Function at 0x40ce20
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x5a0
push esi
push edi
call fcn.0040cc40
call fcn.00414910
call fcn.00419480
call fcn.0040cd40
cmp eax, 4
jne 0x40ce60
call fcn.0040e970
call fcn.0040eb00
push 0
call fcn.00424670
add esp, 4
pop edi
pop esi
add esp, 0x5a0
ret 0x10
cmp eax, 1
jne 0x40ce9a
xor edi, edi
xor esi, esi
push edi
call fcn.00414f40
add esp, 4
cmp eax, edi
je 0x40ce8d
mov edx, dword [eax]
push edi
push edi
mov ecx, eax
call dword [edx + 0x20]
inc esi
push esi
call fcn.00414f40
add esp, 4
cmp eax, edi
jne 0x40ce76
pop edi
xor eax, eax
pop esi
add esp, 0x5a0
ret 0x10
cmp eax, 3
jne 0x40cec8
call fcn.0040d850
xor edi, edi
cmp eax, edi
jl 0x40ceb6
push edi
push edi
push eax
push edi
call fcn.0040d340
add esp, 0x10
call fcn.0040d950
pop edi
xor eax, eax
pop esi
add esp, 0x5a0
ret 0x10
call fcn.0040d2f0
xor edi, edi
test eax, eax
je 0x40cf77
mov eax, dword [str.killersetmain]
mov ecx, dword [0x4378e0]
mov edx, dword [0x4378e4]
mov dword [esp + 0x10], eax
mov ax, word [0x4378e8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x4a4]
mov word [esp + 0x1c], ax
push 0x104
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
mov dword [esp + 0x18], edi
call fcn.00417c10
mov ecx, eax
call fcn.00417fc0
test eax, eax
je 0x40cf77
push 0x24
push 0x436428
push 0x4378b4
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x40cf64
push 5
push edi
push edi
push str.http:__dl.360safe.com_SuperKiller.exe
push 0x436318
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
xor eax, eax
pop esi
add esp, 0x5a0
ret 0x10
cmp dword [esp + 8], edi
je 0x40cf77
pop edi
xor eax, eax
pop esi
add esp, 0x5a0
ret 0x10
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
push edi
push edi
push edi
push edi
call dword [sym.imp.USER32.dll_DefWindowProcA]
lea ecx, [esp + 8]
push ecx
mov dword [esp + 0xc], 8
mov dword [esp + 0x10], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov dword [0x45ecb8], 0x437818
mov dword [0x45ec18], 0x45ec48
mov edx, dword [esp + 0x5ac]
mov dword [0x45ec48], 0x84
push edx
push edi
push 0x45ec48
mov dword [0x45ecac], 0x300
call fcn.0040d190
mov esi, dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
call esi
push 0xc
mov dword [0x45eccc], eax
mov dword [0x45ecd0], edi
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
cmp eax, edi
je 0x40d009
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
jmp 0x40d00b
xor eax, eax
cmp eax, edi
mov dword [0x45ecd0], eax
je 0x40d01a
mov dword [0x45ecd4], edi
push ebx
lea ecx, [esp + 0x30]
call fcn.00407dd0
lea eax, [esp + 0x30]
mov dword [esp + 0x38], eax
call esi
push 0x45ec7c
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov ecx, dword [0x45ecb0]
lea edx, [esp + 0x38]
push 0x45ec7c
mov dword [esp + 0x44], ecx
mov dword [0x45ecb0], edx
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov eax, dword [0x45ec50]
push edi
push 0x404840
push edi
push 0x81
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push 5
mov ecx, dword [esp + 0x38]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push edi
push edi
lea edx, [esp + 0x1c]
push edi
push edx
call esi
test eax, eax
je 0x40d0bf
mov ebx, dword [sym.imp.USER32.dll_TranslateMessage]
push ebp
mov ebp, dword [sym.imp.USER32.dll_DispatchMessageA]
lea eax, [esp + 0x18]
push eax
call ebx
lea ecx, [esp + 0x18]
push ecx
call ebp
push edi
push edi
lea edx, [esp + 0x20]
push edi
push edx
call esi
test eax, eax
jne 0x40d0a2
pop ebp
push 1
push str.akMainClose
call fcn.00417c10
mov ecx, eax
call fcn.00418580
lea ecx, [esp + 0x30]
call fcn.00408140
mov eax, dword [0x45ec18]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov eax, dword [0x45ecd4]
cmp eax, edi
je 0x40d108
cmp dword [eax + 4], edi
jle 0x40d108
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [0x45ecd4]
mov esi, eax
cmp esi, edi
je 0x40d11e
mov ecx, esi
call fcn.0040d3e0
push esi
call fcn.0042d5f4
add esp, 4
mov eax, dword [0x45ec18]
mov dword [0x45ecd4], edi
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov esi, dword [0x45ecd0]
cmp esi, edi
je 0x40d16d
mov eax, dword [esi]
mov ebx, dword [sym.imp.MSVCRT.dll_free]
cmp eax, edi
je 0x40d151
push eax
call ebx
add esp, 4
mov dword [esi], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x40d161
push eax
call ebx
add esp, 4
mov dword [esi + 4], edi
push esi
mov dword [esi + 8], edi
call fcn.0042d5f4
add esp, 4
push 0x45ec48
call fcn.0040d220
call dword [sym.imp.ole32.dll_CoUninitialize]
pop ebx
pop edi
xor eax, eax
pop esi
add esp, 0x5a0
ret 0x10