Function at 0x4024a0
Capabilities:
Create process on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x434125
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x446018]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push 0x44044c
push 0x440624
call esi
test eax, eax
jne 0x4026f9
push 0x44044c
push str.dockhook32
call esi
test eax, eax
jne 0x402508
push 0x44044c
push str.MyFinderApp
call esi
test eax, eax
je 0x4026f9
push 0
push str.MYDOCKFINDER
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x4026f9
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x10]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push edi
push 0
push 0
push 0x32
push 0x32
push 0
push 0x80000000
push 0x80000000
push 0x44064c
push str.dockmod32
push 0x80
mov ebx, eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x447ee0], eax
test eax, eax
je 0x4026f9
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x4025bd
push str.ZwWow64ReadVirtualMemory64
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
setne al
test al, al
je 0x4025bd
push 1
push 0
push 0
push str.dockmod64.exe
push 0x440674
push 0
mov byte [0x44839c], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x44044c
push str.dockhook32
call esi
mov dword [0x447ee4], eax
test eax, eax
jne 0x4025e3
push 0x44044c
push str.MyFinderApp
call esi
mov dword [0x447ee4], eax
push 0x448398
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push str.MyDockFinderShare
call esi
push str.MyDockFinderShareHwnd
mov dword [0x447edc], eax
call esi
push str.MyDockFinderShareTemp
mov dword [0x4483a0], eax
call esi
push str.MyDockFinderShareMemoryTask
mov dword [0x447ed8], eax
call esi
push str.MyDockFinderShareKey
mov dword [0x4483a4], eax
call esi
push str.MyDockFinderStageManager
mov dword [0x4483a8], eax
call esi
mov esi, dword [sym.imp.USER32.dll_ChangeWindowMessageFilter]
push 1
push eax
mov dword [0x4483ac], eax
call esi
push 1
push dword [0x447edc]
call esi
push 1
push dword [0x4483a0]
call esi
push 1
push dword [0x447ed8]
call esi
push 1
push dword [0x4483a8]
call esi
push 1
push dword [0x4483a4]
call esi
test ebx, ebx
je 0x4026ca
push 4
call fcn.004166f6
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [eax], ebx
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x403360
push 0
push 0
call fcn.0041b31f
add esp, 0x18
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x402712
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 1
call fcn.004011e0
cmp dword [ebp - 0x18], 0
jne 0x40270d
jmp 0x4026e2
push 0x401fc0
push 0x3e8
push 1
push dword [0x447ee0]
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0041b560
push 6
mov dword [ebp - 0x18], 0
call fcn.004159cf
int3