Function at 0x444390
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x560a26
mov eax, dword fs:[0]
push eax
mov eax, 0x11f4
call fcn.00540b00
mov eax, dword [0x5b7b5c]
xor eax, esp
mov dword [esp + 0x11f0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5b7b5c]
xor eax, esp
push eax
lea eax, [esp + 0x1208]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x1218]
mov edi, dword [esp + 0x121c]
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x2c], ebx
cmp dword [esp + 0x1220], ebx
je 0x4444a6
push 1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x34]
push ecx
push edi
mov ecx, esi
call fcn.00443cc0
test eax, eax
je 0x4444a6
mov edx, dword [esp + 0x2c]
push edx
call fcn.004ff96a
add esp, 4
cmp dword [esp + 0x14], ebx
jle 0x4444a6
call fcn.005089db
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x444447
push 0x80004005
call fcn.00401340
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
push edi
lea ecx, [esp + 0x18]
push 0x5461
push ecx
mov dword [esp + 0x121c], ebx
call fcn.00402140
mov edx, dword [esp + 0x20]
add esp, 0xc
push ebx
push 0x124
push edx
call fcn.0050c485
lea ecx, [esp + 0x14]
cmp eax, 6
je 0x444496
call fcn.00401b40
xor eax, eax
jmp 0x444691
mov dword [esp + 0x1210], 0xffffffff
call fcn.00401b40
mov eax, dword [esi + 0xa0]
cmp eax, 1
je 0x4444ba
cmp eax, 2
jne 0x444659
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], ebx
mov byte [esp + 0x28], bl
push ebx
mov dword [esp + 0x1214], 1
call fcn.004ff96a
push 0x1000
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x30], bl
mov dword [esp + 0x28], 0x1000
call fcn.004ff95f
add esp, 8
mov dword [esp + 0x24], eax
push 1
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x30], 0x12
call fcn.0043a6f0
push 0x678
lea ecx, [esp + 0x1c]
call fcn.0043a770
mov eax, ebp
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x444530
push ebx
push ebx
sub eax, edx
mov edx, dword [esi + 0xa8]
push 0x207
lea ecx, [esp + 0x44]
push ecx
sar eax, 1
push eax
neg edx
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
sbb edx, edx
push ebx
and edx, 0xfde9
push edx
call ebp
mov edi, eax
push edi
lea ecx, [esp + 0x1c]
mov byte [esp + edi + 0x3c], bl
call fcn.0043a770
push edi
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x20]
call fcn.0043a6f0
mov edi, dword [esp + 0x34]
mov eax, edi
lea ecx, [eax + 2]
nop
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x444590
mov edx, dword [esi + 0xa8]
push ebx
push ebx
push 0x207
sub eax, ecx
lea ecx, [esp + 0x44]
push ecx
sar eax, 1
push eax
neg edx
push edi
sbb edx, edx
push ebx
and edx, 0xfde9
push edx
call ebp
mov edi, eax
push edi
lea ecx, [esp + 0x1c]
mov byte [esp + edi + 0x3c], bl
call fcn.0043a770
push edi
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x20]
call fcn.0043a6f0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.0043fc20
test eax, eax
jne 0x444604
mov edx, dword [esp + 0x24]
push edx
call fcn.004ff96a
add esp, 4
xor eax, eax
jmp 0x444691
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.0043f490
test eax, eax
jne 0x444625
mov ecx, dword [esp + 0x24]
push ecx
call fcn.004ff96a
add esp, 4
xor eax, eax
jmp 0x444691
push 0x678
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.0043bd50
mov edi, eax
mov eax, dword [esp + 0x24]
push eax
mov dword [esp + 0x1214], 0xffffffff
call fcn.004ff96a
mov ebp, dword [esp + 0x34]
add esp, 4
jmp 0x44470e
push ebp
lea ecx, [esp + 0x244]
push str.RNFR__s
push ecx
call fcn.0043b2f0
mov eax, dword [esi + 0xa0]
add esp, 0xc
cmp eax, 1
je 0x44468e
cmp eax, 2
je 0x44468e
mov ecx, esi
cmp dword [esi + 0xc0], ebx
je 0x4446bb
call fcn.0043fa10
or eax, 0xffffffff
mov ecx, dword [esp + 0x1208]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x11f0]
xor ecx, esp
call fcn.0053f73f
add esp, 0x1200
ret 0xc
push 0x7e2
lea edx, [esp + 0x244]
push edx
call fcn.0043c190
add eax, 0xfffffed4
cmp eax, 0x63
ja 0x44468e
push edi
lea eax, [esp + 0x244]
push str.RNTO__s
push eax
call fcn.0043b2f0
mov eax, dword [esi + 0xa0]
add esp, 0xc
cmp eax, 1
je 0x44470c
cmp eax, 2
je 0x44470c
cmp dword [esi + 0xc0], ebx
je 0x444737
mov ecx, esi
call fcn.0043fa10
xor edi, edi
cmp dword [0x5ed784], ebx
je 0x444730
cmp edi, ebx
je 0x444730
add esi, 0x1eac
push ebp
mov ecx, esi
call fcn.0043c120
push ebp
mov ecx, esi
call fcn.0043c8b0
mov eax, edi
jmp 0x444691
push 0x7e2
lea ecx, [esp + 0x244]
push ecx
mov ecx, esi
call fcn.0043c190
add eax, 0xffffff38
cmp eax, 0x63
ja 0x44470c
mov edi, 1
jmp 0x44470e