Function at 0x4025c0
Capabilities:
Create thread
Delete file
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41cc88
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x427020]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], edx
mov edi, ecx
push 0
push edi
push 0
push 0
push 0xa5
push 0x12c
push 0
push SysReAllocString
push 0xc80000
push 0x42c4d8
push 0x42c410
push 0
mov dword [0x42c40c], edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x42c408], eax
test eax, eax
jne 0x40263d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x4236c0
lea ecx, [ebp - 0x10]
call fcn.00401130
mov dword [ebp - 4], 0
mov ecx, dword [eax]
test ecx, ecx
je 0x40265b
mov ecx, dword [ecx]
jmp 0x40265d
xor ecx, ecx
call fcn.00404a50
test eax, eax
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x10]
sete bl
test esi, esi
je 0x4026b9
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
jne 0x4026b9
test esi, esi
je 0x4026b9
mov eax, dword [esi]
test eax, eax
je 0x402699
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4026b0
push eax
call fcn.0040d418
add esp, 4
mov dword [esi + 4], 0
push esi
call fcn.0040d418
add esp, 4
test bl, bl
je 0x4026d5
push 0
push 0
push 0x4236d4
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0040dffc
push 0x42368c
push str.QWidget
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
push 0
test eax, eax
jne 0x40270a
push 0x423700
push 0x423708
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0040dffc
push 0x402c60
push dword [0x42c408]
push 0x81
push edi
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp dword [0x42ca0c], 0
jne 0x402731
push 0
call fcn.0040dffc
cmp dword [0x42ca24], 0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
jne 0x402750
push 0x3e8
call esi
cmp dword [0x42ca24], 0
je 0x402740
push ecx
call fcn.004044f0
add esp, 4
push 0x190
call esi
push 0x42373c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4293d8], eax
test eax, eax
jne 0x402789
push eax
push eax
push str.Load_main_functions_error__Please_try_again_in_a_little_bit._n_Error_code:0
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0040dffc
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x4237e8
push eax
call edi
mov dword [0x4293e0], eax
test eax, eax
jne 0x4027b5
push eax
push eax
push str.Load_main_functions_error__Please_try_again_in_a_little_bit._n_Error_code:1
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0040dffc
push 0x423888
push dword [0x4293d8]
call edi
mov dword [0x4293dc], eax
push 0
test eax, eax
jne 0x4027e1
push eax
push str.Load_main_functions_error__Please_try_again_in_a_little_bit._n_Error_code:2
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.0040dffc
call fcn.0040d4ed
push eax
call fcn.0040e031
add esp, 8
lea ecx, [ebp - 0x10]
call fcn.004045a0
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.00401650
mov ecx, 0x42c5a4
push dword [eax]
call fcn.00401360
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.004011e0
push 0x190
call esi
push str..sys
lea ecx, [ebp - 0x10]
call fcn.00401130
lea eax, [ebp - 0x10]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x14]
mov ecx, 0x42c5a4
push eax
call fcn.00401560
mov eax, dword [eax]
test eax, eax
je 0x402857
mov eax, dword [eax]
jmp 0x402859
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x14]
call fcn.004011e0
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call fcn.004011e0
push dword [ebp - 0x18]
push dword [0x42c408]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x42c408]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
push 0
push 0
push 0x4024d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x42c404], eax
call fcn.00403920
call fcn.00403ea0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret