Function at 0x403bb0
Capabilities:
Create thread
Inject thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x34
mov eax, dword [0x4a4440]
xor eax, esp
mov dword [esp + 0x30], eax
push ebx
push esi
push edi
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [0x4a6380]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 9
push dword [0x4a6384]
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 1
push 0x109
push 0x35c
push dword [0x4a6374]
push dword [0x4a6370]
push dword [0x4a6380]
call dword [sym.imp.USER32.dll_MoveWindow]
mov edx, str._n__n________________________________________________________________________________________________n_________________________________________________________________________________n_______________________________________________________________________________n____________________________________________________________________n_____________________________________________________________n_______________________________________________________________n________________________________________________________________________________________________n________________________________________________________________________________________________n___n
mov ecx, 0x4a55d8
call fcn.00406c70
push eax
call fcn.00406f20
mov eax, dword [0x4a6368]
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
test eax, eax
jne 0x403c4f
call fcn.004031d0
push 0x1e
mov dword [0x4a6368], eax
call edi
mov eax, dword [0x4a6368]
test eax, eax
je 0x403c38
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x403ca9
push 0x2c
lea eax, [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_K32GetProcessMemoryInfo]
test eax, eax
je 0x403ca6
mov eax, dword [esp + 0x38]
shr eax, 0xa
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x49fb10]
mulsd xmm0, qword [0x49faf8]
movsd qword [0x4a63a0], xmm0
push esi
call ebx
movsd xmm0, qword [0x4a63a0]
comisd xmm0, xmmword [0x49fb00]
ja 0x403cc6
push 0x1e
call edi
mov eax, dword [0x4a6368]
jmp 0x403c55
push dword [0x4a6368]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x403d9d
push 4
push 0x3000
push 0x104
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ebx, eax
test ebx, ebx
je 0x403dac
cmp esi, 0xffffffff
je 0x403d8e
push 0
push 0x1e
push str.C:WindowsTempgdiload64.dll
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x403dbb
push 0
push 0
push ebx
push dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [esp + 0xc], eax
test eax, eax
je 0x403dca
push 0x64
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Beep]
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x7d0
call edi
mov ecx, dword [esp + 0x3c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0045ea49
mov esp, ebp
pop ebp
ret
mov edx, str.INVALID_HANDLE_VALUE
mov ecx, str.Failed
call fcn.00403b90
mov edx, str.Failed_to_open_a_handle_process
mov ecx, 0x49f7dc
call fcn.00403b90
mov edx, str.Failed_to_Allocated_Memory
mov ecx, 0x49f804
call fcn.00403b90
mov edx, str.Failed_to_write_process_memory
mov ecx, 0x49f834
call fcn.00403b90
mov edx, str.Failed_to_create_remote_thread
mov ecx, 0x49f868
call fcn.00403b90
int3