Function at 0x473e10
Capabilities:
Check os version
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73c85f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x39c
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x473e86
xor al, al
jmp 0x474711
xor eax, eax
mov byte [ebp - 0x384], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 7
lea edx, [ecx + 2]
mov word [ebp - 0x268], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x473eb3
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x268]
call fcn.0044bdc0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
push 9
push 0x7e80cc
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x3a8]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e80e0
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e80f8
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
xor eax, eax
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
push 0xb
push 0x7e8110
lea ecx, [ebp - 0x250]
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 9
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e8128
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e813c
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e8154
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push 0x7e816c
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0x110
lea eax, [ebp - 0x37c]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
mov dword [ebp - 0x380], 0x114
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x37c]
cmp eax, 5
je 0x4744a8
cmp eax, 0xa
jne 0x4742d4
cmp dword [ebp - 0x374], 0x55f0
jb 0x4742d4
push str.WinSxSFusionx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_none_bcc8f3fc9457ed288.08.0.50727.6195msvcp80.dll
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
jne 0x474605
push str.WinSxSFusionx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_none_bcc8f3fc9457ed288.0_
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e8184
push eax
call fcn.00473b60
mov byte [ebp - 0x384], al
jmp 0x4746d4
push str.WinSxSx86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x47432a
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x4743e2
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x4746d4
push str.WinSxSx86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x4746d4
push str.WinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f
jmp 0x4745b1
push 0x7e830c
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e8578
push eax
call fcn.00473b60
test al, al
je 0x4746d4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e85f8
push eax
call fcn.00473b60
test al, al
je 0x4746d4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e8680
push eax
call fcn.00473b60
test al, al
je 0x4746d4
mov byte [ebp - 0x384], 1
jmp 0x4746d4
push str.WinSxSx86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x_ww_a4c618fa
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x4744fe
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x474611
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x4746d4
push str.WinSxSx86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x_ww_44262b86
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x4746d4
push str.WinSxSx86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x_ww_150c9e8b
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x4746d4
mov byte [ebp - 0x384], 1
jmp 0x4746d4
push 0x7e83cc
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0
push eax
call fcn.00473b60
test al, al
je 0x4746d4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0
push eax
call fcn.00473b60
test al, al
je 0x4746d4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0
push eax
call fcn.00473b60
mov ecx, dword [ebp - 0x384]
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
call fcn.004635a0
lea ecx, [ebp - 0x39c]
call fcn.004635a0
lea ecx, [ebp - 0x3a8]
call fcn.004635a0
lea ecx, [ebp - 0x238]
call fcn.0044bf40
lea ecx, [ebp - 0x268]
call fcn.0044bf40
mov al, byte [ebp - 0x384]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret