Function at 0x436a90
Capabilities:
Check for time delay via gettickcount
Check os version
Delete file
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xc
mov eax, dword [0x4612b0]
xor eax, esp
mov dword [esp + 8], eax
mov eax, dword [esi + 0x18]
push ebp
push edi
mov ebp, 1
test eax, eax
jne 0x436b20
mov dword [esi + 0x18], ebp
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push 0
shr edi, 0x18
call fcn.0043a6c4
imul eax, eax, 0x63
add esp, 4
cmp edi, eax
jbe 0x436ad7
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, ebp
jmp 0x436ad9
xor ecx, ecx
mov eax, 0x63e7063f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x29
jle 0x436b0e
push 0x29
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
call fcn.00418fd0
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x3c
jmp 0x436fee
cmp eax, ebp
jne 0x436b30
mov dword [esi + 0x18], 2
jmp 0x436fe1
cmp eax, 2
jne 0x436b79
push 0
mov dword [esi + 0x18], 4
call fcn.0043a6c4
add esp, 4
add eax, 0xb4
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
call fcn.00417500
test eax, eax
je 0x436ff7
call fcn.00435950
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
cmp eax, 4
jne 0x436bc5
push 0
mov dword [esi + 0x18], 5
call fcn.0043a6c4
add esp, 4
add eax, 0x3c
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
call fcn.004065f0
test eax, eax
je 0x436ff7
call fcn.00435a20
call fcn.00435ad0
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
cmp eax, 5
jne 0x436bd6
mov dword [esi + 0x18], 6
jmp 0x436fe1
cmp eax, 6
jne 0x436c04
mov dword [esi + 0x18], 8
call fcn.00435510
test eax, eax
je 0x436bf0
call fcn.00419900
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0xb4
jmp 0x436fee
cmp eax, 8
jne 0x436c44
mov dword [esi + 0x18], 0xa
call fcn.00417430
sub eax, ebp
jne 0x436c30
call fcn.00435ba0
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
jmp 0x436fee
mov edi, 0xa
cmp eax, edi
jne 0x436cf4
push 0
mov dword [esi + 0x18], 0xc
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
call fcn.00417360
test eax, eax
je 0x436c7e
call fcn.004308a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, 2
je 0x436c97
sub eax, 2
je 0x436c97
sub eax, 4
je 0x436c97
xor ecx, ecx
jmp 0x436ca1
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov ecx, ebp
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ecx, 0x160
jle 0x436ccf
push 0x160
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00419f30
call fcn.00435810
call fcn.00435460
test eax, eax
je 0x436ff7
call fcn.004308a0
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
cmp eax, 0xc
jne 0x436d14
push 0
mov dword [esi + 0x18], 0xe
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
jmp 0x436fee
cmp eax, 0xe
jne 0x436db1
push esi
call fcn.00437240
add dword [esi + 0x48], ebp
cmp dword [esi + 0x48], 9
ja 0x436d9b
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
xor edi, edi
push edi
mov eax, esi
call fcn.00437980
add eax, 0x1c
cmp dword [eax + 0x14], 0
jne 0x436d98
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edi, ebp
add eax, edx
cmp edi, eax
jae 0x436e2e
test edi, edi
jne 0x436d46
mov dword [esi + 0x18], 0xa
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
add edi, 0xf
mov dword [esi + 0x18], edi
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
cmp eax, 0xf
jne 0x436e48
push esi
call fcn.00437240
add dword [esi + 0x48], ebp
cmp dword [esi + 0x48], 9
ja 0x436d9b
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
mov edi, ebp
push edi
mov eax, esi
call fcn.00437980
add eax, 0x1c
cmp dword [eax + 0x14], 0
jne 0x436d98
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edi, ebp
add ecx, edx
cmp edi, ecx
jb 0x436e17
xor edi, edi
jmp 0x436de3
cmp edi, ebp
jne 0x436de3
call fcn.00406570
test eax, eax
je 0x436e2e
call fcn.00435c70
call fcn.00435d20
mov dword [esi + 0x18], 0xa
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
cmp eax, 0x10
jne 0x436f1a
push esi
call fcn.00437240
add dword [esi + 0x48], ebp
cmp dword [esi + 0x48], 9
jbe 0x436ead
mov dword [esi + 0x18], edi
call fcn.004354c0
test eax, eax
je 0x436e83
call fcn.00419840
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
call fcn.004354c0
test eax, eax
je 0x436ff7
call fcn.00419900
call fcn.00418fd0
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc
ret
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
call fcn.004175f0
test eax, eax
je 0x436ed3
call fcn.00419f30
mov edi, 2
push edi
mov eax, esi
call fcn.00437980
add eax, 0x1c
cmp dword [eax + 0x14], 0
jne 0x436d98
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edi, ebp
add eax, edx
cmp edi, eax
jb 0x436f10
xor edi, edi
jmp 0x436ed8
cmp edi, 2
jne 0x436ed8
jmp 0x436e2e
cmp eax, 0x11
jne 0x436fda
push esi
call fcn.00437240
call fcn.00435460
test eax, eax
je 0x436f37
call fcn.00435df0
add dword [esi + 0x48], ebp
cmp dword [esi + 0x48], 9
ja 0x436d9b
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x12c
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
call fcn.00435430
test eax, eax
je 0x436f6a
call fcn.00436210
xor edi, edi
lea esp, [esp]
push edi
mov eax, esi
call fcn.00437980
add eax, 0x1c
cmp dword [eax + 0x14], 0
jne 0x436d98
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edi, ebp
add ecx, edx
cmp edi, ecx
jb 0x436fa6
xor edi, edi
lea eax, [esp + 0xb]
mov byte [esp + 0xb], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x436fb2
sub eax, edx
mov eax, 0
setne al
sub eax, ebp
jne 0x436fd1
call fcn.00435ec0
call fcn.00435f30
test edi, edi
jne 0x436f70
jmp 0x436e2e
mov dword [esi + 0x18], 0
push 0
call fcn.0043a6c4
add esp, 4
add eax, 0x78
adc edx, 0
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edx
mov ecx, dword [esp + 0x10]
pop edi
pop ebp
xor ecx, esp
xor eax, eax
call fcn.00438dc1
add esp, 0xc
ret