Function at 0x474730
Capabilities:
Check os version
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73c85f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x39c
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x4747a6
xor al, al
jmp 0x475031
xor eax, eax
mov byte [ebp - 0x384], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 7
lea edx, [ecx + 2]
mov word [ebp - 0x268], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4747d3
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x268]
call fcn.0044bdc0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
push 9
push str.atl80.dll
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x3a8]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push str.msvcm80.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push str.msvcp80.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
xor eax, eax
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
push 0xb
push str.msvcr80.dll
lea ecx, [ebp - 0x250]
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x39c]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 9
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfc80.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfc80u.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfcm80.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x240], 0
push str.mfcm80u.dll
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.0044bdc0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x390]
call fcn.0044c580
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.0044bf40
push 0x110
lea eax, [ebp - 0x37c]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
mov dword [ebp - 0x380], 0x114
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x37c]
cmp eax, 5
je 0x474dc8
cmp eax, 0xa
jne 0x474bf4
cmp dword [ebp - 0x374], 0x55f0
jb 0x474bf4
push str.WinSxSFusion_amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_none_751bbd257fdbc4228.08.0.50727.6195msvcp80.dll
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
jne 0x474f25
push str.WinSxSFusion_amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_none_751bbd257fdbc4228.0_
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.8.0.
push eax
call fcn.00473b60
mov byte [ebp - 0x384], al
jmp 0x474ff4
push str.WinSxS_amd64_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8a1dd9552ed7f8d8
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x474c4a
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x474d02
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x474ff4
push str.WinSxS_amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x474ff4
push str.WinSxS_amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189
jmp 0x474ed1
push 0x7e866c
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.amd64_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0
push eax
call fcn.00473b60
test al, al
je 0x474ff4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e8ef8
push eax
call fcn.00473b60
test al, al
je 0x474ff4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e8f58
push eax
call fcn.00473b60
test al, al
je 0x474ff4
mov byte [ebp - 0x384], 1
jmp 0x474ff4
push str.WinSxS_amd64_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x_ww_d6cffeda
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
mov esi, eax
add esp, 4
lea eax, [ebp - 0x238]
cmp eax, esi
je 0x474e1e
mov ecx, eax
call fcn.0044bf40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
call fcn.00461d90
test al, al
je 0x474f31
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x474ff4
push str.WinSxS_amd64_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x_ww_76301166
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x474ff4
push str.WinSxS_amd64_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x_ww_4716846b
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push ecx
push eax
call fcn.00473a70
test al, al
je 0x474ff4
mov byte [ebp - 0x384], 1
jmp 0x474ff4
push 0x7e86f4
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0x250]
call fcn.0045b670
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.004608a0
lea ecx, [ebp - 0x250]
call fcn.0044bf40
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x3a8]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push 0x7e9198
push eax
call fcn.00473b60
test al, al
je 0x474ff4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x39c]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.amd64_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0
push eax
call fcn.00473b60
test al, al
je 0x474ff4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push str.amd64_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0
push eax
call fcn.00473b60
mov ecx, dword [ebp - 0x384]
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
call fcn.004635a0
lea ecx, [ebp - 0x39c]
call fcn.004635a0
lea ecx, [ebp - 0x3a8]
call fcn.004635a0
lea ecx, [ebp - 0x238]
call fcn.0044bf40
lea ecx, [ebp - 0x268]
call fcn.0044bf40
mov al, byte [ebp - 0x384]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret