]
mov dword [esp + 0x5a54], edx
mov edx, dword [esp + 0x45e4]
mov edi, dword [sym.imp.MSVCRT.dll__snwprintf]
mov dword [esp + 0x5a58], eax
mov eax, dword [esp + 0x45e0]
mov dword [esp + 0x5a60], edx
mov dword [esp + 0x5a50], ecx
mov ecx, dword [esp + 0x29c]
lea edx, [esp + 0x3594]
mov dword [esp + 0x5a5c], eax
push edx
mov dword [esp + 0x5a50], ecx
mov ecx, dword [esp + 0x45ec]
push 0x4f6170
lea eax, [esp + 0x8d4c]
push 0x823
push eax
mov dword [esp + 0x5a54], 0x7a54
mov dword [esp + 0x9d9c], ecx
call edi
add esp, 0x10
lea ecx, [esp + 0x4bc]
lea edx, [esp + 0x5c6c]
push ecx
push 0x4f6170
push 0x823
push edx
call edi
add esp, 0x10
lea eax, [esp + 0x1504]
lea ecx, [esp + 0x6cb4]
push eax
push 0x4f6170
push 0x823
push ecx
call edi
add esp, 0x10
lea edx, [esp + 0x254c]
lea eax, [esp + 0x7cfc]
push edx
push 0x4f6170
push 0x823
push eax
call edi
add esp, 0x10
lea ecx, [esp + 0x45ec]
lea edx, [esp + 0x9d90]
push ecx
push 0x4f6170
push 0x103
push edx
call edi
add esp, 0x10
lea eax, [esp + 0x47f4]
lea ecx, [esp + 0x9f98]
push eax
push 0x4f6170
push 0x103
push ecx
call edi
add esp, 0x10
lea edx, [esp + 0x49fc]
lea eax, [esp + 0xa1a0]
push edx
push 0x4f6170
push 0x823
push eax
call edi
add esp, 0x10
lea ecx, [esp + 0x5a44]
push ecx
call fcn.00421f10
mov ecx, eax
call fcn.00428c80
push 0
add ebx, 0x10
push 4
lea edx, [esp + 0x18]
push ebx
push edx
push esi
mov dword [esp + 0x24], eax
call fcn.0046aa20
add esp, 0x14
lea eax, [esp + 0x30]
mov dword [esp + 0x30], 0
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [esp + 0x2b8]
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x469acb
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x469acb
lea eax, [esp + 0x14]
xor edx, edx
push 0xc
push eax
mov dword [esp + 0x20], edx
push ebx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], edx
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
lea ecx, [esp + 0x14]
push ebx
push ecx
push esi
call fcn.00421f10
mov ecx, eax
call fcn.00423080
mov dword [esp + 0x10], eax
jmp case.0x469a8c.53
xor edx, edx
lea eax, [esp + 0x14]
mov dword [esp + 0x18], edx
push 0x18
mov dword [esp + 0x20], edx
push eax
mov dword [esp + 0x28], edx
push ebx
mov dword [esp + 0x30], edx
push esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], edx
call fcn.0046aae0
add esp, 0x10
test eax, eax
je case.0x469a8c.53
lea ecx, [esp + 0x14]
push ebx
push ecx
push esi
mov ecx, 0x515050
call fcn.00417190
mov dword [esp + 0x10], eax
jmp case.0x469a8c.53