Function at 0x40e4d0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x5ac
push esi
push edi
call fcn.0040e2f0
call fcn.00419170
call fcn.0041eff0
call fcn.0040e3f0
cmp eax, 4
jne 0x40e510
call fcn.0040ffe0
call fcn.00410170
push 0
call fcn.0042a0e0
add esp, 4
pop edi
pop esi
add esp, 0x5ac
ret 0x10
cmp eax, 1
jne 0x40e54a
xor edi, edi
xor esi, esi
push edi
call fcn.004197a0
add esp, 4
cmp eax, edi
je 0x40e53d
mov edx, dword [eax]
push edi
push edi
mov ecx, eax
call dword [edx + 0x20]
inc esi
push esi
call fcn.004197a0
add esp, 4
cmp eax, edi
jne 0x40e526
pop edi
xor eax, eax
pop esi
add esp, 0x5ac
ret 0x10
cmp eax, 3
jne 0x40e578
call fcn.0040edf0
xor edi, edi
cmp eax, edi
jl 0x40e566
push edi
push edi
push eax
push edi
call fcn.0040e9f0
add esp, 0x10
call fcn.0040efc0
pop edi
xor eax, eax
pop esi
add esp, 0x5ac
ret 0x10
call fcn.0040e9a0
xor edi, edi
test eax, eax
je 0x40e627
mov eax, dword [str.killersetmain]
mov ecx, dword [0x44a800]
mov edx, dword [0x44a804]
mov dword [esp + 0x10], eax
mov ax, word [0x44a808]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x4b0]
mov word [esp + 0x1c], ax
push 0x104
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
mov dword [esp + 0x18], edi
call fcn.0041d780
mov ecx, eax
call fcn.0041db30
test eax, eax
je 0x40e627
push 0x24
push 0x449458
push 0x44a7d4
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x40e614
push 5
push edi
push edi
push str.http:__dl.360safe.com_SuperKiller.exe
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
xor eax, eax
pop esi
add esp, 0x5ac
ret 0x10
cmp dword [esp + 8], edi
je 0x40e627
pop edi
xor eax, eax
pop esi
add esp, 0x5ac
ret 0x10
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
push edi
push edi
push edi
push edi
call dword [sym.imp.USER32.dll_DefWindowProcA]
lea ecx, [esp + 8]
push ecx
mov dword [esp + 0xc], 8
mov dword [esp + 0x10], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov dword [0x47c5f0], 0x44a738
mov dword [0x47c550], 0x47c580
mov edx, dword [esp + 0x5b8]
mov dword [0x47c580], 0x84
push edx
push edi
push 0x47c580
mov dword [0x47c5e4], 0x300
call fcn.0040e840
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call esi
push 0xc
mov dword [0x47c604], eax
mov dword [0x47c608], edi
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
cmp eax, edi
je 0x40e6b9
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
jmp 0x40e6bb
xor eax, eax
cmp eax, edi
mov dword [0x47c608], eax
je 0x40e6ca
mov dword [0x47c60c], edi
push ebx
lea ecx, [esp + 0x30]
call fcn.00407ac0
lea eax, [esp + 0x30]
mov dword [esp + 0x38], eax
call esi
push 0x47c5b4
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x47c5e8]
lea edx, [esp + 0x38]
push 0x47c5b4
mov dword [esp + 0x44], ecx
mov dword [0x47c5e8], edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x47c588]
push edi
push 0x404820
push edi
push 0x81
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push 5
mov ecx, dword [esp + 0x38]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push edi
push edi
lea edx, [esp + 0x1c]
push edi
push edx
call esi
test eax, eax
je 0x40e76f
mov ebx, dword [sym.imp.USER32.dll_TranslateMessage]
push ebp
mov ebp, dword [sym.imp.USER32.dll_DispatchMessageA]
lea eax, [esp + 0x18]
push eax
call ebx
lea ecx, [esp + 0x18]
push ecx
call ebp
push edi
push edi
lea edx, [esp + 0x20]
push edi
push edx
call esi
test eax, eax
jne 0x40e752
pop ebp
push 1
push str.akMainClose
call fcn.0041d780
mov ecx, eax
call fcn.0041e0f0
lea ecx, [esp + 0x30]
call fcn.00407e50
mov eax, dword [0x47c550]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x47c60c]
cmp eax, edi
je 0x40e7b8
cmp dword [eax + 4], edi
jle 0x40e7b8
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [0x47c60c]
mov esi, eax
cmp esi, edi
je 0x40e7ce
mov ecx, esi
call fcn.0040ea90
push esi
call fcn.0043fa08
add esp, 4
mov eax, dword [0x47c550]
mov dword [0x47c60c], edi
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x47c608]
cmp esi, edi
je 0x40e81d
mov eax, dword [esi]
mov ebx, dword [sym.imp.MSVCRT.dll_free]
cmp eax, edi
je 0x40e801
push eax
call ebx
add esp, 4
mov dword [esi], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x40e811
push eax
call ebx
add esp, 4
mov dword [esi + 4], edi
push esi
mov dword [esi + 8], edi
call fcn.0043fa08
add esp, 4
push 0x47c580
call fcn.0040e8d0
call dword [sym.imp.ole32.dll_CoUninitialize]
pop ebx
pop edi
xor eax, eax
pop esi
add esp, 0x5ac
ret 0x10