Function at 0x466cc4
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x71
push 0
push 0
dec ecx
jne 0x466ccc
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4683f8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
xor eax, eax
mov dword [0x469f14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov eax, 0x469f0c
call fcn.004046dc
mov edx, 0x468414
mov eax, dword [ebp - 4]
call fcn.004662b4
mov byte [0x469f10], 1
cmp byte [0x469f34], 0
je 0x468226
jmp 0x467a7f
inc dword [0x469f14]
jmp 0x467ac5
push 0x1f4
call sub.kernel32.dll_Sleep_1
mov edx, 0x46862c
mov eax, dword [ebp - 4]
call fcn.004662b4
mov eax, dword [0x46a1f0]
mov eax, dword [eax]
call fcn.00457dd4
cmp byte [0x469f10], 0
je 0x467b2e
lea edx, [ebp - 0x2fc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.004386c8
mov eax, dword [ebp - 0x2fc]
lea edx, [ebp - 0x2f8]
call fcn.00465ccc
mov edx, dword [ebp - 0x2f8]
mov eax, dword [0x469f0c]
call fcn.00404ad8
je 0x467a99
lea edx, [ebp - 0x304]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.004386c8
mov eax, dword [ebp - 0x304]
lea edx, [ebp - 0x300]
call fcn.00465ccc
cmp dword [ebp - 0x300], 0
je 0x467a99
cmp byte [0x469f10], 0
je 0x468233
lea edx, [ebp - 0x30c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.004386c8
mov eax, dword [ebp - 0x30c]
lea edx, [ebp - 0x308]
call fcn.00465ccc
mov edx, dword [ebp - 0x308]
mov eax, 0x469f0c
call fcn.00404730
mov eax, dword [ebp - 4]
call fcn.00466bc4
xor ebx, ebx
cmp byte [0x469f2c], 0
je 0x467c12
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
mov eax, dword [eax + 0x23c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x467c12
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 0x310]
push eax
mov edx, dword [ebp - 0x28]
mov eax, 0x468504
call fcn.00404cd0
mov edx, eax
inc edx
mov ecx, 0xf
mov eax, dword [ebp - 0x28]
call fcn.00404bec
mov eax, dword [ebp - 0x310]
lea edx, [ebp - 0x2c]
call fcn.0040897c
mov eax, dword [0x469f0c]
mov edx, dword [ebp - 0x2c]
call fcn.00404ad8
jne 0x467c0a
mov bl, 1
jmp 0x467c12
inc dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x467bab
test bl, bl
jne 0x4680f6
cmp dword [0x469f30], 0
jne 0x467d98
mov eax, dword [0x469f28]
dec eax
test eax, eax
jl 0x467e6b
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
xor eax, eax
push ebp
push 0x467d4e
push dword fs:[eax]
mov dword fs:[eax], esp
push dword [0x469f0c]
push 0x468450
lea edx, [ebp - 0x31c]
mov ebx, dword [ebp - 0x24]
inc ebx
mov eax, ebx
call fcn.00408b98
mov eax, dword [ebp - 0x31c]
lea edx, [ebp - 0x318]
call fcn.0040897c
push dword [ebp - 0x318]
push 0x468510
lea ecx, [ebp - 0x320]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
push dword [ebp - 0x320]
lea eax, [ebp - 0x314]
mov edx, 5
call fcn.00404a54
mov edx, dword [ebp - 0x314]
mov eax, dword [ebp - 4]
call fcn.004662b4
lea ecx, [ebp - 0x328]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x328]
lea eax, [ebp - 0x324]
call fcn.00404f20
mov eax, dword [ebp - 0x324]
push eax
lea edx, [ebp - 0x334]
mov eax, ebx
call fcn.00408b98
mov eax, dword [ebp - 0x334]
lea edx, [ebp - 0x330]
call fcn.0040897c
mov ecx, dword [ebp - 0x330]
lea eax, [ebp - 0x32c]
mov edx, 0x468524
call fcn.004049e0
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 4]
call fcn.0041e30c
pop edx
call fcn.00461d2c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x467d87
inc dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x467c40
jmp 0x467e6b
mov eax, dword [0x469f28]
dec eax
test eax, eax
jl 0x467e6b
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
push dword [0x469f0c]
push 0x468450
lea edx, [ebp - 0x344]
mov eax, dword [ebp - 0x24]
inc eax
call fcn.00408b98
mov eax, dword [ebp - 0x344]
lea edx, [ebp - 0x340]
call fcn.0040897c
push dword [ebp - 0x340]
push 0x468510
lea ecx, [ebp - 0x348]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x348]
lea eax, [ebp - 0x33c]
mov edx, 5
call fcn.00404a54
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 4]
call fcn.004662b4
lea ecx, [ebp - 0x34c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x34c]
mov eax, dword [ebp - 4]
call fcn.00468638
mov edx, dword [0x46bd34]
mov ecx, dword [ebp - 0x24]
mov dword [edx + ecx*4], eax
