Function at 0x40a7f7
Capabilities:
Create thread

Disassembly:
push 0x15c
mov eax, 0x424241
call fcn.004231c0
call fcn.0040117a
mov eax, dword [eax + 4]
mov ebx, dword [eax + 0x30]
mov dword [ebp - 0x44], ebx
call fcn.00413459
push ebx
mov ecx, eax
call fcn.004134a9
xor esi, esi
test eax, eax
je 0x40a877
mov dword [ebp - 4], esi
call fcn.00401b0a
push eax
lea ecx, [ebp - 0x34]
call fcn.00401564
mov dword [ebp - 4], 1
call fcn.00413459
lea ecx, [ebp - 0x34]
push ecx
push ebx
mov ecx, eax
call fcn.004134f0
call fcn.00401cfb
mov edi, eax
call fcn.00401cfb
mov esi, dword [ebp - 0x34]
mov ecx, edi
push dword [eax]
push esi
call fcn.0040bcf7
or dword [ebp - 4], 0xffffffff
lea ecx, [esi - 0x10]
call fcn.0040188c
xor esi, esi
push 0x42bae8
push 0x426954
call fcn.00419776
call fcn.00408845
push esi
push esi
push 0x426aa8
push 0x412896
push esi
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
add esp, 0x20
test edi, edi
je 0x40a8b6
push esi
push edi
call ebx
test eax, eax
jne 0x40a8c9
push 0x42e138
push 0x426ad8
call fcn.00419776
pop ecx
pop ecx
mov edi, esi
inc esi
call fcn.00408845
cmp dword [eax + 4], 0
jne 0x40a8e5
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 0x14
jb 0x40a8c9
call fcn.0040117a
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
mov dword [ebp - 0x3c], eax
call fcn.0040117a
lea ecx, [ebp - 0x38]
mov eax, dword [eax + 4]
push dword [eax + 0x5d4]
call fcn.0040655d
mov dword [ebp - 4], 2
mov esi, dword [ebp - 0x38]
call fcn.0040117a
mov ecx, dword [eax + 0x18]
sub ecx, 0x10
call fcn.00406d2d
add eax, 0x10
mov dword [ebp - 0x34], eax
mov edx, esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34]
call fcn.00414815
mov ecx, dword [ebp - 0x34]
mov esi, eax
add ecx, 0xfffffff0
call fcn.0040188c
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040188c
test esi, esi
je 0x40aa83
test byte [ebp - 0x3c], 2
je 0x40a999
call fcn.0040117a
xor ecx, ecx
lea eax, [ebp - 0x34]
push eax
push ecx
push ecx
push 0x4038c0
push ecx
push ecx
mov dword [ebp - 0x34], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
test esi, esi
je 0x40aa83
push 0xffffffffffffffff
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40aa83
lea ecx, [ebp - 0x30]
call fcn.00416dfe
mov dword [ebp - 4], 4
call fcn.0040117a
lea ecx, [ebp - 0x34]
mov eax, dword [eax + 4]
push dword [eax + 0x5d8]
call fcn.0040655d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
push dword [ebp - 0x34]
push str.AppCallName
call fcn.00416ecd
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov edx, 0x42bb08
lea ecx, [ebp - 0x40]
call fcn.00415b54
push eax
mov edx, 0x42ab58
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.004060cc
pop ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30]
push dword [eax]
call fcn.004172d2
push eax
push ecx
lea ecx, [ebp - 0x64]
call fcn.004011a1
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.0040188c
mov esi, dword [ebp - 0x5c]
call fcn.00415c01
push 0
push esi
push 0
push 0x89
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x64], 0x42688c
test ecx, ecx
je 0x40aa64
mov eax, dword [ecx]
push 1
call dword [eax]
and dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.0040188c
lea ecx, [ebp - 0x64]
call fcn.00401100
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00416e3d
mov eax, dword [0x437e58]
test eax, eax
je 0x40aaa4
push 0xffffffffffffffff
push eax
call ebx
push dword [0x437e58]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [0x437e58], 0
mov eax, dword [0x437e54]
test eax, eax
je 0x40aac5
push 0xffffffffffffffff
push eax
call ebx
push dword [0x437e54]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [0x437e54], 0
push 0x42bb1c
mov esi, 0x426954
push esi
call fcn.00419776
pop ecx
pop ecx
call fcn.0040117a
push dword [eax + 0x10]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test edi, edi
je 0x40aaf8
push 0x7d0
push edi
call ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3c]
mov ebx, eax
not ebx
and ebx, 1
test al, 2
je 0x40ac1f
call fcn.00401cfb
push eax
lea ecx, [ebp - 0x10c]
call fcn.00405873
mov dword [ebp - 4], 9
cmp dword [ebp - 0x10c], 0
jne 0x40ab81
push str.no_ui__but_need_detail
push esi
call fcn.00419776
pop ecx
pop ecx
call fcn.00408845
mov esi, eax
call fcn.0040117a
push 1
push ecx
mov edx, esp
mov dword [ebp - 0x44], esp
mov dword [ebp - 0x40], edx
mov ecx, dword [eax + 4]
add ecx, 0x55c
push ecx
mov ecx, edx
call fcn.0040655d
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xa
push 0x42b7cc
call fcn.0040655d
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.004129ee
mov esi, 0x426954
and dword [ebp - 0x3c], 0
call fcn.0040117a
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, eax
call fcn.004057eb
test eax, eax
je 0x40abf2
call fcn.0040117a
lea ecx, [ebp - 0x38]
mov eax, dword [eax + 4]
push dword [eax + 0x5d4]
call fcn.0040655d
mov byte [ebp - 4], 0xb
mov edi, dword [ebp - 0x38]
call fcn.0040117a
mov ecx, dword [eax + 0x18]
sub ecx, 0x10
call fcn.00406d2d
lea esi, [eax + 0x10]
mov dword [ebp - 0x40], esi
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
push edi
call fcn.004161c3
pop ecx
lea ecx, [esi - 0x10]
call fcn.0040188c
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.0040188c
jmp 0x40abff
push str.No_need_to_set_registry_FULLDUMP_flag.
push esi
call fcn.00419776
pop ecx
pop ecx
test ebx, ebx
je 0x40ac0f
call fcn.0040117a
mov ecx, eax
call fcn.00404954
lea ecx, [ebp - 0x10c]
call fcn.0040593f
jmp 0x40acb0
call fcn.00413459
push dword [ebp - 0x44]
mov ecx, eax
call fcn.004134a9
test eax, eax
je 0x40ac63
push 0
lea ecx, [ebp - 0x168]
call fcn.004088b9
mov esi, dword [ebp - 0x160]
call fcn.00415c01
push 0
push esi
push 0
push 0x83
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [ebp - 0x168]
jmp 0x40acab
push ebx
lea ecx, [ebp - 0xc0]
call fcn.004088b9
mov esi, dword [ebp - 0xb8]
call fcn.00415c01
push 0
push esi
push 0
push 0x83
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x40aca5
cmp dword [ebp - 0xb4], 0
je 0x40aca5
call fcn.0040117a
mov ecx, eax
call fcn.00404954
lea ecx, [ebp - 0xc0]
call fcn.00408962
xor eax, eax
inc eax
call fcn.0042316a
ret