Function at 0x4662c6
Capabilities:
Check os version
Create process on windows

Disassembly:
mov eax, 0x6108e8
call fcn.00609528
sub esp, 0xd2c
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x40], 0xf
xor ecx, ecx
mov ebx, edx
push edi
mov dword [ebp - 0x44], ecx
mov byte [ebp - 0x54], cl
push 7
mov dword [ebp - 4], ecx
xor eax, eax
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], ecx
mov word [ebp - 0x3c], ax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], ecx
mov word [ebp - 0x24], ax
push str.open
lea ecx, [ebp - 0xc30]
mov byte [ebp - 4], 2
call fcn.00467617
push str.runas
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 3
call fcn.00467617
mov edi, dword [ebp + 8]
mov byte [ebp - 4], 4
test edi, edi
je 0x466345
and dword [edi + 4], 0
mov dword [edi], 2
push ecx
push ecx
lea edx, [ebp - 0x2b0]
mov ecx, esi
call fcn.00460fec
pop ecx
pop ecx
test esi, esi
je 0x4665ee
lea ecx, [ebp - 0x2b0]
call fcn.00460bd9
cmp eax, 1
jne 0x4665ee
call fcn.00465b05
test al, al
je 0x4663a0
cmp dword [ebx + 0x10], 1
jne 0x4663a0
call fcn.00432374
test al, al
je 0x4663a0
push edi
mov edx, ebx
lea ecx, [ebp - 0x2b0]
call fcn.00465e5e
pop ecx
mov bl, al
jmp 0x4665fb
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x770]
call fcn.00467617
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 5
push 0
push eax
call fcn.00544d60
mov eax, dword [ebp - 0x76c]
add esp, 0xc
and dword [ebp - 0x88], 0
movaps xmm0, xmmword [0x6b18e0]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], 0x440
mov dword [ebp - 0x84], eax
movups xmmword [ebp - 0x7c], xmm0
test ebx, ebx
je 0x466544
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
je 0x466470
lea edx, [ebp - 0x54]
mov ecx, ebx
call fcn.00465cd5
test al, al
je 0x4665a7
cmp dword [ebp - 0x40], 0x10
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x510]
cmovae eax, dword [ebp - 0x54]
push eax
call fcn.00467617
mov byte [ebp - 4], 6
mov esi, dword [eax + 4]
push esi
call fcn.00406599
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3c]
call fcn.00408c82
lea eax, [ebp - 0x508]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x50c], eax
je 0x466470
push dword [ebp - 0x50c]
call fcn.0052c08b
pop ecx
cmp dword [ebx + 0x10], 2
jne 0x4664c2
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x1a4], 6
jae 0x4664a8
cmp dword [ebp - 0x1a4], 5
jne 0x4664c2
cmp dword [ebp - 0x1a0], 1
jb 0x4664c2
call fcn.00432374
mov ecx, dword [ebp - 0x84]
test al, al
cmove ecx, dword [ebp - 0x9cc]
mov dword [ebp - 0x84], ecx
test byte [ebx + 0x24], 2
je 0x4664d4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [ebp - 0x88], eax
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x466536
push ecx
push ecx
lea edx, [ebp - 0xd38]
call fcn.00460fec
pop ecx
pop ecx
test al, al
je 0x466536
lea eax, [ebp - 0xd38]
push eax
lea ecx, [ebp - 0x510]
call fcn.00467617
mov byte [ebp - 4], 7
mov esi, dword [eax + 4]
push esi
call fcn.00406599
pop ecx
push eax
push esi
lea ecx, [ebp - 0x24]
call fcn.00408c82
lea eax, [ebp - 0x508]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x50c], eax
je 0x466536
push dword [ebp - 0x50c]
call fcn.0052c08b
pop ecx
mov eax, dword [ebp - 0x74]
xor ecx, ecx
cmp byte [ebx + 0x15], cl
cmovne eax, ecx
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x2c], 0
je 0x466558
cmp dword [ebp - 0x28], 8
lea eax, [ebp - 0x3c]
cmovae eax, dword [ebp - 0x3c]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x14], 0
jne 0x46656c
cmp dword [ebp - 0x10], 8
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
xor edx, edx
inc edx
cmp eax, edx
jne 0x4665b4
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x4665b4
test edi, edi
je 0x46659a
push ecx
mov dword [edi], edx
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, dword [ebp - 0x58]
mov dword [edi + 8], eax
push edi
mov edx, ebx
call fcn.00465c34
pop ecx
mov bl, 1
jmp 0x4665d2
test edi, edi
je 0x4665d0
mov dword [edi + 4], 2
jmp 0x4665d0
push 5
pop eax
cmp dword [ebp - 0x70], eax
jne 0x4665c5
test edi, edi
je 0x4665d0
mov dword [edi + 4], eax
jmp 0x4665d0
test edi, edi
je 0x4665d0
mov dword [edi + 4], 3
xor bl, bl
lea eax, [ebp - 0x768]
cmp dword [ebp - 0x76c], eax
je 0x4665fb
push dword [ebp - 0x76c]
call fcn.0052c08b
pop ecx
jmp 0x4665fb
test edi, edi
je 0x4665f9
mov dword [edi + 4], 1
xor bl, bl
lea eax, [ebp - 0x9c8]
cmp dword [ebp - 0x9cc], eax
je 0x466615
push dword [ebp - 0x9cc]
call fcn.0052c08b
pop ecx
lea eax, [ebp - 0xc28]
cmp dword [ebp - 0xc2c], eax
je 0x46662f
push dword [ebp - 0xc2c]
call fcn.0052c08b
pop ecx
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.00408c2b
push 0
push 1
lea ecx, [ebp - 0x3c]
call fcn.00408c2b
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.0040637e
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret