Function at 0x44c801
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe8
push ebx
mov ebx, ecx
and dword [ebx + 4], 0
push esi
push edi
lea esi, [ebx + 8]
mov dword [ebp - 4], ebx
call fcn.0044d6c9
mov edi, 0x9c
push edi
lea eax, [ebp - 0xa4]
push 0
push eax
call fcn.0043b2b0
add esp, 0xc
lea eax, [ebp - 0xa4]
push eax
mov dword [ebp - 0xa4], edi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x44cc40
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.GetNativeSystemInfo
push str.kernel32.dll
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
push 9
xor eax, eax
pop ecx
lea edi, [ebp - 0xc8]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xc8]
push eax
test edx, edx
je 0x44c887
call edx
jmp 0x44c88d
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x94], 2
jne 0x44cc30
cmp dword [ebp - 0xa0], 4
jb 0x44cc30
push str.Microsoft
or edi, 0xffffffff
push esi
mov eax, edi
call fcn.0044d7bf
cmp dword [ebp - 0xa0], 6
jne case.0x44c953.5
cmp dword [ebp - 0x9c], 0
jne 0x44c8e7
cmp byte [ebp - 0xa], 1
mov eax, edi
jne 0x44c8dc
push str.Windows_Vista
jmp 0x44c8e1
push str.Windows_Server_2008
push esi
call fcn.0044d7bf
cmp dword [ebp - 0x9c], 1
jne 0x44c90a
cmp byte [ebp - 0xa], 1
mov eax, edi
jne 0x44c8ff
push str.Windows_7
jmp 0x44c904
push str.Windows_Server_2008_R2
push esi
call fcn.0044d7bf
push str.GetProductInfo
push str.kernel32.dll
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je case.0x44c953.5
lea ecx, [ebp - 8]
push ecx
push 0
push 0
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
call eax
mov eax, dword [ebp - 8]
cmp eax, 0x19
ja 0x44c9ca
je 0x44c9c3
dec eax
cmp eax, 0x11
ja case.0x44c953.5
jmp dword [eax*4 + 0x44cc56]
push str.Ultimate_Edition
jmp 0x44c9d4
push str.Home_Premium_Edition
jmp 0x44c9d4
push str.Home_Basic_Edition
jmp 0x44c9d4
push str.Enterprise_Edition
jmp 0x44c9d4
push str.Business_Edition
jmp 0x44c9d4
push str.Starter_Edition
jmp 0x44c9d4
push str.Cluster_Server_Edition
jmp 0x44c9d4
push str.Datacenter_Edition
jmp 0x44c9d4
push str.Datacenter_Edition__core_installation_
jmp 0x44c9d4
push str.Enterprise_Edition__core_installation_
jmp 0x44c9d4
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x44c9d4
push str.Small_Business_Server
jmp 0x44c9d4
push str.Standard_Edition
jmp 0x44c9d4
push str.Standard_Edition__core_installation_
jmp 0x44c9d4
push str.Web_Server_Edition
jmp 0x44c9d4
push str.Small_Business_Server_Premium_Edition
jmp 0x44c9d4
cmp eax, 0x30
jne case.0x44c953.5
push str.Professional
push esi
mov eax, edi
call fcn.0044d7bf
cmp dword [ebp - 0xa0], 5
jne 0x44cb7d
cmp dword [ebp - 0x9c], 2
jne 0x44caf7
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x44ca09
push str.Windows_Server_2003_R2_
jmp 0x44ca45
test dword [ebp - 0xc], 0x2000
je 0x44ca19
push str.Windows_Storage_Server_2003
jmp 0x44ca45
test dword [ebp - 0xc], 0x8000
