Function at 0x41944e
Capabilities:
Check os version
Get common file path

Disassembly:
mov eax, 0x44692d
call fcn.004312c8
sub esp, 0xe2c
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
push 0xe
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0xf2]
mov word [ebp - 0xf4], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x636]
mov word [ebp - 0x638], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0xf4]
push eax
push str.Msi.DLL
call fcn.0042ccca
lea eax, [ebp - 0xf4]
push eax
push dword [ebp + 8]
call fcn.0042d601
add esp, 0x14
cmp eax, ebx
jge 0x41978a
mov ecx, dword [ebp - 0x10]
call fcn.00401046
mov edi, eax
mov ecx, edi
mov dword [ebp - 0x18], edi
call fcn.00424949
mov ecx, edi
mov esi, eax
call fcn.00427bd4
test eax, eax
je 0x419535
cmp dword [esi + 8], 5
jne 0x4194f3
cmp dword [esi + 0xc], 2
jae 0x4194fc
call fcn.0043c4a5
test al, al
je 0x41952e
call fcn.0043c4a5
test al, al
jne 0x419785
lea eax, [ebp - 0x238]
mov dword [ebp - 0x238], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp word [ebp - 0x124], 1
jae 0x419785
mov eax, str.SupportOSMsi30
jmp 0x41954a
mov ecx, edi
call fcn.00427b7a
test eax, eax
mov eax, str.SupportOSMsi12
jne 0x41954a
mov eax, str.SupportOS
push edi
push eax
call fcn.0042e7ac
pop ecx
test eax, eax
pop ecx
je 0x4195fa
cmp dword [esi], 2
jne 0x4195f3
call fcn.0042db77
test eax, eax
jne 0x419585
mov eax, 0x4b2
push eax
mov dword [0x4623d8], eax
call fcn.0042c9b8
pop ecx
push 1
jmp 0x41978c
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0xe36]
mov word [ebp - 0xe38], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xe38]
mov esi, 0x400
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x4195c7
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xe38]
push eax
call fcn.0041915d
test eax, eax
je 0x4195ec
lea eax, [ebp - 0xe38]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x4195f3
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xe38]
push eax
call fcn.0041915d
test eax, eax
jne 0x4195f3
push 2
jmp 0x41978c
xor eax, eax
jmp 0x41978d
cmp dword [esi + 0x14], 2
jne 0x419606
cmp dword [esi + 8], 4
je 0x419611
mov ecx, edi
call fcn.00427bd4
test eax, eax
je 0x41961f
mov ecx, edi
call fcn.00427b41
push 3
jmp 0x41978c
mov eax, dword [str.SuppressWrongOS]
mov edi, 0x4494c4
mov esi, 0x4494bc
cmp eax, ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x48], esi
jne 0x41963d
mov eax, 0x45d464
lea ecx, [ebp + 0xb]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.0040856d
mov eax, dword [str.Startup]
mov dword [ebp - 4], ebx
cmp eax, ebx
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x70], esi
jne 0x419665
mov eax, 0x45d464
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.0040856d
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x68]
push ebx
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 1
push eax
call fcn.004280a9
and byte [ebp - 4], 0
lea ecx, [ebp - 0x90]
mov bl, al
call fcn.00401929
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.00401929
test bl, bl
je 0x419785
lea eax, [ebp + 0xb]
mov ebx, 0x4b7
push 0
push eax
lea ecx, [ebp - 0x40]
mov dword [0x4623d8], ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x20], esi
call fcn.00401586
lea eax, [ebp - 0xf4]
mov dword [ebp - 4], 2
test eax, eax
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0x98], esi
lea eax, [ebp - 0xf4]
jne 0x4196fa
mov eax, 0x45d464
lea ecx, [ebp - 0x12]
push 0
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040856d
mov edi, dword [ebp - 0xb0]
mov byte [ebp - 4], 3
test edi, edi
mov esi, 0x4494dc
jne 0x419721
mov edi, esi
lea eax, [ebp - 0x11c]
push ebx
push eax
call fcn.0042ca74
pop ecx
pop ecx
mov eax, dword [eax + 8]
mov byte [ebp - 4], 4
test eax, eax
jne 0x41973d
mov eax, esi
push edi
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0041dcfb
add esp, 0xc
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 3
call fcn.00401929
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00401929
cmp dword [ebp - 0x38], 0
je 0x419772
mov esi, dword [ebp - 0x38]
push esi
call fcn.0042c798
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x40]
call fcn.00401929
or eax, 0xffffffff
jmp 0x41978d
push 0xfffffffffffffffe
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4