Function at 0x401520
Capabilities:
Create process on windows
Create thread

Disassembly:
sub esp, 0xb4
mov dword [0x409de0], 0x94
push ebx
mov ebx, dword [esp + 0xbc]
push ebp
push esi
push edi
push 0x409de0
mov dword [0x409dbc], ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
call fcn.00401bd0
test eax, eax
je 0x40165c
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [esp + 0x48]
push 0xa
push eax
push 3
push ebx
call esi
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
lea ecx, [esp + 0x48]
push 0
push ecx
call edi
mov ebp, eax
test ebp, ebp
je 0x40165c
lea edx, [esp + 0x10]
push 0xa
push edx
push 2
push ebx
call esi
lea eax, [esp + 0x10]
push 0
push eax
call edi
test eax, eax
jne 0x40165c
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.Apoint.DLL
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x409dc8], eax
test eax, eax
je 0x4015dd
push str.FusCheckSessionId
push eax
call esi
mov ecx, dword [0x409dc8]
push str.FusRegister
push ecx
mov dword [0x409e80], eax
call esi
mov dword [0x409dac], eax
push str.ApCommon.DLL
call edi
xor edi, edi
mov dword [0x409dc4], eax
cmp eax, edi
je 0x40160f
push str.FusCheckSessionId
push eax
call esi
mov edx, dword [0x409dc4]
push str.FusRegister
push edx
mov dword [0x409e80], eax
call esi
mov dword [0x409dac], eax
call fcn.004014c0
mov esi, dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
lea eax, [esp + 0x70]
push eax
call esi
cmp word [esp + 0xa0], di
je 0x40166b
lea ecx, [esp + 0xb4]
lea edx, [esp + 0x70]
push ecx
push edx
push edi
push edi
push 0x8000030
push edi
push edi
push edi
push edi
push str.Apntex.exe
mov word [esp + 0xc8], di
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xb4
ret 0x10
push 0xa
push ebx
mov dword [esp + 0x24], 3
mov dword [esp + 0x28], 0x4019a0
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebx
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push edi
mov dword [esp + 0x38], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], 6
mov dword [esp + 0x34], eax
lea eax, [esp + 0x10]
push ecx
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_RegisterClassA]
test ax, ax
je 0x40165c
mov edx, dword [0x409dbc]
push edi
push edx
push edi
push edi
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
lea eax, [esp + 0x30]
push edi
lea ecx, [esp + 0x34]
push eax
push ecx
push edi
call dword [sym.imp.USER32.dll_CreateWindowExA]
test eax, eax
je 0x40165c
lea edx, [esp + 0x44]
push edx
push edi
push ebp
push 0x401790
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, edi
mov dword [0x409bf8], eax
je 0x401656
lea eax, [esp + 0x70]
push eax
call esi
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push 1
push 0x401cf0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push edi
push edi
lea ecx, [esp + 0x5c]
push edi
push ecx
call esi
test eax, eax
je 0x40177a
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageA]
lea edx, [esp + 0x54]
push edx
call edi
lea eax, [esp + 0x54]
push eax
call ebx
push 0
push 0
lea ecx, [esp + 0x5c]
push 0
push ecx
call esi
test eax, eax
jne 0x40175b
mov eax, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret 0x10