Function at 0x451ab0
Capabilities:
Check os version

Disassembly:
push 0x138
mov eax, 0x489b41
call fcn.0047ceef
mov ebx, ecx
and dword [ebp - 4], 0
and dword [ebp - 0x13c], 0
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [ebp - 0x140], 0xe
cmp eax, 1
je 0x451b41
cmp eax, 2
je 0x451b41
cmp eax, 3
je 0x451b41
cmp eax, 4
je 0x451b41
cmp eax, 5
je 0x451b41
mov eax, dword [ebx + 0x2c]
mov edi, 0x80070057
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451e6b
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x713
push 0x411994
mov edx, edi
mov ecx, eax
call fcn.00455489
jmp 0x451e6b
mov eax, dword [ebx]
mov esi, dword [eax + 0x5c]
lea eax, [ebp - 0x144]
push eax
mov ecx, esi
call dword [0x4918b8]
mov ecx, ebx
call esi
mov edi, eax
mov dword [ebp - 0x130], edi
test edi, edi
jns 0x451b9a
mov ecx, dword [ebx + 0x2c]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451e6b
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x717
jmp 0x451b2e
push 0x118
lea eax, [ebp - 0x128]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x12c], 0x11c
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.ntdll.dll_RtlGetVersion]
push eax
call fcn.00431702
test eax, eax
jne 0x451c16
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451dfd
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x71d
mov edi, dword [ebp - 0x130]
jmp 0x451b2e
mov eax, dword [ebp + 8]
push 0x20
pop ecx
push 2
pop edx
mov dword [ebp - 0x134], edx
push 5
pop esi
mov dword [ebp - 0x138], esi
sub eax, edx
je 0x451c6f
sub eax, 1
je 0x451c68
sub eax, 1
je 0x451c52
sub eax, 1
jne 0x451c85
mov ecx, 0x8000
mov dword [ebp - 0x134], 3
jmp 0x451c85
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x138], 3
jmp 0x451c80
mov ecx, 0x80
jmp 0x451c46
and dword [ebp - 0x134], 0
mov dword [ebp - 0x138], 1
mov ecx, 0x4000
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
test eax, eax
jne 0x451cdd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004317f4
mov edi, eax
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451e6b
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x74b
jmp 0x451b2e
cmp dword [ebp - 0x128], 6
jb 0x451e05
cmp dword [ebp + 8], 3
je 0x451cf5
cmp dword [ebp + 8], esi
jne 0x451d4d
push 1
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0042e074
mov edi, eax
mov dword [ebp - 0x130], edi
test edi, edi
jns 0x451d4d
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451e6b
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x756
jmp 0x451b2e
lea eax, [ebp - 0x130]
push eax
push 4
lea eax, [ebp - 0x134]
push eax
push 0x21
push 0xffffffffffffffff
call dword [sym.imp.ntdll.dll_NtSetInformationProcess]
push eax
call fcn.00431702
test eax, eax
jne 0x451da5
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451dfd
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x75e
jmp 0x451c0b
lea eax, [ebp - 0x130]
push eax
push 4
lea eax, [ebp - 0x138]
push eax
push 0x27
push 0xffffffffffffffff
call dword [sym.imp.ntdll.dll_NtSetInformationProcess]
push eax
call fcn.00431702
test eax, eax
jne 0x451e05
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451dfd
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x765
jmp 0x451c0b
mov edi, dword [ebp - 0x130]
jmp 0x451e6b
mov eax, dword [ebx]
push dword [ebp + 8]
mov esi, dword [eax + 0x94]
mov ecx, esi
call dword [0x4918b8]
mov ecx, ebx
call esi
mov edi, eax
test edi, edi
jns 0x451e56
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
test eax, eax
je 0x451e6b
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4918b8]
lea ecx, [ebx + 0x2c]
call esi
push 0x76a
jmp 0x451b2e
cmp dword [ebx + 0x1f0], 0
jne 0x451e6b
mov eax, dword [ebp - 0x144]
mov dword [ebx + 0x1f0], eax
push edi
call fcn.00431467
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.004322f4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x13c]
call fcn.004322f4
or dword [ebp - 4], 0xffffffff
mov eax, edi
call fcn.0047cea1
ret 4