Function at 0x4213b5
Capabilities:
Check os version
Get common file path

Disassembly:
mov eax, 0x47778d
call fcn.004461a8
sub esp, 0xe2c
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
push 0xe
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0xf2]
mov word [ebp - 0xf4], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x636]
mov word [ebp - 0x638], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0xf4]
push eax
push str.Msi.DLL
call fcn.004412f0
lea eax, [ebp - 0xf4]
push eax
push dword [ebp + 8]
call fcn.00441ca8
add esp, 0x14
cmp eax, ebx
jge 0x4216f1
mov ecx, dword [ebp - 0x10]
call fcn.0040104a
mov edi, eax
mov ecx, edi
mov dword [ebp - 0x18], edi
call fcn.0042e489
mov ecx, edi
mov esi, eax
call fcn.00432a7d
test eax, eax
je 0x42149c
cmp dword [esi + 8], 5
jne 0x42145a
cmp dword [esi + 0xc], 2
jae 0x421463
call fcn.00458dbc
test al, al
je 0x421495
call fcn.00458dbc
test al, al
jne 0x4216ec
lea eax, [ebp - 0x238]
mov dword [ebp - 0x238], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp word [ebp - 0x124], 1
jae 0x4216ec
mov eax, str.SupportOSMsi30
jmp 0x4214b1
mov ecx, edi
call fcn.00432a23
test eax, eax
mov eax, str.SupportOSMsi12
jne 0x4214b1
mov eax, str.SupportOS
push edi
push eax
call fcn.00442ebc
pop ecx
test eax, eax
pop ecx
je 0x421561
cmp dword [esi], 2
jne 0x42155a
call fcn.0044221e
test eax, eax
jne 0x4214ec
mov eax, 0x4b2
push eax
mov dword [0x4a1c0c], eax
call fcn.00440f54
pop ecx
push 1
jmp 0x4216f3
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0xe36]
mov word [ebp - 0xe38], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xe38]
mov esi, 0x400
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x42152e
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xe38]
push eax
call fcn.004210c4
test eax, eax
je 0x421553
lea eax, [ebp - 0xe38]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x42155a
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xe38]
push eax
call fcn.004210c4
test eax, eax
jne 0x42155a
push 2
jmp 0x4216f3
xor eax, eax
jmp 0x4216f4
cmp dword [esi + 0x14], 2
jne 0x42156d
cmp dword [esi + 8], 4
je 0x421578
mov ecx, edi
call fcn.00432a7d
test eax, eax
je 0x421586
mov ecx, edi
call fcn.004329ea
push 3
jmp 0x4216f3
mov eax, dword [str.SuppressWrongOS]
mov edi, 0x47e5a0
mov esi, 0x47e598
cmp eax, ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x48], esi
jne 0x4215a4
mov eax, 0x49cc4c
lea ecx, [ebp + 0xb]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.00408d43
mov eax, dword [str.Startup]
mov dword [ebp - 4], ebx
cmp eax, ebx
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x70], esi
jne 0x4215cc
mov eax, 0x49cc4c
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.00408d43
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x68]
push ebx
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 1
push eax
call fcn.00432fa2
and byte [ebp - 4], 0
lea ecx, [ebp - 0x90]
mov bl, al
call fcn.00401bc7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.00401bc7
test bl, bl
je 0x4216ec
lea eax, [ebp + 0xb]
mov ebx, 0x4b7
push 0
push eax
lea ecx, [ebp - 0x40]
mov dword [0x4a1c0c], ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x20], esi
call fcn.004017e6
lea eax, [ebp - 0xf4]
mov dword [ebp - 4], 2
test eax, eax
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0x98], esi
lea eax, [ebp - 0xf4]
jne 0x421661
mov eax, 0x49cc4c
lea ecx, [ebp - 0x12]
push 0
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.00408d43
mov edi, dword [ebp - 0xb0]
mov byte [ebp - 4], 3
test edi, edi
mov esi, 0x47e5b8
jne 0x421688
mov edi, esi
lea eax, [ebp - 0x11c]
push ebx
push eax
call fcn.00441086
pop ecx
pop ecx
mov eax, dword [eax + 8]
mov byte [ebp - 4], 4
test eax, eax
jne 0x4216a4
mov eax, esi
push edi
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00414a68
add esp, 0xc
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 3
call fcn.00401bc7
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00401bc7
cmp dword [ebp - 0x38], 0
je 0x4216d9
mov esi, dword [ebp - 0x38]
push esi
call fcn.00440d34
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x40]
call fcn.00401bc7
or eax, 0xffffffff
jmp 0x4216f4
push 0xfffffffffffffffe
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4