Function at 0x4036b0
Capabilities:
Create process on windows
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x174
mov eax, dword [0x413014]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_316]
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc140.dll_Ordinal_316]
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push 0xff
lea eax, [esp + 0x7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x28], 0
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov dword [esp + 0x40], eax
lea eax, [esp + 0x40]
mov dword [esp + 0x44], edx
xorps xmm0, xmm0
mov dword [esp + 0x60], 0
lea ecx, [esp + 0x58]
movsd qword [esp + 0x58], xmm0
push eax
call fcn.00409af0
mov ecx, 0x414824
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov eax, dword [0x414824]
push 0xc
push str.Initial.ini
push dword [eax - 0xc]
push eax
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
lea eax, [esp + 0x78]
push dword [esp + 0x30]
push 0x64
push eax
push 0x40e204
push str.CheckIntervalMin
push str.Setting
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov eax, dword [edi + 0xa8]
add esp, 4
mov eax, dword [eax + 0xc]
neg eax
sbb eax, eax
mov dword [esp + 0x4c], eax
je 0x403ae1
mov ebx, dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [edi + 0xa8]
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_6153]
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.00402c10
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x403909
push 0x5c
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_12826]
push eax
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_8322]
mov esi, eax
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov eax, dword [esi]
push 1
push 0x40e1c0
push dword [eax - 0xc]
push eax
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
lea eax, [esp + 0x30]
lea ecx, [esp + 0x38]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [esp + 0x64]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x190]
test eax, eax
je 0x4038f6
cmp eax, 1
jne 0x403886
push eax
jmp 0x40388d
cmp eax, 2
jne 0x4038a4
push 0
push dword [esp + 0x3c]
push 0x40d967
push dword [esp + 0x38]
push 0x40e1c4
push dword [edi + 0x20]
call ebx
mov eax, dword [esp + 0x28]
inc dword [eax + 0x184]
mov ecx, dword [esp + 0x28]
movq xmm0, qword [esp + 0x58]
movq qword [ecx + 0x16c], xmm0
mov eax, dword [esp + 0x60]
mov dword [ecx + 0x174], eax
lea eax, [esp + 0x34]
push dword [esp + 0x2c]
push 0x40e1e8
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0xc
lea eax, [esp + 0x34]
push 0
push eax
push 0x466
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0x28]
mov dword [eax + 0x188], 0
jmp 0x403ac9
movsd xmm0, qword [esp + 0x58]
movsd xmm2, qword [0x40f880]
comisd xmm0, xmm2
mov esi, dword [esp + 0x28]
movsd qword [esp + 0x40], xmm0
ja 0x40395f
fld qword [esp + 0x58]
sub esp, 8
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
movsd xmm0, qword [esp + 0x48]
add esp, 8
movsd xmm2, qword [0x40f880]
fstp qword [esp + 0x50]
movsd xmm1, qword [esp + 0x50]
subsd xmm0, xmm1
subsd xmm1, xmm0
movsd qword [esp + 0x40], xmm1
movsd xmm1, qword [esi + 0x178]
comisd xmm1, xmm2
movsd qword [esp + 0x70], xmm1
movsd qword [esp + 0x50], xmm1
ja 0x4039ab
fld qword [esp + 0x50]
sub esp, 8
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
movsd xmm0, qword [esp + 0x78]
add esp, 8
movsd xmm2, qword [0x40f880]
fstp qword [esp + 0x50]
movsd xmm1, qword [esp + 0x50]
subsd xmm0, xmm1
subsd xmm1, xmm0
movsd xmm0, qword [esp + 0x40]
mov ebx, dword [esi + 0x190]
subsd xmm0, xmm1
test ebx, ebx
je 0x403a1a
xorps xmm1, xmm1
comisd xmm1, xmm0
jbe 0x4039cd
movaps xmm1, xmm2
jmp 0x4039d5
movsd xmm1, qword [0x40f860]
addsd xmm0, xmm1
mulsd xmm0, qword [0x40f870]
call fcn.0040c5ff
mov ecx, eax
call fcn.0040c750
mov ecx, dword [0x414724]
shl ecx, 4
sub ecx, dword [0x414724]
shl ecx, 2
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
comisd xmm0, xmm1
jbe 0x403abd
cmp ebx, 1
jne 0x403abd
mov dword [esi + 0x188], 4
lea eax, [esp + 0x6c]
mov ecx, dword [esp + 0x28]
sub esp, 8
push eax
lea ecx, [ecx + 0x178]
call fcn.00409910
sub esp, 8
lea ecx, [esp + 0x60]
mov esi, eax
lea eax, [esp + 0x70]
push eax
call fcn.00409910
push dword [esi]
push dword [eax]
lea eax, [esp + 0x3c]
push dword [esp + 0x34]
push 0x40e208
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x14
lea ecx, [esp + 0x68]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [esp + 0x6c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
lea eax, [esp + 0x38]
push eax
push 0x466
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, dword [esp + 0x3c]
push ebx
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [esp + 0x28]
inc dword [eax + 0x184]
mov esi, dword [esp + 0x28]
jmp 0x403ac1
mov ebx, dword [esp + 0x3c]
mov dword [esi], ebx
mov ebx, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push dword [esp + 0x2c]
mov ecx, edi
call fcn.00404060
cmp dword [esp + 0x4c], 0
jne 0x4037c4
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, dword [esp + 0x17c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0040b2ce
mov esp, ebp
pop ebp
ret