Function at 0x469dc0
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4844a9
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x4a206c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x120], edi
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x124], edi
mov dword [ebp - 4], 0
mov dword [edi + 4], vtable.IStrategyListener.0
imul eax, dword [ebp + 8], 0xea60
lea ebx, [edi + 0x1c]
mov dword [edi], vtable.DonateStrategy.1.0
mov dword [edi + 4], vtable.DonateStrategy.0
mov byte [edi + 8], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0xc], eax
mov eax, 0x64
sub eax, dword [ebp + 8]
imul eax, eax, 0xea60
mov dword [edi + 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [edi + 0x18], eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
push 0x41
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.00443980
mov edx, esi
add esp, 0xc
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x469e76
push ecx
lea eax, [ebp - 0x11c]
sub edx, ecx
push eax
mov ecx, esi
call fcn.00472020
add esp, 8
xor esi, esi
mov dl, byte [ebp + esi - 0x11c]
mov al, 9
mov cl, dl
shr cl, 4
cmp al, cl
sbb al, al
and dl, 0xf
and al, 0x27
add al, 0x30
add al, cl
mov byte [ebp + esi*2 - 0x54], al
mov al, 9
cmp al, dl
sbb al, al
and al, 0x27
add al, 0x30
add al, dl
mov byte [ebp + esi*2 - 0x53], al
inc esi
cmp esi, 0x20
jb 0x469e93
push 0x20
call fcn.0042b582
mov esi, eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x120], esi
push eax
mov word [esi], 0x100
mov dword [esi + 8], 0
call fcn.00452f63
cmp dword [ebp + 0x10], 0
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xffffffff
mov dword [esi + 0x18], 0
push str.miner.fee.xmrig.com
jne 0x469fff
mov eax, 0x1a0a
mov word [esi + 0x1c], ax
call fcn.00452f63
add esp, 0xc
mov dword [esi + 4], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], esi
mov ecx, ebx
push eax
call fcn.00407c90
push 0x20
call fcn.0042b582
mov esi, eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x120], esi
push eax
mov word [esi], 0x100
mov dword [esi + 8], 0
call fcn.00452f63
mov dword [esi + 0xc], eax
mov eax, 0x50
push str.miner.fee.xmrig.com
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xffffffff
mov dword [esi + 0x18], 0
mov word [esi + 0x1c], ax
call fcn.00452f63
add esp, 0xc
mov dword [esi + 4], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], esi
mov ecx, ebx
push eax
call fcn.00407c90
push 0x20
call fcn.0042b582
mov esi, eax
mov dword [ebp - 0x120], esi
push str.emergency
mov word [esi], 0
call fcn.00452f63
push str.48edfHu7V9Z84YzzMa6fUueoELZ9ZRXq9VetWzYGzKt52XU5xvqgzYnDK9URnRoJMk1j8nLwEVsaSWJ4fhdUyZijBGUicoD
mov dword [esi + 8], eax
call fcn.00452f63
mov dword [esi + 0xc], eax
mov eax, 0x15b3
push str.emergency.fee.xmrig.com
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xffffffff
mov dword [esi + 0x18], 0
mov word [esi + 0x1c], ax
call fcn.00452f63
add esp, 0x10
jmp 0x46a079
mov eax, 0x15b3
mov word [esi + 0x1c], ax
call fcn.00452f63
add esp, 0xc
mov dword [esi + 4], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], esi
mov ecx, ebx
push eax
call fcn.00407c90
push 0x20
call fcn.0042b582
mov esi, eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x120], esi
push eax
mov word [esi], 0x100
mov dword [esi + 8], 0
call fcn.00452f63
mov dword [esi + 0xc], eax
mov eax, 0x1e61
push str.miner.fee.xmrig.com
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xffffffff
mov dword [esi + 0x18], 0
mov word [esi + 0x1c], ax
call fcn.00452f63
add esp, 0xc
mov dword [esi + 4], eax
mov ecx, ebx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], esi
push eax
call fcn.00407c90
push 0x2c
call fcn.0042b582
add esp, 4
mov dword [ebp - 0x120], eax
push 1
lea ecx, [edi + 4]
mov byte [ebp - 4], 3
push ecx
push 1
push 1
push ebx
mov ecx, eax
call fcn.0046a650
mov byte [ebp - 4], 2
mov edx, dword [0x4b04c0]
mov dword [edi + 0x14], eax
mov dword [edi + 0x28], edi
test edx, edx
jne 0x46a0e6
call fcn.00413740
test eax, eax
je 0x46a0d7
xor edx, edx
jmp 0x46a0e6
mov dword [0x4b04c0], 0x4b04c8
mov edx, 0x4b04c8
mov dword [edi + 0x2c], edx
lea ecx, [edi + 0x38]
mov dword [edi + 0x30], 0xd
lea eax, [edx + 8]
mov dword [edi + 0x54], 0x20
mov dword [ecx], eax
mov eax, dword [edx + 0xc]
mov dword [edi + 0x3c], eax
mov dword [eax], ecx
mov dword [edx + 0xc], ecx
mov dword [edi + 0x40], 0xffffffff
mov dword [edi + 0x80], 0
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
call fcn.0044a85b
mov ecx, eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edi
mov eax, edx
shr eax, 0x1f
add eax, 0xbb8
add eax, edx
imul eax, eax, 0x3e8
sub eax, dword [edi + 0xc]
cdq
push edx
push eax
call fcn.00469c30
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042b571
mov esp, ebp
pop ebp
ret 0x10