je 0x44ca29
push str.Windows_Home_Server
jmp 0x44ca45
cmp byte [ebp - 0xa], 1
jne 0x44ca40
cmp word [ebp - 0xc8], 9
jne 0x44ca40
push str.Windows_XP_Professional_x64_Edition
jmp 0x44ca45
push str.Windows_Server_2003_
push esi
mov eax, edi
call fcn.0044d7bf
cmp byte [ebp - 0xa], 1
je 0x44caea
cmp word [ebp - 0xc8], 6
jne 0x44ca7b
test byte [ebp - 0xc], 0x80
je 0x44ca6e
push str.Datacenter_Edition_for_Itanium_based_Systems
jmp 0x44cae2
test byte [ebp - 0xc], 2
je 0x44caea
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x44cae2
cmp word [ebp - 0xc8], 9
jne 0x44caa8
test byte [ebp - 0xc], 0x80
je 0x44ca92
push str.Datacenter_x64_Edition
jmp 0x44cae2
test byte [ebp - 0xc], 2
mov eax, edi
je 0x44caa1
push str.Enterprise_x64_Edition
jmp 0x44cae4
push str.Standard_x64_Edition
jmp 0x44cae4
mov eax, dword [ebp - 0xc]
test eax, 0x4000
je 0x44cab9
push str.Compute_Cluster_Edition
jmp 0x44cae2
test al, al
jns 0x44cac4
push str.Datacenter_Edition
jmp 0x44cae2
test al, 2
je 0x44cacf
push str.Enterprise_Edition
jmp 0x44cae2
test eax, 0x400
je 0x44cadd
push str.Web_Edition
jmp 0x44cae2
push str.Standard_Edition
mov eax, edi
push esi
call fcn.0044d7bf
cmp dword [ebp - 0xa0], 5
jne 0x44cb7d
cmp dword [ebp - 0x9c], 1
jne 0x44cb33
push str.Windows_XP
push esi
mov eax, edi
call fcn.0044d7bf
test dword [ebp - 0xc], 0x200
mov eax, edi
je 0x44cb1f
push str.Home_Edition
jmp 0x44cb24
push str.Professional
push esi
call fcn.0044d7bf
cmp dword [ebp - 0xa0], 5
jne 0x44cb7d
cmp dword [ebp - 0x9c], 0
jne 0x44cb93
push str.Windows_2000
push esi
mov eax, edi
call fcn.0044d7bf
cmp byte [ebp - 0xa], 1
jne 0x44cb56
push str.Professional
jmp 0x44cb75
test byte [ebp - 0xc], 0x80
je 0x44cb63
push str.Datacenter_Server
jmp 0x44cb75
test byte [ebp - 0xc], 2
je 0x44cb70
push str.Advanced_Server
jmp 0x44cb75
push str.Server
push esi
mov eax, edi
call fcn.0044d7bf
cmp dword [ebp - 0xa0], 4
jne 0x44cb93
push str.Windows_NT
push esi
mov eax, edi
call fcn.0044d7bf
lea eax, [ebp - 0x90]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44cb9c
sub eax, edx
je 0x44cbc3
push 0x46f710
push esi
mov eax, edi
call fcn.0044d7bf
lea eax, [ebp - 0x90]
push eax
push esi
mov eax, edi
call fcn.0044d7bf
push 0xa
lea eax, [ebp - 0xe8]
push eax
push dword [ebp - 0x98]
call fcn.00438cc5
add esp, 0xc
push str.__build
push esi
mov eax, edi
call fcn.0044d7bf
lea eax, [ebp - 0xe8]
push eax
push esi
mov eax, edi
call fcn.0044d7bf
push 0x471d24
push esi
mov eax, edi
call fcn.0044d7bf
cmp dword [ebp - 0xa0], 6
jb 0x44cc49
cmp word [ebp - 0xc8], 9
jne 0x44cc1f
push str.__64_bit
mov eax, edi
jmp 0x44cc38
cmp word [ebp - 0xc8], 0
jne 0x44cc49
push str.__32_bit
jmp 0x44cc1b
push str.Unsupported
or eax, 0xffffffff
push esi
call fcn.0044d7bf
jmp 0x44cc49
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
pop edi
pop esi
pop ebx
leave
ret