Function at 0x401435
Capabilities:
Check os version
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
push esi
push edi
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0xf0], 0
mov word [ebp - 0x114], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf8], 0x1000
call dword [sym.imp.KERNEL32.dll_GetVersion]
push 3
push 0x45ec8c
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x54], 0x1000
push 0
push 0x45ec90
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x14c], eax
push 1
mov eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
test eax, eax
jne 0x401507
mov dword [ebp - 0x184], 1
jmp 0x40151e
mov ecx, dword [ebp - 0x148]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x184], 1
push 0xa0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x144], 1
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x148], 0
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x148], eax
mov ecx, 0xb
mov esi, str.System_defenition_is_access__please_report_snd
lea edi, [ebp - 0x180]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 4
push 0x1000
push 0x243
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x144], 0
jbe 0x4015bb
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0x1cc]
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0xf4], edx
mov dword [ebp - 4], 0xfffff
mov dword [ebp - 0x100], 4
cmp dword [ebp - 0x58], 1
je 0x4015e8
mov eax, 1
test eax, eax
je 0x4018df
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x188], 0x67caf2c7
mov edx, dword [ebp - 4]
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x184], 2
mov byte [ebp - 0x50], 0x31
mov byte [ebp - 0x4f], 0x38
lea ecx, [ebp - 0x1a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov byte [ebp - 0x4e], 3
mov dword [ebp - 0x1a4], 0
push 1
push 0
call dword [sym.imp.USER32.dll_EnableWindow]
lea edx, [ebp - 0x1a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov word [ebp - 0x1cc], 0
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x190], str.Flush_Map_progress
mov eax, dword [str.efs325]
mov dword [ebp - 0x1d8], eax
mov cx, word [0x45ecdc]
mov word [ebp - 0x1d4], cx
mov dl, byte [0x45ecde]
mov byte [ebp - 0x1d2], dl
lea eax, [ebp - 0x4f]
push eax
push 0
call dword [sym.imp.USER32.dll_LoadBitmapA]
test eax, eax
je 0x4016bf
push 0
mov ecx, dword [ebp - 0x190]
add ecx, 4
push ecx
lea edx, [ebp - 0x17d]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x100], 0x3bf3
mov dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x1dc]
jae 0x401744
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [ebp - 0x1dc]
jae 0x401712
mov edx, dword [ebp - 0x1e4]
add edx, 1
mov dword [ebp - 0x1e4], edx
cmp dword [ebp - 0x1e4], 0
jbe 0x401733
push 4
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x18c]
push ecx
call fcn.00404ec0
add esp, 0xc
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x1ec], edx
jmp 0x4016e7
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1ec], 0x3e6
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jne 0x401791
mov ecx, dword [ebp - 0x124]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x1a4], 0xa
jae 0x4017a8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1f0], eax
jmp 0x4017bc
push 4
push 0x1000
push 0x100
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [ebp - 0x1ec], 0x3e6
jne 0x40181c
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1d0]
mov dword [edx + 0x30], eax
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0x30], 0
je 0x4017ed
xor edx, edx
test edx, edx
je 0x4017ed
mov dword [ebp - 0x284], 0x94
cmp dword [ebp - 0x1f0], 0x276d
je 0x401802
mov eax, 1
test eax, eax
je 0x40181c
mov ecx, dword [ebp - 0xf4]
push ecx
lea edx, [ebp - 0x50]
push edx
call fcn.00404afb
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 4]
shl eax, 1
cmp eax, dword [ebp - 0x1a4]
jb 0x4018ca
cmp dword [ebp - 0x188], 0
je 0x4018ca
mov ecx, dword [ebp - 0x30]
mov dword [ecx], 0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x288], 0x7d83
cmp dword [ebp - 0x124], 0xffffffff
je 0x401872
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x294], 0
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x8000
push 0
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x1cc]
mov dword [0x45f1c0], edx
cmp dword [ebp - 0x144], 0xa
jbe 0x4018c3
mov dword [ebp - 0x30], 0xff1a
mov dword [ebp - 0xf4], 0xfaf0
jmp 0x4018c8
mov eax, dword [ebp - 0x30]
jmp 0x4018e1
jmp 0x4018df
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x5c]
add eax, 0xd
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret