Function at 0x4616e0
Capabilities:
Check if file exists
Check os version
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x469ab6
mov eax, dword fs:[0]
push eax
mov eax, 0x17d4
call fcn.0042a4c0
mov eax, dword [0x481288]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [0x48acb0], 1
mov dword [0x48acb8], 1
mov dword [0x485c18], 1
push 0x208
push 0
push 0x4844c8
call fcn.00415680
add esp, 0xc
lea ecx, [ebp - 0xa5c]
call fcn.00430e00
mov dword [ebp - 4], 0
push 0x104
lea eax, [ebp - 0xa54]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x4617b7
push 0x47a3b8
lea ecx, [ebp - 0x17a0]
call fcn.00430de0
mov dword [ebp - 0x17c8], eax
mov ecx, dword [ebp - 0x17c8]
mov dword [ebp - 0x17cc], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x17cc]
push edx
lea ecx, [ebp - 0xa5c]
call fcn.00430f80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x17a0]
call fcn.004310c0
jmp 0x461863
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0x17a4]
call fcn.00431060
mov dword [ebp - 0x17d0], eax
mov ecx, dword [ebp - 0x17d0]
mov dword [ebp - 0x17d4], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x17d4]
push edx
lea ecx, [ebp - 0xa5c]
call fcn.00430f80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x17a4]
call fcn.004310c0
push 0x5c
lea ecx, [ebp - 0xa5c]
call fcn.00431350
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0xf98]
push eax
lea ecx, [ebp - 0x17a8]
push ecx
lea ecx, [ebp - 0xa5c]
call fcn.00431140
mov dword [ebp - 0x17d8], eax
mov edx, dword [ebp - 0x17d8]
mov dword [ebp - 0x17dc], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x17dc]
push eax
lea ecx, [ebp - 0xa5c]
call fcn.00430f80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x17a8]
call fcn.004310c0
lea ecx, [ebp - 0xa5c]
call fcn.004312a0
push eax
push 0x47a3bc
push 0x208
push 0x104
push 0x4844c8
call fcn.004157ac
add esp, 0x14
push 0x11c
push 0
lea ecx, [ebp - 0xd8c]
push ecx
call fcn.00415680
add esp, 0xc
mov dword [ebp - 0xd8c], 0x11c
lea edx, [ebp - 0xd8c]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0xd7c], 2
jne 0x4618d6
cmp dword [ebp - 0xd88], 6
jb 0x4618d6
mov dword [ebp - 0x17e0], 1
jmp 0x4618e0
mov dword [ebp - 0x17e0], 0
mov eax, dword [ebp - 0x17e0]
mov dword [0x485c34], eax
push str.TXPlatform.exe
call fcn.00438490
add esp, 4
push str.SysDirMicrosoft.Windows.GdiPlus
push 0x4844c8
push 0x47a434
push 0x208
push 0x104
lea ecx, [ebp - 0xf94]
push ecx
call fcn.004157ac
add esp, 0x18
xor edx, edx
je 0x461957
push 0
push 3
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17ac], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17ac]
jmp 0x461efa
mov dword [0x486294], 0
push 1
call fcn.004415c0
add esp, 4
mov dword [0x48a7f8], 0
mov dword [0x48a7fc], 0
push 0x48a1c8
call fcn.0043a650
add esp, 4
mov word [ebp - 0x42c], 0
push 0x206
push 0
lea eax, [ebp - 0x42a]
push eax
call fcn.00415680
add esp, 0xc
mov word [ebp - 0xc6c], 0
push 0x206
push 0
lea ecx, [ebp - 0xc6a]
push ecx
call fcn.00415680
add esp, 0xc
push 0x48a1c8
lea edx, [ebp - 0xc6c]
push edx
lea eax, [ebp - 0x42c]
push eax
push 0x2e
call fcn.00450110
add esp, 0x10
lea ecx, [ebp - 0x42c]
push ecx
call fcn.004155f7
add esp, 4
mov dword [ebp - 0x640], eax
mov word [ebp - 0x21c], 0
push 0x206
push 0
lea edx, [ebp - 0x21a]
push edx
call fcn.00415680
add esp, 0xc
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x42c]
push edx
push 0x2e
call fcn.00450110
add esp, 0x10
lea eax, [ebp - 0x42c]
push eax
call fcn.004155f7
add esp, 4
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0x640]
imul ecx, ecx, 0x64
add ecx, dword [ebp - 0xa64]
mov dword [0x489b3c], ecx
push 0x47a440
push 0x48acbc
call fcn.004159fc
add esp, 8
test eax, eax
je 0x461a90
push 0x47a444
push 0x48acbc
call fcn.004159fc
add esp, 8
test eax, eax
jne 0x461a97
call fcn.0043c970
jmp 0x461ad6
push 0x48acbc
push 0x47a448
push 0x208
push 0x104
push 0x4880d0
call fcn.004157ac
add esp, 0x14
mov dword [ebp - 0xf9c], 0x104
lea edx, [ebp - 0xf9c]
