Function at 0x444aaf
Capabilities:
Check os version

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
lea ecx, [ebp - 0x12c]
push edi
call fcn.0041deb3
lea ecx, [ebp - 0x134]
call fcn.0041deb3
lea ecx, [ebp - 0x130]
call fcn.0041deb3
lea ecx, [ebp - 0x138]
call fcn.0041deb3
and dword [ebp - 0x13c], 0
test ebx, ebx
jne 0x444b0a
mov esi, 0x80070057
jmp 0x444d49
mov esi, 0x11c
lea eax, [ebp - 0x128]
push esi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x128], esi
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.ntdll.dll_RtlGetVersion]
lea edx, [ebp - 0x13c]
mov ecx, eax
call fcn.004302be
test eax, eax
jne 0x444b50
mov esi, dword [ebp - 0x13c]
jmp 0x444d49
cmp dword [ebp - 0x124], 6
jne 0x444c9a
push ecx
lea eax, [ebp - 0x134]
mov edx, 0x415678
push eax
push 0x4156ec
call fcn.00425ca2
mov esi, eax
test esi, esi
js 0x444d49
mov edi, dword [ebp - 0x134]
or esi, 0xffffffff
push esi
push 0x415700
push esi
push edi
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
jne 0x444c27
lea edx, [ebp - 0x12c]
mov ecx, 0x40ff78
call fcn.0042024d
mov esi, eax
test esi, esi
js 0x444d49
mov edi, dword [ebp - 0x12c]
lea ecx, [ebp - 0x138]
call fcn.0044490a
mov esi, eax
test esi, esi
js 0x444d49
push 0xffffffffffffffff
push 0x4156d4
push 0xffffffffffffffff
push dword [ebp - 0x138]
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
jne 0x444d23
push edi
lea eax, [ebp - 0x130]
push 0x415818
push eax
call fcn.00428877
mov esi, eax
add esp, 0xc
test esi, esi
js 0x444d49
mov edi, dword [ebp - 0x130]
jmp 0x444d39
push esi
push 0x415714
push esi
push edi
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
jne 0x444c50
lea edx, [ebp - 0x12c]
mov ecx, 0x415728
jmp 0x444baf
push esi
push 0x415744
push esi
push edi
push 1
push 0x409
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec eax
dec eax
jne 0x444c79
lea edx, [ebp - 0x12c]
mov ecx, 0x415770
jmp 0x444baf
and dword [ebp - 0x134], 0
mov ecx, dword [ebp - 0x12c]
test ecx, ecx
je 0x444c8f
call fcn.004202b8
mov dword [ebp - 0x12c], edi
jmp 0x444bc4
cmp dword [ebp - 0x124], 5
jne 0x444d44
cmp dword [ebp - 0x120], 2
jne 0x444cfd
cmp byte [ebp - 0xe], 1
je 0x444ba4
test byte [ebp - 0x10], 0x80
lea edx, [ebp - 0x12c]
je 0x444cd0
mov ecx, 0x415784
jmp 0x444baf
test byte [ebp - 0x10], 2
je 0x444ce0
mov ecx, 0x4157a8
jmp 0x444baf
test dword [ebp - 0x10], 0x400
je 0x444cf3
mov ecx, 0x4157cc
jmp 0x444baf
mov ecx, 0x4157e0
jmp 0x444baf
cmp dword [ebp - 0x120], 1
jne 0x444d44
test dword [ebp - 0x10], 0x200
lea edx, [ebp - 0x12c]
je 0x444baa
mov ecx, 0x415800
jmp 0x444baf
and dword [ebp - 0x12c], 0
mov ecx, dword [ebp - 0x130]
test ecx, ecx
je 0x444d39
call fcn.004202b8
and dword [ebp - 0x130], 0
mov dword [ebx], edi
jmp 0x444d50
mov esi, 0x80070032
mov ecx, esi
call fcn.0041b100
mov ecx, esi
call fcn.0041b049
lea ecx, [ebp - 0x138]
call fcn.0042029e
lea ecx, [ebp - 0x130]
call fcn.0042029e
lea ecx, [ebp - 0x134]
call fcn.0042029e
lea ecx, [ebp - 0x12c]
call fcn.0042029e
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00445fe0
mov esp, ebp
pop ebp
ret