inc dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x467db1
call fcn.0040a314
fstp qword [ebp - 0x10]
wait
call fcn.0040a314
fstp qword [ebp - 0x18]
wait
fld qword [ebp - 0x18]
fsub qword [ebp - 0x10]
fstp qword [ebp - 0x20]
wait
jmp 0x467ef2
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.004386c8
mov eax, dword [ebp - 0x354]
lea edx, [ebp - 0x350]
call fcn.00465ccc
mov edx, dword [ebp - 0x350]
mov eax, dword [0x469f0c]
call fcn.00404ad8
jne 0x467f23
push 0x1f4
call sub.kernel32.dll_Sleep_1
call fcn.0040a314
fstp qword [ebp - 0x18]
wait
fld qword [ebp - 0x18]
fsub qword [ebp - 0x10]
fstp qword [ebp - 0x20]
wait
mov eax, dword [0x46a1f0]
mov eax, dword [eax]
call fcn.00457dd4
cmp byte [0x469f10], 0
je 0x467f23
fld qword [ebp - 0x20]
fmul dword [0x46846c]
call fcn.00402b08
push edx
push eax
mov eax, dword [0x469f1c]
cdq
cmp edx, dword [esp + 4]
jne 0x467f1b
cmp eax, dword [esp]
pop edx
pop eax
jae 0x467e89
jmp 0x467f23
pop edx
pop eax
jge 0x467e89
cmp dword [0x469f30], 0
je 0x467fcb
mov eax, dword [0x469f28]
dec eax
test eax, eax
jl 0x46806c
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0x24]
inc eax
call fcn.00408b98
mov ecx, dword [ebp - 0x35c]
lea eax, [ebp - 0x358]
mov edx, 0x468550
call fcn.004049e0
mov edx, dword [ebp - 0x358]
mov eax, dword [ebp - 4]
call fcn.004662b4
mov eax, dword [0x46bd34]
mov edx, dword [ebp - 0x24]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x467fbe
xor edx, edx
push ebp
push 0x467fb4
push dword fs:[edx]
mov dword fs:[edx], esp
push 1
mov edx, dword [0x46bd34]
mov ecx, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_TerminateProcess
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x467fbe
inc dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x467f49
jmp 0x46806c
mov eax, dword [0x469f28]
dec eax
test eax, eax
jl 0x46806c
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
lea edx, [ebp - 0x364]
mov ebx, dword [ebp - 0x24]
inc ebx
mov eax, ebx
call fcn.00408b98
mov ecx, dword [ebp - 0x364]
lea eax, [ebp - 0x360]
mov edx, 0x468550
call fcn.004049e0
mov edx, dword [ebp - 0x360]
mov eax, dword [ebp - 4]
call fcn.004662b4
lea edx, [ebp - 0x370]
mov eax, ebx
call fcn.00408b98
mov eax, dword [ebp - 0x370]
lea edx, [ebp - 0x36c]
call fcn.0040897c
mov ecx, dword [ebp - 0x36c]
lea eax, [ebp - 0x368]
mov edx, 0x468524
call fcn.004049e0
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 4]
call fcn.0041e30c
call fcn.00461d98
inc dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x467fe4
cmp byte [0x469f38], 0
je 0x468087
mov edx, 0x468564
mov eax, dword [ebp - 4]
call fcn.004662b4
call fcn.00465c44
cmp dword [0x469f0c], 0
je 0x4680e7
call fcn.0040a314
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x378]
mov eax, 0x46857c
call fcn.0040af6c
push dword [ebp - 0x378]
push 0x468504
push dword [0x469f0c]
lea eax, [ebp - 0x374]
mov edx, 3
call fcn.00404a54
mov edx, dword [ebp - 0x374]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp byte [0x469f10], 0
je 0x468233
jmp 0x468127
push dword [0x469f0c]
push 0x468598
push 0x468450
push dword [ebp - 0x28]
lea eax, [ebp - 0x37c]
mov edx, 4
call fcn.00404a54
mov edx, dword [ebp - 0x37c]
mov eax, dword [ebp - 4]
call fcn.004662b4
mov eax, dword [0x469f14]
mov ecx, 0xa
cdq
idiv ecx
test edx, edx
jne 0x468226
lea edx, [ebp - 0x384]
mov eax, dword [0x46a1f0]
mov eax, dword [eax]
call fcn.00458558
mov eax, dword [ebp - 0x384]
lea edx, [ebp - 0x380]
call fcn.00408ec4
lea eax, [ebp - 0x380]
mov edx, 0x4685ec
call fcn.0040499c
mov edx, dword [ebp - 0x380]
lea eax, [ebp - 0x200]
call fcn.00402e10
lea eax, [ebp - 0x200]
call fcn.00402bac
call fcn.00402914
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
mov eax, dword [eax + 0x23c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4681f4
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x388]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x200]
call fcn.00404d7c
call fcn.0040343c
call fcn.00402914
inc dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x4681b4
xor eax, eax
push ebp
push 0x46821c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x200]
call fcn.00402ed8
call fcn.00402914
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x468226
cmp byte [0x469f10], 0
jne 0x467a91