push edx
push 0x4880d0
call fcn.00438830
add esp, 8
mov dword [ebp - 0x220], 0x104
lea eax, [ebp - 0x220]
push eax
push 0x486708
call fcn.0043a5f0
add esp, 8
push 0x486708
call fcn.00414d31
add esp, 4
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0xa58], 0
jbe 0x461b46
mov ecx, dword [ebp - 0xa58]
movzx edx, word [ecx*2 + 0x486706]
cmp edx, 0x5c
je 0x461b36
mov eax, dword [ebp - 0xa58]
movzx ecx, word [eax*2 + 0x486706]
cmp ecx, 0x2f
jne 0x461b46
mov edx, dword [ebp - 0xa58]
mov word [edx*2 + 0x486706], 0
push 0x486708
call fcn.00414d31
add esp, 4
test eax, eax
jbe 0x461bb7
push 0x4880d0
push 0x486708
call fcn.004159fc
add esp, 8
test eax, eax
je 0x461bb7
push 1
push 1
push 0x486708
push 0
call fcn.0044ee20
add esp, 0x10
test eax, eax
jne 0x461bb7
push 0
push 3
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17b0], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17b0]
jmp 0x461efa
push 0
push 0
push 0x4880d0
push 0
call fcn.0044ee20
add esp, 0x10
test eax, eax
jne 0x461c01
push 0
push 3
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17b4], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17b4]
jmp 0x461efa
push 1
push 1
push 1
call fcn.00436250
add esp, 0xc
call fcn.00451ad0
call fcn.00436770
lea eax, [ebp - 0x634]
push eax
push str.ProductCode
call fcn.00438b10
add esp, 8
mov dword [ebp - 0xa60], 0
push 0
push 0
lea ecx, [ebp - 0x634]
push ecx
call fcn.00443a90
add esp, 0xc
mov dword [ebp - 0xa60], eax
cmp dword [ebp - 0xa60], 0
je 0x461ca4
cmp dword [ebp - 0xa60], 0xbc2
je 0x461ca4
cmp dword [ebp - 0xa60], 0x643
je 0x461ca4
push 0
push 3
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17b8], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17b8]
jmp 0x461efa
cmp dword [ebp - 0xa60], 0x643
jne 0x461cb5
call fcn.0043ccd0
push 0x4880d0
call fcn.00436ca0
add esp, 4
push str.QQ.msi
push 0x4844c8
push 0x47a478
push 0x208
push 0x104
lea edx, [ebp - 0x84c]
push edx
call fcn.004157ac
add esp, 0x18
push 0x489bb0
call fcn.0043a7a0
add esp, 4
lea eax, [ebp - 0x84c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0xa60], eax
cmp dword [ebp - 0xa60], 0xffffffff
je 0x461d1e
mov ecx, dword [ebp - 0xa60]
and ecx, 0x10
je 0x461d51
push 0
push 3
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17bc], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17bc]
jmp 0x461efa
push 0x4880d0
push str.Bin_auclt.exe
call fcn.00436170
add esp, 8
push 0x4880d0
push str.BinAuCommon.dll
call fcn.00436170
add esp, 8
push 0x4880d0
push str.Bin_regdll.exe
call fcn.00436170
add esp, 8
push 0x4880d0
call fcn.004401d0
add esp, 4
push 0
push 0
push 0x4880d0
lea edx, [ebp - 0x84c]
push edx
call fcn.00443bf0
add esp, 0x10
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0
je 0x461dfa
cmp dword [ebp - 0x63c], 0xbc2
je 0x461dfa
push 0
push 3
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17c0], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17c0]
jmp 0x461efa
mov dword [0x48a7fc], 0
mov dword [0x48a7f8], 0
push 0x47a4e8
push 0x400
push 0x200
lea eax, [ebp - 0x139c]
push eax
call fcn.004157ac
add esp, 0x10
lea ecx, [ebp - 0x139c]
push ecx
call fcn.004626a0
add esp, 4
xor edx, edx
jne 0x461e0e
call fcn.00440d80
push 0x47a4fc
push 0x400
push 0x200
lea eax, [ebp - 0x179c]
push eax
call fcn.004157ac
add esp, 0x10
lea ecx, [ebp - 0x179c]
push ecx
call fcn.004626a0
add esp, 4
xor edx, edx
jne 0x461e44
call fcn.00462680
mov eax, dword [0x48b0cc]
push eax
push 1
push 0
call fcn.00448a70
add esp, 0xc
push 1
call fcn.00447760
add esp, 4
push 0
push 0x1770
push 0x402
mov ecx, dword [0x487d50]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 1
push 1
call fcn.00436250
add esp, 0xc
push 0x7530
push 1
call fcn.004361d0
add esp, 8
push 0
push 2
call fcn.004361d0
add esp, 8
mov dword [ebp - 0x17c4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.004310c0
mov eax, dword [ebp - 0x17c4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004151d0
mov esp, ebp
pop ebp
ret