Function at 0x475050
Capabilities:
Check os version
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73c85f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x39c
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x4750c6
xor al, al
jmp 0x475951
xor eax, eax
mov byte [ebp - 0x384], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 7
lea edx, [ecx + 2]
mov word [ebp - 0x268], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4750f3
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x268]
call fcn.0044bdc0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
push 9
push 0x7e87a4
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x3a8]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e8854
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e891c
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
xor eax, eax
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
push 0xb
push 0x7e899c
lea ecx, [ebp - 0x250]
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 9
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e886c
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e9498
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e94b0
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e8a24
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0x110
lea eax, [ebp - 0x37c]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
mov dword [ebp - 0x380], 0x114
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x37c]
cmp eax, 5
je 0x4756e8
cmp eax, 0xa
jne 0x475514
cmp dword [ebp - 0x374], 0x55f0
jb 0x475514
push str.WinSxSFusionx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_ea33c8f0b247cd779.09.0.30729.6161msvcp90.dll
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
jne 0x475845
push str.WinSxSFusionx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_ea33c8f0b247cd779.0_
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e8934
push eax
call fcn.00473b60
mov byte [ebp - 0x384], al
jmp 0x475914
push str.WinSxSx86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x47556a
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x475622
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x475914
push str.WinSxSx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x475914
push str.WinSxSx86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c
jmp 0x4757f1
push 0x7e89b4
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e98e0
push eax
call fcn.00473b60
test al, al
je 0x475914
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e9970
push eax
call fcn.00473b60
test al, al
je 0x475914
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e9a00
push eax
call fcn.00473b60
test al, al
je 0x475914
mov byte [ebp - 0x384], 1
jmp 0x475914
push str.WinSxSx86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x_ww_92453bb7
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x47573e
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x475851
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x475914
push str.WinSxSx86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x_ww_31a54e43
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x475914
push str.WinSxSx86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x_ww_028bc148
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x475914
mov byte [ebp - 0x384], 1
jmp 0x475914
push 0x7e8a3c
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0
push eax
call fcn.00473b60
test al, al
je 0x475914
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0
push eax
call fcn.00473b60
test al, al
je 0x475914
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0
push eax
call fcn.00473b60
mov ecx, dword [ebp - 0x384]
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
call fcn.004635a0
lea ecx, [ebp - 0x39c]
call fcn.004635a0
lea ecx, [ebp - 0x3a8]
call fcn.004635a0
lea ecx, [ebp - 0x238]
call fcn.0044bf40
lea ecx, [ebp - 0x268]
call fcn.0044bf40
mov al, byte [ebp - 0x384]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret