Function at 0x475970
Capabilities:
Check os version
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73c85f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x39c
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x4759e6
xor al, al
jmp 0x476271
xor eax, eax
mov byte [ebp - 0x384], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 7
lea edx, [ecx + 2]
mov word [ebp - 0x268], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x475a13
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x268]
call fcn.0044bdc0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
push 9
push str.atl90.dll
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x3a8]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push str.msvcm90.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push str.msvcp90.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
xor eax, eax
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
push 0xb
push str.msvcr90.dll
lea ecx, [ebp - 0x250]
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 9
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfc90.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfc90u.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfcm90.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfcm90u.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0x110
lea eax, [ebp - 0x37c]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
mov dword [ebp - 0x380], 0x114
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x37c]
cmp eax, 5
je 0x476008
cmp eax, 0xa
jne 0x475e34
cmp dword [ebp - 0x374], 0x55f0
jb 0x475e34
push str.WinSxSFusion_amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba4719.09.0.30729.6161msvcp90.dll
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
jne 0x476165
push str.WinSxSFusion_amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_none_a28692199dcba4719.0_
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.9.0.
push eax
call fcn.00473b60
mov byte [ebp - 0x384], al
jmp 0x476234
push str.WinSxS_amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1fd3a3a768b895
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x475e8a
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x475f42
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x476234
push str.WinSxS_amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x476234
push str.WinSxS_amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_044aad0bab1eb146
jmp 0x476111
push 0x7e9714
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7ea270
push eax
call fcn.00473b60
test al, al
je 0x476234
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7ea2d0
push eax
call fcn.00473b60
test al, al
je 0x476234
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7ea330
push eax
call fcn.00473b60
test al, al
je 0x476234
mov byte [ebp - 0x384], 1
jmp 0x476234
push str.WinSxS_amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x_ww_c44f2197
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x47605e
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x476171
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x476234
push str.WinSxS_amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x_ww_63af3423
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x476234
push str.WinSxS_amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x_ww_3495a728
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x476234
mov byte [ebp - 0x384], 1
jmp 0x476234
push str.WinSxS_
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0
push eax
call fcn.00473b60
test al, al
je 0x476234
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0
push eax
call fcn.00473b60
test al, al
je 0x476234
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0
push eax
call fcn.00473b60
mov ecx, dword [ebp - 0x384]
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
call fcn.004635a0
lea ecx, [ebp - 0x39c]
call fcn.004635a0
lea ecx, [ebp - 0x3a8]
call fcn.004635a0
lea ecx, [ebp - 0x238]
call fcn.0044bf40
lea ecx, [ebp - 0x268]
call fcn.0044bf40
mov al, byte [ebp - 0x384]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret