Function at 0x44e805
Capabilities:
Check os version

Disassembly:
xor ebx, esp
inc esp
add byte [esi - 0x1d], dl
inc esp
add bl, bh
jecxz 0x44e78f
add byte [ecx], bh
in al, 0x44
add byte [ecx], ah
in al, 0x44
add byte [eax], al
in al, 0x44
add byte [eax], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add dword [ebx], eax
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add byte [ebx], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add byte [ecx + 6432292], ah
push esi
mov esi, ecx
test al, 1
jne 0x44e832
push str.RtlGetVersion
or eax, 1
push str.ntdll.dll
mov dword [0x622624], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x622620], eax
jmp 0x44e837
mov eax, dword [0x622620]
mov dword [esi], 0x114
push esi
test eax, eax
je 0x44e846
call eax
jmp 0x44e84c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push eax
push ecx
push edx
push str._u._u._u
mov dword [esi + 0x11c], eax
lea eax, [esi + 0x120]
push 0x1f
push eax
mov dword [esi + 0x114], edx
mov dword [esi + 0x118], ecx
call fcn.0044e940
xor eax, eax
add esp, 0x18
mov dword [esi + 0x15e], eax
mov ecx, dword [esi + 0x114]
mov dword [esi + 0x162], eax
mov byte [esi + 0x166], al
mov eax, ecx
sub eax, 5
je 0x44e91d
sub eax, 1
je 0x44e8bf
cmp ecx, 6
jbe 0x44e93c
mov byte [esi + 0x165], 1
mov byte [esi + 0x163], 1
pop esi
ret
mov eax, dword [esi + 0x118]
test eax, eax
jne 0x44e8d9
mov byte [esi + 0x162], 1
mov byte [esi + 0x163], 1
pop esi
ret
mov byte [esi + 0x165], 1
cmp eax, 1
jne 0x44e8f3
mov byte [esi + 0x164], al
mov byte [esi + 0x163], al
pop esi
ret
cmp eax, 2
jne 0x44e908
mov byte [esi + 0x166], 1
mov byte [esi + 0x163], 1
pop esi
ret
cmp eax, 3
jne 0x44e914
mov byte [esi + 0x167], 1
mov byte [esi + 0x163], 1
pop esi
ret
mov eax, dword [esi + 0x118]
cmp eax, 1
jne 0x44e930
mov byte [esi + 0x160], al
pop esi
ret
cmp eax, 2
jne 0x44e93c
mov byte [esi + 0x161], 1
pop esi
ret