Function at 0x404640
Capabilities:
Enumerate processes
Execute command

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
mov eax, dword [0x40e040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
push 0xfffffffffffffff5
call ebx
push 0xa
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str................................................................................................................_n
call fcn.00406460
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Press__2__Emulator_EN_n
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 3
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t__t__t__t__My_hack_Not_Work_on_Emulator_EN_Use_Other_Free_Hax_n
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 7
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n__t__t___t__t__t__t_Play_TW
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 6
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x40a874
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 0xe
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x40a878
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 2
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.IS_MORE_SAFE_n
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 6
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 8]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov eax, dword [ebp - 8]
cmp eax, 1
jne 0x4047f1
mov ecx, eax
call fcn.00402a90
nop word [eax + eax]
xor esi, esi
xor ebx, ebx
push esi
push 2
call edi
mov edi, eax
mov dword [ebp - 0x138], 0x128
lea eax, [ebp - 0x138]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32First]
lea eax, [ebp - 0x138]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x4047dd
nop word [eax + eax]
mov ecx, 0x4098c8
lea eax, [ebp - 0x114]
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4047b0
test dl, dl
je 0x4047ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4047b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x404790
xor eax, eax
jmp 0x4047b5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4047cb
mov eax, dword [ebp - 0x124]
cmp eax, esi
jle 0x4047cb
mov ebx, dword [ebp - 0x130]
mov esi, eax
lea eax, [ebp - 0x138]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x404780
mov edi, dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp ebx, 2
jle 0x404740
jmp 0x4048ac
cmp eax, 2
jne 0x404b0d
mov ecx, eax
call fcn.00402a90
xor esi, esi
xor ebx, ebx
push esi
push 2
call edi
mov edi, eax
mov dword [ebp - 0x260], 0x128
lea eax, [ebp - 0x260]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32First]
lea eax, [ebp - 0x260]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x40489d
nop word [eax + eax]
mov eax, 0x4098e0
lea ecx, [ebp - 0x23c]
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x404870
test dl, dl
je 0x40486c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x404870
add ecx, 2
add eax, 2
test dl, dl
jne 0x404850
xor eax, eax
jmp 0x404875
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40488b
mov eax, dword [ebp - 0x24c]
cmp eax, esi
jle 0x40488b
mov ebx, dword [ebp - 0x258]
mov esi, eax
lea eax, [ebp - 0x260]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x404840
mov edi, dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp ebx, 2
jle 0x404801
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___Emulator_is_ready_n
push 0x406aa0
push ebx
call fcn.00406460
mov edx, str._pid_:
mov ecx, eax
call fcn.00406460
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1388
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n..............................................................................................................._n
call fcn.00406460
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff5
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 8
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x40a8c4
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 2
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._1._GL_____________
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 3
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._2._TW_____________
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 7
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._3._KR_____________
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 6
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._4._VN
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 8
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x40a928
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 3
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._nYour_Choice__
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 2
push eax
call esi
push 0xfffffffffffffff5
call ebx
push 8
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x40a928
call fcn.00406460
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 8]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov eax, dword [ebp - 8]
cmp eax, 1
jne 0x404a29
mov ecx, eax
call fcn.00403200
push 0xfffffffffffffff5
call ebx
push 2
push eax
call esi
push 0x406aa0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.GL_started_successfully.
call fcn.00406460
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xfffffffffffffff5
call ebx
push 6
jmp 0x404a9d
cmp eax, 2
jne 0x404a45
mov ecx, eax
call fcn.00403710
push 0xfffffffffffffff5
call ebx
push 3
push eax
call esi
mov edx, str.TW_started_successfully.
jmp 0x404a7b
cmp eax, 3
jne 0x404a61
mov ecx, eax
call fcn.00403c20
push 0xfffffffffffffff5
call ebx
push 7
push eax
call esi
mov edx, str.KR_started_successfully.
jmp 0x404a7b
cmp eax, 4
jne 0x404aa0
mov ecx, eax
call fcn.00404130
push 0xfffffffffffffff5
call ebx
push 6
push eax
call esi
mov edx, str.VN_started_successfully.
push 0x406aa0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00406460
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xfffffffffffffff5
call ebx
push 8
push eax
call esi
push 0xfffffffffffffff5
call ebx
push 5
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n____________________________________PRESS_1_SAFE_EXIT___________________________n
call fcn.00406460
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n________________________________PRESS_2_RELOAD_PROCESSING...______________________n
call fcn.00406460
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x40a928
call fcn.00406460
push 0xa
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov eax, dword [ebp - 0xc]
cmp eax, 1
je 0x404b39
cmp eax, 2
jne 0x404b28
push 0x4097a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
jmp 0x404662
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n____Invalid_choice_n
call fcn.00406460
push 0xfffffffffffffff5
call ebx
push 8
push eax
call esi
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004078c2
mov esp, ebp
pop ebp
ret
call fcn.00402a00
int3